Re: [secdir] secdir review of draft-ietf-msec-gdoi-update

2011-08-04 Thread Sam Hartman
Brian == Brian Weis b...@cisco.com writes: Brian Hi Sam, Thanks for your review. Brian Your first comment is pointing out a typo (groupkey-pull Brian should be groupkey-push), which I've fixed. Brian The anti-replay description in Section 3.3 should not say Brian that the

Re: [secdir] secdir review of draft-ietf-msec-gdoi-update

2011-08-03 Thread Brian Weis
Hi Sam, Thanks for your review. Your first comment is pointing out a typo (groupkey-pull should be groupkey-push), which I've fixed. The anti-replay description in Section 3.3 should not say that the push message sequence number will be reset to 1. Text earlier in this section says that the

secdir review of draft-ietf-msec-gdoi-update

2011-08-01 Thread Sam Hartman
This update to the GDOI specification significantly improves clarity and readability. However, there is one issue that I think should be addressed prior to publication: At the top of page 11, the spec claims that a seq payload protects against group members responding to groupkey-pull messages