Re: [secdir] Secdir last call review of draft-ietf-tls-dtls-connection-id-11

[Benjamin Kaduk <[e-mail]>]

Hi Daniel,

Thanks for the review.

There was some effort towards a return-routability check at the DTLS layer,
in draft-tschofenig-tls-dtls-rrc, but we seem to have failed to follow up
after the adoption call was issued.

I've pinged the chairs to check on its progress.

-Ben

On Thu, Apr 22, 2021 at 08:36:56AM -0700, Daniel Franke via Datatracker wrote:
> Reviewer: Daniel Franke
> Review result: Ready
> 
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG.  These
> comments were written primarily for the benefit of the security area directors.
>  Document editors and WG chairs should treat these comments just like any other
> last call comments.
> 
> Apologies for the absolute last-minute review; I overlooked until just now that
> this had been assigned a telechat date.
> 
> This document is Ready. I do have some concerns — in particular I think relying
> on application-layer measures to prevent amplified reflection attacks is a bit
> dubious — but these have been debated to death already, the issues are
> well-captured in the document, and I don't think I have anything new to add.
> 
>