Daniel, When we presented draft-dmk-rtgwg-multi-segment-sdwan-04 at the IETF118 RTGWG session, you have stated that there is a need for general approach for "Proof of Truth", even for already encrypted payload.
The draft-dmk-rtgwg-multi-segment-sdwan-04 suggested using "HMAC" with symmetric key between Cloud GW and SDWAN edge. Some cloud providers use MD5 (cryptographic hash function) for BGP authentication among peers, which is actually weaker than SHA-256 (Secure Hash Algorithm 256-bit). Can you elaborate more on your proposed "Proof of Truth" methods? The Authors are requesting for WG adoption. It would be good to incorporate your comments and suggestions. Thank you very much, Linda Dunbar From: Kausik Majumdar <[email protected]> Sent: Tuesday, December 12, 2023 7:41 PM To: rtgwg-chairs <[email protected]> Cc: Linda Dunbar <[email protected]> Subject: RE: Request for WG Adoption Call on Multi-Segment SDWAN Draft Hi Jeff, YingZhen, Can we please initiate the WG adoption call for this Draft? Thanks, Kausik From: rtgwg <[email protected]<mailto:[email protected]>> On Behalf Of Kausik Majumdar Sent: Thursday, November 30, 2023 6:38 PM To: rtgwg-chairs <[email protected]<mailto:[email protected]>> Cc: rtgwg <[email protected]<mailto:[email protected]>> Subject: [EXTERNAL] Request for WG Adoption Call on Multi-Segment SDWAN Draft RTGWG Chairs, We have had extensive discussion during the IETF118 for the https://datatracker.ietf.org/doc/draft-dmk-rtgwg-multisegment-sdwan/ . The draft covers an essential area of SD-WAN, enabling cloud providers to connect SD-WAN segments without requiring decrypting and re-encrypting, significantly improving the capacity for SD-WAN segments to transit across the cloud backbone. This Draft also helps vendors to connect SD-WAN endpoints using Cloud GW more efficiently. Can we please initiate the WG Adoption for this Draft? Sincerely, Kausik
_______________________________________________ rtgwg mailing list [email protected] https://www.ietf.org/mailman/listinfo/rtgwg
