Re: use of site-locals as an indication of policy?

2002-11-18 Thread Keith Moore
> Why do you keep insisting that lack of public accessability implies > anything about trust? you are the one making such assertions. IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun

Re: use of site-locals as an indication of policy?

2002-11-18 Thread Keith Moore
> > > I was suggesting that SL is an indication that a filtering > > policy has > > > been applied to this network. > > > > seems like a *huge* stretch - several of the ideas for using > > SL have nothing to do with filtering. also, SL strikes me as > > an extremely poor mechanism for communicati

RE: use of site-locals as an indication of policy?

2002-11-18 Thread Tony Hain
Kieth Moore wrote: > to me it seems completely unreasonable for any device to make > any assuumptions about the trust level placed in "site-local" > addresses. this should be a MUST NOT. Why do you keep insisting that lack of public accessability implies anything about trust? Tony -

RE: use of site-locals as an indication of policy?

2002-11-18 Thread Tony Hain
Keith Moore wrote: > > I was suggesting that SL is an indication that a filtering > policy has > > been applied to this network. > > seems like a *huge* stretch - several of the ideas for using > SL have nothing to do with filtering. also, SL strikes me as > an extremely poor mechanism for co

Re: use of site-locals as an indication of policy?

2002-11-18 Thread Keith Moore
> I was suggesting that SL is an indication that a filtering policy has > been applied to this network. seems like a *huge* stretch - several of the ideas for using SL have nothing to do with filtering. also, SL strikes me as an extremely poor mechanism for communicating filtering policy. in g

Re: use of site-locals as an indication of policy?

2002-11-18 Thread Keith Moore
to me it seems completely unreasonable for any device to make any assuumptions about the trust level placed in "site-local" addresses. this should be a MUST NOT. IETF IPng Working Group Mailing List IPng Home Page:

RE: use of site-locals as an indication of policy?

2002-11-17 Thread Harald Tveit Alvestrand
--On 17. november 2002 16:08 -0500 Tony Hain <[EMAIL PROTECTED]> wrote: There is nothing requiring that you run the network with SL. Just that if you choose to do so, there will be some devices and applications that will require less work. Personally if I were building an auto-configuring devic

RE: use of site-locals as an indication of policy?

2002-11-17 Thread Tony Hain
Harald Tveit Alvestrand wrote: > do you mean that it's appropriate policy for equipment/application > manufacturers to ship products that will only work out of the box if > site-locals are configured on the network? > > I'd like to preserve the ability to run a network without configuring > sit

RE: use of site-locals as an indication of policy?

2002-11-17 Thread Tony Hain
Keith Moore wrote: > ... > One of the assertions that Tony seems to be making is that > SLs can be used to communicate to applications when policy > forbids them from talking > to one another.(Tony, if I'm mistating this, please restate it) I was suggesting that SL is an indication that a fi

RE: use of site-locals as an indication of policy?

2002-11-17 Thread Harald Tveit Alvestrand
do you mean that it's appropriate policy for equipment/application manufacturers to ship products that will only work out of the box if site-locals are configured on the network? I'd like to preserve the ability to run a network without configuring site-locals without too much impact...

Re: use of site-locals as an indication of policy?

2002-11-15 Thread Keith Moore
> I think the answer is yes, it is reasonable to use site-locals as an > indication of policy. The kind of examples I have in mind are > > 1) A default configuration for some applications (eg database, file, and > print servers) might be to only accept connections from site-local > addresses. Thes

RE: use of site-locals as an indication of policy?

2002-11-15 Thread Richard Draves
I think the answer is yes, it is reasonable to use site-locals as an indication of policy. The kind of examples I have in mind are 1) A default configuration for some applications (eg database, file, and print servers) might be to only accept connections from site-local addresses. These applicatio