IETF Logo Mail Archive

RE: Secdir last call review of draft-ietf-rtgwg-net2cloud-problem-statement-36

Linda Dunbar <linda.dunbar@futurewei.com> Wed, 10 April 2024 14:58 UTC

Return-Path: <linda.dunbar@futurewei.com>
X-Original-To: rtgwg@ietfa.amsl.com
Delivered-To: rtgwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEF4BC14F61D; Wed, 10 Apr 2024 07:58:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=futurewei.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gSLpWFF6-Sd8; Wed, 10 Apr 2024 07:58:52 -0700 (PDT)
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11on2095.outbound.protection.outlook.com [40.107.223.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E09DC14F71E; Wed, 10 Apr 2024 07:58:44 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jZ9tKGaLLnGK/uDj4cmeNZmLSnT5PY7S8QJBtM3WRQLG3s2386HlXn99a53L5HCxt6npef691B9DCgubU1coSm2KrmAtE3N8s+FywNg8xjdVdgeetZUGfAlwnR2EH1tpgIXuR9Mj86FyTXx2kWiJ3aGMofdMKG5gad6fKkqWk1cAwHLH5slvsiYiv6LAyHR44qF3rfzmUlG7WVVyYv/tvYKE2L1PfUiTlCzzSBWwUAmLJ4nvqHctdmvGkLAd97rc0lrFa5iML1Obp2E1A+HIa3Gei+HrR6w1/hvyonKwS1I30bpc2K/N2Mj1UBVE3FPhAi7Yk4MZBzunzAuU0w4YmQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=9M83cRW0WS65vzxWdKuGu7oFwi2V/FkKCh62J7ql/Ao=; b=gpeN5xHRAPDQT3zw8iGufnzrl+3j5nGb/zqY44Vt/MqIK8+UnOoYb3WWd0oC2WPffV5I3JiRj4iN8+vjnwxXhpVqx6iEz/pDCB4QEP0XvwFpAy1bRIYUIKoteDDfpI5892chg1kYa/wODCKBit+MxmIXnsTcHQmVMyeCvfgB3hX1aS+mFytGKIPX4g42iNLEWj+o4tLApcf0bUXu1xadWHdq1xquThhd/6IakOkbus5z5E3VPB+2xpIe2c/by8q1dYAucUMHa2NbhLfNFZHCwc4htjwZ4BgLGg+QvQ1Sm0Se7CyO7PQlteQrZV8vIeZuWYe+nFxTZswXyBF/7gGLPg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=futurewei.com; dmarc=pass action=none header.from=futurewei.com; dkim=pass header.d=futurewei.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Futurewei.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9M83cRW0WS65vzxWdKuGu7oFwi2V/FkKCh62J7ql/Ao=; b=Q/TKJYwaHSuYAseGL5E7LAlDsrtw5fDIFxZ6c9olg0bwyzVOsTol8Zet/6oz+CBEVzsjuE6hx03xXyofYP2L0n7aB2qhQ1yKBrWlNThWRthcmceErKv8bL1IFM84bb+PDprosj/XoFdXQeGrj9xqAvLiYlsBn6wgMOIEvARBIzw=
Received: from PH0PR13MB4922.namprd13.prod.outlook.com (2603:10b6:510:92::5) by MW5PR13MB5926.namprd13.prod.outlook.com (2603:10b6:303:1cf::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.46; Wed, 10 Apr 2024 14:58:40 +0000
Received: from PH0PR13MB4922.namprd13.prod.outlook.com ([fe80::f04d:f937:5fb3:6e22]) by PH0PR13MB4922.namprd13.prod.outlook.com ([fe80::f04d:f937:5fb3:6e22%7]) with mapi id 15.20.7409.053; Wed, 10 Apr 2024 14:58:40 +0000
From: Linda Dunbar <linda.dunbar@futurewei.com>
To: Deb Cooley <debcooley1@gmail.com>
CC: "secdir@ietf.org" <secdir@ietf.org>, "draft-ietf-rtgwg-net2cloud-problem-statement.all@ietf.org" <draft-ietf-rtgwg-net2cloud-problem-statement.all@ietf.org>, "rtgwg@ietf.org" <rtgwg@ietf.org>
Subject: RE: Secdir last call review of draft-ietf-rtgwg-net2cloud-problem-statement-36
Thread-Topic: Secdir last call review of draft-ietf-rtgwg-net2cloud-problem-statement-36
Thread-Index: AQHaa9HG9RDIlOpAVkOpC4+xTgM5u7EoTIjggAC5uACAFJEZgIAjDYUQ
Date: Wed, 10 Apr 2024 14:58:39 +0000
Message-ID: <PH0PR13MB4922280EFDD4CAAB0E2299D285062@PH0PR13MB4922.namprd13.prod.outlook.com>
References: <170929516566.22050.4912794500698236384@ietfa.amsl.com> <CO1PR13MB49202C23241E301DB62DEE9085222@CO1PR13MB4920.namprd13.prod.outlook.com> <CAGgd1Of_3KuOpg4G9Pf0N4Qm-g+a0ymrVUV36Q0RY93gc-9Tfg@mail.gmail.com> <CAGgd1Oev+UPzLCpf+m+sKUt55KoDXX89gxfhdzqi057Avr51sA@mail.gmail.com>
In-Reply-To: <CAGgd1Oev+UPzLCpf+m+sKUt55KoDXX89gxfhdzqi057Avr51sA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH0PR13MB4922:EE_|MW5PR13MB5926:EE_
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH0PR13MB4922.namprd13.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(376005)(366007)(1800799015); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: xlMnCKEqnUe4GgbTmms57RoRTBXkhHQ+yL6eN+MEIb5CA0aeHRLAxTOYJhOcOLQwQYhsKyduMXjMRdDbAvN8j81sGlpuStx4UOmPafVFP08L1Y7ojlq2nIZaqgwOeBY1eIJtXsq3t13awqE8KnFARJmL1rP/b3lDQTx6aloN0CUWdRSrFL0tYv88dvg4/em27J3m2aG4BknGilqo4tcmRJgqF0UYRW4uq2cJhUugKh4DpFgYlnmZaPoQqESYJdmVl1t+AeT04nUmEa1n7HGXpaEStVeJIr8ig51o6e8e/FVV/Y0nWoL/LRwTbu49pn+R6Fsn27Gq/Yzy6eknu4M3HHfPu1iSdZ5hVySh8GLo15poLQFFe5y+1zpULoSi4OYBepL+xEX6xJvl+u4MIttPS1fE64wjpGtU/BetkasjgMlxHs+qSNONUzNNF26qURQr8ysPlsqtxF9NhyuBrvxEhYgUbZTIfAjbNB5DuSiq0cz+TWOeoLzMAo5q0Br0l3+OQ9rDX82LUFbf9jxuo7HxtluvhHljxG8dZzYrSKu2ZKS0kd4TmNcM6Zn93kAQjqcOmfHoHgKAuTw/rWx+qVagsJn1XVLVul2odNw0juok3IjNensPTvTBVR6kZWHfUaXH7tzics1fwZbXCwz4j+YbIDSAiKW4dUfewrw+50VM8mi6IvqVKJn0BXZa675saIf7lxdEYFmrG5SVDaV3f9YVt1zkc9W0PNawYTkVbrkl0bUvXR87Y2W8mwg3oClE552AmT59rqr2zLxBE1niuRMhlsOVu5rr4+7By4Ugqh6ht4WC9Cgpz1HhflcshydGjkywXKMfa73ecVHXIyEUZL/JfLMHv34tib3ns8ATAI94YqjOOvt83iT8FJhOev2Gcrndp2Lf+CVUpsfZpYDFVKE2f+navcb2oDaydrKxbsYAatVGQ0XIXQbA7CqmjA0f9dG8eVH3hoQkxNobW0oNX57WJKVllLQG/QQZB83qbuN8nysALHRql3528se3vY+a+u7Qv7yj/kX7QYvhYFmwo/9kZlfQBQIZmycgmSZdfcH+Hp9X/lp3R8URliPxLjzDY3nCPhsITVPdx+lhQINKoiGdCPc6eNUp8BBzKXeQN2qEUjIvbSzFyDyFqan6eV2bEndMxLwCmfctj1+79l14W3Q6dXRi23tfxWNMoPQt+O7Udd+BDpa6BrKstKpSWHnw1IkyKqYlis/JOXPP8LwknpIL5vHzalNeNZ4yJjcL+gsp6E7uC3/obQnHnRYFZ4kaDwhwn5oVAkR/QU61SBAWj/DY42gK2nPLbdWQRC+LmWzb8rxQ09JDdhXJ/OePatdyUymkktw+K6PZ39FwXYG3d4ecwuf4Vq9kP7ARrJLNWe05AQJ3FIX/H/LpvroAHLsGc89SwVyKoKEOWpHJLYAxacoKt4ihHzr9NWZF6r3Nbu6jqQCGPKCnM6kKs++UqkMdsyR5Wmd+Vplv9ZRrRbGsmz/qAZNfalW6lypEq/ROC09UyPj6qYj9QUBwtZc3bBD8j02kUvnPv2i+esvH4C2R7WCvhzvhQgLQb4lTPfCJOg6Ec6NJtENwvcanV+TsLuGFf3AP
Content-Type: multipart/alternative; boundary="_000_PH0PR13MB4922280EFDD4CAAB0E2299D285062PH0PR13MB4922namp_"
MIME-Version: 1.0
X-OriginatorOrg: Futurewei.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR13MB4922.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 43620f7e-db0d-4e43-05e4-08dc596eb52c
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Apr 2024 14:58:40.0110 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0fee8ff2-a3b2-4018-9c75-3a1d5591fedc
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 7CLOUw9oFyFsS+bG6zBlW9CT/Cplr0BsyGpto+n/+9Tj0uWgetAuKMrDbY7QoZpfiXcEO2o2B/RUzzfgtSYYSQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR13MB5926
Archived-At: <https://mailarchive.ietf.org/arch/msg/rtgwg/24e2aC4lVcs0OoYkaaHjIBbL_hE>
X-BeenThere: rtgwg@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Routing Area Working Group <rtgwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtgwg>, <mailto:rtgwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rtgwg/>
List-Post: <mailto:rtgwg@ietf.org>
List-Help: <mailto:rtgwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtgwg>, <mailto:rtgwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Apr 2024 14:58:58 -0000

