Re: [OPSEC] HbH flags [Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06]

[Jared Mauch <[e-mail]>]

> On Dec 6, 2018, at 10:35 AM, Joe Touch <[e-mail]> wrote:
> 
> OK, all,
> 
> So let's try it this way:
> 
> - standards people on this list claim that 8200 already allows silently
> ignoring HBH options
> 
> - ops people on this list claim that most routers already do this
> 
> So if you accept the items above, then why exactly is this document
> needed at all? The standards already support it and operators already do it.
> 
> It clearly isn't needed, just as clearly as it isn't driven by security
> issues.

I think many of us have PTSD from trying to talk about reasonable defaults and the failure to explicitly state why some of these things are bad and deprecating them continues to burn us to this day.  (Unrelated but perhaps relevant is some of us can’t get our vendors to clean up the garbage they sold us or our customers/peers/partners so we are bearing these costs on a daily basis).

> So I would conclude that whether we agree on the logical path, we have
> come to the same conclusion - drop this doc and move on.

I’ll let someone else decide that, chairs/ADs etc.  I think the question of additional work of eliminating these things so vendors don’t feel the need to implement them is fair work.

- jared