[spring] 回复: Re: Second WG Last Call: dr aft-ietf-spring-srv6-security-14 (Ends 2026-06-02)
<[email protected]> Fri, 5 Jun 2026 10:12:31 +0800
| Newsgroups | gmane.ietf.spring,gmane.ietf.ipv6 |
|---|---|
| Message-ID | <[email protected]> |
This is a multipart message in MIME format. --===============2296601547957932106== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0019_01DCF4D3.D3517500" Content-Language: zh-cn This is a multipart message in MIME format. ------=_NextPart_000_0019_01DCF4D3.D3517500 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi, =20 I support the WGLC. =20 Just a typo correction in 6.3.2.1.: =20 Old:=20 An additional case could be the manipulation of backup paths [RFC8355], where the attacker could alter the SIDs defining such backup path then directing traffic over suboptimal or compromised paths, =E2=80=A6 =20 New: An additional case could be the manipulation of backup paths [RFC8355], where the attacker could alter the SIDs defining such backup paths, then directing traffic over suboptimal or compromised paths, =E2=80=A6 =20 =20 BR, Feng =20 -----Original Message----- From: Alvaro Retana via Datatracker <[email protected] = <mailto:[email protected]> >=20 Sent: Tuesday, May 19, 2026 3:45 AM To: <mailto:[email protected]> = [email protected]; = <mailto:[email protected]> [email protected]; = <mailto:[email protected]> [email protected]; <mailto:[email protected]> = [email protected] Cc: <mailto:[email protected]> [email protected]; <mailto:[email protected]> = [email protected] Subject: [spring] Second WG Last Call: = draft-ietf-spring-srv6-security-14 (Ends 2026-06-02) =20 This message starts a Second WG Last Call for: draft-ietf-spring-srv6-security-14 =20 This Working Group Last Call ends on 2026-06-02 =20 Abstract: SRv6 is a traffic engineering, encapsulation and steering mechanism utilizing IPv6 addresses to identify segments in a pre-defined policy. This document discusses security considerations in SRv6 networks, including the potential threats and the possible mitigation methods. The document does not define any new security protocols or extensions to existing protocols. =20 File can be retrieved from: =20 Please review and indicate your support or objection to proceed with the = publication of this document by replying to this email keeping = <mailto:[email protected]> [email protected] in copy. Objections should be = explained and suggestions to resolve them are highly appreciated. =20 Authors, and WG participants in general, are reminded of the = Intellectual Property Rights (IPR) disclosure obligations described in = BCP 79 [1]. Appropriate IPR disclosures required for full conformance with the = provisions of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware = of any. Sanctions available for application to violators of IETF IPR Policy can = be found at [3]. =20 Thank you. =20 [1] <https://datatracker.ietf.org/doc/bcp78/> = https://datatracker.ietf.org/doc/bcp78/ [2] <https://datatracker.ietf.org/doc/bcp79/> = https://datatracker.ietf.org/doc/bcp79/ [3] <https://datatracker.ietf.org/doc/rfc6701/> = https://datatracker.ietf.org/doc/rfc6701/ =20 The IETF datatracker status page for this Internet-Draft is: <https://datatracker.ietf.org/doc/draft-ietf-spring-srv6-security/> = https://datatracker.ietf.org/doc/draft-ietf-spring-srv6-security/ =20 There is also an HTML version available at: = <https://www.ietf.org/archive/id/draft-ietf-spring-srv6-security-14.html>= https://www.ietf.org/archive/id/draft-ietf-spring-srv6-security-14.html =20 A diff from the previous version is available at: = <https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-spring-srv6-secur= ity-14> = https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-spring-srv6-securi= ty-14 ------=_NextPart_000_0019_01DCF4D3.D3517500 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta = name=3DGenerator content=3D"Microsoft Word 15 (filtered = medium)"><style><!