[secdir] Secdir review of [e-mail]

[Charlie Kaufman <[e-mail]>]

I have reviewed this document as part of the security directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written primarily for the benefit of the security area
directors.  Document editors and WG chairs should treat these comments just
like any other last call comments.

 

This document specifies a conceptually minor change to the MANET
Neighborhood Discovery Protocol (NHDP) (RFC6130). It is a backwards
compatible optimization allowing neighbors accessible over links of marginal
quality to be processed more efficiently in the case where communication
bounces up and down due to the marginal link quality. It extends an
optimization already specified in RFC6130 for one-hop neighbors to also
apply to two-hop neighbors.

 

The security considerations section says that this change introduces no
additional security considerations beyond those in RFC6130, and I agree. If
anything, this change reduces the potential of one kind of an attack where a
node simulates a bouncing link to consume excessive resources on the target.
But I don't believe this minor security advantage is worth mentioning. it is
a consequence of the main point of the change which is to improve
performance (mostly responsiveness).

 

                --Charlie