[secdir] secdir review of draft-ietf-core-stateless-06

David Mandelberg <david@mandelberg.org> Sat, 18 April 2020 18:37 UTC

Return-Path: <david@mandelberg.org>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BCAE3A0FD3 for <secdir@ietfa.amsl.com>; Sat, 18 Apr 2020 11:37:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.091
X-Spam-Level:
X-Spam-Status: No, score=-2.091 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_SPF_HELO_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mandelberg.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZxQDQ6mWfHuJ for <secdir@ietfa.amsl.com>; Sat, 18 Apr 2020 11:37:14 -0700 (PDT)
Received: from smtp.rcn.com (smtp.rcn.com [69.168.97.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 428123A0FD7 for <secdir@ietf.org>; Sat, 18 Apr 2020 11:37:04 -0700 (PDT)
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.3 cv=T+HysMCQ c=1 sm=1 tr=0 a=OXtaa+9CFT7WVSERtyqzJw==:117 a=OXtaa+9CFT7WVSERtyqzJw==:17 a=KGjhK52YXX0A:10 a=IkcTkHD0fZMA:10 a=NTnny0joGdQA:10 a=cl8xLZFz6L8A:10 a=bmmO2AaSJ7QA:10 a=iiazv-oawmH03g7Men8A:9 a=QEXdDO2ut3YA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: ZHNlb21uQHJjbi5jb20=
Authentication-Results: smtp02.rcn.cmh.synacor.com header.DKIM-Signature=@mandelberg.org; dkim=pass
Authentication-Results: smtp02.rcn.cmh.synacor.com header.from=david@mandelberg.org; sender-id=softfail
Authentication-Results: smtp02.rcn.cmh.synacor.com smtp.mail=david@mandelberg.org; spf=softfail; sender-id=softfail
Authentication-Results: smtp02.rcn.cmh.synacor.com smtp.user=dseomn@rcn.com; auth=pass (LOGIN)
Received: from [209.6.43.168] ([209.6.43.168:44902] helo=uriel.mandelberg.org) by smtp.rcn.com (envelope-from <david@mandelberg.org>) (ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-GCM-SHA384) id 54/09-63700-3C84B9E5; Sat, 18 Apr 2020 14:36:52 -0400
Received: from [192.168.1.152] (DD-WRT [192.168.1.1]) by uriel.mandelberg.org (Postfix) with ESMTPSA id BBC5F1C604E; Sat, 18 Apr 2020 14:36:48 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mandelberg.org; s=202003; t=1587235008; bh=wBRarqSHNaZozVDb/P2H6QlD/lz7dQZcToN7qXc3OpA=; h=To:From:Subject:Date:From; b=M+B5pn3PAL0RShOgZLDL21euzRqcjHgc3Lq15zCzzKdM+js5VxEeIidI9HshvkIHk A99/3oz4Vj6AZWRSFBLRZCD1Bksc5uQFTfEQj9LAj3BzupqB6iEwNPBKzOwwRs+SvV s/4/L2BgR63Ic998cxSfbxL1ofOpycSip4HLwEep8WkbEyzXjl1gXnab6GzJDyKonW HZuoakwdlgfSD1N6ODsVl6vcw7kT8QugmC+ON7uLJyK+AQVrmGaMUNcGSje1eSh3c6 iD1rlzeAD4KBk4D9y4x4qRRlDAieUBhDWyzqy0sLk4wPKpYSNh8W9r+017SiyVkwRg EgoHz7h5zB5qA==
To: iesg@ietf.org, secdir@ietf.org, draft-ietf-core-stateless.all@ietf.org
From: David Mandelberg <david@mandelberg.org>
Message-ID: <84a53001-198c-620e-fdac-671619a0a244@mandelberg.org>
Date: Sat, 18 Apr 2020 14:36:46 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.5.0
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/Ki7U4cu24_BfF4PvIYXNAP-Kh0E>
Subject: [secdir] secdir review of draft-ietf-core-stateless-06
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Apr 2020 18:37:26 -0000

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

The summary of the review is ready with nits.

(nit) In section 3.1, I think "by changing the key used for integration 
protection" should say "integrity" instead of "integration"