Subject: [secdir] Secdir review of draft-cardenas-dff

From: Paul Hoffman <[email-masked]>
Date: Tue, 19 Feb 2013 13:40:34 -0800

Greetings again. draft-cardenas-dff, "Depth-First Forwarding in Unreliable Networks (DFF)", describes an experimental protocol that lets the network try to heal routing problems with messages in the data plane (instead of in the control plane). The protocol will change the routing of future packets in a way very similar to routing changes do today.

The security considerations section seems complete well thought-out. Basically, it says "content of redirected packets is out of scope, as is upper-layer security", which seems fine. It discusses the main concerns, which is this protocol making some denial-of-service attacks a bit easier, and does so fairly completely.

--Paul Hoffman