Re: [secdir] Security review of draft-ietf-mpls-tp-psc-itu-02.txt

"Ryoo, Jeong-dong" <> Mon, 24 February 2014 04:35 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 720911A02D6; Sun, 23 Feb 2014 20:35:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -99.747
X-Spam-Status: No, score=-99.747 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id r-6Xzg2DXoDD; Sun, 23 Feb 2014 20:35:13 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id 43B2C1A02D3; Sun, 23 Feb 2014 20:35:13 -0800 (PST)
Received: from ( by ( with Microsoft SMTP Server (TLS) id 14.1.355.2; Mon, 24 Feb 2014 13:35:11 +0900
Received: from ([]) by ([]) with mapi id 14.01.0355.002; Mon, 24 Feb 2014 13:35:09 +0900
From: "Ryoo, Jeong-dong" <>
To: Hilarie Orman <>, "" <>, "" <>
Thread-Topic: Security review of draft-ietf-mpls-tp-psc-itu-02.txt
Thread-Index: AQHPMPhmcEPEmfgwVU+f2hJoAKx3MZrDz+c+
Date: Mon, 24 Feb 2014 04:35:08 +0000
Message-ID: <>
References: <>
In-Reply-To: <>
Accept-Language: ko-KR, en-US
Content-Language: ko-KR
x-new-displayname: UnlvbywgSmVvbmctZG9uZw==
x-originating-ip: []
Content-Type: multipart/alternative; boundary="_000_5B4A6CBE3924BB41A3BEE462A8E0B75A286BA563SMTP2etriinfo_"
MIME-Version: 1.0
X-Mailman-Approved-At: Mon, 24 Feb 2014 06:14:21 -0800
Cc: "" <>
Subject: Re: [secdir] Security review of draft-ietf-mpls-tp-psc-itu-02.txt
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Security Area Directorate <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 24 Feb 2014 04:35:16 -0000

Dear Hilarie,

Thanks for your comment.

I am not sure about what text has actually to be put in the Section 13 to reflect your suggestion.
Do you have any text in mind?

Best regards,


From : "Hilarie Orman" <>
Sent : 2014-02-24 09:36:04 ( +09:00 )
To : <>, <>
Cc : <>
Subject : Security review of draft-ietf-mpls-tp-psc-itu-02.txt

Security review of draft-ietf-mpls-tp-psc-itu-02.txt
MPLS Transport Profile (MPLS-TP) Linear Protection to Match the
Operational Expectations of SDH, OTN and Ethernet Transport Network

Do not be alarmed. I have reviewed this document as part of the
security directorate's ongoing effort to review all IETF documents
being processed by the IESG. These comments were written primarily
for the benefit of the security area directors. Document editors and
WG chairs should treat these comments just like any other last call

The abstract for this document states:
This document describes alternate mechanisms to perform some of the
sub-functions of MPLS Transport Profile (MPLS-TP) linear protection
defined in RFC 6378, and also defines additional mechanisms. The
purpose of these alternate and additional mechanisms is to provide
operator control and experience that more closely models the behavior
of linear protection seen in other transport networks.

The security considerations are the timeworn statement that

No specific security issue is raised in addition to those ones
already documented in RFC 6378 [RFC6378]

In RFC 6378 we find:
MPLS networks make the assumption that it is very hard to inject
traffic into a network and equally hard to cause traffic to be
directed outside the network. The control-plane protocols utilize
hop-by-hop security and assume a "chain-of-trust" model such that
end-to-end control-plane security is not used. For more
information on the generic aspects of MPLS security, see [RFC5920].

To my great astonishment I found that "RFC5920 Security Framework for
MPLS and GMPLS Networks" is an excellent document, and it is my
suggestion that the current draft reference it directly in section 13
"Security Considerations".

Barring any surprises in the extensive state diagrams, I otherwise am
inclined to accept the "no new issues" handwave.