Re: [sidr] WGLC: draft-ietf-sidr-bgpsec-reqs

Christopher Morrow <morrowc.lists@gmail.com> Mon, 14 April 2014 14:46 UTC

Return-Path: <christopher.morrow@gmail.com>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 657AF1A044B for <sidr@ietfa.amsl.com>; Mon, 14 Apr 2014 07:46:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.101
X-Spam-Level:
X-Spam-Status: No, score=-0.101 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v1JU3OckN4H0 for <sidr@ietfa.amsl.com>; Mon, 14 Apr 2014 07:46:48 -0700 (PDT)
Received: from mail-la0-x232.google.com (mail-la0-x232.google.com [IPv6:2a00:1450:4010:c03::232]) by ietfa.amsl.com (Postfix) with ESMTP id 53F991A03E7 for <sidr@ietf.org>; Mon, 14 Apr 2014 07:46:48 -0700 (PDT)
Received: by mail-la0-f50.google.com with SMTP id pv20so5747291lab.37 for <sidr@ietf.org>; Mon, 14 Apr 2014 07:46:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=mgc1LYhNzCYZnDJV5ig0PZrJV5VeRixZ7JYU0l4UGW4=; b=Xab6kyxVIDjXrW8qmQzpFnXOnZREALA9H6LA3Zz62n3PcR9QSc3gO1N+bXK8UwZguC GiM/SetiLEndSW1J5CCQ16UgHYO0z8efyEwsyUzxqlTMMboAfMbrr0a0XGHEwYBaCnbK ejtalXRSN5PlOPLUvHZ7AjZFOK9OS0CGYm4zOWu8r3p3jz8jriR3qxYIme/eHekIUJf2 KE+L574R4PNN5pG+6q6Xtiw73VyBLsbj695I/8SCMtt50tx3QsIXZSAj8mR3CdLOPxqp 6YFJGkFryVmyQMC70FMDTfmq5z+LnFXs/Qxvb7IyoSQqOpBXrI47Kx57bTfgvfFkEsF8 3T5w==
MIME-Version: 1.0
X-Received: by 10.152.37.137 with SMTP id y9mr29594062laj.8.1397486805150; Mon, 14 Apr 2014 07:46:45 -0700 (PDT)
Sender: christopher.morrow@gmail.com
Received: by 10.152.45.196 with HTTP; Mon, 14 Apr 2014 07:46:45 -0700 (PDT)
In-Reply-To: <m2iosq8f9e.wl%randy@psg.com>
References: <52D072F6.9030304@ops-netman.net> <52D0A0AC.5040903@ops-netman.net> <CF07E61E.AF86%wesley.george@twcable.com> <m238kcea01.wl%randy@psg.com> <CF0BE8F1.B1BE%wesley.george@twcable.com> <m2a9ehjto3.wl%randy@psg.com> <52E92B20.9060505@bbn.com> <CAL9jLaapjPL0_OU8-L0U5BiLXPPoEhkCZym=7R_qDDLSobKVjA@mail.gmail.com> <m2iosq8f9e.wl%randy@psg.com>
Date: Mon, 14 Apr 2014 10:46:45 -0400
X-Google-Sender-Auth: T1Go49y8hDUn5ZwZGdp6AnVQL1U
Message-ID: <CAL9jLab5=JNbPRMji7xWWCR_+QLRpbguShU7K_Uu56jYxKymZw@mail.gmail.com>
From: Christopher Morrow <morrowc.lists@gmail.com>
To: Randy Bush <randy@psg.com>
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/sidr/3CcsDCCJTQjgKs0lRKQ2Q53Jomo
Cc: "sidr@ietf.org" <sidr@ietf.org>
Subject: Re: [sidr] WGLC: draft-ietf-sidr-bgpsec-reqs
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Apr 2014 14:46:53 -0000

coming back to this discussion...

On Fri, Feb 7, 2014 at 10:17 PM, Randy Bush <randy@psg.com> wrote:
> perhaps people should use a dictionary and look up "per se."

(from dictionary.com, or wherever bing.com 'define per se' comes from)
per se
1. by or in itself or themselves; intrinsically.

so, as I read the original:

  "As noted in the threat model, [I-D.ietf-sidr-bgpsec-threats], this
   work is limited to threats to the BGP protocol.  Issues of business
   relationship conformance, of which routing 'leaks' are a subset,
   while quite important to operators (as are many other things), are
   not security issues per se, and are outside the scope of this
   document.  It is hoped that these issues will be better understood in
   the future."

I could easily replace per se with 'intrinsically' like:
  "As noted in the threat model, [I-D.ietf-sidr-bgpsec-threats], this
   work is limited to threats to the BGP protocol.  Issues of business
   relationship conformance, of which routing 'leaks' are a subset,
   while quite important to operators (as are many other things), are
   not intrinsically security issues, and are outside the scope of this
   document.  It is hoped that these issues will be better understood in
   the future."


Is there a reason to keep the mention of route-leaks in this document?
Could we go with:

  "As noted in the threat model, [I-D.ietf-sidr-bgpsec-threats], this
   work is limited to threats to the BGP protocol.  Issues of business
   relationship conformance, while quite important to operators, are
   not security issues per se, and are outside the scope of this
   document.  It is hoped that these issues will be better understood in
   the future."

I think this was in line with warren's suggestion, which wes agreed
with as did stephen kent. This seems ok to me as well... I'd like to
close the discussion sooner rather than later and send out a
publication request.

-chris