IETF Logo Mail Archive

[sfc] TR: New Version Notification for draft-rebo-sfc-nsh-integrity-01.txt

<mohamed.boucadair@orange.com> Mon, 04 November 2019 15:56 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: sfc@ietfa.amsl.com
Delivered-To: sfc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6680120A33 for <sfc@ietfa.amsl.com>; Mon, 4 Nov 2019 07:56:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bJlWRnEaL2ax for <sfc@ietfa.amsl.com>; Mon, 4 Nov 2019 07:56:39 -0800 (PST)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.70.34]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A784C120A1C for <sfc@ietf.org>; Mon, 4 Nov 2019 07:56:38 -0800 (PST)
Received: from opfednr03.francetelecom.fr (unknown [xx.xx.xx.67]) by opfednr23.francetelecom.fr (ESMTP service) with ESMTP id 476HTx3KhJz5wZF; Mon, 4 Nov 2019 16:56:37 +0100 (CET)
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.82]) by opfednr03.francetelecom.fr (ESMTP service) with ESMTP id 476HTx322vzDq7J; Mon, 4 Nov 2019 16:56:37 +0100 (CET)
Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM5E.corporate.adroot.infra.ftgroup ([::1]) with mapi id 14.03.0468.000; Mon, 4 Nov 2019 16:56:37 +0100
From: mohamed.boucadair@orange.com
To: "sfc@ietf.org" <sfc@ietf.org>
CC: "Konda, Tirumaleswar Reddy (TirumaleswarReddy_Konda@McAfee.com)" <TirumaleswarReddy_Konda@McAfee.com>
Thread-Topic: New Version Notification for draft-rebo-sfc-nsh-integrity-01.txt
Thread-Index: AQHVkycEzZ5lKVBtyEerRla+vFxRYqd7KCSQ
Date: Mon, 04 Nov 2019 15:56:36 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B93303134D9F2@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <157288238359.16503.4915397025250194299.idtracker@ietfa.amsl.com>
In-Reply-To: <157288238359.16503.4915397025250194299.idtracker@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.245]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/sfc/J-gCanaXGzpla93PFDkVJrCxVy8>
Subject: [sfc] TR: New Version Notification for draft-rebo-sfc-nsh-integrity-01.txt
X-BeenThere: sfc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Service Chaining <sfc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sfc>, <mailto:sfc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sfc/>
List-Post: <mailto:sfc@ietf.org>
List-Help: <mailto:sfc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sfc>, <mailto:sfc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Nov 2019 15:56:41 -0000

Hi all, 

This new version integrates the comments we received offline. The main changes are: 

* Clarify why we don't encrypt the base and service path headers
* Clarify that all metadata is integrity protected
* Clarify that the Base header may (or not) be covered by integrity protection. Both schemes are discussed with trade-offs called out.
* Updated the solution overview to provide a big picture view. 

A detailed diff can be found at: https://www.ietf.org/rfcdiff?url2=draft-rebo-sfc-nsh-integrity-01 

Please review and share your comments. 

Cheers,
Tiru & Med 

> -----Message d'origine-----
> De : internet-drafts@ietf.org [mailto:internet-drafts@ietf.org]
> Envoyé : lundi 4 novembre 2019 16:46
> À : Reddy K; Tirumaleswar Reddy; BOUCADAIR Mohamed TGI/OLN
> Objet : New Version Notification for draft-rebo-sfc-nsh-integrity-01.txt
> 
> 
> A new version of I-D, draft-rebo-sfc-nsh-integrity-01.txt
> has been successfully submitted by Mohamed Boucadair and posted to the
> IETF repository.
> 
> Name:		draft-rebo-sfc-nsh-integrity
> Revision:	01
> Title:		Integrity Protection for Network Service Header (NSH) and
> Encryption of Sensitive Metadata
> Document date:	2019-11-04
> Group:		Individual Submission
> Pages:		21
> URL:            https://www.ietf.org/internet-drafts/draft-rebo-sfc-nsh-
> integrity-01.txt
> Status:         https://datatracker.ietf.org/doc/draft-rebo-sfc-nsh-
> integrity/
> Htmlized:       https://tools.ietf.org/html/draft-rebo-sfc-nsh-integrity-01
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-rebo-sfc-nsh-
> integrity
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-rebo-sfc-nsh-
> integrity-01
> 
> Abstract:
>    This specification adds integrity protection and optional encryption
>    directly to Network Service Headers (NSH) used for Service Function
>    Chaining (SFC).
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of
> submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat

v2.23.0 | Report a Bug | By Email