Re: [dhcwg] DHCP hackathon in Prague: SeDHCPv6

[Tomek Mrugalski <[e-mail]>]

W dniu 07.06.2017 o 20:10, 神明達哉 pisze:
> At Tue, 06 Jun 2017 00:10:46 +0200,
> Francis Dupont <[e-mail]> wrote:
>> Perhaps we should drop it and restart from the beginning about
>> address assignment security, for instance using opportunistic DNSSEC
>> with a client embedded first relay? At least it does not need to
>> develop a new protocol...
> 
> I don't know what "opportunistic DNSSEC with a client embedded
> first relay" means, but as we're sort of getting stuck I see even a
> drop-and-restart might be an option.
This work has been in development for almost a decade. This particular
approach started in 2013. Let's not restart the work until we exhaust
all other possible alternatives.

How about the proposal Bernie made here?
https://mailarchive.ietf.org/arch/msg/dhcwg/c2bB8KdbGgsZShHtnyUgKwELa-w

Another possible approach to the problem mentioned in off-line
discussion was DTLS 1.2 (RFC6347), but Francis pointed out that it's
quite exchange heavy, compared to DHCP, which takes 1 or 2 exchanges.
Going to 3 or perhaps 4 exchanges is ok in my opinion, but if the
proposal requires more than that, we would see a lot of raised eyebrows.

Tomek