[secdir] Secdir last call review of draft-ietf-ipsecme-ikev1-algo-to-historic-07

Mališa Vučinić via Datatracker <noreply@ietf.org> Fri, 18 November 2022 14:21 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: secdir@ietf.org
Delivered-To: secdir@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 35EEDC14CE40; Fri, 18 Nov 2022 06:21:28 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: Mališa Vučinić via Datatracker <noreply@ietf.org>
To: secdir@ietf.org
Cc: draft-ietf-ipsecme-ikev1-algo-to-historic.all@ietf.org, ipsec@ietf.org, last-call@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 9.1.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <166878128821.62357.18125791870122352257@ietfa.amsl.com>
Reply-To: Mališa Vučinić <malisa.vucinic@inria.fr>
Date: Fri, 18 Nov 2022 06:21:28 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/44sTmyC7ngJDYxzWzQWbVcfeecs>
Subject: [secdir] Secdir last call review of draft-ietf-ipsecme-ikev1-algo-to-historic-07
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.39
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2022 14:21:28 -0000

Reviewer: Mališa Vučinić
Review result: Ready

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG. These comments
were written primarily for the benefit of the security area directors. Document
editors and WG chairs should treat these comments just like any other last call
comments.

This document deprecates a set of old algorithms for their use with IKEv2.
Security Considerations sections elaborates that there are only security
benefits in doing so, and I agree with that statement. I see no other security
considerations arising from this specification so I think this document is
ready.