[RPSEC] Feedback on draft-behringer-bgp-session-req-01

Hi, all,

The following feedback was requested on the TCPM's TCP-AUTH-DT (TCP-Auth
design team) mailing list. TCP-Auth is TCMP's work towards an update to
TCP-MD5, based on two current proposals (noted below).

Joe

---------------------------------------------

This document appears to overlap ongoing work in TCPM to characterize
concerns with using TCP-MD5 to secure BGP, and use of alternatives.
E.g., draft-ietf-tcpm-antispoof. The TCP-Auth team is currently workiing
to revise draft-bellovin-tcpsec, and an update to that should be out
shortly.

Some additional comments:

Sec 1 - the OSI stack is not the reference model for the Internet.
GTSM is not IP layer security; it is a heuristic that checks TTLs in IP
packets, and assumes that there is other security protecting tunnels to
a host. It would be more appropriate to cite IPsec as IP security, and
GTSM as "other protection mechanisms".

Other work in this area:
	- draft-ietf-tcpm-antispoof (as noted above)
	- draft-ietf-tcpm-tcpsecure
	- draft-bellovin-tcpsposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGeuCxE5f5cImnZrsRAjj5AJ9LkE9b0IfDPmwrp3JZszFdT9CmOwCfUdXs
EqO9ZGajzAhkXX9gRS7YlzU=W+V3
-----END PGP SIGNATURE-----

--------------enigCD0E0DBCDB6BA044BC9AE154--

--=======17995109=
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
RPSEC mailing list
RPSEC@ietf.org
https://www1.ietf.org/mailman/listinfo/rpsec

--=======17995109=--