evaluation: draft-ietf-sigtran-security

[hardie@qualcomm.com]

Please update my evaluation to no-ob, as the details of the
upgrade procedure and the note not to use unordered
delivery have been added.

As a side note, I see they have changed "trusted network
principle" to "closed network principle" in Section 3.  This
certainly displays a fair amount of the cynicism I requested,
but this wasn't exactly what I meant.  I meant that operating
on the "trusted" or "closed" network principle is how the
current telephone network works, but that does not mean
it is a good idea.  There has been lots of work on the vulnerabilities
of those networks, but this draft reports that principle (however
named) with no hint of any problems it might contain.

As I said originally, though, this doesn't change the spec, and delaying
it for this doesn't make much sense.  The authors might want to
talk to Sean Donelan, though, as his experience writing ss7 code and
exploring security vulnerabilities in networks might prove useful
to them.