Re: [homenet] New version draft-mglt-homenet-naming-architecture-dhc-options-02.txt

Mikael Abrahamsson <swmike@swm.pp.se> Fri, 04 July 2014 04:58 UTC

Return-Path: <swmike@swm.pp.se>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AF8F1B2BDF for <homenet@ietfa.amsl.com>; Thu, 3 Jul 2014 21:58:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.602
X-Spam-Level:
X-Spam-Status: No, score=-4.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pcppXOTvYhno for <homenet@ietfa.amsl.com>; Thu, 3 Jul 2014 21:58:40 -0700 (PDT)
Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 082E81B2BDE for <homenet@ietf.org>; Thu, 3 Jul 2014 21:58:40 -0700 (PDT)
Received: by uplift.swm.pp.se (Postfix, from userid 501) id 436A3A1; Fri, 4 Jul 2014 06:58:38 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=swm.pp.se; s=mail; t=1404449918; bh=Gr9n30VZyYnez3M9Cud/CRwKFeZOHa/SexjtwurUVrc=; h=Date:From:To:Subject:In-Reply-To:References:From; b=KVnaRIrH+JDs9sM0BpmBhKDAAr7FYiHBERvuNHDpteZ0iyeFMaEYjP1HJ/68dqvuL KUU37TspXcJI2ON1hJsf9LJ4hpluDYh9lejczQ+zXrL7csXGIEvQG43BoRzZCGLXnw G+AqLO5Mimnl86QFGzEcfKsNKVtTFSmLKNPvBEpE=
Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 392569F for <homenet@ietf.org>; Fri, 4 Jul 2014 06:58:38 +0200 (CEST)
Date: Fri, 04 Jul 2014 06:58:38 +0200
From: Mikael Abrahamsson <swmike@swm.pp.se>
To: homenet@ietf.org
In-Reply-To: <9E7F2E30-8F86-46A4-B2B4-7AFAF2F2C41A@gmail.com>
Message-ID: <alpine.DEB.2.02.1407040654590.7929@uplift.swm.pp.se>
References: <CADZyTkk6rUuFJ5Wds2hioBBQa9-kXDJxyg_gBGQ1R6u5CHF2Ww@mail.gmail.com> <87fvij5wdw.wl.jch@pps.univ-paris-diderot.fr> <CADZyTkk2bv7T-Bs_ckG4i2MpXVDRqLA2R1dQgrMVrPSckOy-GQ@mail.gmail.com> <87k37uy703.wl.jch@pps.univ-paris-diderot.fr> <7989F344-2CC9-4EE4-8FB2-830B5F3CDF4B@nominet.org.uk> <87egy2y5tt.wl.jch@pps.univ-paris-diderot.fr> <20140703140004.GC53048@mx1.yitter.info> <9E7F2E30-8F86-46A4-B2B4-7AFAF2F2C41A@gmail.com>
User-Agent: Alpine 2.02 (DEB 1266 2009-07-14)
Organization: People's Front Against WWW
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
Archived-At: http://mailarchive.ietf.org/arch/msg/homenet/fDG3zkVvbGVDzaSI8aszYPsxlgo
Subject: Re: [homenet] New version draft-mglt-homenet-naming-architecture-dhc-options-02.txt
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Jul 2014 04:58:42 -0000

On Thu, 3 Jul 2014, Douglas Otis wrote:

> Since mDNS is unable to make determinations regarding the ability of a 
> device to safely interact with the Internet, an overlay approach could 
> be taken.  Although details are missing from the Hybrid 
> Unicast/Multicast DNS-Based Service Discovery draft, use of ULAs can 
> better establish a secure separation than can a split-horizon.  DNS was

I would very much prefer to see a solution where you can have policy to 
limit what is being published and to where, rather than the very binary 
"use ULAs for Internal resources". Apart from the fact that I do not like 
ULAs, I would also like to see more granularity and to enable the 
possibility to have zoning within the home network, for instance to have 
guest networks.

So we need to enable possibility to control propagation of service 
discovery information, we need packet filtering, and we also need some 
kind of "identity" for the devices so they can interact with all of this.

-- 
Mikael Abrahamsson    email: swmike@swm.pp.se