Re: [v6ops] [OPSEC] WGLC for draft-ietf-opsec-ipv6-eh-filtering-03

Ron Bonica <rbonica@juniper.net> Thu, 05 October 2017 14:36 UTC

Return-Path: <rbonica@juniper.net>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2D42133338; Thu, 5 Oct 2017 07:36:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level:
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4aiX5J2L_iz6; Thu, 5 Oct 2017 07:36:11 -0700 (PDT)
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0094.outbound.protection.outlook.com [104.47.41.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6D38126DFE; Thu, 5 Oct 2017 07:36:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eYJzMxIxHf560bvjgoLWMYFLwYyWuSlQfsqkC1QoubE=; b=BifjvHX8SE6w9IEfLgxn47sKbZ+IM2omdpJJ9BBiNCiz/RvNBiVFmaoKlKaWPW3oittyfXfWnNurJJJmZMUfbNhvNKBt3QcYx1YuNl3CFvutENf2F+s6yB7Ucwo1FOACg86fNZhXgOGskUy5C5JWcgvsl0VRfLD6elhcL+nTytE=
Received: from BLUPR0501MB2051.namprd05.prod.outlook.com (10.164.23.21) by BLUPR0501MB2050.namprd05.prod.outlook.com (10.164.23.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.77.5; Thu, 5 Oct 2017 14:36:08 +0000
Received: from BLUPR0501MB2051.namprd05.prod.outlook.com ([10.164.23.21]) by BLUPR0501MB2051.namprd05.prod.outlook.com ([10.164.23.21]) with mapi id 15.20.0077.018; Thu, 5 Oct 2017 14:36:08 +0000
From: Ron Bonica <rbonica@juniper.net>
To: Bob Hinden <bob.hinden@gmail.com>, "Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com>, "opsec@ietf.org" <opsec@ietf.org>
CC: "v6ops@ietf.org" <v6ops@ietf.org>, "draft-ietf-opsec-ipv6-eh-filtering@ietf.org" <draft-ietf-opsec-ipv6-eh-filtering@ietf.org>
Thread-Topic: [OPSEC] [v6ops] WGLC for draft-ietf-opsec-ipv6-eh-filtering-03
Thread-Index: AQHTOPqnaanFnY3C/0OsRx2AxtJLKaLUQD4AgAEb28A=
Date: Thu, 5 Oct 2017 14:36:08 +0000
Message-ID: <BLUPR0501MB2051AB4FA0B391050ACEBBA1AE700@BLUPR0501MB2051.namprd05.prod.outlook.com>
References: <8C3BB7BE-4E84-4D44-8DA9-BBE80EA51752@nokia.com> <2C2BE7A7-C885-4B38-ADA4-B29EADEED387@gmail.com>
In-Reply-To: <2C2BE7A7-C885-4B38-ADA4-B29EADEED387@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=rbonica@juniper.net;
x-originating-ip: [66.129.241.12]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BLUPR0501MB2050; 6:HTrjf8MnKn3TM/jlLTDcGypvGnFqxM0ylTl52WHw2EKidVeAb0yPqa4ODmlLE2XNTZudCH5Cp096/qfz1gt1lv5GnFjDcI0uH1CL/oclfdLGWzS/+GTudupigw4mvC0kfwG0/J/dcN/BGxVYGrDvxR4yMPV19AzVxbxnjYX1MNIjyHRREUDwZrgoJnS56+YQWAa1i4jRaGqn830EjHkt1ypYc6OKEOzkaXESzuZ2pF5WqvtHfuHlXtFQLQ5CCGxX0dkoZnEUppjaGL+aEkZo738CoyC5p+YX4t/KR1aC5jUCt9Zq7IANOke/Hpx1+qYFm/yVSVru+96Fc3gsYCsmdQ==; 5:crptW2vIBv5r/zY5mSsVNHob8cWexvSa5ZW+ib5OYW4iGLdjWdscFuwBZwIwBQIFLkRgpgJZQEGmNnpZ5FiVBHANz/NCx0WpyioKY0PDBa2JpYlt6Ijq6oMY6bDe3lpPBnVt6LKe3DLvR2emrpPLmQ==; 24:gcOktTV6s2Yky5ep716DKtol2fp3IKUDM8A/24wbkoiT165Up3PehC/pdi2BzkbJ6dbRzsBHCgk5MYNdHVEU4TS3qkXtW/Mio/1ferLanXo=; 7:2/7aVe4+IPtEJD9NeoOKuLx+hwxb1tCtOsjRYM6OFLt9MdY1RD1EmgQui2rlbHJYlCOCJIRm4YHpXRhbE5PDZw/xTgnaiyZAaaRFNcCuuQV4HmhXNy+uZV/OIMNFdUK4W6ghWoP8LLc6r7flXEkl+oHeloPQLtA6vtlw8fV+hCzVpEwJOvoI0iKyAKmt5S8skvgCMjKuQbd6/gBYKdAMeGiYZ4/O5+k6SDCjssqptho=
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: ba2caed5-3366-4d73-02e2-08d50bfe6acd
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254152)(48565401081)(2017052603199)(201703131423075)(201703031133081)(201702281549075); SRVR:BLUPR0501MB2050;
x-ms-traffictypediagnostic: BLUPR0501MB2050:
x-exchange-antispam-report-test: UriScan:(82608151540597);
x-microsoft-antispam-prvs: <BLUPR0501MB205058516457842840C2EFF1AE700@BLUPR0501MB2050.namprd05.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(100000703101)(100105400095)(6055026)(6041248)(20161123564025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123555025)(20161123560025)(20161123562025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:BLUPR0501MB2050; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:BLUPR0501MB2050;
x-forefront-prvs: 04519BA941
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(346002)(39860400002)(376002)(24454002)(13464003)(51914003)(199003)(377454003)(189002)(9686003)(54906003)(66066001)(8676002)(99286003)(230783001)(86362001)(229853002)(3280700002)(5660300001)(50986999)(6436002)(2900100001)(2950100002)(3660700001)(106356001)(2906002)(105586002)(77096006)(6506006)(7696004)(33656002)(189998001)(4326008)(76176999)(6246003)(14454004)(25786009)(966005)(101416001)(39060400002)(81166006)(97736004)(54356999)(74316002)(305945005)(55016002)(7736002)(6306002)(53546010)(110136005)(2501003)(81156014)(316002)(6116002)(8936002)(102836003)(53936002)(68736007)(3846002)(478600001); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR0501MB2050; H:BLUPR0501MB2051.namprd05.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:3; LANG:en;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Oct 2017 14:36:08.3118 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR0501MB2050
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/YwlMxx26K6M0ulnT1f7Z30N3kfE>
Subject: Re: [v6ops] [OPSEC] WGLC for draft-ietf-opsec-ipv6-eh-filtering-03
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Oct 2017 14:36:13 -0000

