Re: [Sidrops] Robert Wilton's No Objection on draft-ietf-sidrops-ov-egress-02: (with COMMENT)

[Randy Bush <[e-mail]>]

> 1) In the first sentence of the introduction: Is it really correct that the
> "This document does not change semantics of [RFC6811] RPKI-based origin
> validation"?  Given that the 4th paragraph in the introduction then states that
> "This document clarifies ..."

the document adds, not modifies.

> 2) I wasn't entirely sure that section 2 (Suggested Reading) is
> required at all, given that this is effectively what section 8.1 and
> 8.2 is listing anyway, but equally I'm okay if the section is left in.

yes, the Suggested Reading kinda duplicates many References.  yet we
still get requests to enumerate all the bgp features which modify AS
and other disgusting bgp knobs.  it was hoped that a bit of rtfm would
help.  there is an underlying problem that there are many knobs which
are not in rfcs; and it is not clear that they are even enumerable.

> 3) The security section is terse, and I agree that this doesn't introduce any
> new security issues.  But I was wondering if the purpose of this clarification
> is to improve security with more reliable filtering, and if so, would it be
> helpful to have a sentence in the security section that states that?

   This document does not create security considerations beyond those of
   [RFC6811] and [RFC8481].  By facilitating more correct validation, it
   attempts to improve BGP reliability.

i hesitated to say increses 'security', as origin validation is more
accident reduction than a real security mechanism.  this distinction is
too oft misunderstood.
 
> 1) In the first sentence of the introduction "of [RFC6811] of RPKI-based origin
> validation" -> "of [RFC6811] RPKI-based origin validation"?

actually, i looked at the title of 6811, and <blush>  the text is now

    [RFC6811], BGP prefix origin validation.

thanks!

randy