Re: Security issues with draft-ietf-tsvwg-iana-ports-08

[Joe Touch <[e-mail]>]

On 11/7/2010 6:48 PM, Magnus Westerlund wrote:
...
> Ok, I don't know about that. I did a bit of looking on the number of
> port numbers that includes TLS in their comments fields. It appears that
> the number is around 55 ports assigned today for TCP (106 occurrences at
> http://www.iana.org/assignments/port-numbers). Searching for SSL (184
> hits), Secure (157 hits). Considering that most TCP based protocols also
> got an UDP port, the actual number of services using TLS/SSL or being
> for the secure version seems to be around 100.

FWIW, that last part hasn't been true for a few years now. IANA doesn't 
give both UDP and TCP; each protocol needs to be requested specifically 
and motivated individually.

We also recently started to label UDP ports used solely for discovery as 
-disc (this is a *suggestion* to applicants, not a hard requirement).

Old protocols are, FWIW, intended to be handled as per the wiggle words 
at the beginning of Sec 7.2. Again, this is NOT BINDING. It's intended 
to inform the public about the current view, which can (and will) change.

Perhaps those items shouldn't even be in this doc? (omit sec 7?)

Joe