Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.600.51.1.1\))
From: Suresh Krishnan <suresh.krishnan@gmail.com>
In-Reply-To: 
 <177913349668.557208.2581503410373976317@dt-datatracker-7688897f84-l74h4>
Date: Fri, 29 May 2026 22:39:50 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <DB88EDDE-48A0-4FEA-9A9E-933860B15D19@gmail.com>
References: 
 <177913349668.557208.2581503410373976317@dt-datatracker-7688897f84-l74h4>
To: Alvaro Retana <aretana.ietf@gmail.com>
Message-ID-Hash: XGQIIKEOX7AR6JQ5TR24RRWUMKHDL6T5
CC: draft-ietf-spring-srv6-security@ietf.org, spring-chairs@ietf.org,
 spring@ietf.org, zali@cisco.com, srv6ops@ietf.org, ipv6@ietf.org
Precedence: list
Subject: =?utf-8?q?=5BSRv6OPS=5D_Re=3A_=5Bspring=5D_Second_WG_Last_Call=3A_draft-ietf?=
 =?utf-8?q?-spring-srv6-security-14_=28Ends_2026-06-02=29?=
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/srv6ops/qENMXP4tV_Jzj-Kxu1T2R77O990>

Hi chairs/authors,
  Thank you for your hard work on this important document. I have =
reviewed draft-ietf-spring-srv6-security-14 and I think it is ready to =
progress further in the IETF process. I do have some minor comments that =
you may want to address

* Section 6.1.

This sentence is missing a verb and does not read right. Suggest =
rewording to

OLD:
While it is possible for packet manipulation and processing attacks =
against all the fields of the IPv6 header and its extension headers, =
this document limits itself to the IPv6 header and the SRH.

NEW:
While packet manipulation and processing attacks are possible against =
all the fields of the IPv6 header and its extension headers, this =
document limits itself to attacks on the IPv6 header and the SRH.

* Section 6.2.1.1.

This sentence is a bit confusing. Suggest rewording=20

OLD:
However, it facilitates more complex on-path attacks by redirecting =
traffic to another node that the attacker has access to with more =
processing resources.

NEW:
However, it facilitates more complex on-path attacks by redirecting =
traffic to another node, with more processing resources, that the =
attacker has access to.

* Section 8.1.

Not sure what "take care of=E2=80=9D means here? I would suggest using =
=E2=80=9Chandle=E2=80=9D or =E2=80=9Cinspect=E2=80=9D depending on what =
you intend to say here.

Regards
Suresh

> On May 18, 2026, at 3:44=E2=80=AFPM, Alvaro Retana via Datatracker =
<noreply@ietf.org> wrote:
>=20
> This message starts a Second WG Last Call for:
> draft-ietf-spring-srv6-security-14
>=20
> This Working Group Last Call ends on 2026-06-02
>=20
> Abstract:
>   SRv6 is a traffic engineering, encapsulation and steering mechanism
>   utilizing IPv6 addresses to identify segments in a pre-defined
>   policy.  This document discusses security considerations in SRv6
>   networks, including the potential threats and the possible =
mitigation
>   methods.  The document does not define any new security protocols or
>   extensions to existing protocols.
>=20
> File can be retrieved from:
>=20
> Please review and indicate your support or objection to proceed with =
the
> publication of this document by replying to this email keeping
> spring@ietf.org in copy. Objections should be explained and =
suggestions to
> resolve them are highly appreciated.
>=20
> Authors, and WG participants in general, are reminded of the =
Intellectual
> Property Rights (IPR) disclosure obligations described in BCP 79 [1].
> Appropriate IPR disclosures required for full conformance with the =
provisions
> of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
> Sanctions available for application to violators of IETF IPR Policy =
can be
> found at [3].
>=20
> Thank you.
>=20
> [1] https://datatracker.ietf.org/doc/bcp78/
> [2] https://datatracker.ietf.org/doc/bcp79/
> [3] https://datatracker.ietf.org/doc/rfc6701/
>=20
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-spring-srv6-security/
>=20
> There is also an HTML version available at:
> =
https://www.ietf.org/archive/id/draft-ietf-spring-srv6-security-14.html
>=20
> A diff from the previous version is available at:
> =
https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-spring-srv6-securit=
y-14
>=20
> _______________________________________________
> spring mailing list -- spring@ietf.org
> To unsubscribe send an email to spring-leave@ietf.org