Re: [secdir] Secdir review of draft-ietf-lwig-cellular-04

Ari Keränen <ari.keranen@ericsson.com> Mon, 17 August 2015 15:41 UTC

Return-Path: <ari.keranen@ericsson.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2480D1A92B0; Mon, 17 Aug 2015 08:41:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.901
X-Spam-Level:
X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CkNgtSon4MSD; Mon, 17 Aug 2015 08:41:37 -0700 (PDT)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5983F1AC446; Mon, 17 Aug 2015 08:41:35 -0700 (PDT)
X-AuditID: c1b4fb2d-f79626d000004282-38-55d200ad0756
Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 85.65.17026.DA002D55; Mon, 17 Aug 2015 17:41:33 +0200 (CEST)
Received: from nomadiclab.lmf.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.80) with Microsoft SMTP Server id 14.3.210.2; Mon, 17 Aug 2015 17:41:32 +0200
Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 886874E945; Mon, 17 Aug 2015 18:42:19 +0300 (EEST)
Received: from As-MacBook-Air.local (localhost [127.0.0.1]) by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 07CAA4E8D1; Mon, 17 Aug 2015 18:42:18 +0300 (EEST)
To: Radia Perlman <radiaperlman@gmail.com>
References: <CAFOuuo4LvRpVGSEj87xh1WwKyCYP+vay8GmiAD-wDaSY0a1tpw@mail.gmail.com>
From: Ari Keränen <ari.keranen@ericsson.com>
Message-ID: <55D200AC.6080609@ericsson.com>
Date: Mon, 17 Aug 2015 18:41:32 +0300
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.1.0
MIME-Version: 1.0
In-Reply-To: <CAFOuuo4LvRpVGSEj87xh1WwKyCYP+vay8GmiAD-wDaSY0a1tpw@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: ClamAV using ClamSMTP
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrNLMWRmVeSWpSXmKPExsUyM+Jvje5ahkuhBp+OaVjM3HSC3WLGn4nM FlvmvGW1+LDwIYsDi8fOWXfZPZYs+cnk8eXyZ7YA5igum5TUnMyy1CJ9uwSujJUHL7MWrOas ePHsF3MD42b2LkZODgkBE4l7FycwQthiEhfurWfrYuTiEBI4yiix8cw5dghnG6NE95ELUM46 RolDV7qhylYwSmy9sYYNpF9YwFLix+Z7zCC2iICWRGvnB7C5QgIBErNafrCA2MwCRRLzHnwG q2cTsJX43b6HCcTmFdCW6Pg7DyzOIqAqsbxhNli9qECaxOLLDSwQNYISJ2c+AbM5BQIlZt9v YYaYaSExc/55RghbXmL72znMEP+oSVw9t4kZ4gZViav/XjFOYBSZhWTULCTts5C0L2BkXsUo WpxaXJybbmSsl1qUmVxcnJ+nl5dasokRGBsHt/zW3cG4+rXjIUYBDkYlHt4H7BdDhVgTy4or cw8xSnOwKInzzticFyokkJ5YkpqdmlqQWhRfVJqTWnyIkYmDU6qBMXbh/3nWknvjuzcsZH4X 9rept6SJ95W/ztY2rguy02Yrx8+6dKSC3TDZ4ShX6/L0+bsUjCocjRTP9oXVCR9lSnORqkrw Fvmsr28lwlhsKPNk7cWsaUuZBVT/R7rPU12xK+XVbb9bPgHie1baT7bqFIk/NNecYcKcLo0S mdTJU5m4+8XnsYcqsRRnJBpqMRcVJwIAqjojRG4CAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/secdir/D2mSw581gx3ze4Yg-4eYQkXJdZc>
X-Mailman-Approved-At: Mon, 17 Aug 2015 08:43:54 -0700
Cc: draft-ietf-lwig-cellular.all@tools.ietf.org, The IESG <iesg@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>
Subject: Re: [secdir] Secdir review of draft-ietf-lwig-cellular-04
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 17 Aug 2015 15:41:40 -0000

Dear Radia,

Thank you for your review comments! We'll take these into account when 
we do the next round of updates to the draft.


Cheers,
Ari

On 15/08/15 05:03, Radia Perlman wrote:
>
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG. These
> comments were written primarily for the benefit of the security area
> directors. Document editors and WG chairs should treat these comments just
> like any other last call comments.
>
> This document is about using the CoAP protocol (constrained application
> protocol) for sensors, and focuses on saving power.
>
> As it correctly points out, there really are no security issues with
> what is discussed in this draft.  If they wanted, they could say that
> not constantly pinging in order for the network to find you not only
> saves power (if all you want to do is send messages when you want to
> rather than being reachable for receiving messages), but also could be
> seen as a privacy enhancement.
>
> Typo, first line of page 5.  "For economical reasons..." should probably
> be "For economic reasons"
>
> Radia