[spring] draft-ietf-spring-srv6-security-16 ietf last call Secdir review

Christian Huitema via Datatracker <noreply@ietf.org> Mon, 14 September 2026 23:17 UTC

Received: by mx.ietf.org (Postfix) id 448AC5A; Mon, 14 Sep 2026 23:17:49 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ietf.org; s=mail; t=1789427869; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=QmG6kr9U2DdZ8ZEYB0r+jUgr5wRXMLnHMhUj20PRlx4=; b=ei4eAMy9bBHJsonUvRvmH/UmMgLP8TrIPy5fyzN1vcMAw0Qkrues3heQdTbYYaYBN0RGbJ D/do0Fg30UiQHJWbYRPqkGf/ALCo6Epz74K0hTuasQAPpD69Zw8TqJ27zLcKIfhZYhDDjR J4cd9ssVuzxRrDc+0tSbmVmDSQh4X1k=
Authentication-Results: ORIGINATING; auth=pass smtp.auth=mail2@ietf.org smtp.mailfrom=noreply@ietf.org
Received: from [10.244.8.113] (gaia.k8s.ietf.org [4.156.85.76]) by mail2.ietf.org (Postfix) with ESMTP id 0FB901395C34E; Mon, 14 Sep 2026 16:17:49 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Christian Huitema via Datatracker <noreply@ietf.org>
To: secdir@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 12.75.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <178942786894.751907.1186485228037299796@dt-datatracker-597c8c8754-4t7c8>
Date: Mon, 14 Sep 2026 16:17:48 -0700
Message-ID-Hash: HQ4YTVATOUBTKXPBSLLPAUPSJRIKW2ZS
X-Message-ID-Hash: HQ4YTVATOUBTKXPBSLLPAUPSJRIKW2ZS
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-spring.ietf.org-0; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-spring-srv6-security.all@ietf.org, last-call@ietf.org, spring@ietf.org
X-Mailman-Version: 3.3.10
Reply-To: Christian Huitema <huitema@huitema.net>
Subject: [spring] draft-ietf-spring-srv6-security-16 ietf last call Secdir review
List-Id: "Source Packet Routing in NetworkinG (SPRING)" <spring.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/spring/tD7ZAnzJCWlGM2fq5fOSDPUTk0c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spring>
List-Help: <mailto:spring-request@ietf.org?subject=help>
List-Owner: <mailto:spring-owner@ietf.org>
List-Post: <mailto:spring@ietf.org>
List-Subscribe: <mailto:spring-join@ietf.org>
List-Unsubscribe: <mailto:spring-leave@ietf.org>

Document: draft-ietf-spring-srv6-security
Title: Segment Routing IPv6 Security Considerations
Reviewer: Christian Huitema
Review result: Ready

I previously reviewed version 11 of this draft. As I wrote then, I liked this
document a lot, and I still do. I have reviewed the changes from draft 11. They
make the document easier to read, update the references to their more recent
values, and add precision in some case. I liked the addition of a summary of
mitigations in section 7.7.

Just one tiny nit in section 7.1.2. Shouldn't the text starting with
"Therefore, filtering" be in its own paragraph instead of continuing the 2nd
bullet point?

Overall, a very good document. Publish it!