Re: [secdir] secdir review of draft-holmberg-dispatch-mcptt-rp-namespace-03

[Christer Holmberg <[e-mail]>]

Hi Melinda,

Thanks for your review!

You have a good point regarding the statement in the security considerations, and I'm ok to modify the text as suggested.

Regards,

Christer 


-----Original Message-----
From: Melinda Shore [mailto:[e-mail]] 
Sent: 07 January 2017 07:44
To: [e-mail]; [e-mail]; [e-mail]
Subject: secdir review of draft-holmberg-dispatch-mcptt-rp-namespace-03

I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.

Summary: Ready, with issues

This draft defines an additional Session Initiation Protocol (SIP) Resource-Priority namespace to meet the requirements of the 3GPP defined Mission Critical Push To Talk, and places this namespace in the IANA registry.  The "Security Considerations" section is brief, stating only "[t]his document has the same Security Considerations as [RFC4412]."  I think that is actually not the case, as the security considerations for a namespace registry are not the same as the security considerations for the protocol in which the namespace is being used.  It would probably be more correct to follow the model in, say, RFC 6878 ("SIP Priority Field Registry") and say only "This document does not have any impact on the security of the SIP MCPTT protocol.  Its purpose is purely administrative in nature."

Otherwise, all's well.

Melinda