IETF Logo Mail Archive

RE: [Gen-art] Gen-ART LC review: draft-ietf-dhc-dhcpv6-privacy-03

"Bernie Volz (volz)" <volz@cisco.com> Tue, 16 February 2016 16:41 UTC

Return-Path: <volz@cisco.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 309621A899E; Tue, 16 Feb 2016 08:41:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.507
X-Spam-Level:
X-Spam-Status: No, score=-14.507 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D3m5G3rGZJoX; Tue, 16 Feb 2016 08:41:51 -0800 (PST)
Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE7571A1EF1; Tue, 16 Feb 2016 08:41:43 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1800; q=dns/txt; s=iport; t=1455640904; x=1456850504; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=xIWzVcesE1x7o28INsGd7bN+pXhZCY62vT6IeZnK/+c=; b=HQt8MvsMBH8x1MQqST8Mg4EKOI3yxR08E29IfR0wY/OlV2mDwl2DioJs twUeGc6SrimWEQw/lNAcyYFnkjyatxEErayfimc4off4Cw/yL8UuVkSHA KJs6IAkfVeEtfKNSGlggecCeoqrpdJmU3cYR1p2Qq5n3jfu+VdE0FXBix M=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0D1AQC1UMNW/40NJK1dgzpSbQa6KAENgWchhWwCgTs4FAEBAQEBAQGBCoRBAQEBBDpLBAIBCA4DBAEBAR4JByERFAkIAgQBEgiHfQMSDrV5DYRXAQEBAQEBAQEBAQEBAQEBAQEBAQEBEQSJS3uCN4Y1BZZ/AYVShhOBbI56hn+HQAEeAQFCggIZgUhqh2B8AQEB
X-IronPort-AV: E=Sophos;i="5.22,456,1449532800"; d="scan'208";a="239040847"
Received: from alln-core-8.cisco.com ([173.36.13.141]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 16 Feb 2016 16:41:43 +0000
Received: from XCH-ALN-005.cisco.com (xch-aln-005.cisco.com [173.36.7.15]) by alln-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id u1GGfheL015065 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 16 Feb 2016 16:41:43 GMT
Received: from xch-aln-003.cisco.com (173.36.7.13) by XCH-ALN-005.cisco.com (173.36.7.15) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Tue, 16 Feb 2016 10:41:42 -0600
Received: from xch-aln-003.cisco.com ([173.36.7.13]) by XCH-ALN-003.cisco.com ([173.36.7.13]) with mapi id 15.00.1104.009; Tue, 16 Feb 2016 10:41:42 -0600
From: "Bernie Volz (volz)" <volz@cisco.com>
To: Fernando Gont <fgont@si6networks.com>, Robert Sparks <rjsparks@nostrum.com>, Tomek Mrugalski <tomasz.mrugalski@gmail.com>, General Area Review Team <gen-art@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "dhcwg@ietf.org" <dhcwg@ietf.org>, "draft-ietf-dhc-dhcpv6-privacy.all@ietf.org" <draft-ietf-dhc-dhcpv6-privacy.all@ietf.org>
Subject: RE: [Gen-art] Gen-ART LC review: draft-ietf-dhc-dhcpv6-privacy-03
Thread-Topic: [Gen-art] Gen-ART LC review: draft-ietf-dhc-dhcpv6-privacy-03
Thread-Index: AQHRaDHdLqFZqGv4dUC+QRkipz148J8uACIA//+gK0CAAS+tAIAAEB1g
Date: Tue, 16 Feb 2016 16:41:42 +0000
Message-ID: <15aafca59a4e494ca0d02bc5b04128ab@XCH-ALN-003.cisco.com>
References: <56B0DBA3.2050406@nostrum.com> <56C238F8.4040400@gmail.com> <56C23FE6.5000207@nostrum.com> <3990c04ce860428ab90d0142102b7bfc@XCH-ALN-003.cisco.com> <56C2EE40.1060701@si6networks.com>
In-Reply-To: <56C2EE40.1060701@si6networks.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.131.78.78]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/1bxcXA0UN6CS75RpXX996fcWFMk>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Feb 2016 16:41:53 -0000

Technically unpredictable is probably a better term, but random implies that. I'll leave it to the authors to determine the best language. (I'm ok with what the 04 draft now says.)

- Bernie

-----Original Message-----
From: Fernando Gont [mailto:fgont@si6networks.com] 
Sent: Tuesday, February 16, 2016 4:39 AM
To: Bernie Volz (volz) <volz@cisco.com>; Robert Sparks <rjsparks@nostrum.com>; Tomek Mrugalski <tomasz.mrugalski@gmail.com>; General Area Review Team <gen-art@ietf.org>; ietf@ietf.org; dhcwg@ietf.org; draft-ietf-dhc-dhcpv6-privacy.all@ietf.org
Subject: Re: [Gen-art] Gen-ART LC review: draft-ietf-dhc-dhcpv6-privacy-03

Bernie,

On 02/15/2016 06:37 PM, Bernie Volz (volz) wrote:
> Perhaps we should get away from whether something is easy or difficult 
> to implement or whether the algorithm may be more (or less) efficient.
> 
> I think the point of this material is to ENCOURAGE random assignment 
> rather than sequential to improve privacy- so keep it at that. Let 
> implementers worry about how efficient an algorithm is?

There are a number of operational and security/privacy considerations that depend on the actual algorithm that you employ.

I'm not sure what you mean by "random". IID=random() everytime an address has to be leased? -- or do you really mean "unpredictable"?.

At the end of the day, what you want is to specify desired properties.

Besides, assignment of sequential addresses should be banned. They have always been a bad idea (see
<https://tools.ietf.org/html/draft-gont-predictable-protocol-ids>) and they shouldn't even be considered an option.

Thanks,
--
Fernando Gont
SI6 Networks
e-mail: fgont@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

v2.23.0 | Report a Bug | By Email