Re: [homenet] DNCP/HNCP Revisited

2019-09-18 Thread Mark Andrews
ld need to be amended in the standard RFC? The > more-HNCP-data-to-come TLV in RFC7788? > > Question: Would this tweak increase the ±64K limit of TLV data from being per > network to being 64K per node? [max UDP packet size for a single node TLV + > associated payload data

Re: [homenet] securing zone transfer

2019-06-10 Thread Mark Andrews
> 3) AXFR by Distribution Master by HNA. >>> >>> -- >>> Michael Richardson , Sandelman Software Works >>> -= IPv6 IoT consulting =- > > -- > Michael Richardson , Sandelman Software Works > -= IPv6 IoT consulting =- > > > > __

Re: [homenet] draft-ietf-homenet-front-end-naming-delegation vs. DynDNS

2018-07-19 Thread Mark Andrews
> On 19 Jul 2018, at 11:58 pm, Mark Andrews wrote: > > > >> On 19 Jul 2018, at 11:30 pm, Juliusz Chroboczek wrote: >> >>> I am not speaking about discovery within the Homenet. I am speaking about >>> exporting names into the global DNS, w

Re: [homenet] draft-ietf-homenet-front-end-naming-delegation vs. DynDNS

2018-07-19 Thread Mark Andrews
der, the ISP needs to troll all > of the DNS providers in order to build such a database. > >> I actually share your concern that what he's got written down right now >> is more complicated than it needs to be, and this is partly because it >> was originally motivated

Re: [homenet] draft-ietf-homenet-front-end-naming-delegation vs. DynDNS

2018-07-18 Thread Mark Andrews
stand. > > -- Juliusz > > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] Introduction to draft-ietf-homenet-simple-naming

2018-05-31 Thread Mark Andrews
eally talking about the API behind the UI. > Having a management API for homenet would be a good thing. Possibly it > could just be done with HNCP. > > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinf

Re: [homenet] Eric Rescorla's Discuss on draft-ietf-homenet-dot-13: (with DISCUSS)

2017-08-31 Thread Mark Andrews
______ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] Secdir last call review of draft-ietf-homenet-dot-12

2017-08-31 Thread Mark Andrews
rs, so I am > > trusting that these instructions are sufficient. They have been > > reviewed by people who understand this problem better than I do, like > > Andrew Sullivan, Paul Hoffman and Mark Andrews. I was specifically > > advised not to overspecify this. I would r

Re: [homenet] Genart last call review of draft-ietf-homenet-dot-12

2017-08-29 Thread Mark Andrews
as learnt that 8.8.8.8 is "special" and is the equivalent of the root servers in terms of keeping local traffic local. Maintaining the list of don't leak too recursive servers is a "interesting" problem. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] I-D Action: draft-ietf-homenet-dot-11.txt (FINAL?)

2017-08-09 Thread Mark Andrews
he DS > record to get the NSEC that validates it? Yes (proves its non existence). > (I'm leaving in all of the stuff I typed while I was thinking this through > because I'm not sure I got it right, and you can point out what I got > wrong.) > > On Tue, Aug 8, 201

Re: [homenet] I-D Action: draft-ietf-homenet-dot-11.txt (FINAL?)

2017-08-08 Thread Mark Andrews
ies of the homenet with the exception of DS lookups for 'home.arpa.'. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] I-D Action: draft-ietf-homenet-dot-10.txt

2017-07-31 Thread Mark Andrews
In message <916eeeb9-3709-492b-8e19-5c832b11a...@fugue.com>, Ted Lemon writes: > On Jul 31, 2017, at 1:02 AM, Mark Andrews wrote: > > The delegatation is INSECURE and SIGNED not UNSIGNED. The wording > > here is *important*. > > Can you explain what the distinction

Re: [homenet] I-D Action: draft-ietf-homenet-dot-10.txt

2017-07-30 Thread Mark Andrews
The reason that this delegation must be insecure is that it breaks the DNSSEC chain of trust, which prevents a validating stub resolver from rejecting names published under 'home.arpa.' on a homenet name server. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] WGLC on draft-ietf-homenet-dot-09

