Re: [secdir] Secdir telechat review of draft-ietf-lime-yang-connectionless-oam-methods-11

Qin Wu <bill.wu@huawei.com> Thu, 26 October 2017 03:56 UTC

From: Qin Wu <bill.wu@huawei.com>
To: Benjamin Kaduk <kaduk@mit.edu>, "secdir@ietf.org" <secdir@ietf.org>
CC: "draft-ietf-lime-yang-connectionless-oam-methods.all@ietf.org" <draft-ietf-lime-yang-connectionless-oam-methods.all@ietf.org>, "lime@ietf.org" <lime@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>
Thread-Topic: Secdir telechat review of draft-ietf-lime-yang-connectionless-oam-methods-11
Thread-Index: AQHTTa7ue9H/pHu33EWTnbCYvsyLpKL1f3iQ
Date: Thu, 26 Oct 2017 03:56:31 +0000
Message-ID: <B8F9A780D330094D99AF023C5877DABA9AC176A0@nkgeml513-mbx.china.huawei.com>
References: <150894917478.4886.16418816851585609070@ietfa.amsl.com>
In-Reply-To: <150894917478.4886.16418816851585609070@ietfa.amsl.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/2E_zrOZNtt2LnipAJ2AsIsc11TI>
Subject: Re: [secdir] Secdir telechat review of draft-ietf-lime-yang-connectionless-oam-methods-11
Precedence: list

Thanks Benjamin for valuable review.
This draft is updated based on YANG security guideline:
https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines
Privacy issue has been considered in security section since "location-type" and other system identifiers are defined within two RPC operations.
Regarding copy editing for language/grammar issue, yes, many other raised similar issue as you said, we will fix those typo and format issue in the update. 
Thanks a lot.

-Qin
-----邮件原件-----
发件人: Benjamin Kaduk [mailto:kaduk@mit.edu] 
发送时间: 2017年10月26日 0:33
收件人: secdir@ietf.org
抄送: draft-ietf-lime-yang-connectionless-oam-methods.all@ietf.org; lime@ietf.org; ietf@ietf.org
主题: Secdir telechat review of draft-ietf-lime-yang-connectionless-oam-methods-11

Reviewer: Benjamin Kaduk
Review result: Ready

This draft is basically providing a YANG model as an abstraction over existing (connectionless OAM) functionality, perhaps with some intention of facilitating similar functionality in new spaces.  (E.g., ICMP ping/traceroute exist, but entries are also given for SFC, MPLS, MPLS-TP, TWAMP, BIER, and I do not expect that all of those currently have such functionality.).

The modeled functionality is intended to be run over management protocols such as NETCONF or RESTCONF (i.e., ssh or HTTPS), which are at least nominally secure transports.  Though it is possible to configure either of them in an insecure fashion, I don't feel a particular need to beat the reader over the head with notes about actually verifying TLS certificates, etc..  The security considerations duly mention that access control is appropriate and that some operations may be considered sensitive or vulnerable in some environments, which is true, and probably the most that can reasonably be said at this level of abstraction.

I do see several appearances of an abstract "location-type" field and other system identifiers ("identityref", "system-id", MAC/IPv4/IPv6 addresses), which  are sometimes considered sensitive, especially when they can be associated back to individual users, which leads to privacy considerations about user tracking and similar.  Since this is OAM work, I don't actually know that there are real users in scope as opposed to fixed infrastructure, but perhaps a statement in the security considerations about privacy and this sort of identifiers would still be useful.

The document could benefit from some general copy editing for language/grammar/etc., but unfortunately given the short turnaround between last call end and the telechat, I cannot provide a more detailed patch or comments at the present time.

[secdir] Secdir telechat review of draft-ietf-lim… Benjamin Kaduk
Re: [secdir] Secdir telechat review of draft-ietf… Qin Wu