Re: [dhcwg] *DRAFT* dhc WG agenda

marcelo bagnulo braun <marcelo@it.uc3m.es> Mon, 28 July 2008 15:04 UTC

Return-Path: <dhcwg-bounces@ietf.org>
X-Original-To: dhcwg-archive@megatron.ietf.org
Delivered-To: ietfarch-dhcwg-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B63713A6ABD; Mon, 28 Jul 2008 08:04:05 -0700 (PDT)
X-Original-To: dhcwg@core3.amsl.com
Delivered-To: dhcwg@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE74828C0DB; Sun, 27 Jul 2008 02:12:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.162
X-Spam-Level:
X-Spam-Status: No, score=-3.162 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_22=0.6, RCVD_BAD_ID=2.837, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TDM2tC1o1fU5; Sun, 27 Jul 2008 02:12:10 -0700 (PDT)
Received: from smtp02.uc3m.es (smtp02.uc3m.es [163.117.176.132]) by core3.amsl.com (Postfix) with ESMTP id 63B0D3A683E; Sun, 27 Jul 2008 02:12:09 -0700 (PDT)
Received: from marcelo-bagnulos-macbook-pro.local (unknown [130.129.23.29])by smtp02.uc3m.es (Postfix) with ESMTP id 1C04D4242ED; Sun, 27 Jul 2008 11:12:14 +0200 (CEST)
Message-ID: <488C3BEC.6060101@it.uc3m.es>
Date: Sun, 27 Jul 2008 11:12:12 +0200
From: marcelo bagnulo braun <marcelo@it.uc3m.es>
User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421)
MIME-Version: 1.0
To: JiangSheng 66104 <shengjiang@huawei.com>
References: <DC113ED5-44B8-4F3E-87EE-EA3855C0B558@cisco.com><4889C6F4.907090 2@piuha.net> <f95bc2308556.8556f95bc230@huawei.com><488B3FD1.1010503@piuha.net> <fdd6dcad12d6.12d6fdd6dcad@huawei.com>
In-Reply-To: <fdd6dcad12d6.12d6fdd6dcad@huawei.com>
X-imss-version: 2.051
X-imss-result: Passed
X-imss-scanInfo: M:B L:E SM:2
X-imss-tmaseResult: TT:1 TS:-24.0415 TC:1F TRN:61 TV:5.5.1026(16056.006)
X-imss-scores: Clean:100.00000 C:0 M:0 S:0 R:0
X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)
X-Mailman-Approved-At: Mon, 28 Jul 2008 08:04:04 -0700
Cc: cga-ext@ietf.org, Ralph Droms <rdroms@cisco.com>, Dhc Chairs <dhc-chairs@tools.ietf.org>, DHC WG <dhcwg@ietf.org>, Csi Chairs <csi-chairs@tools.ietf.org>
Subject: Re: [dhcwg] *DRAFT* dhc WG agenda
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://www.ietf.org/mailman/private/dhcwg>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="iso-8859-1"; Format="flowed"
Sender: dhcwg-bounces@ietf.org
Errors-To: dhcwg-bounces@ietf.org

JiangSheng 66104 escribió:
> Hi, Jari,
>
> Please see my reply in lines.
>
> Regards, Sheng
>
>   
>> You are right about how the charter text is written. However, I 
>> have 
>> been interpreting this a bit more broadly.
>>
>> The other side is that the DHC charter also has a security item.
>>     
>
> I guess we can have discussions in both WGs and see how it is going. In
> CSI WG, we may focus on how CGA should be configured/generated in DHCP
> environment; at the same time, in DHC WG,we may focus on more how DHCP
> should be extended to adopt CGA.
>   
I am all for disucssion, but i would certainly think it is better to not 
work in solutions untill we have some clearer view of the dhcp-cga 
interaction is i.e. till CSI does the work on the analysis.
Once the analysis is done, we can then decide what solutions to persue. 
I mean, there is no hurry for having solutions for dhcp cga interaction, 
right? we can do things in the right order in this case imho