2017-07-09 Thread Mark Andrews
NSEC/NSEC3 should not be present. RRSIGs should not be present. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org

Re: [homenet] WGLC on draft-ietf-homenet-dot-09

2017-07-09 Thread Mark Andrews
ore answering authoritatively for such a > delegated name. In such a case, because the name always has only > local significance there will be no such delegation in the > home.arpa. zone, and so the server would refuse to answer > authoritatively for such a zone. A server &

Re: [homenet] WGLC on draft-ietf-homenet-dot-09

2017-07-05 Thread Mark Andrews
Note also home.arpa will be problematical until the insecure delegation for it is made if you are validating. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: [homenet] WGLC on draft-ietf-homenet-dot-09

2017-07-05 Thread Mark Andrews
afts > > directories. > > This draft is a work item of the Home Networking of the IETF. > > > > Title : Special Use Domain '.home.arpa' > > Authors : Pierre Pfister > >Ted Lemon > > Filename

Re: [homenet] [DNSOP] My assessment of .homenet as described during the WG session yesterday.

2017-03-30 Thread Mark Andrews
CANN > root trust anchor). > > If the domain for homenet is something else, such as "homenet.arpa.", then > the proof contains more elements, such as the DS for arpa, and the NSEC for > homenet.arpa (proving no homenet.arpa/DS exists). > > Brian > > On Thu, Ma

Re: [homenet] [DNSOP] My assessment of .homenet as described during the WG session yesterday.

2017-03-29 Thread Mark Andrews
actly* like a validating stub resolver from the DNSSEC perspective. This isn't something that will be in the future. It is the PRESENT. > I.e. avoid it if you can, but if you can't, I think the issues are > solvable, even if they get a little funky/ugly under the hood. > > None

Re: [homenet] [DNSOP] WGLC on "redact" and "homenet-dot"

2016-12-15 Thread Mark Andrews
which will open it if homenet doesn't. It that doesn't then the special names discussion will open it. I don't see the can of worms staying closed. The IETF and ICANN are going to need to address this issue. It does no one any good to leave it festering. The only decision to make is homenet going to wait for that discussion to occur or not. Mark > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-15 Thread Mark Andrews
In message <4195dba6-6eae-45ce-ad61-9236c6212...@google.com>, james woodyatt wr ites: > > On Dec 15, 2016, at 06:35, Ted Lemon wrote: > > [Mark Andrews wrote:] > > Why shouldn't a iterative resolver work if we can make it work? > > > > Putting an it

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-15 Thread Mark Andrews
MOST application will use a stub resolver doesn't make it REQUIRED. There is no attack of the DNS by wanting interative resolvers to work by default. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-14 Thread Mark Andrews
ument about resolvers > that might want to do DNSSEC validation of .homenet results. > > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, N

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-14 Thread Mark Andrews
validates that the homenet resolver can give to the stub > resolver. Stub resolvers that query the root themselves will fail. This > is a feature--that behavior is broken. Why shouldn't a iterative resolver work if we can make it work? Mark -- Mark Andrews, ISC 1 Seymour St

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-14 Thread Mark Andrews
t routing will direct HOMENET queries to those servers. That the publically delegated to servers also use those addresses. I suppose this helps the case of a host using interative resolution to find the on net homenet servers. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 21

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-14 Thread Mark Andrews
In message , Brian Dickson writes: > > On Wed, Dec 14, 2016 at 5:18 PM, Mark Andrews wrote: > > > > > In message > gmail.com> > > , Brian Dickson writes: > > > > > > On Wed, Dec 14, 2016 at 4:09 PM, Ted Lemon wrote: > >

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-14 Thread Mark Andrews
> I think this exposes an unforeseen edge case, not covered in the design of > DNSSEC. > > I think what would have been ideal, would have been the ability to securely > delegate to a well-known name/address, but without a secure entry point. > I.e. where parent/child NS use di

