Re: [secdir] Secdir last call review of draft-ietf-dhc-mac-assign-07

Benjamin Kaduk <kaduk@mit.edu> Fri, 12 June 2020 22:47 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 499A93A0E46 for <secdir@ietfa.amsl.com>; Fri, 12 Jun 2020 15:47:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vqc8sXoUq_vv for <secdir@ietfa.amsl.com>; Fri, 12 Jun 2020 15:47:41 -0700 (PDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC3E63A0885 for <secdir@ietf.org>; Fri, 12 Jun 2020 15:47:41 -0700 (PDT)
Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 05CMlbOW012630 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 12 Jun 2020 18:47:39 -0400
Date: Fri, 12 Jun 2020 15:47:36 -0700
From: Benjamin Kaduk <kaduk@mit.edu>
To: Sean Turner <sean@sn3rd.com>
Cc: secdir@ietf.org
Message-ID: <20200612224736.GS11992@kduck.mit.edu>
References: <159166164723.4538.11036627051900835905@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <159166164723.4538.11036627051900835905@ietfa.amsl.com>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/NCqdeRXQH4YqPlq9ozu7l5Rrpl4>
Subject: Re: [secdir] Secdir last call review of draft-ietf-dhc-mac-assign-07
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Jun 2020 22:47:43 -0000

Thanks, Sean -- we appreciate having the extra eyes on the doc.  (As you
saw, I put a Discuss position in for an aspect that was unclear and to
avoid recommending that people do things that could lead to using
conflicting addresses.)

-Ben

On Mon, Jun 08, 2020 at 05:14:07PM -0700, Sean Turner via Datatracker wrote:
> Reviewer: Sean Turner
> Review result: Has Nits
> 
> Hi! I reviewed this draft, the directorate reviews, and the IESG
> discuss/comments (and skimmed draft-ietf-dhc-slap-quadrant).
> 
> This draft is about using DHCP to avoid collisions in certain environments
> where randomized MAC addresses are used, e.g., huuuuge virtualization
> deployments.
> 
> 1. It is interesting to note that the actual probability of collisions is not
> included in the draft. (ah I guess Ben noted this too) 2. I'd echo Barry's
> comment about adding something about what the consequences of multiple devices
> using the same MAC address. 3. Is it worth adding at least an informative
> reference to some DoS mitigation techniques?
> 
> 
> _______________________________________________
> secdir mailing list
> secdir@ietf.org
> https://www.ietf.org/mailman/listinfo/secdir
> wiki: http://tools.ietf.org/area/sec/trac/wiki/SecDirReview