[secdir] Security directorate review of draft-ietf-ccamp-oam-configuration-fwk

[Magnus Nyström <[e-mail]>]

 I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the IESG.
These comments were written primarily for the benefit of the security area
directors. Document editors and WG chairs should treat these comments just
like any other last call comments.

This document describes extensions to RSVP-TE in support of the
establishment of Operation, Administration and Management entities in the
context of GMPLS .

The document seems well written. I would suggest removing the last sentence
of the Security Considerations section ("Cryptography can be used...")
since it does not really offer any hint as to how to use cryptography.
Instead, the previous sentence could be replaced with something like: "For
a more comprehensive discussion of GMPLS security, and attack mitigation
techniques, please see the Security Framework for MPLS and GMPLS Networks [
RFC5920 <http://tools.ietf.org/html/rfc5920>]."

-- Magnus