Re: I-D Action: draft-ietf-6man-rfc6874bis-01.txt

Brian Carpenter <brian.e.carpenter@gmail.com> Thu, 30 June 2022 10:03 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A905DC159484 for <ipv6@ietfa.amsl.com>; Thu, 30 Jun 2022 03:03:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.103
X-Spam-Level:
X-Spam-Status: No, score=-2.103 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7nagbWbbohP7 for <ipv6@ietfa.amsl.com>; Thu, 30 Jun 2022 03:03:33 -0700 (PDT)
Received: from mail-lf1-x133.google.com (mail-lf1-x133.google.com [IPv6:2a00:1450:4864:20::133]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D202DC14EB1E for <ipv6@ietf.org>; Thu, 30 Jun 2022 03:03:33 -0700 (PDT)
Received: by mail-lf1-x133.google.com with SMTP id f39so32856880lfv.3 for <ipv6@ietf.org>; Thu, 30 Jun 2022 03:03:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=6JTjUj8ruDbJwmWy2ZW4r4f7DlloxFqBbm/tsEq/gLs=; b=TnYyZx16KW5NX27AgBLfqdNdWHiYD3cRsNE5x/5WbKmvV2BQ3OwQQNYNvdj1/tUo0d XVmrjkvBkUWfKEsJFGDOnWJhlRNxJoFdhtLq8lYn5tEGeb4Xp1JNPGrU7JqnRs1YFENS B3dzUXZHbcXU+3APmgI4rmBkc//Sf6/ZRlpslYoct/fM0Hy3vLQIdOUuJNr+0YyTfYwW N/XQkEEuJKjKxB6hXajed3KUDo1kN0vDoAFo9MBKhnbgprPkUtHdisj4+ffbCIio4aMX 2RJDFwHdzzMmjzRoDR+JmLGP99xG4BLjJNAlWDtH+uqubULip4iunWt7JQwOzY2mwMkA JEwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=6JTjUj8ruDbJwmWy2ZW4r4f7DlloxFqBbm/tsEq/gLs=; b=SaxB1egB1RcnGoQtqY2NIQmDE/TcN5PqsY7dYzvToIAJFwugpAt5SlJTS7vjRiuRLD qNaVdLcelvtBxBVznvNiKhOhqV080FnFNlHZq/1JUZSejGgUZjg8mw/2FT3V2RRUGZFd Mpt0QmO1qDESrXUwK81qEtH+3byNykhm9VRIgyOJgOU/2xIx2GkCZOU4/flly48zw1Qv TksyzX3imJhc220gi8wbIkW/MuqSLRPAmVhVnpRxeUsPzzTT3f9adFGL01pS+/Cq9J9F tnlU6mcD0a1sPDuM+XwR7/WpJlG3aO3Qi0MuD88msPB1aHW3Nz5mP6eagA6niZSUoFsX TabQ==
X-Gm-Message-State: AJIora8z9bEdPwYvPFY/2VnQjLU+pRSyIcjkNATScPluA2bOsgUEquf6 0IAynuPqmme/9UCQ4YjW+bn3B7c7Pyz/4iqzpGs=
X-Google-Smtp-Source: AGRyM1sxj7AFG34jwhkPIJm2AuwMgf2n5agWQHw8kjgqMP2Td8LO/RZ+biSw7xOVVNOHYPHDYHcH/Mw3t6wclZ8jUok=
X-Received: by 2002:a05:6512:3c85:b0:480:fd2b:23bd with SMTP id h5-20020a0565123c8500b00480fd2b23bdmr5365515lfv.475.1656583411764; Thu, 30 Jun 2022 03:03:31 -0700 (PDT)
MIME-Version: 1.0
References: <164938402532.17740.11717866110301931501@ietfa.amsl.com> <b1780128-2069-b32e-7ca5-86977c119f0c@gmail.com> <11d4e419-11a9-8768-abf2-1335e5f1c3d8@gmail.com> <f650c051650b4e5891b80dafb2dfaaaa@huawei.com>
In-Reply-To: <f650c051650b4e5891b80dafb2dfaaaa@huawei.com>
From: Brian Carpenter <brian.e.carpenter@gmail.com>
Date: Thu, 30 Jun 2022 22:03:19 +1200
Message-ID: <CANMZLAZPuA_Yey4tG0orU0m5Y3rmZhB84p8Pk_aXhu707mygNA@mail.gmail.com>
Subject: Re: I-D Action: draft-ietf-6man-rfc6874bis-01.txt
To: Vasilenko Eduard <vasilenko.eduard@huawei.com>
Cc: 6man WG <ipv6@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000cc910105e2a7610e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/evJ1Vds1e4et_bo63hjGH2za5mk>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jun 2022 10:03:37 -0000

There is an opposite argument: supporting a default zone makes an attack
easier because the zone does not need to to be guessed.
Windows does exactly what you suggest, by the way; I could not run my tests
on Linux.

