Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

"Templin, Fred L" <Fred.L.Templin@boeing.com> Sat, 18 February 2017 16:28 UTC

Return-Path: <Fred.L.Templin@boeing.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C95ED12952F for <dhcwg@ietfa.amsl.com>; Sat, 18 Feb 2017 08:28:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.22
X-Spam-Level:
X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8kcVdUze574l for <dhcwg@ietfa.amsl.com>; Sat, 18 Feb 2017 08:28:09 -0800 (PST)
Received: from phx-mbsout-02.mbs.boeing.net (phx-mbsout-02.mbs.boeing.net [130.76.184.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF0B612949D for <dhcwg@ietf.org>; Sat, 18 Feb 2017 08:28:09 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by phx-mbsout-02.mbs.boeing.net (8.14.4/8.14.4/DOWNSTREAM_MBSOUT) with SMTP id v1IGS9u6015816; Sat, 18 Feb 2017 09:28:09 -0700
Received: from XCH15-06-11.nw.nos.boeing.com (xch15-06-11.nw.nos.boeing.com [137.136.239.220]) by phx-mbsout-02.mbs.boeing.net (8.14.4/8.14.4/UPSTREAM_MBSOUT) with ESMTP id v1IGS4C9015706 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=OK); Sat, 18 Feb 2017 09:28:05 -0700
Received: from XCH15-06-08.nw.nos.boeing.com (2002:8988:eede::8988:eede) by XCH15-06-11.nw.nos.boeing.com (2002:8988:efdc::8988:efdc) with Microsoft SMTP Server (TLS) id 15.0.1263.5; Sat, 18 Feb 2017 08:28:04 -0800
Received: from XCH15-06-08.nw.nos.boeing.com ([137.136.238.222]) by XCH15-06-08.nw.nos.boeing.com ([137.136.238.222]) with mapi id 15.00.1263.000; Sat, 18 Feb 2017 08:28:03 -0800
From: "Templin, Fred L" <Fred.L.Templin@boeing.com>
To: "Bernie Volz (volz)" <volz@cisco.com>, Ted Lemon <mellon@fugue.com>, =?utf-8?B?56We5piO6YGU5ZOJ?= <jinmei@wide.ad.jp>
Thread-Topic: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt
Thread-Index: AQHSglOjbTsgor1qYk63PeyrUa0poqFqmOCwgAHRRkCAAWtvcIAAjxqAgACXmWA=
Date: Sat, 18 Feb 2017 16:28:03 +0000
Message-ID: <49129cb6c19c4be3bd483ceb3312bd72@XCH15-06-08.nw.nos.boeing.com>
References: <148455739520.22478.14651605359463322132.idtracker@ietfa.amsl.com> <CAJ3w4NdCk8CBfNagcXT_VW_50+=xK=N7aB5HHqqn3stMt7Gy-Q@mail.gmail.com> <CAJE_bqf_AP9w1Bh_5kSB4YkLaV9XJ1tngufAiOMxVqQLwMruNA@mail.gmail.com> <aba52c11e462426bb3cbf66fcdca7783@XCH15-06-08.nw.nos.boeing.com> <CAJE_bqcG004FuUkKa0Xk1AiOo-bO4aHweYDpxMeeg+_=dSK6FQ@mail.gmail.com> <5c9ed55cfdc94456baf19740ba62910c@XCH15-06-08.nw.nos.boeing.com> <CAJE_bqeshAHmvGukto+PKs_skVPF5bnukvw8+5_04YEx_6m_sQ@mail.gmail.com> <ABDD8B01-EC93-4ADD-AF59-57332A9C255E@fugue.com> <9d9d50b20005459aafffcd8f64bfb281@XCH-ALN-003.cisco.com> <21bd317edc764fc89dc4a13aa541b1c1@XCH15-06-08.nw.nos.boeing.com> <3e5776023c0d447aaccb81dc8ec8724a@XCH-ALN-003.cisco.com>
In-Reply-To: <3e5776023c0d447aaccb81dc8ec8724a@XCH-ALN-003.cisco.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [137.136.248.6]
Content-Type: multipart/alternative; boundary="_000_49129cb6c19c4be3bd483ceb3312bd72XCH150608nwnosboeingcom_"
MIME-Version: 1.0
X-TM-AS-MML: disable
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/RPSpjNAlXF2CbgUhXUcWQn5iXWY>
Cc: dhcwg <dhcwg@ietf.org>
Subject: Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Feb 2017 16:28:12 -0000

