Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

"Bernie Volz (volz)" <volz@cisco.com> Fri, 17 February 2017 23:00 UTC

Return-Path: <volz@cisco.com>
X-Original-To: dhcwg@ietfa.amsl.com
Delivered-To: dhcwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58B761296F6 for <dhcwg@ietfa.amsl.com>; Fri, 17 Feb 2017 15:00:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.521
X-Spam-Level:
X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zN0aODxEYMcg for <dhcwg@ietfa.amsl.com>; Fri, 17 Feb 2017 15:00:24 -0800 (PST)
Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 217A41296D2 for <dhcwg@ietf.org>; Fri, 17 Feb 2017 15:00:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=28568; q=dns/txt; s=iport; t=1487372424; x=1488582024; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=w7tuDCKttBzx16ccrTIjR3aykTg6+BQjk30Z52/BvqQ=; b=KidlIMBALqkvrAbA98ZTBmIah4K5P/7N2XC3oKjbGa5DyLCWEtJEC2u0 ogL746Ko8kDdJsR4/mmLiBnNGXUSn7fLdAsM+yFd4r3nW1sjHW7un5POi xvq9r01MWpfi/tGxTNGEBH+liAF3m2HxM4NOOdJeNwKFsrRRcWg13cyoV E=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CKAQDaf6dY/49dJa1eGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBgm9iYYEJB4NTigiSFpU0ggwuhXQCGoILPxgBAgEBAQEBAQFiKIR?= =?us-ascii?q?wAQEBAgIjCkoCEAIBBgIRBAEBIQcDAgICMBQJCAIEAQ0FCBOJUQ6SeJ1YgiWLW?= =?us-ascii?q?gEBAQEBAQEBAQEBAQEBAQEBAQEBARgFizuEPkyCUIJfBZVdhiQBkg+REZMdAR8?= =?us-ascii?q?4gQBRFYUDHYFhdQGKA4ENAQEB?=
X-IronPort-AV: E=Sophos;i="5.35,173,1484006400"; d="scan'208,217";a="387006673"
Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 17 Feb 2017 23:00:23 +0000
Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by rcdn-core-7.cisco.com (8.14.5/8.14.5) with ESMTP id v1HN0MW7005342 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 17 Feb 2017 23:00:22 GMT
Received: from xch-aln-003.cisco.com (173.36.7.13) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Fri, 17 Feb 2017 17:00:22 -0600
Received: from xch-aln-003.cisco.com ([173.36.7.13]) by XCH-ALN-003.cisco.com ([173.36.7.13]) with mapi id 15.00.1210.000; Fri, 17 Feb 2017 17:00:22 -0600
From: "Bernie Volz (volz)" <volz@cisco.com>
To: "Templin, Fred L" <Fred.L.Templin@boeing.com>, Ted Lemon <mellon@fugue.com>, =?utf-8?B?56We5piO6YGU5ZOJ?= <jinmei@wide.ad.jp>
Thread-Topic: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt
Thread-Index: AQHSb9dh9mAfGPV9aE2109Imxv8IT6FqmOCwgAHRRkCAAfbYgP//oAvA
Date: Fri, 17 Feb 2017 23:00:21 +0000
Message-ID: <3e5776023c0d447aaccb81dc8ec8724a@XCH-ALN-003.cisco.com>
References: <148455739520.22478.14651605359463322132.idtracker@ietfa.amsl.com> <CAJ3w4NdCk8CBfNagcXT_VW_50+=xK=N7aB5HHqqn3stMt7Gy-Q@mail.gmail.com> <CAJE_bqf_AP9w1Bh_5kSB4YkLaV9XJ1tngufAiOMxVqQLwMruNA@mail.gmail.com> <aba52c11e462426bb3cbf66fcdca7783@XCH15-06-08.nw.nos.boeing.com> <CAJE_bqcG004FuUkKa0Xk1AiOo-bO4aHweYDpxMeeg+_=dSK6FQ@mail.gmail.com> <5c9ed55cfdc94456baf19740ba62910c@XCH15-06-08.nw.nos.boeing.com> <CAJE_bqeshAHmvGukto+PKs_skVPF5bnukvw8+5_04YEx_6m_sQ@mail.gmail.com> <ABDD8B01-EC93-4ADD-AF59-57332A9C255E@fugue.com> <9d9d50b20005459aafffcd8f64bfb281@XCH-ALN-003.cisco.com> <21bd317edc764fc89dc4a13aa541b1c1@XCH15-06-08.nw.nos.boeing.com>
In-Reply-To: <21bd317edc764fc89dc4a13aa541b1c1@XCH15-06-08.nw.nos.boeing.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.98.1.204]
Content-Type: multipart/alternative; boundary="_000_3e5776023c0d447aaccb81dc8ec8724aXCHALN003ciscocom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dhcwg/lUm2WaJ2Aa2VYLK0cGQHjVSEb4E>
Cc: dhcwg <dhcwg@ietf.org>
Subject: Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt
X-BeenThere: dhcwg@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: <dhcwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dhcwg/>
List-Post: <mailto:dhcwg@ietf.org>
List-Help: <mailto:dhcwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dhcwg>, <mailto:dhcwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 17 Feb 2017 23:00:26 -0000

