[spring] Re: [SRv6OPS] Second WG Last Call: draft-ietf-spring-srv6-security-14(Ends 2026-06-02)
chengweiqiang <chengweiqiang@chinamobile.com> Sat, 30 May 2026 01:44 UTC
Return-Path: <chengweiqiang@chinamobile.com>
X-Original-To: spring@mail2.ietf.org
Delivered-To: spring@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C6C06F7D5253; Fri, 29 May 2026 18:44:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1780105460; bh=BudwxRcv5e82E5NHON2Zhvr5idQAGhO+vodgyGoXdbY=; h=Date:From:To:Cc:Subject; b=ecOiiOlFmFBKhSfOFj2aefWV0OGyTeJiwcmbIBcAnaSrP4ixzHNjOf5Gj1O4MXcxt NsKy2YamcHta1Nd4/dHvVKTPNSALy6MzhrGgrthhdYFE/SZl1IZt8zLtnAimovrOa9 yxpXnjuwq1Qt3b4iZ9OGx2syNHG2GbcyhvmtxDu8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.697
X-Spam-Level:
X-Spam-Status: No, score=-1.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=chinamobile.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eMJZl3udOSHn; Fri, 29 May 2026 18:44:19 -0700 (PDT)
Received: from cmccmta8.chinamobile.com (cmccmta8.chinamobile.com [111.22.67.151]) by mail2.ietf.org (Postfix) with ESMTP id E28AAF7D4FEE; Fri, 29 May 2026 18:42:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chinamobile.com; s=default; l=0; h=from:subject:message-id:to:cc:mime-version; bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=; b=KGzpbJaHsCx0vh3y3F6+hqcwmFoD3UeMw3uzN6Ld+wTDo4iTTdy8gEDfMN6oIsLE0ndSz5QPU5Rh6 dhGvvvG7pr1PTMoZG+IRMwJN04l6AdVsu02fBcUC278iJKZ6RusLT3rTeGnLZPtvhWDCLSDiAwFEnz ntPEAZUsrloAATGg=
X-RM-TagInfo: emlType=0
X-RM-SPAM-FLAG: 00000000
Received: from spf.mail.chinamobile.com (unknown[10.188.0.87]) by rmmx-syy-dmz-app06-12006 (RichMail) with SMTP id 2ee66a1a40a2e3d-3684f; Sat, 30 May 2026 09:42:58 +0800 (CST)
X-RM-TRANSID: 2ee66a1a40a2e3d-3684f
X-RM-SPAM-FLAG: 00000000
Received: from chengweiqiang@chinamobile.com ( [10.188.78.84] ) by ajax-webmail-syy-spmd01-11011 (Richmail) with HTTP; Sat, 30 May 2026 09:42:57 +0800 (CST)
Date: Sat, 30 May 2026 09:42:57 +0800
From: chengweiqiang <chengweiqiang@chinamobile.com>
To: buraglio <buraglio@forwardingplane.net>
Message-ID: <2b036a1a3dfc98b-00004.Richmail.00000022464011967486@chinamobile.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_47867_899940579.1780105377374"
X-Priority: 3
X-RM-TRANSID: 2b036a1a3dfc98b-00004
X-RM-OA-ENC-TYPE: 0
X-RM-FontColor: 0
X-CLIENT-INFO: X-TIMING=0&X-MASSSENT=0&X-SENSITIVE=0
X-Mailer: Richmail_Webapp(V2.5.01)
Message-ID-Hash: L7HQPXJ7FXQ2J5CW2Y6CFLXG75UYZGH7
X-Message-ID-Hash: L7HQPXJ7FXQ2J5CW2Y6CFLXG75UYZGH7
X-MailFrom: chengweiqiang@chinamobile.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-spring.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "aretana.ietf" <aretana.ietf@gmail.com>, draft-ietf-spring-srv6-security <draft-ietf-spring-srv6-security@ietf.org>, spring-chairs <spring-chairs@ietf.org>, spring <spring@ietf.org>, zali <zali@cisco.com>, srv6ops <srv6ops@ietf.org>, ipv6 <ipv6@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [spring] Re: [SRv6OPS] Second WG Last Call: draft-ietf-spring-srv6-security-14(Ends 2026-06-02)
List-Id: "Source Packet Routing in NetworkinG (SPRING)" <spring.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/5514uZzN_8AonP5U24Bpx0IeG3A>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Owner: <mailto:spring-owner@ietf.org>
List-Post: <mailto:spring@ietf.org>
List-Subscribe: <mailto:spring-join@ietf.org>
List-Unsubscribe: <mailto:spring-leave@ietf.org>
Thanks for your reply – sounds good to me. B.R. Weiqiang ---原始邮件--- 发件人: Nick Buraglio <buraglio@forwardingplane.net> 发送时间: 2026-05-30 05:47:51 收件人: Weiqiang Cheng <chengweiqiang@chinamobile.com> 抄送: Alvaro Retana <aretana.ietf@gmail.com> draft-ietf-spring-sr <draft-ietf-spring-srv6-security@ietf.org> "spring-chairs@ietf.o" <spring-chairs@ietf.org> "spring@ietf.org" <spring@ietf.org> "zali@cisco.com" <zali@cisco.com> "srv6ops@ietf.org" <srv6ops@ietf.org> "ipv6@ietf.org" <ipv6@ietf.org> 主题: Re: [SRv6OPS] Second WG Last Call: draft-ietf-spring-srv6-security-14(Ends 2026-06-02) On Tue, May 19, 2026 at 11:53PM Weiqiang Cheng <chengweiqiang@chinamobile.com> wrote: Hi, I have reviewed the draft and support its publication. Two minor comments to help define scope earlier: Section 2 could note that inter-SR-domain scenarios are out of scope (as already stated in Section 4). The point that SRv6 inherits IPv6 vulnerabilities but that this is out of scope (currently in Section 6.2.4) could also be mentioned in Section 2 or the introduction. How does this sound? OLD: We note that SRv6 is under active development and, as such, the above documents might not cover all protocols employed in an SRv6 deployment. NEW: Inter-Domain Segment Routing scenarios are out of scope for this document as are existing and future protocol specific IPv6 vulnerabilities. Additionally, we note that SRv6 is under active development and, as such, the above documents might not cover all protocols employed