Re: [sidr] Gen-ART review of draft-ietf-sidr-bgpsec-threats-06

Stephen Kent <kent@bbn.com> Tue, 01 October 2013 21:08 UTC

Return-Path: <kent@bbn.com>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E43011E8153; Tue, 1 Oct 2013 14:08:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.999
X-Spam-Level:
X-Spam-Status: No, score=-103.999 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qOAmBccKHKGr; Tue, 1 Oct 2013 14:08:01 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id B9CE611E8211; Tue, 1 Oct 2013 14:07:51 -0700 (PDT)
Received: from dhcp89-089-218.bbn.com ([128.89.89.218]:51374) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1VR7AO-000E1G-W6; Tue, 01 Oct 2013 17:07:37 -0400
Message-ID: <524B3998.20009@bbn.com>
Date: Tue, 01 Oct 2013 17:07:36 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: "Black, David" <david.black@emc.com>
References: <8D3D17ACE214DC429325B2B98F3AE712025DBB6FDA@MX15A.corp.emc.com> <5249BE21.4060702@bbn.com> <8D3D17ACE214DC429325B2B98F3AE712025DBB7B41@MX15A.corp.emc.com>
In-Reply-To: <8D3D17ACE214DC429325B2B98F3AE712025DBB7B41@MX15A.corp.emc.com>
Content-Type: multipart/alternative; boundary="------------000001030905070006060701"
Cc: "sidr@ietf.org" <sidr@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "General Area Review Team (gen-art@ietf.org)" <gen-art@ietf.org>
Subject: Re: [sidr] Gen-ART review of draft-ietf-sidr-bgpsec-threats-06
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Oct 2013 21:08:14 -0000

David,

Since this doc logically precedes the BGPsec design, I still think it's 
appropriate to
use PATHSEC here. But, we can add a sentence to connect the terms. I 
propose this modified text for the introduction:

*This document describes the security context in which PATHSEC is 
intended to operate. **(The term "PATHSEC" is employed in this document 
to refer to any design used to achieve the path security goal**described 
in the **SIDR WG charter. **The charter focuses on mechanisms**that will 
enable an AS to determine if the AS_path represented in a 
route**represents the path via which the NLRI traveled. Other SIDR 
documents use
the term "BGPsec" to refer to a specific design.) ...
*
The phrase "calls for" seems appropriate in the cache discussion. There 
is no MUST in the RFCs about using a local cache. The docs encourage RPs 
to maintain a local cache,
and 6481 states that not using one is "NOT RECOMMENDED."  All of the RP 
software of which
I am aware does so, but it is not an absolute requirement.

I think we've agreed that quoted is a static assertion and thus need not be
annotated to reflect more recent RFCs.

Steve