Re: [pcp] Revising PANA side-by-side approach

Sam Hartman <hartmans@painless-security.com> Fri, 05 October 2012 20:43 UTC

Return-Path: <hartmans@painless-security.com>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 164E621F8532 for <pcp@ietfa.amsl.com>; Fri, 5 Oct 2012 13:43:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 4.348
X-Spam-Level: ****
X-Spam-Status: No, score=4.348 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, RDNS_DYNAMIC=0.1]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ASfoYMPzYLYx for <pcp@ietfa.amsl.com>; Fri, 5 Oct 2012 13:43:43 -0700 (PDT)
Received: from ec2-23-21-227-93.compute-1.amazonaws.com (ec2-23-21-227-93.compute-1.amazonaws.com [23.21.227.93]) by ietfa.amsl.com (Postfix) with ESMTP id 938D321F84FD for <pcp@ietf.org>; Fri, 5 Oct 2012 13:43:43 -0700 (PDT)
Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id DECEE20289; Fri, 5 Oct 2012 16:43:29 -0400 (EDT)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id B5EA44AD5; Fri, 5 Oct 2012 16:43:28 -0400 (EDT)
From: Sam Hartman <hartmans@painless-security.com>
To: Alper Yegin <alper.yegin@yegin.org>
References: <506E5175.3020802@toshiba.co.jp> <712CABEE-96A2-493A-B2F8-94BC2548E0FD@lilacglade.org> <CE78EF70-EE7E-4910-A8DD-3E794FB8ED52@yegin.org>
Date: Fri, 05 Oct 2012 16:43:28 -0400
In-Reply-To: <CE78EF70-EE7E-4910-A8DD-3E794FB8ED52@yegin.org> (Alper Yegin's message of "Fri, 5 Oct 2012 23:36:26 +0300")
Message-ID: <tslk3v4y7in.fsf@mit.edu>
User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Cc: pcp@ietf.org
Subject: Re: [pcp] Revising PANA side-by-side approach
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Oct 2012 20:43:44 -0000

>>>>> "Alper" == Alper Yegin <alper.yegin@yegin.org> writes:

    Alper> port sharing is.  And I don't know if anyone else would
    Alper> require the same for another protocol down the road.  So,
    Alper> when we need to do this for other protocols, I don't think
    Alper> we'd need to do port sharing.

The explanation Stuart gave you in the meeting for port sharing  applies
fairly universally.
I've generally found that applications with authentication over the same
port are significantly easier to deploy.
One of the many issues is firewalls, but the other issues Stuart
described also apply.