Re: [homenet] [DNSOP] Fwd: WGLC on "redact" and "homenet-dot"

2016-12-14 Thread Mark Andrews
having said all this, I agree with Steve that an unsigned delegation > is a bad idea, not because all unsigned delegations are necessarily > bad, but because this one wouldn't solve enough problems to be worth > the ugly and ambiguous precedent it'd set. >

Re: [homenet] WGLC on "redact" and "homenet-dot"

2016-12-12 Thread Mark Andrews
es which are inappropriate for this exercise. The special names process reserves the name. It is silent about adding delegations to the root zone (secure or insecure). Third mechanism Mark > --james woodyatt -- Mark Andrews, ISC 1 Seymour St., Dundas Valley

Re: [homenet] On the TLD question and validatably-insecure delegation

2016-11-17 Thread Mark Andrews
_ > homenet mailing list > mailto:homenet@ietf.org";>homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet"; rel=3D"noreferrer= > " target=3D"_blank">https://www.ietf.org/mailman/listinfo/homenet<= > br> > > > --001a114a7e12f7dc6c05418b7c28-- >

Re: [homenet] On the TLD question and validatably-insecure delegation

2016-11-15 Thread Mark Andrews
e special name defining RFC. That would be what I would do. The special names process delegates the name space to us. Mark > On Nov 16, 2016 16:35, "Mark Andrews" wrote: > > > > > In message > mail.gmail.com> > > , Ted Lemon writes: > > > Well

Re: [homenet] On the TLD question and validatably-insecure delegation

2016-11-15 Thread Mark Andrews
he name and delegation are needed for protocol reasons. > On Wed, Nov 16, 2016 at 4:28 PM, Mark Andrews wrote: > > > > In message com> > > , Ted Lemon writes: > >> Yeah, this sunk in for all of us when we were standing around outside > >> the meeting ro

Re: [homenet] On the TLD question and validatably-insecure delegation

2016-11-15 Thread Mark Andrews
ames in the root namespace. Each name needs to be individually handled as each is special with its own requirements. Mark > On Wed, Nov 16, 2016 at 3:30 PM, Mark Andrews wrote: > > > > In message <20161116054604.gb55...@mx2.yitter.info>, Andrew Sullivan writes > : > &g

Re: [homenet] On the TLD question and validatably-insecure delegation

2016-11-15 Thread Mark Andrews
> consideration when deciding what kind of label to use. > > Best regards, > > A > > -- > Andrew Sullivan > a...@anvilwalrusden.com > > _______ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailma

Re: [homenet] What I really meant by option 5

2016-07-26 Thread Mark Andrews
low the chosen label. This way validating clients do not get BOGUS as validation result when handed a foo. lookup result. Additionally validating clients do not need special knowledge for .. The root servers will return a authoritative NOERROR NODATA for DS/. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] Updating DNS [was: How many people have installed the homenet code?]

2016-05-11 Thread Mark Andrews
G(0) depends on KEY. The flag day seperated DNSSEC from other uses of KEY. It did not say "stop using KEY for everything" just for DNSSEC. Mark > On Wed, May 11, 2016 at 8:33 PM, Mark Andrews wrote: > > > > > SIG(0) works fine for DDNS once you have a KEY reco

Re: [homenet] Updating DNS [was: How many people have installed the homenet code?]

2016-05-11 Thread Mark Andrews
nes. This requires policy enforcement in the server but is do able. nameservers already have policy rules (e.g. tcp-self has existed for years in named). Adding more is not a hard thing to do. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2

Re: [homenet] Kathleen Moriarty's Discuss on draft-ietf-homenet-hncp-09: (with DISCUSS)

2015-11-19 Thread Mark Andrews
that. Unless they say what the subset they support / don't support, then I object. "partial support" is meaningless unless it is qualified. > -- > Sent from Whiteout Mail - https://whiteout.io > > My PGP key: https://keys.whiteout.io/mellon@fugue.= > com -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] IPv6 Prefix delegation on IETF network, please ?

