[secdir] Combined Gen-art and secdir LC review: draft-ietf-manet-smc-sec-threats-05

Robert Sparks <rjsparks@nostrum.com> Mon, 08 August 2016 15:17 UTC

Return-Path: <rjsparks@nostrum.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 719DE12D624; Mon, 8 Aug 2016 08:17:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.147
X-Spam-Level:
X-Spam-Status: No, score=-3.147 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.247] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GNqciejhMm3h; Mon, 8 Aug 2016 08:17:51 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51CF312D623; Mon, 8 Aug 2016 08:17:49 -0700 (PDT)
Received: from unnumerable.local ([173.57.161.14]) (authenticated bits=0) by nostrum.com (8.15.2/8.15.2) with ESMTPSA id u78FHmR8054911 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=OK); Mon, 8 Aug 2016 10:17:48 -0500 (CDT) (envelope-from rjsparks@nostrum.com)
X-Authentication-Warning: raven.nostrum.com: Host [173.57.161.14] claimed to be unnumerable.local
To: General Area Review Team <gen-art@ietf.org>, "secdir@ietf.org" <secdir@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, manet@ietf.org, draft-ietf-manet-smc-sec-threats.all@ietf.org
From: Robert Sparks <rjsparks@nostrum.com>
Message-ID: <c2c8df34-e456-be3f-ffb3-6b64d71bd458@nostrum.com>
Date: Mon, 8 Aug 2016 10:17:48 -0500
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/UBU3341M0cCPZApTrHOINERsOQ8>
Subject: [secdir] Combined Gen-art and secdir LC review: draft-ietf-manet-smc-sec-threats-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Aug 2016 15:17:52 -0000

I am the assigned Gen-ART and secdir reviewer for this draft. The 
General Area
Review Team (Gen-ART) reviews all IETF documents being processed by the IESG
for the IETF Chair. The secdir does the same for the security area 
directors.
Please treat these comments just like any other last call comments.

For more information on Gen-Art, please see the FAQ at
<https://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.

For moe information on secdir, see the wiki at
<https://trac.tools.ietf.org/area/sec/trac/wiki/SecDirReview>

Document: draft-ietf-manet-smf-sec-threats-05
Reviewer: Robert Sparks
Review Date: 8 Aug 2016
IETF LC End Date: 11 Aug 2016
IESG Telechat date: 18 Aug 2016

Summary: Ready for publication as an Informational RFC

This draft provides a discussion of vulnerabilities in Simplified Multicast
Forwarding (SMF), focusing on attacking the Duplicate Packet Detection and
Relay Set Selection mechanisms. It positions itself as being useful 
information
for those deploying SMF as currently defined.  It does not propose 
mitigations,
but does have a section that identifies potential future work that might.

I have sent several editorial nits directly to the authors.