Re: [tcpm] Feedback request on draft-ietf-tcpm-tcp-security

["Eddy, Wesley M. (GRC-MS00)[ASRC AEROSPACE CORP]" <[e-mail]>]

I don't know if you've read the document under discussion, but it already includes a reference to the CPNI security assessment you mention including a reference to, and this reference immediately follows the text I suggested clarifying to identify TCPM as the document source.

My suggestion was to put a sentence in that makes the context of the document clear, as a TCPM product, with recommendations that have been reviewed by TCPM.  It shouldn't be controversial that the WG takes ownership of a WG product.


________________________________________
From: [e-mail] [[e-mail]]
Sent: Monday, March 01, 2010 6:23 PM
To: Eddy, Wesley M. (GRC-MS00)[ASRC AEROSPACE CORP]
Cc: [e-mail]; [e-mail]; [e-mail]
Subject: Re: [tcpm] Feedback request on draft-ietf-tcpm-tcp-security

On 1 Mar 2010, at 06:23, Eddy, Wesley M. (GRC-MS00)[ASRC AEROSPACE CORP] wrote:

> The paragraph beginning with "This document is the result of a security assessment of the IETF specifications of the Transmission Control Protocol (TCP), from a security point of view.  Possible threats are identified and, where possible, countermeasures are proposed." should be replaced with something to the effect of "This document captures the best current practices in implementation, configuration, and use of TCP and its supporting protocols and extensions and has been produced by the IETF's TCP Maintenance and Minor Extensions Working Group (TCPM)."

Surely, "has been roadblocked and nitpicked to death at every possible opportunity by the TCP Maintenance and Minor Extensions Working Group (TCPM), so that this document is a shadow of its former self, but has now been edited and reworked sufficiently to give TCPM the necessary sense of ownership, dominance and authorship to permit the document to proceed." ?

This group's work is no longer about TCP, but about bad document re-re-re-re-re-writing; not something I'd have the patience for, and if I was the primary originating author I'd have moved on to more satisfying things long ago.

Sorry, I'm with Alfred. His assessment of this group is correct.

I'd insist on including a reference to the original CPNI security assessment document.

L.

Lloyd Wood
[e-mail]
http://sat-net.com/L.Wood