Re: [secdir] secdir review of draft-cheshire-dnsext-nbp-09.txt

[Stuart Cheshire <[e-mail]>]

On 1 Nov 2010, at 2:46, Juergen Schoenwaelder wrote:

> I have reviewed this document as part of the security directorate's
> ongoing effort to review all IETF documents being processed by the
> IESG.  These comments were written primarily for the benefit of the
> security area directors.  Document editors and WG chairs should treat
> these comments just like any other last call comments.
> 
> The informational draft discusses requirements for a IP replacement of
> AppleTalk's Name Binding Protocol (NBP). As an individual submission,
> there is likely little value in commenting on the content. However, I
> would have appreciated if the authors would have discussed security as
> a requirement for an NBP replacement. I know that flexible discovery
> is often pretty much as odd with security, having "security measures
> appropriate to the environment in which" an NBP replacement "will be
> used" could have been an explicit requirement.

Can you propose some specific text you would like to see in the document?

> Editorial nit:
> 
> On page 9, the DNS name "printer1.ietf.org" should probably changed to
> "printer1.example.com".

Fixed.

Stuart Cheshire <[e-mail]>
* Wizard Without Portfolio, Apple Inc.
* www.stuartcheshire.org