Re: [homenet] Firewall hole punching [was: About Ted's naming architecture...]

Lorenzo Colitti <lorenzo@google.com> Mon, 28 November 2016 21:33 UTC

Return-Path: <lorenzo@google.com>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DD61129527 for <homenet@ietfa.amsl.com>; Mon, 28 Nov 2016 13:33:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.197
X-Spam-Level:
X-Spam-Status: No, score=-4.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p1ygwef27Jjo for <homenet@ietfa.amsl.com>; Mon, 28 Nov 2016 13:33:13 -0800 (PST)
Received: from mail-io0-x22b.google.com (mail-io0-x22b.google.com [IPv6:2607:f8b0:4001:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2C3C12945D for <homenet@ietf.org>; Mon, 28 Nov 2016 13:33:12 -0800 (PST)
Received: by mail-io0-x22b.google.com with SMTP id m5so116973371ioe.3 for <homenet@ietf.org>; Mon, 28 Nov 2016 13:33:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=0SPPzr0Q9g07hehlrJ62AY4hUSUO3hATdyoh2owhl1o=; b=eTAAgJD1qTUcm0ix7553ngB1CGCMU6XIKHWQ5jjYDy8uXyJxsn/ZXSdQLqSlZgRxpO LUj4KCPTF0mYdS0qbEBhNr7VZDrfI8vshr6Mk9yKMBTTCEeNSzU1vp1Ny7hI+FlK4DMV +2g1+3MGMwz4qToVr5USeLUdR3G1cSvdHhVbBNzCLgtEJTTeeo5kvluRWZ8q7n0Nw5os oZKsRGZf9wLmQU2FMt9u1FmbAgTBkZUwNUKnyS25+YA+jyvB3NDUxX7dsMZaAJ+a+oVG ARvoXnXBI8AKKzKCftgHgcboer9KJuN25tAYw5U4ghcIdbVzY/CVNLy86Hp/CpQoInTt i8MQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=0SPPzr0Q9g07hehlrJ62AY4hUSUO3hATdyoh2owhl1o=; b=Xlr0R6XoO8azMVxSgUW7s6kl2FKPYr+N62AcSTX5h3ueXdFBXwwDZpkCIzIRs6C9h5 HkYoqcT+902HMQdacrYzi1OrKqrVx30BZQ5u1jlrOTHHRQcE6OfRveQwpxSgTZWs0cF9 XIN1lyl2LjJuNXGPBetnnemDltPF9do9NlmCor/djY0IOjaz8DligyNgymj5pOT8oRYq C01P0l/5F/3pvkD4G8QV2LcqlU7bkSamn2swwRty3bUK/vK+sgrhNxqp3X+5014/6gJg 2EsTuU0oFBhBLK9/4XPxoTif+6w+S5OLxKwKgOXRs993Fwaoihe7T4iX72dtkGdWHxFE XJZw==
X-Gm-Message-State: AKaTC02l5CpbOlj8DpXjehF4xLeIuLYxxjSj9oKRafkJHAPWbhw5nVP2kGn6hG2pvTPToeyqdbxnzbeBgXRJ99XV
X-Received: by 10.36.245.9 with SMTP id k9mr20443890ith.65.1480368791916; Mon, 28 Nov 2016 13:33:11 -0800 (PST)
MIME-Version: 1.0
Received: by 10.107.18.160 with HTTP; Mon, 28 Nov 2016 13:32:51 -0800 (PST)
In-Reply-To: <0DCB18C1-709A-4C03-81DF-E029584CF23F@google.com>
References: <871syc54d1.wl-jch@pps.univ-paris-diderot.fr> <CAPt1N1=eXRBh6UqGGqUSK9cH_jY5MvPcE4MFZUPe2Z48LF7bkA@mail.gmail.com> <87lgwj504t.wl-jch@irif.fr> <CAPt1N1kDCMDBEpt7QYhHtPYjaMJAzw8G81=2y2f=y0ZProeCPA@mail.gmail.com> <13675.1479346312@dooku.sandelman.ca> <3B35AF68-4792-4B2A-8277-A7B49206581F@google.com> <74143607-B81E-4D4C-89D3-4754E0DA7DE1@jisc.ac.uk> <790beb67-a62e-b7dc-b64e-a3fcecfbdb12@mtcc.com> <87zikrihl7.wl-jch@irif.fr> <2EEB3CCD-3C25-4844-95B5-DDE31F982EA2@iki.fi> <87oa17i9eq.wl-jch@irif.fr> <2DAA6FEB-8C87-42DA-9465-E740669C563A@iki.fi> <8C298ED7-DF92-4FB7-9D6A-C113E98CABE9@google.com> <F351E6DB-4829-4EE3-BACE-25DA543B21C5@iki.fi> <CAD6AjGSh_-MiqeNWD_b+xZpcG7p+WEUyBPgwpMr88oojMRnmyQ@mail.gmail.com> <E42B5AB7-26CD-48CD-92E1-9D40E5405B0C@jisc.ac.uk> <d24d8feb-05a9-7c05-e8d6-eb9c31869d6f@bellis.me.uk> <0DCB18C1-709A-4C03-81DF-E029584CF23F@google.com>
From: Lorenzo Colitti <lorenzo@google.com>
Date: Mon, 28 Nov 2016 13:32:51 -0800
Message-ID: <CAKD1Yr0CWP=tGe7WfWNmT_0_OaByo1eJxzC_MYgmHJT23kGTzw@mail.gmail.com>
To: james woodyatt <jhw@google.com>
Content-Type: multipart/alternative; boundary="94eb2c03596efaeb400542633706"
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/d1XXCBFLN-ktp63PgDZlEyMFTO0>
Cc: "homenet@ietf.org" <homenet@ietf.org>, Ray Bellis <ray@bellis.me.uk>
Subject: Re: [homenet] Firewall hole punching [was: About Ted's naming architecture...]
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2016 21:33:14 -0000

On Mon, Nov 28, 2016 at 12:11 PM, james woodyatt <jhw@google.com> wrote:

> [**] Before anyone asks, the answer is "No, I will not write a security
> architecture draft for HOMENET that prohibits passive listeners on
> unmanaged networks receiving inbound flows from unauthenticated hosts over
> public Internet routes. If that’s how it should unfold, then I’m confident
> the working group will find somebody with the necessary moral flexibility."
>

I don't think there is any point writing such a document since it is
unlikely gain consensus anyway.