[secdir] draft-ietf-mpls-stamp-pw-04 early Secdir review

[Yaron Sheffer via Datatracker <[e-mail]>]

Document: draft-ietf-mpls-stamp-pw
Title: Encapsulation of Simple Two-Way Active Measurement Protocol for LSPs and
Pseudowires in MPLS Networks Reviewer: Yaron Sheffer Review result: Ready

This document defines the encapsulation of the STAMP OAM protocol within
multiple deployment variants of MPLS.

The Security Considerations appear adequate, although much of the section
consists of references to the security considerations of the underlying
protocols and mechanisms.

What I'm missing is an explicit statement of (what I see as) the main threat
model, which is cross-tenant leakage. That is, one tenant interfering with the
OAM traffic of another tenant's, with the goal of triggering automated
responses. The document could be strengthened by explicitly stating that STAMP
packets received via a PW or LSP are processed in the context of that PW or
LSP, and that the encapsulations defined here do not introduce a mechanism for
cross-service OAM interaction.