Message-Id: <03C04ACE-5773-4260-AABD-E799E614C469@nokia.com>
From: Lars Eggert <lars.eggert@nokia.com>
To: Sandra Murphy <sandy@sparta.com>
In-Reply-To: <Pine.WNT.4.64.0906080948290.6048@SANDYM-LT.columbia.ads.sparta.com>
Content-Type: multipart/signed; boundary=Apple-Mail-21-380561542; micalg=sha1;
 protocol="application/pkcs7-signature"
Mime-Version: 1.0 (Apple Message framework v935.3)
Date: Thu, 9 Jul 2009 10:06:57 +0300
References: <Pine.WNT.4.64.0906080948290.6048@SANDYM-LT.columbia.ads.sparta.com>
Cc: "mdalal@cisco.com" <mdalal@cisco.com>,
 "ananth@cisco.com" <ananth@cisco.com>, "iesg@ietf.org" <iesg@ietf.org>,
 "secdir@ietf.org" <secdir@ietf.org>
Subject: Re: [secdir] draft-ietf-tcpm-tcpsecure
Precedence: list

--Apple-Mail-21-380561542
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed;
	delsp=yes
Content-Transfer-Encoding: 7bit

Hi, Sandy,

On 2009-6-8, at 16:59, Sandra Murphy wrote:
> I've been on the road, so this is just a quick note to say that I  
> still
> have questions, with a promise of more full answer when I get back  
> to the
> office tomorrow.

the authors are still waiting to hear your additional questions.  
Please let me know when we can expect them, so I know when I can  
expect a revision from the authors.

Thanks,
Lars

>  All the following done really from memory from a
> re-review yesterday.  Just  so you know I haven't forgotten you.
>
> About quoting text:
>
> The example you point to of what each mitigation says is a good case.
> (what is "rg"?)
>
> You posit a case 1 and case 2.  This is a summary of what 793 says,  
> not a
> quote.  793 spreads the discussion over 2 pages.  your case 1 is
> represented in a parenthetical remark in an "otherwise" clause -  
> hard to
> find.  And you have a typo in the inequality.  And the case 2 in 793  
> is
> broken out over three different groupings of states.  Do you mean  
> the new
> ACK to be generated in all three state groups?
>
> About the stingency.
>
> If UNA is 1000, Max.snd.wnd is 50, and the ack is 975, then in 793,  
> the
> ack is < UNA and so "it is ignored", in your draft the ack is >
> UNA-max.snd.wnd so it is acceptable.
>
> So your draft accepts more ACKs that 793.
>
> Have I lost my ability to tell > from <?  Do you regard accepting more
> ACKS as "more stringent"?
>
> About the guidance to implementors.
>
> It still looks to me like this guidance is only useful to  
> implementors who
> are implementing both the OS TCP stack *AND* the application.  I.E.,
> freebsd won't know whether this to follow the guidance or not but
> cisco/juniper/etc will.
>
> What is the "AS"?
>
> About grammar checks:
>
> And you did not miss email, I lost my marked up copy, so I've  gone
> through for the grammar check again (don't think I found all that many
> nits) and will send to you.
>
> --Sandy
>
>


--Apple-Mail-21-380561542
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGQDCCAvkw
ggJioAMCAQICEEi7WbMMKa2GLKFpQDaOBQEwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMCWkEx
JTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0ZSBQ
ZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDgyMzE3NDMzOVoXDTA5MDgyMzE3NDMz
OVowXDEPMA0GA1UEBBMGRWdnZXJ0MQ0wCwYDVQQqEwRMYXJzMRQwEgYDVQQDEwtMYXJzIEVnZ2Vy
dDEkMCIGCSqGSIb3DQEJARYVbGFycy5lZ2dlcnRAbm9raWEuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAlwQVktJZCY89iU6jcW1XnZQN+aMgF2utCUT3H3ZKB5Jbet1SDWt0md/W
571bHjxtn9CfEJdochNL3l9f1WiJNdVbJ182557Ltx9SojqthpqtA0jKEqo2gqrf+raUj1demmo0
6ocsLqv046CrwidOp6k0RAfvkKPLhD4PD9Nk3oaZuxqBz1wY4u8Q83iWMArDeXiQxfNZnOBz5cDs
VvVjTjitm3VANkbD02tNkwl5AHw7htde4yH8hIwlfzqsAtHBEah3HyOvs9b+gHg2pFz9eS+HuotY
ZKycCweRs8NKXoCg+zAkVYi3zvZEH2VOuPlpMQMrB9+fLWg2UBsTeZ864wIDAQABozIwMDAgBgNV
HREEGTAXgRVsYXJzLmVnZ2VydEBub2tpYS5jb20wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUF
AAOBgQBMdV2U+ryV5t3nuBFH19XKflodN6Bc60GBYHHY/Z0+Cl08Q75qzTt02IILBg+/YVh/fygb
6pFrOm1sFtLN7fENBfbO2VtpFjP2lGUgbXTVT5xGM6+MtqZiBI6LqexAeY6gsd/taoUfy9fZG42d
ciBA9gSGlQjjWQyG8mb5HR8L9jCCAz8wggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJ
BgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgG
A1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMg
RGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3
DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3
MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5
KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzAN
BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9
fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOCdz0Dviv+
uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCBkTASBgNVHRMB
Af8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3
dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgG
A1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcNAQEFBQADgYEASIzRUIPqCy7MDaNmrGcP
f6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNwPP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH
2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq726jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8x
ggMQMIIDDAIBATB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAo
UHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQ
SLtZswwprYYsoWlANo4FATAJBgUrDgMCGgUAoIIBbzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
MBwGCSqGSIb3DQEJBTEPFw0wOTA3MDkwNzA2NTdaMCMGCSqGSIb3DQEJBDEWBBRGmMhq49IDEo06
ebFGuUT5lwNK0TCBhQYJKwYBBAGCNxAEMXgwdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhh
d3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt
YWlsIElzc3VpbmcgQ0ECEEi7WbMMKa2GLKFpQDaOBQEwgYcGCyqGSIb3DQEJEAILMXigdjBiMQsw
CQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE
AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEEi7WbMMKa2GLKFpQDaOBQEw
DQYJKoZIhvcNAQEBBQAEggEAgbbhPY5Pfsf9WOR53CyFTJ0bePulo7c7YrTCNyB5uHPJVyX5rtAc
vaA3fdQyRg6HrFpfrrlie8yCuL6oXzo73RciAgTJEVn3F9AsSHXlMOhWtY4tWS5tUf3wIfI47B73
IHJoYiYSblM/rdWMDOAwu5ES+aiucP8IEkzibhCZFRuwAlFABdQLKph12bY1dL0+2Vm0ARNI0mtl
hr8/aB4+xmbmDEFMdxZuzHmVZwu8DHty1JOiXBf2qNl8B3oLPb6BdCGkqSqHd1t99wWBxmjSgfcY
eiG8sY6+abLwY9eSKxuQavm9Aj67mzLwCTNAYILMuI64cYhusaYFOftIwpGeJwAAAAAAAA==

--Apple-Mail-21-380561542--