[secdir] SECDIR review of draft-ietf-rmcat-coupled-cc

[Chris Lonvick <[e-mail]>]

Hi,

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the IESG. 
These comments were written primarily for the benefit of the security 
area directors. Document editors and WG chairs should treat these 
comments just like any other last call comments.

The summary of the review is that the ID is ready with nits.

This INFORMATIONAL draft discusses an experimental protocol. The 
Security Considerations section is adequate, but I would suggest 
including a brief statement that implementers should also be aware of 
the Security Considerations sections of RFC 3124 (normatively 
referenced), and RFCs 5348 and 7478 (both informatively referenced). 
Each of of these RFCs is discussed within the draft.

I also agree with Section 5 of the Shepherd Writeup, and nothing need be 
done to the draft about that.

   This is a heavily transport related draft, being focussed entirely
   on details of congestion control. Security considerations are adequate,
   although they will likely need elaboration for a future standards-track
   revision of this work in the light of operational experience. The draft
   says little about operational complexity, and the risks of cheating and
   poor quality implementations, but this will depend on the experiences
   with the protocol, and cannot effectively be done without experimentation
   and controlled deployment experience.


Regards,
Chris