RE: draft-gont-6man-managing-privacy-extensions-00.txt

> -----Original Message-----
> From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of
> Ran Atkinson
> Sent: Thursday, March 10, 2011 4:10 AM
> To: ipv6@ietf.org
> Subject: Re: draft-gont-6man-managing-privacy-extensions-00.txt
> 
> 
> On 10  Mar 2011, at 02:34 , Dan Wing wrote:
> > Nobody wants it removed in corporate deployments, either.
> 
> That statement is far too strong; it simply is not true.
> 
> > Consider for a moment an IPv6-enabled telephone,
> > on the desk of a Very Important Person at a company, ...
> 
> (Laugh.  I don't believe in that untrue example for a second,
> but thanks for the humorous start to my morning.  :-)

Laughing at IPv6, or an IP telephone on someone's desk, or
the combination of the two?

> Oh, and consider that Caller-ID, usually including a full name,
> is already widely deployed in many countries.  It is so
> much simpler just to read the Caller-ID string off of the
> telephone handset.
>
> If one wants to intercept traffic, it is MUCH simpler to intercept
> the SIP traffic -- which is never encrypted in real-world corporate
> deployments because that would make VoIP too hard to debug.

Ergo, we should let it all hang out?

We have many customers which enable encryption on their IP PBXs.
All of our telepresence systems ship with encryption enabled 
by default (both signaling and media).

If you didn't like the SIP example, is SIP the one and only case 
where an IPv6 privacy address is useful?

> > If we don't have IPv6 privacy addresses, we will also soon
> > see NAPT66 (with UDP and TCP port rewriting) in order to
> > achieve the same result as privacy addresses:  trying to
> > obfuscate which host is communicating.
> 
> It seems pretty clear that Fred's NPTv6 is going to be
> deployed in at least some locations, albeit for entirely
> different reasons.  I'm not sure if that meets your
> definition of NAPT66 or not.

It doesn't; NPTv6 does not provide obfuscation of the endpoint,
because it only rewrites the IPv6 prefix.

-d

> Cheers,
> 
> Ran
> 
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------