Subject: [v6ops] CPE simple security - Soft updates of unmanaged CPEs.

From: Rémi Després <[email-masked]>
Date: Mon, 18 Oct 2010 10:08:31 +0200

Hi, all,

1.
For information, in relation to the current discussion about draft-ietf-v6ops-cpe-simple-security-15, here is what Free.fr, of which I am a happy customer, has been doing for years:

By default, no software update is received.
The short user manual indicates that the last update can be received, at any time, by means of a "hard reboot".
A hard reboot consists in 4 consecutive power-off/power-on. 
Some announcements by Free of new features come with the advice to do hard reboots to get them.

It would be wise IMHO that the draft would at least clearly permit this kind of behavior.

(This isn't the case with the current REC-13 "By DEFAULT, Internet gateways SHOULD, automatically download and install software updates for extending IPv6 simple security for support of future standard upper layer transports and extension headers.") 

2.
The requirement that new protections for upper layers can be downloaded from time to time seems to me opposite to the notion of an IETF specified "simple security".

3.
Wouldn't the best approach be to just delete REC-13 and the preceding paragraph that (tentatively) justifies it?

Regards,
RD