Re: Last Call: <draft-ietf-6man-rfc4941bis-10.txt> (Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6) to Proposed Standard

神明達哉 <jinmei@wide.ad.jp> Thu, 10 September 2020 22:33 UTC

Return-Path: <jinmei.tatuya@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 793A43A0951; Thu, 10 Sep 2020 15:33:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.402
X-Spam-Level:
X-Spam-Status: No, score=-1.402 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.249, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hhUrUq_r2y6U; Thu, 10 Sep 2020 15:33:14 -0700 (PDT)
Received: from mail-vs1-f41.google.com (mail-vs1-f41.google.com [209.85.217.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 728573A0B04; Thu, 10 Sep 2020 15:33:14 -0700 (PDT)
Received: by mail-vs1-f41.google.com with SMTP id b123so4303922vsd.10; Thu, 10 Sep 2020 15:33:14 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=EVrwiEr27s1hPSWvnkO+d33FIu0+9Kotx4q+mwIwOD4=; b=q6d0wbwI56ak4c17hjHvzY7yRUJPtxA0O400+PVghxW7T7KeXxRrsj/oMOXWkzHi9P wHzLaQDqMXtt5cd3aedZZhl+9OUat5M3slK6kcn3fuyNoAadyxsmS2fJlvt7hsDrmL+s hNlu4EgBzcTPJfwu96mRHeZO8B2mDc+8r1oNrKeTMHIZV2wghuo4+XVz0VlMxhE/H4xs eeqTJ+j94KenbN3cLQPtapW7vThwIEO2fLSC+GK3ou8cU6hdev8IIFc8BzMGWXKhpqQQ IpAnJbVPwfmVhaEvt9oN5HYQ3c2+XAekAUYVjf2FABKIIAwjrTU5aTu1evcF+ldzv7uw Z2Ew==
X-Gm-Message-State: AOAM5324W6ykPieiE0JlybUtTWRDPxBSm8ROpISS75kHbJFEUW0TPK8g ATD/R/aq415BfFEUMur4P/fGAseRnbKcMBMcAis=
X-Google-Smtp-Source: ABdhPJzqJWy175dCU+VM7mYVxBXhlS19Y2G1Q5wI6M564mjibqMxzS7PYZMYR0qyW7ej4+In9HIaO4oP/nXnUU0vfmg=
X-Received: by 2002:a67:d219:: with SMTP id y25mr5517220vsi.29.1599777193451; Thu, 10 Sep 2020 15:33:13 -0700 (PDT)
MIME-Version: 1.0
References: <159969199185.9541.8823907519726516405@ietfa.amsl.com> <CAKD1Yr1fVnhr3ZM64vLxtXg-9WAKemDuzW2gMupviv-i9V-GiA@mail.gmail.com> <39f91a88-c15d-88d2-5bf4-66168fd61a67@si6networks.com> <c6515826-4849-e128-35c5-37569bf43881@gmail.com>
In-Reply-To: <c6515826-4849-e128-35c5-37569bf43881@gmail.com>
From: 神明達哉 <jinmei@wide.ad.jp>
Date: Thu, 10 Sep 2020 15:33:02 -0700
Message-ID: <CAJE_bqexKOjCvBiC4R8hELrVx208ahaEPBOQTMYh--Orioa9NA@mail.gmail.com>
Subject: Re: Last Call: <draft-ietf-6man-rfc4941bis-10.txt> (Temporary Address Extensions for Stateless Address Autoconfiguration in IPv6) to Proposed Standard
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: Fernando Gont <fgont@si6networks.com>, Lorenzo Colitti <lorenzo@google.com>, last-call@ietf.org, draft-ietf-6man-rfc4941bis@ietf.org, IETF IPv6 Mailing List <ipv6@ietf.org>, 6man Chairs <6man-chairs@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/XYUBmUj-PWXMS8pLsvQCqXGXt_I>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Sep 2020 22:33:17 -0000

At Fri, 11 Sep 2020 09:08:40 +1200,
Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:

> [...] It's been a matter of principle
> since the earliest work on IPv6 address allocation that the /64
> boundary is treated like a parameter that could be changed, so
> underlying code should treat it as a parameter and not as a constant.
> (And RFC7421 discusses a lot more than just the privacy implications.)

I agree, but I think there's some subtlety here.  By referring to
RFC4291 and specifically mentioning the magic number of 64 followed by
the term "any arbitrary length", I see that the above text could read
as part of attempting to loosen or remove the magic number from the
address architecture.  Some people would think that's a good move,
while some others would consider it a very bad idea, but one clear
thing is that if we want to include this discussion in this draft it's
very unlikely to reach a consensus and the draft would hang in limbo,
if not die.

>From other responses from Fernando, I don't think that's the intent of
the authors.  In that case, if we don't want to remove the above note
because of the "lot more" in RFC7421, we might say something like
this:

   2.  The Interface Identifier is obtained by taking as many bits from
       the random number obtained in the previous step as necessary.
       See Section 2 of [RFC4862] for the necessary number of bits,
       that is, the length of the IID.  See also [RFC7421] about
       privacy implications of the IID length.  Note: there are no
       special bits in an Interface Identifier [RFC7136].
(and no "note after this)

The points of the new text are
- Use [RFC4862] about the IID length, thus making rfc4941bis agnostic
  about the "64 vs not 64" pitfall.
- Referring to RFC4862 also implicitly means the IID length is a
  parameter at least in theory, so we won't lose the "lot more" than
  privacy implications.
- On top of these, make the reference to RFC7421 focused on the
  privacy implications.

BTW, RFC4941 limits the length of IID of temporary addresses to 64
bits while noting the length is not a fixed constant:

   [...] Note that an IPv6 identifier does not
   necessarily have to be 64 bits in length, but the algorithm specified
   in this document is targeted towards 64-bit interface identifiers.
(I suspect "an IPv6 identifier" is a typo and should be "an interface
identifier")

rfc4941bis now seems to remove this limitation, albeit maybe
implicitly.  Independently from the discussion on Section 3.3.1, I
guess this change should probably be noted in Section 5 ("Significant
Changes from RFC4941").

--
JINMEI, Tatuya