Re: "RFC4941bis" and draft-gont-6man-non-stable-iids

Suresh Krishnan <suresh.krishnan@gmail.com> Thu, 20 July 2017 08:21 UTC

Return-Path: <suresh.krishnan@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2479312FB9C for <ipv6@ietfa.amsl.com>; Thu, 20 Jul 2017 01:21:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fici7QZvYa5M for <ipv6@ietfa.amsl.com>; Thu, 20 Jul 2017 01:21:27 -0700 (PDT)
Received: from mail-wr0-x244.google.com (mail-wr0-x244.google.com [IPv6:2a00:1450:400c:c0c::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F9B1129AA0 for <6man@ietf.org>; Thu, 20 Jul 2017 01:21:27 -0700 (PDT)
Received: by mail-wr0-x244.google.com with SMTP id 12so1751121wrb.4 for <6man@ietf.org>; Thu, 20 Jul 2017 01:21:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=Dte6P3G57MVZe8ScNka0VMQ7dJTqreGJURshtgGb7iM=; b=lXEvy0Xakl1T2oOWbyAWa71LMbB/qGwTScH8XLCcZUOD20Z2hCdSuOma80Ac2j3ja2 XQrPnF4JwYCMMAbLyqa9sfUtzeE3swFnr2vwaVhrGSfiuBrRB5M65rHnODew66GpHtlx gcFnWE6T5Q2s6bKKlXksb+kLpsRhetqUKZOQqNk22SsFZJBNQmOBom8Akw3jMYUSlOnA PqmcEvfAnVKVjSHhxE9P5NTzNanIsqJhtiyOwBA4P5kIQfyN3Y8Rjpt8qVlS4FMI7v6r 0NVnb5zGEYwZsPaEVQPAv/DsVpHcXl/CBQlPLTY7+AMCtX5+IkeV12QQlQ24Ku230idS T9Gw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=Dte6P3G57MVZe8ScNka0VMQ7dJTqreGJURshtgGb7iM=; b=bHE91neITkBfzHtDwYP1NwHN8tyMmPvFun8GO+zaDz72bGBW30kKhWghsh/dmc6OC/ 4TVM1XNrtNTpsrqzaIDXw7EWwYjxDhQhM8LJJ1WYbQGC9oNn1fJqQYwTke6TCz8c4guR TyFguEP6dcRkMcWU7W2NoZIfIUuaBrjUNaDQZntHemg390btCM4KCglyQmjyoO36Oxus wfvrAecXBcU5eGQTPbsXixEOhY6W6L/PoHeMCCK4X8w+qJL9giJUid2KNuFCRGjH9PjO 9N+/ZgTj84GcB6C6N0aLuHQXJa+R/ReInMPUbqj8kpsf3c9JNw4q31PS41qfLrOvkG4F FxVA==
X-Gm-Message-State: AIVw113V8g5ATRR5QUfwY7vr8bX7aBy41G7s9qe2w5dH2wyk9osyY/2q c9B+lRM3IZdD0Q==
X-Received: by 10.223.171.3 with SMTP id q3mr6181833wrc.12.1500538885544; Thu, 20 Jul 2017 01:21:25 -0700 (PDT)
Received: from ?IPv6:2001:67c:370:128:e55e:d3be:d288:1bd4? ([2001:67c:370:128:e55e:d3be:d288:1bd4]) by smtp.gmail.com with ESMTPSA id w136sm1338475wmd.45.2017.07.20.01.21.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 20 Jul 2017 01:21:25 -0700 (PDT)
From: Suresh Krishnan <suresh.krishnan@gmail.com>
Message-Id: <BF53B560-5B04-4656-BC3C-C789E809DC50@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_2F4A7A4F-B0BD-48AB-8866-F0F3D11EE065"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Subject: Re: "RFC4941bis" and draft-gont-6man-non-stable-iids
Date: Thu, 20 Jul 2017 10:21:23 +0200
In-Reply-To: <D4D7CEFD-AB01-41A4-A874-B0D8A485A4C8@jisc.ac.uk>
Cc: Fernando Gont <fgont@si6networks.com>, "6man@ietf.org" <6man@ietf.org>
To: Tim Chown <Tim.Chown@jisc.ac.uk>
References: <4d1ef3d1-1c21-ec76-7c1b-7bb0f5eaa805@si6networks.com> <51F41F55-27B2-43BC-9199-FBE59B98BCFB@jisc.ac.uk> <f227bbe9-c038-185c-7868-67c9a6a89d5d@si6networks.com> <D4D7CEFD-AB01-41A4-A874-B0D8A485A4C8@jisc.ac.uk>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/FuXI6VOf_cC9kAyplTutpfI-XGk>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Jul 2017 08:21:29 -0000

