Re: [secdir] Secdir review: draft-ietf-ccamp-otn-signal-type-subregistry-03

"Zafar Ali (zali)" <zali@cisco.com> Tue, 08 March 2016 23:29 UTC

Return-Path: <zali@cisco.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B96C12DC20; Tue, 8 Mar 2016 15:29:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level:
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k9qgTZtt9mI9; Tue, 8 Mar 2016 15:29:41 -0800 (PST)
Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71A2C12DC02; Tue, 8 Mar 2016 15:29:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4865; q=dns/txt; s=iport; t=1457479781; x=1458689381; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=mf00CLWNvetulWvOQfV7uxhoXnAUkBsIq4Wm8vW7u7w=; b=EdSI4dVXPjBEUmOKXdJ1uwoLaY9bFmeTLKjBS0BWARIMEte34JhTcCy5 c5ATfQUfa1jTyNwZkshfyu/a5Ecl0+bSeNbxhoMIHgRNulsIulUU5K/lV 8bDJBw80LI8nZrNLjHqB/JdozK6ohLp+HQN7/3WmBDi13jIaJXw7APn7j I=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0D9AQAiX99W/5pdJa1cgm5MgT8GulMBDYFphg8CgUc4FAEBAQEBAQFkJ4RBAQEBBIEJAgEIBAoDAwECKAcyFAkIAgQBEogkvnsBAQEBAQEBAwEBAQEBAQEBGIYXhEKEWoQaBY1oiUIBjW2Oe45VAR4BAUKDZGqJAX4BAQE
X-IronPort-AV: E=Sophos; i="5.22,558,1449532800"; d="scan'208,217"; a="84426085"
Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 08 Mar 2016 23:29:40 +0000
Received: from XCH-RTP-016.cisco.com (xch-rtp-016.cisco.com [64.101.220.156]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id u28NTeug001801 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 8 Mar 2016 23:29:40 GMT
Received: from xch-rtp-018.cisco.com (64.101.220.158) by XCH-RTP-016.cisco.com (64.101.220.156) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 8 Mar 2016 18:29:39 -0500
Received: from xch-rtp-018.cisco.com ([64.101.220.158]) by XCH-RTP-018.cisco.com ([64.101.220.158]) with mapi id 15.00.1104.009; Tue, 8 Mar 2016 18:29:39 -0500
From: "Zafar Ali (zali)" <zali@cisco.com>
To: Robert Sparks <rjsparks@nostrum.com>, "secdir@ietf.org" <secdir@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>, "draft-ietf-ccamp-otn-signal-type-subregistry.all@ietf.org" <draft-ietf-ccamp-otn-signal-type-subregistry.all@ietf.org>
Thread-Topic: Secdir review: draft-ietf-ccamp-otn-signal-type-subregistry-03
Thread-Index: AQHReX34mRpGHW3TdEOtWeYBUUdOQZ9QMcQA
Date: Tue, 08 Mar 2016 23:29:39 +0000
Message-ID: <D304CA35.16E796%zali@cisco.com>
References: <56DF3E1A.4010003@nostrum.com>
In-Reply-To: <56DF3E1A.4010003@nostrum.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.5.8.151023
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.24.208.195]
Content-Type: multipart/alternative; boundary="_000_D304CA3516E796zaliciscocom_"
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/secdir/Jy11FE6Lpf4ujhAjdweue6tz0WE>
Subject: Re: [secdir] Secdir review: draft-ietf-ccamp-otn-signal-type-subregistry-03
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Mar 2016 23:29:43 -0000

Hi Robert-

We can add a security section stating "no new consideration is required".

Thanks

Regards ... Zafar

From: Robert Sparks <rjsparks@nostrum.com<mailto:rjsparks@nostrum.com>>
Date: Tuesday, March 8, 2016 at 4:03 PM
To: "secdir@ietf.org<mailto:secdir@ietf.org>" <secdir@ietf.org<mailto:secdir@ietf.org>>, "iesg@ietf.org<mailto:iesg@ietf.org>" <iesg@ietf.org<mailto:iesg@ietf.org>>, "draft-ietf-ccamp-otn-signal-type-subregistry.all@ietf.org<mailto:draft-ietf-ccamp-otn-signal-type-subregistry.all@ietf.org>" <draft-ietf-ccamp-otn-signal-type-subregistry.all@ietf.org<mailto:draft-ietf-ccamp-otn-signal-type-subregistry.all@ietf.org>>
Subject: Secdir review: draft-ietf-ccamp-otn-signal-type-subregistry-03


I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

Summary: Almost ready for publication as PS with process nit

This very short draft only changes the registration policy for an existing (sub)registry at IANA - adding "Specification Required" to the current "Standards Action" policy.
It introduces no new security considerations.

It has no security considerations section - the shepherd writeup asserts none is needed.
As far as I recall, that's not true. A short section explicitly saying there are no new considerations is required.