Re: Disabling temporary addresses by default?

Michael Richardson <mcr+ietf@sandelman.ca> Thu, 30 January 2020 17:53 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83F74120090 for <ipv6@ietfa.amsl.com>; Thu, 30 Jan 2020 09:53:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.435
X-Spam-Level: *
X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GqZusKTrYEM5 for <ipv6@ietfa.amsl.com>; Thu, 30 Jan 2020 09:53:53 -0800 (PST)
Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3006F120088 for <ipv6@ietf.org>; Thu, 30 Jan 2020 09:53:52 -0800 (PST)
Received: from dooku.sandelman.ca (CPE788a207f397a-CMbc4dfb96bb50.cpe.net.cable.rogers.com [174.116.121.43]) by relay.sandelman.ca (Postfix) with ESMTPS id 826F31F45B for <ipv6@ietf.org>; Thu, 30 Jan 2020 17:53:51 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 0304A1A3744; Thu, 30 Jan 2020 12:53:50 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: 6man WG <ipv6@ietf.org>
Subject: Re: Disabling temporary addresses by default?
In-reply-to: <BC310B79-A05D-4889-9CE9-E62823335E9B@gmail.com>
References: <03C832CE-7282-4320-BF1B-4CB7167FE6BE@employees.org> <DE7B0688-230F-4A5C-8E24-9EAED9FD9FEB@puck.nether.net> <AFEBAD7D-DF24-4924-8B9A-60DF22BA1953@consulintel.es> <c42affce-fbd3-23ec-c9ff-4f05cdf38630@si6networks.com> <41173152-A8E8-4241-9DE7-376AA7AFB813@consulintel.es> <c4166907-b6c9-a4ef-fd59-cf539bbe0405@si6networks.com> <43D76C96-C16B-4BEB-B9B8-C68D53BCE63F@fugue.com> <fb5b8377-892d-2777-ef9b-4f9ddefa6c93@si6networks.com> <CAKD1Yr034_tu7ZoJ1FCfDYhNSN6igm-ZQyR4u3U+UDMr=huGOw@mail.gmail.com> <1af0b06d-f9d7-5ea1-27f3-b417eb9148fa@si6networks.com> <7606A049-318D-4526-917D-F2A801BF7050@cisco.com> <CAKD1Yr1d9kORFdoOJr22J_UDJ9hLPr6AQLyWuh7=bAQKa+aXGw@mail.gmail.com> <MN2PR11MB356588FC3E8A6410B725D159D80A0@MN2PR11MB3565.namprd11.prod.outlook.com> <CAKD1Yr35meRGh_POo_2jrHA_oazO1xUOG5G_rx43xNLFYHQsMQ@mail.gmail.com> <MN2PR11MB356526F01CAE1CADEF8E4472D80A0@MN2PR11MB3565.namprd11.prod.outlook.com> <CAKD1Yr0-rmyzz3y1d+pCpA0+tGuhSdjojaJovXUzVuyx6UdeLA@mail.gmail.com> <98179a48-8d86 -4673-6c82-fc0022988862@foobar.org> <F84FEFAF-1F78-47D4-B3E0-981DCFD0CB58@employees.org> <CAKD1Yr11_SSUkCBuQ3-h+eRg0LPZQdhe+h7f0YZy9TiyRWj6mw@mail.gmail.com> <BC310B79-A05D-4889-9CE9-E62823335E9B@gmail.com>
Comments: In-reply-to Fred Baker <fredbaker.ietf@gmail.com> message dated "Tue, 28 Jan 2020 09:44:39 -0800."
X-Mailer: MH-E 8.6; nmh 1.7.1-RC3; GNU Emacs 25.2.1
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Thu, 30 Jan 2020 12:53:49 -0500
Message-ID: <28094.1580406829@dooku>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/7SJC8im8wyYhx05M3FhXisERWc0>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jan 2020 17:53:54 -0000

Fred Baker <fredbaker.ietf@gmail.com> wrote:
    > +1 on this. We can discuss whether a temporary address should have a
    > limited lifetime or whether a given interface might have at most some
    > number of temporary addresses at any given time, but to say that in the
    > default (e.g., usual) case each system has zero seems like a bad idea.

I agree with what you said, and the way that you said it.

In particular, I think that it would be better to have a temporary address
per user and/or threadish-pool (e.g. Chrome) and/or container, and keep this
for a longer time.
I think that if a host/network is going to support multiple temporary
addresses, that they should be used in parallel and used for a long time.

I'm aware that Android (Lorenzo, Jen, etc.) been resistant to supporting
DHCPv6.  This is causing a bit of schism, because we of how we have made the
stateful/stateless split.  Maybe we need a stateful SLAAC that isn't DHCPv6
to make this work.  Or something like that.  Or find a way to address the
issues that Android has with supporting DHCPv6 client.

(Please feel free to point me again to some summary discussion from 2003,
when the objection was first detailed)

-- 
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-