Re: [secdir] Secdir review of draft-gont-numeric-ids-sec-considerations-06

[Fernando Gont <[e-mail]>]

Hello, Charlie,

Thanks a lot for your comments! In-line....

On 2/1/21 19:25, Charlie Kaufman wrote:
[....]
> Essentially, it says that when picking transient numeric identifiers, 
> beware of leaking information about other things going on at the node 
> choosing the identifiers to either eavesdroppers or to the legitimate 
> target of the communication (or making it possible for someone off-path 
> to guess the identifiers being used and forge packets). There is ample 
> history of implementers making bad choices in this space to warrant 
> getting the advice out there. My only reservation with this document is 
> that it would be nice if the advice could be somewhere more visible 
> (e.g., in some future update to RFC3552).
> 
> There are three other I-Ds in process with closely related content; it 
> would be kind to readers if these could be combined into one. They are: 
> draft-gont-predictable-numeric-ids, 
> draft-irtf-pearg-numeric-ids-generation, and 
> draft-irtf-pearg-numeric-ids-history. It's hard to imagine a reader of 
> any one of these who would not benefit from reading the others.

FWIW, this effort originally started as a single document that combined 
the three documents you reference (draft-gont-predictable-numeric-ids). 
However, at the time, when presenting this effort at the SAAG meeting, 
there was agreement that the orginal document 
(draft-gont-predictable-numeric-ids) contained different kinds of 
information (Informational-ish vs. BCP-ish) and thus we were instructed 
to split the original document in three pieces. Since then, each of the 
resulting pieces were progressed on their own, with two of them 
eventually being adopted by the PEARG, and this one 
(draft-gont-numeric-ids-sec-considerations) being progressed as an 
AD-sponsored document.



> Typos:
> 
> p6 Section 4: "to be a predictable" -> "to be predictable"
> "identifiers in other context" -> "identifiers in another context"

Will fix this in the next rev.

Thanks a lot!

Cheers,
-- 
Fernando Gont
SI6 Networks
e-mail: [e-mail]
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492