Re: [BEHAVE] RFC6147 and RFC7208 interoperability issues

Christian Huitema <huitema@huitema.net> Mon, 07 February 2022 15:57 UTC

Return-Path: <huitema@huitema.net>
X-Original-To: behave@ietfa.amsl.com
Delivered-To: behave@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8983E3A0E5F for <behave@ietfa.amsl.com>; Mon, 7 Feb 2022 07:57:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.887
X-Spam-Level:
X-Spam-Status: No, score=-1.887 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id boYGvo0k9IdP for <behave@ietfa.amsl.com>; Mon, 7 Feb 2022 07:57:13 -0800 (PST)
Received: from mx36-out10.antispamcloud.com (mx36-out10.antispamcloud.com [209.126.121.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4D893A0CC2 for <behave@ietf.org>; Mon, 7 Feb 2022 07:57:02 -0800 (PST)
Received: from xse309.mail2web.com ([66.113.197.55] helo=xse.mail2web.com) by mx259.antispamcloud.com with esmtp (Exim 4.92) (envelope-from <huitema@huitema.net>) id 1nH6Nf-000BMY-Hu for behave@ietf.org; Mon, 07 Feb 2022 16:57:00 +0100
Received: from xsmtp22.mail2web.com (unknown [10.100.68.61]) by xse.mail2web.com (Postfix) with ESMTPS id 4JsrNn3CFGzBTL for <behave@ietf.org>; Mon, 7 Feb 2022 07:56:41 -0800 (PST)
Received: from [10.5.2.49] (helo=xmail11.myhosting.com) by xsmtp22.mail2web.com with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.92) (envelope-from <huitema@huitema.net>) id 1nH6Nd-00058m-Ai for behave@ietf.org; Mon, 07 Feb 2022 07:56:41 -0800
Received: (qmail 17054 invoked from network); 7 Feb 2022 15:56:40 -0000
Received: from unknown (HELO smtpclient.apple) (Authenticated-user:_huitema@huitema.net@[172.58.46.218]) (envelope-sender <huitema@huitema.net>) by xmail11.myhosting.com (qmail-ldap-1.03) with ESMTPA for <behave@ietf.org>; 7 Feb 2022 15:56:40 -0000
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
From: Christian Huitema <huitema@huitema.net>
Mime-Version: 1.0 (1.0)
Date: Mon, 07 Feb 2022 07:56:39 -0800
Message-Id: <B6D6B4CC-AC1F-459C-952A-E9493E00FDB3@huitema.net>
References: <077D662F-5E6D-44F5-8DD3-B58D8B535C5D@network-heretics.com>
Cc: marcelo bagnulo braun <marcelo@it.uc3m.es>, behave@ietf.org
In-Reply-To: <077D662F-5E6D-44F5-8DD3-B58D8B535C5D@network-heretics.com>
To: Keith Moore <moore@network-heretics.com>
X-Mailer: iPhone Mail (19C56)
X-Originating-IP: 66.113.197.55
X-Spampanel-Domain: xsmtpout.mail2web.com
X-Spampanel-Username: 66.113.197.0/24
Authentication-Results: antispamcloud.com; auth=pass smtp.auth=66.113.197.0/24@xsmtpout.mail2web.com
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT9WLQux0N3HQm8ltz8rnu+BPUtbdvnXkggZ 3YnVId/Y5jcf0yeVQAvfjHznO7+bT5zVVrN4oC+7+v6H1pDHwMpu42UuDhyzVYcwl2RB+0Aaeuxq er6BI+Dmk3+em20RXLch55uqY3MhMgFAHq5BxPxPXn36fLqvhISQ5ykyqUZqUd1jhnM/Mbva2XLV /LIEzaL2KoAZhJekBPedneT7f699iwgQ+2yl7BoDncKB+ziACIPAgTtUp75uqlx0KezvZHVrtC+3 u7imVaHvXwOgpH/5WQaaSSaRcFTFxaRvADgOuFdAU5fRzM/QzQW9/IoH33AG8ECuCwECazCwODtO F78PiyQEs+dlGXUJLWZ+Gc08Nmllke3azHdKmySKNUVQl4ntlVxnbS8qIO7oudHyb2T1VQ58xe/l rqiRGalI3YPsxOTrFXToVyBmRCgQVX6zVyFUu8qzeMQP6uTHL0d9UjfY+eX5ZvcELCIKs663F/co VFYFvf25LVONYbYifH5OzZDcG6hsRQZiAIgw+z837AqgX7ewI8e1h7RITgN14BHmGVt/ReJ9Mfhz zmbKTH7wI9GEU1utNskUAORCV2WFZX0jvQDJ+ubUA3pW9vyNwhNtqaTeVLW3pB0Q/PTyowo5Afu4 YBTu75i2vqObD4QqiAvxCFXoGKtafvOtcW/mP16byrL/nwvREHuP3/Ps3A4Pt7hRyBl07OVp2D/S 9ogT8aIX6abOyKlLsxs8P4CT3FEuGxl+GaJVS96CteEJd/VpWHqC1AI9a3irbifzymzQYX+PTF6f BfmbeaJmBD7olQ5VFc3Kx4hmZ+fuRSIlWS4ZwXUM0rNJQGzebnTLunTUqZa6ID7e7KTZiiFi9/qW lH/OJzcKVNeVJ9BXyu9+ceCqThTYg2px1fSoqxQCCHnLMo/m9VKh99btUAanjnMCAH2co+fBoeG+ Hs0afhsY/5zhNYWRVYKU9W9tbmVXJBqdHHDmZEKhyNAv1N35kYWaEdgLurFV5oTvAcwA4rM3FkfW 8/1kE/e7sUnsVpINvARNxpFO
X-Report-Abuse-To: spam@quarantine11.antispamcloud.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/behave/S6M_PqilUOI-_4O8JEES_vlypkI>
Subject: Re: [BEHAVE] RFC6147 and RFC7208 interoperability issues
X-BeenThere: behave@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: mailing list of BEHAVE IETF WG <behave.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/behave>, <mailto:behave-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/behave/>
List-Post: <mailto:behave@ietf.org>
List-Help: <mailto:behave-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/behave>, <mailto:behave-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Feb 2022 15:57:29 -0000

