Arturo,

On 6/5/11 10:30 PM, Arturo Servin wrote:
>       I do not see why the ITU has to start from zero. There are several (or 
> some at least) very good RFC and I+D documents related to IPv6 security. I 
> think we should recommend them to ITU, it is good that they let us know, it 
> would be better if  they use our work as a foundation.


There are several specific areas of interest that you can view at
https://datatracker.ietf.org/documents/LIAISON/file1228.pdf.  The
chairman and vice-chairman of the ITU's security area, SG17, are
informing us that two of their working groups which the ITU-T calls
Questions will be taking on new work relating to IPv6.

Let's review the two work items:

The first thing to note is that X.ipv6-secguide is targeted to be a
deployment guide.  We need more of these for IPv6 and we should welcome
the ITU-T's involvement.

The second document, X.mgv6 is meant to be "management guidelines for
implementation of IPv6".   We provide a fair amount of this sort of
guidance in our collective works.  Also, the difference between
implementation guidance and normative statements can be very narrow. 
Therefore, this is the area most likely to have overlap.  The best way
to address that overlap is to communicate effectively through the
liaison process, and perhaps to also participate directly in the
meetings, when possible.

Here the chairman and vice-chairman of SG17 have recognized that the
IETF is an important player in the work to be done.  While no response
has been requested, it would be wise for us to provide the relevant
related work so, as you say, the ITU-T doesn't attempt to start from
scratch.  I hasten to point out that they are by no means starting from
scratch, but we should still provide them relevant guidance.  So what is
relevant guidance?  That can take several different forms:

   1. Direct participation in the Study Group meetings.  Study Group
      meetings are open to Member States and Sector Members.  ISOC is a
      Sector Member.  The IETF on its own is not.
   2. Concise and relevant liaison statements.  As this work is just
      beginning, we can point to not only the published RFCs that are
      relevant, and they include not only RFC 4294 and
      draft-ietf-6man-node-req-bis (and we can reference this as a work
      in progress, and in fact invite comment), but also relevant
      portions of other RFCs, particular their relevant Security
      Considerations sections.
   3. Informal consultations with ITU-T participants.  Believe it or
      not, this is often the most effective way to contribute.

At the same time we should invite SG17 to provide us any feedback on our
works, especially when they discover any of the following:

    * A security problem;
    * An obstacle to deployment; or
    * An interoperability problem.

While this solicitation should not be limited to the ITU-T, that
organization has a reach into the developing world that quite frankly we
do not, and they may spot issues that relate to certain environments.

Hope this helps,

Eliot
--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to