Subject: Re: [dispatch] AD review of draft-holmberg-dispatch-iotl - Richard's comment on security considerations

From: Christer Holmberg <[email-masked]>
Date: Mon, 15 Dec 2014 13:36:42 +0000

Hi,

> The Security Considerations is basically saying, "Be careful making decisions based on this parameter, because 
> anyone could change it".  The RFC 2119 language is helpful, because it refers to undefined concepts.  It would be 
> better to refer to documents that have a defined concept of trust boundaries, e.g., RFC 3325 for the notion of Spec(T).

I suggest the following:

"7.  Security Considerations

   The information SHOULD only be used for making policy decisions based
   on the role by nodes within the same trust domain [RFC3325].  In
   addition, there MUST exist an agreement between the operators for
   usage of the roaming role information."

Regards,

Christer