Re: [secdir] review of draft-ietf-cdni-logging.15

"Klaas Wierenga (kwiereng)" <> Wed, 04 March 2015 10:40 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 398601A1A9F; Wed, 4 Mar 2015 02:40:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -13.911
X-Spam-Status: No, score=-13.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, J_CHICKENPOX_42=0.6, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id zDxdLB3uA50g; Wed, 4 Mar 2015 02:40:07 -0800 (PST)
Received: from ( []) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id D4B5F1A1A4E; Wed, 4 Mar 2015 02:40:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;;; l=1718; q=dns/txt; s=iport; t=1425465608; x=1426675208; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=rc1+4+IraZiKjI5vn9jNr5BgUNFbGDrsi4tYBequOoA=; b=TCbkRZLEVqc/wzDbwScihwSHItKrOxgxnuIiohkHyu5UtZa0/t1U11// 8hWJiusemJbYtl8iWEy/e5sCyW0Uq8yOWAdiCE+wF2oiewwi7383nTxHJ zPO8cwWk+mID5DEBXZ7nfm1cdyevqqPb3JnUlUNCRmgT9PekCdqHQFQAZ o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-AV: E=Sophos;i="5.09,687,1418083200"; d="scan'208";a="400765494"
Received: from ([]) by with ESMTP; 04 Mar 2015 10:40:06 +0000
Received: from ( []) by (8.14.5/8.14.5) with ESMTP id t24Ae5qE007992 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 4 Mar 2015 10:40:05 GMT
Received: from ([]) by ([]) with mapi id 14.03.0195.001; Wed, 4 Mar 2015 04:40:04 -0600
From: "Klaas Wierenga (kwiereng)" <>
To: Daryl Malas <>
Thread-Topic: review of draft-ietf-cdni-logging.15
Thread-Index: AQHQR6bsatwFQJOdLkuG1v9BlCIAFZzzy/wAgAG5RQCAFx8pAA==
Date: Wed, 04 Mar 2015 10:40:04 +0000
Message-ID: <>
References: <> <> <>
In-Reply-To: <>
Accept-Language: en-US
Content-Language: en-US
x-originating-ip: []
Content-Type: text/plain; charset="Windows-1252"
Content-ID: <>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <>
Cc: "" <>, "Francois Le Faucheur (flefauch)" <>, "" <>, "" <>
Subject: Re: [secdir] review of draft-ietf-cdni-logging.15
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Wed, 04 Mar 2015 10:40:08 -0000

Hi Daryl,

Apologies for my late reply, I completed missed your e-mail and Francois’ reply propelled it back to the top of my inbox.

>>> Detailed comments:
>>> * Introduction and Figure 1: What is not clear to me from the text is
>>> whether there is any functional difference between an uCDN and an
>>> dCDN,or that they just happen to be in a hierarchical relation to each
>>> other.  I could also find no reference to that in RFC7336. The fact that
>>> in Figure 1 dCDN-2 is not also labeled as uCDN-2 led me to believe that
>>> there is a functional difference. However from the text it appears that
>>> any two DCNs can be in an u-d relation to each other. Please clarify.
> In Figure 1 of RFC 7336, you will notice the interfaces are indicated as
> bi-directional.  I believe the spirit of this is to provide a hierarchal
> perspective.  In any case, can you please clarify your ³security² related
> concerns relative to this scenario?  So far, you have only indicated a
> question of whether a downstream CDN can also be an upstream CDN.  What is
> your related security question if the function changes relative to
> exchanges via the logging interfaces?  If this is a terminology question,
> I think it should have been addressed with regards to 7336.
> To be clear, I¹m just asking for more clarity for the authors to properly
> address this question.

On my side there was no security related concern to it. I was just reading through the text and was unclear on this. To me there was a difference in what the text suggested and what the figure looked like, if that is clarified I am happy ;-)