[trill] Stephen Farrell's No Objection on draft-ietf-trill-oam-mib-07: (with COMMENT)

["Stephen Farrell" <[e-mail]>]

Stephen Farrell has entered the following ballot position for
draft-ietf-trill-oam-mib-07: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-trill-oam-mib/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------


- Grepping for "MAX-ACCESS *read-create" gives me 28 hits.  The
security considerations section describes 5 of those that I
can see. Are you saying that you did check but all of the
others are read-create are not in fact sensitive? 

- The security considerations here might note two additional
things. First, access to the read-only date exposes the network
topology so might be considered more sensitive than other MIBs.
And second, if one can set an IP address to which reports are
sent say in the event of some kind of packet storm, then that
could maybe be used to DoS that IP address.  I'm not sure
either is worth a mention, but just wanted to check in case
they might be.