Re: Question for IPv6 w.g. on [Re: IPv6 Type 0 Routing Header issues]

itojun@itojun.org (Jun-ichiro itojun Hagino 2.0) Sat, 28 April 2007 03:07 UTC

Return-path: <ipv6-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HhdHs-0001PV-S0; Fri, 27 Apr 2007 23:07:52 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HhdHr-0001PQ-94 for ipv6@ietf.org; Fri, 27 Apr 2007 23:07:51 -0400
Received: from coconut.itojun.org ([2001:240:501:0:204:23ff:fecb:8908]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HhdHq-00024Q-Gf for ipv6@ietf.org; Fri, 27 Apr 2007 23:07:51 -0400
Received: by coconut.itojun.org (Postfix, from userid 501) id D37D71C069; Sat, 28 Apr 2007 12:07:48 +0900 (JST)
To: tim@mentat.com
In-Reply-To: Your message of "Fri, 27 Apr 2007 15:20:18 -0700" <1177712418.13779.23.camel@feller>
References: <1177712418.13779.23.camel@feller>
X-Mailer: Cue version 0.8 (070406-1309/itojun)
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Message-Id: <20070428030748.D37D71C069@coconut.itojun.org>
Date: Sat, 28 Apr 2007 12:07:48 +0900
From: itojun@itojun.org
X-Spam-Score: -2.8 (--)
X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22
Cc: ipv6@ietf.org, bob.hinden@nokia.com, deraadt@openbsd.org
Subject: Re: Question for IPv6 w.g. on [Re: IPv6 Type 0 Routing Header issues]
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "IP Version 6 Working Group \(ipv6\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
Errors-To: ipv6-bounces@ietf.org

> I am a bit surprised that the security problems with the routing header
> come as some sort of revelation at this stage.  The intent, as I recall,

	yup, it's such 1992 problem.  hinden and kame needs harakiri.

> handy.  My recollection of a conversation with Steve on this topic back
> in the previous century, at an IPv6 bake-off, was that it was "forced
> upon us" by the politics of the IPng "process".  I think we can safely
> put to bed the idea that the designers were dolts who didn't learn from
> history.  That doesn't mean there weren't dolts involved in the
> "process".:-)

	steve and bob are too optimistic/academic, or too focused into
	ipv6 so that they forget about ipv4.
	they need to come to japan and take "real world ipv6" tutorial then
	visit Calgary for "security" tutorial by theo.  it's just like
	boot camp (no, not apple's, but army).  openbsd group meeting, called
	c2k7 next month, and theo will gladly sneak you in so that they can
	put two of you into BBQ grill (but they may free to bomit).

> That said I am in favor of 2.  It is the easiest to retrofit onto

	2 is not the right answer.  bzzzt.  bad boy.  you ate 10 minutes of
	sleeping time of mine.

itojun
PS: for those of you contacted me to say "sleep man", stop.  my skype is
keep rebooting and my cellphone battery is dying... it's "sleep man" spam.

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------