Re: [secdir] [ippm] Secdir last call review of draft-ietf-ippm-route-08

Dear Watson,

Thank you for your review. Concerning the security considerations, this method does not introduce new security problems, basically because it does not create any new field or option into packets. Eventually, we can imagine some man in the middle, changing some bits into the packet, but this kind of behavior does not affect the network. I think it can affect one measurement for a particular hop where he/she is intercepting, but this case is similar to any traffic; therefore, I do not see any potential problem. 
Are you visualized another security problem? 

Regards,

	J. Igancio

_______________________________________________________________

Dr. Ing. José Ignacio Alvarez-Hamelin
CONICET and Facultad de Ingeniería, Universidad de Buenos Aires
Av. Paseo Colón 850 - C1063ACV - Buenos Aires - Argentina
+54 (11) 5285 0716 / 5285 0705
e-mail: ihameli@cnet.fi.uba.ar
web: http://cnet.fi.uba.ar/ignacio.alvarez-hamelin/
_______________________________________________________________

> On 28 Jun 2020, at 13:04, Watson Ladd <watsonbladd@gmail.com> wrote:
> 
> On Sun, Jun 28, 2020 at 11:55 AM MORTON, ALFRED C (AL)
> <acm@research.att.com> wrote:
> <snip>
>> 
>>> 
>>> Now for the meat: what about the security considerations? Since this draft is
>>> describing enhancements to traceroute and ways to describe the measurements
>>> taken by such enhanced traceroutes, the security impact is minimal and the
>>> authors reference the existing RFCs describing the security impacts of
>>> tracroutes on networks.
>> [acm]
>> I'm looking for the action implied in your comment.  Do we add the sentences:
>> 
>> This draft describes enhancements to traceroute and ways to describe the measurements taken by such enhanced traceroute tools. The security impact is minimal and the authors reference the existing RFCs describing the security impacts of active and hybrid measurements on networks (of which traceroute measurements are a subset) below.
> 
> My apologies: you read as a suggestion which I thought was a
> description. I don't think it has to change at all.
> 
>> 
>> Or?
>> 
>>> 
>>> Sincerely,
>>> Watson Ladd
>>> 
>> 
> 
> 
> -- 
> "Man is born free, but everywhere he is in chains".
> --Rousseau.
> 
> _______________________________________________
> ippm mailing list
> ippm@ietf.org
> https://www.ietf.org/mailman/listinfo/ippm