Re: [Hipsec] IESG review of NAT traversal draft and encrypted parameters
Jeff Ahrenholz <j.ahrenholz@temperednetworks.com> Thu, 08 November 2018 16:22 UTC
Return-Path: <j.ahrenholz@temperednetworks.com>
X-Original-To: hipsec@ietfa.amsl.com
Delivered-To: hipsec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D69BB12D4E6 for <hipsec@ietfa.amsl.com>; Thu, 8 Nov 2018 08:22:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wf6jHYlWGe19 for <hipsec@ietfa.amsl.com>; Thu, 8 Nov 2018 08:22:18 -0800 (PST)
Received: from out.west.exch081.serverdata.net (cas081-co-1.exch081.serverdata.net [199.193.204.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1899412D4EE for <hipsec@ietf.org>; Thu, 8 Nov 2018 08:22:17 -0800 (PST)
Received: from MBX081-W5-CO-2.exch081.serverpod.net (10.224.129.85) by MBX081-W5-CO-1 (10.224.129.84) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 8 Nov 2018 08:22:16 -0800
Received: from MBX081-W5-CO-2.exch081.serverpod.net ([10.224.129.85]) by MBX081-W5-CO-2.exch081.serverpod.net ([10.224.129.85]) with mapi id 15.00.1367.000; Thu, 8 Nov 2018 08:22:16 -0800
From: Jeff Ahrenholz <j.ahrenholz@temperednetworks.com>
To: Miika Komu <miika.komu@ericsson.com>, hip WG <hipsec@ietf.org>
Thread-Topic: [Hipsec] IESG review of NAT traversal draft and encrypted parameters
Thread-Index: AQHUd383rljQQyA9SU6NRqaWcQec9Q==
Date: Thu, 08 Nov 2018 16:22:16 +0000
Message-ID: <AFBA350D-C1AA-421B-9F13-6C2AC214D466@temperednetworks.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [216.168.34.194]
Content-Type: text/plain; charset="utf-8"
Content-ID: <D3AC6920F2E78F49AFDBD1EA35948AD3@exch081.serverpod.net>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/hipsec/WsthY4xjGlj3wlWwLs3cKBqRnds>
Subject: Re: [Hipsec] IESG review of NAT traversal draft and encrypted parameters
X-BeenThere: hipsec@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/hipsec>, <mailto:hipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hipsec/>
List-Post: <mailto:hipsec@ietf.org>
List-Help: <mailto:hipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Nov 2018 16:22:20 -0000
Miika, > I don't think we need XORring with HIP because we have more powerful > mechanisms in HIP. So, I am going to add some text that mandates that > the LOCATOR parameter must be encapsulated inside ENCRYPTED parameter > when ICE-HIP-UDP will be used. The tradeoff here is that we favor > end-host privacy at the cost middlebox transparency. Seems like a good use of ENCRYPTED to me. I'm not sure what kind of middlebox would need to know all of the address candidates. Maybe some extra signaling could be devised when that needs to happen (like a HIP-aware middlebox where addresses can be communicated via HIP.) Thanks for continuing the work on this! -Jeff
- [Hipsec] IESG review of NAT traversal draft and e… Miika Komu
- Re: [Hipsec] IESG review of NAT traversal draft a… Jeff Ahrenholz