[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [DNA] WGLC for draft-ietf-dna-frd-02.txt
On Thu, 7 Sep 2006, Thomas Narten wrote:
> First, what is the intended publication type? informational?
=> the intention is to publish it as informational.
> (Hmm, later I see it has what seems like a protocol change regarding
> Ownership Proof. That would seem to imply standards track. What is
> it?)
=> Maybe we should move these two sections to appendix to avoid any
confusion.
> Second, the document title is misleading. Rather than calling this
> "fast router discovery", I think it should be called something like
> "triggered router discovery", since the whole point is to have the
> sending of RAs triggered by a link up type event.
=> Thank you for raising this point. I agree the title should reflect the
triggering process but also the consequence of such triggering.
> One issue with RA proxying is that the info in a cached RA may be old
> and invalid. RAs include lifetimes in units relative to "now". Caching
> an RA for (say) 15 minutes means that the lifetime information in that
> RA is now potentially very incorrect. Are proxies supposed to muck
> with lifetimes and decrement them in real time? Note that this would
> presumably break SEND (and any other way of securing RAs). I don't see
> discussion of this anywhere.
=> Proxies don't decrement lifetime. In practice, RA information seldom
changes. Usually routers send the same RA again and again.
> The security considerations talks about some of this, but includes:
>
> We may resolve this issue by including a unique 64 bit number called
> an Ownership Proof (OP) in an RA. The 64 bit number, OP, is the hash
> of a nonce and proves to a host that the RA was indeed generated by
> the router which is listed as the source of the RA. The router must
> keep a table associating each OP to the nonce, which was used to
> generate it. When an RA carrying an OP option is received, a host
> may ignore the SEND Timestamp option if it falls outside the
> allowable window.
>
> is this a required part of the spec? Where is the OP field defined?
=> OP is an add-on feature to facilitate the interoperability with SeND.
It will be defined in further work.
Regards,
Wassim H.