Subject: [BEHAVE] Quick update to draft-ietf-behave-nat64-discovery-heuristic-07.txt

From: <[email-masked]>
Date: Tue, 13 Mar 2012 09:43:25 +0000

Hi,

Here's a quick update to add one step for node behavior in case of DNSSEC use:
--
   3.  The node SHOULD compare the domain of the NAT64 FQDN with node's
       list of trusted domains.  The means for node to learn the trusted
       domains is implementation specific.  If the node has no list of
       trusted domains, the node MAY query user whether the domain can
       be trusted.  The node MAY remember the answer for future use.  If
       the node has no trust for the domain, the discovery procedure is
       not secure and remaining steps described below are not needed.
--

Also the exit strategy section is now stripped to bare minimum without any speculation about exit tools:
--
6.  Exit Strategy

   A day will come when this tool is no longer needed.  At that point
   best suited techniques for implementing exit strategy will be
   documented.

   A node SHOULD implement configuration knob for disabling the
   Pref64::/n discovery feature.
--

Best regards,

        Teemu

> -----Original Message-----
> From: [email-masked] [mailto:[email-masked]] On
> Behalf Of ext [email-masked]
> Sent: 13. maaliskuuta 2012 11:38
> To: [email-masked]
> Cc: [email-masked]
> Subject: [BEHAVE] I-D Action: draft-ietf-behave-nat64-discovery-heuristic-
> 07.txt
>
>
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Behavior Engineering for Hindrance
> Avoidance Working Group of the IETF.
>
>       Title           : Discovery of IPv6 Prefix Used for IPv6 Address Synthesis
>       Author(s)       : Teemu Savolainen
>                           Jouni Korhonen
>                           Dan Wing
>       Filename        : draft-ietf-behave-nat64-discovery-heuristic-07.txt
>       Pages           : 14
>       Date            : 2012-03-12
>
>    This document describes a method for detecting presence of DNS64 and
>    for learning IPv6 prefix used for protocol translation on an access
>    network.  The method depends on existence of a well-known IPv4-only
>    domain name "ipv4only.arpa".  The information learned enables nodes
>    to perform local IPv6 address synthesis and to potentially avoid
>    traversal through NAT64 on dual-stack accesses and multi-interface
>    deployments.
>
>
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-behave-nat64-discovery-
> heuristic-07.txt
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> This Internet-Draft can be retrieved at:
> ftp://ftp.ietf.org/internet-drafts/draft-ietf-behave-nat64-discovery-heuristic-
> 07.txt
>
> _______________________________________________
> Behave mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/behave