 

> On Feb 7, 2022, at 5:11 AM, Keith Moore <moore@network-heretics.com> wrote:
> 
> Sent from my iPhone
> 
>> On Feb 7, 2022, at 1:42 AM, marcelo bagnulo braun <marcelo@it.uc3m.es> wrote:
>> 
>> I guess one operative question is whether this issue can be dealt with an errata or should require an update in the spec.
> 
> Neither.  That SPF and TXT records are not altered is a feature, not a bug

Marcelo,

Errata is for errors, not for changing the specifications. The current text absolutely reflects the decisions of the WG at the time. To change the decision would require a new version. In fact, it would also require a debate, because there are two solutions.

One potential solution is to say that the text is right, that NAT64 should only work with A and AAAA records, and that applications using other records that embed IP addresses should be cognizant of NAT64 and apply their own logic.

That's not what Klaus hoped for, but there are several arguments for that approach, especially in the case of records with security implications like SPF. Arguably, applications relying on such records should acquire them in secure ways, which precludes alterations in the middle.

There are also deployment arguments for the end to end approach. New records can be created at any time. The applications using them know that, and are expected to have code to handle them. NAT64 don't. They ship in devices like home routers that are notoriously slow to upgrade. Even if we told them to upgrade, they would only do that slowly, and applications that need it immediately will still need to add the NAT64 code.

So, no, this is not material for an errata. Maybe just additional guidance about deployment and knowledge in applications. Or, failing that, a revised RFC.

-- Christian Huitema