Re: [pcp] Comparison of PCP authentication

Yoshihiro Ohba <yoshihiro.ohba@toshiba.co.jp> Tue, 07 August 2012 14:24 UTC

Return-Path: <yoshihiro.ohba@toshiba.co.jp>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A195B21F86C5 for <pcp@ietfa.amsl.com>; Tue, 7 Aug 2012 07:24:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.322
X-Spam-Level:
X-Spam-Status: No, score=-5.322 tagged_above=-999 required=5 tests=[AWL=-1.233, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DcPNeQeL43TZ for <pcp@ietfa.amsl.com>; Tue, 7 Aug 2012 07:24:27 -0700 (PDT)
Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id 040C821F86A0 for <pcp@ietf.org>; Tue, 7 Aug 2012 07:24:26 -0700 (PDT)
Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id q77EONKd005274; Tue, 7 Aug 2012 23:24:23 +0900 (JST)
Received: (from root@localhost) by arc1.toshiba.co.jp id q77EONTx008769; Tue, 7 Aug 2012 23:24:23 +0900 (JST)
Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id ZAA08768; Tue, 7 Aug 2012 23:24:23 +0900
Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id q77EONGr027522; Tue, 7 Aug 2012 23:24:23 +0900 (JST)
Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id q77EONXm006760; Tue, 7 Aug 2012 23:24:23 +0900 (JST)
Received: from [133.199.18.188] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPA id <0M8E00M232OMU110@mail.po.toshiba.co.jp>; Tue, 07 Aug 2012 23:24:23 +0900 (JST)
Date: Tue, 07 Aug 2012 23:24:22 +0900
From: Yoshihiro Ohba <yoshihiro.ohba@toshiba.co.jp>
In-reply-to: <955DC538-A1D9-4B19-B1A5-A7741EA7FB35@yegin.org>
To: Alper Yegin <alper.yegin@yegin.org>
Message-id: <50212516.5080902@toshiba.co.jp>
MIME-version: 1.0
Content-type: text/plain; charset="ISO-2022-JP"
Content-transfer-encoding: 7bit
References: <9B57C850BB53634CACEC56EF4853FF653B6EC381@TK5EX14MBXW604.wingroup.windeploy.ntdev.microsoft.com> <7FE144CF-00E3-4451-8CBE-A6A684DB7CC4@yegin.org> <067d01cd73fd$765a6c50$630f44f0$@com> <D6D2DEED-C35A-45AB-8B72-96195C308DB9@yegin.org> <57FF0F8E-1B86-410F-8B6B-C4893A28222F@lilacglade.org> <075301cd7419$19557dd0$4c007970$@com> <5020688F.4060004@toshiba.co.jp> <955DC538-A1D9-4B19-B1A5-A7741EA7FB35@yegin.org>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20120713 Thunderbird/14.0
Cc: pcp@ietf.org
Subject: Re: [pcp] Comparison of PCP authentication
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Aug 2012 14:24:29 -0000

Alper,

(2012/08/07 17:10), Alper Yegin wrote:

>>
>> If we specify a new use of PANA "Reserved" field, it cannot be an
>> Errata because it is not a specification error.  It needs to be a new
>> RFC that updates RFC 5191.
> 
> 
> Those bits are reserved for "future."
> And because of this demux design, "now" we want to make sure no one will ever set bit#7.

I think "no one will ever set bit#7" is too much restricted.

Because of in-band key management, a bit in the PANA "Reserved" field
to be used for demultiplexing "over PCP port" can be meaningful only
when PANA message is carried "over the PCP port".   The bit could also
be used for demultiplexing other application carried over another port
if the other application allows to use the bit for demultiplexing
purpose as well.

>From PANA perspective, we can now allocate the whole 16-bit "Reserved"
PANA field for "in-band key management usage", and let each
application including PCP define how to demultiplex using the 16-bit.
 I think this is a cleaner and extensible approach.

Yoshihiro Ohba


> What we need is to allocate that bit and state it's always set to 0. I don't think we need a separate RFC for this, this'd be the RFC that defines how PANA and PCP are used together.
> 
> Alper
> 
>   
> 
> 
>