in an SRv6 deployment. We can leave the existing statements further in the document unless the WG feels that they are unnecessary. This would help readers understand the document’s boundaries from the start. Best Regards, Weiqiang -----Original Message-----From: Alvaro Retana via Datatracker <noreply@ietf.org> Sent: Tuesday, May 19, 2026 3:45 AMTo: draft-ietf-spring-srv6-security@ietf.org spring-chairs@ietf.org spring@ietf.org zali@cisco.comCc: srv6ops@ietf.org ipv6@ietf.orgSubject: [spring] Second WG Last Call: draft-ietf-spring-srv6-security-14 (Ends 2026-06-02)This message starts a Second WG Last Call for:draft-ietf-spring-srv6-security-14This Working Group Last Call ends on 2026-06-02Abstract: SRv6 is a traffic engineering, encapsulation and steering mechanism utilizing IPv6 addresses to identify segments in a pre-defined policy. This document discusses security considerations in SRv6 networks, including the potential threats and the possible mitigation methods. The document does not define any new security protocols or extensions to existing protocols.File can be retrieved from:Please review and indicate your support or objection to proceed with the publication of this document by replying to this email keeping spring@ietf.org in copy. Objections should be explained and suggestions to resolve them are highly appreciated.Authors, and WG participants in general, are reminded of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [1].Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.Sanctions available for application to violators of IETF IPR Policy can be found at [3].Thank you.[1] https://datatracker.ietf.org/doc/bcp78/[2] https://datatracker.ietf.org/doc/bcp79/[3] https://datatracker.ietf.org/doc/rfc6701/The IETF datatracker status page for this Internet-Draft is:https://datatracker.ietf.org/doc/draft-ietf-spring-srv6-security/There is also an HTML version available at:https://www.ietf.org/archive/id/draft-ietf-spring-srv6-security-14.htmlA diff from the previous version is available at:https://author-tools.ietf.org/iddiff?url2=draft-ietf-spring-srv6-security-14_______________________________________________spring mailing list -- spring@ietf.orgTo unsubscribe send an email to spring-leave@ietf.org_______________________________________________SRv6OPS mailing list -- srv6ops@ietf.orgTo unsubscribe send an email to srv6ops-leave@ietf.orgSubject:[SRv6OPS] Re: [spring] Second WG Last Call: draft-ietf-spring-srv6-security-14 (Ends 2026-06-02)I support the WGLC. This is an important work for SRv6.Thanks to the authors.Cheng-----Original Message-----From: Alvaro Retana via Datatracker <noreply@ietf.org> Sent: Tuesday, May 19, 2026 3:45 AMTo: draft-ietf-spring-srv6-security@ietf.org spring-chairs@ietf.org spring@ietf.org zali@cisco.comCc: srv6ops@ietf.org ipv6@ietf.orgSubject: [spring] Second WG Last Call: draft-ietf-spring-srv6-security-14 (Ends 2026-06-02)This message starts a Second WG Last Call for:draft-ietf-spring-srv6-security-14This Working Group Last Call ends on 2026-06-02Abstract: SRv6 is a traffic engineering, encapsulation and steering mechanism utilizing IPv6 addresses to identify segments in a pre-defined policy. This document discusses security considerations in SRv6 networks, including the potential threats and the possible mitigation methods. The document does not define any new security protocols or extensions to existing protocols.File can be retrieved from:Please review and indicate your support or objection to proceed with the publication of this document by replying to this email keeping spring@ietf.org in copy. Objections should be explained and suggestions to resolve them are highly appreciated.Authors, and WG participants in general, are reminded of the Intellectual Property Rights (IPR) disclosure obligations described in BCP 79 [1].Appropriate IPR disclosures required for full conformance with the provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.Sanctions available for application to violators of IETF IPR Policy can be found at [3].Thank you.[1] https://datatracker.ietf.org/doc/bcp78/[2] https://datatracker.ietf.org/doc/bcp79/[3] https://datatracker.ietf.org/doc/rfc6701/The IETF datatracker status page for this Internet-Draft is:https://datatracker.ietf.org/doc/draft-ietf-spring-srv6-security/There is also an HTML version available at:https://www.ietf.org/archive/id/draft-ietf-spring-srv6-security-14.htmlA diff from the previous version is available at:https://author-tools.ietf.org/iddiff?url2=draft-ietf-spring-srv6-security-14_______________________________________________spring mailing list -- spring@ietf.orgTo unsubscribe send an email to spring-leave@ietf.org_______________________________________________SRv6OPS mailing list -- srv6ops@ietf.orgTo unsubscribe send an email to srv6ops-leave@ietf.org
- [spring] Re: [SRv6OPS] Second WG Last Call: draft… chengweiqiang