Re: [homenet] A TOFU approach to naming things in the homenet (with code!)

Toke Høiland-Jørgensen <toke@toke.dk> Fri, 14 April 2017 13:34 UTC

Return-Path: <toke@toke.dk>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF71412ECA3 for <homenet@ietfa.amsl.com>; Fri, 14 Apr 2017 06:34:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=toke.dk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YHzRDXUrIBcg for <homenet@ietfa.amsl.com>; Fri, 14 Apr 2017 06:34:05 -0700 (PDT)
Received: from mail.toke.dk (mail.toke.dk [IPv6:2001:470:dc45:1000::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 015DD129435 for <homenet@ietf.org>; Fri, 14 Apr 2017 06:34:05 -0700 (PDT)
From: Toke Høiland-Jørgensen <toke@toke.dk>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=20161023; t=1492176841; bh=z0qipXgV1YCVIWWoSxYfz4J5Ps4ghiVYn6geDBVH6MI=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From; b=cThbNJvBhsIQZPQuehnBPSw8oUZKM/16iQi8X1GAQzshAr6jpTjybUrRyvDTOGi0w fjuljLva+iDKKB1zq4oksdVCxALSt4k+znYeZlMogotNGkhVaD+N3DSktSi0bqfrj6 hbUFJGwya44yO9e+5JyDEkXXI/ZfqciTxrjmN8jKfik/SrGQlGabhAE7LlbgIK4as8 c8oCgGGEfsds6n6euW8VSRaNnoS5xP/iCojdV8J8YxjfC9rkqPTwlC9mw1wtuw6KW9 OhIvlt/jJhzYA/SoQoMvTjg9beJqLsgt4KsbgtIGuPGvxPXnLVLS5SU8rqZKcYFiAb AFvuhd5CTGmkQ==
To: Ted Lemon <mellon@fugue.com>
Cc: homenet@ietf.org
References: <87r30vomax.fsf@alrua-x1> <B0BA51C3-3607-44AC-82B4-333611679EAA@fugue.com>
Date: Fri, 14 Apr 2017 15:34:01 +0200
In-Reply-To: <B0BA51C3-3607-44AC-82B4-333611679EAA@fugue.com> (Ted Lemon's message of "Thu, 13 Apr 2017 21:29:21 -0400")
X-Clacks-Overhead: GNU Terry Pratchett
Message-ID: <87lgr3nmeu.fsf@alrua-x1>
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/5FF-N7-ogq2p4B4haip-CC9Rc8E>
Subject: Re: [homenet] A TOFU approach to naming things in the homenet (with code!)
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Apr 2017 13:34:07 -0000

Ted Lemon <mellon@fugue.com> writes:

> Thanks for doing this! Did you come up with this on your own, or were
> inspired by
> https://tools.ietf.org/html/draft-lemon-homenet-naming-architecture-01
> section 3.4.2 and
> https://tools.ietf.org/html/draft-lemon-stateful-dnssd-00 section 4.2?

Well, I would by no means claim to have come up with the idea in a
vacuum. As I said, I have been following the naming discussions on this
list. I think I read the -00 of the naming architecture, but I have not
read the latest version, nor have I read the stateful-dnssd draft
before.

Looking at it now, what I have implemented looks like a hybrid of the
two halves of section 3.4.2. I.e., clients generate a KEY and use it to
sign updates, and they use that to remove records as well (i.e., there
is no support for unauthenticated updates in nsregd). But the records
are not permanent; the daemon will expire records that the client does
not maintain (since if a client drops off the network it has no way of
retiring its record).

> I ask both because I'm curious of you're proposing that the previous
> naming architecture document is more in line with what you think
> should be on a homenet, and also because I'm curious whether you are
> interested in working on the documents.

Hmm, well, I have first and foremost been trying to scratch my own itch
here. I was looking for something to replace dnsmasq's slaac address guessing
(https://tools.ietf.org/id/draft-taht-kelley-hunt-dhcpv4-to-slaac-naming-00.html),
and since no good solutions were forthcoming, I decided to roll my own.

That being said, I do believe this mechanism could be useful as part of
the homenet architecture, which is why I posted it here. And I wouldn't
mind spending some time fleshing out the mechanism and putting it into a
draft, if that is what you mean by "working on the documents"?

-Toke