Hi Tim,

> On Jul 19, 2017, at 6:00 PM, Tim Chown <Tim.Chown@jisc.ac.uk> wrote:
> 
>> On 19 Jul 2017, at 13:57, Fernando Gont <fgont@si6networks.com> wrote:
>> 
>> On 07/19/2017 01:58 PM, Tim Chown wrote:
>>>> On 18 Jul 2017, at 15:52, Fernando Gont <fgont@si6networks.com>
>>>> wrote:
>>>> 
>>>> Folks,
>>>> 
>>>> Among the list of RFCs to be progressed to full std is/was RFC4941 
>>>> ("Privacy Extensions for Stateless Address Autoconfiguration in
>>>> IPv6").
>>>> 
>>>> As it stands, RFC4941 has a number of issues:
>>>> 
>>>> * Using the same IID for multiple prefixes * Not changing the IID
>>>> upon "security events" (including e.g., change in the underlying
>>>> MAC address) * Using MD5 as opposed to something better * Requiring
>>>> the use of temporary addresses along stable addresses (preventing
>>>> use of temporary-only, for nodes that feel like) * Not treating
>>>> IIDs as opaque values (see RFC7136)  when generating the randomized
>>>> IIDs (see step 3 in section 3.2.1 of RFC4941) * Mandating one
>>>> specific algorithm, when the same goals/properties can be achieved
>>>> with multiple algorithms (see section 4 of 
>>>> draft-gont-6man-non-stable-iids-01)
>>>> 
>>>> 
>>>> Based on the above, I personally don't think that it would make
>>>> sense to progress RFC4941 to Internet Standard, but rather think
>>>> that we should work on  a replacement of it -- our proposal being 
>>>> draft-gont-6man-non-stable-iids-01.
>>>> 
>>>> Thoughts?
>>> 
>>> Certainly any update on 4941 needs to be done in the light of a few
>>> deficiencies that have emerged over the years, and the publication of
>>> RFC7217.
>>> 
>>> I think it’s still possible to do a -bis off 4941.
>> 
>> My questions would be:
>> 
>> 1) Can you actually address the aforementioned deficiencies without
>> significant changes to RFC4941? -- It would seem to me that in order to
>> address them, rfc4941bis would not be a bis document anymore.
>> 
>> 2) If you were to address such deficiencies, could the bis document be
>> progressed to Internet Standard? -- My assessment of this question is: No.
>> 
>> If RFC4941 would take significant work, and the end result would
>> actually be significantly different from what's in RFC4941, then I'm not
>> sure that'd be different than starting from the I-D we already have...
> 
> Just to be clear, I like the material in your new draft.
> 
> That said, it seems you could do a similar style of update from 3041 to 4941, with a similar structure; the content is there in your draft, it “just" needs to be merged in.
> 
> That would mean obsoleting 4941, just as 4941 obsoleted 3041.  So you would include the details in 4941 that would carry forward.

<AD hat off>. I agree. If we are planning a drop in replacement to RFC4941 creating a bis document from there is the right thing to do.

Thanks
Suresh