[secdir] secdir review of draft-ietf-sipcore-invfix-01

["Joseph Salowey (jsalowey)" <[e-mail]>]

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.

The document fixes a real problem and seems to address some existing
security issues, namely the forwarding of stray responses.  This is
good.  It does introduce more of a possibility of denial of service
since state must be maintained to track valid responses and this is
noted in the security considerations as well.  I'm not all that familiar
with SIP, but there are techniques used in other protocols to avoid
"flood" type of attacks by delaying committing state until the client
has successfully processed a server message.   TCP cookies, IKEv2 and
DTLS have examples of this. This would be something to consider if
implementations were vulnerable to flood type attacks in deployments.  


Joe