Re: [OPSEC] Last Call: <draft-ietf-opsec-ipv6-eh-filtering-06.txt> (Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers) to Informational RFC

Bob Hinden <bob.hinden@gmail.com> Mon, 26 November 2018 22:49 UTC

Return-Path: <bob.hinden@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 804E712E036; Mon, 26 Nov 2018 14:49:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lT1hIVN43BT1; Mon, 26 Nov 2018 14:49:52 -0800 (PST)
Received: from mail-pg1-x531.google.com (mail-pg1-x531.google.com [IPv6:2607:f8b0:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A39E7126CB6; Mon, 26 Nov 2018 14:49:52 -0800 (PST)
Received: by mail-pg1-x531.google.com with SMTP id t13so6845682pgr.11; Mon, 26 Nov 2018 14:49:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=eoXSqKO6Z/LmoQWAvmyd3n4PoxZmFLfzxh61zFO4BP4=; b=qf/SEWoFuJLLJ13hW9aWQ0RM9kB7Enoo519Lia0Fl0nIG2dlMvojUIxbYY0cKz8Ndr Bi7+oDb8ra1gjVi3VNwd9IejkYyceYgIeoRn2tR4VyfAjN0IKiL72QVcCkR4Csk0ToA7 YHky4MnVMsEDwN5dZw37INZOyXuMHovPIPKZLsudA5BICdEX679LjGB0aCWKK2EKlcsS kNE8KvdVbQgHAo/cnjZBP7dlW4r3ZHgF6em9Ck6VrF0IHhlhSi47Op0UMCreaOwatf33 jG1bAqIu8aLbIaMhe9A/TvLzAiJEonWqEM0NsNKQ2MEELWNSkW5vBHrhN4G7VefSzyTb eZ5Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=eoXSqKO6Z/LmoQWAvmyd3n4PoxZmFLfzxh61zFO4BP4=; b=E3eoU2ESuDh+udIuKk7Durp03uUj/0Mi1O/4dWdUS36VNdI5NdmriHci4P5779ifrH 9BWPjhi4Z9WW2X5TKD1oBObCiaYL8+yMJpEvqfU/hwxqZOqfydGbOCaZGbNJV9W14WdT JPw4scQ9jCEMbbxm/XuUhpbSefX1/6hHDNu2ZLf/TxQoiNNSM0a6rTZqyGhQ2lI68rZ0 rOt6GkBzxp86O7znP4k9z+dQRpScXaBJD8j6G+uJphblhbic8LnQJw1jDzbXdEjSX+Wu 9n278OEyMxt0A5/1IVAtWbajPfgAYq5jy0UsGwbslztVnf7V9VKWF7BtwtAsdaakynRy TSwA==
X-Gm-Message-State: AA+aEWYo4AYyglzljReYKNIG3rDnQo1gJNKiaecFHqD5qsDBg9qtX/zr 1x6U43I1Slvs+m8ljz33FgQ=
X-Google-Smtp-Source: AFSGD/XfPKQ5EPyXedtOS+dyUF68/zmds2hBssKxk6PRqk05f19jERzu9VpbPkeI9gKf11ScY8a/lw==
X-Received: by 2002:a63:5026:: with SMTP id e38mr26910433pgb.123.1543272592189; Mon, 26 Nov 2018 14:49:52 -0800 (PST)
Received: from [172.16.224.219] ([209.97.127.34]) by smtp.gmail.com with ESMTPSA id 144sm1903025pfz.149.2018.11.26.14.49.51 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 26 Nov 2018 14:49:51 -0800 (PST)
From: Bob Hinden <bob.hinden@gmail.com>
Message-Id: <12480906-A488-477E-BAE9-B7E22FD34060@gmail.com>
Content-Type: multipart/signed; boundary="Apple-Mail=_9D739C7C-F327-4910-B221-F25F07778EF6"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Subject: Re: [OPSEC] Last Call: <draft-ietf-opsec-ipv6-eh-filtering-06.txt> (Recommendations on the Filtering of IPv6 Packets Containing IPv6 Extension Headers) to Informational RFC
Date: Mon, 26 Nov 2018 14:49:49 -0800
In-Reply-To: <CACL_3VHnUZwcG2=QbJ8HZf6nqiYv8qXxK8cOkuBmdX3QsKfPNg@mail.gmail.com>
Cc: Bob Hinden <bob.hinden@gmail.com>, OPSEC <opsec@ietf.org>, IETF <ietf@ietf.org>
To: "C. M. Heard" <heard@pobox.com>
References: <CACL_3VExxwN6z-WHbp3dcdLNV1JMVf=sgMVzh-k0shNJFeADbQ@mail.gmail.com> <BLUPR0501MB2051A8FFB1DAFDCA9873B9E6AE700@BLUPR0501MB2051.namprd05.prod.outlook.com> <CACL_3VFSHqU-D+NJu=k2-p4tbjZukT7i7WEoX+5kdUtdHB4Rjw@mail.gmail.com> <CACL_3VGk0CsHObEgSwLdCp8agOWrjccB94-aynEz3Bv0w+EU+w@mail.gmail.com> <475fe28a-aafe-d3b0-e665-fe97dd1439b8@foobar.org> <CACL_3VGHWW8fCDo8Q9br2fwXn5zBi+kN_5a1sOTX7m7QaU8iyg@mail.gmail.com> <3dc898de-6a18-4106-52fd-36cb8f60b19b@gmail.com> <f2784abe-d5b5-a556-3cfa-63481a7a8929@foobar.org> <CACL_3VGqhc-gFhbGJNm9XjZRXHpv9yZ3e4CurmT2P-VpQuVi3w@mail.gmail.com> <40f9b0b3-f9fd-fc09-dad1-3e575df791a3@si6networks.com> <CACL_3VHnUZwcG2=QbJ8HZf6nqiYv8qXxK8cOkuBmdX3QsKfPNg@mail.gmail.com>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/arOEivFJSCmzyrf5fsik5fVgHCo>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Nov 2018 22:49:54 -0000

Mike,

From your email:

> On Nov 26, 2018, at 6:46 AM, C. M. Heard <heard@pobox.com> wrote:
> 

. . . .

> NEW:
> . . . .
> 
> 3.5.5.  Advice
> 
>   Operators should determine according to their own circumstances
>   whether to discard packets containing unknown IPv6 EHs.
> 

From reading the email thread, this sentence seems to me to be a good summary of the draft.

I wonder if this is something the IETF needs to tell operators.    Based on the discussion, I suspect it is not.

Bob