[secdir] Review of draft-ietf-tsvwg-ecn-experimentation-05

"Hilarie Orman" <hilarie@purplestreak.com> Wed, 13 September 2017 18:05 UTC

Return-Path: <hilarie@purplestreak.com>
X-Original-To: secdir@ietfa.amsl.com
Delivered-To: secdir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE1ED132403; Wed, 13 Sep 2017 11:05:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GXhzo1SPH2j8; Wed, 13 Sep 2017 11:05:44 -0700 (PDT)
Received: from out01.mta.xmission.com (out01.mta.xmission.com [166.70.13.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7FBE1320D9; Wed, 13 Sep 2017 11:05:44 -0700 (PDT)
Received: from in02.mta.xmission.com ([166.70.13.52]) by out01.mta.xmission.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.87) (envelope-from <hilarie@purplestreak.com>) id 1dsC2i-00021T-2U; Wed, 13 Sep 2017 12:05:44 -0600
Received: from [72.250.219.84] (helo=rumpleteazer.rhmr.com) by in02.mta.xmission.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.87) (envelope-from <hilarie@purplestreak.com>) id 1dsC2h-00019J-BE; Wed, 13 Sep 2017 12:05:43 -0600
Received: from rumpleteazer.rhmr.com (localhost [127.0.0.1]) by rumpleteazer.rhmr.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id v8DI4Qup014124; Wed, 13 Sep 2017 12:04:26 -0600
Received: (from hilarie@localhost) by rumpleteazer.rhmr.com (8.14.4/8.14.4/Submit) id v8DI4QUh014123; Wed, 13 Sep 2017 12:04:26 -0600
Date: Wed, 13 Sep 2017 12:04:26 -0600
Message-Id: <201709131804.v8DI4QUh014123@rumpleteazer.rhmr.com>
From: "Hilarie Orman" <hilarie@purplestreak.com>
Reply-To: "Hilarie Orman" <hilarie@purplestreak.com>
To: iesg@ietf.org, secdir@ietf.org
Cc: draft-ietf-tsvwg-ecn-experimentation.all@ietf.org
X-XM-SPF: eid=1dsC2h-00019J-BE; ; ; mid=<201709131804.v8DI4QUh014123@rumpleteazer.rhmr.com>; ; ; hst=in02.mta.xmission.com; ; ; ip=72.250.219.84; ; ; frm=hilarie@purplestreak.com; ; ; spf=none
X-XM-AID: U2FsdGVkX1+zvTGDAI+OST3RVikW/DFi
X-SA-Exim-Connect-IP: 72.250.219.84
X-SA-Exim-Mail-From: hilarie@purplestreak.com
X-Spam-DCC: XMission; sa04 1397; Body=1 Fuz1=1 Fuz2=1
X-Spam-Combo: ***;iesg@ietf.org, secdir@ietf.org
X-Spam-Relay-Country:
X-Spam-Timing: total 325 ms - load_scoreonly_sql: 0.04 (0.0%), signal_user_changed: 2.4 (0.7%), b_tie_ro: 1.63 (0.5%), parse: 0.72 (0.2%), extract_message_metadata: 2.8 (0.9%), get_uri_detail_list: 0.72 (0.2%), tests_pri_-1000: 2.8 (0.9%), tests_pri_-950: 1.18 (0.4%), tests_pri_-900: 0.99 (0.3%), tests_pri_-400: 15 (4.6%), check_bayes: 14 (4.2%), b_tokenize: 4.2 (1.3%), b_tok_get_all: 4.0 (1.2%), b_comp_prob: 1.74 (0.5%), b_tok_touch_all: 2.3 (0.7%), b_finish: 0.52 (0.2%), tests_pri_0: 292 (89.8%), check_dkim_signature: 0.45 (0.1%), check_dkim_adsp: 28 (8.6%), tests_pri_500: 6 (1.7%), rewrite_mail: 0.00 (0.0%)
X-SA-Exim-Version: 4.2.1 (built Thu, 05 May 2016 13:38:54 -0600)
X-SA-Exim-Scanned: Yes (on in02.mta.xmission.com)
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdir/rRr3KGCcrCd_KwZfuf3XrKuU95k>
Subject: [secdir] Review of draft-ietf-tsvwg-ecn-experimentation-05
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdir/>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Sep 2017 18:05:46 -0000

                     Security review of
         Explicit Congestion Notification (ECN) Experimentation
                draft-ietf-tsvwg-ecn-experimentation-05

Do not be alarmed.  I have reviewed this document as part of the
security directorate's ongoing effort to review all IETF documents
being processed by the IESG.  These comments were written primarily
for the benefit of the security area directors.  Document editors and
WG chairs should treat these comments just like any other last call
comments.

This document liberalizes the ways in which experiments can be
conducted on explicit congestion notification with TCP, RTP, and DCCP.

Other than the alarming statement:

   "... this memo places the
   responsibility for not breaking Internet congestion control on the
   experiments and the experimenters who propose them, as specified in
   Section 4.4."

there are no security considerations that occur to me.

I realize that people experiment with TCP modifications all the time,
and the ECN experiments can provide valuable engineering information.
Nonetheless, it seems that some higher standard of safety could be
in order for today's Internet.  But that is outside the scope of this
document.


Hilarie