Re: [Gen-art] Gen-ART review of draft-ietf-intarea-nat-reveal-analysis-05

[<[e-mail]>]

Hi SM,

Please see inline.

Cheers,
Med 

>-----Message d'origine-----
>De : SM [mailto:[e-mail]] 
>Envoyé : vendredi 22 mars 2013 03:52
>À : BOUCADAIR Mohamed OLNC/OLN; Peter Yee
>Cc : [e-mail]; Brian Haberman; Suresh Krishnan; 
>[e-mail]
>Objet : RE: Gen-ART review of draft-ietf-intarea-nat-reveal-analysis-05
>
>Hi Med,
>At 02:03 21-03-2013, [e-mail] wrote:
>>I didn't received any explicit answer from your side whether the 
>>changes in -06 solve your concern.
>
>Sorry, it was IETF week.
>
>>I would appreciate if you can check the new revision. For your 
>>convenience the diff is available here: 
>>http://www.ietf.org/rfcdiff?url2=draft-ietf-intarea-nat-reveal
>-analysis-06
>
>There was the following in Section 2:
>
>   "HOST_ID does not reveal the identity of a user, a subscriber or an
>    application."
>
>That was changed to state that HOST_ID is not designed to reveal the 
>identity of a user.  The question is whether it can be used to reveal 
>the identity of the user.  I don't see an explanation for that in 
>draft-ietf-intarea-nat-reveal-analysis-06.

Med: The text in -06 says:

   HOST_ID is not designed to reveal the identity of a user, a
   subscriber, or an application.  HOST_ID is designed to identify a
   host under a shared IP address.

To prevent HOST_ID to be used to track a host, Section 3 discusses that aspect. 
In particular, the text says "Address-sharing function should not use
      permanent HOST_ID values."


>
>The layering issue for Forwarded header (Section 4.4.1) is still in 
>draft-ietf-intarea-nat-reveal-analysis-06.
>
>In Section 4.4.2:
>
>   "Injecting Forwarded header also introduces some implementations
>    complexity if the HTTP message is at or close to the MTU size."
>
>I don't know how much breakage will occur with this.

Med: Me too. This issue was reported by a wg participant.

>
>I would leave it to the document shepherd to decide whether to 
>discuss all this in the working group.  It could be used to override 
>the concern if everyone looks the other way. :-)
>
>Regards,
>-sm
>
>