[secdir] Secdir review of draft-ietf-sieve-convert-05

Vincent Roca <vincent.roca@inria.fr> Wed, 30 November 2011 17:44 UTC

Return-Path: <vincent.roca@inria.fr>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F15321F8B92; Wed, 30 Nov 2011 09:44:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -110.249
X-Spam-Level:
X-Spam-Status: No, score=-110.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LAJT0LHG0a72; Wed, 30 Nov 2011 09:44:32 -0800 (PST)
Received: from mail4-relais-sop.national.inria.fr (mail4-relais-sop.national.inria.fr [192.134.164.105]) by ietfa.amsl.com (Postfix) with ESMTP id 39C4D21F8BDE; Wed, 30 Nov 2011 09:44:32 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.69,597,1315173600"; d="scan'208";a="121551162"
Received: from dom38-1-82-236-155-50.fbx.proxad.net (HELO [192.168.0.10]) ([82.236.155.50]) by mail4-relais-sop.national.inria.fr with ESMTP/TLS/AES128-SHA; 30 Nov 2011 18:44:30 +0100
From: Vincent Roca <vincent.roca@inria.fr>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Date: Wed, 30 Nov 2011 18:44:29 +0100
Message-Id: <6D739C51-20A3-4065-9027-C4FC54D3A894@inria.fr>
To: IESG <iesg@ietf.org>, secdir@ietf.org, draft-ietf-sieve-convert.all@tools.ietf.org
Mime-Version: 1.0 (Apple Message framework v1084)
X-Mailer: Apple Mail (2.1084)
Subject: [secdir] Secdir review of draft-ietf-sieve-convert-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2011 17:44:33 -0000

Hello,

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors. Document editors and WG chairs should treat
these comments just like any other last call comments.

The authors explain there is no additional security considerations resulting
from combining  the two technologies. I'm not an expert in the domain and I
have no strong opinion on this claim. So let's trust the authors.

However these technologies do have strong security implications, as
explained in [RFC5259] and [RFC5228]. So the authors should perhaps
highlight this and be more directive.

Regards,

 Vincent