This IESG DISCUSS comment from Russ applies equally to all RADEXT WG documents that provide for Diameter AVPs, whether by the RFC 4005 Diameter NAS Application method, or by some other explicit means. We need to develop a suitable chunk of template text for the Security Considerations section of RADEXT WG documents to address Diameter security considerations, as well as RADIUS security considerations.
I don't believe there are any substantial differences in the security implications of these attributes in RADIUS vs. Diameter, and I'd suggest that the document say this and leave it at that.
-- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/radiusext/>