<div dir="ltr"><br><div>Ya lo lei, aun no estoy muy de acuerdo en obsoleter totalmente la generación de IDs de interfaz sin usar la MAC address, sobre todo porque aun no tenemos una forma probada de hacerlo de otra forma.</div>
<div><br></div><div>Si bien no veo ninguna utilidad de la generacion por MAC, no se si sea factible de que el draft diga "MUST NOT" como se ha discutido en 6man. Creo que es más realista un documento intermedio que diga "SHOULD NOT" o "SHOULD use another mean".</div>
<div><br></div><div>Slds</div><div>as</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Oct 24, 2013 at 4:00 PM, Fernando Gont <span dir="ltr"><<a href="mailto:fgont@si6networks.com" target="_blank">fgont@si6networks.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Estimados,<br>
<br>
FYI (ver debajo)<br>
<br>
Como dice la canción:<br>
<br>
"If the evil spirit armed the tiger with claws, Bramhan provided<br>
wings for the dove"<br>
<br>
Saludos,<br>
<div class="im">Fernando<br>
<br>
<br>
<br>
<br>
-------- Original Message --------<br>
</div><div class="im">Subject: Deprecating EUI-64 Based IPv6 Addresses (Fwd: New Version<br>
Notification for draft-gont-6man-deprecate-eui64-based-addresses-00.txt)<br>
</div><div><div class="h5">Date: Thu, 24 Oct 2013 14:50:22 -0300<br>
From: Fernando Gont <<a href="mailto:fernando@gont.com.ar">fernando@gont.com.ar</a>><br>
To: <a href="mailto:6man@ietf.org">6man@ietf.org</a> <<a href="mailto:6man@ietf.org">6man@ietf.org</a>><br>
CC: <a href="mailto:draft-gont-6man-deprecate-eui64-based-addresses@tools.ietf.org">draft-gont-6man-deprecate-eui64-based-addresses@tools.ietf.org</a><br>
<br>
Folks,<br>
<br>
We have posted a new I-D entitled "Deprecating EUI-64 Based IPv6<br>
Addresses"<br>
(<a href="http://www.ietf.org/internet-drafts/draft-gont-6man-deprecate-eui64-based-addresses-00.txt" target="_blank">http://www.ietf.org/internet-drafts/draft-gont-6man-deprecate-eui64-based-addresses-00.txt</a>).<br>
<br>
It's a spin-off of the work we've been doing on IPv6 addressing<br>
secuity/privacy considerations<br>
(draft-ietf-6man-ipv6-address-generation-privacy and<br>
draft-ietf-6man-stable-privacy-addresses), and the idea had already been<br>
discussed among several folks mstly off-list and at IETF meeting corridors.<br>
<br>
Any comments will be appreciated.<br>
<br>
Thanks!<br>
<br>
Best regards,<br>
Fernando<br>
<br>
<br>
<br>
<br>
-------- Original Message --------<br>
Subject: New Version Notification for<br>
draft-gont-6man-deprecate-eui64-based-addresses-00.txt<br>
Date: Mon, 21 Oct 2013 15:43:46 -0700<br>
From: <a href="mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a><br>
To: Fernando Gont <<a href="mailto:fgont@si6networks.com">fgont@si6networks.com</a>>, Will Liu<br>
<<a href="mailto:liushucheng@huawei.com">liushucheng@huawei.com</a>>, Alissa Cooper <<a href="mailto:acooper@cdt.org">acooper@cdt.org</a>>, Dave Thaler<br>
<<a href="mailto:dthaler@microsoft.com">dthaler@microsoft.com</a>><br>
<br>
<br>
A new version of I-D, draft-gont-6man-deprecate-eui64-based-addresses-00.txt<br>
has been successfully submitted by Fernando Gont and posted to the<br>
IETF repository.<br>
<br>
Filename: draft-gont-6man-deprecate-eui64-based-addresses<br>
Revision: 00<br>
Title: Deprecating EUI-64 Based IPv6 Addresses<br>
Creation date: 2013-10-22<br>
Group: Individual Submission<br>
Number of pages: 6<br>
URL:<br>
<a href="http://www.ietf.org/internet-drafts/draft-gont-6man-deprecate-eui64-based-addresses-00.txt" target="_blank">http://www.ietf.org/internet-drafts/draft-gont-6man-deprecate-eui64-based-addresses-00.txt</a><br>
Status:<br>
<a href="http://datatracker.ietf.org/doc/draft-gont-6man-deprecate-eui64-based-addresses" target="_blank">http://datatracker.ietf.org/doc/draft-gont-6man-deprecate-eui64-based-addresses</a><br>
Htmlized:<br>
<a href="http://tools.ietf.org/html/draft-gont-6man-deprecate-eui64-based-addresses-00" target="_blank">http://tools.ietf.org/html/draft-gont-6man-deprecate-eui64-based-addresses-00</a><br>
<br>
<br>
Abstract:<br>
Stateless Address Autoconfiguration (SLAAC) for IPv6 typically<br>
results in hosts configuring one or more stable addresses composed of<br>
a network prefix advertised by a local router, and an Interface<br>
Identifier that typically embeds a hardware address (e.g., an IEEE<br>
LAN MAC address). The security and privacy implications of embedding<br>
hardware addresses in the Interface Identifier have been known and<br>
understood for some time now, and some popular IPv6 implementations<br>
have already deviated from such scheme to mitigate these issues.<br>
This document deprecates the use of hardware addresses in IPv6<br>
Interface Identifiers, and recommends the use of an alternative<br>
scheme ([I-D.ietf-6man-stable-privacy-addresses]) for the generation<br>
of IPv6 stable addresses.<br>
<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submission<br>
until the htmlized version and diff are available at <a href="http://tools.ietf.org" target="_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
<br>
<br>
<br>
<br>
--<br>
Fernando Gont<br>
e-mail: <a href="mailto:fernando@gont.com.ar">fernando@gont.com.ar</a> || <a href="mailto:fgont@si6networks.com">fgont@si6networks.com</a><br>
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1<br>
<br>
<br>
<br>
<br>
--<br>
Fernando Gont<br>
e-mail: <a href="mailto:fernando@gont.com.ar">fernando@gont.com.ar</a> || <a href="mailto:fgont@si6networks.com">fgont@si6networks.com</a><br>
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1<br>
<br>
<br>
<br>
<br>
<br>
</div></div>_______________________________________________<br>
Seguridad mailing list<br>
<a href="mailto:Seguridad@lacnic.net">Seguridad@lacnic.net</a><br>
<a href="https://mail.lacnic.net/mailman/listinfo/seguridad" target="_blank">https://mail.lacnic.net/mailman/listinfo/seguridad</a><br>
</blockquote></div><br></div></div>