[secdir] secdir review of draft-ietf-dtn-bpsec

Dan Harkins <dharkins@lounge.org> Tue, 07 January 2020 20:07 UTC

Date: Tue, 07 Jan 2020 12:07:01 -0800
From: Dan Harkins <dharkins@lounge.org>
To: "iesg@ietf.org" <iesg@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>, draft-ietf-dtn-bpsec.all@ietf.org
Cc: Rick Taylor <rick@tropicalstormsoftware.com>, "Edward.Birrane@jhuapl.edu" <Edward.Birrane@jhuapl.edu>
Message-id: <fb59852d-51c4-4b55-9876-493ac7110de1@lounge.org>
MIME-version: 1.0
Content-type: text/plain; charset="utf-8"; format="flowed"
Content-language: en-US
Content-transfer-encoding: 8bit
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.3.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/B081EaTztQff3Hn2nNBxk1FG9ts>
Subject: [secdir] secdir review of draft-ietf-dtn-bpsec
Precedence: list

   Hello,

   1000 pardons for the tardiness of this re-review. It fell through the
cracks and I was reminded of it during the end-of-the-year break.

   This draft is Ready With (a single) Nit.

   This draft is much improved over -06 which I previously reviewed. All
of my recommendations have been acted on (thank you). The addition of
AEAD for the BCB is a very good addition. The block interactions in 3.9
look correct and my only suggestion would be to remove "NOTE:" from the
final paragraph which implies it is informative. Also remove "probably"
because it is most decidedly insecure. Make this a normative paragraph
prohibiting an insecure construction.

   The examples are helpful, especially as one expands on the other,
that helps illustrate the 3.9 block interaction rules.

   regards,

   Dan.

[secdir] secdir review of draft-ietf-dtn-bpsec Dan Harkins