Re: [Anima-bootstrap] anima-bootstrap: Bootstrap proxy discovery options

["Max Pritikin (pritikin)" <[e-mail]>]

> On Dec 8, 2015, at 3:37 PM, Michael Richardson <[e-mail]> wrote:
> 
> 
> Max Pritikin (pritikin) <[e-mail]> wrote:
>>> This is one reason I'd like the new device to do things that
>>> configured devices do regularly.  So sending out a multicast IKEv2
>>> INIT might really make sense here.  Every device should do it every 5
>>> to 15 minutes.
>>> 
>>> A new device will either send them, or receive them.  Either way, it
>>> can respond and within the privacy of IKEv2, can do something.  That
>>> doesn't you can't use a proxy to get things through: the resulting
>>> one-hop-ACP won't be part of the production ACP.
> 
>> Michael, I failed to parse your response.
> 
>> Are you agreeing with Toerless’ argument that the new device should be
>> a responder?
> 
> No. I'm saying that a new device should do as little as possible to call
> attention to itself,

Ok, sounds like you’re agreeing with the threat but not necessarily the suggested mitigation.

> and should prefer to do things that all other devices
> are already doing.

I’m partially convinced that its worth minimizing how much a device “sticks its neck out” but once bootstrap is initiated I don’t think hiding the exchange is very easy nor worth the effort.

> 
>> Or, are you arguing that the new device should initiate the
>> bootstrapping; but do so in a way that does not expose it is a new
>> device?
> 
> For non-challenged (IoT) devices on non-challenged networks, the new device should
> initiate and drive the bootstrapping.
> 
> It would be best if this communication was indistinguishable from other ACP
> communication to an outsider.

This can only occur if bootstrapping is over a “provisional” ACP. I’m uncomfortable with having GRASP and ACP include special cases for bootstrapping. My gut feel is that the simplicity of a specific bootstrapping sequence — even if identifiable — is preferable. 

A *non-privacy* preserving bootstrapping is preferable from a certain point of view. I want my autonomic network to track and identify any overlapping autonomic bootstrapping to domains I don’t recognize. 

- max

> 
> 
> --
> Michael Richardson <[e-mail]>, Sandelman Software Works
> -= IPv6 IoT consulting =-
> 
> 
>