Re: [Tsv-art] Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06

Joe Touch <touch@strayalpha.com> Wed, 05 December 2018 03:48 UTC

Return-Path: <touch@strayalpha.com>
X-Original-To: tsv-art@ietfa.amsl.com
Delivered-To: tsv-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82767130DE3; Tue, 4 Dec 2018 19:48:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.221
X-Spam-Level:
X-Spam-Status: No, score=-1.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_NEUTRAL=0.779] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 52mx6lsmL3rP; Tue, 4 Dec 2018 19:48:11 -0800 (PST)
Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 424C3130DD2; Tue, 4 Dec 2018 19:48:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=To:References:Message-Id: Content-Transfer-Encoding:Cc:Date:In-Reply-To:From:Subject:Mime-Version: Content-Type:Sender:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=eaoODdJ61o8UUMu8uDNC+DY9asoUoyn8myvtQiDzj64=; b=5xaNMj+5VdfXretO5QCzzlr+4 cnAb8+6+5mz1JLkq2JwDyee7gS5YPDcsr/GYtdfvXZAF9R6RdrDzsA2puHzEwENbgJvwIv0sNgv6l IhH8msUMj32rfPeBLEZ52HWfTNaKi83uMT5sxI8fPdzJcT3ZfOuAPmRFpLQOUnvwhRamOMFu2KikQ 3eEbitK5ALO6swV+OyS1Jqx8hvta1vieq9WNPcrb7demYlIo8oM39YAI+9qvRWGFZW8MOSTbmBspB x3bVsQ2vM9OFH/l3hjwDGjRY2j6Y8HEfIM/7ICAtNB4qnISvus2Vc/PFi3IY6Li76GdCTEsAgZO7q KeJ4PhPjw==;
Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:53416 helo=[192.168.1.179]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from <touch@strayalpha.com>) id 1gUOAU-003gIg-7E; Tue, 04 Dec 2018 22:48:10 -0500
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (1.0)
From: Joe Touch <touch@strayalpha.com>
X-Mailer: iPhone Mail (16B92)
In-Reply-To: <42f482b8-ef85-909b-861f-c95a6a9efde1@gmail.com>
Date: Tue, 04 Dec 2018 19:48:09 -0800
Cc: "C. M. Heard" <heard@pobox.com>, IETF <ietf@ietf.org>, draft-ietf-opsec-ipv6-eh-filtering.all@ietf.org, OPSEC <opsec@ietf.org>, TSV-ART <tsv-art@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <6D2BADF7-E3FB-4A71-A06C-7A0FB23D1515@strayalpha.com>
References: <CACL_3VGeJPzDhS0RVAvpQs9W8b4EODft-qJRwBD6Xxm+X6BZ6A@mail.gmail.com> <B6C8F695-074C-40BF-A73F-1B0C85F08F71@strayalpha.com> <42f482b8-ef85-909b-861f-c95a6a9efde1@gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
X-OutGoing-Spam-Status: No, score=-0.5
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server217.web-hosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - strayalpha.com
X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com
X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsv-art/zsD-YGVYtQ6GQu6Q3nDa0hz9b3M>
Subject: Re: [Tsv-art] Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06
X-BeenThere: tsv-art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Transport Area Review Team <tsv-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsv-art>, <mailto:tsv-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsv-art/>
List-Post: <mailto:tsv-art@ietf.org>
List-Help: <mailto:tsv-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsv-art>, <mailto:tsv-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Dec 2018 03:48:13 -0000


On Dec 4, 2018, at 6:59 PM, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:

>>>  NOTE: While [RFC2460] required that all nodes must examine and
>>>  process the Hop-by-Hop Options header, it is now expected that nodes
>>>  along a packet's delivery path only examine and process the
>>>  Hop-by-Hop Options header if explicitly configured to do so.
>> 
>> That is an expectation of the inadequacy of others. It does not clearly drop the requirement.
> 
> If so, that was a drafting error. RFC 7045 already formally changed
> it to a SHOULD.
> 
> And IMHO it's entirely correct.

It makes the notion of option flag bits irrelevant but never removed them. 

The trouble is that the flags were there to prevent silently ignoring explicit direction to each router. If that isn’t what HBH options are, then what are they?

If they were disabled as you say, they should have been completely removed from 8200. But they were - and are - not. 

Joe