2015-11-03 Thread Mark Andrews
Mark Andrews writes: > > In message <87twp2oj05.wl-...@pps.univ-paris-diderot.fr>, Juliusz Chroboczek w > ri > tes: > > > So what is the scope of the request and what needs to be simulated? > > > > There are two distinct requests here: > > > &

Re: [homenet] IPv6 Prefix delegation on IETF network, please ?

2015-11-03 Thread Mark Andrews
ss. Request (2) comes from me, and, as noted > Gabriel, probably reflects a typically European point of view (since > a number of ISPs provide native-ish IPv6 but don't do PD). The two > requests are not incompatible. > > -- Juliusz -- Mark Andrews, ISC 1 Seymo

Re: [homenet] IPv6 Prefix delegation on IETF network, please ?

2015-11-03 Thread Mark Andrews
IETF that can supply all the gear with suitable planning. They have brought this sort of gear for Bit-and-Bites in the past. So what is the scope of the request and what needs to be simulated? Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

Re: [homenet] Host naming in Homenet

2015-09-01 Thread Mark Andrews
In message <55e5d049.4060...@openwrt.org>, Steven Barth writes: > > > On 01/09/2015 01:06, Mark Andrews wrote: > >> > >> Why is topology being forced into the naming? DNS is independent > >> of topology. We have *a* home. I really don't care wha

Re: [homenet] Host naming in Homenet

2015-08-31 Thread Mark Andrews
the highest serial discovered after the election are sent AXFR style. This re-syncronises all copies of the zone. If a server comes up that thinks it is the master and sees that that is is not listed in the mname field held by any of the slaves it triggers a election. Mark -- Mark Andrews, ISC 1 S

Re: [homenet] About multiple CPEs in front-end-naming-delegation

2015-03-24 Thread Mark Andrews
le updates to the reverse namespace are directed at the appropriate CPE. Multi-master is a unsolved problem in the DNS. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org __

Re: [homenet] 6renum redux [Routing protocol comparison document]

2015-03-03 Thread Mark Andrews
ses don't belong in the DNS. Stale information doesn't be > long in the DNS. This seems like a no-brainer to me. > > > > -- > Regards, > RayH > > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark An

Re: [homenet] 6renum redux [Routing protocol comparison document]

2015-03-03 Thread Mark Andrews
t; (during a renumbering event, which is presumably not every day). > > Any operators got any input on how often they propose to rotate prefixes > on domestic connections? > > -- > Regards, > RayH > > ___ > homenet maili

Re: [homenet] 6renum redux [Routing protocol comparison document]

2015-03-03 Thread Mark Andrews
In message , Mikael Abrah amsson writes: > On Tue, 3 Mar 2015, Mark Andrews wrote: > > > What we really should be telling ISPs is that renumber events should be > > make before break. There is zero reason other plain poor customer > > service to not do this. > >

Re: [homenet] 6renum redux [Routing protocol comparison document]

2015-03-03 Thread Mark Andrews
he moment. It isn't impossible to do this at wire speed. > Much as I love MPTCP, it only helps TCP sessions. And it requires both > hosts to be updated to be effective. > >Brian > > ___ > homenet mailing list > h

Re: [homenet] 6renum redux [Routing protocol comparison document]

2015-03-02 Thread Mark Andrews
ess. > >>> > >>> IMHO it would be better to send an immediate RA with a zero lifetime > >>> on the old prefix and a normal lifetime on the new prefix. If hosts > >>> don't do the right thing they are in violation of RFC 4861. > >>> > >>> OTOH, invalidating a DHCP lease

Re: [homenet] A poll

2015-02-20 Thread Mark Andrews
you use mdns service discovery? Some of the machine use it automaticall. > 8) Why are you here? (especially, if your answers to 0-2, are "no") > -- > Dave Tht > > http://www.bufferbloat.net/projects/bloat/wiki/Upcoming_Talks > > ___

Re: [homenet] Let's make in-home ULA presence a MUST !?

