Re: [Int-area] Is IPv6 End-to-End? R.I.P. Architecture? (Fwd: Errata #5933 for RFC8200)

Tom Herbert <tom@herbertland.com> Thu, 27 February 2020 22:44 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: int-area@ietfa.amsl.com
Delivered-To: int-area@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 590BF3A0EA1 for <int-area@ietfa.amsl.com>; Thu, 27 Feb 2020 14:44:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7YYR8ZaqEaLr for <int-area@ietfa.amsl.com>; Thu, 27 Feb 2020 14:44:50 -0800 (PST)
Received: from mail-ed1-x532.google.com (mail-ed1-x532.google.com [IPv6:2a00:1450:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A4813A0E6B for <int-area@ietf.org>; Thu, 27 Feb 2020 14:44:49 -0800 (PST)
Received: by mail-ed1-x532.google.com with SMTP id c26so997249eds.8 for <int-area@ietf.org>; Thu, 27 Feb 2020 14:44:49 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=d+rDW+YCmN2UjLk0y/wNj+r8YdJMuca65PH9FF0A/GQ=; b=IjXUKEQxLhhHlzYeBFmaXyjvOfw5pXYkZOPyt4hn0I0ZkLbrUq1l7trb7cBXCW/XXi brXFG9pyd7NW8G3JjARzgXkqwf1ESkEZV95ZEZCi2A9GrsaXD4merBEjUvQUxo/hGrWW rJ8/AB6ZKXr1FEPPZUkIg0EoxwBXSDIvGXz6qcwWY/fc9KQmhOXRtVABVmLa/OxLj3Nj GWORGaSsaH1De7z/qqozMRVjSGv7PfzEVVXyYhQsWQNwWBehixhHqCthpr1+6cYdRRGT x1sresL67smrh7bOmPJbgNV9n3IXuFDoH9VgOQUNM82ZzvSoEVkhGwI32CKNDvtdmru1 atjA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=d+rDW+YCmN2UjLk0y/wNj+r8YdJMuca65PH9FF0A/GQ=; b=EnuB7fXHk6t5HHt4WZecOyYl8uwt/9teMQQR4P/Rk6IblcwnwmtyHAgTHUP2aA1GpF I2SgkVArs+F6XpqTERGu08/0gs1X+G4elGQHHIIyuQPUfe9m7IZPtdHXxKWbLhHzbLTh aDEzG/cqvusbC6UovTlPNzH0VVN2ceRO61Rhfa9VwSb8QJN0wOmzk72T6kOx8pEisHJE 5zR8qzDbQw9B0sL6gTglxojU/u1nhTdZpIli3atiE0jL1t8t3sUwwrRuw3x2ckLmjXfF kkoi2nu3YquFej9PsVX6s6pdXmMrDh07Hne3dneVWOWKSde6emLx7UolHk/z5PK68yRH 2maQ==
X-Gm-Message-State: APjAAAVrlhiNjQrKD94zVO1ivzM3dQJ+8bI/FfaPnKRQVwVNCMhC6LLY R8ibzMSqJqSKAZZd/SzO93b+Kxk1hnMTpoVYBJbRQQ==
X-Google-Smtp-Source: APXvYqxn3ElbGUgRHzNtVxWZDZMZQg6aZHoNt7wEIFg+Gggz1pYJALmLmmMnuDslWYC+RR6Xm2hTDm7kEpmfWAxdqTE=
X-Received: by 2002:aa7:d1d8:: with SMTP id g24mr797735edp.39.1582843488038; Thu, 27 Feb 2020 14:44:48 -0800 (PST)
MIME-Version: 1.0
References: <876c9105-3da4-e614-2db0-bea025b54663@si6networks.com> <7749f91f-03f1-cc14-bae8-5fe68c88879f@si6networks.com> <CALx6S36wN7VEi_rxLC1ETcTvkGaPhs20KhQrGWAGGTrCL5OT+g@mail.gmail.com> <CAMm+Lwg+4xMv=EKLfvmZMCgrQz31+38Fv0bYKeJ0fTB5vbXiaw@mail.gmail.com>
In-Reply-To: <CAMm+Lwg+4xMv=EKLfvmZMCgrQz31+38Fv0bYKeJ0fTB5vbXiaw@mail.gmail.com>
From: Tom Herbert <tom@herbertland.com>
Date: Thu, 27 Feb 2020 14:44:35 -0800
Message-ID: <CALx6S36QNm4fjWMefCr2qOPvm3QwnFmj__Sqdu3NrDMNepXYQg@mail.gmail.com>
To: Phillip Hallam-Baker <phill@hallambaker.com>
Cc: Fernando Gont <fgont@si6networks.com>, architecture-discuss@iab.org, Internet Architecture Board <iab@iab.org>, Internet Area <int-area@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d6ffdf059f967731"
Archived-At: <https://mailarchive.ietf.org/arch/msg/int-area/qvWwKVRsbjuVsuz9XzSefb-d8Mk>
Subject: Re: [Int-area] Is IPv6 End-to-End? R.I.P. Architecture? (Fwd: Errata #5933 for RFC8200)
X-BeenThere: int-area@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Internet Area Mailing List <int-area.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/int-area>, <mailto:int-area-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/int-area/>
List-Post: <mailto:int-area@ietf.org>
List-Help: <mailto:int-area-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/int-area>, <mailto:int-area-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Feb 2020 22:44:58 -0000

On Thu, Feb 27, 2020, 2:26 PM Phillip Hallam-Baker <phill@hallambaker.com>
wrote:

> On Thu, Feb 27, 2020 at 5:09 PM Tom Herbert <tom@herbertland.com> wrote:
>
>> Fernando,
>>
>> I think we need to be careful that IETF is labeled as a collection of
>> inflexible architectural purists. We know that standards conformance
>> is voluntary and we haven't seen the last time that someone, possibly
>> even a major vendor, will circumvent the system for their own
>> purposes.
>>
>
> IP end to end does not mean the IP address is constant end to end. It
> never has meant that and never will. An IP address is merely a piece of
> data that allows a packet to reach its destination. There is no reason to
> insist on it remaining constant along the path.
>
> The sooner people get over that fact the better.
>
> If an IPv4 device interacts with an IPv6 device, there will be address
> translation going on somewhere along the path. That is inevitable.
>
> We discovered that there were good reasons for NATing IPv4 besides address
> multiplexing. The topology of my network is none of your business.
>
> More generally, Internet standards only apply to the Inter-net, the
> network of networks. What happens inside the networks at either end is for
> the owners of those networks to decide. If we go back to the original
> Internet design, they didn't even need to run IP. IP end to end come later.
>
> So let us stop being dogmatic about things that don't actually matter. The
> only job of the network layer is to get packets from one end to another.
> The only job of the transport layer is to provide reliable streams. An
> application protocol that depends on the IP address remaining constant end
> to end is a bad protocol and should be rejected.
>

So Authentication Header and any other sort of Inetwork layer
authentication are bad protocols that should be rejected?

Tom