Re: [secdir] Secdir review of draft-ietf-mpls-psc-updates-05

[Eric Osborne <[e-mail]>]

...
>
> - Making sure an implementation behaves correctly in front of malformed
>   messages is typically something that should be mentioned/discussed in the
>   Security Section. This is the case in section 2.3 "Error handling".
>   Can an attacker through malformed/unexpected messages (e.g., with fuzzing)
>   launch a DoS?
>   I don't suggest to move section 2.3 in the Security Discussion section,
> but
>   rather to add a sentence in the Security Section explaining that this
> document
>   in section 2.3 also clarifies how to react in front of
> malformed/unexpected
>   messages (which is essential from a security point of view).


I have added this to the security section.  It now reads:

---
7.  Security Considerations

   These changes and clarifications raise no new security concerns.  RFC
   6941 [RFC6941] provides the baseline security discussion for MPLS-TP,
   and PSC (both RFC 6378 and this document) fall under that umbrella.
   Additionally, Section 2.2 clarifies how to react to malformed or
   unexpected messages.

---


Is that sufficient?



eric


>
> Cheers,
>
>     Vincent