Deb,

Thank you very much for the additional comments and the suggested wording.
They are reflected in the revision -38.

Linda

-----Original Message-----
From: Deb Cooley <debcooley1@gmail.com>
Sent: Monday, March 18, 2024 8:24 AM
To: Linda Dunbar <linda.dunbar@futurewei.com>
Cc: secdir@ietf.org; draft-ietf-rtgwg-net2cloud-problem-statement.all@ietf.org; rtgwg@ietf.org
Subject: Re: Secdir last call review of draft-ietf-rtgwg-net2cloud-problem-statement-36

Here is my review update for
draft-ietf-rtgwg-net2cloud-problem-statement-37:

I will update my review in the datatracker.

original comments (in black), updates (in blue)

1.  Section 5.1, paragraph 2:  Certainly the principles and assumptions of RFC 4535* would apply to any group key management situation (note the word change from 'group encryption' to 'group key management').  The specific protocol addressed by that RFC isn't being used here (even though they mention ISAKMP). How about something like this:

"The group key management protocol documented in [RFC4535] outlines the relevant security risks for any group key management system in Section 3 (Security Considerations).  While this particular protocol isn't being suggested, the drawbacks and risks of group key management are still relevant."

done.
[Linda] Thank you for the suggestion. They are changed in -38.

2.  Section 5.1, paragraph 3:  The draft referenced here is expired and the security of the methods would have to be reviewed.  (that is listed in Section 7)

The expired draft has been replaced with another draft.  The security of the methods would have to be reviewed.  Please list that in Section 7.
[Linda] The referenced draft has been uploaded.

3.  Section 5.2:  The draft referenced in this section is (currently) an individual draft, and again the security of the methods would have to be reviewed. (I see that WG adoption has been requested, and the draft is listed in Section 7).

This is just a note to the WG - no action required as long as the WG agrees.
[Linda] the WG chair said they will start the WG adoption soon.

v2.23.0 | Report a Bug | By Email