IETF Logo Mail Archive

Re: [secdir] [Detnet] Secdir last call review of draft-ietf-detnet-mpls-05

Stewart Bryant <stewart.bryant@gmail.com> Mon, 16 March 2020 14:37 UTC

Return-Path: <stewart.bryant@gmail.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3C693A0946; Mon, 16 Mar 2020 07:37:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w8a8JmyZLoiu; Mon, 16 Mar 2020 07:37:48 -0700 (PDT)
Received: from mail-wm1-x334.google.com (mail-wm1-x334.google.com [IPv6:2a00:1450:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 685693A0945; Mon, 16 Mar 2020 07:37:42 -0700 (PDT)
Received: by mail-wm1-x334.google.com with SMTP id z13so1882142wml.0; Mon, 16 Mar 2020 07:37:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=LvvfYBcOK97N2RTj6fKFDPoiviGs4AcshYnpD3KtYdI=; b=MoPR5D5VvP4Rz5z0rbCSUe1gpQkypWBgzAGTajJiivEND66Rj+3Iug0UDdlQNkYM3V 6qbc7lD9KzHURHnuZ24RMWQPDmNiuyRUaDU7xllMqP36MuVcET7oBVoCbSxVAVSuL6cs bKI0m2EBTvgAlgK6pd1T13Ul61Jh6ZhXnANNDLv2530jtoVNAZ1/sJC4Y6gedAhcpSVK TEBSCDo8kOSk5yYowIAWbZ+27v7v0qvXCN8Sr7G819Hj6Cd5ZkFgv+LELhs2hYoSXR3v sI5YCrA5U1ig8aOzEJafRqZwWsDRwm6pcabqxuPMeKE8PlBwIJ5PidBWRhupv0++NAXY oFZA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=LvvfYBcOK97N2RTj6fKFDPoiviGs4AcshYnpD3KtYdI=; b=A91xa+sAwA/aN3K4C4qzYT4nuYmmNeDoSJlMf9B0oZ7X7LdBAYw1frQsMZlu6rvItm C70tUZ9bSzVHseYd61cctzwqjhlDNq5kRpdvc4KoEGQNJ6p2rQdXJUgfQnpd78d4BvKJ 7DQG12jpqdmyc7UDaKMvPaB89UtGdF8IgKkAkKse/FPNLmn4MyeE+rGzh5XJXKR//htI YW9yVQWpqrBeo+HuHZyEcyKfZzTocZmpbM+Ubu9O8k7GPcfXAAEi1uSOVESExkdXtqnZ dm/q3qqaxCLlnWtqBSQgkvTOE7zGrfNOc49+L/Hudo5j/ggmdWF9/GYccm59VTmCK7xY ReUA==
X-Gm-Message-State: ANhLgQ3vtMiekbHLeH6S8I/Z3+7Z4YzaPKF+byBnfI3chHSEyXiqkHGV LyT3xgXER7IBDlxWiJs+lQU=
X-Google-Smtp-Source: ADFU+vvkJIyYv1/tt8VdaYB7IAKNWbPvdVQ3ZCk+P95iUGuLcgAUtHL9b71g6zGZsLZTsJu+D6wKPA==
X-Received: by 2002:a1c:1b51:: with SMTP id b78mr28207479wmb.8.1584369460555; Mon, 16 Mar 2020 07:37:40 -0700 (PDT)
Received: from [192.168.178.42] ([62.3.64.16]) by smtp.gmail.com with ESMTPSA id b203sm31383117wmc.45.2020.03.16.07.37.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 16 Mar 2020 07:37:39 -0700 (PDT)
From: Stewart Bryant <stewart.bryant@gmail.com>
Message-Id: <06D31ABA-F8AE-49FF-A2C0-D2F7BBB56E55@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_C5B3148D-6617-41CF-B3F4-8172B5BFE4D1"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.60.0.2.5\))
Date: Mon, 16 Mar 2020 14:37:08 +0000
In-Reply-To: <a8dfd766-7770-0baa-7ec7-bd844f769716@labn.net>
Cc: Stewart Bryant <stewart.bryant@gmail.com>, Watson Ladd <watsonbladd@gmail.com>, Uri Blumenthal <uri@mit.edu>, draft-ietf-detnet-mpls.all@ietf.org, DetNet WG <detnet@ietf.org>, secdir <secdir@ietf.org>, rtg-ads@ietf.org, "<sec-ads@ietf.org>" <sec-ads@ietf.org>
To: Lou Berger <lberger@labn.net>
References: <7A5A9066-7877-402A-9704-AD83AF4FD3D0@gmail.com> <E0A8CA63-8C58-4AFA-B213-76A7FD261833@mit.edu> <96BB26AA-3314-4E0A-98F3-4F2E93F1D9FF@gmail.com> <CACsn0cnCAo082hB4MK=dRTxbha1niGsSQ4-dW4_UvQ8bZ0TBLw@mail.gmail.com> <a8dfd766-7770-0baa-7ec7-bd844f769716@labn.net>
X-Mailer: Apple Mail (2.3608.60.0.2.5)
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/mSjHO7jKCr2xnn8f5iVIJgpFLWU>
Subject: Re: [secdir] [Detnet] Secdir last call review of draft-ietf-detnet-mpls-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Mar 2020 14:37:51 -0000


> On 16 Mar 2020, at 14:22, Lou Berger <lberger@labn.net> wrote:
> 
>> Are there really no security considerations when putting the two together?

Obviously I cannot think of anything that is not already in the text, or I would have included it. So if you can be more specific about what this interactions might be, I am more than happy to discuss them with you and if needed  to address them either directly or by reference.

>> Every MPLS network will just work with Detnet on top, no matter how rushed the deploy is?

DN will certainly not damage MPLS no.

A poor MPLS deployment will break many things besides DN. However whist I can see potential for a performance impact, I cannot see how a security impact would occur.

Stewart

v2.23.0 | Report a Bug | By Email