Re: [secdir] secdir review of draft-ietf-pce-wson-routing-wavelength-14

["Adrian Farrel" <[e-mail]>]

Hi Dan,

Thanks for taking the time.

> This is a requirements document for additions to the PCEP protocol
> to support path computation in a wavelength-switched optical
> network. It describes what needs to be added to requests/responses
> to support routing and wavelength assignment to a path computation
> element (that supports both functions) for a path computation client.
> 
> The security considerations are basically a punt. There's information
> that an operator may not want to disclose and "[c]onsideration should
> be given to securing this information." That seems a little thin. At the
> very least some explanation of how this should be done. Do only the
> TLVs that represent these required additions require confidentiality?
> Is KARP a potential solution to this problem? If so it might be nice to
> explain that; if not, then why and what else would be required?

As you say, it's a requirements document, so it may be a bit harsh to ask the
authors to describe how security should be provided.

We could possibly add a little text to the Security Considerations section to
explain who is supposed to catch the ball when we punt it.

I'll talk to the authors,

Cheers,
Adrian