Re: I-D.ietf-v6ops-cpe-simple-security-09

Ole Troan <ot@cisco.com> Mon, 22 March 2010 13:10 UTC

Return-Path: <owner-v6ops@ops.ietf.org>
X-Original-To: ietfarch-v6ops-archive@core3.amsl.com
Delivered-To: ietfarch-v6ops-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D87493A6B4C for <ietfarch-v6ops-archive@core3.amsl.com>; Mon, 22 Mar 2010 06:10:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.07
X-Spam-Level:
X-Spam-Status: No, score=0.07 tagged_above=-999 required=5 tests=[AWL=-0.565, BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UyV6F7DlAKyx for <ietfarch-v6ops-archive@core3.amsl.com>; Mon, 22 Mar 2010 06:10:57 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id AB32C3A6A34 for <v6ops-archive@lists.ietf.org>; Mon, 22 Mar 2010 06:10:57 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-v6ops@ops.ietf.org>) id 1NthKl-000DeA-Fh for v6ops-data0@psg.com; Mon, 22 Mar 2010 13:06:19 +0000
Received: from [144.254.224.141] (helo=ams-iport-2.cisco.com) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.71 (FreeBSD)) (envelope-from <ot@cisco.com>) id 1NthKg-000DdX-3U for v6ops@ops.ietf.org; Mon, 22 Mar 2010 13:06:14 +0000
Authentication-Results: ams-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ag8BAFMIp0uQ/uCWe2dsb2JhbACbKxUBAQsLJAYcojGXf4R9BIMe
X-IronPort-AV: E=Sophos;i="4.51,287,1267401600"; d="scan'208";a="4640116"
Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-2.cisco.com with ESMTP; 22 Mar 2010 12:32:06 +0000
Received: from ams3-vpn-dhcp4422.cisco.com (ams3-vpn-dhcp4422.cisco.com [10.61.81.69]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id o2MD6BCj002181; Mon, 22 Mar 2010 13:06:11 GMT
Subject: Re: I-D.ietf-v6ops-cpe-simple-security-09
Mime-Version: 1.0 (Apple Message framework v1077)
Content-Type: text/plain; charset="us-ascii"
From: Ole Troan <ot@cisco.com>
In-Reply-To: <FF6C57C8-664B-40F1-B071-CF794ED2A8FE@apple.com>
Date: Mon, 22 Mar 2010 06:07:55 -0700
Cc: IPv6 Operations <v6ops@ops.ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <D2B75FB2-8D1B-490A-8BF3-B4D8E33C8158@cisco.com>
References: <D6F5ACD2-EB43-477E-9F48-AC3EDB3F7EB4@apple.com> <4BA3BBCF.2090903@cisco.com> <4BA3D1B3.4010501@gmail.com> <4BA3DAAA.10000@cisco.com> <4BA40DD1.7080306@gmail.com> <6C168711-6A34-4487-9911-92766513183C@apple.com> <4BA522E8.7050504@cisco.com> <4BA56626.20606@gmail.com> <20100321133831.GL69383@Space.Net> <4BA6575D.7070300@gmail.com> <4BA670ED.1020302@cisco.com> <D69F1DE6-D24D-45AA-95D0-99B63E62A1EE@apple.com> <4BA68F61.7020005@cisco.com> <4BA69A3D.7@gmail.com> <FF6C57C8-664B-40F1-B071-CF794ED2A8FE@apple.com>
To: james woodyatt <jhw@apple.com>
X-Mailer: Apple Mail (2.1077)
Sender: owner-v6ops@ops.ietf.org
Precedence: bulk
List-ID: <v6ops.ops.ietf.org>

[...]

>> It doesn't say that CPEs MUST do this. It leaves that choice open, as an informational document.
> 
> No, it doesn't say that CPE routers MUST do this, but it does go out of its way to say that CPE routers "should" do this.
> 
> More importantly, other specifications which reference RFC 4864 as if it's morally equivalent to a proposed standard *do* say that CPE routers MUST do this.  While categorized as Informational, the language in I-D.ietf-v6ops-cpe-simple-security is deliberately crafted to be easily cited by other SDO's in requirement specifications, which are expecting to describe not just the CPE routers MUST do this, but HOW they will do this.  I am aware of at least two other SDO's that are preparing exactly that.

which SDO's are you thinking of?
TR-124i2 references the simple security draft but does not make any recommendation that the functionality must be enabled by default. same for the basic IPv6 CE router draft.

cheers,
Ole