From nobody Wed Oct 18 12:27:14 2017 Return-Path: X-Original-To: hipsec@ietfa.amsl.com Delivered-To: hipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DCD4126B6E for ; Wed, 18 Oct 2017 12:27:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.8 X-Spam-Level: X-Spam-Status: No, score=-2.8 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OI-3v4tI3R3G for ; Wed, 18 Oct 2017 12:27:11 -0700 (PDT) Received: from z9m9z.htt-consult.com (z9m9z.htt-consult.com [50.253.254.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45475133072 for ; Wed, 18 Oct 2017 12:27:10 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by z9m9z.htt-consult.com (Postfix) with ESMTP id 3254C62232 for ; Wed, 18 Oct 2017 15:27:09 -0400 (EDT) X-Virus-Scanned: amavisd-new at htt-consult.com Received: from z9m9z.htt-consult.com ([127.0.0.1]) by localhost (z9m9z.htt-consult.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id U1HCzz6TjojH for ; Wed, 18 Oct 2017 15:27:04 -0400 (EDT) Received: from lx120e.htt-consult.com (unknown [192.168.160.12]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by z9m9z.htt-consult.com (Postfix) with ESMTPSA id E56BB6213F for ; Wed, 18 Oct 2017 15:27:03 -0400 (EDT) To: hipsec@ietf.org From: Robert Moskowitz Message-ID: <05a13309-0709-c92a-53ec-b1366e03fe85@htt-consult.com> Date: Wed, 18 Oct 2017 15:27:00 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Archived-At: Subject: [Hipsec] Privacy discuss over on the IDEAS list... X-BeenThere: hipsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Oct 2017 19:27:13 -0000 First, it seems I had problems with my HIP list folder and have not seen any messages since around May. There here, and I will read them... Now. Please read: https://mailarchive.ietf.org/arch/msg/ideas/GbyBs812xGVAN9LFRbpAp3lUuys And some follow up discussions. Basically IDEAS is targeting providing some functions like discovery and reverse mapping that we do not directly provide in HIP and in a trusted manner. The workgroup chartering was blocked by privacy concerns that would never have let HIP complete IMHO. Quite blown out of proportion, but it did reveal some valid privacy work needed. We do not provide enough privacy in HIP. The HIs are too exposed. The HITs are as long lived as the HIs. The SPIs allow Eve to link all the communication pieces together. I want to start a dialog here on what can be done to improve HIP privacy. I have my ideas (and some of the HI protection would take advantage of IDEAS). And will be putting together a drafty draft for the 30th deadline. Bob From nobody Mon Oct 23 09:09:20 2017 Return-Path: X-Original-To: hipsec@ietf.org Delivered-To: hipsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4137C139507; Mon, 23 Oct 2017 09:08:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: hipsec@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150877493923.24567.6050193151259484812@ietfa.amsl.com> Date: Mon, 23 Oct 2017 09:08:59 -0700 Archived-At: Subject: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-21.txt X-BeenThere: hipsec@ietf.org X-Mailman-Version: 2.1.22 List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Oct 2017 16:08:59 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Host Identity Protocol WG of the IETF. Title : Native NAT Traversal Mode for the Host Identity Protocol Authors : Ari Keranen Jan Melén Miika Komu Filename : draft-ietf-hip-native-nat-traversal-21.txt Pages : 56 Date : 2017-10-23 Abstract: This document specifies a new Network Address Translator (NAT) traversal mode for the Host Identity Protocol (HIP). The new mode is based on the Interactive Connectivity Establishment (ICE) methodology and UDP encapsulation of data and signaling traffic. The main difference from the previously specified modes is the use of HIP messages for all NAT traversal procedures. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-hip-native-nat-traversal/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-hip-native-nat-traversal-21 https://datatracker.ietf.org/doc/html/draft-ietf-hip-native-nat-traversal-21 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-hip-native-nat-traversal-21 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 23 09:15:30 2017 Return-Path: X-Original-To: hipsec@ietfa.amsl.com Delivered-To: hipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACA4D139507 for ; Mon, 23 Oct 2017 09:15:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o4YlZTkH81Uc for ; Mon, 23 Oct 2017 09:15:27 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 609BF137ED6 for ; Mon, 23 Oct 2017 09:15:27 -0700 (PDT) X-AuditID: c1b4fb3a-dffff70000006897-a8-59ee159d97ea Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 1A.95.26775.D951EE95; Mon, 23 Oct 2017 18:15:25 +0200 (CEST) Received: from [131.160.51.186] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.77) with Microsoft SMTP Server id 14.3.352.0; Mon, 23 Oct 2017 18:15:24 +0200 To: References: <150877493923.24567.6050193151259484812@ietfa.amsl.com> From: Miika Komu Organization: Ericsson AB Message-ID: <62c0d37b-4791-832a-2813-d85b1ee1ef98@ericsson.com> Date: Mon, 23 Oct 2017 19:15:24 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <150877493923.24567.6050193151259484812@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrELMWRmVeSWpSXmKPExsUyM2K7t+5c0XeRBoc3y1pMXTSZ2YHRY8mS n0wBjFFcNimpOZllqUX6dglcGcd3r2YteCZUsXfJUcYGxjt8XYycHBICJhLfGx+ydDFycQgJ HGGUaHz2jxnCWcMocXhVFyNIlbCAj8SJe5vZQGwRAVGJKR9OM4PYQgLOEivfXwSz2QS0JFbd uQ5m8wtISmxo2A1m8wrYS0xacZAVxGYRUJW4vXoH2BxRgQiJ583vWSFqBCVOznzCAmJzCrhI nPy4EMxmFrCQmDn/PCOELS5x68l8JghbW2LZwtdA8zmAblCRuHgseAKj4Cwkk2Yh6Z6FpHsW ku4FjCyrGEWLU4uLc9ONjPRSizKTi4vz8/TyUks2MQJD9uCW31Y7GA8+dzzEKMDBqMTD+1Lw XaQQa2JZcWXuIUYJDmYlEd6in28jhXhTEiurUovy44tKc1KLDzFKc7AoifM67LsQISSQnliS mp2aWpBaBJNl4uCUamBcU/npn5VIXKjSerOUCqNH7cFP70koRLs+evB23nd53aDDax7oXFhk 83ujz2yXm7yh7V/DLyccN2/3v951j8fiFHPe1o/i9Rc/d18pfB22bQL39YOVL510rP4nnhQu fDBH/UJvkoX9WkWhxMTMX9+7mVN2bnrRdM6uyjT64PYD718fkv4TXP5eiaU4I9FQi7moOBEA 6oJQrlUCAAA= Archived-At: Subject: Re: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-21.txt X-BeenThere: hipsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Oct 2017 16:15:30 -0000 Hi, this is a keepalive with some minor changes based on offline review=20 comments from Ari: * NAT penetration -> NAT traversal * Added some extra internal references to Section 6.5 in the document * CANDIDATE_DISCOVERY is included again; no need to omit it even though=20 multihoming is left for further study (added also a proper reference to=20 the multihoming draft) Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-hip-native-nat-traversal-2= 1 On 10/23/2017 07:08 PM, internet-drafts@ietf.org wrote: >=20 > A New Internet-Draft is available from the on-line Internet-Drafts dire= ctories. > This draft is a work item of the Host Identity Protocol WG of the IETF.= >=20 > Title : Native NAT Traversal Mode for the Host Ident= ity Protocol > Authors : Ari Keranen > Jan Mel=C3=A9n > Miika Komu > Filename : draft-ietf-hip-native-nat-traversal-21.txt > Pages : 56 > Date : 2017-10-23 >=20 > Abstract: > This document specifies a new Network Address Translator (NAT) > traversal mode for the Host Identity Protocol (HIP). The new mode = is > based on the Interactive Connectivity Establishment (ICE) methodolo= gy > and UDP encapsulation of data and signaling traffic. The main > difference from the previously specified modes is the use of HIP > messages for all NAT traversal procedures. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-hip-native-nat-traversal/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-hip-native-nat-traversal-21 > https://datatracker.ietf.org/doc/html/draft-ietf-hip-native-nat-travers= al-21 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-hip-native-nat-traversal= -21 >=20 >=20 > Please note that it may take a couple of minutes from the time of submi= ssion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Hipsec mailing list > Hipsec@ietf.org > https://www.ietf.org/mailman/listinfo/hipsec >=20 From nobody Mon Oct 23 09:18:29 2017 Return-Path: X-Original-To: hipsec@ietf.org Delivered-To: hipsec@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DDCE3139507; Mon, 23 Oct 2017 09:18:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: hipsec@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.63.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <150877550387.24832.16084326586847472313@ietfa.amsl.com> Date: Mon, 23 Oct 2017 09:18:23 -0700 Archived-At: Subject: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-22.txt X-BeenThere: hipsec@ietf.org X-Mailman-Version: 2.1.22 List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Oct 2017 16:18:24 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Host Identity Protocol WG of the IETF. Title : Native NAT Traversal Mode for the Host Identity Protocol Authors : Ari Keranen Jan Melén Miika Komu Filename : draft-ietf-hip-native-nat-traversal-22.txt Pages : 56 Date : 2017-10-23 Abstract: This document specifies a new Network Address Translator (NAT) traversal mode for the Host Identity Protocol (HIP). The new mode is based on the Interactive Connectivity Establishment (ICE) methodology and UDP encapsulation of data and signaling traffic. The main difference from the previously specified modes is the use of HIP messages for all NAT traversal procedures. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-hip-native-nat-traversal/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-hip-native-nat-traversal-22 https://datatracker.ietf.org/doc/html/draft-ietf-hip-native-nat-traversal-22 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-hip-native-nat-traversal-22 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 23 09:21:38 2017 Return-Path: X-Original-To: hipsec@ietfa.amsl.com Delivered-To: hipsec@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D10413955E for ; Mon, 23 Oct 2017 09:21:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kMrd2lfZEFrn for ; Mon, 23 Oct 2017 09:21:35 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C00BB137ED6 for ; Mon, 23 Oct 2017 09:21:34 -0700 (PDT) X-AuditID: c1b4fb2d-bf5ff7000000268d-60-59ee170c2049 Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.183.24]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 71.03.09869.C071EE95; Mon, 23 Oct 2017 18:21:32 +0200 (CEST) Received: from [131.160.51.186] (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.26) with Microsoft SMTP Server id 14.3.352.0; Mon, 23 Oct 2017 18:21:32 +0200 To: References: <150877550387.24832.16084326586847472313@ietfa.amsl.com> From: Miika Komu Organization: Ericsson AB Message-ID: Date: Mon, 23 Oct 2017 19:21:32 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.4.0 MIME-Version: 1.0 In-Reply-To: <150877550387.24832.16084326586847472313@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrALMWRmVeSWpSXmKPExsUyM2K7hC6P+LtIgyuLjSymLprM7MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujJ7XggV9AhXnJp1gamDcw9PFyMkhIWAi0TC3k7GLkYtDSOAI o8SRCxeZIJw1jBJHb69kAakSFvCROHS9lxXEFhEQlZjy4TQziC0k4CKxeelkNhCbTUBLYtWd 62BxfgFJiQ0Nu8FsXgF7iU2vDjOB2CwCqhI3l7ayg9iiAhESz5vfs0LUCEqcnPkEaBcHB6eA q8S9214gYWYBC4mZ888zQtjiEreezGeCsLUlli18zQxSLiSgInHxWPAERsFZSAbNQtI9C0n3 LCTdCxhZVjGKFqcWF+emGxnrpRZlJhcX5+fp5aWWbGIEhuvBLb91dzCufu14iFGAg1GJhzec /12kEGtiWXFl7iFGCQ5mJRHeop9vI4V4UxIrq1KL8uOLSnNSiw8xSnOwKInzOuy7ECEkkJ5Y kpqdmlqQWgSTZeLglGpgzFz39cYJXq7/J1Zd8O4QSQ0+vXzVxT85ohN8Hh1ZViw0sfriso1r I1QtWEruP8qW0hEt6t1edNRNSkb3nb1oyNuixqTWsOCAf7c+6B/5mJLq8D2O54vcvIX/1vrs fZBmeEiNb9vM+D3aXSFzVwUIL0r79iQ2c8ptP+dXSRPF/4TbB6yYy9H0R4mlOCPRUIu5qDgR ALCk5aVTAgAA Archived-At: Subject: Re: [Hipsec] I-D Action: draft-ietf-hip-native-nat-traversal-22.txt X-BeenThere: hipsec@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "This is the official IETF Mailing List for the HIP Working Group." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Oct 2017 16:21:36 -0000 Hi, the HIP multihoming reference was incorrect in version 21. Fixed it=20 before I forget about it... sorry for the spam :) On 10/23/2017 07:18 PM, internet-drafts@ietf.org wrote: >=20 > A New Internet-Draft is available from the on-line Internet-Drafts dire= ctories. > This draft is a work item of the Host Identity Protocol WG of the IETF.= >=20 > Title : Native NAT Traversal Mode for the Host Ident= ity Protocol > Authors : Ari Keranen > Jan Mel=C3=A9n > Miika Komu > Filename : draft-ietf-hip-native-nat-traversal-22.txt > Pages : 56 > Date : 2017-10-23 >=20 > Abstract: > This document specifies a new Network Address Translator (NAT) > traversal mode for the Host Identity Protocol (HIP). The new mode = is > based on the Interactive Connectivity Establishment (ICE) methodolo= gy > and UDP encapsulation of data and signaling traffic. The main > difference from the previously specified modes is the use of HIP > messages for all NAT traversal procedures. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-hip-native-nat-traversal/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-hip-native-nat-traversal-22 > https://datatracker.ietf.org/doc/html/draft-ietf-hip-native-nat-travers= al-22 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-hip-native-nat-traversal= -22 >=20 >=20 > Please note that it may take a couple of minutes from the time of submi= ssion > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Hipsec mailing list > Hipsec@ietf.org > https://www.ietf.org/mailman/listinfo/hipsec >=20