IETF Last Call Review of draft-ietf-dnsop-3901bis-10
review-ietf-dnsop-3901bis-10-secdir-lc-roca-2026-01-13-00

Request Review of draft-ietf-dnsop-3901bis
Requested revision No specific revision (document currently at 17)
Type IETF Last Call Review
Team Security Area Directorate (secdir)
Deadline 2026-01-06
Requested 2025-12-16
Authors Momoka Yamamoto , Tobias Fiebig
I-D last updated 2026-02-23 (Latest revision 2026-02-12)
Completed reviews Dnsdir IETF Last Call review of -09 by Geoff Huston (diff)
Intdir IETF Last Call review of -09 by Bernie Volz (diff)
Opsdir IETF Last Call review of -09 by Aihua Guo (diff)
Genart IETF Last Call review of -09 by Paul Kyzivat (diff)
Artart IETF Last Call review of -09 by Thomas Fossati (diff)
Secdir IETF Last Call review of -10 by Vincent Roca (diff)
Tsvart IETF Last Call review of -10 by Martin Duke (diff)
Dnsdir Telechat review of -10 by Geoff Huston (diff)
Dnsdir Telechat review of -11 by Tim Wicinski (diff)
Assignment Reviewer Vincent Roca
State Completed
Request IETF Last Call review on draft-ietf-dnsop-3901bis by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/BDG7iTgKe3QWHvzhvR86vm_PNto
Reviewed revision 10 (document currently at 17)
Result Ready
Completed 2026-01-13
review-ietf-dnsop-3901bis-10-secdir-lc-roca-2026-01-13-00
Hello,

I have reviewed this document as part of the security directorate’s ongoing
effort to review all IETF documents being processed by the IESG. These
comments were written primarily for the benefit of the security area
directors. Document editors and WG chairs should treat these comments just
like any other last call comments.

Summary: ready

The document includes a short Security Discussion section, that first states
there is no new additional security consideration for DNS, and then explain
there one SHOULD follow [RFC9872] guidance on securely discovering PREF64,
otherwise security issues may happen.

Since I don't know how the IPv6-IPv4 transition impacts in DNS, it is pretty
difficult to have a clear position on the topic. I also looked at [RFC 9872]
that discusses the topic in a detailed manner. I will therefore follow the
authors on their recommendations.

Regards,    Vincent