Re: [Rserpool] FW: Document Action: 'Threats Introduced by RSerPool andRequirements for Security in Response to Threats' toInformational RFC

<Maureen.Stillman@nokia.com> Wed, 23 July 2008 17:35 UTC

Return-Path: <rserpool-bounces@ietf.org>
X-Original-To: rserpool-archive@megatron.ietf.org
Delivered-To: ietfarch-rserpool-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 05DF13A6AF1; Wed, 23 Jul 2008 10:35:43 -0700 (PDT)
X-Original-To: rserpool@core3.amsl.com
Delivered-To: rserpool@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E244F3A6AF1 for <rserpool@core3.amsl.com>; Wed, 23 Jul 2008 10:35:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.2
X-Spam-Level:
X-Spam-Status: No, score=-6.2 tagged_above=-999 required=5 tests=[AWL=0.400, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y-i4Kf+t3W9m for <rserpool@core3.amsl.com>; Wed, 23 Jul 2008 10:35:40 -0700 (PDT)
Received: from mgw-mx06.nokia.com (smtp.nokia.com [192.100.122.233]) by core3.amsl.com (Postfix) with ESMTP id 918DA3A6AEC for <rserpool@ietf.org>; Wed, 23 Jul 2008 10:35:40 -0700 (PDT)
Received: from vaebh105.NOE.Nokia.com (vaebh105.europe.nokia.com [10.160.244.31]) by mgw-mx06.nokia.com (Switch-3.2.6/Switch-3.2.6) with ESMTP id m6NHZqpT006795; Wed, 23 Jul 2008 20:36:17 +0300
Received: from daebh102.NOE.Nokia.com ([10.241.35.112]) by vaebh105.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 23 Jul 2008 20:36:04 +0300
Received: from daebe102.NOE.Nokia.com ([10.241.35.115]) by daebh102.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 23 Jul 2008 12:35:34 -0500
x-mimeole: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Wed, 23 Jul 2008 12:35:33 -0500
Message-ID: <D9ECB8614A9A1340BC8944F8C8B31169063EFC32@daebe102.NOE.Nokia.com>
In-Reply-To: <23F9E58A916663488B3D12D1FE1A999F018EF65A@mdmxm03.ciena.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [Rserpool] FW: Document Action: 'Threats Introduced by RSerPool andRequirements for Security in Response to Threats' toInformational RFC
Thread-Index: Acjr+ZvmBPHBlKupRQiPZOYefycy0QABpHMgADoyseA=
References: <23F9E58A916663488B3D12D1FE1A999F018EF65A@mdmxm03.ciena.com>
From: <Maureen.Stillman@nokia.com>
To: <Lyong@Ciena.com>, <rserpool@ietf.org>
X-OriginalArrivalTime: 23 Jul 2008 17:35:34.0823 (UTC) FILETIME=[833ACB70:01C8ECEA]
X-Nokia-AV: Clean
Subject: Re: [Rserpool] FW: Document Action: 'Threats Introduced by RSerPool andRequirements for Security in Response to Threats' toInformational RFC
X-BeenThere: rserpool@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Reliable Server Pooling <rserpool.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/rserpool>, <mailto:rserpool-request@ietf.org?subject=unsubscribe>
List-Archive: <https://www.ietf.org/mailman/private/rserpool>
List-Post: <mailto:rserpool@ietf.org>
List-Help: <mailto:rserpool-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rserpool>, <mailto:rserpool-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: rserpool-bounces@ietf.org
Errors-To: rserpool-bounces@ietf.org

The document is the result of the effort from the Rserpool security
design team that met for a year.  So thanks goes to the design team as a
whole.

In addition, Eric Rescorla gave many helpful comments on TLS as we went
along.  I asked him a number of questions and got prompt responses.  


-- Maureen
Maureen Stillman
Nokia Services and Software
Mobile: (607)229-3358

-----Original Message-----
From: rserpool-bounces@ietf.org [mailto:rserpool-bounces@ietf.org] On
Behalf Of ext Ong, Lyndon
Sent: Tuesday, July 22, 2008 9:40 AM
To: rserpool mailing list
Subject: [Rserpool] FW: Document Action: 'Threats Introduced by RSerPool
andRequirements for Security in Response to Threats' toInformational RFC

Hi Folks,

One more document approved, and thanks go to Maureen for creating the
document and following through on the numerous comments that were
received in IESG review (sometimes it seemed as if everyone had to
express some opinion about security issues).  Congratulations and
thanks, Maureen!

Lyndon

-----Original Message-----
From: The IESG [mailto:iesg-secretary@ietf.org]
Sent: Tuesday, July 22, 2008 5:50 AM
To: IETF-Announce
Cc: Internet Architecture Board; RFC Editor; rserpool mailing list;
rserpool chair
Subject: Document Action: 'Threats Introduced by RSerPool and
Requirements for Security in Response to Threats' to Informational RFC 

The IESG has approved the following document:

- 'Threats Introduced by RSerPool and Requirements for Security in 
   Response to Threats '
   <draft-ietf-rserpool-threats-15.txt> as an Informational RFC

This document is the product of the Reliable Server Pooling Working
Group. 

The IESG contact persons are Magnus Westerlund and Lars Eggert.

A URL of this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-rserpool-threats-15.txt

Technical Summary

This draft provides an analysis of security threats to the Rserpool
architecture and defines requirements for countering these threats. It
provides additional information supporting the security sections of the
Rserpool protocol documents.

Working Group Summary

The Working Group process was constrained by the relatively small number
of people actively involved (although those involved were committed to
doing implementations of the protocols). Otherwise there was little
controversy within the group.

Document Quality

There are multiple implementations of the Rserpool protocols, ENRP and
ASAP. However, there are no vendors that have indicated plans for
implementation, and the protocols are being proposed as Experimental.
This particular draft is Informational only, as it defines no new
protocol.

Personnel

Document Shepherding is being provided by the non-author Working Group
chair, Lyndon Ong. Responsible Area Director is Magnus Westerlund.

_______________________________________________
rserpool mailing list
rserpool@ietf.org
https://www.ietf.org/mailman/listinfo/rserpool
_______________________________________________
rserpool mailing list
rserpool@ietf.org
https://www.ietf.org/mailman/listinfo/rserpool