[tsvwg] Paul Wouters' Discuss on draft-ietf-tsvwg-sctp-zero-checksum-10: (with DISCUSS and COMMENT)

[Paul Wouters via Datatracker <[e-mail]>]

Paul Wouters has entered the following ballot position for
draft-ietf-tsvwg-sctp-zero-checksum-10: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-tsvwg-sctp-zero-checksum/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

Should there be a short discussion in the Security Considerations on what to do
when DTLS fails? This could be a bid-down attack from DTLS to crc32. Perhaps
some text that states if DTLS is configured, that if DTLS fails to establish,
this should be a hard fail and not a soft fail to crc32 'protected' clear text?


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

NITS:

        A Virtual Network (VN) is a network provided by a service provider
        to a customer for the customer to use in any way it wants.

I think "any way" is a bit too strong? Service providers have a lot of AUP and
fine print.

being being received -> being received