Bob,

Thanks for the review. It is pretty clear that the draft will require rework after the comment period.

                                                                  Ron


> -----Original Message-----
> From: OPSEC [mailto:opsec-bounces@ietf.org] On Behalf Of Bob Hinden
> Sent: Wednesday, October 4, 2017 5:38 PM
> To: Van De Velde, Gunter (Nokia - BE/Antwerp)
> <gunter.van_de_velde@nokia.com>om>; opsec@ietf.org
> Cc: v6ops@ietf.org; Bob Hinden <bob.hinden@gmail.com>om>; draft-ietf-opsec-
> ipv6-eh-filtering@ietf.org
> Subject: Re: [OPSEC] [v6ops] WGLC for draft-ietf-opsec-ipv6-eh-filtering-03
> 
> 
> I also don’t think this is ready for a w.g. last call.
> 
> It doesn’t reference the new version of the IPv6 specification RFC8200.
> There were a number of clarifications in RFC8200 regarding extension
> headers that may require changes in the draft.
> 
> For example, Hop by Hop headers are now a “may” in RFC8200, but this draft
> says:
> 
>    The Hop-by-Hop Options header is used to carry optional information
>    that should be examined by every node along a packet's delivery path.
> 
> This doesn’t match what is in RFC8200:
> 
>    The Hop-by-Hop Options header is not inserted or deleted, but may be
>    examined or processed by any node along a packet's delivery path,…
> 
> I didn’t do a through review after I saw it didn’t reference RFC8200, but I
> suspect there are other things that need to be changed to match RFC8200.  I
> think the authors need to do detailed review and publish a new draft.
> 
> Regard,
> Bob
> 
> > On Sep 29, 2017, at 1:12 AM, Van De Velde, Gunter (Nokia - BE/Antwerp)
> <gunter.van_de_velde@nokia.com> wrote:
> >
> > This is to open a two week WGLC for https://tools.ietf.org/html/draft-ietf-
> opsec-ipv6-eh-filtering-03.
> > If you have not read it, please do so now. You may send nits to the author,
> but substantive discussion should go to the opsec@ietf.org list.
> > (While V6OPS WG is in cc because of close alignment with the WG
> expertise area, may we ask to send feedback and comments in the OPSEC
> WG)
> >
> > We will close the call on 13 October 2017
> >
> > Gunter & Eric
> > OPSEC WG co-chairs
> >
> > _______________________________________________
> > v6ops mailing list
> > v6ops@ietf.org
> > https://www.ietf.org/mailman/listinfo/v6ops