Subject: [ANCP] Re: ANCP Digest, Vol 16, Issue 9

From: "Hasnaa Moustafa" <[email-masked]>
Date: Mon, 17 Sep 2007 11:37:15 +0200

Dear Curtis,

Thank you for reviewing the draft and for your useful comments.

Please find the replies below.

Best regards,
Hassnaa

 Date: Wed, 12 Sep 2007 11:09:41 -0700
> From: "Curtis Sherbo" <[email-masked]>
> Subject: RE: [ANCP] Working Group Last Call
>        fordraft-ietf-ancp-security-threats-02.txt
> To: "'BOCCI Matthew'" <[email-masked]>,
>        < [email-masked]>
> Message-ID: <[email-masked]>
> Content-Type: text/plain; charset="us-ascii"
>
> I have reviewed the draft and have the following editorial comments:
>
> 5.4. Traffic Analysis An adversary can be placed at the NAS, or the AN, or
> any other network element capturing all traversed packets. Adversaries can
>
>
> Internet-Draft ANCP Threats July 2007 thus have unauthorized information
> access. As well, they can gather information relevant to the network and
> then use this information in gaining later unauthorized access. This
> attack
> can also help adversaries in other malicious purposes, as for example
> capturing messages sent from the AN to the NAS announcing that a DSL line
> is
> up and containing some information related to the connected client,
> indicating the client's existing at home. <<--- Don't know what this
> means?
>

We also got a previous comment on this part, so we will clarify it more.

 6. Attacks Forms
> Should Read Attack Forms

OK.

 The text in read perhaps would read better if it said "which is in scope of
> this work".

OK, this point will be considered.

 7.However, once the AAA server has the authorization data then it is given
> to the NAS, which is more in the scope of this work. Consequently, this
> document considers the attacks that are related to the ANCP operation and
> are concerning the communication between the NAS and the AAA/Policy
> server.
>

This part will be re-formulated.

 7.1 Active, acting on the transferred attributes and injecting falsify
> packets. The main attacks here are:
>
> Should perhaps be falsified
>

Right.

 Curtis Sherbo
>
>
>
>
> _____
>
> From: BOCCI Matthew [mailto:[email-masked]]
> Sent: Monday, September 03, 2007 7:00 AM
> To: [email-masked]
> Subject: [ANCP] Working Group Last Call
> fordraft-ietf-ancp-security-threats-02.txt
>
>
>
>
> This email is to announce the start of a two week Working Group last call
> for draft-ietf-ancp-security-threats-02.txt.
>
> Please read the draft and provide comments to the ANCP list by Tuesday
> 11th
> September.
>
> As agreed during the Chicago meeting, the following participants kingly
> volunteered to review the draft as a part of the WG LC:
>
> Curtis Sherbo
> Phillipe Niger
> Michael Busser
> Francios LeFaucher
> Raymond Zhang
>
> We would like to thank them in advance for their help.
>
> We will not be in a position to progress the draft until we have received
> comments from at least five reviewers.
>
> Regards,
>
> Matthew & Woj
>
> -----------------------------------------
> Matthew Bocci
> IP Division,
> Alcatel-Lucent Telecom Limited,
> Registered Office: Christchurch Way, Greenwich, London SE10 0AG.
> Registered in England & Wales number 02650571
> -----------------------------------------
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://www1.ietf.org/pipermail/ancp/attachments/20070912/acd06f8e/attachment-0001.html
>
>
> ------------------------------
>
> _______________________________________________
> ANCP mailing list
> [email-masked]
> https://www1.ietf.org/mailman/listinfo/ancp
>
>
> End of ANCP Digest, Vol 16, Issue 9
> ***********************************
>
_______________________________________________
ANCP mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/ancp