Hi Bernie,

My understanding  is that sedhcpv6 is intended to be a product of the IETF,
so I therefore assume that it is intended to be a product of engineering. It
has been shown that sedhcpv6 has an omission that will limit its applicability,
and that that omission can be rather easily remedied prior to publication. It
therefore makes good engineering sense to fix the omission now.

The proposal again is to have sedhcpv6 specify the RAAN option as part of
the base document.

Thanks - Fred

From: Bernie Volz (volz) [mailto:volz@cisco.com]
Sent: Friday, February 17, 2017 3:00 PM
To: Templin, Fred L <Fred.L.Templin@boeing.com>om>; Ted Lemon <mellon@fugue.com>om>; 神明達哉 <jinmei@wide.ad.jp>
Cc: dhcwg <dhcwg@ietf.org>
Subject: RE: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

I think the plan here makes some sense … seDHCPv6 has had several attempts and been kicked back to the WG. So, I think the WG wants to go slowly and not develop a solution until seDHCPv6 is likely to advance in the IESG (encryption was only added fairly “recently”).

And, it isn’t like the day after seDHCPv6 is “approved” that every client (and server) will support this. It will take time to roll out. And, hopefully we can get the RAAN work out in a fairly short time.

In your networks, if you can’t support seDHCPv6 until you have something to so solve the RAAN issues, you obviously can’t deploy seDHCPv6. But there may be plenty of other networks where this isn’t an issue and it could start to be deployed (coffee shops and enterprises).


-          Bernie

From: Templin, Fred L [mailto:Fred.L.Templin@boeing.com]
Sent: Friday, February 17, 2017 5:35 PM
To: Bernie Volz (volz) <volz@cisco.com<mailto:volz@cisco.com>>; Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>>; 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: dhcwg <dhcwg@ietf.org<mailto:dhcwg@ietf.org>>
Subject: RE: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

Bernie,

The discussion gravitated towards not resurrecting until the sedhcpv6
I-D progresses further. We will reevaluate this once sedhcpv6 is done.

This does not make sense to me; sedhcpv6 is the very reason that RAAN is important.
Just like RFC3971 did with IPv6 ND Timestamp and Nonce options, sedhcpv6 could
define the RAAN operation and have everything over and done with in one pass.
And, I have already identified a use case where RAAN is absolutely necessary.
Also, I was unable to attend  IETF97, where I certainly would have stood up and
voiced my position.

Thanks - Fred

From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Bernie Volz (volz)
Sent: Thursday, February 16, 2017 2:39 PM
To: Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>>; 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: dhcwg <dhcwg@ietf.org<mailto:dhcwg@ietf.org>>
Subject: Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

I presented about resurrecting draft-ietf-dhc-dhcpv6-agentopt-delegate at IETF-97 (see https://www.ietf.org/proceedings/97/slides/slides-97-dhc-resurrect-draft-ietf-dhc-dhcpv6-agentopt-delegate-00.pdf).

And the conclusion then was (see https://www.ietf.org/proceedings/97/minutes/minutes-97-dhc-00.txt):

The discussion gravitated towards not resurrecting until the sedhcpv6
I-D progresses further. We will reevaluate this once sedhcpv6 is done.


-          Bernie

From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Ted Lemon
Sent: Wednesday, February 15, 2017 1:49 PM
To: 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: dhcwg <dhcwg@ietf.org<mailto:dhcwg@ietf.org>>
Subject: Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

On Feb 15, 2017, at 1:32 PM, 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>> wrote:
I personally don't think it a blocking issue for sedhcpv6, but, of
course, the wg should decide it.

It definitely isn't a blocking issue, but Fred is right that if we are going ahead with encryption-only, which I agree is the right move, we need to do this work as well.