Re: [Tsvwg] WGLC for draft-ietf-tsvwg-sctpthreat-01 starts NOW

[Randall Stewart <[e-mail]>]

Lars Eggert wrote:
>   This document talks about the SCTP implementors' guide a lot and how
>   it "makes changes" to SCTP to fix the threats described here. The
>   guide is not a specification - I assume 2960bis will also include
>   these fixes? If so, it should be referred to instead of (or at least
>   in addition to) the guide.

Yep.. it includes the summarized final changes of RFC4460...


> 
>   The sections labeled "Errata" aren't errata ("a list of corrected
>   errors"), they often contain a further analysis of the attack vector.
>   Suggest to pick a different heading.
> 

Any preference on what you would like the headings to be?

>   The sections labeled "Countermeasure" often don't describe
>   countermeasures but instead only offer observations about the attack
>   (4.3) or partial mitigation (6.3). Suggest to pick a different
>   headings for those cases.
> 

Same question ?

> 
> Section 2.3., paragraph 1:
>  >    HEARTBEAT-ACK the random nonce MUST match the value sent in the
> 
>   s/MUST/must/ (is the only 2119 term in the document)
> 

yep... I will fix this :-)
> 
> Section 2.3., paragraph 2:
>  >    will prevent an attacker from generating false HEARTBEAT-ACK's  with
> 
>   Nit: s/HEARTBEAT-ACK's/HEARTBEAT-ACKs/
> 
ack

> 
> Section 4.2., paragraph 2:
>  >       local lan is concerned.
> 
>   Nit: s/local lan/LAN/
> 
ack

R

-- 
Randall Stewart
803-345-0369 <or> 815-342-5222(cell)