Regards,
    Brian Carpenter
    (via tiny screen & keyboard)


On Thu, 30 Jun 2022, 21:22 Vasilenko Eduard, <vasilenko.eduard@huawei.com>
wrote:

> Hi Brian,
> Just one small idea: does it make sense to request
> "All applications claiming support for this document SHOULD choose one LLA
> zone as the default.
> If the user would omit the zone for the literal request to fe80:: then the
> application SHOULD use the default zone".
> It would greatly simplify life for many users because they have only one
> interface on the host - they would never need to investigate the name of
> the zone that is very OS-specific.
>
> I do not like the request in RFC 4007:
> index value zero at each scope SHOULD be reserved to mean "use the default
> zone"
> IMHO: it is much better to omit the zone name completely to get access to
> the default zone.
> People may not know that zone 0 has a special meaning.
>
> Formally, what I have proposed does not contradict RFC 4007
> Because the default zone could be omitted and could be 0 at the same time
> (both would lead to the same default zone).
>
> If you would say "No" to this request
> Then please, repeat RFC 4007 that the default zone SHOULD be and SHOULD be
> "0".
> Please, remind people of this fact.
> Eduard
> -----Original Message-----
> From: ipv6 [mailto:ipv6-bounces@ietf.org] On Behalf Of Brian E Carpenter
> Sent: Thursday, May 19, 2022 3:53 AM
> To: ipv6@ietf.org
> Subject: Re: I-D Action: draft-ietf-6man-rfc6874bis-01.txt
>
> There's been no more discussion for several weeks. Can we move on to a WG
> Last Call?
>
> Regards
>     Brian Carpenter
> On 08-Apr-22 14:29, Brian E Carpenter wrote:
> > Hi,
> >
> > This version reflects comments at the IETF and on the list.
> > Change log:
> > * Extended use cases (added Microsoft WSD)
> > * Clarified relationship with RFC3986 language
> > * Allow for legacy use of RFC6874 format
> > * Augmented security considerations
> > * Editorial and reference improvements
> >
> > Note that some of the text about RFC3986 that Shang Ye suggested to
> > remove has been retained, but modified. Further comments about this,
> > or any other aspect, are very welcome.
> >
> > Regards
> >      Brian + co-authors
> >
> > On 08-Apr-22 14:13, internet-drafts@ietf.org wrote:
> >>
> >> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
> >> This draft is a work item of the IPv6 Maintenance WG of the IETF.
> >>
> >>           Title           : Representing IPv6 Zone Identifiers in
> Address Literals and Uniform Resource Identifiers
> >>           Authors         : Brian Carpenter
> >>                             Stuart Cheshire
> >>                             Robert M. Hinden
> >>      Filename        : draft-ietf-6man-rfc6874bis-01.txt
> >>      Pages           : 13
> >>      Date            : 2022-04-07
> >>
> >> Abstract:
> >>      This document describes how the zone identifier of an IPv6 scoped
> >>      address, defined as <zone_id> in the IPv6 Scoped Address
> Architecture
> >>      (RFC 4007), can be represented in a literal IPv6 address and in a
> >>      Uniform Resource Identifier that includes such a literal address.
> It
> >>      updates the URI Generic Syntax and Internationalized Resource
> >>      Identifier specifications (RFC 3986, RFC 3987) accordingly, and
> >>      obsoletes RFC 6874.
> >>
> >>
> >> The IETF datatracker status page for this draft is:
> >> https://datatracker.ietf.org/doc/draft-ietf-6man-rfc6874bis/
> >>
> >> There is also an HTML version available at:
> >> https://www.ietf.org/archive/id/draft-ietf-6man-rfc6874bis-01.html
> >>
> >> A diff from the previous version is available at:
> >> https://www.ietf.org/rfcdiff?url2=draft-ietf-6man-rfc6874bis-01
> >>
> >>
> >> Internet-Drafts are also available by rsync at
> >> rsync.ietf.org::internet-drafts
> >>
> >>
> >> _______________________________________________
> >> I-D-Announce mailing list
> >> I-D-Announce@ietf.org
> >> https://www.ietf.org/mailman/listinfo/i-d-announce
> >> Internet-Draft directories: http://www.ietf.org/shadow.html or
> >> ftp://ftp.ietf.org/ietf/1shadow-sites.txt
> >>
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>