Last Call Review of draft-ietf-6lo-fragment-recovery-08
review-ietf-6lo-fragment-recovery-08-secdir-lc-reddyk-2020-02-06-00
Request | Review of | draft-ietf-6lo-fragment-recovery |
---|---|---|
Requested revision | No specific revision (document currently at 21) | |
Type | Last Call Review | |
Team | Security Area Directorate (secdir) | |
Deadline | 2020-01-30 | |
Requested | 2020-01-16 | |
Authors | Pascal Thubert | |
I-D last updated | 2020-02-06 | |
Completed reviews |
Iotdir Last Call review of -07
by Erik Nordmark
(diff)
Genart Last Call review of -08 by Peter E. Yee (diff) Secdir Last Call review of -08 by Tirumaleswar Reddy.K (diff) Tsvart Last Call review of -11 by Colin Perkins (diff) Genart Telechat review of -12 by Peter E. Yee (diff) |
|
Assignment | Reviewer | Tirumaleswar Reddy.K |
State | Completed | |
Request | Last Call review on draft-ietf-6lo-fragment-recovery by Security Area Directorate Assigned | |
Posted at | https://mailarchive.ietf.org/arch/msg/secdir/ha9rOmKSj7Bp6HXSFgUz4bSv5R4 | |
Reviewed revision | 08 (document currently at 21) | |
Result | Has nits | |
Completed | 2020-02-03 |
review-ietf-6lo-fragment-recovery-08-secdir-lc-reddyk-2020-02-06-00
Reviewer: Tirumaleswar Reddy Review result: Ready with nits I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. Summary: Ready with nits [1] It is not clear to me how the Security sections of I-D.ietf-core-cocoa apply to this specification ? [2] The security considerations section discusses I-D.ietf-lwig-6lowpan-virtual-reassembly but that document does not discuss any security considerations yet. [3] It is not clear how the DoS attack of bogus first fragments is handled and other attacks discussed in https://tools.ietf.org/html/draft-ietf-intarea-frag-fragile-17#section-3.7 are tackled ? [4] How does the document align with the recommendations given in https://tools.ietf.org/html/draft-ietf-intarea-frag-fragile-17#section-6 ? Cheers, -Tiru