[Teas] Paul Wouters' No Objection on draft-ietf-teas-enhanced-vpn-19: (with COMMENT)

[Paul Wouters via Datatracker <[e-mail]>]

Paul Wouters has entered the following ballot position for
draft-ietf-teas-enhanced-vpn-19: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-teas-enhanced-vpn/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------


"Enhanced VPNS" can be easily confused for EVPN / Ethernet VPN ? The
term is also sometimes capitalized and sometimes not, making it look
like a formal term and sometimes like an informal description. Why
not avoid using the word enhanced and call it "NRP VPN" ?

       [RFC9543] discusses the general framework, components, and interfaces for
       requesting and operating network slices using IETF technologies. These network
       slices may be referred to as RFC 9543 Network Slices, but in this document
       (which is solely about IETF technologies) we simply use the term "network
       slice" to refer to this concept.

There was a long discussion with the IESG for RFC9543 to not confuse the technology
with 5G network slices. Creating this "alias" here of course counters that whole
concept.

        While an enhanced VPN service may be sold as offering encryption
        and other security features as part of the service, customers
        would be well advised to take responsibility for their own
        security requirements themselves possibly by encrypting traffic
        before handing it off to the service provider.

This is true of all VPNs, and not really a security consideration for NRP VPNs ?

        The privacy of enhanced VPN service customers must be
        preserved. It should not be possible for one customer to discover
        the existence of another customer, nor should the sites that
        are members of an enhanced VPN be externally visible.

Same here?