Subject: draft-ietf-ospf-ospfv3-auth-06.txt Ready for IESG review

From: Mukesh Gupta <[email-masked]>
Date: Wed, 29 Dec 2004 15:21:27 -0600

Alex/Bill,

06 version of the OSPFv3 Security draft addresses the 
following comments/issues:

From IESG:
- Discuss about how much protection OSPF has for replay 
  attacks without the security enabled
- Add references to 3602 and 2404
- Analyze and recommend values of rekeying interval and KeyRolloverInterval
- Spell out in the security considerations that one router can impersonate another
- Larger routing security not considered here (refer to rpsec)
  i.e., "What's left to worry about after you deploy this?"
- Refer to rpsec drafts

From authors:
- MUST requirement for hex format keys.  This will significantly 
  increase the entropy of the keys.

We have addressed all the comments from IESG and we think that
this version is ready to be reviewed by IESG again.

Regards
Mukesh & Suresh

> -----Original Message-----
> From: Mailing List [mailto:[email-masked]]On Behalf Of ext
> [email-masked]
> Sent: Wednesday, December 29, 2004 12:41 PM
> To: [email-masked]
> Subject: I-D ACTION:draft-ietf-ospf-ospfv3-auth-06.txt
> 
> 
> A New Internet-Draft is available from the on-line 
> Internet-Drafts directories.
> This draft is a work item of the Open Shortest Path First IGP 
> Working Group of the IETF.
> 
> 	Title		: Authentication/Confidentiality for OSPFv3
> 	Author(s)	: M. Gupta, N. Melam
> 	Filename	: draft-ietf-ospf-ospfv3-auth-06.txt
> 	Pages		: 15
> 	Date		: 2004-12-29
> 	
> This document describes means/mechanisms to provide 
> authentication/confidentiality to OSPFv3 using IPv6 AH/ESP Extension 
> Header.
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-ospf-ospfv3-auth-06.txt
> 
> To remove yourself from the I-D Announcement list, send a message to 
> [email-masked] with the word unsubscribe in 
> the body of the message.  
> You can also visit 
> https://www1.ietf.org/mailman/listinfo/I-D-announce 
> to change your subscription settings.
> 
> 
> Internet-Drafts are also available by anonymous FTP. Login 
> with the username
> "anonymous" and a password of your e-mail address. After logging in,
> type "cd internet-drafts" and then
> 	"get draft-ietf-ospf-ospfv3-auth-06.txt".
> 
> A list of Internet-Drafts directories can be found in
> http://www.ietf.org/shadow.html 
> or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
> 
> 
> Internet-Drafts can also be obtained by e-mail.
> 
> Send a message to:
> 	[email-masked].
> In the body type:
> 	"FILE /internet-drafts/draft-ietf-ospf-ospfv3-auth-06.txt".
> 	
> NOTE:	The mail server at ietf.org can return the document in
> 	MIME-encoded form by using the "mpack" utility.  To use this
> 	feature, insert the command "ENCODING mime" before the "FILE"
> 	command.  To decode the response(s), you will need "munpack" or
> 	a MIME-compliant mail reader.  Different MIME-compliant 
> mail readers
> 	exhibit different behavior, especially when dealing with
> 	"multipart" MIME messages (i.e. documents which have been split
> 	up into multiple messages), so check your local documentation on
> 	how to manipulate these messages.
> 		
> 		
> Below is the data which will enable a MIME compliant mail reader
> implementation to automatically retrieve the ASCII version of the
> Internet-Draft.
>