Regards, marcelo


>  
>   
>> In any case, I do not think we can jump to solutions that involve 
>> CGAs 
>> without first doing the groundwork: what are the possible 
>> approaches to 
>> using CGAs in the conjunction of DHCP? Its hard to separate the use 
>> of 
>> CGA addresses in DHCP from the benefits to protecting the DHCP 
>> process.
>>     
>
> Between CGA and DHCP, there are actually two directions: a) using DHCP
> to serve/enable the generation/usage of CGA on host, this should be the
> work content of CSI; b) using CGA to serve the security of DHCP, this is
> mainly about extend DHCP with new options, it should be work item of DHC.
>
>   
>> Please ask for the CSI slot as well and see where the discussion 
>> takes us.
>>     
>
> I did request a time slot in CSI to talk about the above a) point. I can
> mention above b) point in my talk and clarify the different. Discussions
> in both WG are useful to take these work forward.
>
> Best regards,
>
> Sheng
>  
>   
>> JiangSheng 66104 wrote:
>>     
>>> Hi, Jari,
>>>
>>> Yes, there is a DHCP relevant chartered item in CSI work group as I
>>> quate below. However, it is quite different from this draft. The 
>>>       
>> chartered> item in CSI is mainly about how to use CGA in DHCP-
>> managed networks. It is
>>     
>>> covered by my another draft:
>>> www.ietf.org/internet-drafts/draft-jiang-sendcgaext-cga-config-
>>>       
>> 02.txt>
>>     
>>> The current CSI charter does not cover securing DHCP with CGA. 
>>>       
>> That's why I
>>     
>>> submit this draft to DHC group. It is mainly adopting CGA to 
>>>       
>> serve DHCP
>>     
>>> for security purpose. It is extension of DHCP, not extension of 
>>>       
>> CGA. I think
>>     
>>> it is better to do this work in DHC WG rather than CSI. Based on 
>>>       
>> the above
>>     
>>> understanding, I did not request a time slot in CSI
>>>
>>> "Develop an informational document analysing different approaches to
>>> allow SeND and CGAs to be used in conjunction with DHCP, and making
>>> recommendations on which are the best suited. Recharter based on the
>>> result of the analysis."
>>>
>>> Best regards,
>>>
>>> Sheng
>>>
>>> ----- Original Message -----
>>> From: Jari Arkko <jari.arkko@piuha.net>
>>> Date: Friday, July 25, 2008 8:28 pm
>>> Subject: Re: [dhcwg] *DRAFT* dhc WG agenda
>>>
>>>   
>>>       
>>>>> Secure DHCPv6 using CGA                         S. Jiang        
>>>>>           
>>>>>       
>>>>>           
>>>> 10 
>>>>     
>>>>         
>>>>> minutes
>>>>>   <draft-jiang-dhc-Secure-DHCPv6-00>
>>>>>   Initial WG review; accept as WG work item?
>>>>>       
>>>>>           
>>>> Note that we have another WG, CSI, whose charter has a work item 
>>>>         
>> on 
>>     
>>>> securing DHCP with CGA. Or to be more exact, producing first a 
>>>> design 
>>>> analysis before actually picking a solution.
>>>>
>>>> As a result, I don't think we want to adopt this document in the 
>>>> DHC WG.
>>>>
>>>> But don't take this as a suggestion to avoid the discussion! The 
>>>> discussion on the list has been useful, and we should also talk 
>>>> about it 
>>>> in the meeting. Has a slot been requested from CSI?
>>>>
>>>> Jari
>>>>
>>>>
>>>> _______________________________________________
>>>> dhcwg mailing list
>>>> dhcwg@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dhcwg
>>>>
>>>>     
>>>>         
>>>   
>>>       
>>     
>
>   

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www.ietf.org/mailman/listinfo/dhcwg