[secdir] review of draft-weiler-rsync-uri-01

David McGrew <mcgrew@cisco.com> Thu, 29 October 2009 18:03 UTC

Message-Id: <9E8FAA81-5658-4CA7-A1BD-CC3CF0E3C7E5@cisco.com>
From: David McGrew <mcgrew@cisco.com>
To: secdir@ietf.org, IESG <iesg@ietf.org>
Content-Type: text/plain; charset="US-ASCII"; format="flowed"; delsp="yes"
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v936)
Date: Thu, 29 Oct 2009 11:03:25 -0700
Cc: weiler@tislabs.com, David Ward <dward@cisco.com>
Subject: [secdir] review of draft-weiler-rsync-uri-01
Precedence: list

I have reviewed this document as part of the security directorate's  
ongoing effort to review all IETF documents being processed by the  
IESG. These comments were written primarily for the benefit of the  
security area directors. Document editors and WG chairs should treat  
these comments just like any other last call comments.

The draft defines a URI for rsync, and it refers the reader to the  
detailed security considerations of RFC 3986 (Uniform Resource  
Identifier (URI): Generic Syntax), after pointing out that some of  
those considerations do not apply.   This appears to cover the  
security issues.

David

[secdir] review of draft-weiler-rsync-uri-01 David McGrew
[secdir] review of draft-weiler-rsync-uri-01 David McGrew