Re: [homenet] draft-ietf-homenet-babel-profile-01

Markus Stenberg <markus.stenberg@iki.fi> Fri, 02 December 2016 14:07 UTC

Return-Path: <markus.stenberg@iki.fi>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDF31129FAF for <homenet@ietfa.amsl.com>; Fri, 2 Dec 2016 06:07:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.821
X-Spam-Level:
X-Spam-Status: No, score=-1.821 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VNebvwIfl-Nc for <homenet@ietfa.amsl.com>; Fri, 2 Dec 2016 06:07:33 -0800 (PST)
Received: from julia1.inet.fi (mta-out1.inet.fi [62.71.2.231]) by ietfa.amsl.com (Postfix) with ESMTP id 5A4C4129FA7 for <homenet@ietf.org>; Fri, 2 Dec 2016 06:07:33 -0800 (PST)
Received: from [172.20.10.2] (37.219.188.247) by julia1.inet.fi (9.0.002.03-2-gbe5d057) (authenticated as stenma-47) id 5782991C043C79ED; Fri, 2 Dec 2016 16:05:04 +0200
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Markus Stenberg <markus.stenberg@iki.fi>
In-Reply-To: <7ifum6phi0.wl-jch@irif.fr>
Date: Fri, 02 Dec 2016 16:07:25 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <7DEDCD78-B5AA-4C77-ACBF-FC621B776C71@iki.fi>
References: <7ifum6phi0.wl-jch@irif.fr>
To: Juliusz Chroboczek <jch@irif.fr>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/wK5L1gViaHwNAqoBaTG-RdaaEBM>
Cc: homenet@ietf.org
Subject: Re: [homenet] draft-ietf-homenet-babel-profile-01
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Dec 2016 14:07:36 -0000

> On 2 Dec 2016, at 15.50, Juliusz Chroboczek <jch@irif.fr> wrote:
> I've just submitted
> 
>  draft-ietf-homenet-babel-profile-01
> 
> It should hit the IETF repository soon, in the meantime, my working copy is on
> 
>  https://github.com/jech/babel-drafts/tree/master/draft-ietf-homenet-babel-profile
> 
> The major change is the addition of Section 3, which describes how HNCP
> speaks to Babel.  Other than that, I've removed the editorial notes.
> 
> I still have my doubts about REQ5, but I believe that the current
> formulation reflects the consensus attained at IETF-95:

I do not like REQ5. As a SHOULD, perhaps, but MUST seems excessive.

Guest networks without any HNCP / routing traffic are the way to go anyway in my opinion. What happens behind closed doors (= non-guest) is up to the home, I think.

With dynamic categories of interfaces, as long as we do not mandate securing RA/DHCP*, securing routing and HNCP will not help much in the bug picture. (=Anyone can pretend to be uplink and get traffic routed through them anyway). With static categories, if you send HNCP/routing traffic on guest interfaces, you are doing something wrong.

Cheers,

-Markus