RE: Last Call: draft-ietf-nea-pt-eap-06.txt (PT-EAP: Posture Transport (PT) Protocol For EAP Tunnel Methods) to Proposed Standard

2013-01-14 Thread Stephen Hanna
Changing our reference to RFC 5209 to be normative may cause more problems than it solves. As RFC 3967 (BCP 97) says, IETF procedures generally require that a standards track RFC may not have a normative reference to another standards track document at a lower maturity level or to a non

RE: travel guide for the next IETF...

2013-01-08 Thread Stephen Hanna
Dean Willis wrote: Having a car won't do any good. There is, as far as I can tell, no place to park it but the hotel valet. According to this web page, complimentary self-parking is available at the Caribe Royale. http://www.cariberoyale.com/accommodations/services/ Thanks, Steve

RE: Recall petition for Mr. Marshall Eubanks

2012-11-02 Thread Stephen Hanna
I also, with regret, would like to add my name to the recall petition. I am NomCom eligible. Thanks, Steve

secdir review of draft-ietf-6lowpan-btle-08

2012-07-11 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just

Updated secdir review of draft-ietf-emu-chbind-16.txt

2012-05-24 Thread Stephen Hanna
Message- From: Stephen Hanna Sent: Tuesday, May 22, 2012 4:00 PM To: 'Sam Hartman' Cc: e...@ietf.org; sec...@ietf.org; ietf@ietf.org Subject: RE: Updated secdir review of draft-ietf-emu-chbind-15.txt Sam, I see now that you are concerned not with circumstances where the NAS terminates

RE: Updated secdir review of draft-ietf-emu-chbind-15.txt

2012-05-22 Thread Stephen Hanna
describing the attack scenario and countermeasures. Thanks, Steve -Original Message- From: Sam Hartman [mailto:hartmans-i...@mit.edu] Sent: Monday, May 21, 2012 5:51 PM To: Stephen Hanna Cc: Sam Hartman; e...@ietf.org; sec...@ietf.org; ietf@ietf.org Subject: Re: Updated secdir review

Updated secdir review of draft-ietf-emu-chbind-15.txt

2012-05-18 Thread Stephen Hanna
The changes in draft-ietf-emu-chbind-15.txt satisfactorily address almost all of the comments in my April 13, 2012 secdir review. I do have one remaining substantive comment on this latest draft and two non-substantive ones. Substantive Comment --- The last paragraph of section

RE: [secdir] secdir review of draft-ietf-emu-chbind-14

2012-04-25 Thread Stephen Hanna
To: Stephen Hanna Cc: draft-ietf-emu-chb...@tools.ietf.org; sec...@ietf.org; IETF- Discussion list; Sam Hartman Subject: Re: [secdir] secdir review of draft-ietf-emu-chbind-14 Importance: High On Apr 24, 2012, at 2:05 PM, Stephen Hanna wrote: Joe, I'm glad that my comments were useful to you

RE: secdir review of draft-nottingham-http-new-status-03

2012-01-30 Thread Stephen Hanna
that the response did not come from the requested URL. Thanks, Steve -Original Message- From: Mark Nottingham [mailto:m...@mnot.net] Sent: Sunday, January 29, 2012 6:50 PM To: Stephen Hanna Cc: Julian Reschke; draft-nottingham-http-new-sta...@tools.ietf.org; sec...@ietf.org; ietf

RE: secdir review of draft-nottingham-http-new-status-03

2012-01-30 Thread Stephen Hanna
Yes -Steve -Original Message- From: Julian Reschke [mailto:julian.resc...@gmx.de] Sent: Monday, January 30, 2012 10:10 AM To: Stephen Hanna Cc: Mark Nottingham; draft-nottingham-http-new-sta...@tools.ietf.org; sec...@ietf.org; ietf@ietf.org Subject: Re: secdir review of draft

secdir review of draft-nottingham-http-new-status-03

2012-01-13 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just

RE: secdir review of draft-nottingham-http-new-status-03

2012-01-13 Thread Stephen Hanna
: Friday, January 13, 2012 3:27 PM To: Stephen Hanna Cc: draft-nottingham-http-new-sta...@tools.ietf.org; sec...@ietf.org; ietf@ietf.org Subject: Re: secdir review of draft-nottingham-http-new-status-03 On 2012-01-13 20:59, Stephen Hanna wrote: I have reviewed this document as part

Secdir review of draft-ietf-dime-priority-avps-05

2011-11-30 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just

RE: secdir review of draft-ietf-dime-priority-avps-04

2011-07-26 Thread Stephen Hanna
considerations. Then you could list those explicitly in the last paragraph of the Security Considerations. Thanks, steve -Original Message- From: carlb...@g11.org.uk [mailto:carlb...@g11.org.uk] Sent: Tuesday, July 26, 2011 6:42 AM To: Stephen Hanna Cc: ietf@ietf.org; sec...@ietf.org; draft