2014-10-16 Thread Mark Andrews
In message , Lorenzo Colitti write s: > --20cf303dd7088da2c005058a23d9 > Content-Type: text/plain; charset=UTF-8 > > On Thu, Oct 16, 2014 at 8:26 AM, Mark Andrews wrote: > > > Unless you have really old stacks your device will pick the new GUA first to > > talk t

Re: [homenet] Let's make in-home ULA presence a MUST !?

2014-10-15 Thread Mark Andrews
server addresses, the resulting HE algorithms would have fixed the issue for you when it fast failed to the GUA of the jukebox after changing ssids. Longest match would result in the new GUA being used rather than the new ULA. I tried hard to get the IETF to listen to this for HE. Mark > ___

Re: [homenet] Let's make in-home ULA presence a MUST !?

2014-10-14 Thread Mark Andrews
en to instantiate a ULA prefix. You shouldn't be using a prefix beyond the time it is delegated to you. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org

Re: [homenet] I-D.ietf-homenet-prefix-assignment (RFC 4193 conformance)

2014-10-08 Thread Mark Andrews
avoid having any non-volatile memory in the box and I don't see that as a realistic box. You will also need non-volatile memory for internal prefix delegation etc. You you do want the same prefix to be handed to the same internal router regardless of the request order. -- Mark Andrews,

Re: [homenet] Please review the No IPv4 draft

2014-04-17 Thread Mark Andrews
In message <534fe395.1050...@viagenie.ca>, Simon Perreault writes: > Le 2014-04-16 18:12, Mark Andrews a =E9crit : > > With the currently defined states yes you shut down everything for 1 and > > 3. You don't shutdown for 0 and 2. I think some here want a currently &g

Re: [homenet] Please review the No IPv4 draft

2014-04-16 Thread Mark Andrews
; > > --===1429064588242792841== > Content-Type: text/plain; charset="us-ascii" > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Content-Disposition: inline > > ___ > homenet mailing list > h

Re: [homenet] Please review the No IPv4 draft

2014-04-16 Thread Mark Andrews
on. > In contrast a DHCPNOSERVICE message that just suspends sending DHCPDISCOVER > messages for a while has almost no impact. It gets slightly trickier if > that also implies no link local, but not much. And doesn't achieve the intent of turning off IPv4 for the i

Re: [homenet] Please review the No IPv4 draft

2014-04-15 Thread Mark Andrews
_______ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] DNSSEC and homenet

2014-03-05 Thread Mark Andrews
In message <20140305102536.gd9...@mx1.yitter.info>, Andrew Sullivan writes: > Mark, > > On Wed, Mar 05, 2014 at 08:58:23PM +1100, Mark Andrews wrote: > > a bit of flip flop but most of the time one is just "On WiFi" at home or > > The point is that we'

Re: [homenet] DNSSEC and homenet

2014-03-05 Thread Mark Andrews
In message <24056.1394010...@sandelman.ca>, Michael Richardson writes: > --=-=-= > > > Mark Andrews wrote: > > In message <20140304234206.gc9...@mx1.yitter.info>, Andrew Sullivan > > writes: > >> On Tue, Mar 04, 2014 at 04:50:33AM -0800,

Re: [homenet] DNSSEC and homenet

2014-03-04 Thread Mark Andrews
> > A > > -- > Andrew Sullivan > a...@anvilwalrusden.com > > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dund

Re: [homenet] DNSSEC and homenet

2014-03-04 Thread Mark Andrews
In message <4ccaecea-0d86-49a3-a314-3a0e05281...@fugue.com>, Ted Lemon writes: > On Mar 4, 2014, at 5:58 PM, Mark Andrews wrote: > > Please go read draft-andrews-dnsop-pd-reverse. This technique will > > work with any zone to be delegated by the ISP. For most case

