Last Call Review of draft-ietf-add-split-horizon-authority-11
review-ietf-add-split-horizon-authority-11-secdir-lc-ladd-2024-05-29-00

Request Review of draft-ietf-add-split-horizon-authority
Requested revision No specific revision (document currently at 14)
Type IETF Last Call Review
Team Security Area Directorate (secdir)
Deadline 2024-06-06
Requested 2024-05-23
Authors Tirumaleswar Reddy.K , Dan Wing , Kevin Smith , Benjamin M. Schwartz
I-D last updated 2025-01-28 (Latest revision 2024-06-20)
Completed reviews Genart IETF Last Call review of -12 by Mallory Knodel (diff)
Dnsdir IETF Last Call review of -10 by Anthony Somerset (diff)
Artart IETF Last Call review of -11 by Jiankang Yao (diff)
Secdir IETF Last Call review of -11 by Watson Ladd (diff)
Dnsdir IETF Last Call review of -11 by James Gannon (diff)
Intdir IETF Last Call review of -06 by Bob Halley (diff)
Dnsdir IETF Last Call review of -06 by Anthony Somerset (diff)
Opsdir IETF Last Call review of -06 by Tianran Zhou (diff)
Secdir IETF Last Call review of -06 by Watson Ladd (diff)
Dnsdir IETF Last Call review of -12 by James Gannon (diff)
Assignment Reviewer Watson Ladd
State Completed
Request IETF Last Call review on draft-ietf-add-split-horizon-authority by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/kEgFCBRMo08an8Crm74HktmTGWM
Reviewed revision 11 (document currently at 14)
Result Has nits
Completed 2024-05-29
review-ietf-add-split-horizon-authority-11-secdir-lc-ladd-2024-05-29-00
Dear IETFers,

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG. These comments were written primarily for the benefit of the
security area directors. Document editors and WG chairs should treat
these comments just like any other last call comments.

The summary of the review is Ready With Nits.

I found the document readable and didn't spot any security issues. However,
the security considerations section neglects to explain the importance
of the salt being high entropy and changed when a new authorization record is
created.