[secdir] Re: [mpls] draft-ietf-mpls-stamp-pw-06 ietf last call Secdir review
Rakesh Gandhi <rgandhi.ietf@gmail.com> Tue, 11 August 2026 12:11 UTC
Return-Path: <rgandhi.ietf@gmail.com>
X-Original-To: secdir@mail2.ietf.org
Delivered-To: secdir@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E99AA127CB9B8 for <secdir@mail2.ietf.org>; Tue, 11 Aug 2026 05:11:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786450260; bh=XPqlFppGduhNu1qU+b9QyZ1yZmUTuLbsH4GjDaAr+QE=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=lqdJUkxb+sEGzGlmWR31ioJlwx2ZMjYJqY00uOKl8Tz2Alc5YsN5lB0N4h7zjTz4U 31Wx0nLWw37PiZGnEfdUMiX01dtgumSJgUKeoDVV3UgkxUt5xRDIz0SgjQbfVMlrIW 4+a+xc+wCdGmEZZ0jfJItghkvnvjNzrpNydppyqI=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0NXZYk7Jwo-a for <secdir@mail2.ietf.org>; Tue, 11 Aug 2026 05:11:00 -0700 (PDT)
Received: from mail-ed1-x52a.google.com (mail-ed1-x52a.google.com [IPv6:2a00:1450:4864:20::52a]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A9E8B127CB067 for <secdir@ietf.org>; Tue, 11 Aug 2026 05:10:16 -0700 (PDT)
Received: by mail-ed1-x52a.google.com with SMTP id 4fb4d7f45d1cf-69fab5a852cso3859257a12.0 for <secdir@ietf.org>; Tue, 11 Aug 2026 05:10:16 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1786450216; cv=none; d=google.com; s=arc-20260327; b=KbDDnkCWTat/VKkZcbJRAUM34fZEeGBpI0bBX/jl6XVvKBTi91UOJUeECW3HiBpXKa xztmQkvNBqkXWTbN3KnMWBupEcSXmjofTn2lXDKZCUNxJOFplimc7OilZPyyH60q7BcI QCa4ZliY3AdxCrxWqhk1Fv89cqUhs1C/EKjzONfs2tGDljoDjCgDusUBibSCwe0FIDmg yBus9cNRT5Vf/J6lN1YHM2FwlqhkVTLrfvHqdGTN3uaRLwBMPLZkA6V7N0p32rrqabN6 v7ldI6qBvtYhlSGLZQ5Kd/hrmSwJtB2CUx9QFZQYLJNZ/LX8eBb2+nwDUlqFMj0ZYuBm M0hw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=XPqlFppGduhNu1qU+b9QyZ1yZmUTuLbsH4GjDaAr+QE=; fh=dgwSS9QGgzc4T3Mja1lSmI2bq5eBod4dlxXpwgoV1mk=; b=NOiDA2zjMEOxqod+nXqUCod064FhuTb7qWUNVKOLCJEsHZxnG6+gwboQTHWK1PNJfj QpHEIcrR6LBaq1yOBUqA58vzgev3svymnFAy5H3fUs6gDBkyQczVKRclwjm/bEByQlVM julVymLd48ww4U5187FDyEABRTtNUjhR4fqDaADBXx0TrZWhzCpO82A7YlNxF2Pxc20X W29iCm6EUgdrzhof2pFlbTndqI2DuStJbVITmYcv6rOjIHIhjcThZ6n4s52cNb4yZl2D FaCw6nBPZu/2OaMpKY4q2nl1mi8HzZ0zEPSvppkT8QZ03CR/hQ0D+41MzGoE4Dso3+kY FV0Q==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786450216; x=1787055016; darn=ietf.org; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:from:to:cc:subject:date:message-id:reply-to :content-type; bh=XPqlFppGduhNu1qU+b9QyZ1yZmUTuLbsH4GjDaAr+QE=; b=ovp91iRMiQCjyzjQa1fG36UpPPN5uhpZTiGwufqTz48sI73Rl+gq8w+LABOiSjlxta GN/SOTz2Iq7tfFSebwBf6XT/4S+5eVDznecMLNTZQsXFBi7nK/Z2lY5xTZncuoJIWmMo ZNXvk0UgstqQ6wuEnQ4UYLO5Ui5FQqNpRUkBvx17QCEeV9/elyluT6slP05XCBWKYi4s uEWEw+hlaURZB7bNQAhaujnIZh7WzqZaXZ13TJ2tfnlwv65dxhj0cp8xng8Ah1WVnZrv tKhnqkn9eLHJe2t5mr7RNt0pZspOTweEk32HX0Ytr6LjpGRCxCx4akcWqFyNoKJbRzyX xL/w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786450216; x=1787055016; h=content-type:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=XPqlFppGduhNu1qU+b9QyZ1yZmUTuLbsH4GjDaAr+QE=; b=hRaGNwRmu69rCBTntxZmmmDcwuDJyjfCRN8JqskTNDKUhYZGANkQCDT4eP1gsl+hkj fE1lVRDTOfZPhK5YO8S9GerWzuPE+/7t+UbqwzZXpFM6ZsSQYS7mtWFX3AYqKRK1/1Xq lB1dgeT3eK2mBB0c5BNvJL1k5aHjEI/WFui5gNebMGN/pajBw7VUsZtZZmfHt81ZWnH/ juZgJ4jKwfaYmYuZ+Uyf2ULKQ9tbjC7T1N9TM+JXjIHfHAmM8e5jAznyq5D8yFO9OMSi ockoahSww0QSQFceAsuBXAzjx0MhbINwwxl+GFXnOhNpEG8HeS9DfbYo2wHG8+3JdJk3 flvg==