Re: [homenet] DNSSEC and homenet

2014-03-04 Thread Mark Andrews
e authenticator by for things like WiMax you will be putting credentials into the box to authenticticate your DHCP request to the ISP as the medium is not secure anyway. > > ___ > homenet mailing list > homenet@ietf.org > https://www.ie

Re: [homenet] DNSSEC and homenet

2014-03-04 Thread Mark Andrews
#x27;ve heard against putting the keys on the > ISP's server. However, you still have to make it work. > > _______ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mar

Re: [homenet] DNSSEC and homenet

2014-03-04 Thread Mark Andrews
In message <48f0cf63-2595-43cd-884d-0c764cd59...@fl1ger.de>, Ralf Weber writes: > Moin! > > On 04 Mar 2014, at 10:00, Mark Andrews wrote: > > > If you replace a CPE it just pushed new DS records for the > > new DNSKEY records it generates. This is equival

[homenet] DHCP DNSSEC Time Option

2014-03-04 Thread Mark Andrews
years in converting from text to binary. This allow clients to use the value directly to initialise a clock with a 1 hz freqency for use for DNSSEC validation. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742

[homenet] DNSSEC and homenet

2014-03-04 Thread Mark Andrews
versions of the zone. This prevents issues with cached DS/DNSKEY records as machines move from being locally connected to externally connected. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET

Re: [homenet] Homenet protocol decisions

2014-01-30 Thread Mark Andrews
r dealing with reverse lookups to the > dnsmasq-discuss list. > > > > >> 4) the vast increase in ipv6 related multicast led me to finally > >> violate the 802.11 standard and > >>fix wireless multicast rates to 9mbits. So far that hasn't broken any=

[homenet] Automatic Delegation of IP6.ARPA reverse zones with Prefix Delegation

2013-10-16 Thread Mark Andrews
Prefix Delegations. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-15 Thread Mark Andrews
uthentication mechanism. The update code should check for the presence of CNAME and DNAME records at the well know reverse names and adjust the update requests to update the target names of the CNAME / DNAME records. This allows for RFC 2317 style delegations to work. -- Mark Andrews, ISC 1 Sey

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-14 Thread Mark Andrews
In message <514257fa.90...@mtcc.com>, Michael Thomas writes: > On 03/14/2013 03:54 PM, Mark Andrews wrote: > > > > Please stop using "root servers" when you mean "parent servers". > > They are *not* the same. The root servers are only parent

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-14 Thread Mark Andrews
In message <51425135.1080...@mtcc.com>, Michael Thomas writes: > On 03/14/2013 03:27 PM, Mark Andrews wrote: > > > > You are missing the point. BIND+DHCPD can do all the above too. > > It is the senario described as CER hosting above. I've been running > &

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-14 Thread Mark Andrews
In message <20130314222706.8339930dc...@drugs.dv.isc.org>, Mark Andrews writes: > > In message <51424b9c.4060...@thekelleys.org.uk>, Simon Kelley writes: > > On 14/03/13 21:22, Michael Thomas wrote: > > > On 03/14/2013 02:09 PM, Mark Andrews wrote:

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-14 Thread Mark Andrews
In message <51424b9c.4060...@thekelleys.org.uk>, Simon Kelley writes: > On 14/03/13 21:22, Michael Thomas wrote: > > On 03/14/2013 02:09 PM, Mark Andrews wrote: > >> In message <16704.1363267...@sandelman.ca>, Michael Richardson writes: > >>>>>>

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-14 Thread Mark Andrews
In message <16704.1363267...@sandelman.ca>, Michael Richardson writes: > >>>>> "Mark" =3D=3D Mark Andrews writes: > >> I'm not a namedropper, but that doesn't sound like kosher DNS to > >> me... sort of a weird split horizon

Re: [homenet] will CER's be globally authoritative resolvers?

