Hi Vijay, let me thank you for your generous efforts as an Gen-ART team member.
Vijay K. Gurbani wrote: > I have been selected as the General Area Review Team (Gen-ART) > reviewer for this draft (for background on Gen-ART, please see > http://www.alvestrand.no/ietf/gen/art/gen-art-FAQ.html). > > Please wait for direction from your document shepherd > or AD before posting a new version of the draft. > > Document: draft-ietf-v6ops-addr-select-req-04.txt > Reviewer: Vijay K. Gurbani > Review Date: 1 Feb 2008 > IESG Telechat date: 7 Feb 2008 > > Summary: This draft is ready for publication as an Informational. > > One quick question: Isn't it the case that the six > threats enumerated in S3.1 would exist irrespective of the new > address-selection mechanism; i.e., the new address-selection > mechanism does not make things any worse than they already are. > It may be worth highlight the cases where the address-selection > mechanism renders any existing threat more insidious, or introduces > a brand new set of threats. Some of these are not new and not introduced by one or multiple address-selection mechanisms. However, all the items in the lists in S3.1 are the threats that are new and specific to the address-selection mechanisms in a sense. For example, item #2 "Malicious changing of policy data by nonapproved nodes." assumes the existense of disguised policy distribution server. As we don't have or use such a mechansim right now, we don't have such a new threat of malicious policy injection. But in a much broader sense, we have several mechanisms to distribute some kind of policy into the hosts and these mechanisms already face this threat. One sure thing is that by making a policy distributing mechanism there will be another new way to inject malicious policy to hosts. How should we describe such a case in the security consideration section ? Best regards, -- Arifumi Matsumoto IP Technology Expert Team Secure Communication Project NTT Information Sharing Platform Laboratories E-mail: [EMAIL PROTECTED] _______________________________________________ Gen-art mailing list [email protected] http://www.ietf.org/mailman/listinfo/gen-art
