Re: [IPsec] AD Review of draft-ietf-ipsecme-iptfs-12

2022-05-10 Thread Christian Hopps
Hi Roman, Thanks for the review! I've made some changes in the document to cover most of your suggestions and have a few comments/questions on the rest below. Roman Danyliw writes: Hi! I performed an AD review of draft-ietf-ipsecme-iptfs-12. Thank you for this work and the patience of th

Re: [IPsec] AD Review of draft-ietf-ipsecme-iptfs-12

2022-05-06 Thread Roman Danyliw
Hi! In reviewing the corresponding YANG module for this document, I was reminded that IP-TFS SA are unidirectional. In principle it would be possible to setup an IP-TFS tunnel for only one side of a connection. Section 8 should mention that risk that this introduces. Regards, Roman > -O

[IPsec] AD Review of draft-ietf-ipsecme-iptfs-12

2022-05-04 Thread Roman Danyliw
Hi! I performed an AD review of draft-ietf-ipsecme-iptfs-12. Thank you for this work and the patience of the WG in getting it processed. I have a number of comments below, but the document is in good shape so please process them concurrently with the IETF LC feedback. ** Thank you for getti