Re: [dhcwg] What sorts of services does DHCP configure?

[Ole Troan <[e-mail]>]

Ted,

>> are you sure you don't mean to say, "building networks this way is not a very good idea in most cases"?
>> because if you suspend enough disbelief, then the requirement for the network to be able to give hosts
>> information about the SAS/DAS policy table is hard to get around.
> 
> I'm deeply conflicted on the SAS option, as you may recall from my IESG review of it.  It does solve the problem, and in that sense it's good, but the security model makes me uncomfortable.   I would be a lot happier if SAS were somehow accomplished using ND options, probably for the same reason that people tend to be uncomfortable with default routes coming from DHCPv6 servers.  
> 
> "It's not a good idea" represents my most pessimistic view of the option; my optimistic view of the option is that it's useful and will make things work better in general.   But I'm waiting for reality to clue me in as to which view is more realistic.

agree.
you could, I believe generalise those concerns to most of the unauthenticated ND and DHCP provisioning options.
perhaps I want my host to use the searchlist when provided when I'm located in my home network (host owner equals network "operator"), but I probably wouldn't when connecting at my local cafe, or at my employers.

I would at least have liked that my host implementation provided more policy with regards to what DHCP options that it applied, based on what network it was connected to. that said, perhaps a lot of what we use DHCP for should better be done with service discovery.

cheers,
Ole