Hi Donald,

On Thu, Mar 8, 2018 at 12:46 AM, Donald Eastlake <[email protected]> wrote:
> Hi Kathleen,
>
> On Wed, Mar 7, 2018 at 10:57 AM, Kathleen Moriarty
> <[email protected]> wrote:
>> Kathleen Moriarty has entered the following ballot position for
>> draft-ietf-trill-vendor-channel-00: No Objection
>>
>> ...
>>
>> ----------------------------------------------------------------------
>> COMMENT:
>> ----------------------------------------------------------------------
>>
>> Could you please expand the text in the security considerations section as to
>> why security properties (integrity, authentication, and encryption since they
>> are not part of RBridge Channel messages except when explicitly added on in 
>> the
>> extension draft) were not built in?  I'm assuming it is the limited scope of
>> use for the protocol.  I am glad that options exist to add it in, but wish 
>> the
>> text were a bit more encouraging so that would actually happen.  Vendors need
>> to be motivated to provide these options for customers who may want to use
>> them, without that motivation, the features won't be provided.
>
> See attached candidate draft-ietf-trill-vendor-channel-01.txt and diff
> against the currently posted -00. Does this answer your request for an
> explanation as to why the basic TRILL RBridge Channel does not provide
> security services?

The text helps to explain the background, so thank you for that.  I
would have liked to see more on the scope or reasons why this
extension might not need more (or if it does), but won't press for it
as this is an improvement.

Thanks,
Kathleen

>
> Thanks,
> Donald
> ===============================
>  Donald E. Eastlake 3rd   +1-508-333-2270 (cell)
>  155 Beaver Street, Milford, MA 01757 USA
>  [email protected]



-- 

Best regards,
Kathleen

_______________________________________________
trill mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trill

Reply via email to