Re: [Roll] security solutions for ROLL

["Tsao, Tzeta" <[e-mail]>]

Michael, WG:

My understanding of the DISCUSS on the security framework draft is that
it seeks to address the perceived lack of key management for RPL.
However, the second item in your post seems to go beyond that; is it a
set of questions to justify the use or non-use of RPL security, for
example? Please clarify.

Thanks,
Tzeta

> -----Original Message-----
> From: [e-mail] [mailto:[e-mail]] On Behalf
Of
> Michael Richardson
> Sent: Thursday, February 23, 2012 4:51 PM
> To: [e-mail]
> Subject: [Roll] security solutions for ROLL
> 
> 
> 1) there is an Security AD DISCUSS from Stephen Farrell/Tim Polk.
>    http://datatracker.ietf.org/doc/draft-ietf-roll-security-
> framework/ballot/#stephen-farrell
>    It has been there for 9 months, and we need to act on it, because
>    this DISCUSS is keeping draft-ietf-roll-of0-20 from advancing,
>    and that will keep draft-ietf-roll-rpl-19 from being published.
> 
> So to be clear, this chain of dependancies/references means that while
> rpl-19 has been done for some time, it won't get published until we do
> something.
> 
> Stephen Farrell will lift his DISCUSS on this and let us proceed if he
> sees some credible plan to get useable security into the layer-3 of
> RPL.
> 
> For a lot of you, you have assumed security at layer-2 is enough, and
> you may never care about this mechanism, but I still need your
> participation here.
> 
> 2) We will need to provide, in the draft-ietf-roll-security-framework,
>    a clear set of security related *questions* that each applicability
>    statement will need to answer.  In esssence, this is a template
>    that needs to be filled out.
> 
> 3) A proposal for moving forward is to adopt/adapt MIKEY
>    (RFC3830) for our uses.
>    This has been proposed in:
>       draft-alexander-roll-mikey-lln-key-mgmt
> 
>    This draft needs to be resubmitted for the WG to consider it.
>    (A rumour is that it can be found at:
>      http://tools.ietf.org/id/draft-alexander-roll-mikey-lln-key-mgmt-
> 02.txt
>    )
> 
>   The WG is open to other proposals, but they need to come in quickly.
>   We do not need to complete the work, but we do need to know what
work
> we need to do, and we need to update our milestones to include that
> work in order that we can progress.
> 
> --
> ]       He who is tired of Weird Al is tired of life!           |
> firewalls  [
> ]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net
> architect[
> ] [e-mail] http://www.sandelman.ottawa.on.ca/
|device
> driver[
>    Kyoto Plus: watch the video
> <http://www.youtube.com/watch?v=kzx1ycLXQSE>
> 	               then sign the petition.