Re: I-D.ietf-v6ops-cpe-simple-security-09

Fred Baker <fred@cisco.com> Sat, 20 March 2010 19:56 UTC

Return-Path: <owner-v6ops@ops.ietf.org>
X-Original-To: ietfarch-v6ops-archive@core3.amsl.com
Delivered-To: ietfarch-v6ops-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8E41D3A6943 for <ietfarch-v6ops-archive@core3.amsl.com>; Sat, 20 Mar 2010 12:56:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -109.014
X-Spam-Level:
X-Spam-Status: No, score=-109.014 tagged_above=-999 required=5 tests=[AWL=-1.649, BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_HI=-8, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jYTWNONwNowC for <ietfarch-v6ops-archive@core3.amsl.com>; Sat, 20 Mar 2010 12:56:01 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id 66DC73A680C for <v6ops-archive@lists.ietf.org>; Sat, 20 Mar 2010 12:56:01 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-v6ops@ops.ietf.org>) id 1Nt4kW-0007xT-2j for v6ops-data0@psg.com; Sat, 20 Mar 2010 19:54:20 +0000
Received: from [171.68.10.87] (helo=sj-iport-5.cisco.com) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.71 (FreeBSD)) (envelope-from <fred@cisco.com>) id 1Nt4kO-0007w6-EC for v6ops@ops.ietf.org; Sat, 20 Mar 2010 19:54:12 +0000
Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-AV: E=Sophos;i="4.51,279,1267401600"; d="scan'208";a="169659899"
Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-5.cisco.com with ESMTP; 20 Mar 2010 19:54:11 +0000
Received: from stealth-10-32-244-218.cisco.com (stealth-10-32-244-218.cisco.com [10.32.244.218]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o2KJra54004993; Sat, 20 Mar 2010 19:54:11 GMT
Subject: Re: I-D.ietf-v6ops-cpe-simple-security-09
Mime-Version: 1.0 (Apple Message framework v1077)
Content-Type: text/plain; charset="us-ascii"
From: Fred Baker <fred@cisco.com>
In-Reply-To: <4BA522E8.7050504@cisco.com>
Date: Sat, 20 Mar 2010 12:54:11 -0700
Cc: james woodyatt <jhw@apple.com>, IPv6 Operations <v6ops@ops.ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <F5D29FBE-403A-4615-BA47-7D054D3F5E0B@cisco.com>
References: <D6F5ACD2-EB43-477E-9F48-AC3EDB3F7EB4@apple.com> <4BA3BBCF.2090903@cisco.com> <4BA3D1B3.4010501@gmail.com> <4BA3DAAA.10000@cisco.com> <4BA40DD1.7080306@gmail.com> <6C168711-6A34-4487-9911-92766513183C@apple.com> <4BA522E8.7050504@cisco.com>
To: Mark Townsley <townsley@cisco.com>
X-Mailer: Apple Mail (2.1077)
Sender: owner-v6ops@ops.ietf.org
Precedence: bulk
List-ID: <v6ops.ops.ietf.org>

I use such a device in my home as part of an enterprise network...

On Mar 20, 2010, at 12:32 PM, Mark Townsley wrote:

> 
> On 3/20/10 1:32 AM, james woodyatt wrote:
>> On Mar 19, 2010, at 16:50, Brian E Carpenter wrote:
>>   
>>> But I'm afraid that the simplicity of 'default deny' has long
>>> ago won the hearts and minds of enterprise network managers.
>>>     
>> Sadly, enterprise network managers aren't the only people whose legitimate interests are at stake in the matter under discussion.
>>   
> This document is clearly scoped in the first sentence of the Introduction to:
> 
> "gateway devices that enable delivery of Internet services in residential and small office settings."
> 
> So, I'm not sure why we are even considering enterprise network managers here.
> 
> The networks themselves, the assets under protection, the types of applications, are quite different
> between and enterprise network and residential network.
> 
> - Mark
>> 
>> --
>> james woodyatt<jhw@apple.com>
>> member of technical staff, communications engineering
>> 
>> 
>> 
>> 
>>   
> 
> 

http://www.ipinc.net/IPv4.GIF