Re: [secdir] Secdir last call review of draft-ietf-isis-segment-routing-msd-16

"Les Ginsberg (ginsberg)" <ginsberg@cisco.com> Wed, 26 September 2018 20:45 UTC

Return-Path: <ginsberg@cisco.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F4161292F1; Wed, 26 Sep 2018 13:45:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.957
X-Spam-Level:
X-Spam-Status: No, score=-14.957 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.456, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GKYiFdDvcNEv; Wed, 26 Sep 2018 13:45:09 -0700 (PDT)
Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53A8B128C65; Wed, 26 Sep 2018 13:45:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7214; q=dns/txt; s=iport; t=1537994709; x=1539204309; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=pZ2DltMmkJONo6yWjkGh/5gcLpBbYcnd7/tKYStkPLE=; b=OzEIsVwy2CTizniIPG2QC8qi/+EEZHEz0Hl+dBw8XqyFHk7W2LFQX43r 9FrvJddwwwXK9r/7YrbieC5AWztNL9bpR1evN5XzOxk1mZuLw7pBS9pEF WQ7RgBM0OF24PI56taLe0BgZ35Np4Dlg/7ZcaVQreFMdk6K+q+wk1hoaK E=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AMAADh7qtb/4cNJK1aGQEBAQEBAQEBAQEBAQcBAQEBAQGBUYFkKoFkKAqDaogVjj6DPZMSgXoLhGwCF4NmITQYAQMBAQIBAQJtKIU4AQEBAQIBIxE3DgUHBAIBCBEEAQEDAiYCAgIwFQgIAgQBDQUIg0IBgVAIpCSBLooYgQuJcBeBQT+BEQGDEoUVD4JbglcCnQcJApAjH4FGhFKJHJRqAhEUgSUdOIFVcBWDJ5BUb4wpgR4BAQ
X-IronPort-AV: E=Sophos;i="5.54,307,1534809600"; d="scan'208";a="457766425"
Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 26 Sep 2018 20:45:07 +0000
Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by alln-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id w8QKj485020455 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 26 Sep 2018 20:45:08 GMT
Received: from xch-aln-001.cisco.com (173.36.7.11) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 26 Sep 2018 15:45:04 -0500
Received: from xch-aln-001.cisco.com ([173.36.7.11]) by XCH-ALN-001.cisco.com ([173.36.7.11]) with mapi id 15.00.1395.000; Wed, 26 Sep 2018 15:45:04 -0500
From: "Les Ginsberg (ginsberg)" <ginsberg@cisco.com>
To: David Waltermire <david.waltermire@nist.gov>, "secdir@ietf.org" <secdir@ietf.org>
CC: "lsr@ietf.org" <lsr@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "draft-ietf-isis-segment-routing-msd.all@ietf.org" <draft-ietf-isis-segment-routing-msd.all@ietf.org>
Thread-Topic: Secdir last call review of draft-ietf-isis-segment-routing-msd-16
Thread-Index: AQHUVQPqnQ0QGOOP8EOqsf/gazaoC6UC9FjA
Date: Wed, 26 Sep 2018 20:45:03 +0000
Message-ID: <a3e1e6216dbc46db8c717d5dd2946ea0@XCH-ALN-001.cisco.com>
References: <153790283647.5258.15634056350853857580@ietfa.amsl.com>
In-Reply-To: <153790283647.5258.15634056350853857580@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.24.8.175]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com
X-Outbound-Node: alln-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/iKQ0EEBsH_3fEZAA_GqlWFcxdhE>
Subject: Re: [secdir] Secdir last call review of draft-ietf-isis-segment-routing-msd-16
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 26 Sep 2018 20:45:13 -0000

David -

Thanx for the review.
A new version of the draft (17) has been published to address your comments - subject to my responses below.