RE: secdir review of draft-ietf-dime-priority-avps-04

2011-07-26 Thread Stephen Hanna
: Tuesday, July 26, 2011 7:24 AM To: Stephen Hanna Cc: ietf@ietf.org; sec...@ietf.org; draft-ietf-dime-priority- avps@tools.ietf.org; lionel.mor...@orange-ftgroup.com Subject: RE: secdir review of draft-ietf-dime-priority-avps-04 Steve, Quoting Stephen Hanna sha...@juniper.net

Secdir review of draft-ietf-dime-priority-avps-04

2011-07-20 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just

secdir review of draft-ietf-dnsext-rfc2672bis-dname-22.txt

2011-06-01 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

secdir review of draft-ietf-ipfix-mediators-framework-09.txt

2010-12-08 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just

secdir review of draft-ietf-csi-dhcpv6-cga-ps-04.txt

2010-10-01 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just

secdir review of draft-ietf-ippm-spatial-composition-15.txt

2010-07-19 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments

RE: secdir review of draft-ietf-netconf-partial-lock-09.txt

2009-08-13 Thread Stephen Hanna
that might not be evident to someone who is not a security expert. Thanks, Steve -Original Message- From: Tom.Petch [mailto:sisyp...@dial.pipex.com] Sent: Thursday, August 13, 2009 4:00 AM To: Stephen Hanna; sec...@ietf.org; ietf@ietf.org; draft-ietf-netconf-partial-l...@tools.ietf.org

RE: secdir review of draft-ietf-netconf-partial-lock-09.txt

2009-08-13 Thread Stephen Hanna
operation on the server. Are there any concerns with this proposal? If so, please explain. Thanks, Steve -Original Message- From: Bert (IETF) Wijnen [mailto:berti...@bwijnen.net] Sent: Thursday, August 13, 2009 7:35 AM To: Stephen Hanna Cc: Tom.Petch; sec...@ietf.org; ietf@ietf.org

secdir review of draft-ietf-netconf-partial-lock-09.txt

2009-08-10 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

secdir review of draft-peterson-rai-rfc3427bis-02.txt

2009-07-28 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

secdir review of draft-ietf-krb-wg-naming-04.txt

2008-03-06 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. Document editors should treat these comments just like any other comments. This document defines conventions for well-known Kerberos principal names and

secdir review of draft-ietf-l2vpn-vpls-mcast-reqts-05.txt

2007-11-12 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

secdir review of draft-ietf-dnsop-reflectors-are-evil-04.txt

2007-09-24 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

secdir review of draft-ietf-dhc-server-override-04.txt

2007-07-02 Thread Stephen Hanna
I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like

RE: [Nea] WG Review: Network Endpoint Assessment (nea)

2006-10-19 Thread Stephen Hanna
Ted Hardie wrote: For the charter discussions, I want to know whether it will be an aim of the working group to standardize: * a way of carrying this information * the structure of this information (but not its content) * a standard representation of the content, so that access to the vendor

RE: [Nea] WG Review: Network Endpoint Assessment (nea)

2006-10-17 Thread Stephen Hanna
Sam Hartman wrote: One of the things coming out of the most recent BOF was a strong desire for PA-level interoperability. That can be accomplished through standardized attributes or vendor-specific attributes that are sufficiently well documented (and not subject to patents) that third

RE: [Nea] WG Review: Network Endpoint Assessment (nea)

2006-10-17 Thread Stephen Hanna
Vidya Narayanan wrote: I am very apprehensive of achieving any meaningful PA-level interoperability. I am not sure what minimum set of PA attributes will be standardized, but, whatever that set is, I doubt will be sufficient to provide any acceptable level of security, even for the endpoints.

Re: WG Review: Network Endpoint Assessment (nea)

2006-10-17 Thread Stephen Hanna
Ted, As I understand your concerns expressed below, you are concerned that standardizing attributes for NEA would be redundant and pointless: redundant because vendor-specific attributes will cover the same information in more detail and pointless because remediation will not be possible given

RE: [Nea] Re: WG Review: Network Endpoint Assessment (nea)

2006-10-11 Thread Stephen Hanna
Vidya, Thanks for your response. I think we may be getting closer to understanding each other's perspectives. That's a good thing. Let me respond to your comments inline below. I hope you won't mind if I clip a bit since this thread is starting to get long. Vidya Narayanan wrote: A. Any

Re: WG Review: Network Endpoint Assessment (nea)

2006-10-10 Thread Stephen Hanna
I have seen a lot of discussion about whether NEA provides network protection. In fact, it has been suggested that the charter be revised to say NEA must not be considered a protection mechanism for networks. I don't agree. Let's start by examining this concept of network protection. It's an