Re: 6MAN Adoption call on draft-gont-6man-deprecate-eui64-based-addresses-00

Jean-Michel Combes <jeanmichel.combes@gmail.com> Mon, 25 November 2013 17:14 UTC

Return-Path: <jeanmichel.combes@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48DA51ADF62 for <ipv6@ietfa.amsl.com>; Mon, 25 Nov 2013 09:14:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WN9LcICxltOq for <ipv6@ietfa.amsl.com>; Mon, 25 Nov 2013 09:14:35 -0800 (PST)
Received: from mail-wi0-x22f.google.com (mail-wi0-x22f.google.com [IPv6:2a00:1450:400c:c05::22f]) by ietfa.amsl.com (Postfix) with ESMTP id A8CB51ADF65 for <ipv6@ietf.org>; Mon, 25 Nov 2013 09:14:34 -0800 (PST)
Received: by mail-wi0-f175.google.com with SMTP id hi5so3906230wib.2 for <ipv6@ietf.org>; Mon, 25 Nov 2013 09:14:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=mCmZMl/YbSBtdmPovvj5AtKzLkxie3P8xB82YMvN0YE=; b=cTAQXtIyov6Dpwah9i9cxXZbPJiDsJjwXc9ol3aGDZtrmtFcM52y+tgjrsw8taFUKv 9favoZNS7Liv2zqS04SPUgq611j8m2M0cRPZXogVho/t2f8rAaDomCbB2HRNiKfuuOP0 nFLauDcxsmdOCk4Qs02ZYRY4ToB+J/wsTgyKEVp89Vu6GDbw8cCt6gNxq0n/HBwWxWUX hkn4XI1UC7rrN0LBDBJjxQQWGaMrklTx91MhFZovZ/fDDDt7upLoHSDfz7r4R+crvbO8 173dO13tURGJBxuse/b6O2Ib06FJk9yNxF3Rs/6Vq7n3rq8jozA4V/wCoRYzhaLQrYy0 xkIA==
MIME-Version: 1.0
X-Received: by 10.180.187.41 with SMTP id fp9mr14478342wic.33.1385399614711; Mon, 25 Nov 2013 09:13:34 -0800 (PST)
Received: by 10.216.65.198 with HTTP; Mon, 25 Nov 2013 09:13:34 -0800 (PST)
In-Reply-To: <19211253-FE58-459C-A8D2-46787EB57728@employees.org>
References: <F681E049-43A2-4A61-8692-C59A1BF356A6@employees.org> <19211253-FE58-459C-A8D2-46787EB57728@employees.org>
Date: Mon, 25 Nov 2013 18:13:34 +0100
Message-ID: <CAA7e52oB9wrzx-4=5-tx0JvuHDyBJ2Ht=VrxykEoFjgAT2_esw@mail.gmail.com>
Subject: Re: 6MAN Adoption call on draft-gont-6man-deprecate-eui64-based-addresses-00
From: Jean-Michel Combes <jeanmichel.combes@gmail.com>
To: Ole Troan <otroan@employees.org>
Content-Type: multipart/alternative; boundary="001a11c3844ce8372204ec037bbb"
Cc: 6man Chairs <6man-chairs@tools.ietf.org>, 6man WG <ipv6@ietf.org>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Nov 2013 17:14:39 -0000

Hi,

I don't support the adoption of this document as WG document in its current
format.

o "Nodes MUST NOT employ IPv6 address generation schemes that embed the
underlying hardware address in the Interface Identifier."
At first, as Ole said, privacy is policy and I don't see why IETF should
dictate its rules to a network admin. If I want to set up an IPv6 node, in
_my_ network, using SLAAC with EUI-64, it is my decision (BTW, maybe based
on my security policy).
IMHO,
- "MUST NOT" should be replaced by "SHOULD NOT"
- Title should be replaced by "Recommendations for generation of IPv6 IIDs"
- Intended status should be replaced by "Informational"

o "Nodes SHOULD implement and employ
[I-D.ietf-6man-stable-privacy-addresses] as the default scheme"
Why should I employ, by default, this method? Why not RFC4941 based one?
Why not CGA? Why not a proprietary one?
IMHO, this sentence should be replaced by "Nodes SHOULD implement and
employ alternative schemes providing a better privacy like
[I-D.ietf-6man-stable-privacy-addresses], [RFC4941] and [RFC3972]."

Best regards,

JMC.



2013/11/21 Ole Troan <otroan@employees.org>

> <nochair>
>
> to give my reasons for the hum against during the meeting.
>
> - privacy (and security) are policy. I think it is unlikely that the IETF
> is prescient enough to get this right for all cases
> - I think draft-ietf-6man-ipv6-address-generation-privacy-00 is enough to
> explain the privacy considerations to give
>   implementors and users enough background to make a qualified choice
> - deprecating EUI-64 based interface-identifiers is way too strong, there
> are many cases where those are unproblematic to use
>
> I do think there is a problem with the IPv6 over Foo documents (e.g.
> RFC2464) requiring the interface-ids based on EUI-64,
> and leading to certification tests requiring implementations supporting it.
>
> I would be much more supportive of a document that updated those documents
> stating that there are alternative
> ways of generating the interface-id, and refer to the generation-privacy
> document for considerations.
> it could have text stating that unless there are link-specific
> considerations, stable privacy addresses should be the default interface-id
> for addresses larger than link-local scope.
>
> cheers,
> Ole
>
> </nochair>
>
>
> > All,
> >
> > There was strong support to adopt this draft at the working group
> meeting in Vancouver.
> > This is an adoption call to confirm the result of the hum at the meeting.
> >
> > Please provide a view with reasons as to whether the WG should adopt
> this or not.
> >
> > This message starts a one week 6MAN Working Group call on adopting:
> >
> >       Title           : Deprecating EUI-64 Based IPv6 Addresses
> >       Author(s)    : F. Gont, A. Cooper, D. Thaler, W. Liu
> >       Filename    : draft-gont-6man-deprecate-eui64-based-addresses-00
> >       Pages        : 5
> >       Date          : 2013-10-22
> >
> >
> http://tools.ietf.org/html/draft-gont-6man-deprecate-eui64-based-addresses-00
> >
> > The call ends on November 26th, 2013.
> >
> > Regards,
> >
> > Bob Hinden & Ole Trøan
>
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>
>