Re: [sidr] wg adoption call for draft-ymbk-bgpsec-rtr-rekeying-00.txt

Samuel Weiler <weiler@watson.org> Wed, 28 March 2012 09:05 UTC

Return-Path: <weiler@watson.org>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9409D21F89C8 for <sidr@ietfa.amsl.com>; Wed, 28 Mar 2012 02:05:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.519
X-Spam-Level:
X-Spam-Status: No, score=-2.519 tagged_above=-999 required=5 tests=[AWL=0.080, BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bc1-MVdrALeI for <sidr@ietfa.amsl.com>; Wed, 28 Mar 2012 02:05:45 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by ietfa.amsl.com (Postfix) with ESMTP id D8A8421F89C2 for <sidr@ietf.org>; Wed, 28 Mar 2012 02:05:44 -0700 (PDT)
Received: from fledge.watson.org (localhost.watson.org [127.0.0.1]) by fledge.watson.org (8.14.4/8.14.4) with ESMTP id q2S95hpY030498 for <sidr@ietf.org>; Wed, 28 Mar 2012 05:05:43 -0400 (EDT) (envelope-from weiler@watson.org)
Received: from localhost (weiler@localhost) by fledge.watson.org (8.14.4/8.14.4/Submit) with ESMTP id q2S95hJ5030494 for <sidr@ietf.org>; Wed, 28 Mar 2012 05:05:43 -0400 (EDT) (envelope-from weiler@watson.org)
X-Authentication-Warning: fledge.watson.org: weiler owned process doing -bs
Date: Wed, 28 Mar 2012 05:05:43 -0400
From: Samuel Weiler <weiler@watson.org>
To: "sidr@ietf.org" <sidr@ietf.org>
In-Reply-To: <24B20D14B2CD29478C8D5D6E9CBB29F60F6C0E99@Hermes.columbia.ads.sparta.com>
Message-ID: <alpine.BSF.2.00.1203280457250.24782@fledge.watson.org>
References: <24B20D14B2CD29478C8D5D6E9CBB29F60F6C0E99@Hermes.columbia.ads.sparta.com>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.3 (fledge.watson.org [127.0.0.1]); Wed, 28 Mar 2012 05:05:43 -0400 (EDT)
Subject: Re: [sidr] wg adoption call for draft-ymbk-bgpsec-rtr-rekeying-00.txt
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 28 Mar 2012 09:05:45 -0000

Have read and support adoption.  I like the general idea.  I don't 
have comments on the particular wrappings chosen.

Minor comments:

It might be better to not specify the cryptosuite(s) in use -- aren't 
those documented in draft-ietf-sidr-bgpsec-algs?  (ECDSA is named in 
sections 1 and 4.)

The current security considerations section seems applicable only to 
the operator-generated model.  You might want to say something about 
the other model.  And for the operator-generated model, you may want 
to add a (flip) comment about transport security being "keep your hand 
on the USB key".  This almost looks like a use for Resurrecting 
Duckling keying methods.

-- Sam