-- /* Font Definitions */ @font-face {font-family:=E5=AE=8B=E4=BD=93; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:=E7=AD=89=E7=BA=BF; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:"\@=E7=AD=89=E7=BA=BF"; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:"\@=E5=AE=8B=E4=BD=93"; panose-1:2 1 6 0 3 1 1 1 1 1;} @font-face {font-family:Consolas; panose-1:2 11 6 9 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0cm; font-size:12.0pt; font-family:=E5=AE=8B=E4=BD=93;} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} pre {mso-style-priority:99; mso-style-link:"HTML =E9=A2=84=E8=AE=BE=E6=A0=BC=E5=BC=8F = =E5=AD=97=E7=AC=A6"; margin:0cm; margin-bottom:.0001pt; font-size:12.0pt; font-family:=E5=AE=8B=E4=BD=93;} span.HTML {mso-style-name:"HTML =E9=A2=84=E8=AE=BE=E6=A0=BC=E5=BC=8F = =E5=AD=97=E7=AC=A6"; mso-style-priority:99; mso-style-link:"HTML =E9=A2=84=E8=AE=BE=E6=A0=BC=E5=BC=8F"; font-family:"Courier New"; mso-ligatures:none;} span.EmailStyle20 {mso-style-type:personal-reply; font-family:=E7=AD=89=E7=BA=BF; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-size:10.5pt;} @page WordSection1 {size:612.0pt 792.0pt; margin:72.0pt 90.0pt 72.0pt 90.0pt;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DZH-CN link=3Dblue = vlink=3Dpurple style=3D'word-wrap:break-word'><div = class=3DWordSection1><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>Hi,<o:p></o:p><= /span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'><o:p> </o:= p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>I support the = WGLC.<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'><o:p> </o:= p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>Just a typo = correction in 6.3.2.1.:<o:p></o:p></span></p><p class=3DMsoNormal><span = lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'><o:p> </o:= p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>Old: = <o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0=C2= =A0An additional case could be the manipulation of backup = paths<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = [RFC8355], where the attacker could alter the SIDs defining = such<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = backup <span style=3D'background:yellow;mso-highlight:yellow'>path = then</span> directing traffic over suboptimal or = compromised<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = paths, =E2=80=A6<o:p></o:p></span></p><p class=3DMsoNormal><span = lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'><o:p> </o:= p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>New:<o:p></o:p>= </span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = An additional case could be the manipulation of backup = paths<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = [RFC8355], where the attacker could alter the SIDs defining = such<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = backup <span style=3D'background:yellow;mso-highlight:yellow'>paths, = then</span> directing traffic over suboptimal or = compromised<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'>=C2=A0=C2=A0 = paths, =E2=80=A6<o:p></o:p></span></p><p class=3DMsoNormal><span = lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'><o:p> </o:= p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:10.5pt;font-family:=E7=AD=89=E7=BA=BF'><o:p> </o:= p></span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:11.0pt;font-family:=E7=AD=89=E7=BA=BF'>BR,<o:p></o:p><= /span></p><p class=3DMsoNormal><span lang=3DEN-US = style=3D'font-size:11.0pt;font-family:=E7=AD=89=E7=BA=BF'>Feng<o:p></o:p>= </span></p><div><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas'><o:p> </o:p></span></= pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>-----Origina= l Message-----<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>From: = Alvaro Retana via Datatracker <<a = href=3D"mailto:[email protected]">[email protected]</a>> = <o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Sent: = Tuesday, May 19, 2026 3:45 AM<o:p></o:p></span></pre><pre><span = lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>To: <a = href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>draft-ietf-spring-srv6-secur= [email protected]</span></a>; <a href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>[email protected]</span= ></a>; <a href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>[email protected]</span></a>; = <a href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>[email protected]</span></a><o:= p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Cc: <a = href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>[email protected]</span></a>;= <a href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>[email protected]</span></a><o:p= ></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Subject: = [spring] Second WG Last Call: draft-ietf-spring-srv6-security-14 (Ends = 2026-06-02)<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>This = message starts a Second WG Last Call = for:<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>draft-ietf-s= pring-srv6-security-14<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>This = Working Group Last Call ends on = 2026-06-02<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Abstract:<o:= p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>=C2=A0=C2=A0= SRv6 is a traffic engineering, encapsulation and steering = mechanism<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>=C2=A0=C2=A0= utilizing IPv6 addresses to identify segments in a = pre-defined<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>=C2=A0=C2=A0= policy.