Re: [v6ops] (IETF I-D): Implications of IPv6 Addressing on Security Operations (Fwd: New Version Notification for draft-gont-opsec-ipv6-addressing-00.txt)

David Conrad <drc@virtualized.org> Tue, 07 February 2023 13:23 UTC

Return-Path: <drc@virtualized.org>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2537C1522C6 for <v6ops@ietfa.amsl.com>; Tue, 7 Feb 2023 05:23:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=virtualized-org.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lP2UV4V0jyy4 for <v6ops@ietfa.amsl.com>; Tue, 7 Feb 2023 05:23:06 -0800 (PST)
Received: from mail-pl1-x62b.google.com (mail-pl1-x62b.google.com [IPv6:2607:f8b0:4864:20::62b]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A7F7C1522C8 for <v6ops@ietf.org>; Tue, 7 Feb 2023 05:23:06 -0800 (PST)
Received: by mail-pl1-x62b.google.com with SMTP id w5so5573685plg.8 for <v6ops@ietf.org>; Tue, 07 Feb 2023 05:23:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtualized-org.20210112.gappssmtp.com; s=20210112; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=guvJFuzQZOrJR2dtv4cz7oelf28/s2XgK51diEa654g=; b=nssbG2WvxCaqWJcPsZfJZkRDifJvotme8yj3F/7WUz6KFmed6YJYoax6dCvS/DNU/1 XmgEx90NSlyODAGykDJykx0nMc+NrHR1G84eolUAtEn4Nr+ogAcbjN9vmNbJVJGdgf2a MpadW3ssnnEihmjFBPQaWhzolKs2no9KoVTYOXFuuYNnMb7xizoBcxBXzFanbqHaRVUo OSKvbX9Nd52CD2O7GYu2Pi8zzWqHUl2c/d4byNoCmX0HpqnsQOGMT5k4coQcOtkrJ3rb 8lAhFAeQwmjQZMmmVOZ4RW7U+2/CUo6oTy3yRy8G2DQ3syZmztvkhoB0/WaM0jmIXSuS j6eg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:references:message-id:content-transfer-encoding:cc:date :in-reply-to:from:subject:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=guvJFuzQZOrJR2dtv4cz7oelf28/s2XgK51diEa654g=; b=VgfE5hYxZ1rwHycVkry5yj0AaCnrPB0BWhTt7zwnUGlhmftOIMI9cleSK337krEPKI 2p8ReY5iELxgJaDRUXd42f5mWJgRSZg4VhqKjwaxaEQ6pITbB4Ed511SpofzO8BQRD8g Gvh8Zn/6fRXmtjQJWTD3us2n2TAUFq6RA0ZqS+2EhJ0s7NYquohfU8hVZIBXiTFvs/NZ mCteOqak8l36ZSHzEUDlFZYCz0wXAKvN/71Upo/zAkLPKoKvICTK2plQiXSoyqfH9n++ 4ROmGmi/hvaB8NxIi3COPfceQ98mNJWU/D/ElWu1uQllaOf9aeBjxKiF7eyKcNoJl8GE EiSQ==
X-Gm-Message-State: AO0yUKWY2kJyL6rzjjYxGmkJjHeBqLx0Tq0iwuFIAvw8cp815ni8o2bf z9OeACDlsvBbclRYn0jo7T7Mlyp2BTho/MIFvVM=
X-Google-Smtp-Source: AK7set87mdWRr/Wnyd7MozxGzaEJVSPdbtrIWJmn+dI5OtZFx8Dl6DoYulI9stcJiMuyXEWziX77wQ==
X-Received: by 2002:a17:90b:1b41:b0:22b:f608:2aa6 with SMTP id nv1-20020a17090b1b4100b0022bf6082aa6mr3935170pjb.18.1675776185430; Tue, 07 Feb 2023 05:23:05 -0800 (PST)
Received: from smtpclient.apple (2603-8001-9701-bebd-582c-54f0-afea-13d9.res6.spectrum.com. [2603:8001:9701:bebd:582c:54f0:afea:13d9]) by smtp.gmail.com with ESMTPSA id k92-20020a17090a4ce500b0022bf4d0f912sm11430428pjh.22.2023.02.07.05.23.04 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 07 Feb 2023 05:23:05 -0800 (PST)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.400.51.1.1\))
From: David Conrad <drc@virtualized.org>
In-Reply-To: <eb2e613ce5154139a4e18eebff21b822@huawei.com>
Date: Tue, 07 Feb 2023 05:22:54 -0800
Cc: IPv6 Operations <v6ops@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <A34ACF13-6599-4CB3-ACD2-8F6399C588C9@virtualized.org>
References: <091075f1-033a-5577-60d9-3c6a009b3e21@si6networks.com> <55adf66d-23cb-0b2c-65d7-8f053a6f9298@si6networks.com> <eb2e613ce5154139a4e18eebff21b822@huawei.com>
To: Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org>
X-Mailer: Apple Mail (2.3731.400.51.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/ZRHKT6tgXMCR51zk286yReWPcwI>
Subject: Re: [v6ops] (IETF I-D): Implications of IPv6 Addressing on Security Operations (Fwd: New Version Notification for draft-gont-opsec-ipv6-addressing-00.txt)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Feb 2023 13:23:10 -0000

Eduard,

On Feb 6, 2023, at 11:17 PM, Vasilenko Eduard <vasilenko.eduard=40huawei.com@dmarc.ietf.org> wrote:
> IMHO: it may sense to mention in the absent conclusion that "there is no reliable way to block only offender. If the offense is big enough, it is possible to block legal entity (consulting with RIRs registry).”


This suggests there is a reliable and programmatic way of determining who the legal entity is from the RIR. Is that actually the case?

Thanks,
-drc