> -----Original Message-----
> From: David Waltermire <david.waltermire@nist.gov>
> Sent: Tuesday, September 25, 2018 12:14 PM
> To: secdir@ietf.org
> Cc: lsr@ietf.org; ietf@ietf.org; draft-ietf-isis-segment-routing-
> msd.all@ietf.org
> Subject: Secdir last call review of draft-ietf-isis-segment-routing-msd-16
> 
> Reviewer: David Waltermire
> Review result: Has Issues
> 
> I have reviewed this document as part of the security directorate's ongoing
> effort to review all IETF documents being processed by the IESG.  These
> comments were written primarily for the benefit of the security area
> directors.
>  Document editors and WG chairs should treat these comments just like any
> other last call comments.
> 
> The summary of the review is Ready with (minor) issues
> 
> My apologies for the late review on this draft. Overall I found this document
> to be well-written, and concise.
> 
> General Comments:
> 
> This document uses a mix of case around RFC2119 language (e.g., MAY may).
> You should use text from RFC8174 to indicate that lowercase versions of the
> keywords are not normative, or adjust the case of the lowercase words to
> ensure there is no confusion.
> 
[Les:] Section 1.2 does include the standard boilerplate for RFC 2119/RFC8174.

I checked all the lower case uses of "may" and they are intentional.
There was one instance of "should" that I changed to uppercase.

> Minor nit: There is some inconsistency in the use of "MSD-Type" (the value)
> and "MSD type" (the concept). Suggest cleaning this up.
> 
[Les:] Done

> Specific comments:
> 
> Section 1:
> 
> Para 1: s/to insure/to ensure/

[Les:] Done.

> 
> Section 4:
> 
> The last paragraph establishes a requirement on the registration of an MSD
> Type to define what the absence of a given MSD Type means. This is an
> important requirement that must be addressed during registration of new
> MSD Types. IMHO, this requirement should be echoed in the registration
> information in section 6 to make sure it is not overlooked.
>
[Les:] I disagree. Section 6 is defining exactly what should go into the new IANA registry.
The definition of "absence" is something that will have to be provided in the documents which define new MSD-types, but that will NOT be captured in the registry so including this in Section 6 isn’t appropriate.

 
> Section 6:
> 
> The "Base MPLS Imposition MSD" should reference section 5 of this
> document.

[Les:] Again - Section 6 is defining what will go into the registry. The registry will reference the document - not a specific section of the document.

> 
> The registration for "Experimental" should be marked as "Reserved for
> Experimental Use" or just "Experimental Use" to align with RFC8126. RFC8126
> states that "it is not appropriate for documents to select explicit values from
> registries or ranges with this policy". It might be good to add a note alongside
> the one on "Designated Experts" indicating that values from this range are
> not assignable.
> 
[Les:] I have changed the text to "Experimental Use".
I think the rest of your comment is addressed by RFC 8126 - which is referenced.

> The "Interior Gateway Protocol (IGP) Parameters" registry has the
> "Standards Action" policy assigned. The new "IGP MSD Types" sub-registry
> does not have the "Standards Action" policy. Was this intentional? If so, this
> should be explained. This is also confusing since the guidance for expert
> reviewers in
> RFC7370 implies that registrations are based on the "RFC Required" or
> "Standards Action" policies.
>
[Les:] IS-IS registries are typically Expert Review. This derives from considerations related to the liason with ISO JTC 1/SC6 (RFC 3563).
OSPF registries are typically Standards Action.

As IGP Parameters was defined by draft-ietf-ospf-segment-routing-extensions, it is Standards Action.
But as MSD-Types is being defined in an IS-IS draft...

Please learn to live with this.
It isn’t a significant issue in my view.


 
> Section 7:
> 
> The security considerations in RFC7981 ask that security considerations
> around the disclosure and modification of this type of information is
> described in extensions. This has been done, but RFC7981 also asks that an
> integrity mechanism be provided if there is a high risk resulting from
> modification of capability information. There is no discussion in the
> document's security consideration about the nature of risk in this case and
> why an integrity mechanism is not needed. It seems like false information
> can be used to cause a denial of service regarding computed paths. This
> sounds like having this happen could be bad. I am not an expert on routing
> protocols, so I am not sure if this is an issue. How bad and likely is such a risk?
> 

[Les:] The integrity mechanism is (as you point out) discussed in the Security section of RFC 7981 - which is referenced in the Security Section of this document.
The introduction of a new TLV does not alter the integrity mechanism requirements.

    Les