=C2=A0 This document discusses security considerations in = SRv6<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>=C2=A0=C2=A0= networks, including the potential threats and the possible = mitigation<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>=C2=A0=C2=A0= methods.=C2=A0 The document does not define any new security protocols = or<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>=C2=A0=C2=A0= extensions to existing protocols.<o:p></o:p></span></pre><pre><span = lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>File can be = retrieved from:<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Please = review and indicate your support or objection to proceed with the = publication of this document by replying to this email keeping <a = href=3D"mailto:[email protected]"><span = style=3D'color:#337AB7;text-decoration:none'>[email protected]</span></a> = in copy. Objections should be explained and suggestions to resolve them = are highly appreciated.<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Authors, = and WG participants in general, are reminded of the Intellectual = Property Rights (IPR) disclosure obligations described in BCP 79 = [1].<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Appropriate = IPR disclosures required for full conformance with the provisions of BCP = 78 [1] and BCP 79 [2] must be filed, if you are aware of = any.<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Sanctions = available for application to violators of IETF IPR Policy can be found = at [3].<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>Thank = you.<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>[1] <a = href=3D"https://datatracker.ietf.org/doc/bcp78/"><span = style=3D'color:#337AB7;text-decoration:none'>https://datatracker.ietf.org= /doc/bcp78/</span></a><o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>[2] <a = href=3D"https://datatracker.ietf.org/doc/bcp79/"><span = style=3D'color:#337AB7;text-decoration:none'>https://datatracker.ietf.org= /doc/bcp79/</span></a><o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>[3] <a = href=3D"https://datatracker.ietf.org/doc/rfc6701/"><span = style=3D'color:#337AB7;text-decoration:none'>https://datatracker.ietf.org= /doc/rfc6701/</span></a><o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>The IETF = datatracker status page for this Internet-Draft = is:<o:p></o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><a = href=3D"https://datatracker.ietf.org/doc/draft-ietf-spring-srv6-security/= "><span = style=3D'color:#337AB7;text-decoration:none'>https://datatracker.ietf.org= /doc/draft-ietf-spring-srv6-security/</span></a><o:p></o:p></span></pre><= pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>There is = also an HTML version available at:<o:p></o:p></span></pre><pre><span = lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><a = href=3D"https://www.ietf.org/archive/id/draft-ietf-spring-srv6-security-1= 4.html"><span = style=3D'color:#337AB7;text-decoration:none'>https://www.ietf.org/archive= /id/draft-ietf-spring-srv6-security-14.html</span></a><o:p></o:p></span><= /pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><o:p> <= /o:p></span></pre><pre><span lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'>A diff from = the previous version is available at:<o:p></o:p></span></pre><pre><span = lang=3DEN-US = style=3D'font-size:9.0pt;font-family:Consolas;color:#212529'><a = href=3D"https://author-tools.ietf.org/iddiff?url2=3Ddraft-ietf-spring-srv= 6-security-14"><span = style=3D'color:#337AB7;text-decoration:none'>https://author-tools.ietf.or= g/iddiff?url2=3Ddraft-ietf-spring-srv6-security-14</span></a><o:p></o:p><= /span></pre></div></div></body></html> ------=_NextPart_000_0019_01DCF4D3.D3517500-- --===============2296601547957932106== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc3ByaW5nIG1h aWxpbmcgbGlzdCAtLSBzcHJpbmdAaWV0Zi5vcmcKVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFp bCB0byBzcHJpbmctbGVhdmVAaWV0Zi5vcmcK --===============2296601547957932106==--