Re: I-D.ietf-v6ops-cpe-simple-security-09

Mark Townsley <townsley@cisco.com> Sat, 20 March 2010 19:37 UTC

Return-Path: <owner-v6ops@ops.ietf.org>
X-Original-To: ietfarch-v6ops-archive@core3.amsl.com
Delivered-To: ietfarch-v6ops-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6FB593A68C6 for <ietfarch-v6ops-archive@core3.amsl.com>; Sat, 20 Mar 2010 12:37:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.3
X-Spam-Level:
X-Spam-Status: No, score=-8.3 tagged_above=-999 required=5 tests=[AWL=-0.935, BAYES_00=-2.599, DNS_FROM_OPENWHOIS=1.13, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_HI=-8, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PVItqdRmJ+ri for <ietfarch-v6ops-archive@core3.amsl.com>; Sat, 20 Mar 2010 12:37:53 -0700 (PDT)
Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by core3.amsl.com (Postfix) with ESMTP id F41643A6846 for <v6ops-archive@lists.ietf.org>; Sat, 20 Mar 2010 12:37:52 -0700 (PDT)
Received: from majordom by psg.com with local (Exim 4.71 (FreeBSD)) (envelope-from <owner-v6ops@ops.ietf.org>) id 1Nt4Pv-000506-EY for v6ops-data0@psg.com; Sat, 20 Mar 2010 19:33:03 +0000
Received: from [171.68.10.86] (helo=sj-iport-4.cisco.com) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.71 (FreeBSD)) (envelope-from <townsley@cisco.com>) id 1Nt4Pr-0004zn-Pa for v6ops@ops.ietf.org; Sat, 20 Mar 2010 19:33:00 +0000
Authentication-Results: sj-iport-4.cisco.com; dkim=neutral (message not signed) header.i=none
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AvsEABHApEurRN+K/2dsb2JhbACbPXOjR5hPglWCKAQ
X-IronPort-AV: E=Sophos;i="4.51,279,1267401600"; d="scan'208";a="103357800"
Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-4.cisco.com with ESMTP; 20 Mar 2010 19:32:58 +0000
Received: from iwan-view3.cisco.com (iwan-view3.cisco.com [171.70.65.13]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id o2KJWwnG005608; Sat, 20 Mar 2010 19:32:58 GMT
Received: from ams-townsley-8715.cisco.com (ams-townsley-8715.cisco.com [10.55.233.230]) by iwan-view3.cisco.com (8.11.2/CISCO.WS.1.2) with ESMTP id o2KJWvY13674; Sat, 20 Mar 2010 12:32:57 -0700 (PDT)
Message-ID: <4BA522E8.7050504@cisco.com>
Date: Sat, 20 Mar 2010 20:32:56 +0100
From: Mark Townsley <townsley@cisco.com>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.1.8) Gecko/20100227 Thunderbird/3.0.3
MIME-Version: 1.0
To: james woodyatt <jhw@apple.com>
CC: IPv6 Operations <v6ops@ops.ietf.org>
Subject: Re: I-D.ietf-v6ops-cpe-simple-security-09
References: <D6F5ACD2-EB43-477E-9F48-AC3EDB3F7EB4@apple.com> <4BA3BBCF.2090903@cisco.com> <4BA3D1B3.4010501@gmail.com> <4BA3DAAA.10000@cisco.com> <4BA40DD1.7080306@gmail.com> <6C168711-6A34-4487-9911-92766513183C@apple.com>
In-Reply-To: <6C168711-6A34-4487-9911-92766513183C@apple.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Sender: owner-v6ops@ops.ietf.org
Precedence: bulk
List-ID: <v6ops.ops.ietf.org>

On 3/20/10 1:32 AM, james woodyatt wrote:
> On Mar 19, 2010, at 16:50, Brian E Carpenter wrote:
>    
>> But I'm afraid that the simplicity of 'default deny' has long
>> ago won the hearts and minds of enterprise network managers.
>>      
> Sadly, enterprise network managers aren't the only people whose legitimate interests are at stake in the matter under discussion.
>    
This document is clearly scoped in the first sentence of the Introduction to:

"gateway devices that enable delivery of Internet services in residential and small office settings."

So, I'm not sure why we are even considering enterprise network managers here.

The networks themselves, the assets under protection, the types of applications, are quite different
between and enterprise network and residential network.

- Mark
>
> --
> james woodyatt<jhw@apple.com>
> member of technical staff, communications engineering
>
>
>
>
>