[secdir] SECDIR Review of http://tools.ietf.org/html/draft-ietf-v6ops-clatip-02

Phillip Hallam-Baker <phill@hallambaker.com> Fri, 30 May 2014 13:09 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB3601A08C9; Fri, 30 May 2014 06:09:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.278
X-Spam-Level:
X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ccEEibYvVLPJ; Fri, 30 May 2014 06:09:45 -0700 (PDT)
Received: from mail-we0-x22e.google.com (mail-we0-x22e.google.com [IPv6:2a00:1450:400c:c03::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9B5A1A0687; Fri, 30 May 2014 06:09:44 -0700 (PDT)
Received: by mail-we0-f174.google.com with SMTP id k48so1980058wev.19 for <multiple recipients>; Fri, 30 May 2014 06:09:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:content-type; bh=tQEPbeIjw7xwKrFbTTzb6XDIfJXwDO4z0/TRGvzI+GY=; b=PA2vY89Q56y3BJOtofjMNnYpfmED9V5lHtwMir9XRnKCvgUgRNXQe3d2rKbEEj4WE/ alNJ6dpP9UqFdO0pyC52FjsgAM0tAqBqinWip60dNE40PxUVOW6XKvh3lBzhP/BMFFl8 /rhVPf1oJHpV5TpaKggQYrpE0Em9Tn3lSmtsXWpN7z59X/25xkGUMZcojTk32gSbXOqJ QaOuXQXUKnOyLTtqittLHxLh28m0DIucYL8OjU7zWxzFtvnNqb5gUQQEliMSDF/Cxahm 6PDnxhaip6ExNEkRYYmHvrAlZiSpjn0+vdIdKqgzlHsjA8vWNC9NvRvdiZIVfWiw5g0S HLOw==
MIME-Version: 1.0
X-Received: by 10.180.13.139 with SMTP id h11mr6688978wic.34.1401455378898; Fri, 30 May 2014 06:09:38 -0700 (PDT)
Sender: hallam@gmail.com
Received: by 10.194.79.136 with HTTP; Fri, 30 May 2014 06:09:38 -0700 (PDT)
Date: Fri, 30 May 2014 09:09:38 -0400
X-Google-Sender-Auth: zbHfaWP_ZqUnE-6qox3JiNujUe0
Message-ID: <CAMm+LwgckDX4U+7ZiwxLxf+O1_gy5hzNLN5uAupd8TrdqVW1FQ@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
To: draft-ietf-v6ops-clatip.all@tools.ietf.org, "iesg@ietf.org" <iesg@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>
Content-Type: text/plain; charset=UTF-8
Archived-At: http://mailarchive.ietf.org/arch/msg/secdir/474dv3VNBIJIDnUyhJ0f5JY7vqY
X-Mailman-Approved-At: Fri, 30 May 2014 06:20:59 -0700
Subject: [secdir] SECDIR Review of http://tools.ietf.org/html/draft-ietf-v6ops-clatip-02
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 May 2014 13:09:46 -0000

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

The document is simply an assignment request for a reserved IP address
block for a scheme described in [RFC6333] and [RFC6877]. The block
previously assigned to DSLite is now assigned to related,
non-competing functions.

The document would be rather easier to make sense of if the start and
the end of the address range had been given.

192.0.0.0/29 is 192.0.0.0...192.0.0.7

This does not matter much because RFC6333 actually assigns specific
addresses for specific functions within this range. Exhaustion is not
really an issue since in extremis the response could be more tunnels.