Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt> (Internet Protocol, Version 6 (IPv6) Specification) to Internet Standard
Fernando Gont <fgont@si6networks.com> Sun, 26 February 2017 07:01 UTC
Return-Path: <fgont@si6networks.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3B8212989D; Sat, 25 Feb 2017 23:01:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kJp7d9ot9M-v; Sat, 25 Feb 2017 23:01:13 -0800 (PST)
Received: from fgont.go6lab.si (fgont.go6lab.si [IPv6:2001:67c:27e4::14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31502129630; Sat, 25 Feb 2017 23:01:13 -0800 (PST)
Received: from [192.168.3.83] (unknown [181.165.116.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by fgont.go6lab.si (Postfix) with ESMTPSA id BC5FA809EA; Sun, 26 Feb 2017 08:01:07 +0100 (CET)
Subject: Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt> (Internet Protocol, Version 6 (IPv6) Specification) to Internet Standard
To: ietf@ietf.org
References: <148599296506.18647.12389618334616420462.idtracker@ietfa.amsl.com>
From: Fernando Gont <fgont@si6networks.com>
X-Enigmail-Draft-Status: N1110
Message-ID: <b81b4558-48d5-f8df-1a4d-6f4708b1bdfa@si6networks.com>
Date: Sun, 26 Feb 2017 03:42:08 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.7.0
MIME-Version: 1.0
In-Reply-To: <148599296506.18647.12389618334616420462.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/8S10QfnWEZJTlDZ1LxIAet6djgA>
Cc: draft-ietf-6man-rfc2460bis@ietf.org, ipv6@ietf.org, "secdir@ietf.org" <secdir@ietf.org>, suresh.krishnan@ericsson.com, "sec-ads@ietf.org" <sec-ads@ietf.org>, 6man-chairs@ietf.org
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 26 Feb 2017 07:01:15 -0000
Folks, Page 15 of the document says: For every packet that is to be fragmented, the source node generates an Identification value. The Identification must be different than that of any other fragmented packet sent recently* with the same Source Address and Destination Address. If a Routing header is present, the Destination Address of concern is that of the final destination. * "recently" means within the maximum likely lifetime of a packet, including transit time from source to destination and time spent awaiting reassembly with other fragments of the same packet. However, it is not required that a source node know the maximum packet lifetime. Rather, it is assumed that the requirement can be met by implementing an algorithm that results in a low identification reuse frequency. Examples of algorithms that can meet this requirement are described in [RFC7739]. This is certainly an improvement over RFC2460, which suggested the use of a simple counter to achieve this requirement. While the algorithms in RFC7739 are meant to result in non-predictable (by off-path attackers) Identification values, I believe that this spec should clarify that Identification values should not be predictable by off-path attackers. The survey in Appendix B of RFC7739 (<https://tools.ietf.org/html/rfc7739#appendix-B>) shows some sample popular implementations that, unfortunately, still employ predictable Identification values. Given too-frequent pattern of protocol implementations employing improper numeric-identifier generators (see <https://tools.ietf.org/html/draft-gont-predictable-numeric-ids>) and <https://tools.ietf.org/html/draft-gont-numeric-ids-history>), I think an explicit requirement is warranted. Thanks, Fernando On 02/01/2017 08:49 PM, The IESG wrote: > > The IESG has received a request from the IPv6 Maintenance WG (6man) to > consider the following document: > - 'Internet Protocol, Version 6 (IPv6) Specification' > <draft-ietf-6man-rfc2460bis-08.txt> as Internet Standard > > The IESG plans to make a decision in the next few weeks, and solicits > final comments on this action. Please send substantive comments to the > ietf@ietf.org mailing lists by 2017-03-01. Exceptionally, comments may be > sent to iesg@ietf.org instead. In either case, please retain the > beginning of the Subject line to allow automated sorting. > > Abstract > > > This document specifies version 6 of the Internet Protocol (IPv6). > It obsoletes RFC2460 > > > > > The file can be obtained via > https://datatracker.ietf.org/doc/draft-ietf-6man-rfc2460bis/ > > IESG discussion can be tracked via > https://datatracker.ietf.org/doc/draft-ietf-6man-rfc2460bis/ballot/ > > > No IPR declarations have been submitted directly on this I-D. > > > The document contains these normative downward references. > See RFC 3967 for additional information: > rfc4443: Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification (Draft Standard - IETF stream) > rfc3168: The Addition of Explicit Congestion Notification (ECN) to IP (Proposed Standard - IETF stream) > Note that some of these references may already be listed in the acceptable Downref Registry. > > > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- > -- Fernando Gont SI6 Networks e-mail: fgont@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
- Last Call: <draft-ietf-6man-rfc2460bis-08.txt> (I… The IESG
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Brian E Carpenter
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Brian E Carpenter
- RE: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Manfredi, Albert E
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Stefano Previdi (sprevidi)
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… C. M. Heard
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… 神明達哉
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Brian E Carpenter
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Suresh Krishnan
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Pete Resnick
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Enno Rey
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… otroan
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… otroan
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Brian E Carpenter
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… otroan
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Philip Homburg
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… 神明達哉
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Randy Bush
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Ted Lemon
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Randy Bush
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Scott Bradner
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Suresh Krishnan
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Eric Vyncke (evyncke)
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Leddy, John
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Brian E Carpenter
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Mark Smith
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Tal Mizrahi
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Mark Smith
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… t.petch
- RE: [EXT] Re: Last Call: <draft-ietf-6man-rfc2460… Tal Mizrahi
- RE: [EXT] Re: Last Call: <draft-ietf-6man-rfc2460… David Mozes
- Re: [EXT] Re: Last Call: <draft-ietf-6man-rfc2460… Brian E Carpenter
- Re: [EXT] Re: Last Call: <draft-ietf-6man-rfc2460… Mark Smith
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Sander Steffann
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Sander Steffann
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Fernando Gont
- Address types [was: Last Call: <draft-ietf-6man-r… Brian E Carpenter
- Re: Last Call: <draft-ietf-6man-rfc2460bis-08.txt… Erik Kline