[secdir] Secdir last call review of draft-ietf-pce-applicability-actn-11

Rifaat Shekh-Yusef via Datatracker <noreply@ietf.org> Sun, 28 April 2019 23:31 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: secdir@ietf.org
Delivered-To: secdir@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6493A1201B3; Sun, 28 Apr 2019 16:31:22 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Rifaat Shekh-Yusef via Datatracker <noreply@ietf.org>
To: secdir@ietf.org
Cc: draft-ietf-pce-applicability-actn.all@ietf.org, pce@ietf.org, ietf@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.95.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: Rifaat Shekh-Yusef <rifaat.ietf@gmail.com>
Message-ID: <155649428231.20950.16409989782111070284@ietfa.amsl.com>
Date: Sun, 28 Apr 2019 16:31:22 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/iM33k8dG1si-kUYD10ba77bZQfE>
Subject: [secdir] Secdir last call review of draft-ietf-pce-applicability-actn-11
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 28 Apr 2019 23:31:23 -0000

Reviewer: Rifaat Shekh-Yusef
Review result: Ready

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.


RFC8453 is an informational document that defines a Framework for Abstraction 
and Control of TE Networks (ACTN), with a well defined security considerations 
section.

This is an informational document that examines the applicability of Path 
Computation Element (PCE) to the ACTN, by adding PCE to the PNC and MDSC 
controllers.

The security considerations section seems to be aligned with the security of 
the ACTN framework, and the addition of PCE to the existing controllers does not
introduce new security concerns beyond what is already covered by the framework.

Regards,
 Rifaat