I think the plan here makes some sense … seDHCPv6 has had several attempts and been kicked back to the WG. So, I think the WG wants to go slowly and not develop a solution until seDHCPv6 is likely to advance in the IESG (encryption was only added fairly “recently”).

And, it isn’t like the day after seDHCPv6 is “approved” that every client (and server) will support this. It will take time to roll out. And, hopefully we can get the RAAN work out in a fairly short time.

In your networks, if you can’t support seDHCPv6 until you have something to so solve the RAAN issues, you obviously can’t deploy seDHCPv6. But there may be plenty of other networks where this isn’t an issue and it could start to be deployed (coffee shops and enterprises).


-          Bernie

From: Templin, Fred L [mailto:Fred.L.Templin@boeing.com]
Sent: Friday, February 17, 2017 5:35 PM
To: Bernie Volz (volz) <volz@cisco.com>om>; Ted Lemon <mellon@fugue.com>om>; 神明達哉 <jinmei@wide.ad.jp>
Cc: dhcwg <dhcwg@ietf.org>
Subject: RE: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

Bernie,

The discussion gravitated towards not resurrecting until the sedhcpv6
I-D progresses further. We will reevaluate this once sedhcpv6 is done.

This does not make sense to me; sedhcpv6 is the very reason that RAAN is important.
Just like RFC3971 did with IPv6 ND Timestamp and Nonce options, sedhcpv6 could
define the RAAN operation and have everything over and done with in one pass.
And, I have already identified a use case where RAAN is absolutely necessary.
Also, I was unable to attend  IETF97, where I certainly would have stood up and
voiced my position.

Thanks - Fred

From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Bernie Volz (volz)
Sent: Thursday, February 16, 2017 2:39 PM
To: Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>>; 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: dhcwg <dhcwg@ietf.org<mailto:dhcwg@ietf.org>>
Subject: Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

I presented about resurrecting draft-ietf-dhc-dhcpv6-agentopt-delegate at IETF-97 (see https://www.ietf.org/proceedings/97/slides/slides-97-dhc-resurrect-draft-ietf-dhc-dhcpv6-agentopt-delegate-00.pdf).

And the conclusion then was (see https://www.ietf.org/proceedings/97/minutes/minutes-97-dhc-00.txt):

The discussion gravitated towards not resurrecting until the sedhcpv6
I-D progresses further. We will reevaluate this once sedhcpv6 is done.


-          Bernie

From: dhcwg [mailto:dhcwg-bounces@ietf.org] On Behalf Of Ted Lemon
Sent: Wednesday, February 15, 2017 1:49 PM
To: 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>>
Cc: dhcwg <dhcwg@ietf.org<mailto:dhcwg@ietf.org>>
Subject: Re: [dhcwg] Fwd: New Version Notification for draft-ietf-dhc-sedhcpv6-20.txt

On Feb 15, 2017, at 1:32 PM, 神明達哉 <jinmei@wide.ad.jp<mailto:jinmei@wide.ad.jp>> wrote:
I personally don't think it a blocking issue for sedhcpv6, but, of
course, the wg should decide it.

It definitely isn't a blocking issue, but Fred is right that if we are going ahead with encryption-only, which I agree is the right move, we need to do this work as well.