X-Gm-Message-State: AOJu0YxZ4WwIatQpYGU2rY1Kn8TcwnkndhLFWNmRdrfQjftI5amgMX/Z j130qp032zX9+7ZISYZpQ2OnOOlUXEHddM6auTr3fBMPMcFeSAHtn+FgjFhYF/FeF9ciUw91Nry Py0YhPZjls8h6zbb9ymk38QG6Dux8Rg==
X-Gm-Gg: AR+sD11P7TS/ex3FoOEL4loggZyjv+cyjPQd0FNJF1Qrbw4AGxSi8kYN7H0HdtMtQCl SrFmnYFaMdZp32x+KYj+1WazlXkXT9KTgqVF7Pxy6QNQvh3xmtuCe059UUvLcqWEDQEotRiQ1UN wMyfYK3+7nLx/h/58FpqQMTLq9ecMH2KiXNhL+9to4EsfamuJp6QBW4VUMPR26+oGmNbU0Arior SvmA7eqjA12svCRHB9e+RrMNzrPmA70s1XhsB05cWA6jN4rO0P1IJoxZsXzu4kH1wM8tWy0yv8Z Vu7eXnMqLHZb5+pdUEhxmQRyfc0/E1pSo0CHzW5mgVn+rcu4OAF8Lk18XOE6FdWa7U7egjQD8KB GAVQkInhQYs8oXLc2c7kVHUKWuv2k4i0=
X-Received: by 2002:a05:6402:4143:b0:6a1:f95b:8cf5 with SMTP id 4fb4d7f45d1cf-6a36455b7f6mr1740049a12.21.1786450215389; Tue, 11 Aug 2026 05:10:15 -0700 (PDT)
MIME-Version: 1.0
References: <178644481694.465318.4578636274346790986@dt-datatracker-559c48c7fb-llb9x>
In-Reply-To: <178644481694.465318.4578636274346790986@dt-datatracker-559c48c7fb-llb9x>
From: Rakesh Gandhi <rgandhi.ietf@gmail.com>
Date: Tue, 11 Aug 2026 08:10:04 -0400
X-Gm-Features: AUfX_mzvXPoQ7Vmr6qPq5zJj0KHCpsM_pk9xAt82518nS5VOyhYNLxybsKffS1s
Message-ID: <CAMZsk6cGSFDsDCCT6kF1Mpesss9iQ36j=jBW=yMRo2fhzOM6rw@mail.gmail.com>
To: Yaron Sheffer <yaronf.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="0000000000007f50d50658c45a8e"
Message-ID-Hash: R6QKPXV4WQFB4PD4OCHUTT2TOKXRAQ4V
X-Message-ID-Hash: R6QKPXV4WQFB4PD4OCHUTT2TOKXRAQ4V
X-MailFrom: rgandhi.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-secdir.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: secdir@ietf.org, draft-ietf-mpls-stamp-pw.all@ietf.org, last-call@ietf.org, mpls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [secdir] Re: [mpls] draft-ietf-mpls-stamp-pw-06 ietf last call Secdir review
List-Id: Security Area Directorate <secdir.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/OYCjo400lxj9EF_tgIBRiJR-8XE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Owner: <mailto:secdir-owner@ietf.org>
List-Post: <mailto:secdir@ietf.org>
List-Subscribe: <mailto:secdir-join@ietf.org>
List-Unsubscribe: <mailto:secdir-leave@ietf.org>
Thank you Yaron for the secdir review. We have posted rev-07 that addresses your comments. Please see reply inline with <RG>.. On Tue, Aug 11, 2026 at 6:40 AM Yaron Sheffer via Datatracker < noreply@ietf.org> wrote: > Document: draft-ietf-mpls-stamp-pw > Title: Encapsulation of Simple Two-Way Active Measurement Protocol for > LSPs and > Pseudowires in MPLS Networks Reviewer: Yaron Sheffer Review result: Ready > > My one significant comment from the early review to -04 has been addressed. > > Based on the changes leading to the current -06, I suggest to add the > following > sentence to the end of the 2nd paragraph of the Security Considerations: > > > The measures specified in Section 7 of [RFC8762] to mitigate attacks > using > the registered UDP port number also apply. > <RG> Added. Thanks, Rakesh (for authors) > > Since the paragraph already calls out HMAC specifically, it makes sense to > also > call out RFC 8762’s registered-port DoS mitigations. > > Thanks! > > > _______________________________________________ > mpls mailing list -- mpls@ietf.org > To unsubscribe send an email to mpls-leave@ietf.org >
- [secdir] draft-ietf-mpls-stamp-pw-06 ietf last ca… Yaron Sheffer via Datatracker
- [secdir] Re: [mpls] draft-ietf-mpls-stamp-pw-06 i… Rakesh Gandhi