Re: [secdir] secdir review of draft-ietf-sipcore-keep-10.txt

[Christer Holmberg <[e-mail]>]

Hi Juergen,

Thanks for your comments! I will do the changes as suggested.

Regards,

Christer
 

> -----Original Message-----
> From: Juergen Schoenwaelder 
> [mailto:[e-mail]] 
> Sent: 21. joulukuuta 2010 10:55
> To: [e-mail]; [e-mail]; 
> [e-mail]
> Subject: secdir review of draft-ietf-sipcore-keep-10.txt
> 
> I have reviewed this document as part of the security 
> directorate's ongoing effort to review all IETF documents 
> being processed by the IESG.  These comments were written 
> primarily for the benefit of the security area directors.  
> Document editors and WG chairs should treat these comments 
> just like any other last call comments.
> 
> This document discusses how to negotiate the usage of 
> keep-alive messages using a new SIP "keep" Via header field. 
> The document appears to be well worked out and the security 
> considerations seem to be adequate. I spotted to mostly 
> editorial nits in the security
> considerations:
> 
> a) [...]  This specification does not specify a connection
>    reuse mechanism, and it does it address security issues related to
>    connection reuse.  [...]
> 
>    s/it does it/it does not/
> 
> b) [...]  They do not instruct the enity to
>    place a value in a "keep" parameter of any request it 
> forwards.  [...]
> 
>    s/enity/entity/
> 
> /js
> 
> -- 
> Juergen Schoenwaelder           Jacobs University Bremen gGmbH
> Phone: [phone]         Campus Ring 1, 28759 Bremen, Germany
> Fax:   [phone]         <http://www.jacobs-university.de/>
>