Re: [pcp] Comparison of PCP authentication

Alper Yegin <alper.yegin@yegin.org> Tue, 07 August 2012 16:16 UTC

Return-Path: <alper.yegin@yegin.org>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06AEF21F8792 for <pcp@ietfa.amsl.com>; Tue, 7 Aug 2012 09:16:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.561
X-Spam-Level:
X-Spam-Status: No, score=-102.561 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FcP77xhq65ed for <pcp@ietfa.amsl.com>; Tue, 7 Aug 2012 09:16:15 -0700 (PDT)
Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 8164121F874C for <pcp@ietf.org>; Tue, 7 Aug 2012 09:16:13 -0700 (PDT)
Received: from [192.168.2.5] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0M6B3i-1TwuBe3ZMI-00xOvq; Tue, 07 Aug 2012 12:16:12 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset="iso-2022-jp"
From: Alper Yegin <alper.yegin@yegin.org>
In-Reply-To: <50212516.5080902@toshiba.co.jp>
Date: Tue, 07 Aug 2012 19:16:07 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <2C42D4BA-608E-4A1F-8955-117E64E892FC@yegin.org>
References: <9B57C850BB53634CACEC56EF4853FF653B6EC381@TK5EX14MBXW604.wingroup.windeploy.ntdev.microsoft.com> <7FE144CF-00E3-4451-8CBE-A6A684DB7CC4@yegin.org> <067d01cd73fd$765a6c50$630f44f0$@com> <D6D2DEED-C35A-45AB-8B72-96195C308DB9@yegin.org> <57FF0F8E-1B86-410F-8B6B-C4893A28222F@lilacglade.org> <075301cd7419$19557dd0$4c007970$@com> <5020688F.4060004@toshiba.co.jp> <955DC538-A1D9-4B19-B1A5-A7741EA7FB35@yegin.org> <50212516.5080902@toshiba.co.jp>
To: Yoshihiro Ohba <yoshihiro.ohba@toshiba.co.jp>
X-Mailer: Apple Mail (2.1278)
X-Provags-ID: V02:K0:iVkDtVotKylyevqGVsFUMe1YiyWwoFlJ+3DMnnmKPdG 9cRQjNHwUF6L15MngPbmVbDXpDNBJKKmERisoy8ZHHPCQtM+tB sFTCkXTKDErfKL+VZ4Myy+d/oYGn8z5fivNmd5zdp35qh5Aw7I B9e8X06ABl54xTUeJUeXIeE92O3hbTf+c+v6EhuDiLMXkMBj82 xV5lYpESom0ZYW0pFKiUijJHkau5CWYr3HcDxEyCAQYMpu3SQn 3gV2x6LWn/dBT4xCqXVLH1gJkdYHrTNwXD450IFXKclRbOl7Bp +oUwrvVjuPJCMBovBWR8D6rQM2WDOsdcmC+3LK0cHYOyAX20AV r5GBdTqfSRpBXcJgmFASIWKbis4DpB0gEF8bGPknW9qj9wXzGF lYeVApASIev4g==
Cc: pcp@ietf.org
Subject: Re: [pcp] Comparison of PCP authentication
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Aug 2012 16:16:16 -0000

Hi Yoshi,

>>> 
>>> If we specify a new use of PANA "Reserved" field, it cannot be an
>>> Errata because it is not a specification error.  It needs to be a new
>>> RFC that updates RFC 5191.
>> 
>> 
>> Those bits are reserved for "future."
>> And because of this demux design, "now" we want to make sure no one will ever set bit#7.
> 
> I think "no one will ever set bit#7" is too much restricted.
> 
> Because of in-band key management, a bit in the PANA "Reserved" field
> to be used for demultiplexing "over PCP port" can be meaningful only
> when PANA message is carried "over the PCP port".   The bit could also
> be used for demultiplexing other application carried over another port
> if the other application allows to use the bit for demultiplexing
> purpose as well.


We can either say:

Bit#7 is reserved for use with PCP. (And it's always set to 0).

Or,

When used over PCP port, Bit#7 is always set to 0.
When used over other ports, its reserved for future use (as it currently is).


Latter one is more conservative about bit usage, but a bit more cumbersome. Not sure which way to go.


> 
> From PANA perspective, we can now allocate the whole 16-bit "Reserved"
> PANA field for "in-band key management usage", and let each
> application including PCP define how to demultiplex using the 16-bit.
> I think this is a cleaner and extensible approach.
> 

We may not want to give up on the 16-bit space for encoding one type of usage (in-band). Let's think about this…..

Alper




> Yoshihiro Ohba
> 
> 
>> What we need is to allocate that bit and state it's always set to 0. I don't think we need a separate RFC for this, this'd be the RFC that defines how PANA and PCP are used together.
>> 
>> Alper
>> 
>> 
>> 
>> 
>> 
>