2013-03-13 Thread Mark Andrews
ve the shared secret. homenet <> CER (master) <> listed authoritative servers <> rest of the world Now if you want this to work with the CER turned off while you are away and update to the zone to work then protocol work is needed to get multi-master working. > Mike > ___

Re: [homenet] ISP-delegated IPv6 prefixes (3.4.1) in draft-ietf-homenet-arch-07

2013-03-05 Thread Mark Andrews
d out /48s. Remember this is all stuff the ISP advertises using DHCP. The end user doesn't have to enter any of this. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _

Re: [homenet] ISP-delegated IPv6 prefixes (3.4.1) in draft-ietf-homenet-arch-07

2013-03-05 Thread Mark Andrews
ISP's to only do /64s except spite the customer. The difference in costs from the RIRs for the bigger address space is chump change even for developing states. All their equipment will support > /64 because the big players want to support that. Mark -

Re: [homenet] ISP-delegated IPv6 prefixes (3.4.1) in draft-ietf-homenet-arch-07

2013-03-05 Thread Mark Andrews
s are not scarse. They are less than $0.03/annum per /48 to ISPs from RIRs. > Barbara > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] NPTv6-only home networks

2013-02-26 Thread Mark Andrews
o we can publish names externally; the rea > l question is how we arrange for that to happen. I think if we need it at a > ll, we might as well just use it, and not develop a new protocol suite to do > homenet naming. > > _______ > hom

Re: [homenet] NPTv6-only home networks

2013-02-26 Thread Mark Andrews
In message <20130226223612.40b74301a...@drugs.dv.isc.org>, Mark Andrews writes: > > In message <512cc4fd.2020...@si6networks.com>, Fernando Gont writes: > > On 02/26/2013 09:19 AM, Ted Lemon wrote: > > > Homenets aren't zeroconf--there has to be a way, at a

Re: [homenet] NPTv6-only home networks

2013-02-26 Thread Mark Andrews
t; e-mail: ferna...@gont.com.ar || fg...@si6networks.com > PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 > > > > > -- > Fernando Gont > SI6 Networks > e-mail: fg...@si6networks.com > PGP Fingerprint: 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E

Re: [homenet] renumbering the IETF

2013-02-25 Thread Mark Andrews
In message , Lorenzo Colitti writes: > > On Tue, Feb 26, 2013 at 1:13 PM, Mark Andrews wrote: > > > > Hmm. Do we know for sure that all clients properly depref ULAs below > > global > > > addresses (either because they follow RFC6724 instead of RFC3484, or

Re: [homenet] renumbering the IETF

2013-02-25 Thread Mark Andrews
on. fc00 has no bits in common with 2001 or 2002. I've been using ULA PA addresses together at home for years without issue. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org __

Re: [homenet] automatic prefix management (OSPF or ISIS version)

2013-02-25 Thread Mark Andrews
_ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

Re: [homenet] Servers in the home are not a crime

2013-02-24 Thread Mark Andrews
en you renew a lease that you will get the same address unless it is a exceptional circumstance. > Mike > _______ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 47

Re: [homenet] Comments on draft-howard-isp-ip6rdns-05 about Dynamically Generate PTR When Queried

2012-12-06 Thread Mark Andrews
gt; they should not be distributed, used or copied without authorisation. > If you have received this email in error, please notify the sender and > delete this message and its attachments. > As emails may be altered, France Telecom - Orange is not

Re: [homenet] Unicast DNS within the Homenet?

2012-09-12 Thread Mark Andrews
In message <279cabeb-4dee-45c7-8cf2-8c34eac3c...@fugue.com>, Ted Lemon writes: > On Sep 12, 2012, at 10:28 PM, Mark Andrews wrote: > > Which is a UI / product support problem. The Mac has DNS registration > > under Sharing. It requires manual entry of the TSIG key which &g

Re: [homenet] Unicast DNS within the Homenet?

