Re: [Tsvwg] WGLC for draft-ietf-tsvwg-sctpthreat-01 starts NOW

[Lars Eggert <[e-mail]>]

   This document talks about the SCTP implementors' guide a lot and how
   it "makes changes" to SCTP to fix the threats described here. The
   guide is not a specification - I assume 2960bis will also include
   these fixes? If so, it should be referred to instead of (or at least
   in addition to) the guide.

   The sections labeled "Errata" aren't errata ("a list of corrected
   errors"), they often contain a further analysis of the attack vector.
   Suggest to pick a different heading.

   The sections labeled "Countermeasure" often don't describe
   countermeasures but instead only offer observations about the attack
   (4.3) or partial mitigation (6.3). Suggest to pick a different
   headings for those cases.


Section 2.3., paragraph 1:
 >    HEARTBEAT-ACK the random nonce MUST match the value sent in the

   s/MUST/must/ (is the only 2119 term in the document)


Section 2.3., paragraph 2:
 >    will prevent an attacker from generating false HEARTBEAT-ACK's  
with

   Nit: s/HEARTBEAT-ACK's/HEARTBEAT-ACKs/


Section 4.2., paragraph 2:
 >       local lan is concerned.

   Nit: s/local lan/LAN/

-- 
Lars Eggert                                     NEC Network Laboratories