[secdir] Review of draft-ietf-ccamp-gmpls-vcat-lcas-13.txt

[Ondřej Surý <[e-mail]>]

Hi,

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

The document summarizes requirements and use of Generalized 
Multi-Protocol Label Switching (GMPLS) control plane in support of the 
Virtual Concatentation and Link Capacity Adjustment Scheme.  In addition 
to this it add a specific use of the Notify message and admin status 
object for GMPLS signaling.

The security consideration is very short stating that the interceptor 
may see informations about different routes and that these members are 
of the same VCAT group.

I do not see any new security consideration on top of existing RFC5920.

You should read this review with one fact in mind: the subject of the 
draft is far far away from my expertise, however it seems to be well 
written and ready for publication.

Ondrej
-- 
  Ondřej Surý
  vedoucí výzkumu/Head of R&D department
  -------------------------------------------
  CZ.NIC, z.s.p.o.    --    Laboratoře CZ.NIC
  Americka 23, 120 00 Praha 2, Czech Republic
  mailto:[e-mail]    http://nic.cz/
  tel:[phone]       fax:[phone]
  -------------------------------------------