2012-09-12 Thread Mark Andrews
In message <7e23e81a-9daa-45ac-a577-3b0574e1d...@fugue.com>, Ted Lemon writes: > On Sep 12, 2012, at 9:02 PM, Mark Andrews wrote: > > My machines have names. Those names don't change as I move around > > the world. Random DHCP servers at coffee shops DO NOT have the

Re: [homenet] Unicast DNS within the Homenet?

2012-09-12 Thread Mark Andrews
TCP as the authenticator in the reverse zone unless there is a DHCP option that says to use the DHCP server to relay the PTR record update. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org __

Re: [homenet] naming, what's the problem?

2012-08-29 Thread Mark Andrews
In message <20120829063116.gb51...@mx1.yitter.info>, Andrew Sullivan writes: > On Wed, Aug 29, 2012 at 11:50:20AM +1000, Mark Andrews wrote: > > > There are enough services that require a working reverse for not > > registering to be a problem. > > Please name one

Re: [homenet] naming, what's the problem?

2012-08-28 Thread Mark Andrews
In message <596bc785-38ea-407c-a8da-e4e854e64...@apple.com>, james woodyatt wri tes: > On Aug 28, 2012, at 17:42 , Mark Andrews wrote: > > > > Repeat until you have the entire 128 bits for all registered nodes in the / > 48. > > You shouldn't expect to get

Re: [homenet] naming, what's the problem?

2012-08-28 Thread Mark Andrews
; delegation (router.foo.homeunix.net, printer.foo.homeunix.net, > mylaptop.foo.homeunix.net, ...) > > >> Nonetheless, it is a perfectly valid use case; the IPv6 functional > >> equivalent of widely used DynDNS in the IPv4 world today. And, of > >> course, not every o

Re: [homenet] section 3.2.2.1 of homenet-arch

2012-08-07 Thread Mark Andrews
In message , Benjamin Kerensa writes: > > On Wed, Aug 1, 2012 at 1:20 AM, Mark Andrews wrote: > > > > What this does not cover is a service that is listenning on a well > > > known port. This is rare among home nets (except for homes of readers > > >

Re: [homenet] a modest proposal

2012-08-01 Thread Mark Andrews
et to IPv4 addresses. DNS64 and NAT64 already exist for > BSD and Linux (bind and pf for BSD, bind and linuxnat64 for linux). DNS64 does not add synthesised addresses to existing RRsets. IPv6-only nodes will not be able to connect to dual stack servers as there is no IPv6 path. > Curt

Re: [homenet] Reverse DNS

2012-08-01 Thread Mark Andrews
In message <50194422.6070...@softathome.com>, Wouter Cloetens writes: > On 01/08/12 16:13, Mark Andrews wrote: > > In message<5018ddca.1010...@softathome.com>, Wouter Cloetens writes: > >> On 01/08/12 03:26, Curtis Villamizar wrote: > >>> Anything DN

Re: [homenet] Reverse DNS

2012-08-01 Thread Mark Andrews
the idea that there would be redundent servers. It is not designed to deal with not being able to connect to any servers for a zone and it really does not work well when this is the case. Mark -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 987

Re: [homenet] section 3.2.2.1 of homenet-arch

2012-08-01 Thread Mark Andrews
some clients). We've said > > > that the ULA ought to stay the same, so in fact, I agree, the internal > > > addresses actually all stay the same. > > > > > > I'm still surprised that an ISP will need to flash renumber faster than > > > it c

Re: [homenet] Reverse DNS

2012-07-31 Thread Mark Andrews
te requests are forwarded to. > Mike > ___ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ homenet mailing list homenet@ietf.org https://www.ietf.org/mailman/listinfo/homenet

[homenet] draft-ietf-homenet-arch-04

2012-07-31 Thread Mark Andrews
Section 2.6 IPv6-only, overlooks node based DS-Lite as a viable solution. The DS-Lite BR could be learnt from the ISP or be provided internally presumably by a CPE router when the homenet has both dual stack connectivity and ipv6-only subnets. -- Mark

  1   2   >