[secdir] Review of draft-gundavelli-v6ops-pmipv6-address-reservations-00

Tero Kivinen <kivinen@iki.fi> Sun, 07 August 2011 19:41 UTC

Return-Path: <kivinen@iki.fi>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB94C21F87C9; Sun, 7 Aug 2011 12:41:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5gh1Q7Hhjhkl; Sun, 7 Aug 2011 12:41:40 -0700 (PDT)
Received: from mail.kivinen.iki.fi (fireball.acr.fi [83.145.195.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1898C21F8752; Sun, 7 Aug 2011 12:41:39 -0700 (PDT)
Received: from fireball.kivinen.iki.fi (localhost [127.0.0.1]) by mail.kivinen.iki.fi (8.14.3/8.14.3) with ESMTP id p77JfsXU012836 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 7 Aug 2011 22:41:54 +0300 (EEST)
Received: (from kivinen@localhost) by fireball.kivinen.iki.fi (8.14.3/8.12.11) id p77Jfr0B018012; Sun, 7 Aug 2011 22:41:53 +0300 (EEST)
X-Authentication-Warning: fireball.kivinen.iki.fi: kivinen set sender to kivinen@iki.fi using -f
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Message-ID: <20030.60033.707219.106399@fireball.kivinen.iki.fi>
Date: Sun, 07 Aug 2011 22:41:53 +0300
From: Tero Kivinen <kivinen@iki.fi>
To: iesg@ietf.org, secdir@ietf.org
X-Mailer: VM 7.19 under Emacs 21.4.1
X-Edit-Time: 6 min
X-Total-Time: 5 min
Cc: draft-gundavelli-v6ops-pmipv6-address-reservations.all@tools.ietf.org
Subject: [secdir] Review of draft-gundavelli-v6ops-pmipv6-address-reservations-00
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Aug 2011 19:41:41 -0000

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.

This document does two IANA allocations, one for the reserved IPv6
interface identifier for Proxy Mobile IPv6 and another for the
reserved IANA Ethernet unicast address for the Proxy Mobile IPv6. The
security considerations section points to the Proxy Mobile IPv6 RFC
(RFC5213) and Reserved IPv6 Interface Identifiers RFC (RFC 5453)
saying there is no additional security considerations known at this
point of time beyond them.

Only thing that seems bit odd, that there is no obvious point where
the allocated reserved IANA values would be inserted, so I do not know
whether the final values will be put to the RFC or whether users of
them need to go to the IANA registries to find the values. If users
are required to find the values from the IANA registries, adding
direct pointer to the registry might be useful. 
-- 
kivinen@iki.fi