Re: [homenet] New version draft-mglt-homenet-naming-architecture-dhc-options-02.txt

[Daniel Migault <[e-mail]>]

Hi,

Thanks for the question. If I understand it properly, the use case you
consider: 1) you set up a web server in your homenet, 2) you want it to be
accessed from the outside so you register your domain name and register the
IP address to the zone. Note that In this case, the Authoritative Naming
service is outsourced to a third party which is what we want to achieve to.

Your case is very specific. First your web server is a fixed node that is
expected to last at least a few years in your home network. This makes
manual configuration feasible. Then you only have one node you may install
a specific software that updates the IP address to the DNS authoritative
servers. This is to avoid multiple DNS configuration at every IP
renumbering.  At last you have an interface on your server you may not have
with other nodes. On the other hand, if you have multiple devices, you are
unlikely to handle / edit the zone manually or install the specific
software on each device -- given that some device will not support it.

For this reason we would like the CPE to handle this complexity. The
advantages I see using the CPE are:
    - Ease the naming of device of various nature.
    - CPE remains in the homenet and may be easier to be authenticated than
all different devices.
    - CPE presents a centralized point for end user interactions
    - CPE are "powerful enough" to handle complex policies...
    - CPE can integrate multiple protocols to publish a zone. Suppose mDNS
is used by a node, than registration of its IP address and name cannot be
perfomed on a public authoritative server cannot be performed using mDNS.
   - ....

BR,
Daniel




On Wed, Jul 2, 2014 at 10:38 PM, Juliusz Chroboczek <
[e-mail]> wrote:

> Since I saw a previous version of that in London, I've been wondering
> about one thing, but didn't dare ask.  Please be indulgent if it is
> a stupid question.
>
> Why does the CPE need to intervene in what is an application layer
> interaction between two consenting adults?  If I'm setting up a web server
> on my home network, I'd expect that negotiating a DNS registration is
> a private matter between the web server and the authoritative DNS master;
> why would I want the CPE to act as intermediary?
>
> Thanks,
>
> -- Juliusz
>



-- 
Daniel Migault
Orange Labs -- Security
[phone]