Re: [Hipsec] Last Call: <draft-ietf-hip-rfc4843-bis-05.txt> (An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers Version 2 (ORCHIDv2)) to Proposed Standard

S Moonesamy <sm+ietf@elandsys.com> Sat, 07 June 2014 16:45 UTC

Return-Path: <sm@elandsys.com>
X-Original-To: hipsec@ietfa.amsl.com
Delivered-To: hipsec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D97C61A0081 for <hipsec@ietfa.amsl.com>; Sat, 7 Jun 2014 09:45:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.441
X-Spam-Level:
X-Spam-Status: No, score=-2.441 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.651, T_DKIM_INVALID=0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1EVbSVeoLOx1 for <hipsec@ietfa.amsl.com>; Sat, 7 Jun 2014 09:45:39 -0700 (PDT)
Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id 419DB1A007E for <hipsec@ietf.org>; Sat, 7 Jun 2014 09:45:39 -0700 (PDT)
Received: from SUBMAN.elandsys.com ([197.224.136.172]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id s57GjEZu010064 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 7 Jun 2014 09:45:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1402159527; x=1402245927; bh=WJJ84/1iGuFzICqzUxojsPqjW2ltf10G7fSDl1WIal0=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=GuFS2viyY6ZOGcP0+AQzEQBNylDc17S1BVS87fhPDF1a1HegXz/tnLn7rHdgrWQbi ElsDYn+GRohe0uL++A2Nv2L7pRPJgJz6Ty9JiS1WpGPL6qkFMiCBCH4xpWjr7I6nPo KqVt09xiMNIf8zGWGfqKF9PkupXXnDiQ8MALV7Zs=
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=elandsys.com; s=mail; t=1402159527; x=1402245927; i=@elandsys.com; bh=WJJ84/1iGuFzICqzUxojsPqjW2ltf10G7fSDl1WIal0=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=Jyhq9zk+vCbNRrutzHuIiLVz39+kDQF37aicEhMvDDS5bLSgWcrHOUD0p1916XHLW jRYtTshmnB4MzOfBonmR5N65tp07nEb3x8qbi1vjLPfZfHjYUMedw7S+/3F4Y5cQPe XRrQ6lAADuXNv/Xu3+8ke3V7By//TiR86iLRuqTU=
Message-Id: <6.2.5.6.2.20140607073853.0b975758@resistor.net>
X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6
Date: Sat, 07 Jun 2014 08:22:47 -0700
To: hipsec@ietf.org
From: S Moonesamy <sm+ietf@elandsys.com>
In-Reply-To: <20140528160426.31345.98483.idtracker@ietfa.amsl.com>
References: <20140528160426.31345.98483.idtracker@ietfa.amsl.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Archived-At: http://mailarchive.ietf.org/arch/msg/hipsec/N948OGv5AgncV-Uk9WhgaWmhm3E
X-Mailman-Approved-At: Tue, 10 Jun 2014 08:03:18 -0700
Cc: Julien Laganier <julien.ietf@gmail.com>, Francis Dupont <fdupont@isc.org>
Subject: Re: [Hipsec] Last Call: <draft-ietf-hip-rfc4843-bis-05.txt> (An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers Version 2 (ORCHIDv2)) to Proposed Standard
X-BeenThere: hipsec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hipsec>, <mailto:hipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/hipsec/>
List-Post: <mailto:hipsec@ietf.org>
List-Help: <mailto:hipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Jun 2014 16:45:41 -0000

At 09:04 28-05-2014, The IESG wrote:
>The IESG has received a request from the Host Identity Protocol WG (hip)
>to consider the following document:
>- 'An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers
>    Version 2 (ORCHIDv2)'
>   <draft-ietf-hip-rfc4843-bis-05.txt> as Proposed Standard
>
>The IESG plans to make a decision in the next few weeks, and solicits
>final comments on this action. Please send substantive comments to the
>ietf@ietf.org mailing lists by 2014-06-11. Exceptionally, comments may be

I took a quick look at the draft.

In Section 1.1:

   "While being technically possible to use ORCHIDs between consenting
    hosts without any co-ordination with the IETF and the IANA, the
    authors would consider such practice potentially dangerous."

The document is intended as an IETF RFC.  I suggest framing the about 
from an IETF perspective instead of the authors' perspective.

   "A specific danger would be realised if the IETF community later
    decided to use the ORCHID prefix for some different purpose.  In
    that case, hosts using the ORCHID prefix would be, for practical
    purposes, unable to use the prefix for the other new purpose."

My reading of the above is that the working group is trying to make a 
case for some free IPv6 addresses.  According to the sixth paragraph 
in that section ORCHIDs are about allowing people to experiment.  The 
question that arises is why is an intended Proposed Standard being 
used to describe an experiment.  I don't understand the "danger" 
argument.  Is the ORCHID request for an experiment or for a prefix to 
be set aside for people using the technology?

In Section 3:

   "Router software MUST NOT include any special handling code for
    ORCHIDs.  In other words, the non-routability property of ORCHIDs, if
    implemented, MUST be implemented via configuration and NOT by
    hardwired software code.  At this time, it is RECOMMENDED that the
    default router configuration not handle ORCHIDs in any special way.
    In other words, there is no need to touch existing or new routers due
    to ORCHIDs.  If such a reason should later appear, for example, due
    to a faulty implementation leaking ORCHIDs to the IP layer, the
    prefix can be and should be blocked by a simple configuration rule."

There is, in my opinion, excessive usage of RFC 2119 key words in the 
above.  I suggest using RFC 2119 key words for the main points.

The IANA Considerations in Section 6 could do with a few 
changes.  Please see RFC 6890 for the information requirements for 
having a reservation in the IPv6 Special-Purpose Address Registry.

The termination date for the ORCHID assignment is March 2014.  It may 
be easier to note the fact that the experiment has ended instead of 
saying that the prefix is to be returned to IANA in 2014.

Regards,
S. Moonesamy