IETF Logo Mail Archive

Re: [secdir] Review of draft-ietf-cdni-requirements-13

"Kent Leung (kleung)" <kleung@cisco.com> Mon, 02 December 2013 19:10 UTC

Return-Path: <kleung@cisco.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 545DA1ADE89 for <secdir@ietfa.amsl.com>; Mon, 2 Dec 2013 11:10:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.502
X-Spam-Level:
X-Spam-Status: No, score=-9.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8SYDMWf4quta for <secdir@ietfa.amsl.com>; Mon, 2 Dec 2013 11:10:46 -0800 (PST)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) by ietfa.amsl.com (Postfix) with ESMTP id 6705F1AD8ED for <secdir@ietf.org>; Mon, 2 Dec 2013 11:10:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1431; q=dns/txt; s=iport; t=1386011444; x=1387221044; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=SGyyttWxNWH0pzxAFT+wicuVkjLN2HafhC8rNZIB+7A=; b=b+ugKTJWBHYdz4kJqlZbsztSLDLWwTCYD0r64RHvadbr+x9fyILOp6G7 g7HqZ8HbOm8tvulZFBd4oGvPO6SL8MGcgnOCCt8sAKZkbfebAKL+z6xxm YYiIetVljpkcoRntY6SURXtfQ4H/+lgEt9k1k1m5HZDnYUxrGzkxFHyqP U=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AgMFAOrZnFKtJXHA/2dsb2JhbABZgweBC7hngSUWdIIlAQEBBDo/DAQCAQgRBAEBCxQJBzIUCQgCBAENBQiHecABF45XMQcGgxqBEwOqJ4Mpgio
X-IronPort-AV: E=Sophos;i="4.93,812,1378857600"; d="scan'208";a="3728803"
Received: from rcdn-core2-5.cisco.com ([173.37.113.192]) by alln-iport-7.cisco.com with ESMTP; 02 Dec 2013 19:10:44 +0000
Received: from xhc-rcd-x05.cisco.com (xhc-rcd-x05.cisco.com [173.37.183.79]) by rcdn-core2-5.cisco.com (8.14.5/8.14.5) with ESMTP id rB2JAhXG028398 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 2 Dec 2013 19:10:43 GMT
Received: from xmb-aln-x03.cisco.com ([169.254.6.155]) by xhc-rcd-x05.cisco.com ([173.37.183.79]) with mapi id 14.03.0123.003; Mon, 2 Dec 2013 13:10:43 -0600
From: "Kent Leung (kleung)" <kleung@cisco.com>
To: Shawn M Emery <shawn.emery@oracle.com>, "secdir@ietf.org" <secdir@ietf.org>
Thread-Topic: Review of draft-ietf-cdni-requirements-13
Thread-Index: AQHO7fGIVqIxWZsW8Uqa3e8Azg8q4ZpBSHKQ
Date: Mon, 02 Dec 2013 19:10:43 +0000
Message-ID: <CD85F32117029D4F9AEF48BDEF5536AB1DBA0A95@xmb-aln-x03.cisco.com>
References: <52158CF5.4050001@oracle.com> <529A2050.7090205@oracle.com>
In-Reply-To: <529A2050.7090205@oracle.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.21.79.199]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailman-Approved-At: Thu, 05 Dec 2013 06:14:25 -0800
Cc: "draft-ietf-cdni-requirements.all@tools.ietf.org" <draft-ietf-cdni-requirements.all@tools.ietf.org>
Subject: Re: [secdir] Review of draft-ietf-cdni-requirements-13
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Dec 2013 19:10:48 -0000

Thank you for the review.

Kent

-----Original Message-----
From: Shawn M Emery [mailto:shawn.emery@oracle.com] 
Sent: Saturday, November 30, 2013 9:29 AM
To: secdir@ietf.org
Cc: draft-ietf-cdni-requirements.all@tools.ietf.org
Subject: Review of draft-ietf-cdni-requirements-13

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments.

This informational internet-draft describes the requirements to integrate multiple Content Delivery Networks (CDNs) for Content Service Providers (CSPs) so that end users have a single point of access for content.

The security considerations section does exist and refers to a separate section for the discussion on security requirements.  This section gives requirements priorities from high to low on the various types of attacks.  The high level priorities are for authentication, confidentiality, integrity protection, protection against replay, spoofing, and DoS attacks.  Since it is a requirements specification there is purposefully no discussion on how to mitigate against such attacks.

General comments:

None.

Editorial comments:

None.

Shawn.
--

v2.23.0 | Report a Bug | By Email