RE: [savi] Broadband Forum liaison to IETF on IPv6 security

"Hemant Singh (shemant)" <shemant@cisco.com> Sat, 07 November 2009 09:39 UTC

Return-Path: <shemant@cisco.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D8E113A681D for <ipv6@core3.amsl.com>; Sat, 7 Nov 2009 01:39:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.848
X-Spam-Level:
X-Spam-Status: No, score=-5.848 tagged_above=-999 required=5 tests=[AWL=0.751, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SYK2rEsqLPPI for <ipv6@core3.amsl.com>; Sat, 7 Nov 2009 01:39:53 -0800 (PST)
Received: from rtp-iport-2.cisco.com (rtp-iport-2.cisco.com [64.102.122.149]) by core3.amsl.com (Postfix) with ESMTP id CFA213A684A for <ipv6@ietf.org>; Sat, 7 Nov 2009 01:39:52 -0800 (PST)
Authentication-Results: rtp-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApoEAAPP9EqtJV2c/2dsb2JhbADCIZd9hD4EgWg
X-IronPort-AV: E=Sophos;i="4.44,699,1249257600"; d="scan'208";a="66881431"
Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rtp-iport-2.cisco.com with ESMTP; 07 Nov 2009 09:40:16 +0000
Received: from xbh-rcd-101.cisco.com (xbh-rcd-101.cisco.com [72.163.62.138]) by rcdn-core-5.cisco.com (8.14.3/8.14.3) with ESMTP id nA79eGAI002193; Sat, 7 Nov 2009 09:40:16 GMT
Received: from xmb-rcd-114.cisco.com ([72.163.62.156]) by xbh-rcd-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 7 Nov 2009 03:40:16 -0600
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: [savi] Broadband Forum liaison to IETF on IPv6 security
Date: Sat, 07 Nov 2009 03:40:14 -0600
Message-ID: <AF742F21C1FCEE4DAB7F4842ABDC511C11DD28@XMB-RCD-114.cisco.com>
In-Reply-To: <200911061917.nA6JHwVf005230@cichlid.raleigh.ibm.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [savi] Broadband Forum liaison to IETF on IPv6 security
Thread-Index: AcpfefQ8mQXNe/doSyamAQLJQEVjLQAEuBzg
References: <AFC1ACFB-FDFA-482C-AAF9-7995F5CEFE1F@broadband-forum.org><F311A255-3303-4C9D-B270-D1D23DE31E31@cisco.com><200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com><B52C3C2B-924A-4454-B863-57B02F54E5D4@apple.com><7582BC68E4994F4ABF0BD4723975C3FA10C3768C@crexc41p> <200911061917.nA6JHwVf005230@cichlid.raleigh.ibm.com>
From: "Hemant Singh (shemant)" <shemant@cisco.com>
To: Thomas Narten <narten@us.ibm.com>, "Stark, Barbara" <bs7652@att.com>
X-OriginalArrivalTime: 07 Nov 2009 09:40:16.0038 (UTC) FILETIME=[4FAF8C60:01CA5F8E]
Cc: 6man-ads@tools.ietf.org, IETF IPv6 Mailing List <ipv6@ietf.org>, savi-ads@tools.ietf.org, v6ops-ads@tools.ietf.org, IPv6 Operations <v6ops@ops.ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Nov 2009 09:39:53 -0000

I agree with Thomas.  The reason I and Wes could reply with some ideas
is because we are familiar with the cable deployment and contributed
text for ND Proxy behavior in cable standards.  A start for diagram may
be RFC4779 that DSL folks should look at and tell us what they talking
about.  If a DSL deployment doesn't exist in RFC4779, then for long-term
one should bis RFC4779 to include the new DSL deployment so that all can
reference a common doc and discuss deployment problems for IPv6.

Hemant

-----Original Message-----
From: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] On Behalf Of
Thomas Narten
Sent: Friday, November 06, 2009 2:18 PM
To: Stark, Barbara
Cc: 6man-ads@tools.ietf.org; SAVI Mailing List; savi-ads@tools.ietf.org;
james woodyatt; v6ops-ads@tools.ietf.org; IPv6 Operations; IETF IPv6
Mailing List
Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security

> The liaison was posted in March 2009. It can be found here:
> https://datatracker.ietf.org/documents/LIAISON/file621.doc

This is too skimpy of problem statement for me to understand the
details of the problem.

I don't know that a lot is needed. Maybe 2-3 pages is enough. But show
me a diagram, label the pieces, show me the properties of the pieces
and explain what the *exact* problem is. Who needs to do DAD? Why
doesn't it work? etc.

And note that comments like (quoting from the above statement):

  "We can envision a number of scenarios, both malice or vendor
   incompetence by which this can happen."

There is very little anyone can do to prevent "vendor
incompetence". I hope you aren't asking the IETF to solve this
problem! :-)

Thomas
_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi