From geopriv-bounces@ietf.org Thu Sep 01 00:05:19 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAgKF-0004Rm-OY; Thu, 01 Sep 2005 00:05:19 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAgKB-0004RT-8n for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 00:05:17 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA08436 for ; Thu, 1 Sep 2005 00:05:11 -0400 (EDT) Received: from zrc2s0jx.nortelnetworks.com ([47.103.122.112]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAgM1-000646-2w for geopriv@ietf.org; Thu, 01 Sep 2005 00:07:11 -0400 Received: from zctwc060.asiapac.nortel.com (zctwc060.asiapac.nortel.com [47.153.200.67]) by zrc2s0jx.nortelnetworks.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id j8144v206138 for ; Wed, 31 Aug 2005 23:04:57 -0500 (CDT) Received: by zctwc060.asiapac.nortel.com with Internet Mail Service (5.5.2653.19) id ; Thu, 1 Sep 2005 14:04:56 +1000 Message-ID: From: "Martin Thomson" To: GEOPRIV Subject: RE: [Geopriv] Open discussion: Revised Civic LO draft Date: Thu, 1 Sep 2005 14:04:52 +1000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) X-Spam-Score: 0.5 (/) X-Scan-Signature: 5011df3e2a27abcc044eaa15befcaa87 X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0534944547==" Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --===============0534944547== Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C5AEAA.4DF8E43C" This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C5AEAA.4DF8E43C Content-Type: text/plain Hi All, I haven't received any comments on the civic draft. Just in case this got lost in the noise last week, I'd like to remind you of the existence of this draft. Ta, Martin -----Original Message----- From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On Behalf Of Thomson, Martin [WOLL:5500:EXCH] Sent: Monday, 22 August 2005 1:16 PM To: GEOPRIV Subject: [Geopriv] Open discussion: Revised Civic LO draft Hi Everyone, I have submitted a draft that updates the civic address format for PIDF-LO. This includes Henning's DHCP types as well as a few more. http://www.ietf.org/internet-drafts/draft-thomson-revised-civic-lo-00.txt If you have any comments, let fly. I'd be happy to discuss any of the decisions that have been made. Cheers, Martin ------_=_NextPart_001_01C5AEAA.4DF8E43C Content-Type: text/html Content-Transfer-Encoding: quoted-printable RE: [Geopriv] Open discussion: Revised Civic LO draft

Hi All,

I haven't received any comments on the civic = draft.  Just in case this got lost in the noise last week, I'd = like to remind you of the existence of this draft.

Ta,
Martin

-----Original Message-----
From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org= ] On Behalf Of Thomson, Martin [WOLL:5500:EXCH]
Sent: Monday, 22 August 2005 1:16 PM
To: GEOPRIV
Subject: [Geopriv] Open discussion: Revised Civic LO = draft


Hi Everyone,

I have submitted a draft that updates the civic = address format for PIDF-LO.  This includes Henning's DHCP types as = well as a few more.

    http://www.ietf.org/internet-drafts/draft-thomson-revi= sed-civic-lo-00.txt

If you have any comments, let fly.  I'd be happy = to discuss any of the decisions that have been made.

Cheers,
Martin

------_=_NextPart_001_01C5AEAA.4DF8E43C-- --===============0534944547== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv --===============0534944547==-- From geopriv-bounces@ietf.org Thu Sep 01 08:05:53 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAnpJ-0004LK-1W; Thu, 01 Sep 2005 08:05:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAnpG-0004KL-Aw for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 08:05:50 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA29645 for ; Thu, 1 Sep 2005 08:05:47 -0400 (EDT) Received: from zak.hxr.us ([216.93.167.200] helo=zak.ecotroph.net) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAnrC-0003s3-6S for geopriv@ietf.org; Thu, 01 Sep 2005 08:07:51 -0400 Received: from [10.0.1.5] ([::ffff:64.83.8.178]) (AUTH: PLAIN anewton, SSL: TLSv1/SSLv3,128bits,RC4-SHA) by zak.ecotroph.net with esmtp; Thu, 01 Sep 2005 08:05:45 -0400 id 000C7E5E.4316EE99.00007DA2 In-Reply-To: References: Mime-Version: 1.0 (Apple Message framework v734) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Andrew Newton Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft Date: Thu, 1 Sep 2005 08:05:46 -0400 To: Martin Thomson X-Mailer: Apple Mail (2.734) X-Spam-Score: 0.0 (/) X-Scan-Signature: 50a516d93fd399dc60588708fd9a3002 Content-Transfer-Encoding: 7bit Cc: GEOPRIV X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Martin, I haven't had my morning coffee, so I'm likely not to get this right. But in Section 2.3, you mention dropping 'script' in favor of Unicode (which XML does natively). Isn't it still helpful to have the script information? Even if UTF-8 or UTF-16 can do everything, what harm is done by continuing to include that information? -andy On Sep 1, 2005, at 12:04 AM, Martin Thomson wrote: > Hi All, > > I haven't received any comments on the civic draft. Just in case > this got lost in the noise last week, I'd like to remind you of the > existence of this draft. > > Ta, > Martin > > -----Original Message----- > From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On > Behalf Of Thomson, Martin [WOLL:5500:EXCH] > Sent: Monday, 22 August 2005 1:16 PM > To: GEOPRIV > Subject: [Geopriv] Open discussion: Revised Civic LO draft > > > Hi Everyone, > > I have submitted a draft that updates the civic address format for > PIDF-LO. This includes Henning's DHCP types as well as a few more. > > http://www.ietf.org/internet-drafts/draft-thomson-revised-civic- > lo-00.txt > > If you have any comments, let fly. I'd be happy to discuss any of > the decisions that have been made. > > Cheers, > Martin > > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv > _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 15:39:22 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAuuA-0007qu-Mh; Thu, 01 Sep 2005 15:39:22 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAuu8-0007qo-T2 for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 15:39:20 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA26067 for ; Thu, 1 Sep 2005 15:39:19 -0400 (EDT) Received: from zak.hxr.us ([216.93.167.200] helo=zak.ecotroph.net) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAuw6-0002KN-O7 for geopriv@ietf.org; Thu, 01 Sep 2005 15:41:25 -0400 Received: from [10.131.244.250] ([::ffff:216.168.239.87]) (AUTH: PLAIN anewton, SSL: TLSv1/SSLv3,128bits,RC4-SHA) by zak.ecotroph.net with esmtp; Thu, 01 Sep 2005 15:39:14 -0400 id 000C7E5E.431758E2.000060BC Mime-Version: 1.0 (Apple Message framework v734) In-Reply-To: <20050831170300.C673516FAB@mail.nitros9.org> References: <20050831170300.C673516FAB@mail.nitros9.org> Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <47CC96D3-7D1C-49F9-9597-94DD45A794ED@hxr.us> Content-Transfer-Encoding: 7bit From: Andrew Newton Subject: Re: [Geopriv] Re: Review of draft-ietf-geopriv-radius-lo-04.txt Date: Thu, 1 Sep 2005 15:39:14 -0400 To: GEOPRIV WG , radiusext@ops.ietf.org X-Mailer: Apple Mail (2.734) X-Spam-Score: 0.0 (/) X-Scan-Signature: 7bac9cb154eb5790ae3b2913587a40de Content-Transfer-Encoding: 7bit Cc: X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org All, I've asked Hannes to open an issue tracker for this document. If you have a particular issue with this document, please summarize it and send it to the list so that he may enter it into the issue tracker. When sending the issues, please send them in separate messages using subjects that denote the nature of the issue. -andy _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 17:28:13 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAwbV-0002oh-A4; Thu, 01 Sep 2005 17:28:13 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAwbT-0002mL-6v for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 17:28:11 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA00295 for ; Thu, 1 Sep 2005 17:28:09 -0400 (EDT) Received: from zak.hxr.us ([216.93.167.200] helo=zak.ecotroph.net) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAwdU-0005U7-Kt for geopriv@ietf.org; Thu, 01 Sep 2005 17:30:17 -0400 Received: from [10.131.244.250] ([::ffff:216.168.239.87]) (AUTH: PLAIN anewton, SSL: TLSv1/SSLv3,128bits,RC4-SHA) by zak.ecotroph.net with esmtp; Thu, 01 Sep 2005 17:28:06 -0400 id 000C7E71.43177266.000073F5 Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=_zak.ecotroph.net-29685-1125610087-0001-2" To: GEOPRIV WG Message-Id: <6FCE1004-299B-40F6-9459-B96C4604445C@hxr.us> From: Andrew Newton Date: Thu, 1 Sep 2005 17:28:08 -0400 X-Mailer: Apple Mail (2.734) X-Spam-Score: 0.0 (/) X-Scan-Signature: fb6060cb60c0cea16e3f7219e40a0a81 Subject: [Geopriv] IETF 63 GEOPRIV Session Minutes X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org This is a MIME-formatted message. If you see this text it means that your E-mail software does not support MIME-formatted messages. --=_zak.ecotroph.net-29685-1125610087-0001-2 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Here are the minutes for the IETF 63 GEOPRIV Session. If you have any additions or modifications, please let me know. -andy --=_zak.ecotroph.net-29685-1125610087-0001-2 Content-Type: text/plain; x-unix-mode=0644; x-mac-hide-extension=yes; name="GEOPRIV-IETF63-Minutes.txt"; charset=iso-8859-1 Content-Disposition: attachment; filename=GEOPRIV-IETF63-Minutes.txt Content-Transfer-Encoding: 7bit Minutes of the GEOPRIV Working Group at the 63nd IETF ----------------------------------------------------- Co-Chairs: Allison Mankin Randall Gellens Andrew Newton Minutes: Doug Otis 1) Agenda Andrew presented the agenda, and noted that two items had been added: a) GEOPRIV issues with SIP events, and b) draft-guenther-geopriv-saml-policy-01. No objection were given to the additions. 2) draft-winterbottom-location-uri-00 Martin Thomas presented draft-winterbottom-location-uri-00. Martin discussed the benefits of passing location information by reference vs. passing location information by value. Henning Schulzrinne objected to the points that pass-by-reference had superior privacy strengths, and Jon Peterson pointed out that pass-by-reference has better access control features whereby pass-by-value is limited to the use of cryptography. Hannes Tschofenig disagreed with this point and noted that in both cases access control needs to be configured. Henning Schulzrinne and Jon Peterson also discussed the differences between cost and environmental challenges between pass-by-value and pass-by-reference. Many participants noted that the draft seemed more like propaganda against pass-by-value and requested that it either should be toned down or provide better supporting arguments. The draft authors agreed. Ted Hardie noted that any pass-by-reference model needs to specify the access methods for reference, with URIs the set of schemes need to be specified. Jon Peterson then noted that this draft was only intended to describe a concept and not a concrete proposal. Brian Rosen noted that the description of pass-by-value being used by anybody does not correctly describe the pass-by-value deployment environments where trust is put into the channel and channel connections, especially when channel security is utilized. Jon Peterson noted that pass-by-reference does not necessarily need to rely upon cryptography, whereby pass-by-value does require cryptography. Brian Rosen noted that in the emergency case that passwords were not plausible for deployment. 3) draft-ietf-geopriv-pdif-lo-profile-01 Hannes Tshofenig presented draft-ietf-geopriv-pdif-lo-profile. Henning Schulzrinne noted that he did not see any productive outcome for continuing discussion on providing guidelines on precision or accuracy. He noted that he knew of no reasons why it would be dropped when it was given. 4) draft-winterbottom-http-location-delivery-01 Martin Thomas presented draft-winterbottom-http-location-delivery-01.txt. This document is known as HELD. John Schnizlein noted that HTTP has the capability of traversing NATs, but that HELD cannot because of its callback feature. Henning Schulzrinne noted that objects reference by HELD will have an object lifetime issue, at that at some point that a location object reference by HELD would be deleted. Martin Thomas suggested that retention requirements could be added but that they would vary depending on situation. Henning Schulzrinne expressed concern over variable retention requirements. Steve Norris also expressed concern for variable retention requirements. Hannes Tschofenig also stated that there was a state maintenance issue on top of the retention issue. Hannes Tschofenig stated that he did not understand the pseudonym in HELD and stated that there might be identity issues with HELD pseudonyms and the other identifiers in PIDF-LO. Ted Hardie stated that he believed that GEOPRIV does not currently have the policy rules defined for using On-Behalf-Of in HELD and that it would require a lot of work. John Schnizlein agreed and noted that On-Behalf-Of using IP addresses from the access networks will cause mistakes. John Schnizlein raised concerns regarding using DNS and DHCP to find HELD servers, and specifically noted that the use of DNS in the discovery mechanism of HELD does not match the normal uses of DNS. He also noted that there are often disconnects between information given out by DHCP and the domains used in DNS configuration of mobile devices. John also identified the issue that determining a location based on IP addresses may not be feasible. Martin Thomas mentioned that SLP could be used instead. 5) Followup to issues from interim meeting Hannes Tschofenig led a facilitated discussion on the issues that came from the GEOPRIV/ECRIT interim meeting held in New York. John Schnizlein questioned the need to worry about wrong locaiton information in an emergency phone call. Steve Norris noted that it is quite common in certain jurisdictions to fake incidents that require police reaction just to give neighbors a bad reputation. Stuart Goldman noted that fake location information in an emergency call could be used by terrorists to dispatch first responders to the wrong location. Randy Gellens noted that it may be easier to trust location information from a SIP proxy than from a call originator, but sophisticated attackers can stand up a SIP proxy. Andrew Newton and John Schnizlein noted that emergency call takers usually ask callers for information in addition to what they get from the network. Rohan Mahy noted that once a cryptographic signature is placed over an identity, there is then an issue of coordinating identities with users and emergency call centers. Brian Rosen noted that PSAP operators want location information to be reliable and spoof protected, but that even if the location information is incorrect a PSAP will take a call. Correct location information may be usable for call routing in high load situations. He also noted that asserted location is more important than identity. Brian Rosen also noted that the access network and signaling network may be different, and therefore it is difficult to use the access network to control aspects of the signaling. And that the two networks have different identities. Hannes Tschofenig noted that the difference between the access network and the signaling network is an issue because many solutions do not take into account these differing network architectures. Ted Hardie noted that the question that needs to be asked is about the necessity of passing the location/identity binding from the access network through the signaling network and to the emergency call end point. Rohan Mahy asked how a PSAP distinguishes between a large number of legitimate calls and a denial-of-service attack. Henning Schulzrinne asked if it is helpful to provide better bindings between location and network characteristics. Such as, would the source IP address of the call help when the location passed in the call is not known to be in that location. Steve Norris stated that multiple pieces of information given to the PSAPs will be beneficial, and so it could be useful to provide PSAPs with both the information from a network element and a information from a client. 6) GEOPRIV issues with SIP Events Rohan Mahy presented draft-mahy-geopriv-sip-loc-pkg-01.txt. Henning Schulzrinne stated that the normal PIDF-LO model uses presence subscriptions and this draft does not use presence. Rohan asked about applications that do not need presence information. Jon Peterson answered that presence requests can be filtered. Rohan noted that doing presence requests requires domain knowledge in presence even though the application is in the location domain. James Polk noted that this document solves a problem that is difficult to do in the SIP location conveyance document. Martin Thomas also agreed that the document was useful but noted that some of the GML bindings needed to be tightened up. Rohan noted that the use of GML with PIDF-LO is one of the reasons why he believed this document should be in GEOPRIV. Randy Gellens noted that the privacy requirements about location change events may be harder than anticipated because users tend to have changing needs. Rohan answered the concern by stating that such complexity could be handled by user interfaces. Andrew asked for a hum from the room regarding GEOPRIV accepting the work in the draft on the filter formatting. The room accepted the work. 7) draft-guenther-geopriv-saml-policy-01 Hannes Tschofenig gave a presentation on draft-guenther-geopriv-sampl-policy-01. Andrew asked how many participants had read the draft. Only two participants raised their hands. Andrew stated that the question of adopting this draft would have to be taken to the list since there were not enough reviewers of the draft in the room. --=_zak.ecotroph.net-29685-1125610087-0001-2 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv --=_zak.ecotroph.net-29685-1125610087-0001-2-- From geopriv-bounces@ietf.org Thu Sep 01 20:18:56 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzGi-0005fE-M5; Thu, 01 Sep 2005 20:18:56 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzGf-0005f9-He for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 20:18:54 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA08080 for ; Thu, 1 Sep 2005 20:18:49 -0400 (EDT) Received: from zrc2s0jx.nortelnetworks.com ([47.103.122.112]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAzIh-0001uC-VW for geopriv@ietf.org; Thu, 01 Sep 2005 20:21:00 -0400 Received: from zctwc060.asiapac.nortel.com (zctwc060.asiapac.nortel.com [47.153.200.67]) by zrc2s0jx.nortelnetworks.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id j820ITB13052; Thu, 1 Sep 2005 19:18:30 -0500 (CDT) Received: by zctwc060.asiapac.nortel.com with Internet Mail Service (5.5.2653.19) id ; Fri, 2 Sep 2005 10:17:10 +1000 Message-ID: From: "Martin Thomson" To: Andrew Newton , Martin Thomson Subject: RE: [Geopriv] Open discussion: Revised Civic LO draft Date: Fri, 2 Sep 2005 10:17:09 +1000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) X-Spam-Score: 0.5 (/) X-Scan-Signature: e1924de3f9fb68e58c31920136007eb1 Cc: GEOPRIV X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0560573315==" Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --===============0560573315== Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C5AF53.A8D2F0B0" This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C5AF53.A8D2F0B0 Content-Type: text/plain Hi Andy, This is one that I had to do a little reading on to be sure that I was doing the right thing. Unicode and scripts are not something that I have dealt with before, so my interpretation may not be completely accurate. The way I understand it is that unicode (UTF-8, UTF-16, etc...) specifies a means of encoding characters. Every character also has an associated script (the characters that I am using are in the script called "latin" for instance). This is where the DHCP civic draft confused me, and perhaps Henning can clear this up, but I think that specifying script is redundant. That is, by specifying a particular codepoint in one of the unicode standards, you refer to a specific character, and that character has a script. The harm in including the information would be a comflict between what one scheme is telling you, and what the other says. That sort of conflict is dangerous - which one has precedent. If I specify character U+203B (japanese kome) and the cyrillic script, how does that help? The language attribute should disambiguate sufficiently (japanese kome vs. urdu paragraph separator). Cheers, Martin -----Original Message----- From: Andrew Newton [mailto:andy@hxr.us] Sent: Thursday, 1 September 2005 10:06 PM To: Martin Thomson Cc: GEOPRIV Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft Martin, I haven't had my morning coffee, so I'm likely not to get this right. But in Section 2.3, you mention dropping 'script' in favor of Unicode (which XML does natively). Isn't it still helpful to have the script information? Even if UTF-8 or UTF-16 can do everything, what harm is done by continuing to include that information? -andy On Sep 1, 2005, at 12:04 AM, Martin Thomson wrote: > Hi All, > > I haven't received any comments on the civic draft. Just in case > this got lost in the noise last week, I'd like to remind you of the > existence of this draft. > > Ta, > Martin > > -----Original Message----- > From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On > Behalf Of Thomson, Martin [WOLL:5500:EXCH] > Sent: Monday, 22 August 2005 1:16 PM > To: GEOPRIV > Subject: [Geopriv] Open discussion: Revised Civic LO draft > > > Hi Everyone, > > I have submitted a draft that updates the civic address format for > PIDF-LO. This includes Henning's DHCP types as well as a few more. > > http://www.ietf.org/internet-drafts/draft-thomson-revised-civic- > lo-00.txt > > If you have any comments, let fly. I'd be happy to discuss any of > the decisions that have been made. > > Cheers, > Martin > > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv > ------_=_NextPart_001_01C5AF53.A8D2F0B0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable RE: [Geopriv] Open discussion: Revised Civic LO draft

Hi Andy,

This is one that I had to do a little reading on to = be sure that I was doing the right thing.  Unicode and scripts are = not something that I have dealt with before, so my interpretation may = not be completely accurate.

The way I understand it is that unicode (UTF-8, = UTF-16, etc...) specifies a means of encoding characters.  Every = character also has an associated script (the characters that I am using = are in the script called "latin" for instance).  This is = where the DHCP civic draft confused me, and perhaps Henning can clear = this up, but I think that specifying script is redundant.  That = is, by specifying a particular codepoint in one of the unicode = standards, you refer to a specific character, and that character has a = script.

The harm in including the information would be a = comflict between what one scheme is telling you, and what the other = says.  That sort of conflict is dangerous - which one has = precedent.  If I specify character U+203B (japanese kome) and the = cyrillic script, how does that help?  The language attribute = should disambiguate sufficiently (japanese kome vs. urdu paragraph = separator).

Cheers,
Martin

-----Original Message-----
From: Andrew Newton [mailto:andy@hxr.us]
Sent: Thursday, 1 September 2005 10:06 PM
To: Martin Thomson
Cc: GEOPRIV
Subject: Re: [Geopriv] Open discussion: Revised = Civic LO draft


Martin,

I haven't had my morning coffee, so I'm likely not to = get this 
right.  But in Section 2.3, you mention = dropping 'script' in favor of 
Unicode (which XML does natively).  Isn't it = still helpful to have 
the script information?  Even if UTF-8 or = UTF-16 can do everything, 
what harm is done by continuing to include that = information?

-andy

On Sep 1, 2005, at 12:04 AM, Martin Thomson = wrote:

> Hi All,
>
> I haven't received any comments on the civic = draft.  Just in case
> this got lost in the noise last week, I'd like = to remind you of the 
> existence of this draft.
>
> Ta,
> Martin
>
> -----Original Message-----
> From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org= ] On
> Behalf Of Thomson, Martin = [WOLL:5500:EXCH]
> Sent: Monday, 22 August 2005 1:16 PM
> To: GEOPRIV
> Subject: [Geopriv] Open discussion: Revised = Civic LO draft
>
>
> Hi Everyone,
>
> I have submitted a draft that updates the civic = address format for 
> PIDF-LO.  This includes Henning's DHCP = types as well as a few more.
>
>     http://www.ietf.org/internet-drafts/draft-thomson-revi= sed-civic-
> lo-00.txt
>
> If you have any comments, let fly.  I'd be = happy to discuss any of 
> the decisions that have been made.
>
> Cheers,
> Martin
>
> = _______________________________________________
> Geopriv mailing list
> Geopriv@ietf.org
> https://www1.ietf.org/mailman/listinfo/geopriv
>



------_=_NextPart_001_01C5AF53.A8D2F0B0-- --===============0560573315== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv --===============0560573315==-- From geopriv-bounces@ietf.org Thu Sep 01 20:51:47 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzmV-00031k-Pg; Thu, 01 Sep 2005 20:51:47 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzmU-00031c-MP for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 20:51:46 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA09945 for ; Thu, 1 Sep 2005 20:51:43 -0400 (EDT) Received: from zak.hxr.us ([216.93.167.200] helo=zak.ecotroph.net) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAzoX-0002zv-5W for geopriv@ietf.org; Thu, 01 Sep 2005 20:53:54 -0400 Received: from [10.0.1.5] ([::ffff:64.83.8.178]) (AUTH: PLAIN anewton, SSL: TLSv1/SSLv3,128bits,RC4-SHA) by zak.ecotroph.net with esmtp; Thu, 01 Sep 2005 20:51:34 -0400 id 000C7E72.4317A217.000016C8 In-Reply-To: References: Mime-Version: 1.0 (Apple Message framework v734) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <3BCA326D-3ADC-42AF-A4DA-73030507E038@hxr.us> Content-Transfer-Encoding: 7bit From: Andrew Newton Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft Date: Thu, 1 Sep 2005 20:51:36 -0400 To: Martin Thomson X-Mailer: Apple Mail (2.734) X-Spam-Score: 0.0 (/) X-Scan-Signature: 4d87d2aa806f79fed918a62e834505ca Content-Transfer-Encoding: 7bit Cc: GEOPRIV X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org On Sep 1, 2005, at 8:17 PM, Martin Thomson wrote: > Hi Andy, > > This is one that I had to do a little reading on to be sure that I > was doing the right thing. Unicode and scripts are not something > that I have dealt with before, so my interpretation may not be > completely accurate. > > The way I understand it is that unicode (UTF-8, UTF-16, etc...) > specifies a means of encoding characters. Every character also has > an associated script (the characters that I am using are in the > script called "latin" for instance). This is where the DHCP civic > draft confused me, and perhaps Henning can clear this up, but I > think that specifying script is redundant. That is, by specifying > a particular codepoint in one of the unicode standards, you refer > to a specific character, and that character has a script. > > The harm in including the information would be a comflict between > what one scheme is telling you, and what the other says. That sort > of conflict is dangerous - which one has precedent. If I specify > character U+203B (japanese kome) and the cyrillic script, how does > that help? The language attribute should disambiguate sufficiently > (japanese kome vs. urdu paragraph separator). Perhaps my original question should have been, "So why does dhcp- civic have scipts?" Like XML, it is also using UTF-8. But that draft does have this explanation: The same civic and postal address information can often be rendered in multiple languages and scripts. For example, Korean addresses are often shown in Hangul, Latin and Kanji, while some older cities have multiple language variants (Munich, Muenchen and Monaco, for example). Since DHCPv4 and DHCPv6 do not currently support a mechanism to query for a specific script or language, the DHCP server SHOULD provide all common renderings to the client and MUST provide at least the rendering in the language and script appropriate to the location indicated. So it isn't necessarily about the UTF-8. It is about the protocol interaction between the sender and receiver. And I think that perhaps we have the same interaction with PIDF-LO, and therefore the 'scripts' out to be put back in (though in XML it is usually called 'lang' or 'language'). Do we envision a receiver of PIDF-LO asking for the Italian version of the same document after receiving the English version? I doubt it. -andy _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 20:57:04 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzrc-00068d-3J; Thu, 01 Sep 2005 20:57:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EA5Mp-0002qj-W9 for geopriv@megatron.ietf.org; Tue, 30 Aug 2005 08:37:32 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA09797 for ; Tue, 30 Aug 2005 08:37:30 -0400 (EDT) From: Pasi.Eronen@nokia.com Received: from mgw-ext01.nokia.com ([131.228.20.93]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EA5OM-0008Io-LM for geopriv@ietf.org; Tue, 30 Aug 2005 08:39:08 -0400 Received: from esebh108.NOE.Nokia.com (esebh108.ntc.nokia.com [172.21.143.145]) by mgw-ext01.nokia.com (Switch-3.1.7/Switch-3.1.7) with ESMTP id j7UCbRPE004038; Tue, 30 Aug 2005 15:37:29 +0300 Received: from esebh102.NOE.Nokia.com ([172.21.138.183]) by esebh108.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 30 Aug 2005 15:37:28 +0300 Received: from esebe105.NOE.Nokia.com ([172.21.143.53]) by esebh102.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 30 Aug 2005 15:37:12 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Date: Tue, 30 Aug 2005 15:37:11 +0300 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWq0aSH0yKv60MWTQS1Fihbq8fCXACiR64w To: , X-OriginalArrivalTime: 30 Aug 2005 12:37:12.0273 (UTC) FILETIME=[8B6EF410:01C5AD5F] X-Spam-Score: 0.3 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Thu, 01 Sep 2005 20:57:01 -0400 Cc: geopriv@ietf.org Subject: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Bernard Aboba wrote: > The "server-driven" approach also provides a mechanism to=20 > address RADEXT Issue 27 (Who's Location).=20 >=20 > One of the major problems with the RADIUS-GEOPRIV document is that=20 > it does not support user location determination, only NAS location.=20 Are you sure? The Location-Information attribute includes a field called "Entity", described as follows Entity (8 bits): Describes which location this attribute refers to: (0) describes the location of the user's client device (1) describes the location of the AAA client It looks like NAS could use this field to describe which location it's sending, or send two Location-Information attributes if it=20 knows both. Best regards, Pasi _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 20:57:04 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzrc-00069A-EF; Thu, 01 Sep 2005 20:57:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EA6SE-0001yY-8R for geopriv@megatron.ietf.org; Tue, 30 Aug 2005 09:47:10 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA13028 for ; Tue, 30 Aug 2005 09:47:08 -0400 (EDT) From: Pasi.Eronen@nokia.com Received: from mgw-ext02.nokia.com ([131.228.20.94]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EA6Tl-0001fY-IQ for geopriv@ietf.org; Tue, 30 Aug 2005 09:48:47 -0400 Received: from esebh108.NOE.Nokia.com (esebh108.ntc.nokia.com [172.21.143.145]) by mgw-ext02.nokia.com (Switch-3.1.7/Switch-3.1.7) with ESMTP id j7UDl1WA002221; Tue, 30 Aug 2005 16:47:07 +0300 Received: from esebh101.NOE.Nokia.com ([172.21.138.177]) by esebh108.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 30 Aug 2005 16:47:07 +0300 Received: from esebe105.NOE.Nokia.com ([172.21.143.53]) by esebh101.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 30 Aug 2005 16:47:06 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Date: Tue, 30 Aug 2005 16:47:06 +0300 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtZJNkIHh7ddaFT5aB36CeWz8F0wAAplxA To: X-OriginalArrivalTime: 30 Aug 2005 13:47:06.0515 (UTC) FILETIME=[4F657E30:01C5AD69] X-Spam-Score: 0.3 (/) X-Scan-Signature: d6b246023072368de71562c0ab503126 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Thu, 01 Sep 2005 20:57:01 -0400 Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Bernard Aboba wrote: > > It looks like NAS could use this field to describe which location > > it's sending, or send two Location-Information attributes if it=20 > > knows both. >=20 > But the NAS isn't sending location by default. So how does=20 > the RADIUS server that requires a given kind of location indicate=20 > what it needs? Keep in mind that if the RADIUS server REQUIRES=20 > location then it may need to send an Access-Reject.=20 A simple solution would be that a NAS that knows both the NAS and=20 user location always sends both (when sending location information). (I don't think we need more fine-grained capability negotiation=20 for this.) Best regards, Pasi _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 20:57:04 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzrc-00069Z-NM; Thu, 01 Sep 2005 20:57:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EA6ai-0004OU-OW for geopriv@megatron.ietf.org; Tue, 30 Aug 2005 09:55:56 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA13522 for ; Tue, 30 Aug 2005 09:55:54 -0400 (EDT) From: Pasi.Eronen@nokia.com Received: from mgw-ext03.nokia.com ([131.228.20.95]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EA6cG-0001wd-2e for geopriv@ietf.org; Tue, 30 Aug 2005 09:57:33 -0400 Received: from esebh106.NOE.Nokia.com (esebh106.ntc.nokia.com [172.21.138.213]) by mgw-ext03.nokia.com (Switch-3.1.7/Switch-3.1.7) with ESMTP id j7UDt9ih013148; Tue, 30 Aug 2005 16:55:14 +0300 Received: from esebh101.NOE.Nokia.com ([172.21.138.177]) by esebh106.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 30 Aug 2005 16:55:52 +0300 Received: from esebe105.NOE.Nokia.com ([172.21.143.53]) by esebh101.NOE.Nokia.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 30 Aug 2005 16:55:51 +0300 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Date: Tue, 30 Aug 2005 16:55:51 +0300 Message-ID: Thread-Topic: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtaOY7LMGO4hcdSlSbJNxx23/IbgAAJLGA To: , X-OriginalArrivalTime: 30 Aug 2005 13:55:51.0295 (UTC) FILETIME=[883090F0:01C5AD6A] X-Spam-Score: 0.3 (/) X-Scan-Signature: d6b246023072368de71562c0ab503126 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Thu, 01 Sep 2005 20:57:01 -0400 Cc: geopriv@ietf.org, radiusext@ops.ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org John Schnizlein wrote: >=20 > The inclusion of the "entity" field reintroduces the problem > we had with the initial draft, which is that no practical > mechanism has been identified through which the NAS would know > the location of the host attempting attachment. >=20 > Rather than prolong the illusion, it would be better to > eliminate this field and let the location attribute refer to > the location of the NAS. This depends on what kind of NASes you're considering. In PSTN dial-up, determining the host location probably isn't feasible, but there certainly are practical mechanisms for e.g. GSM/GPRS and IEEE 802.11 networks. Although they're not necessarily that=20 widely used, I would not call them an "illusion"... Best regards, Pasi _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 20:57:05 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzrc-00069y-Vm; Thu, 01 Sep 2005 20:57:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EA6pa-00087l-VM for geopriv@megatron.ietf.org; Tue, 30 Aug 2005 10:11:19 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA14644 for ; Tue, 30 Aug 2005 10:11:16 -0400 (EDT) Received: from ctron-dnm.enterasys.com ([12.25.1.120] ident=firewall-user) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EA6r8-0002JH-G2 for geopriv@ietf.org; Tue, 30 Aug 2005 10:12:55 -0400 Received: (from uucp@localhost) by ctron-dnm.enterasys.com (8.8.7/8.8.7) id KAA12339 for ; Tue, 30 Aug 2005 10:14:00 -0400 (EDT) Received: from nhrocavg2(134.141.79.124) by ctron-dnm.enterasys.com via smap (4.1) id xma012239; Tue, 30 Aug 05 10:13:28 -0400 Received: from NHROCCNC2.ets.enterasys.com ([134.141.79.124]) by 134.141.79.124 with InterScan Messaging Security Suite; Tue, 30 Aug 2005 10:10:41 -0400 Received: from source ([134.141.79.122]) by host ([134.141.79.124]) with SMTP; Tue, 30 Aug 2005 10:10:41 -0400 Received: from maandmbx2 ([134.141.93.31]) by NHROCCNC2.ets.enterasys.com with Microsoft SMTPSVC(5.0.2195.6713); Tue, 30 Aug 2005 10:10:40 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Subject: RE: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Date: Tue, 30 Aug 2005 10:10:40 -0400 Message-ID: <2A5E4540D4D5934D9A1E7E0B0FDB2D6901032553@MAANDMBX2.ets.enterasys.com> Thread-Topic: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtaOY7LMGO4hcdSlSbJNxx23/IbgAAJLGAAACHRcA= From: "Nelson, David" To: , X-OriginalArrivalTime: 30 Aug 2005 14:10:41.0171 (UTC) FILETIME=[9A98DE30:01C5AD6C] X-pstn-version: pmps:sps_win32_1_1_0c1 pase:2.8 X-pstn-levels: (C:78.1961 M:99.4056 P:95.9108 R:95.9108 S:48.5446 ) X-pstn-settings: 4 (0.2500:0.7500) p:13 m:13 C:14 r:13 X-pstn-addresses: from forward (org good) X-Spam-Score: 0.0 (/) X-Scan-Signature: de4f315c9369b71d7dd5909b42224370 Content-Transfer-Encoding: quoted-printable X-Mailman-Approved-At: Thu, 01 Sep 2005 20:57:01 -0400 Cc: X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Pasi Eronen writes... > This depends on what kind of NASes you're considering. In=20 > PSTN dial-up, determining the host location probably isn't=20 > feasible ... It's probably more accurate to say that in PSTN dial-up it isn't always possible to determine the host location accurately. Technologies such as ANI or Caller-ID provide that information. For the traditional land-line subscriber loop, it is very likely that the host is located within the premises served by the subscriber loop. This is almost always the case with residential customers. It will more often not be the case with commercial customers, who may have centralized outgoing trunk lines that can be accessed from a variety of locations. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 21:02:40 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzx2-00077v-Fg; Thu, 01 Sep 2005 21:02:40 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EAzx0-00077q-Ej for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 21:02:38 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA10317 for ; Thu, 1 Sep 2005 21:02:35 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EAzz1-0003Hs-3t for geopriv@ietf.org; Thu, 01 Sep 2005 21:04:46 -0400 Received: from [192.168.0.31] (pool-141-153-174-94.mad.east.verizon.net [141.153.174.94]) (user=hgs10 mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j8212Rnl029448 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 1 Sep 2005 21:02:27 -0400 (EDT) Message-ID: <4317A4A3.7010902@cs.columbia.edu> Date: Thu, 01 Sep 2005 21:02:27 -0400 From: Henning Schulzrinne Organization: Columbia University User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Andrew Newton Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft References: <3BCA326D-3ADC-42AF-A4DA-73030507E038@hxr.us> In-Reply-To: <3BCA326D-3ADC-42AF-A4DA-73030507E038@hxr.us> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.2 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Content-Transfer-Encoding: 7bit Cc: GEOPRIV , Martin Thomson X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Andrew Newton wrote: > out to be put back in (though in XML it is usually called 'lang' or > 'language'). Do we envision a receiver of PIDF-LO asking for the > Italian version of the same document after receiving the English > version? I doubt it. This is fortunately the same thing: both use RFC 3066 language tags (see http://www.w3.org/TR/2004/REC-xml-20040204/#sec-lang-tag). [Pretty soon it will be 3066bis, judging from the discussion on the ietf mailing list...] Henning _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 21:08:08 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EB02K-0001eX-Cu; Thu, 01 Sep 2005 21:08:08 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EB02J-0001eQ-9F for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 21:08:07 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA10632 for ; Thu, 1 Sep 2005 21:08:03 -0400 (EDT) Received: from jalapeno.cc.columbia.edu ([128.59.29.5] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EB04M-0003VQ-1Y for geopriv@ietf.org; Thu, 01 Sep 2005 21:10:15 -0400 Received: from [192.168.0.31] (pool-141-153-174-94.mad.east.verizon.net [141.153.174.94]) (user=hgs10 mech=PLAIN bits=0) by jalapeno.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j8217sAQ010570 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 1 Sep 2005 21:07:59 -0400 (EDT) Message-ID: <4317A5E9.6000909@cs.columbia.edu> Date: Thu, 01 Sep 2005 21:07:53 -0400 From: Henning Schulzrinne Organization: Columbia University User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Martin Thomson Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.5 X-Spam-Score: 0.2 (/) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Content-Transfer-Encoding: 7bit Cc: GEOPRIV , Andrew Newton X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org UTF-8 mostly specifies the script, but due to "Han unification", this isn't always true. In most cases, there would indeed be no need to include the script. Martin Thomson wrote: > The way I understand it is that unicode (UTF-8, UTF-16, etc...) > specifies a means of encoding characters. Every character also has an > associated script (the characters that I am using are in the script > called "latin" for instance). This is where the DHCP civic draft > confused me, and perhaps Henning can clear this up, but I think that > specifying script is redundant. That is, by specifying a particular > codepoint in one of the unicode standards, you refer to a specific > character, and that character has a script. > > The harm in including the information would be a comflict between what > one scheme is telling you, and what the other says. That sort of > conflict is dangerous - which one has precedent. If I specify character > U+203B (japanese kome) and the cyrillic script, how does that help? The > language attribute should disambiguate sufficiently (japanese kome vs. > urdu paragraph separator). _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 21:25:17 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EB0Iv-0000sQ-12; Thu, 01 Sep 2005 21:25:17 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EB0In-0000sI-V0 for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 21:25:15 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA11051 for ; Thu, 1 Sep 2005 21:25:06 -0400 (EDT) Received: from ithilien.qualcomm.com ([129.46.51.59]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EB0Kp-0003yX-L2 for geopriv@ietf.org; Thu, 01 Sep 2005 21:27:18 -0400 Received: from neophyte.qualcomm.com (neophyte.qualcomm.com [129.46.61.149]) by ithilien.qualcomm.com (8.12.10/8.12.5/1.0) with ESMTP id j821OZr7018465; Thu, 1 Sep 2005 18:24:35 -0700 (PDT) Received: from [192.168.1.4] (vpn-10-50-0-95.qualcomm.com [10.50.0.95]) by neophyte.qualcomm.com (8.12.10/8.12.5/1.0) with ESMTP id j821OVS3009709; Thu, 1 Sep 2005 18:24:32 -0700 (PDT) Mime-Version: 1.0 Message-Id: In-Reply-To: <4317A5E9.6000909@cs.columbia.edu> References: <4317A5E9.6000909@cs.columbia.edu> Date: Thu, 1 Sep 2005 18:24:29 -0700 To: Henning Schulzrinne , Martin Thomson From: Ted Hardie Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft Content-Type: text/plain; charset="us-ascii" X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 Cc: GEOPRIV , Andrew Newton X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org At 9:07 PM -0400 9/1/05, Henning Schulzrinne wrote: >UTF-8 mostly specifies the script, but due to "Han unification", this isn't always true. Also called the "CJK" unification, because the ideographs that are common to Chinese, Japanese, and Korean aren't repeated 3 times. This is to save space in the tables. The larger point, though, is what the real danger is in PIDF-LO document giving a code point and a surprising script association. I've been trying to think of cases where a code point being reported in a surprising script would actually influence the use made of the PIDF-LO in protocol processing. I haven't come up with any, largely because I don't see the "script, code point" pair getting used as a tuple. Am I missing some obvious case? The one concern I can see is attempting to use the script as a indicator of how to display something so that a surprising script is used to mask aspect of the PIDF-LO object in the rendering. If a user agent sees "Latin" and chooses a pretty but limited font as a result, then hits CJK characters, things might go missing that would be displayed. But this seems to be something to include in the Security Considerations rather than a strong risk. Is the risk greater here than it appears? regards, Ted Hardie _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 01 21:43:31 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EB0aZ-00083O-0N; Thu, 01 Sep 2005 21:43:31 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EB0aY-00083E-DE for geopriv@megatron.ietf.org; Thu, 01 Sep 2005 21:43:30 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id VAA11627 for ; Thu, 1 Sep 2005 21:43:26 -0400 (EDT) Received: from brinza.cc.columbia.edu ([128.59.29.8] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EB0cc-0004QQ-EV for geopriv@ietf.org; Thu, 01 Sep 2005 21:45:38 -0400 Received: from [192.168.0.31] (pool-141-153-174-94.mad.east.verizon.net [141.153.174.94]) (user=hgs10 mech=PLAIN bits=0) by brinza.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j821hEVZ026833 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 1 Sep 2005 21:43:14 -0400 (EDT) Message-ID: <4317AE2E.70206@cs.columbia.edu> Date: Thu, 01 Sep 2005 21:43:10 -0400 From: Henning Schulzrinne Organization: Columbia University User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Ted Hardie Subject: Re: [Geopriv] Open discussion: Revised Civic LO draft References: <4317A5E9.6000909@cs.columbia.edu> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.8 X-Spam-Score: 0.2 (/) X-Scan-Signature: 0ddefe323dd869ab027dbfff7eff0465 Content-Transfer-Encoding: 7bit Cc: GEOPRIV , Martin Thomson , Andrew Newton X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Clearly, this mis-association can happen in XML with the lang (which is really a language-script) tag, and it doesn't seem to have raised any particular concerns that I have heard, although that's probably due to my fairly limited horizon in this area. Since both the DHCP draft and XML use (or will use) http://www.ietf.org/internet-drafts/draft-ietf-ltru-registry-12.txt in whole or in part, the same security considerations there would appear to apply. There is a somewhat-related paragraph: The language tag associated with a particular information item is of no consequence whatsoever in determining whether that content might contain possible homographs. The fact that a text is tagged as being in one language or using a particular script subtag provides no assurance whatsoever that it does not contain characters from scripts other than the one(s) associated with or specified by that language tag. Henning Ted Hardie wrote: > At 9:07 PM -0400 9/1/05, Henning Schulzrinne wrote: > >>UTF-8 mostly specifies the script, but due to "Han unification", this isn't always true. > > > Also called the "CJK" unification, because the ideographs that are common to > Chinese, Japanese, and Korean aren't repeated 3 times. This is to save space > in the tables. > > The larger point, though, is what the real danger is in PIDF-LO document > giving a code point and a surprising script association. I've been trying > to think of cases where a code point being reported in a surprising script > would actually influence the use made of the PIDF-LO in protocol processing. > I haven't come up with any, largely because I don't see the "script, code point" > pair getting used as a tuple. Am I missing some obvious case? > > The one concern I can see is attempting to use the script as a indicator of > how to display something so that a surprising script is used to mask aspect > of the PIDF-LO object in the rendering. If a user agent sees "Latin" and chooses > a pretty but limited font as a result, then hits CJK characters, things might go > missing that would be displayed. But this seems to be something to include > in the Security Considerations rather than a strong risk. Is the risk greater > here than it appears? > > regards, > Ted Hardie _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 09:49:00 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBYOC-0002T0-Ce; Sat, 03 Sep 2005 09:49:00 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBYOA-0002Rn-K8 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 09:48:58 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA05961 for ; Sat, 3 Sep 2005 09:48:57 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBYQW-0001B4-9v for geopriv@ietf.org; Sat, 03 Sep 2005 09:51:25 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j83DmjI0012010 for ; Sat, 3 Sep 2005 15:48:45 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j83DmjKw006830 for ; Sat, 3 Sep 2005 15:48:45 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 15:48:45 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 15:48:44 +0200 Message-ID: Thread-Topic: two additional place types Thread-Index: AcWwjh0gUcvE6T84Q5KfdrM3fwCcCQ== From: "Tschofenig, Hannes" To: X-OriginalArrivalTime: 03 Sep 2005 13:48:45.0276 (UTC) FILETIME=[33EA39C0:01C5B08E] X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] two additional place types X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi all,=20 we (henning and myself) noticed that it might be useful to add two additiol place types, namely:=20 other: The entity is in a place but the place cannot be assigned to one of the registered place types. unknown: The type of place is unknown. should we add these two types?=20 ciao hannes _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 10:02:58 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBYbi-0004y3-PZ; Sat, 03 Sep 2005 10:02:58 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBYbh-0004xy-26 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 10:02:57 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA06686 for ; Sat, 3 Sep 2005 10:02:55 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBYe2-0001du-U4 for geopriv@ietf.org; Sat, 03 Sep 2005 10:05:24 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j83E2kOE019172 for ; Sat, 3 Sep 2005 16:02:46 +0200 Received: from fthw9xoa.ww002.siemens.net (fthw9xoa.ww002.siemens.net [157.163.133.201]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j83E2kTp013995 for ; Sat, 3 Sep 2005 16:02:46 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xoa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 16:02:46 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 16:02:45 +0200 Message-ID: Thread-Topic: Next steps for the 'Location Types Registry' draft Thread-Index: AcWwkCZ9wa1PnjLbTyyVqcTVW7BVGA== From: "Tschofenig, Hannes" To: X-OriginalArrivalTime: 03 Sep 2005 14:02:46.0113 (UTC) FILETIME=[2917C510:01C5B090] X-Spam-Score: 0.0 (/) X-Scan-Signature: 30ac594df0e66ffa5a93eb4c48bcb014 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] Next steps for the 'Location Types Registry' draft X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi all,=20 as part of the wglc for the location types registry draft we received feedback regarding the usage of english for the different location types. i could not see a consensus with respect to this issue and i would like to see suggestions on how to move forward. =20 ciao hannes _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 10:23:11 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBYvH-0001du-QY; Sat, 03 Sep 2005 10:23:11 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBYvG-0001dp-9h for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 10:23:10 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA09091 for ; Sat, 3 Sep 2005 10:23:08 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBYxd-0002MC-JQ for geopriv@ietf.org; Sat, 03 Sep 2005 10:25:37 -0400 Received: from [192.168.0.31] (pool-141-153-174-94.mad.east.verizon.net [141.153.174.94]) (user=hgs10 mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j83EN5wT027914 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sat, 3 Sep 2005 10:23:06 -0400 (EDT) Message-ID: <4319B1BD.1030005@cs.columbia.edu> Date: Sat, 03 Sep 2005 10:22:53 -0400 From: Henning Schulzrinne Organization: Columbia University User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Tschofenig, Hannes" Subject: Re: [Geopriv] Next steps for the 'Location Types Registry' draft References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.2 (/) X-Scan-Signature: 41c17b4b16d1eedaa8395c26e9a251c4 Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org It is sometimes difficult to reach consensus on a mailing list, as peetering out of a discussion can either indicate that the proponent of a particular solution or approach has been convinced by the arguments of other solutions or that he or she has simply given up. There seem to be two somewhat separate issues: (1) Should the current initial registry use english words or some other token, such as a number. (2) Should the registry restrict future registrations to being (American) English words. I thought there was a recognition that - the token registered are not usually made directly visible to end users (*); - thus, they are protocol tokens that are, by consensus of the IETF reflected in relevant RFCs, not subject to I18N, no different from, say, the RPID XML element names or HTTP protocol header names. - numeric identifiers could be used, but would offer no significant advantages, but rather decrease readability and complicate debugging. After all, we don't use numeric header names or random letter strings in SMTP or HTTP, either. We have always assumed that implementors of IETF standards understand English - otherwise, they'd have difficulty programming in any known programming language except maybe APL or reading the RFC to begin with. This seems to argue for leaving (1) as is. For issue (2): I don't think registries of tokens and namespaces have typically specified the language to be used for future registrations. This would be handled as part of the normal review process specified for the registry. It seems likely that such a review would reject names designating the same location just in a different language and may consider whether the use of non-English names is likely to further interoperability. Given the lack of precedent and the low likelihood of having to deal with this issue in practice, it seems easiest just to punt here and not call out that facet of the registration review. Otherwise, we might have to get into whether the FCC-certified "dirty" words are allowable and who knows what other issues. (*) Even English language user interfaces may, for example, replace hyphens by space or translate single-word names into more descriptive phrases. Is this is a reasonable summary? Henning Tschofenig, Hannes wrote: > hi all, > > as part of the wglc for the location types registry draft we received > feedback regarding the usage of english for the different location > types. i could not see a consensus with respect to this issue and i > would like to see suggestions on how to move forward. > > ciao > hannes > > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 11:44:49 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBaCH-0007i0-LE; Sat, 03 Sep 2005 11:44:49 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBaCF-0007hv-V1 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 11:44:48 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA12240 for ; Sat, 3 Sep 2005 11:44:45 -0400 (EDT) Received: from zak.hxr.us ([216.93.167.200] helo=zak.ecotroph.net) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBaEc-0004du-0u for geopriv@ietf.org; Sat, 03 Sep 2005 11:47:16 -0400 Received: from [10.0.1.5] ([::ffff:64.83.8.178]) (AUTH: PLAIN anewton, SSL: TLSv1/SSLv3,128bits,RC4-SHA) by zak.ecotroph.net with esmtp; Sat, 03 Sep 2005 11:44:36 -0400 id 000C7E51.4319C4E4.000073E4 In-Reply-To: References: Mime-Version: 1.0 (Apple Message framework v734) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Andrew Newton Subject: Re: [Geopriv] Next steps for the 'Location Types Registry' draft Date: Sat, 3 Sep 2005 11:44:30 -0400 To: "Tschofenig, Hannes" X-Mailer: Apple Mail (2.734) X-Spam-Score: 0.0 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org On Sep 3, 2005, at 10:02 AM, Tschofenig, Hannes wrote: > i could not see a consensus with respect to this issue and i > would like to see suggestions on how to move forward. Putting my co-chair hat on here: I did not see consensus around changing this draft to use numeric values nor to address the issue of the tokens being considered anything other than protocol elements (and thus not subject to additional I18N considerations). This draft will progress to the IESG using its current technical form. To accommodate the addition of the 'other' and 'unknown' place types to be placed in this draft now rather than being placed in the IANA registry separately, working group last call will be extended one additional week until 10 September 2005 in order for participants to voice any objections to these two new place types. -andy _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 12:34:33 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBayP-0000S0-27; Sat, 03 Sep 2005 12:34:33 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBayO-0000Rv-CY for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 12:34:32 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA13917 for ; Sat, 3 Sep 2005 12:34:29 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBb0l-00061Q-IK for geopriv@ietf.org; Sat, 03 Sep 2005 12:37:01 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j83GY4iD002179; Sat, 3 Sep 2005 18:34:04 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83GY4WC006934; Sat, 3 Sep 2005 18:34:04 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 18:34:03 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: AW: [Geopriv] Next steps for the 'Location Types Registry' draft Date: Sat, 3 Sep 2005 18:34:03 +0200 Message-ID: Thread-Topic: [Geopriv] Next steps for the 'Location Types Registry' draft Thread-Index: AcWwkwty9WNi7S1FRy6MKHHfRjYHkQAEdVig From: "Tschofenig, Hannes" To: "Henning Schulzrinne" X-OriginalArrivalTime: 03 Sep 2005 16:34:03.0900 (UTC) FILETIME=[4BE023C0:01C5B0A5] X-Spam-Score: 0.0 (/) X-Scan-Signature: f66b12316365a3fe519e75911daf28a8 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi henning,=20 thanks for your quick feedback. i fully agree with everything you wrote. nice summary.=20 ciao hannes > It is sometimes difficult to reach consensus on a mailing list, as=20 > peetering out of a discussion can either indicate that the=20 > proponent of=20 > a particular solution or approach has been convinced by the=20 > arguments of=20 > other solutions or that he or she has simply given up. >=20 > There seem to be two somewhat separate issues: >=20 > (1) Should the current initial registry use english words or=20 > some other=20 > token, such as a number. >=20 > (2) Should the registry restrict future registrations to being=20 > (American) English words. >=20 > I thought there was a recognition that >=20 > - the token registered are not usually made directly visible to end=20 > users (*); >=20 > - thus, they are protocol tokens that are, by consensus of the IETF=20 > reflected in relevant RFCs, not subject to I18N, no different=20 > from, say,=20 > the RPID XML element names or HTTP protocol header names. >=20 > - numeric identifiers could be used, but would offer no significant=20 > advantages, but rather decrease readability and complicate debugging.=20 > After all, we don't use numeric header names or random letter=20 > strings in=20 > SMTP or HTTP, either. We have always assumed that=20 > implementors of IETF=20 > standards understand English - otherwise, they'd have difficulty=20 > programming in any known programming language except maybe APL or=20 > reading the RFC to begin with. >=20 > This seems to argue for leaving (1) as is. >=20 > For issue (2): I don't think registries of tokens and namespaces have=20 > typically specified the language to be used for future registrations.=20 > This would be handled as part of the normal review process=20 > specified for=20 > the registry. It seems likely that such a review would reject names=20 > designating the same location just in a different language and may=20 > consider whether the use of non-English names is likely to further=20 > interoperability. Given the lack of precedent and the low=20 > likelihood of=20 > having to deal with this issue in practice, it seems easiest just to=20 > punt here and not call out that facet of the registration review.=20 > Otherwise, we might have to get into whether the=20 > FCC-certified "dirty"=20 > words are allowable and who knows what other issues. >=20 > (*) Even English language user interfaces may, for example, replace=20 > hyphens by space or translate single-word names into more descriptive=20 > phrases. >=20 > Is this is a reasonable summary? >=20 > Henning >=20 >=20 > Tschofenig, Hannes wrote: > > hi all,=20 > >=20 > > as part of the wglc for the location types registry draft=20 > we received > > feedback regarding the usage of english for the different location > > types. i could not see a consensus with respect to this issue and i > > would like to see suggestions on how to move forward. =20 > >=20 > > ciao > > hannes > >=20 > > _______________________________________________ > > Geopriv mailing list > > Geopriv@ietf.org > > https://www1.ietf.org/mailman/listinfo/geopriv >=20 >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 13:32:04 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBbs4-0002CD-1f; Sat, 03 Sep 2005 13:32:04 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBbs2-0002C8-Ob for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 13:32:02 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA16432 for ; Sat, 3 Sep 2005 13:31:59 -0400 (EDT) Received: from zctfs063.nortelnetworks.com ([47.164.128.120]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBbuP-0007gi-Us for geopriv@ietf.org; Sat, 03 Sep 2005 13:34:31 -0400 Received: from zharhxm0.corp.nortel.com (zharhxm0.corp.nortel.com [47.165.48.148]) by zctfs063.nortelnetworks.com (Switch-2.2.6/Switch-2.2.0) with ESMTP id j83HVhJ27925; Sat, 3 Sep 2005 19:31:44 +0200 (MEST) Received: from zcarhxp0.corp.nortel.com ([47.129.230.91]) by zharhxm0.corp.nortel.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 3 Sep 2005 18:31:43 +0100 Received: from [127.0.0.1] ([47.130.16.154] RDNS failed) by zcarhxp0.corp.nortel.com with Microsoft SMTPSVC(6.0.3790.211); Sat, 3 Sep 2005 13:31:41 -0400 Message-ID: <4319DDF9.5000008@nortel.com> Date: Sat, 03 Sep 2005 13:31:37 -0400 From: "Tom-PT Taylor" User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Tschofenig, Hannes" Subject: Re: [Geopriv] Next steps for the 'Location Types Registry' draft References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 03 Sep 2005 17:31:41.0757 (UTC) FILETIME=[58EB3ED0:01C5B0AD] X-Spam-Score: 0.0 (/) X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581 Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org I withdraw my intervention on the topic. I forgot that the content will be embedded in English-like XML headers, and it's all of a piece. Tschofenig, Hannes wrote: > hi all, > > as part of the wglc for the location types registry draft we received > feedback regarding the usage of english for the different location > types. i could not see a consensus with respect to this issue and i > would like to see suggestions on how to move forward. > > ciao > hannes > > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv > > _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:36:30 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdoU-0005EL-Qz; Sat, 03 Sep 2005 15:36:30 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdoT-0005E3-P4 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:36:29 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21450 for ; Sat, 3 Sep 2005 15:36:27 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdqr-0002Ph-KX for geopriv@ietf.org; Sat, 03 Sep 2005 15:38:59 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83JaCsF015446; Sat, 3 Sep 2005 21:36:12 +0200 Received: from fthw9xoa.ww002.siemens.net (fthw9xoa.ww002.siemens.net [157.163.133.201]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j83JaCBD001666; Sat, 3 Sep 2005 21:36:12 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xoa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:36:12 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 21:36:11 +0200 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWqoGQwqccTAWBcR4+Uy5YMxb5lqwGC2F2Q From: "Tschofenig, Hannes" To: "Bernard Aboba" , , X-OriginalArrivalTime: 03 Sep 2005 19:36:12.0185 (UTC) FILETIME=[BDA41890:01C5B0BE] X-Spam-Score: 0.0 (/) X-Scan-Signature: 67c1ea29f88502ef6a32ccec927970f0 Content-Transfer-Encoding: quoted-printable Cc: Subject: [Geopriv] AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi bernard,=20 thanks for summarizing the potential options regarding this particular = issue.=20 please find my feedback inline:=20 > -----Urspr=FCngliche Nachricht----- > Von: owner-radiusext@ops.ietf.org=20 > [mailto:owner-radiusext@ops.ietf.org] Im Auftrag von Bernard Aboba > Gesendet: Samstag, 27. August 2005 02:43 > An: radiusext@ops.ietf.org; geopriv@ietf.org > Betreff: Re: Review of draft-ietf-geopriv-radius-lo-04.txt >=20 >=20 > In thinking about the problem of capabilities negotiation within the=20 > RADIUS-GEOPRIV document, it is not clear to me that it is=20 > necessary for a=20 > NAS to advertise location support.=20 the problem was the following. the nas might support=20 - civic location - geospatial location - both=20 (or nothing)=20 the radius server might also understand either civic, geospatial or = both.=20 when we tried to mandate civic location as the default that has to be = understood i was told that this is not possible in all environments. = geospatial is not possible as a default either.=20 now, the idea was include something in the first exchange from the nas = to the aaa server to allow the aaa server to determine whether he = actually understands the format that can be provided by the nas.=20 whether the desire to support this functionality justifies the = introduction of an avp is subject for discussion.=20 based on the feedback from the current mailing list thread at least you = do not seem to be in favor of it.=20 >=20 > Instead, the NAS can be set by default not to send location=20 > attributes=20 > unless the server asks for them. The problem then reduces to how the=20 > server communicates its needs to the NAS.=20 >=20 > There are several cases of interest:=20 >=20 > 1) The RADIUS server REQUIRES the NAS to provide location > in the Access-Request (e.g. it implements location-based=20 > access control). > In this case the RADIUS server can send an Access-Reject with an=20 > Error-Cause attribute with a value of "Location Required". from previous discussions i remember that this was not the best approach = particularly if many radius server want to obtain location information = from the nas.=20 =20 > Alternatively if the authentication mechanism (e.g. EAP) supports=20 > Access-Challenges, the RADIUS server can place a "Send=20 > location" attribute in the Challenge. this was the approach that was suggested to us in previous discussions.=20 sounds good to me.=20 > On receiving either of these=20 > indications, the NAS includes location attributes in the=20 > Access-Request.=20 > Note that the server's decision is not influenced by whether=20 > the client=20 > has advertised location support, only by the inclusion of location=20 > attributes in the Access-Request. i guess you would suggest to return an access reject if the the nas is = unable to understand the returned location information format.=20 >=20 > 2) The RADIUS server does not require location in the Access-Request, > but would like location attributes to be included in=20 > Accounting packets,=20 > if available. In this case, the RADIUS server sends an Access-Accept > including a "Send location" attribute, sounds good to me.=20 > perhaps specifying=20 > more details on > how location should be provided (e.g. Accounting-Stop only, interim > records, civil/geographic, etc.). this requirement hasn't be presented to me yet.=20 >=20 > Since the RADIUS server does not require location attributes,=20 > a legacy NAS=20 > can ignore the "send location" attribute with no ill effects.=20 > This is how=20 > legacy NAS implementations behave, and the "Issues and > Fixes" document indicates that this is in fact the correct behavior. > If the NAS does understand the "send location" attribute then it will > send location in the Accounting packets as requested. >=20 > Am I missing something, or is the problem really this simple?=20 i hope it is simple.=20 ciao hannes >=20 >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:36:53 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdor-0005GL-1V; Sat, 03 Sep 2005 15:36:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdoo-0005GG-W7 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:36:51 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21490 for ; Sat, 3 Sep 2005 15:36:49 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdrE-0002Pz-Pp for geopriv@ietf.org; Sat, 03 Sep 2005 15:39:21 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83JafAH015572; Sat, 3 Sep 2005 21:36:41 +0200 Received: from fthw9xoa.ww002.siemens.net (fthw9xoa.ww002.siemens.net [157.163.133.201]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83Jafuf026326; Sat, 3 Sep 2005 21:36:41 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xoa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:36:41 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 21:36:40 +0200 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWq0YRohhlW5aKLScOYqrgJc6yAswF4sVCg From: "Tschofenig, Hannes" To: "Bernard Aboba" , X-OriginalArrivalTime: 03 Sep 2005 19:36:41.0059 (UTC) FILETIME=[CED9EB30:01C5B0BE] X-Spam-Score: 0.0 (/) X-Scan-Signature: 02ec665d00de228c50c93ed6b5e4fc1a Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org Subject: [Geopriv] AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi bernard,=20 i guess there is a misunderstand here with regard to the functionality of the radius-geopriv draft.=20 joel raised this issue and we discussed it.=20 we always supported the idea of providing location for the end host. we had a very, very long discussion about this topic when we merged the two radius-geopriv drafts. what has been changed as part of joel's issue was - the name of the avp (since it was misleading) and - the description to address joel's comments this issue has been resolved on the mailing list and i also had further off-list discussions with joel. i think you do not treat me fair with your statement that this issue has not been fixed 9 months later.=20 ciao hannes > > > > Am I missing something, or is the problem really this simple?=20 > > >=20 > > > It would appear so. >=20 > The "server-driven" approach also provides a mechanism to=20 > address RADEXT=20 > Issue 27 (Who's Location).=20 >=20 > One of the major problems with the RADIUS-GEOPRIV document is that it=20 > does not support user location determination, only NAS location.=20 >=20 > This is a problem for vendors who are shipping APs with built-in=20 > location support that enables APs to pinpint the location of=20 > associated=20 > stations. At least one RADIUS server implementation now supports=20 > "location-based access control". Why can't the RADIUS-GEOPRIV=20 > specification be used to send user as well as NAS location?=20 >=20 > This basic problem with the document was pointed out in=20 > November 2004, but=20 > has still not been fixed in August 2005, 9 months later. =20 >=20 > However, using the "server-driven" approach, the problem would =20 > not be hard to address. In the "send location" attribute=20 > included by the=20 > server, the server can specify what type of location data it=20 > is looking=20 > for - user or NAS. =20 >=20 > Note that layer 2 standards such as IEEE 802.11k already enable this=20 > distinction. In IEEE 802.11k a station can ask either for its own=20 > location or the location of the AP. =20 >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:38:05 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdq1-0005J4-89; Sat, 03 Sep 2005 15:38:05 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdpx-0005Iz-58 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:38:03 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21504 for ; Sat, 3 Sep 2005 15:37:59 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdsL-0002Qx-W0 for geopriv@ietf.org; Sat, 03 Sep 2005 15:40:31 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83Jbo2n015954; Sat, 3 Sep 2005 21:37:50 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j83JboMC002543; Sat, 3 Sep 2005 21:37:50 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:37:49 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: AW: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Date: Sat, 3 Sep 2005 21:37:49 +0200 Message-ID: Thread-Topic: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtZJV34OSkDfnHQXS3f/BF2r56pADUB3QA From: "Tschofenig, Hannes" To: "Bernard Aboba" , X-OriginalArrivalTime: 03 Sep 2005 19:37:49.0938 (UTC) FILETIME=[F7E80520:01C5B0BE] X-Spam-Score: 0.0 (/) X-Scan-Signature: a7d6aff76b15f3f56fcb94490e1052e4 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, radiusext@ops.ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi bernard,=20 please find a comment below:=20 > > Are you sure? The Location-Information attribute includes a field > > called "Entity", described as follows > >=20 > > Entity (8 bits): > > Describes which location this attribute refers to: > > (0) describes the location of the user's client device > > (1) describes the location of the AAA client > >=20 > > It looks like NAS could use this field to describe which location > > it's sending, or send two Location-Information attributes if it=20 > > knows both. >=20 > But the NAS isn't sending location by default. So how does=20 > the RADIUS=20 > server that requires a given kind of location indicate what=20 > it needs? Keep=20 > in mind that if the RADIUS server REQUIRES location then it=20 > may need to=20 > send an Access-Reject.=20 we tried to respect the fact that people indicated that there might be a scenario where the nas does not know the location of the end host. if this is the case then the nas can only send its own location information. if it can include the location information of the end host (in case it is known) then the more precise info is sent.=20 you seem to suggest that we add functionality to allow the radius server to request what information (end host vs. nas) it would like to see. we haven't yet heard this requirement and hence we haven't added it.=20 ciao hannes >=20 > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:38:59 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdqt-0005OB-F8; Sat, 03 Sep 2005 15:38:59 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdqs-0005O6-34 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:38:58 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21515 for ; Sat, 3 Sep 2005 15:38:56 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdtG-0002TR-QB for geopriv@ietf.org; Sat, 03 Sep 2005 15:41:28 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j83Jckwc003886; Sat, 3 Sep 2005 21:38:46 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j83JckKE002792; Sat, 3 Sep 2005 21:38:46 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:38:46 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 21:38:46 +0200 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtZJNkIHh7ddaFT5aB36CeWz8F0wAAplxAANNmMbA= From: "Tschofenig, Hannes" To: , X-OriginalArrivalTime: 03 Sep 2005 19:38:46.0484 (UTC) FILETIME=[199C4140:01C5B0BF] X-Spam-Score: 0.0 (/) X-Scan-Signature: e1e48a527f609d1be2bc8d8a70eb76cb Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi pasi,=20 >=20 > Bernard Aboba wrote: >=20 > > > It looks like NAS could use this field to describe which location > > > it's sending, or send two Location-Information attributes if it=20 > > > knows both. > >=20 > > But the NAS isn't sending location by default. So how does=20 > > the RADIUS server that requires a given kind of location indicate=20 > > what it needs? Keep in mind that if the RADIUS server REQUIRES=20 > > location then it may need to send an Access-Reject.=20 >=20 > A simple solution would be that a NAS that knows both the NAS and=20 > user location always sends both (when sending location information). that's also possible and the document allows to include both information elements.=20 in a small network (such as a wlan hotspot) it might not really matter whether you provide the location of the end host or the nas since it might be almost the same (depending on the granularity of the location information). a lot depends on the deployment scenario.=20 >=20 > (I don't think we need more fine-grained capability negotiation=20 > for this.) i am not sure either.=20 ciao hannes >=20 > Best regards, > Pasi >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:41:58 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdtm-0006K4-5V; Sat, 03 Sep 2005 15:41:58 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdtk-0006Jz-KU for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:41:56 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21681 for ; Sat, 3 Sep 2005 15:41:55 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdwA-0002Z7-GM for geopriv@ietf.org; Sat, 03 Sep 2005 15:44:27 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83JfkIw017793; Sat, 3 Sep 2005 21:41:47 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83Jfk0u028645; Sat, 3 Sep 2005 21:41:46 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:41:46 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 21:41:46 +0200 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtd+xTBavK2/6QSFejJPbgoWdrQgDPP0yQ From: "Tschofenig, Hannes" To: "Bernard Aboba" , X-OriginalArrivalTime: 03 Sep 2005 19:41:46.0515 (UTC) FILETIME=[84EACE30:01C5B0BF] X-Spam-Score: 0.0 (/) X-Scan-Signature: 9466e0365fc95844abaf7c3f15a05c7d Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi bernard,=20 > > A simple solution would be that a NAS that knows both the NAS and=20 > > user location always sends both (when sending location information). > >=20 > > (I don't think we need more fine-grained capability negotiation=20 > > for this.) >=20 > I agree that this would work and also agree that capability=20 > negotiation is=20 > not needed. However, I thought that the idea was not to send=20 > any location=20 > data by default.=20 location is not sent by default.=20 the aspect is similar to the civic vs. geospatial discussion. you could send both, if you have it. sometimes you just don't have civic and geospatial location information (depending on the deployment).=20 ciao hannes >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:42:09 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdtx-0006Kk-J4; Sat, 03 Sep 2005 15:42:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdtv-0006Kf-N7 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:42:07 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21687 for ; Sat, 3 Sep 2005 15:42:06 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdwL-0002ZC-JJ for geopriv@ietf.org; Sat, 03 Sep 2005 15:44:38 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j83JfGou004850; Sat, 3 Sep 2005 21:41:16 +0200 Received: from fthw9xoa.ww002.siemens.net (fthw9xoa.ww002.siemens.net [157.163.133.201]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83JfGr6028022; Sat, 3 Sep 2005 21:41:16 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xoa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:41:15 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: AW: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Date: Sat, 3 Sep 2005 21:41:15 +0200 Message-ID: Thread-Topic: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWtaMxWbRq6Ka7eRCSOl2uupGi3TwDTANAg From: "Tschofenig, Hannes" To: "John Schnizlein" , "Bernard Aboba" X-OriginalArrivalTime: 03 Sep 2005 19:41:15.0806 (UTC) FILETIME=[729CFBE0:01C5B0BF] X-Spam-Score: 0.0 (/) X-Scan-Signature: 244a2fd369eaf00ce6820a760a3de2e8 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, Pasi.Eronen@nokia.com, radiusext@ops.ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi john,=20 > The inclusion of the "entity" field reintroduces the problem we had=20 > with the initial draft, which is that no practical mechanism has been=20 > identified through which the NAS would know the location of the host=20 > attempting attachment. i wonder why you believe that these mechanisms are not available today. a number of other people have already provided you with references to existing products.=20 let me add two links that explain how location determination works in a wlan environment:=20 http://www.tkn.tu-berlin.de/publications/papers/hoene_paper2.pdf=20 http://www.tkn.tu-berlin.de/publications/papers/tkn_04_16_paper3.pdf (there are certainly more papers about this subject available and i guess i do not again need to mention 3g networks.)=20 i have a question for you: you are the co-author of rfc 3825. now, consider the discussions we have in the emergency context (in geopriv & ecrit) and the idea to provide location information using dhcp to the end host for inclusion into an emergency call. do you think that there is a relationship between the location of the dhcp server/dhcp relay and the location of the end host? >=20 > Rather than prolong the illusion, it would be better to=20 > eliminate this=20 > field and let the location attribute refer to the location of the NAS. ciao hannes >=20 > John >=20 > On Aug 30, 2005, at 9:11 AM, Bernard Aboba wrote: >=20 > >> Are you sure? The Location-Information attribute includes a field > >> called "Entity", described as follows > >> > >> Entity (8 bits): > >> Describes which location this attribute refers to: > >> (0) describes the location of the user's client device > >> (1) describes the location of the AAA client > >> > >> It looks like NAS could use this field to describe which location > >> it's sending, or send two Location-Information attributes if it > >> knows both. > > > > But the NAS isn't sending location by default. So how does=20 > the RADIUS > > server that requires a given kind of location indicate what=20 > it needs?=20 > > Keep > > in mind that if the RADIUS server REQUIRES location then it=20 > may need to > > send an Access-Reject. > > >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:42:58 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBduk-0006MM-QG; Sat, 03 Sep 2005 15:42:58 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBduj-0006MH-A0 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:42:57 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21713 for ; Sat, 3 Sep 2005 15:42:55 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdx8-0002a7-T7 for geopriv@ietf.org; Sat, 03 Sep 2005 15:45:27 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83JglAq018089 for ; Sat, 3 Sep 2005 21:42:47 +0200 Received: from fthw9xoa.ww002.siemens.net (fthw9xoa.ww002.siemens.net [157.163.133.201]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83Jglrl028962 for ; Sat, 3 Sep 2005 21:42:47 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xoa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:42:47 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 21:42:46 +0200 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWo8A/km+mCKm1JQt64CuaB9FrsHgHyfydQAAFjnLA= From: "Tschofenig, Hannes" To: X-OriginalArrivalTime: 03 Sep 2005 19:42:47.0071 (UTC) FILETIME=[A902EAF0:01C5B0BF] X-Spam-Score: 0.0 (/) X-Scan-Signature: a0534e6179a1e260079328e8b03c7901 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] WG: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org fyi, -----Urspr=FCngliche Nachricht----- Von: Tschofenig, Hannes=20 Gesendet: Samstag, 3. September 2005 21:42 An: 'Bernard Aboba'; radiusext@ops.ietf.org Betreff: AW: Review of draft-ietf-geopriv-radius-lo-04.txt hi bernard,=20 please find my comments below:=20 > Review of draft-ietf-geopriv-radius-lo-04.txt >=20 > The RADEXT WG Issues page discloses that 13 issues remain open against > this document: > http://www.drizzle.com/~aboba/RADEXT/ >=20 > Based on a preliminary review of the -04 version, it appears that some > of these open issues still have not been addressed. Some=20 > notes below:=20 >=20 > Section 2 >=20 > " Furthermore, the authors believe that there is a relationship > between the location of the network and the location of the entity > that triggered the network access authentication. Knowing the > location of a network (where the user or end host is attached to) > might in many networks also reveal the location of the user or end > host. In some networks it is even possible to provide a accurate > location of the user or end host. A similar assumption is=20 > also made > with regard to the location information obtained via DHCP (see for > example [4]). This information might be used by applications in > other protocols (such as SIP [12] with extensions [13]) to indicate > the location of a particular user even though the location "only" > refers to the location of the network or equipment within the > network. The assumption here is also that the location of the > network has some relationship to the location of the end host (and > subsequently to a user). This assumption might not hold in all > scenarios. Nevertheless, it seems to be reasonable." >=20 > RADEXT Issue 27 points out that this assumption is > not correct -- the location of the peer and the location of the > NAS are not the same thing. There are APs today that are capable > of providing the location of the user with a high degree of accuracy.=20 > Can those APs use this specification to provide the NAS and peer > location information independently?=20 i guess this is an issue that we could potentially discuss forever.=20 in fact we discussed this issue for a long time and this particular = paragraph was added based on joel's comments.=20 technology exists to determine the location of the end host. the draft = allows to add this location information for transmission to the radius = server. if the location of the end host cannot be determined then all = you can do is to provide information about the nas (since you don't have = anything else).=20 >=20 > Section 3.2 >=20 > RADEXT Issue 74 points out problems with the way this document uses > RFC 3576. =20 >=20 > The COA message may instruct the > access network to generate an Authorize-Only=20 > Access-Request (Access- > Request with Service-Type set to "Authorize-Only") in=20 > which case the > NAS MUST include the location infromation in this Access-Request. >=20 > This paragraph appears to retroactively update RFC 3576. =20 >=20 > Upon receiving the Authorize-Only message from the access network, > the AAA server MUST respond with either an Access-Accept message or > an Access-Reject message. >=20 > This also sounds like an update of RFC 3576. Why should RFC 3576=20 > behavior be different when location attributes are included?=20 >=20 > More fundamentally, why does RFC 3576 need to be used to=20 > obtain location=20 > information in mid-session when the same info is available in=20 > Accounting=20 > packets? Or is the issue that location data may not be included in=20 > Interim accounting information? I didn't notice a way that the RADIUS > server can configure the way the NAS sends location info=20 > (e.g. don't send=20 > in interims, send at a given interval different from the=20 > interim interval,=20 > etc.) i need to forward this issue to avi since he wrote this paragraph.=20 >=20 > Section 4 >=20 > How the network obtains the user's > location information is out of the scope of this document.=20 >=20 > See RADEXT Issue 27. Obtaining the peer location is one of the > fundamental usage scenarios for RADIUS-based location information. > If this is out of scope for this specification, a different=20 > specification will be needed to address that issue. Why not handle > both issues within the same document?=20 the technology for location determination of the end hosts location = information depends on factors that are outside the scope of this = document. manual configuration, triangulation, usage of location = protocols developed in other standardization organization, etc. are = examples.=20 it is not uncommon to treat some topic as out-of-scope if they touch a = different area.=20 >=20 > Section 8 >=20 > The capability attribute allows the RADIUS client to=20 > indicate whether > civic and/or geospatial location information can be provided to the > RADIUS server. This is useful to avoid sending location=20 > information > with every request if no further out-of-band arrangements are made > with regard to the transport of location information. The=20 > AAA server > uses the capability attribute to indicate that the AAA=20 > client has to > provide civic and/or geospatial location information as=20 > part of this > particular protocol exchange. If the AAA server does not send a > capability attribute then the AAA client MUST NOT return location > information. The user's authorization policies MUST be=20 > consulted by > the AAA server before requesting location information delivery from > the AAA client. If the AAA server encounters that the AAA client > does not support the desired location information it might respond > with an Access-Reject with the corresponding error cause attribute > (with the Location-Info-Required error code). >=20 > The above paragraph seems vague about the nature of the capability > negotiation. Terms like "might respond" imply a range of > acceptable behaviors, which could result in interoperability=20 > problems.=20 >=20 > Since Access-Requests are initiated by the NAS, there is no way > for the NAS to know beforehand whether a given RADIUS server requires > location information or not. However, a NAS might default to not > sending location information and then if the AAA server sends back > an Access-Reject with a Location-Info-Required error code, then it > could enable it. This seems to handle the case where the RADIUS > server requires location (e.g. won't grant access without it).=20 >=20 > Based on the rest of Section 8, it appears that there are other > scenarios in which the RADIUS server might like location information=20 > if available, but does not require it. In these cases, the=20 > RADIUS server could send back an Access-Accept with a request for > location information, specifying what kind of location it is > asking for (NAS or peer). If the NAS does not understand > the attribute it will ignore it. >=20 > Overall, it is not clear to me why the Capability attribute=20 > is needed, or=20 > if so, what the goal is. =20 i have read your other mails about this subject as well and i appreciate = to receive feedback about it. it is good to hear opinion from other people.=20 if people in general think that the capability exchange is not need and = other mechanisms provide similar characteristics (as discussed in other = mails) than i am happy to change it.=20 >=20 > Section 11 >=20 > Why is a capability attribute needed in an Access-Challenge? Why > is "Location-Info-Required" a new attribute rather than a value > of Error-Cause? Why are Basic-Policy-Rules, Extended-Policy-Rules, > Capability and Location-Info-Required attributes allowed in an=20 > Access-Reject? i incorporated this proposal based on the feedback i got. now, i get the = feedback i want and that's good.=20 unfortunately it turns out to be quite complicated to have two working = groups working on a single document. i wasn't even able to attend the = ietf#62 meeting where this particular issue was discussed (since it was = ironically conflicting with the geopriv meeting, if i remember it = correctly).=20 after reviewing all the mails regarding the review of = draft-ietf-geopriv-radius-lo-04.txt it appears that most issues are = refer to the capability exchange. i suspect that resolving the = capability exchange issue will resolve the main concerns.=20 ciao hannes =20 >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 15:43:47 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdvX-0006R4-14; Sat, 03 Sep 2005 15:43:47 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBdvV-0006Qz-2q for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 15:43:45 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA21727 for ; Sat, 3 Sep 2005 15:43:43 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBdxu-0002ar-Ud for geopriv@ietf.org; Sat, 03 Sep 2005 15:46:15 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83JhZl4018946 for ; Sat, 3 Sep 2005 21:43:35 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83JhZVi029139 for ; Sat, 3 Sep 2005 21:43:35 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 21:43:35 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 21:43:34 +0200 Message-ID: Thread-Topic: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWpg3Fk/j6xodwSQmq/5S0yMYbytAHIwH9QAAZSQ6A= From: "Tschofenig, Hannes" To: X-OriginalArrivalTime: 03 Sep 2005 19:43:35.0140 (UTC) FILETIME=[C5A9AA40:01C5B0BF] X-Spam-Score: 0.0 (/) X-Scan-Signature: 9ed51c9d1356100bce94f1ae4ec616a9 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] WG: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org fyi, -----Urspr=FCngliche Nachricht----- Von: Tschofenig, Hannes=20 Gesendet: Samstag, 3. September 2005 21:35 An: 'Bernard Aboba'; Nelson, David Cc: radiusext@ops.ietf.org Betreff: AW: Review of draft-ietf-geopriv-radius-lo-04.txt hi bernard,=20 thanks for keeping track of the issues at your radext webpage. i had the = impression that we discussed all of these issues already on the radext = and the geopriv mailing list (around march this year).=20 based on the fact that two working groups were involved when working on = this document i wasn't quite aware of how the open issues should be = tackled (mailing list and/or issue tracker), which format is used to = submit or resolve individual issues and how is actually in charge to = add, remove or modify something on the issue tracker.=20 this might actually something to discuss next time whenever two working = groups work on a single document to avoid confusion.=20 ciao hannes > > Please post comments to the RADEXT WG in the format defined on the > > RADEXT WG Issue list: > >=20 > > http://www.drizzle.com/~aboba/RADEXT/ >=20 > It would also be helpful if the authors of the RADIUS=20 > Location document=20 > would post the resolution of the 13 issues that have already=20 > been filed,=20 > so we can figure out which ones are now closed. =20 >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 16:15:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBeQQ-0003Au-Lu; Sat, 03 Sep 2005 16:15:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBeQP-0003Ap-UC for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 16:15:41 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA22534 for ; Sat, 3 Sep 2005 16:15:39 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBeSp-0003Qt-St for geopriv@ietf.org; Sat, 03 Sep 2005 16:18:12 -0400 Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j83KFVUa001008; Sat, 3 Sep 2005 22:15:31 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail2.sbs.de (8.12.6/8.12.6) with ESMTP id j83KFVT2026179; Sat, 3 Sep 2005 22:15:31 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sat, 3 Sep 2005 22:15:31 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sat, 3 Sep 2005 22:15:30 +0200 Message-ID: Thread-Topic: Issue 86: Location Identifier in Location-Information Attribute Thread-Index: AcWwxDi+9QNkr2UBSi+l6g8ezJxG8A== From: "Tschofenig, Hannes" To: , X-OriginalArrivalTime: 03 Sep 2005 20:15:31.0475 (UTC) FILETIME=[3BE32E30:01C5B0C4] X-Spam-Score: 0.0 (/) X-Scan-Signature: 9182cfff02fae4f1b6e9349e01d62f32 Content-Transfer-Encoding: quoted-printable Cc: Subject: [Geopriv] Issue 86: Location Identifier in Location-Information Attribute X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi all,=20 months ago lionel morand asked whether a 'location ID' (i.e., a reference to location information) should be added to the radius-geopriv draft. this issue is described at:=20 http://www.drizzle.com/~aboba/RADEXT/#Issue%2086 we rejected the request since there was no need to include a reference since we provide the location itself. in his example the 'location id' value refers to a list of predefined values for some operators. we can easily provide the same functionality with a few more bits. reduction of a few bits was not seen as very important for this particular use case only. no other person cared for this particular issue and asked for providing this feature.=20 now, in a private mail i was pointed to the same issue again.=20 here is a link to a document that shows how the location id (or actually numbering plan) looks like=20 http://www.itu.int/ITU-T/inr/forms/files/mnc_0605e.pdf i still think that we don't need this. ciao hannes _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 20:48:32 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBigS-0008NV-Aa; Sat, 03 Sep 2005 20:48:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBigP-0008Mf-U1 for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 20:48:30 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA02608 for ; Sat, 3 Sep 2005 20:48:27 -0400 (EDT) From: jouni.korhonen@teliasonera.com Received: from ceiling.dave.sonera.fi ([131.177.130.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBiir-0001wg-0E for geopriv@ietf.org; Sat, 03 Sep 2005 20:51:02 -0400 Received: from ceiling.dave.sonera.fi (localhost [127.0.0.1]) by ceiling.dave.sonera.fi (Sendmail) with ESMTP id j840mJLa028352 for ; Sun, 4 Sep 2005 03:48:19 +0300 (EEST) Received: from FITMS201MB.tcad.telia.se (fitms201cb.tcad.telia.se [131.177.121.204]) by ceiling.dave.sonera.fi (Sendmail) with ESMTP id j840mI5a028348; Sun, 4 Sep 2005 03:48:18 +0300 (EEST) X-MimeOLE: Produced By Microsoft Exchange V6.0.6617.27 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sun, 4 Sep 2005 03:48:16 +0300 Message-ID: <07B14A720C46C344AC96AAA64F5D6A3101491934@FITMS201MB.tcad.telia.se> Thread-Topic: Issue 86: Location Identifier in Location-Information Attribute Thread-Index: AcWwxDi+9QNkr2UBSi+l6g8ezJxG8AAIAvBg To: , , X-Spam-Score: 0.3 (/) X-Scan-Signature: 7aafa0432175920a4b3e118e16c5cb64 Content-Transfer-Encoding: quoted-printable Cc: Subject: [Geopriv] RE: Issue 86: Location Identifier in Location-Information Attribute X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Hi Hannes,=20 The proposed Location-Id 'feature' could actually be useful e.g. with UMA and 3GPP GAN services -- helping operators to differentiate service areas between WLAN hotspots and such. However, I still think one can exploit e.g. existing civic location TLVs such as LOC for the same purpose. =20 Cheers, Jouni > -----Original Message----- > From: owner-radiusext@ops.ietf.org=20 > [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Tschofenig, Hannes > Sent: 3. syyskuuta 2005 23:16 > To: geopriv@ietf.org; radiusext@ops.ietf.org > Subject: Issue 86: Location Identifier in=20 > Location-Information Attribute >=20 > hi all,=20 >=20 > months ago lionel morand asked whether a 'location ID' (i.e., a > reference to location information) should be added to the=20 > radius-geopriv > draft. this issue is described at:=20 > http://www.drizzle.com/~aboba/RADEXT/#Issue%2086 >=20 > we rejected the request since there was no need to include a reference > since we provide the location itself. in his example the 'location id' > value refers to a list of predefined values for some operators. we can > easily provide the same functionality with a few more bits.=20 > reduction of > a few bits was not seen as very important for this particular use case > only. no other person cared for this particular issue and asked for > providing this feature.=20 >=20 > now, in a private mail i was pointed to the same issue again.=20 >=20 > here is a link to a document that shows how the location id=20 > (or actually > numbering plan) looks like=20 > http://www.itu.int/ITU-T/inr/forms/files/mnc_0605e.pdf >=20 > i still think that we don't need this. >=20 > ciao > hannes >=20 > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sat Sep 03 22:00:47 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBjoN-0001wn-FI; Sat, 03 Sep 2005 22:00:47 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBjoL-0001wi-KF for geopriv@megatron.ietf.org; Sat, 03 Sep 2005 22:00:45 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA04133 for ; Sat, 3 Sep 2005 22:00:43 -0400 (EDT) Received: from ns.execdsl.net ([208.184.15.238] helo=EXECDSL.COM) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBjqn-0003Qr-TZ for geopriv@ietf.org; Sat, 03 Sep 2005 22:03:19 -0400 Received: from [70.104.227.167] (HELO JMHLap3.stevecrocker.com) by EXECDSL.COM (CommuniGate Pro SMTP 3.3) with ESMTP id 12172920; Sat, 03 Sep 2005 22:00:18 -0400 Message-Id: <6.2.1.2.0.20050903215931.02db3138@localhost> X-Mailer: QUALCOMM Windows Eudora Version 6.2.1.2 Date: Sat, 03 Sep 2005 22:00:14 -0400 To: "Tschofenig, Hannes" , "Bernard Aboba" , From: "Joel M. Halpern" In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Spam-Score: 0.0 (/) X-Scan-Signature: fb6060cb60c0cea16e3f7219e40a0a81 Cc: geopriv@ietf.org Subject: [Geopriv] Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org I certainly felt (and still feel) that this issue had been resolved in a fair and clear fashion. Yours, Joel At 03:36 PM 9/3/2005, Tschofenig, Hannes wrote: >hi bernard, > >i guess there is a misunderstand here with regard to the functionality >of the radius-geopriv draft. >joel raised this issue and we discussed it. > >we always supported the idea of providing location for the end host. we >had a very, very long discussion about this topic when we merged the two >radius-geopriv drafts. > >what has been changed as part of joel's issue was >- the name of the avp (since it was misleading) and >- the description to address joel's comments > >this issue has been resolved on the mailing list and i also had further >off-list discussions with joel. > >i think you do not treat me fair with your statement that this issue has >not been fixed 9 months later. > >ciao >hannes > > > > > > Am I missing something, or is the problem really this simple? > > > > > > > > It would appear so. > > > > The "server-driven" approach also provides a mechanism to > > address RADEXT > > Issue 27 (Who's Location). > > > > One of the major problems with the RADIUS-GEOPRIV document is that it > > does not support user location determination, only NAS location. > > > > This is a problem for vendors who are shipping APs with built-in > > location support that enables APs to pinpint the location of > > associated > > stations. At least one RADIUS server implementation now supports > > "location-based access control". Why can't the RADIUS-GEOPRIV > > specification be used to send user as well as NAS location? > > > > This basic problem with the document was pointed out in > > November 2004, but > > has still not been fixed in August 2005, 9 months later. > > > > However, using the "server-driven" approach, the problem would > > not be hard to address. In the "send location" attribute > > included by the > > server, the server can specify what type of location data it > > is looking > > for - user or NAS. > > > > Note that layer 2 standards such as IEEE 802.11k already enable this > > distinction. In IEEE 802.11k a station can ask either for its own > > location or the location of the AP. > > > > -- > > to unsubscribe send a message to radiusext-request@ops.ietf.org with > > the word 'unsubscribe' in a single line as the message text body. > > archive: > > > >-- >to unsubscribe send a message to radiusext-request@ops.ietf.org with >the word 'unsubscribe' in a single line as the message text body. >archive: _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 01:14:09 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBmpV-0007oW-AP; Sun, 04 Sep 2005 01:14:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBmpT-0007o0-2g for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 01:14:07 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA08936 for ; Sun, 4 Sep 2005 01:14:06 -0400 (EDT) Received: from outbound.mailhop.org ([63.208.196.171] ident=mailnull) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBmrw-0007hb-VQ for geopriv@ietf.org; Sun, 04 Sep 2005 01:16:42 -0400 Received: from c-67-182-139-247.hsd1.wa.comcast.net ([67.182.139.247] helo=internaut.com) by outbound.mailhop.org with esmtpa (Exim 4.51) id 1EBmpK-000LDo-2B; Sun, 04 Sep 2005 01:13:58 -0400 Received: by internaut.com (Postfix, from userid 1000) id 28CDB21663; Sat, 3 Sep 2005 22:13:57 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by internaut.com (Postfix) with ESMTP id 1BFAF2165E; Sat, 3 Sep 2005 22:13:57 -0700 (PDT) X-Mail-Handler: MailHop Outbound by DynDNS.org X-Originating-IP: 67.182.139.247 X-Report-Abuse-To: abuse@dyndns.org (see http://www.mailhop.org/outbound/abuse.html for abuse reporting information) X-MHO-User: aboba Date: Sat, 3 Sep 2005 22:13:57 -0700 (PDT) From: Bernard Aboba To: "Tschofenig, Hannes" In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Score: 0.1 (/) X-Scan-Signature: c1c65599517f9ac32519d043c37c5336 Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org > The radius server might also understand either civic, geospatial or both. We need to distinguish between the RADIUS Accounting Server and the RADIUS Authentication Server. The RADIUS Accounting Server can be assumed to "understand" anything (e.g. it just writes AVPs to stable storage). The RADIUS Server should be thought of as either REQUIRING or NOT REQUIRING an attribute. If an attribute is REQUIRED the RADIUS Server will request it in an Access-Challenge. > whether the desire to support this functionality justifies the introduction of an avp is subject for discussion. I think there is a need for an attribute to be sent from the RADIUS Server to the NAS to describe what it wants (e.g. Geospatial, Civil), what location is to be sent (user or NAS)), and how it wants it. Presumably this attribute can be sent in an Access-Challenge. There is also a need for location attributes, to be sent from the NAS to the RADIUS server. However, I don't see a need for "Capabilities Announcement" by the NAS. > this was the approach that was suggested to us in previous discussions. > sounds good to me. The Access-Challenge approach is ok only if it is made clear that a NAS that is not expecting an Access-Challenge MUST treat it as a Reject, as mandated in RFC 2865. And of course, a RADIUS Server MAY send a Reject if the Challenge isn't answered correctly, so you need to support that case or the NAS/RADIUS server exchange could go on indefinitely. > i guess you would suggest to return an access reject if the nas is > unable to understand the returned location information format. The NAS can't send an Access-Reject. It can only treat the Challenge as an Access-Reject. > this requirement hasn't been presented to me yet. Given that it's the RADIUS server that is determining what is needed, there needs to be a way for the server to actually request what it needs. A given RADIUS server may require user location (there are installations today that do locatoin-based authorization) in geospatial or civil format. Or it just may need NAS location. > i hope it is simple. >From the RADEXT WG discussion so far, it does appear to be quite simple. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 01:22:44 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBmxo-0000vi-4M; Sun, 04 Sep 2005 01:22:44 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBmxl-0000vd-92 for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 01:22:41 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA09258 for ; Sun, 4 Sep 2005 01:22:40 -0400 (EDT) Received: from outbound.mailhop.org ([63.208.196.171] ident=mailnull) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBn0G-0007wA-Gx for geopriv@ietf.org; Sun, 04 Sep 2005 01:25:16 -0400 Received: from c-67-182-139-247.hsd1.wa.comcast.net ([67.182.139.247] helo=internaut.com) by outbound.mailhop.org with esmtpa (Exim 4.51) id 1EBmxj-000Lsv-K7; Sun, 04 Sep 2005 01:22:39 -0400 Received: by internaut.com (Postfix, from userid 1000) id 91DAB21663; Sat, 3 Sep 2005 22:22:38 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by internaut.com (Postfix) with ESMTP id 85FA72165D; Sat, 3 Sep 2005 22:22:38 -0700 (PDT) X-Mail-Handler: MailHop Outbound by DynDNS.org X-Originating-IP: 67.182.139.247 X-Report-Abuse-To: abuse@dyndns.org (see http://www.mailhop.org/outbound/abuse.html for abuse reporting information) X-MHO-User: aboba Date: Sat, 3 Sep 2005 22:22:38 -0700 (PDT) From: Bernard Aboba To: "Tschofenig, Hannes" Subject: Re: AW: [Geopriv] RE: Review of draft-ietf-geopriv-radius-lo-04.txt In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Score: 0.1 (/) X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22 Cc: geopriv@ietf.org, Pasi.Eronen@nokia.com, radiusext@ops.ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org > we tried to respect the fact that people indicated that there might be a > scenario where the nas does not know the location of the end host. if > this is the case then the nas can only send its own location > information. if it can include the location information of the end host > (in case it is known) then the more precise info is sent. Right, but if the RADIUS server *requires* user location, that is what it will ask for in the Access-Challenge, and if the NAS doesn't supply it, it will send an Access-Reject eventually. If the RADIUS server only wants NAS location, it can ask for that, or I suppose it could say "send me either one". But the point is that it is the RADIUS server that is driving this conversation. > you seem to suggest that we add functionality to allow the radius server > to request what information (end host vs. nas) it would like to see. we > haven't yet heard this requirement and hence we haven't added it. Several of the high end 802.11 switches support location today, and there are location-based authorization servers on the market that are being deployed. Typically, the APs utilize ToA processing to estimate location within a few feet. So this is a real need and probably will garner at least as much (if not more) deployment than NAS location. In any case, since the document already supports an "Entity" field it is already possible for a NAS to send user location using the existing attributes. What is missing is the ability of the RADIUS server to request the "entity" that it is interested in. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 01:25:51 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBn0p-0001SU-9w; Sun, 04 Sep 2005 01:25:51 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBn0n-0001SA-K5 for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 01:25:49 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA09321 for ; Sun, 4 Sep 2005 01:25:49 -0400 (EDT) Received: from outbound.mailhop.org ([63.208.196.171] ident=mailnull) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBn3I-0007zn-TK for geopriv@ietf.org; Sun, 04 Sep 2005 01:28:25 -0400 Received: from c-67-182-139-247.hsd1.wa.comcast.net ([67.182.139.247] helo=internaut.com) by outbound.mailhop.org with esmtpa (Exim 4.51) id 1EBn0m-000M4q-F0; Sun, 04 Sep 2005 01:25:48 -0400 Received: by internaut.com (Postfix, from userid 1000) id B3A2721663; Sat, 3 Sep 2005 22:25:47 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by internaut.com (Postfix) with ESMTP id A6B422165D; Sat, 3 Sep 2005 22:25:47 -0700 (PDT) X-Mail-Handler: MailHop Outbound by DynDNS.org X-Originating-IP: 67.182.139.247 X-Report-Abuse-To: abuse@dyndns.org (see http://www.mailhop.org/outbound/abuse.html for abuse reporting information) X-MHO-User: aboba Date: Sat, 3 Sep 2005 22:25:47 -0700 (PDT) From: Bernard Aboba To: "Tschofenig, Hannes" In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Score: 0.1 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Cc: geopriv@ietf.org, Pasi.Eronen@nokia.com, radiusext@ops.ietf.org Subject: [Geopriv] Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org > in a small network (such as a wlan hotspot) it might not really matter > whether you provide the location of the end host or the nas since it > might be almost the same (depending on the granularity of the location > information). a lot depends on the deployment scenario. Sure. There are some RADIUS servers that might not care. They can indicate that in their Access-Challenge. But there are other situations where it *definitely* matters. For example, there are military installations that most definitely care if the user is on the military base near the AP, or outside the base attempting to break in using a high gain antenna. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 03:56:53 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBpMz-0001Lq-Bo; Sun, 04 Sep 2005 03:56:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBpMx-0001Li-9U for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 03:56:51 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id DAA27061 for ; Sun, 4 Sep 2005 03:56:49 -0400 (EDT) Received: from outbound.mailhop.org ([63.208.196.171] ident=mailnull) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBpPS-0002zr-TA for geopriv@ietf.org; Sun, 04 Sep 2005 03:59:28 -0400 Received: from c-67-182-139-247.hsd1.wa.comcast.net ([67.182.139.247] helo=internaut.com) by outbound.mailhop.org with esmtpa (Exim 4.51) id 1EBpMu-000B7Q-SP; Sun, 04 Sep 2005 03:56:48 -0400 Received: by internaut.com (Postfix, from userid 1000) id 3BAA421667; Sun, 4 Sep 2005 00:56:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by internaut.com (Postfix) with ESMTP id 2CAB72165E; Sun, 4 Sep 2005 00:56:48 -0700 (PDT) X-Mail-Handler: MailHop Outbound by DynDNS.org X-Originating-IP: 67.182.139.247 X-Report-Abuse-To: abuse@dyndns.org (see http://www.mailhop.org/outbound/abuse.html for abuse reporting information) X-MHO-User: aboba Date: Sun, 4 Sep 2005 00:56:48 -0700 (PDT) From: Bernard Aboba To: "Tschofenig, Hannes" In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Score: 0.1 (/) X-Scan-Signature: d6b246023072368de71562c0ab503126 Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org > i think you do not treat me fair with your statement that this issue has > not been fixed 9 months later. The document does now support the notion of entities, so it is possible for the NAS to send user or NAS location. What is missing is a way for the RADIUS server to request a particular type of location (or state that it doesn't care). Other standards in this area (such as IEEE 802.11k) do explicitly support both NAS and user location, and differentiate between the two, so this is a well accepted concept. Aside from the carrier scenarios described in the document, there are other uses for location information. For example, there are factories keeping track of parts; defense facilities that track the location of users accessing the network; AAA products that support "location-aware access control". _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 09:11:24 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBuHL-00055y-VK; Sun, 04 Sep 2005 09:11:23 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBuHJ-00055t-H8 for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 09:11:21 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA06076 for ; Sun, 4 Sep 2005 09:11:20 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBuJs-0006Jh-FC for geopriv@ietf.org; Sun, 04 Sep 2005 09:14:01 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j84DBB3o015123; Sun, 4 Sep 2005 15:11:11 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j84DBAc1030262; Sun, 4 Sep 2005 15:11:10 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sun, 4 Sep 2005 15:11:10 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sun, 4 Sep 2005 15:11:09 +0200 Message-ID: Thread-Topic: Issue 86: Location Identifier in Location-Information Attribute Thread-Index: AcWwxDi+9QNkr2UBSi+l6g8ezJxG8AAIAvBgABsUkGA= From: "Tschofenig, Hannes" To: , , X-OriginalArrivalTime: 04 Sep 2005 13:11:10.0384 (UTC) FILETIME=[1E4EC300:01C5B152] X-Spam-Score: 0.0 (/) X-Scan-Signature: 0fa76816851382eb71b0a882ccdc29ac Content-Transfer-Encoding: quoted-printable Cc: Subject: [Geopriv] AW: Issue 86: Location Identifier in Location-Information Attribute X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi jouni,=20 if i look at the http://www.itu.int/ITU-T/inr/forms/files/mnc_0605e.pdf document then i get the impression that the=20 country can easy represented using a Location-Information attribute with the countrycode element and the name of the network using Operator-Name avp.=20 hence, i share your view about the express the same functionality using existing mechanisms.=20 maybe there are other reasons to add such a location-id element/avp but i cannot find anything at the moment.=20 ciao hannes > Hi Hannes,=20 >=20 > The proposed Location-Id 'feature' could actually be useful e.g. > with UMA and 3GPP GAN services -- helping operators to differentiate > service areas between WLAN hotspots and such. However, I still > think one can exploit e.g. existing civic location TLVs such as LOC > for the same purpose. =20 >=20 > Cheers, > Jouni >=20 >=20 > > -----Original Message----- > > From: owner-radiusext@ops.ietf.org=20 > > [mailto:owner-radiusext@ops.ietf.org] On Behalf Of=20 > Tschofenig, Hannes > > Sent: 3. syyskuuta 2005 23:16 > > To: geopriv@ietf.org; radiusext@ops.ietf.org > > Subject: Issue 86: Location Identifier in=20 > > Location-Information Attribute > >=20 > > hi all,=20 > >=20 > > months ago lionel morand asked whether a 'location ID' (i.e., a > > reference to location information) should be added to the=20 > > radius-geopriv > > draft. this issue is described at:=20 > > http://www.drizzle.com/~aboba/RADEXT/#Issue%2086 > >=20 > > we rejected the request since there was no need to include=20 > a reference > > since we provide the location itself. in his example the=20 > 'location id' > > value refers to a list of predefined values for some=20 > operators. we can > > easily provide the same functionality with a few more bits.=20 > > reduction of > > a few bits was not seen as very important for this=20 > particular use case > > only. no other person cared for this particular issue and asked for > > providing this feature.=20 > >=20 > > now, in a private mail i was pointed to the same issue again.=20 > >=20 > > here is a link to a document that shows how the location id=20 > > (or actually > > numbering plan) looks like=20 > > http://www.itu.int/ITU-T/inr/forms/files/mnc_0605e.pdf > >=20 > > i still think that we don't need this. > >=20 > > ciao > > hannes > >=20 > > -- > > to unsubscribe send a message to radiusext-request@ops.ietf.org with > > the word 'unsubscribe' in a single line as the message text body. > > archive: > >=20 >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 10:26:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBvSE-00016v-93; Sun, 04 Sep 2005 10:26:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBvSC-00016n-Jz for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 10:26:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA09313 for ; Sun, 4 Sep 2005 10:26:38 -0400 (EDT) Received: from gecko.sbs.de ([194.138.37.40]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBvUl-0007sx-Vs for geopriv@ietf.org; Sun, 04 Sep 2005 10:29:20 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by gecko.sbs.de (8.12.6/8.12.6) with ESMTP id j84EQLEZ021549; Sun, 4 Sep 2005 16:26:21 +0200 Received: from fthw9xoa.ww002.siemens.net (fthw9xoa.ww002.siemens.net [157.163.133.201]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j84EQLSI003149; Sun, 4 Sep 2005 16:26:21 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xoa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sun, 4 Sep 2005 16:26:21 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sun, 4 Sep 2005 16:26:20 +0200 Message-ID: Thread-Topic: AW: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWxD3pFrJ31+TknSSWD6OxXdPq5MwARZ0Cg From: "Tschofenig, Hannes" To: "Bernard Aboba" X-OriginalArrivalTime: 04 Sep 2005 14:26:21.0417 (UTC) FILETIME=[9F17C590:01C5B15C] X-Spam-Score: 0.0 (/) X-Scan-Signature: 6cca30437e2d04f45110f2ff8dc1b1d5 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] AW: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi bernard,=20 i went through your suggestions and i don't think i have a disagreement with what you say.=20 ciao hannes > > The radius server might also understand either civic,=20 > geospatial or both.=20 >=20 > We need to distinguish between the RADIUS Accounting Server=20 > and the RADIUS=20 > Authentication Server. The RADIUS Accounting Server can be=20 > assumed to=20 > "understand" anything (e.g. it just writes AVPs to stable=20 > storage). The=20 > RADIUS Server should be thought of as either REQUIRING or NOT=20 > REQUIRING an=20 > attribute. If an attribute is REQUIRED the RADIUS Server=20 > will request it=20 > in an Access-Challenge. =20 >=20 > > whether the desire to support this functionality justifies=20 > the introduction of an avp is subject for discussion.=20 >=20 > I think there is a need for an attribute to be sent from the=20 > RADIUS Server=20 > to the NAS to describe what it wants (e.g. Geospatial, Civil), > what=20 > location is to be sent (user or NAS)), > and how it=20 > wants it. Presumably this attribute can be sent in an=20 > Access-Challenge.=20 >=20 > There is also a need for location attributes, to be sent from=20 > the NAS to=20 > the RADIUS server.=20 >=20 > However, I don't see a need for "Capabilities Announcement"=20 > by the NAS.=20 > > this was the approach that was suggested to us in previous=20 > discussions.=20 > > sounds good to me.=20 >=20 > The Access-Challenge approach is ok only if it is made clear=20 > that a NAS=20 > that is not expecting an Access-Challenge MUST treat it as a=20 > Reject, as=20 > mandated in RFC 2865. And of course, a RADIUS Server MAY=20 > send a Reject if=20 > the Challenge isn't answered correctly, so you need to=20 > support that case=20 > or the NAS/RADIUS server exchange could go on indefinitely.=20 >=20 > > i guess you would suggest to return an access reject if the nas is=20 > > unable to understand the returned location information format.=20 >=20 > The NAS can't send an Access-Reject. It can only treat the=20 > Challenge as=20 > an Access-Reject.=20 >=20 > > this requirement hasn't been presented to me yet.=20 >=20 > Given that it's the RADIUS server that is determining what is needed,=20 > there needs to be a way for the server to actually request=20 > what it needs. A=20 > given RADIUS server may require user location (there are=20 > installations=20 > today that do locatoin-based authorization) in geospatial or=20 > civil format.=20 > Or it just may need NAS location. =20 >=20 > > i hope it is simple.=20 >=20 > From the RADEXT WG discussion so far, it does appear to be=20 > quite simple. =20 >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 10:46:40 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBvlY-0004Qr-Dz; Sun, 04 Sep 2005 10:46:40 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EBvlX-0004Qh-Im for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 10:46:39 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA09922 for ; Sun, 4 Sep 2005 10:46:37 -0400 (EDT) Received: from lizzard.sbs.de ([194.138.37.39]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EBvo6-0008EK-Fg for geopriv@ietf.org; Sun, 04 Sep 2005 10:49:20 -0400 Received: from mail1.sbs.de (mail1.sbs.de [192.129.41.35]) by lizzard.sbs.de (8.12.6/8.12.6) with ESMTP id j84EkSs9000652; Sun, 4 Sep 2005 16:46:28 +0200 Received: from fthw9xpa.ww002.siemens.net (fthw9xpa.ww002.siemens.net [157.163.133.222]) by mail1.sbs.de (8.12.6/8.12.6) with ESMTP id j84EkSqO013187; Sun, 4 Sep 2005 16:46:28 +0200 Received: from MCHP7IEA.ww002.siemens.net ([139.25.131.145]) by fthw9xpa.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.0); Sun, 4 Sep 2005 16:46:28 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Sun, 4 Sep 2005 16:46:27 +0200 Message-ID: Thread-Topic: AW: Review of draft-ietf-geopriv-radius-lo-04.txt Thread-Index: AcWxD3pFrJ31+TknSSWD6OxXdPq5MwATfBEA From: "Tschofenig, Hannes" To: "Bernard Aboba" X-OriginalArrivalTime: 04 Sep 2005 14:46:28.0241 (UTC) FILETIME=[6E6A8010:01C5B15F] X-Spam-Score: 0.0 (/) X-Scan-Signature: e5ba305d0e64821bf3d8bc5d3bb07228 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] AW: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org hi bernard,=20 > > The radius server might also understand either civic,=20 > geospatial or both.=20 >=20 > We need to distinguish between the RADIUS Accounting Server=20 > and the RADIUS=20 > Authentication Server. The RADIUS Accounting Server can be=20 > assumed to=20 > "understand" anything (e.g. it just writes AVPs to stable=20 > storage). The=20 > RADIUS Server should be thought of as either REQUIRING or NOT=20 > REQUIRING an=20 > attribute. If an attribute is REQUIRED the RADIUS Server=20 > will request it=20 > in an Access-Challenge. =20 if we talk about location-based authorization and if this authorization step is mandatory then the radius server will ask the nas to provide location information and if he cannot provide it then an access reject must be sent.=20 if the home network operator just wants to print location information to the bill (something like 'wlan hotspot at abc in munich') then the radius server might not want to send an access reject if the nas cannot provide it. maybe the best way to address this aspect is not to request location information with the access-challenge but later when accounting messages are exchanged.=20 ciao hannes _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 04 17:04:01 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EC1ej-00024E-2Y; Sun, 04 Sep 2005 17:04:01 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EC1ef-000249-VD for geopriv@megatron.ietf.org; Sun, 04 Sep 2005 17:03:58 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA24863 for ; Sun, 4 Sep 2005 17:03:55 -0400 (EDT) Received: from outbound.mailhop.org ([63.208.196.171] ident=mailnull) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EC1hI-0000Fc-F4 for geopriv@ietf.org; Sun, 04 Sep 2005 17:06:41 -0400 Received: from c-67-182-139-247.hsd1.wa.comcast.net ([67.182.139.247] helo=internaut.com) by outbound.mailhop.org with esmtpa (Exim 4.51) id 1EC1ec-000HAx-GO; Sun, 04 Sep 2005 17:03:55 -0400 Received: by internaut.com (Postfix, from userid 1000) id EDB3B21667; Sun, 4 Sep 2005 14:03:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by internaut.com (Postfix) with ESMTP id E2CBF21666; Sun, 4 Sep 2005 14:03:52 -0700 (PDT) X-Mail-Handler: MailHop Outbound by DynDNS.org X-Originating-IP: 67.182.139.247 X-Report-Abuse-To: abuse@dyndns.org (see http://www.mailhop.org/outbound/abuse.html for abuse reporting information) X-MHO-User: aboba Date: Sun, 4 Sep 2005 14:03:52 -0700 (PDT) From: Bernard Aboba To: "Tschofenig, Hannes" In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Score: 0.1 (/) X-Scan-Signature: 97adf591118a232206bdb5a27b217034 Cc: geopriv@ietf.org, radiusext@ops.ietf.org Subject: [Geopriv] Re: AW: AW: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org > if we talk about location-based authorization and if this authorization > step is mandatory then the radius server will ask the nas to provide > location information and if he cannot provide it then an access reject > must be sent. Right. > if the home network operator just wants to print location information to > the bill (something like 'wlan hotspot at abc in munich') then the > radius server might not want to send an access reject if the nas cannot > provide it. maybe the best way to address this aspect is not to request > location information with the access-challenge but later when accounting > messages are exchanged. If the RADIUS server needs location info for authorization then it needs to send an Access-Challenge expressing that need. If does not require location information in the Access-Request but would like it in the Accounting packets if available, it can include a "send location" attribute in an Access-Accept. Summary: a. RADIUS Server REQUIRES location in Access-Request or Accounting-Request: server sends an Access-Challenge with an attribute that expresses what is required. b. RADIUS server would like location information in the Accounting-Request but does not require it: RADIUS server sends an Access-Accept with an attribute that expresses what is desired. c. RADIUS server REQUIRES location in Access-Request, but has not received it after sending an Access-Challenge: RADIUS server sends an Access-Reject with an Error-Cause attribute with value "Missing Location Information" _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Tue Sep 06 10:43:17 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECefN-0004F2-5a; Tue, 06 Sep 2005 10:43:17 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECefL-0004Ex-3I for geopriv@megatron.ietf.org; Tue, 06 Sep 2005 10:43:15 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA01630 for ; Tue, 6 Sep 2005 10:43:13 -0400 (EDT) Received: from rtp-iport-2.cisco.com ([64.102.122.149]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ECeiI-00079w-Cs for geopriv@ietf.org; Tue, 06 Sep 2005 10:46:20 -0400 Received: from rtp-core-1.cisco.com ([64.102.124.12]) by rtp-iport-2.cisco.com with ESMTP; 06 Sep 2005 10:43:03 -0400 X-IronPort-AV: i="3.96,172,1122868800"; d="scan'208"; a="69138783:sNHT30449816" Received: from [68.50.138.194] (che-vpn-cluster-1-97.cisco.com [10.86.240.97]) by rtp-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j86EgxT6000055; Tue, 6 Sep 2005 10:43:00 -0400 (EDT) In-Reply-To: References: Mime-Version: 1.0 (Apple Message framework v622) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: John Schnizlein Date: Tue, 6 Sep 2005 10:43:06 -0400 To: "Tschofenig, Hannes" X-Mailer: Apple Mail (2.622) X-Spam-Score: 0.0 (/) X-Scan-Signature: 856eb5f76e7a34990d1d457d8e8e5b7f Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org, Pasi.Eronen@nokia.com, radiusext@ops.ietf.org, Bernard Aboba Subject: [Geopriv] DHCP server location - was RE: Review of draft-ietf-geopriv-radius-lo-04.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Answering your question: I think there is no meaningful relationship between the location of the DHCP server and the host. The utility of including the 'what' element value (zero) for the location of the DHCP server in draft-ietf-geopriv-dhcp-civil-06 has been questioned in IESG review as well. John On Sep 3, 2005, at 3:41 PM, Tschofenig, Hannes wrote: > i have a question for you: you are the co-author of rfc 3825. now, > consider the discussions we have in the emergency context (in geopriv & > ecrit) and the idea to provide location information using dhcp to the > end host for inclusion into an emergency call. do you think that there > is a relationship between the location of the dhcp server/dhcp relay > and > the location of the end host? _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Tue Sep 06 14:51:36 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECiXg-0004D9-I4; Tue, 06 Sep 2005 14:51:36 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ECiXf-0004D4-0k for geopriv@megatron.ietf.org; Tue, 06 Sep 2005 14:51:35 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA13053 for ; Tue, 6 Sep 2005 14:51:33 -0400 (EDT) Received: from opus.cs.columbia.edu ([128.59.20.100]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ECiaf-0005Nb-HE for geopriv@ietf.org; Tue, 06 Sep 2005 14:54:42 -0400 Received: from [128.59.16.206] (chairpc.win.cs.columbia.edu [128.59.16.206]) (authenticated bits=0) by opus.cs.columbia.edu (8.12.10/8.12.10) with ESMTP id j86IoNWk002736 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 6 Sep 2005 14:50:24 -0400 (EDT) Message-ID: <431DE4D8.9070806@cs.columbia.edu> Date: Tue, 06 Sep 2005 14:50:00 -0400 From: Henning Schulzrinne User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: John Schnizlein Subject: Re: [Geopriv] DHCP server location - was RE: Review of draft-ietf-geopriv-radius-lo-04.txt References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0, __STOCK_CRUFT 0, __USER_AGENT 0' X-Spam-Score: 0.0 (/) X-Scan-Signature: 97adf591118a232206bdb5a27b217034 Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org, Bernard Aboba , Pasi.Eronen@nokia.com, radiusext@ops.ietf.org, "Tschofenig, Hannes" X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org We've had this discussion a few times, like so many other evergreens on this list. While this is not universally useful, in many cases, the DHCP server is known or very likely to be close (i.e., within about 100 m) to the actual end user. This is true for corporate networks and for home networks, presumably two of the largest users of DHCP. Providing a location, with qualifications, is likely to be more useful than either pretending one knows the real end system location or not providing any location information, which are the only other options. John Schnizlein wrote: > Answering your question: I think there is no meaningful relationship > between the location of the DHCP server and the host. The utility of > including the 'what' element value (zero) for the location of the DHCP > server in draft-ietf-geopriv-dhcp-civil-06 has been questioned in IESG > review as well. > > John > > > On Sep 3, 2005, at 3:41 PM, Tschofenig, Hannes wrote: > >> i have a question for you: you are the co-author of rfc 3825. now, >> consider the discussions we have in the emergency context (in geopriv & >> ecrit) and the idea to provide location information using dhcp to the >> end host for inclusion into an emergency call. do you think that there >> is a relationship between the location of the dhcp server/dhcp relay and >> the location of the end host? > > > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 07 16:07:40 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ED6Cq-0007og-Jz; Wed, 07 Sep 2005 16:07:40 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ED6Cl-0007gi-ES for geopriv@megatron.ietf.org; Wed, 07 Sep 2005 16:07:35 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA15764 for ; Wed, 7 Sep 2005 16:07:33 -0400 (EDT) Received: from carrierpigeon.cs.umd.edu ([128.8.129.58]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ED6Ft-0001Nr-MO for geopriv@ietf.org; Wed, 07 Sep 2005 16:10:55 -0400 Received: from MINDLAP2 (mindlap2.cs.umd.edu [172.16.0.37]) (authenticated bits=0) by carrierpigeon.cs.umd.edu (8.12.10/8.12.5) with ESMTP id j87K7DfG024559 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO) for ; Wed, 7 Sep 2005 16:07:16 -0400 (EDT) Message-Id: <200509072007.j87K7DfG024559@carrierpigeon.cs.umd.edu> From: "Moustafa Youssef" To: Date: Wed, 7 Sep 2005 16:07:05 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-Spam-Score: 0.0 (/) X-Scan-Signature: 0ff9c467ad7f19c2a6d058acd7faaec8 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] CFP: 2nd IEEE Workshop on Dependability and Security in Sensor Networks and Systems X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org (Our apologies if you receive multiple copies of this CFP) ------------------------------------------------------------- Second Call for Papers Second IEEE Workshop on Dependability and Security in Sensor Networks and Systems (DSSNS'2006) http://www.dssns.org In conjunction with 2nd NASA/IEEE Systems and Software Week 30th NASA/IEEE Software Engineering Workshop (SEW'2006) Columbia, Maryland, USA ~ April 24-28, 2006 Recently, there has been a growing interest in the potential use of networked sensors in applications such as smart environments,=20 disaster management, combat field reconnaissance, and security=20 surveillance. While the initial view of the community was that=20 networked sensors will play a complementary role that enhances=20 the quality of these applications, recent research results have=20 encouraged practitioners to envision an increased reliance on sensor=20 networks and systems (SN&S) in such critical and sensitive=20 applications. Therefore to realize their potential, necessary=20 dependability and security (D&S) measures have to be=20 incorporated in the design and during the operation of SN&S.=20 Dependability is usually specified using attributes like reliability,=20 survivability, safety, maintainability, and availability in presence=20 of failure, while security is specified by attributes like integrity,=20 authenticity, confidentiality, and availability in presence of=20 attacks. D&S services accomplish tasks for attack and failure prevention, detection and response. The scope of D&S=20 services may span the deployed sensors to command nodes=20 and likely beyond. It also involves D&S support at, and=20 cross-cutting, the protocol stack layers from physical to=20 application. Achieving dependability and security in SN&S will require=20 non-conventional mechanisms due to many factors including:=20 (1) sensors are significantly constrained in the amount of=20 available resources such as energy, storage and computation;=20 (2) sensors are expected to be deployed in very large numbers=20 in normal as well as harsh/hostile environments; (3) sensor=20 networks suffer from structural weakness and limited physical protection, and (4) localization of impact is complicated due=20 to the un-tethered nature of SN&S and of the potential=20 attackers. In addition, D&S requirements may vary according to mission defined over a multi-dimensional context, such=20 as field of deployment (e.g., hostile versus friendly), type of=20 application (e.g., monitoring, tracking, data collection), mode=20 of operation (e.g., normal, exception, post-event recovery),=20 and time. This workshop will foster a forum for discussing and presenting=20 recent research results on dependability and security in SN&S.=20 Topics of interest include, although not limited to, the following: - Fault and intrusion-tolerant architectures, middleware and operational models=20 - Robust routing, storage, and processing of sensed data - D&S architectures, protocols and tools - Vulnerabilities, attacks and countermeasures - Monitoring and evaluation techniques - Robust clustering techniques - Self-awareness and context-awareness=20 - Resilient virtual infrastructures - Autonomic and adaptive D&S support. - Formal representation and verification of D&S properties - Network inference support for D&S - Quality of service provisioning - Models, metrics, and measurements for D&S - Privacy-aware D&S services - Testbeds, simulation and visualization=20 - Agent-based D&S management=20 - SN&S support for D&S in larger information grids - SN&S application development environments Submission Guidelines --------------------- For guidelines regarding paper submission, please refer to the workshop=92s=20 website (http://www.dssns.org). Papers should contain original material=20 and not be previously published, or currently submitted for consideration=20 elsewhere. The manuscript should not exceed 20 single-column double-space=20 pages in PDF format, font size 11 or larger. The first page should include=20 title, authors' contact information, abstract and five keywords.=20 Important Dates ---------------- Submission deadline: November 7, 2005 Decision notification: December 20, 2005 Final manuscript due: January 20, 2006 The accepted papers will appear in a proceedings published by IEEE. The best paper will be recognized and selected papers will be invited to a Special Issue of the Journal of Ad Hoc and Sensor Wireless Networks.=20 Workshop Co-Chairs ------------------- Mohamed Eltoweissy Virginia Tech, USA E-mail: toweissy@vt.edu=20 Mohamed Younis University of Maryland Baltimore County, USA E-mail: younis@csee.umbc.edu=20 Publicity Co-Chairs -------------------- Denis Gracanin Virginia Tech, USA E-mail: gracanin@vt.edu Moustafa Youssef University of Maryland at College Park, USA E-mail: moustafa@cs.umd.edu=20 Program Committee ------------------ Farooq Anjum, Telcordia & U. of Penn, USA David Carman, Johns Hopkins U.=96 Applied Physics Lab, USA Ing-Ray Chen, Virginia Tech, USA M. Nazih Elderini, Alexandria U., Egypt Deborah Frincke, Pacific Northwest National Lab and U. of Idaho, USA Ahmed Helmy, University of Southern California, USA Sushil Jajodia, George Mason U., USA Shivakant Mishra, U. of Colorado, USA Peng Ning, North Carolina State U., USA Cristina Nita-Rotaru, Purdue U., USA Stephan Olariu, Old Dominion U., USA David Simplot-Ryl, U. Lille, INRIA Futurs, France Mani B. Srivastava, U. of California =96 Los Angeles, USA John A. Stankovic, U. of Virginia, USA Ivan Stojmenovic, U. of Ottawa, Canada Gene Tsudik, U. of California-Irvine, USA Cliff Wang, Army Research Office, USA Stephen D. Wolthusen, Fraunhofer-IGD, Germany Albert Zomaya, U. of Sydney, Australia _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Fri Sep 09 16:46:53 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDplt-00020S-4K; Fri, 09 Sep 2005 16:46:53 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDplr-0001yE-8k for geopriv@megatron.ietf.org; Fri, 09 Sep 2005 16:46:51 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA09168 for ; Fri, 9 Sep 2005 16:46:49 -0400 (EDT) Received: from rtp-iport-2.cisco.com ([64.102.122.149]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EDppV-00013s-SZ for geopriv@ietf.org; Fri, 09 Sep 2005 16:50:38 -0400 Received: from rtp-core-1.cisco.com ([64.102.124.12]) by rtp-iport-2.cisco.com with ESMTP; 09 Sep 2005 16:46:43 -0400 X-IronPort-AV: i="3.96,183,1122868800"; d="scan'208"; a="69674397:sNHT30433700" Received: from [68.50.138.194] (che-vpn-cluster-2-24.cisco.com [10.86.242.24]) by rtp-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j89KkcT6018813; Fri, 9 Sep 2005 16:46:38 -0400 (EDT) In-Reply-To: <6FCE1004-299B-40F6-9459-B96C4604445C@hxr.us> References: <6FCE1004-299B-40F6-9459-B96C4604445C@hxr.us> Mime-Version: 1.0 (Apple Message framework v622) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <58e4c0ac93a4c391de06e2d27683e11b@cisco.com> Content-Transfer-Encoding: 7bit From: John Schnizlein Subject: Re: [Geopriv] IETF 63 GEOPRIV Session Minutes Date: Fri, 9 Sep 2005 16:46:40 -0400 To: Andrew Newton X-Mailer: Apple Mail (2.622) X-Spam-Score: 0.0 (/) X-Scan-Signature: 0bc60ec82efc80c84b8d02f4b0e4de22 Content-Transfer-Encoding: 7bit Cc: GEOPRIV WG X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org On Sep 1, 2005, at 5:28 PM, Andrew Newton wrote: > Here are the minutes for the IETF 63 GEOPRIV Session. > > If you have any additions or modifications, please let me know. > I would prefer clarification of the points I made on HELD (item 5), replacing what you have: John Schnizlein raised concerns regarding using DNS and DHCP to find HELD servers, and specifically noted that the use of DNS in the discovery mechanism of HELD does not match the normal uses of DNS. He also noted that there are often disconnects between information given out by DHCP and the domains used in DNS configuration of mobile devices. John also identified the issue that determining a location based on IP addresses may not be feasible. with this: 4 concerns: (a) reliance on "the" access network fails because there are often multiple ones - a tunnel for example (b) discovery using DNS unnecessarily relies on DHCP, then on a record not intended for the public use of DNS, (c) reliance on the domain returned by DHCP does not work either: e.g. the domain for the host in my hand is not here in France where the access is, and (d) the feasibility of generating a location from just an IP address is not clear. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Fri Sep 09 17:01:31 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDq03-0005m3-Dw; Fri, 09 Sep 2005 17:01:31 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDpzy-0005lt-EL for geopriv@megatron.ietf.org; Fri, 09 Sep 2005 17:01:29 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA09724 for ; Fri, 9 Sep 2005 17:01:24 -0400 (EDT) Received: from ctron-dnm.enterasys.com ([12.25.1.120] ident=firewall-user) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EDq3c-0001Oi-0B for geopriv@ietf.org; Fri, 09 Sep 2005 17:05:13 -0400 Received: (from uucp@localhost) by ctron-dnm.enterasys.com (8.8.7/8.8.7) id RAA03078 for ; Fri, 9 Sep 2005 17:04:18 -0400 (EDT) Received: from nhrocavg2(134.141.79.124) by ctron-dnm.enterasys.com via smap (4.1) id xma002997; Fri, 9 Sep 05 17:03:57 -0400 Received: from NHROCCNC2.ets.enterasys.com ([134.141.79.124]) by 134.141.79.124 with InterScan Messaging Security Suite; Fri, 09 Sep 2005 17:01:01 -0400 Received: from source ([134.141.79.122]) by host ([134.141.79.124]) with SMTP; Fri, 09 Sep 2005 17:01:01 -0400 Received: from maandmbx2 ([134.141.93.31]) by NHROCCNC2.ets.enterasys.com with Microsoft SMTPSVC(5.0.2195.6713); Fri, 9 Sep 2005 17:01:00 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Fri, 9 Sep 2005 17:01:00 -0400 Message-ID: <2A5E4540D4D5934D9A1E7E0B0FDB2D690103259F@MAANDMBX2.ets.enterasys.com> Thread-Topic: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) Thread-Index: AcW1eoDKaC9vsPPOTmKvcanNoBVNSAABKfCQAAA5XRAAAFqf8A== From: "Nelson, David" To: X-OriginalArrivalTime: 09 Sep 2005 21:01:00.0968 (UTC) FILETIME=[95454280:01C5B581] X-pstn-version: pmps:sps_win32_1_1_0c1 pase:2.8 X-pstn-levels: (C:78.1961 M:99.5996 P:95.9108 R:95.9108 S:34.1372 ) X-pstn-settings: 4 (0.2500:0.7500) p:13 m:13 C:14 r:13 X-pstn-addresses: from forward (org good) X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] FW: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Avi Lior writes... > Initially we did exactly that we sent the location information in the > Access-Request. But Geopriv being about privacy, was concerned what if > the user did not want to have their location exposed. Well, it seems to me that if the user is *really* concerned about disclosure of private information, then no location information should be sent until the identity of the Home AAA server has been authenticated, potentially by an EAP method providing mutual authentication. That might mean that location information cannot be sent until the successful completion of authentication, i.e. after the Access-Accept is received at the NAS. Depending on the level of privacy assurance that GEOPRIV is seeking to obtain, it might be very difficult using the current AAA architectures. > And by the way, RADIUS does keep transactional state.=20 The RADIUS protocol was designed so that RADIUS servers could be stateless. This is achieved by passing the state "cookie" back to the RADIUS clients in the form of the State and Class attributes.=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Fri Sep 09 17:03:11 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDq1f-0005w5-DS; Fri, 09 Sep 2005 17:03:11 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDq1a-0005w0-Dd for geopriv@megatron.ietf.org; Fri, 09 Sep 2005 17:03:09 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id RAA09804 for ; Fri, 9 Sep 2005 17:03:04 -0400 (EDT) Received: from zak.ecotroph.net ([216.93.167.200]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EDq5D-0001QW-2a for geopriv@ietf.org; Fri, 09 Sep 2005 17:06:53 -0400 Received: from [10.131.244.250] ([::ffff:216.168.239.87]) (AUTH: PLAIN anewton, SSL: TLSv1/SSLv3,128bits,RC4-SHA) by zak.ecotroph.net with esmtp; Fri, 09 Sep 2005 17:03:00 -0400 id 000C7E5C.4321F884.00002AF4 In-Reply-To: <58e4c0ac93a4c391de06e2d27683e11b@cisco.com> References: <6FCE1004-299B-40F6-9459-B96C4604445C@hxr.us> <58e4c0ac93a4c391de06e2d27683e11b@cisco.com> Mime-Version: 1.0 (Apple Message framework v734) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: 7bit From: Andrew Newton Subject: Re: [Geopriv] IETF 63 GEOPRIV Session Minutes Date: Fri, 9 Sep 2005 17:02:59 -0400 To: John Schnizlein X-Mailer: Apple Mail (2.734) X-Spam-Score: 0.0 (/) X-Scan-Signature: 69a74e02bbee44ab4f8eafdbcedd94a1 Content-Transfer-Encoding: 7bit Cc: GEOPRIV WG X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org On Sep 9, 2005, at 4:46 PM, John Schnizlein wrote: > > On Sep 1, 2005, at 5:28 PM, Andrew Newton wrote: > > >> Here are the minutes for the IETF 63 GEOPRIV Session. >> >> If you have any additions or modifications, please let me know. >> >> > > I would prefer clarification of the points I made on HELD (item 5), > replacing what you have: > > John Schnizlein raised concerns regarding using DNS and DHCP to > find HELD servers, and specifically noted that the use of DNS in > the discovery mechanism of HELD does not match the normal uses of > DNS. He also noted that there are often disconnects between > information given out by DHCP and the domains used in DNS > configuration of mobile devices. John also identified the issue > that determining a location based on IP addresses may not be feasible. > > with this: > > 4 concerns: (a) reliance on "the" access network fails because > there are often multiple ones - a tunnel for example (b) discovery > using DNS unnecessarily relies on DHCP, then on a record not > intended for the public use of DNS, (c) reliance on the domain > returned by DHCP does not work either: e.g. the domain for the host > in my hand is not here in France where the access is, and (d) the > feasibility of generating a location from just an IP address is not > clear. Will do. Thanks. -andy _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Fri Sep 09 19:03:55 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDruV-0004cT-Lx; Fri, 09 Sep 2005 19:03:55 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDruU-0004c6-5c for geopriv@megatron.ietf.org; Fri, 09 Sep 2005 19:03:54 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA18121 for ; Fri, 9 Sep 2005 19:03:51 -0400 (EDT) Received: from host.e-advies.nl ([213.189.23.115]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1EDry6-0004uq-Ic for geopriv@ietf.org; Fri, 09 Sep 2005 19:07:42 -0400 Received: (qmail 12996 invoked from network); 9 Sep 2005 23:03:50 -0000 Received: from h8441156020.dsl.speedlinq.nl (HELO localhost) (84.41.156.20) by host.e-advies.nl with SMTP; 9 Sep 2005 23:03:50 -0000 Date: Sat, 10 Sep 2005 01:03:41 +0200 From: Emile van Bergen To: Avi Lior Message-ID: <20050909230339.GE4034@note.evbergen.xs4all.nl> Mail-Followup-To: Avi Lior , Bernard Aboba , "Nelson, David" , radiusext@ops.ietf.org, geopriv@ietf.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.9i X-Spam-Score: 0.0 (/) X-Scan-Signature: 6d95a152022472c7d6cdf886a0424dc6 Cc: geopriv@ietf.org, radiusext@ops.ietf.org, Bernard Aboba Subject: [Geopriv] Re: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Hi, (Cross posting to GEOPRIV-WG; this discussion pertains to http://www.ietf.org/internet-drafts/draft-ietf-geopriv-radius-lo-04.txt, in particular section 8). On Fri, Sep 09, 2005 at 04:49:09PM -0400, Avi Lior wrote: > > The question is why GEOPRIV has decided not to send location > > by default. > > Initially we did exactly that we sent the location information in the > Access-Request. But Geopriv being about privacy, was concerned what if > the user did not want to have their location exposed. > > So now we have the case where in some systems, the user's policy of > whether or not to expose location is stored in the a database and during > authentication the AAA learns that policy. Presumably you mean that the NAS learns the user's policy from the home server, who has access to the user's profile. I see that your position is in line with that, but I still do not see the point. 1. If the home AAA makes access or billing conditional on Location, the user's own policy is irrelevant; the home AAA will only list the user in his database if the user agrees with his location being transmitted to the home AAA. So if that is the case, if the home AAA doesn't see Location in a request without State, it challenges. If it sees no Location in a request with State, it rejects. Advertising the positive case (NAS supports GEOPRIV and will send Location when challenged) in the access request does not prevent the challenge. Advertising the negative case (NAS supports GEOPRIV but will not send Location when challenged) will prevent the challenge and allow the home AAA to send a reject immediately. But that's a corner case that seems hardly worth dealing with. You'll either have a NAS that supports it and needs a challenge, or a pre-GEOPRIV NAS that won't do any negative GEOPRIV-advertising either. Only the home AAA advertising to its upstream the policy that it needs Location, else don't bother sending an access request, would prevent the access request and the challenge. But the general idea with RADIUS is not that home AAA push their policies downstream, but that downstream queries upstream in the individual case. In short: if Location is /needed/ by the home AAA, then you need a Challenge step anyway, a. for the NAS to learn about the user's policy, and b. for the AAA server to postpone its decision until it learns the presence or value of Location. 2. If Location is optional, and only used for statistics, marketing, and other shady purposes, then NAS can learn from the access accept whether the user allows Location to be included in accounting packets (start, interim and stop). The access accept could include a dummy Location value in that case, and we could have language saying that the NAS MUST NOT send Location in accounting unless an empty Location attribute is present in the access accept. In both cases: no advertising needed. Or even helpful. > > > But that advertisement is also an extra transaction. What's > > the home > > > AAA supposed to do, keep state from separate pseudo-authentications > > > that include the advertised information for later use? That doesn't > > > sound like RADIUS, at all. > > > Right. > > Wrong. > > No the advertizement is not an extra transaction. It comes in the > Access-Request. But if the NAS may only include Location if it learns the user's policy first, for privacy reason, then telling the NAS about the user's policy /is/ an extra transaction. You need that one, too. You're not advocating (phew) that each user is to advertise his policy towards each NAS in advance, and no other form of advertising would prevent that step. > And by the way, RADIUS does keep transactional state. Please see my other post. The NAS does not keep state about users after they log off, so it can't cache the user's policy, and the home AAA does not keep state per NAS, so it can't use information about a NAS (negative support) from earlier authentications, unless you add a whole new dimension to building a compliant RADIUS server. Kind regards, Emile. -- E-Advies - Emile van Bergen emile@e-advies.nl tel. +31 (0)78 6136282 http://www.e-advies.nl _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Fri Sep 09 19:09:09 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDrzZ-0007hU-KR; Fri, 09 Sep 2005 19:09:09 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDrzY-0007gI-Bj for geopriv@megatron.ietf.org; Fri, 09 Sep 2005 19:09:08 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA20210 for ; Fri, 9 Sep 2005 19:09:05 -0400 (EDT) Received: from host.e-advies.nl ([213.189.23.115]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1EDs3C-0005ie-Pj for geopriv@ietf.org; Fri, 09 Sep 2005 19:12:56 -0400 Received: (qmail 13033 invoked from network); 9 Sep 2005 23:09:08 -0000 Received: from h8441156020.dsl.speedlinq.nl (HELO localhost) (84.41.156.20) by host.e-advies.nl with SMTP; 9 Sep 2005 23:09:08 -0000 Date: Sat, 10 Sep 2005 01:09:00 +0200 From: Emile van Bergen To: Avi Lior , Bernard Aboba , "Nelson, David" , radiusext@ops.ietf.org, geopriv@ietf.org Message-ID: <20050909230900.GF4034@note.evbergen.xs4all.nl> Mail-Followup-To: Avi Lior , Bernard Aboba , "Nelson, David" , radiusext@ops.ietf.org, geopriv@ietf.org References: <20050909230339.GE4034@note.evbergen.xs4all.nl> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20050909230339.GE4034@note.evbergen.xs4all.nl> User-Agent: Mutt/1.5.9i X-Spam-Score: 0.0 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Cc: Subject: [Geopriv] Re: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Sorry, confusing typo here: On Sat, Sep 10, 2005 at 01:03:41AM +0200, Emile van Bergen wrote: > Only the home AAA advertising to its upstream the policy that it ^^^^^^^^ Of course that should read 'downstream', ie. towards the NAS. > needs Location, else don't bother sending an access request, would > prevent the access request and the challenge. But the general idea > with RADIUS is not that home AAA push their policies downstream, but > that downstream queries upstream in the individual case. Cheers, Emile. -- E-Advies - Emile van Bergen emile@e-advies.nl tel. +31 (0)78 6136282 http://www.e-advies.nl _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Fri Sep 09 20:22:41 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDt8j-0000J7-RX; Fri, 09 Sep 2005 20:22:41 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EDt8i-0000Io-HN for geopriv@megatron.ietf.org; Fri, 09 Sep 2005 20:22:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA23910 for ; Fri, 9 Sep 2005 20:22:39 -0400 (EDT) Received: from host.e-advies.nl ([213.189.23.115]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1EDtCO-0007ci-RF for geopriv@ietf.org; Fri, 09 Sep 2005 20:26:29 -0400 Received: (qmail 13188 invoked by uid 1000); 10 Sep 2005 00:22:40 -0000 Date: Sat, 10 Sep 2005 02:22:40 +0200 From: Emile van Bergen To: radiusext@ops.ietf.org, geopriv@ietf.org Message-ID: <20050910002240.GB12991@web1> Mail-Followup-To: radiusext@ops.ietf.org, geopriv@ietf.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.9i X-Spam-Score: 0.0 (/) X-Scan-Signature: 4b800b1eab964a31702fa68f1ff0e955 Cc: Subject: [Geopriv] Issue: Capability Attribute rationale and scenarios unclear X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Capability Attribute rationale and scenarios unclear Submitter name: Emile van Bergen Submitter email address: openradius-radextwg@e-advies.nl Date first submitted: September 10, 2005 Reference: http://ops.ietf.org/lists/radiusext/2005/msg00824.html Document: http://www.ietf.org/internet-drafts/draft-ietf-geopriv-radius-lo-04.txt Comment type: T Priority: S Section: 8 Rationale/Explanation of issue: >From the text: "8. Capability Attribute The capability attribute allows the RADIUS client to indicate whether civic and/or geospatial location information can be provided to the RADIUS server. This is useful to avoid sending location information with every request if no further out-of-band arrangements are made with regard to the transport of location information. The AAA server uses the capability attribute to indicate that the AAA client has to provide civic and/or geospatial location information as part of this particular protocol exchange. If the AAA server does not send a capability attribute then the AAA client MUST NOT return location information. The user's authorization policies MUST be consulted by the AAA server before requesting location information delivery from the AAA client. If the AAA server encounters that the AAA client does not support the desired location information it might respond with an Access-Reject with the corresponding error cause attribute (with the Location-Info-Required error code)." The reason to avoid sending location information is not clear. From the rest of the document, it would appear that the sending of location information is entirely conditional on the user's policy, not on any other consideration. In RADIUS, the RADIUS client can only learn about the user's policy from RADIUS responses to an access request. So I would suggest to put the following text somewhere: "Without prior knowledge of the user's policy, the RADIUS client MUST NOT send Location attributes in an Access Request. If the home RADIUS server requires location information for authentication and has permission from the user, it sends an Access- Challenge containing Location-Info-Required to request the information, upon which the RADIUS client will reissue its Access Request, including the Location attributes (and echoing the State attribute as per RFC 2865). If the home RADIUS server does not require location information to perform its authentication, but the user's policy allows location information to be transmitted by the RADIUS client, the RADIUS server informs the RADIUS client of that policy in the Access Accept packet." It seems there's no capability negotiation needed, and as RADIUS servers are currently not required to keep any dynamic per-client data, leave alone per-NAS data, that should only be added when absolutely required. Kind regards, Emile van Bergen. -- E-Advies - Emile van Bergen emile@e-advies.nl tel. +31 (0)78 6136282 http://www.e-advies.nl _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Sun Sep 11 20:37:18 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEcJy-0008DT-45; Sun, 11 Sep 2005 20:37:18 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEcJx-0008DG-Be for geopriv@megatron.ietf.org; Sun, 11 Sep 2005 20:37:17 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id UAA02248 for ; Sun, 11 Sep 2005 20:37:08 -0400 (EDT) Received: from marauder.andrew.com ([198.17.217.129]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EEcNt-0001mT-Uy for geopriv@ietf.org; Sun, 11 Sep 2005 20:41:24 -0400 Received: from aopmfilt4.andrew.com ([127.0.0.1]) by marauder.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 11 Sep 2005 19:36:58 -0500 Received: from Unknown [10.3.20.69] by aopmfilt4.andrew.com - SurfControl E-mail Filter (4.7); Sun, 11 Sep 2005 19:36:58 -0500 Received: from aopex5.andrew.com ([10.3.20.205]) by aopexbh2.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Sun, 11 Sep 2005 19:36:58 -0500 Message-ID: From: "Thomson, Martin" To: "John Schnizlein" Date: Sun, 11 Sep 2005 19:36:55 -0500 Subject: RE: [Geopriv] HELD concerns (was: IETF 63 GEOPRIV Session Minutes) MIME-Version: 1.0 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 X-OriginalArrivalTime: 12 Sep 2005 00:36:58.0073 (UTC) FILETIME=[15221490:01C5B732] X-SEF-16EBA1E9-99E8-4E1D-A1CA-4971F5510AF: 1 Content-class: urn:content-classes:message Thread-Topic: [Geopriv] HELD concerns (was: IETF 63 GEOPRIV Session Minutes) Thread-Index: AcW1gB3OZ8Ch7TS8R/eCehDy/0Z/aABqdiEg X-Spam-Score: 0.0 (/) X-Scan-Signature: 3a4bc66230659131057bb68ed51598f8 Cc: GEOPRIV WG X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0847706654==" Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org --===============0847706654== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Content-class: urn:content-classes:message Content-Transfer-Encoding: base64 SGkgSm9obiwNCg0KVGhhbmtzIGZvciBzdW1tYXJpemluZyB5b3VyIGNvbmNlcm5zIHNvIGNvbmNp c2VseSBhbmQgZ2l2aW5nIG1lIGFuIG9wcG9ydHVuaXR5IHRvIGFkZHJlc3MgdGhlbS4NCg0KPiAo YSkgcmVsaWFuY2Ugb24gInRoZSIgYWNjZXNzIG5ldHdvcmsgZmFpbHMgYmVjYXVzZSB0aGVyZSBh cmUgb2Z0ZW4gDQo+IG11bHRpcGxlIG9uZXMgLSBhIHR1bm5lbCBmb3IgZXhhbXBsZQ0KDQooYSkg UmVsaWFuY2Ugb24gdGhlIGNvbmNlcHQgb2YgInRoZSIgYWNjZXNzIG5ldHdvcmsgbWlnaHQgc2Vl bSBsaWtlIGEgc2ltcGxpc3RpYyBhcHByb2FjaCB3aGVuIHlvdSBjb25zaWRlciBob3cgY29tcGxl eCBhY2Nlc3MgbmV0d29ya3MgY2FuIGJlY29tZSwgYnV0IGl0IGlzIGEgdmFsdWFibGUgc2ltcGxp ZmljYXRpb24gdGhhdCBlbmFibGVzIHVzIHRvIGZvY3VzIG9uIHRoZSByZWFsIHByb2JsZW1zLg0K DQpUaGVyZSBhcmUgYSBmZXcgcGxhY2VzIHdoZXJlIG11bHRpcGxlIGFjY2VzcyBuZXR3b3JrcyBh cHBlYXI6DQogDQogIC0gQW4gZW50ZXJwcmlzZSBuZXR3b3JrLCB3aGljaCBzdWJzZXF1ZW50bHkg Y29ubmVjdHMgdG8gdGhlIG5ldHdvcmsgdmlhIGFuIElTUC4gIEluIHRoaXMgY2FzZSwgdGhlIGZp cnN0IGFjY2VzcyBuZXR3b3JrIGlzIHRoZSBlbnRlcnByaXNlIG5ldHdvcmssIHdoaWNoIHNob3Vs ZCBiZSBhYmxlIHRvIHByb3ZpZGUgbG9jYXRpb24gaW5mb3JtYXRpb24uICBUaGUgc2Vjb25kIGFj Y2VzcyBuZXR3b3JrICh0aGUgSVNQKSwgbWlnaHQgYmUgYWJsZSB0byBkbyB0aGUgc2FtZSBhdCBh IGRpZmZlcmVudCBsZXZlbCBvZiBncmFudWxhcml0eS4gIFRoZSBuZXcgdmVyc2lvbiBvZiBIRUxE IGluY2x1ZGVzIGFuIGV4YW1wbGUgdG8gdGhpcyBlZmZlY3QuDQoNCiAgLSBBbiBhY2Nlc3MgbmV0 d29yayBtaWdodCBiZSBtYWRlIG9mIG11bHRpcGxlIHBvcnRpb25zLCBlYWNoIG93bmVkIGFuZCBv cGVyYXRlZCBieSBkaWZmZXJlbnQgZW50aXRpZXMuICBJbiB0aGlzIGNhc2UsIGl0IGlzbid0IHJl YWxseSBtdWx0aXBsZSBhY2Nlc3MgbmV0d29ya3MuICBGb3IgZXhhbXBsZSwgYSBEU0wgbmV0d29y ayBtaWdodCBoYXZlIGEgbG9vcCBwcm92aWRlciAobGF5ZXIgMSBwcm92aWRlciksIGEgRFNMQU0g b3duZXIgKGxheWVyIDIgcHJvdmlkZXIpIGFuZCBhbiBJU1AgKGxheWVyIDMgcHJvdmlkZXIpLiAg VGhpcyBnZXRzIGNvbXBsaWNhdGVkIGZ1cnRoZXIgd2l0aCByZWdpb25hbCBicm9hZGJhbmQgcHJv dmlkZXJzIGFuZCBvdGhlciBlbnRpdGllcyB0aGF0IG93biB0aGUgaW50ZXJtZWRpYXRlIG5ldHdv cmtzIHRoYXQgZGF0YSBtYXkgdHJhdmVyc2UuICBJbiB0aGlzIHNvcnQgb2Ygc2NlbmFyaW8sIHRo ZSBjdXN0b21lciBidXlzIGEgc2VydmljZSBmcm9tIE9ORSBidXNpbmVzcyAodHlwaWNhbGx5IHRo ZSBJU1ApLCB3aG8gdGhlbiBiZWNvbWVzIHJlc3BvbnNpYmxlIGZvciBwcm92aWRpbmcgdGhlIGxv Y2F0aW9uIHNlcnZpY2UuDQogICAgICBUaGUgSVNQIGluIHRoaXMgc2NlbmFyaW8gaXMgInRoZSIg YWNjZXNzIG5ldHdvcmsgcHJvdmlkZXIuICBUaGUgcmVzcG9uc2liaWxpdHkgaXMgb24gdGhlIElT UCB0byBuZWdvdGlhdGUgd2l0aCBlYWNoIG9mIHRoZSBvdGhlciBidXNpbmVzcyBlbnRpdGllcyBm b3IgdGhvc2UgcGFydHMgb2YgdGhlIGxvY2F0aW9uIHNlcnZpY2UgdGhhdCBhcmUgcmVxdWlyZWQu ICBUaGVzZSBzb3J0cyBvZiBhcnJhbmdlbWVudHMgYXJlIGFscmVhZHkgbmVlZGVkIHRvIHByb3Zp ZGUgY29ubmVjdGl2aXR5OyB0aGlzIG9ubHkgYWRkcyBhbiBleHRyYSBhc3BlY3QgdG8gdGhvc2Ug YWdyZWVtZW50cy4NCg0KICAtIFRoZSBWUE4gZGlzY3Vzc2lvbiBjdXJyZW50bHkgcmFnZXMgKGFn YWluKSBvbiB0aGUgRUNSSVQgbGlzdC4gIFRvIHN1bW1hcml6ZSBteSB2aWV3OiBpdCBpcyBub3Qg dW5yZWFzb25hYmxlIHRvIHJlcXVpcmUgdGhhdCB0dW5uZWxzIGFyZSBub3QgdXNlZCBmb3IgdGhl IHB1cnBvc2VzIG9mIGFjcXVpcmluZyBsb2NhdGlvbiBpbmZvcm1hdGlvbi4gIFRoZSBwaHlzaWNh bCBhY2Nlc3MgbmV0d29yayBpcyB3aGVyZSBsb2NhdGlvbiBpbmZvcm1hdGlvbiBjb21lcyBmcm9t Lg0KDQoNCj4gKGIpIGRpc2NvdmVyeSB1c2luZyBETlMgdW5uZWNlc3NhcmlseSByZWxpZXMgb24g REhDUCwgdGhlbiBvbiBhIHJlY29yZCBub3QNCj4gaW50ZW5kZWQgZm9yIHRoZSBwdWJsaWMgdXNl IG9mIEROUywNCg0KKGIpIFlvdXIgY29uY2VybiB3aXRoIG91ciBETlMgZGlzY292ZXJ5IG1lY2hh bmlzbSBpcyB0aGF0IGl0IHJlcXVpcmVzIHR3byBwaWVjZXMgb2YgaW5mb3JtYXRpb24gaW4gb3Jk ZXIgdG8gb3BlcmF0ZS4gIFRob3NlIGFyZSB0aGUgYWRkcmVzcyBvZiB0aGUgRE5TIHNlcnZlciBh bmQgdGhlIGRvbWFpbiBzdWZmaXggKG9yIGEgbGlzdCB0aGVyZW9mKS4gIEkgd2lsbCBhZGRyZXNz IHlvdXIgY29uY2VybnMgYWJvdXQgdGhlIHZhbGlkaXR5IG9mIHRoZSBzdWZmaXggaW4gcGFydCBj KSwgYnV0IHRoZXJlIGFyZSB0d28gZmFjdG9ycyB0aGF0IHlvdSBtYXkgbm90IGhhdmUgY29uc2lk ZXJlZDoNCg0KICAgLSBESENQIGlzIG5vdCB0aGUgb25seSBtZWFucyBvZiBkaXNjb3ZlcmluZyB0 aGVzZSBkYXRhLiAgSSBjYW4gdGhpbmsgb2YgYSBmZXcgb2ZmIHRoZSB0b3Agb2YgbXkgaGVhZDog UFBQLCBtdWx0aWNhc3QgRE5TIChCb25qb3VyKSwgYW5kIHN0YXRpYyBjb25maWd1cmF0aW9uLg0K DQogIC0gVXNpbmcgRE5TIGluIHRoZSBtYW5uZXIgZGVzY3JpYmVkIG1lYW5zIHRoYXQgaW50ZXJt ZWRpYXJ5IG5vZGVzIGRvIG5vdCBuZWVkIHRvIGJlIG1vZGlmaWVkOyBpbmRlZWQsIHRoZSBETlMg c2VydmVyIG9ubHkgbmVlZHMgdG8gaGF2ZSBhbiBleHRyYSByZWNvcmQgYWRkZWQuICBUaGUgb25s eSBkZXBlbmRlbmN5IGlzIHRoZW4gb24gdGhlIHJlcXVlc3RpbmcgZW50aXR5Lg0KDQpETlMgaGFz IG90aGVyIGFkdmFudGFnZXMsIHN1Y2ggYXMgbWFraW5nIHRoZSBhZGRyZXNzIG9mIHRoZSBsb2Nh dGlvbiBzZXJ2ZXIgdGhhdCBzZXJ2ZXMgYSBwYXJ0aWN1bGFyIG5ldHdvcmsga25vd24uICBUaGlz IGV4cGFuZHMgdGhlIHBvdGVudGlhbCB1c2Ugb2YgdGhlICJvbiBiZWhhbGYgb2YiIGZhY2lsaXR5 Lg0KDQoNCj4gKGMpIHJlbGlhbmNlIG9uIHRoZSBkb21haW4gcmV0dXJuZWQgYnkgREhDUCBkb2Vz IG5vdCB3b3JrIGVpdGhlcjogZS5nLiB0aGUNCj4gZG9tYWluIGZvciB0aGUgaG9zdCBpbiBteSBo YW5kIGlzIG5vdCBoZXJlIGluIEZyYW5jZSB3aGVyZSB0aGUgYWNjZXNzIGlzIA0KDQooYykgSSBw cmVzdW1lIHRoYXQgeW91IHdlcmUgdGFsa2luZyBhYm91dCB0aGUgZmFjdCB0aGF0IHlvdSB3ZXJl IGdpdmVuIGFuIElQIGFkZHJlc3Mgd2l0aCB0aGUgZG9tYWluICJzb21lLWhvc3QuaWV0Zi5vcmci LiAgVGhpcyBpcyBhIGNsZWFyIGV4YW1wbGUgb2YgdGhlIGNhc2Ugd2hlcmUgdGhlIGFjY2VzcyBw cm92aWRlciBuZWVkcyB0byB1bmRlcnN0YW5kIHRoZWlyIG5ldHdvcmsuICBJbiB0aGlzIGNhc2Us IHRoZSBob3N0IHJldHVybmVkIGJ5IHRoZSBETlMgcXVlcnkgX2xvY3NlcnYraHR0cC5fdGNwLmll dGYub3JnIG5lZWRzIHRvIGhhdmUga25vd2xlZGdlIGFib3V0IHRoZSBuZXR3b3JrIHRoYXQgaXQg c2VydmVzLiAgSWYgdGhhdCBuZXR3b3JrIGluY2x1ZGVzIGRpc3BhcmF0ZSBsb2NhdGlvbnMgKFJv Y2t2aWxsZSwgUGFyaXMsIFZhbmNvdXZlciwgd2hlcmV2ZXIpIGFuZCB0aGUgZG9tYWluIHN1ZmZp eGVzIGFyZSBub3QgdW5pcXVlIGZvciB0aG9zZSBsb2NhdGlvbnMsIHRoZW4gdGhhdCBzZXJ2ZXIg d2lsbCBuZWVkIHRvIGhhdmUgYWNjZXNzIHRvIGluZm9ybWF0aW9uIGZvciBlYWNoIG9mIHRob3Nl IGxvY2F0aW9ucy4NCg0KVGhpcyBpcyBhIGdvb2QgZXhhbXBsZSBvZiB3aGVyZSB0aGUgbmVlZCB0 byBwcm92aWRlIGxvY2F0aW9uIGluZm9ybWF0aW9uIG1heSBhY3R1YWxseSBhZmZlY3QgbmV0d29y ayBkZXBsb3ltZW50LiAgSW4gdGhpcyBjYXNlLCBhIHNpbXBsZSBjaGFuZ2UgdG8gbmV0d29yayBj b25maWd1cmF0aW9uIG1pZ2h0IG1ha2UgdGhlIGVudGlyZSBzY2VuYXJpbyBlYXNpZXI6IG1ha2Ug dGhlIGRvbWFpbiBuYW1lICJzb21lLWhvc3QuaWV0ZjYzLmlldGYub3JnIi4gDQoNCg0KPiAoZCkg dGhlIGZlYXNpYmlsaXR5IG9mIGdlbmVyYXRpbmcgYSBsb2NhdGlvbiBmcm9tIGp1c3QgYW4gSVAg YWRkcmVzcyBpcw0KPiBub3QgY2xlYXIuDQoNCihkKSBJZiB5b3UgcmVhZCBzZWN0aW9uIDEsIHlv dSB3aWxsIG5vdGUgdGhhdCBIRUxEIGRlc2NyaWJlcyBhbiBhY3F1aXNpdGlvbiBwcm90b2NvbCwg aXQgcHVycG9zZWZ1bGx5IGRvZXMgbm90IGRpc2N1c3MgaG93IGxvY2F0aW9uIGlzIGRldGVybWlu ZWQuDQoNClRoZXJlIGlzLCBob3dldmVyLCBhbiBleHBlY3RhdGlvbiB0aGF0IGEgbG9jYXRpb24g c2VydmVyIGhhcyBhY2Nlc3MgdG8gc3VmZmljaWVudCBpbmZvcm1hdGlvbiBhYm91dCBhIG5ldHdv cmsgdG8gZGV0ZXJtaW5lIGxvY2F0aW9uIGZyb20gSVAgYWRkcmVzcy4gIFRoaXMgbWlnaHQgYmUg YXMgc2ltcGxlIGFzIGJlaW5nIGFibGUgdG8gcXVlcnkgYSBESENQIHNlcnZlciBmb3IgdGhlIGlu Zm9ybWF0aW9uIHRoYXQgaXQgaW5jbHVkZXMuICBMaWtlIEkgaGF2ZSBzYWlkIGJlZm9yZSwgbG9j YXRpb24gZGV0ZXJtaW5hdGlvbiB2YXJpZXMgZ3JlYXRseSBkZXBlbmRpbmcgb24gY2lyY3Vtc3Rh bmNlOyBpZiB5b3UgbGlrZSwgZGVzY3JpYmUgYSBzcGVjaWZpYyBleGFtcGxlIGFuZCB3ZSBjYW4g ZXhwbG9yZSBzb2x1dGlvbnMgZm9yIHRoYXQgc2l0dWF0aW9uLg0KDQoNCkNoZWVycywNCk1hcnRp bg0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogZ2VvcHJpdi1ib3VuY2VzQGll dGYub3JnIFttYWlsdG86Z2VvcHJpdi1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSm9o biBTY2huaXpsZWluDQpTZW50OiBTYXR1cmRheSwgMTAgU2VwdGVtYmVyIDIwMDUgNjo0NyBBTQ0K VG86IEFuZHJldyBOZXd0b24NCkNjOiBHRU9QUklWIFdHDQpTdWJqZWN0OiBSZTogW0dlb3ByaXZd IElFVEYgNjMgR0VPUFJJViBTZXNzaW9uIE1pbnV0ZXMNCg0KSSB3b3VsZCBwcmVmZXIgY2xhcmlm aWNhdGlvbiBvZiB0aGUgcG9pbnRzIEkgbWFkZSBvbiBIRUxEIChpdGVtIDUpLCANCnJlcGxhY2lu ZyB3aGF0IHlvdSBoYXZlOg0KDQpKb2huIFNjaG5pemxlaW4gcmFpc2VkIGNvbmNlcm5zIHJlZ2Fy ZGluZyB1c2luZyBETlMgYW5kIERIQ1AgdG8gZmluZCANCkhFTEQgc2VydmVycywgYW5kIHNwZWNp ZmljYWxseSBub3RlZCB0aGF0IHRoZSB1c2Ugb2YgRE5TIGluIHRoZSANCmRpc2NvdmVyeSBtZWNo YW5pc20gb2YgSEVMRCBkb2VzIG5vdCBtYXRjaCB0aGUgbm9ybWFsIHVzZXMgb2YgRE5TLiAgSGUg DQphbHNvIG5vdGVkIHRoYXQgdGhlcmUgYXJlIG9mdGVuIGRpc2Nvbm5lY3RzIGJldHdlZW4gaW5m b3JtYXRpb24gZ2l2ZW4gDQpvdXQgYnkgREhDUCBhbmQgdGhlIGRvbWFpbnMgdXNlZCBpbiBETlMg Y29uZmlndXJhdGlvbiBvZiBtb2JpbGUgDQpkZXZpY2VzLiAgSm9obiBhbHNvIGlkZW50aWZpZWQg dGhlIGlzc3VlIHRoYXQgZGV0ZXJtaW5pbmcgYSBsb2NhdGlvbiANCmJhc2VkIG9uIElQIGFkZHJl c3NlcyBtYXkgbm90IGJlIGZlYXNpYmxlLg0KDQp3aXRoIHRoaXM6DQoNCiAgNCBjb25jZXJuczog KGEpIHJlbGlhbmNlIG9uICJ0aGUiIGFjY2VzcyBuZXR3b3JrIGZhaWxzIGJlY2F1c2UgdGhlcmUg DQphcmUgb2Z0ZW4gbXVsdGlwbGUgb25lcyAtIGEgdHVubmVsIGZvciBleGFtcGxlIChiKSBkaXNj b3ZlcnkgdXNpbmcgRE5TIA0KdW5uZWNlc3NhcmlseSByZWxpZXMgb24gREhDUCwgdGhlbiBvbiBh IHJlY29yZCBub3QgaW50ZW5kZWQgZm9yIHRoZSANCnB1YmxpYyB1c2Ugb2YgRE5TLCAoYykgcmVs aWFuY2Ugb24gdGhlIGRvbWFpbiByZXR1cm5lZCBieSBESENQIGRvZXMgbm90IA0Kd29yayBlaXRo ZXI6IGUuZy4gdGhlIGRvbWFpbiBmb3IgdGhlIGhvc3QgaW4gbXkgaGFuZCBpcyBub3QgaGVyZSBp biANCkZyYW5jZSB3aGVyZSB0aGUgYWNjZXNzIGlzLCBhbmQgKGQpIHRoZSBmZWFzaWJpbGl0eSBv ZiBnZW5lcmF0aW5nIGEgDQpsb2NhdGlvbiBmcm9tIGp1c3QgYW4gSVAgYWRkcmVzcyBpcyBub3Qg Y2xlYXIuDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClRoaXMgbWVz c2FnZSBpcyBmb3IgdGhlIGRlc2lnbmF0ZWQgcmVjaXBpZW50IG9ubHkgYW5kIG1heQ0KY29udGFp biBwcml2aWxlZ2VkLCBwcm9wcmlldGFyeSwgb3Igb3RoZXJ3aXNlIHByaXZhdGUgaW5mb3JtYXRp b24uICANCklmIHlvdSBoYXZlIHJlY2VpdmVkIGl0IGluIGVycm9yLCBwbGVhc2Ugbm90aWZ5IHRo ZSBzZW5kZXINCmltbWVkaWF0ZWx5IGFuZCBkZWxldGUgdGhlIG9yaWdpbmFsLiAgQW55IHVuYXV0 aG9yaXplZCB1c2Ugb2YNCnRoaXMgZW1haWwgaXMgcHJvaGliaXRlZC4NCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KW21mMl0= --===============0847706654== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv --===============0847706654==-- From geopriv-bounces@ietf.org Mon Sep 12 10:07:15 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEoxn-000415-II; Mon, 12 Sep 2005 10:07:15 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEoxk-00040G-FV for geopriv@megatron.ietf.org; Mon, 12 Sep 2005 10:07:14 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA19680 for ; Mon, 12 Sep 2005 10:07:02 -0400 (EDT) Received: from rtp-iport-1.cisco.com ([64.102.122.148]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EEp1p-0004Y2-1e for geopriv@ietf.org; Mon, 12 Sep 2005 10:11:25 -0400 Received: from rtp-core-1.cisco.com ([64.102.124.12]) by rtp-iport-1.cisco.com with ESMTP; 12 Sep 2005 07:06:55 -0700 X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAA== X-IronPort-AV: i="3.97,99,1125903600"; d="scan'208"; a="9326133:sNHT31945896" Received: from [68.50.138.194] (che-vpn-cluster-1-121.cisco.com [10.86.240.121]) by rtp-core-1.cisco.com (8.12.10/8.12.6) with ESMTP id j8CE6PT7023303; Mon, 12 Sep 2005 10:06:50 -0400 (EDT) In-Reply-To: References: Mime-Version: 1.0 (Apple Message framework v622) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <0f3ff293b005e3e07eccfddcd480194c@cisco.com> Content-Transfer-Encoding: 7bit From: John Schnizlein Subject: Re: [Geopriv] HELD concerns (was: IETF 63 GEOPRIV Session Minutes) Date: Mon, 12 Sep 2005 10:06:50 -0400 To: "Thomson, Martin" X-Mailer: Apple Mail (2.622) X-Spam-Score: 0.0 (/) X-Scan-Signature: e8c5db863102a3ada84e0cd52a81a79e Content-Transfer-Encoding: 7bit Cc: GEOPRIV WG X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org On Sep 11, 2005, at 8:36 PM, Thomson, Martin wrote: > > Thanks for summarizing your concerns so concisely and giving me an > opportunity to address them. > >> (a) reliance on "the" access network fails because there are often >> multiple ones - a tunnel for example > > (a) Reliance on the concept of "the" access network might seem like a > simplistic approach when you consider how complex access networks can > become, but it is a valuable simplification that enables us to focus > on the real problems. The point I was trying to make is that the simplification you propose creates real problems, and there are already enough. The (counterfactual) assumption of a single access network makes the problem more complex. > There are a few places where multiple access networks appear: > > - An enterprise network, which subsequently connects to the network > via an ISP. In this case, the first access network is the enterprise > network, which should be able to provide location information. The > second access network (the ISP), might be able to do the same at a > different level of granularity. The new version of HELD includes an > example to this effect. Many enterprises attach to the Internet through multiple ISPs and in multiple locations (for good reasons). While the locations of hosts within the enterprise might be known to the enterprise network operators, they might have valid reason not to operate the sort of LIS proposed for HELD. Note that some enterprises provide only a central telephone number for caller-ID. > - An access network might be made of multiple portions, each owned > and operated by different entities. In this case, it isn't really > multiple access networks. For example, a DSL network might have a > loop provider (layer 1 provider), a DSLAM owner (layer 2 provider) and > an ISP (layer 3 provider). This gets complicated further with > regional broadband providers and other entities that own the > intermediate networks that data may traverse. In this sort of > scenario, the customer buys a service from ONE business (typically the > ISP), who then becomes responsible for providing the location service. > The ISP in this scenario is "the" access network provider. The > responsibility is on the ISP to negotiate with each of the other > business entities for those parts of the location service that are > required. These sorts of arrangements are already needed to provide > connectivity; this only adds an extra aspect to those agreements. A design that depends on the existence of a variety of business relationships to be reflected in information exchange is probably not deployable. A better design would identify the smallest set of necessary information holders and protocol mechanisms for the simplest transfer from the source of the information to the recipient. The ISP that operates a DNS server might not operate the local loop that provides location information. The design of protocols for GeoPriv should not demand transfer of information between these different operators unless no alternative is possible. I think we agree that the party that has location information is the one that operates the link closest to the host. A mandate that this information be made available to the emergency call's source and/or destination seems to be the minimal intrusion. > - The VPN discussion currently rages (again) on the ECRIT list. To > summarize my view: it is not unreasonable to require that tunnels are > not used for the purposes of acquiring location information. The > physical access network is where location information comes from. We simply disagree that valid reasons for tunnels can be set aside in the pursuit of a particular GeoPriv solution. >> (b) discovery using DNS unnecessarily relies on DHCP, then on a >> record not intended for the public use of DNS, > > (b) Your concern with our DNS discovery mechanism is that it requires > two pieces of information in order to operate. Those are the address > of the DNS server and the domain suffix (or a list thereof). I will > address your concerns about the validity of the suffix in part c), but > there are two factors that you may not have considered: My point about the proposal involving both DNS and DHCP is that there is no need for the DHCP server to provide a local DNS server, with another lookup in the DNS for information that is intended to be useful only for the local client. If you want the answer from DHCP to provide the LIS information, just send it through DHCP. Chaining through two services is unnecessary. In fact, why not provide the useful information - the location - rather than a pointer to a LIS for location information? > - DHCP is not the only means of discovering these data. I can > think of a few off the top of my head: PPP, multicast DNS (Bonjour), > and static configuration. Yes, it would be reasonable to provide location information through PPP as long as the Network Access Server (NAS) can provide the location. I would hope that we would limit discussion to the Internet specification - Linklocal Multicast Name Resolution (LLMNR) draft-ietf-dnsext-mdns-41.txt - rather than its proprietary precursor. How would LLMNR or static configuration know the location of the host or the LIS for where the host happens to be? > - Using DNS in the manner described means that intermediary nodes do > not need to be modified; indeed, the DNS server only needs to have an > extra record added. The only dependency is then on the requesting > entity. Here again we have ambiguity in the use of "the". To which DNS server is a record added? How does the operator of that DNS server know what to add? What name gets this record? How does the "requesting entity" know what name to query? > DNS has other advantages, such as making the address of the location > server that serves a particular network known. This expands the > potential use of the "on behalf of" facility. It was my impression that the WG agreed with Ted Hardie that the "on behalf of" facility opened too large a security hole to be worth further consideration. >> (c) reliance on the domain returned by DHCP does not work either: >> e.g. the >> domain for the host in my hand is not here in France where the access >> is > > (c) I presume that you were talking about the fact that you were given > an IP address with the domain "some-host.ietf.org". This is a clear > example of the case where the access provider needs to understand > their network. In this case, the host returned by the DNS query > _locserv+http._tcp.ietf.org needs to have knowledge about the network > that it serves. If that network includes disparate locations > (Rockville, Paris, Vancouver, wherever) and the domain suffixes are > not unique for those locations, then that server will need to have > access to information for each of those locations. No, my computer remains in the cisco.com domain even when it is at an IETF meeting in Paris. The access provider is actually the set of volunteers who operate the IETF network, the ISP is (usually) the gracious donor of Internet access. How is the operator of the cisco.com domain supposed to have understanding of such a remote network? > This is a good example of where the need to provide location > information may actually affect network deployment. In this case, a > simple change to network configuration might make the entire scenario > easier: make the domain name "some-host.ietf63.ietf.org". The implication that detailed information must exchanged among all the possible contributers of Internet access in order to satisfy a particular GeoPriv proposal is evidence that a different design is needed. It is not reasonable to demand changes in Internet deployment. >> (d) the feasibility of generating a location from just an IP address >> is not clear. > > (d) If you read section 1, you will note that HELD describes an > acquisition protocol, it purposefully does not discuss how location is > determined. > > There is, however, an expectation that a location server has access to > sufficient information about a network to determine location from IP > address. This might be as simple as being able to query a DHCP server > for the information that it includes. Like I have said before, > location determination varies greatly depending on circumstance; if > you like, describe a specific example and we can explore solutions for > that situation. Yes, I read the part of the HELD specification that stated that how an IP address is mapped to a location is outside the scope. But that this mapping is feasible must be established or the expectation has no foundation. If the feasibility depends on "query a DHCP server", then the feasibility of having the location in the DHCP server, and the protocol for this query (presumably not DHCP) would be necessary. While it might be possible to construct situations in which this mapping would work, the general case would have to be established in order for HELD to be a reasonable solution. It is not reasonable to insist that all existing parts of the Internet be redesigned to enable HELD. John _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Mon Sep 12 15:50:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEuKA-0004dT-77; Mon, 12 Sep 2005 15:50:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEuJb-0004Rg-0Y; Mon, 12 Sep 2005 15:50:07 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA11855; Mon, 12 Sep 2005 15:50:05 -0400 (EDT) Received: from [132.151.6.50] (helo=newodin.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EEuNm-00077J-Po; Mon, 12 Sep 2005 15:54:29 -0400 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1EEuJW-0004C7-5W; Mon, 12 Sep 2005 15:50:02 -0400 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org From: Internet-Drafts@ietf.org Message-Id: Date: Mon, 12 Sep 2005 15:50:02 -0400 X-Spam-Score: 0.4 (/) X-Scan-Signature: 10ba05e7e8a9aa6adb025f426bef3a30 Cc: geopriv@ietf.org Subject: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Geographic Location/Privacy Working Group of the IETF. Title : Dynamic Host Configuration Protocol (DHCPv4 and DHCPv6) Option for Civic Addresses Configuration Information Author(s) : H. Schulzrinne Filename : draft-ietf-geopriv-dhcp-civil-07.txt Pages : 22 Date : 2005-9-12 This document specifies a Dynamic Host Configuration Protocol (DHCPv4 and DHCPv6) option containing the civic location of the client or the DHCP server. The Location Configuration Information (LCI) includes information about the country, administrative units such as states, provinces and cities, as well as street addresses, postal community names and building information. The option allows multiple renditions of the same address in different scripts and languages. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-geopriv-dhcp-civil-07.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-geopriv-dhcp-civil-07.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-geopriv-dhcp-civil-07.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-9-12104731.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-geopriv-dhcp-civil-07.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-geopriv-dhcp-civil-07.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-9-12104731.I-D@ietf.org> --OtherAccess-- --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv --NextPart-- From geopriv-bounces@ietf.org Tue Sep 13 04:09:40 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EF5rH-0005wn-UG; Tue, 13 Sep 2005 04:09:39 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EEyBv-0003xl-1h for geopriv@megatron.ietf.org; Mon, 12 Sep 2005 19:58:27 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id TAA09282 for ; Mon, 12 Sep 2005 19:58:12 -0400 (EDT) Received: from marauder.andrew.com ([198.17.217.129]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EEyFy-0001j7-MW for geopriv@ietf.org; Mon, 12 Sep 2005 20:02:39 -0400 Received: from aopmfilt4.andrew.com ([127.0.0.1]) by marauder.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Mon, 12 Sep 2005 18:57:59 -0500 Received: from Unknown [10.3.20.69] by aopmfilt4.andrew.com - SurfControl E-mail Filter (4.7); Mon, 12 Sep 2005 18:57:59 -0500 Received: from aopex5.andrew.com ([10.3.20.205]) by aopexbh2.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Mon, 12 Sep 2005 18:57:58 -0500 Message-ID: From: "Winterbottom, James" To: Date: Mon, 12 Sep 2005 18:57:56 -0500 Subject: RE: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 X-OriginalArrivalTime: 12 Sep 2005 23:57:58.0490 (UTC) FILETIME=[CD0BCBA0:01C5B7F5] X-SEF-16EBA1E9-99E8-4E1D-A1CA-4971F5510AF: 1 Content-class: urn:content-classes:message Thread-Topic: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt Thread-Index: AcW31otFA3Co6l0dShecXzZ3HxU56QAHsH3Q X-Spam-Score: 0.0 (/) X-Scan-Signature: 8de5f93cb2b4e3bee75302e9eacc33db Content-Transfer-Encoding: quoted-printable X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Hi Henning, Martin Thomson and I added a couple of extra Civic address types to our draft draft-thomson-revised-civic-lo-00.txt, these were SEAT and ADDINFO. These might be useful to add to the DHCP civic draft also. Cheers James > -----Original Message----- > From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On Behalf > Of Internet-Drafts@ietf.org > Sent: Tuesday, 13 September 2005 5:50 AM > To: i-d-announce@ietf.org > Cc: geopriv@ietf.org > Subject: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt >=20 > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Geographic Location/Privacy Working Group > of the IETF. >=20 > Title : Dynamic Host Configuration Protocol (DHCPv4 > and DHCPv6) Option for Civic Addresses > Configuration Information > Author(s) : H. Schulzrinne > Filename : draft-ietf-geopriv-dhcp-civil-07.txt > Pages : 22 > Date : 2005-9-12 >=20 > This document specifies a Dynamic Host Configuration Protocol (DHCPv4 > and DHCPv6) option containing the civic location of the client or the > DHCP server. The Location Configuration Information (LCI) includes > information about the country, administrative units such as states, > provinces and cities, as well as street addresses, postal community > names and building information. The option allows multiple > renditions of the same address in different scripts and languages. >=20 > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-ietf-geopriv-dhcp-civil-07.txt >=20 > To remove yourself from the I-D Announcement list, send a message to > i-d-announce-request@ietf.org with the word unsubscribe in the body of the > message. > You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce > to change your subscription settings. >=20 >=20 > Internet-Drafts are also available by anonymous FTP. Login with the > username > "anonymous" and a password of your e-mail address. After logging in, > type "cd internet-drafts" and then > "get draft-ietf-geopriv-dhcp-civil-07.txt". >=20 > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html > or ftp://ftp.ietf.org/ietf/1shadow-sites.txt >=20 >=20 > Internet-Drafts can also be obtained by e-mail. >=20 > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-ietf-geopriv-dhcp-civil-07.txt". >=20 > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. >=20 >=20 > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. ---------------------------------------------------------------------------= --------------------- This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. =20 If you have received it in error, please notify the sender immediately and delete the original. Any unauthorized use of this email is prohibited. ---------------------------------------------------------------------------= --------------------- [mf2] _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Tue Sep 13 15:30:50 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFGUU-0003VE-Ab; Tue, 13 Sep 2005 15:30:50 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EF30s-0002D6-PD for geopriv@megatron.ietf.org; Tue, 13 Sep 2005 01:07:24 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA20058 for ; Tue, 13 Sep 2005 01:07:09 -0400 (EDT) Received: from marauder.andrew.com ([198.17.217.129]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EF34z-0008Hb-5L for geopriv@ietf.org; Tue, 13 Sep 2005 01:11:39 -0400 Received: from aopmfilt4.andrew.com ([127.0.0.1]) by marauder.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 13 Sep 2005 00:06:54 -0500 Received: from Unknown [10.3.20.66] by aopmfilt4.andrew.com - SurfControl E-mail Filter (4.7); Tue, 13 Sep 2005 00:06:54 -0500 Received: from aopex5.andrew.com ([10.3.20.205]) by aopexbh1.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 13 Sep 2005 00:06:53 -0500 Message-ID: From: "Winterbottom, James" To: "John Schnizlein" , "Thomson, Martin" Date: Tue, 13 Sep 2005 00:06:51 -0500 Subject: RE: [Geopriv] HELD concerns (was: IETF 63 GEOPRIV Session Minutes) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 X-OriginalArrivalTime: 13 Sep 2005 05:06:53.0940 (UTC) FILETIME=[F5090340:01C5B820] X-SEF-16EBA1E9-99E8-4E1D-A1CA-4971F5510AF: 1 Content-class: urn:content-classes:message Thread-Topic: [Geopriv] HELD concerns (was: IETF 63 GEOPRIV Session Minutes) Thread-Index: AcW3o9t5A9HMwQ5PT3y3HTP2B0X91gAWBkPA X-Spam-Score: 0.0 (/) X-Scan-Signature: 142a000676f5977e1797396caab8b611 Content-Transfer-Encoding: quoted-printable Cc: GEOPRIV WG X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org John, > -----Original Message----- > From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On Behalf > Of John Schnizlein > Sent: Tuesday, 13 September 2005 12:07 AM > To: Thomson, Martin > Cc: GEOPRIV WG > Subject: Re: [Geopriv] HELD concerns (was: IETF 63 GEOPRIV Session > Minutes) >=20 >=20 > On Sep 11, 2005, at 8:36 PM, Thomson, Martin wrote: > > > > Thanks for summarizing your concerns so concisely and giving me an > > opportunity to address them. > > > >> (a) reliance on "the" access network fails because there are often > >> multiple ones - a tunnel for example > > > > (a) Reliance on the concept of "the" access network might seem like a > > simplistic approach when you consider how complex access networks can > > become, but it is a valuable simplification that enables us to focus > > on the real problems. >=20 > The point I was trying to make is that the simplification you propose > creates real problems, and there are already enough. The > (counterfactual) assumption of a single access network makes the > problem more complex. >=20 > > There are a few places where multiple access networks appear: > > > > - An enterprise network, which subsequently connects to the network > > via an ISP. In this case, the first access network is the enterprise > > network, which should be able to provide location information. The > > second access network (the ISP), might be able to do the same at a > > different level of granularity. The new version of HELD includes an > > example to this effect. >=20 > Many enterprises attach to the Internet through multiple ISPs and in > multiple locations (for good reasons). While the locations of hosts > within the enterprise might be known to the enterprise network > operators, they might have valid reason not to operate the sort of LIS > proposed for HELD. Note that some enterprises provide only a central > telephone number for caller-ID. >=20 > > - An access network might be made of multiple portions, each owned > > and operated by different entities. In this case, it isn't really > > multiple access networks. For example, a DSL network might have a > > loop provider (layer 1 provider), a DSLAM owner (layer 2 provider) and > > an ISP (layer 3 provider). This gets complicated further with > > regional broadband providers and other entities that own the > > intermediate networks that data may traverse. In this sort of > > scenario, the customer buys a service from ONE business (typically the > > ISP), who then becomes responsible for providing the location service. > > The ISP in this scenario is "the" access network provider. The > > responsibility is on the ISP to negotiate with each of the other > > business entities for those parts of the location service that are > > required. These sorts of arrangements are already needed to provide > > connectivity; this only adds an extra aspect to those agreements. >=20 > A design that depends on the existence of a variety of business > relationships to be reflected in information exchange is probably not > deployable. A better design would identify the smallest set of > necessary information holders and protocol mechanisms for the simplest > transfer from the source of the information to the recipient. >=20 > The ISP that operates a DNS server might not operate the local loop > that provides location information. The design of protocols for > GeoPriv should not demand transfer of information between these > different operators unless no alternative is possible. >=20 [AJW] There is an expectation in this case that ISP also runs a LIS. The complexity of these types of networks is going to require these types of arrangements, it does already to some degree to enable the connectivity in the first place. Having looked at the DSL scenarios in a lot of detail I must admit that I am at a loss as to how you provide this functionality without these relationships. > I think we agree that the party that has location information is the > one that operates the link closest to the host. A mandate that this > information be made available to the emergency call's source and/or > destination seems to be the minimal intrusion. >=20 > > - The VPN discussion currently rages (again) on the ECRIT list. To > > summarize my view: it is not unreasonable to require that tunnels are > > not used for the purposes of acquiring location information. The > > physical access network is where location information comes from. >=20 > We simply disagree that valid reasons for tunnels can be set aside in > the pursuit of a particular GeoPriv solution. >=20 > >> (b) discovery using DNS unnecessarily relies on DHCP, then on a > >> record not intended for the public use of DNS, > > > > (b) Your concern with our DNS discovery mechanism is that it requires > > two pieces of information in order to operate. Those are the address > > of the DNS server and the domain suffix (or a list thereof). I will > > address your concerns about the validity of the suffix in part c), but > > there are two factors that you may not have considered: >=20 > My point about the proposal involving both DNS and DHCP is that there > is no need for the DHCP server to provide a local DNS server, with > another lookup in the DNS for information that is intended to be useful > only for the local client. If you want the answer from DHCP to provide > the LIS information, just send it through DHCP. Chaining through two > services is unnecessary. In fact, why not provide the useful > information - the location - rather than a pointer to a LIS for > location information? [AJW] As has been stated more than once, the DHCP option for providing location does not work in all cases, indeed in RFC-3825 it explicitly excludes wireless networks. DHCP is nice yes, but quite simply is not the answer to all things IP related. There are cases where a static location simply does not work, and a locationURI is more appropriate. James Polk's latest draft includes a specific option for this (nice idea James). >=20 > > - DHCP is not the only means of discovering these data. I can > > think of a few off the top of my head: PPP, multicast DNS (Bonjour), > > and static configuration. >=20 > Yes, it would be reasonable to provide location information through PPP > as long as the Network Access Server (NAS) can provide the location. >=20 [AJW] Again I see no requirement for the NAS to provide location. For the most part NAS implementations can and do provide measurement information that can be converted to location by a LIS quite easily without any change to the NAS. Why change the NAS when it is completely unnecessary? The thrust of your arguments seem to be that change is not good, yet you want to instigate change in devices where it is neither appropriate nor required. There is no rule that says location may only be acquired through layer 2, and I fail to understand this constant underlying theme that says it must be. > I would hope that we would limit discussion to the Internet > specification - Linklocal Multicast Name Resolution (LLMNR) > draft-ietf-dnsext-mdns-41.txt - rather than its proprietary precursor. >=20 > How would LLMNR or static configuration know the location of the host > or the LIS for where the host happens to be? >=20 > > - Using DNS in the manner described means that intermediary nodes do > > not need to be modified; indeed, the DNS server only needs to have an > > extra record added. The only dependency is then on the requesting > > entity. >=20 > Here again we have ambiguity in the use of "the". To which DNS server > is a record added? How does the operator of that DNS server know what > to add? What name gets this record? How does the "requesting entity" > know what name to query? >=20 > > DNS has other advantages, such as making the address of the location > > server that serves a particular network known. This expands the > > potential use of the "on behalf of" facility. >=20 > It was my impression that the WG agreed with Ted Hardie that the "on > behalf of" facility opened too large a security hole to be worth > further consideration. >=20 > >> (c) reliance on the domain returned by DHCP does not work either: > >> e.g. the > >> domain for the host in my hand is not here in France where the access > >> is > > > > (c) I presume that you were talking about the fact that you were given > > an IP address with the domain "some-host.ietf.org". This is a clear > > example of the case where the access provider needs to understand > > their network. In this case, the host returned by the DNS query > > _locserv+http._tcp.ietf.org needs to have knowledge about the network > > that it serves. If that network includes disparate locations > > (Rockville, Paris, Vancouver, wherever) and the domain suffixes are > > not unique for those locations, then that server will need to have > > access to information for each of those locations. >=20 > No, my computer remains in the cisco.com domain even when it is at an > IETF meeting in Paris. The access provider is actually the set of > volunteers who operate the IETF network, the ISP is (usually) the > gracious donor of Internet access. How is the operator of the > cisco.com domain supposed to have understanding of such a remote > network? >=20 > > This is a good example of where the need to provide location > > information may actually affect network deployment. In this case, a > > simple change to network configuration might make the entire scenario > > easier: make the domain name "some-host.ietf63.ietf.org". >=20 > The implication that detailed information must exchanged among all the > possible contributers of Internet access in order to satisfy a > particular GeoPriv proposal is evidence that a different design is > needed. It is not reasonable to demand changes in Internet deployment. >=20 > >> (d) the feasibility of generating a location from just an IP address > >> is not clear. > > > > (d) If you read section 1, you will note that HELD describes an > > acquisition protocol, it purposefully does not discuss how location is > > determined. > > > > There is, however, an expectation that a location server has access to > > sufficient information about a network to determine location from IP > > address. This might be as simple as being able to query a DHCP server > > for the information that it includes. Like I have said before, > > location determination varies greatly depending on circumstance; if > > you like, describe a specific example and we can explore solutions for > > that situation. >=20 > Yes, I read the part of the HELD specification that stated that how an > IP address is mapped to a location is outside the scope. But that this > mapping is feasible must be established or the expectation has no > foundation. If the feasibility depends on "query a DHCP server", then > the feasibility of having the location in the DHCP server, and the > protocol for this query (presumably not DHCP) would be necessary. > While it might be possible to construct situations in which this > mapping would work, the general case would have to be established in > order for HELD to be a reasonable solution. It is not reasonable to > insist that all existing parts of the Internet be redesigned to enable > HELD. >=20 > John [AJW] As stated previously DHCP and static location delivery do not work in all circumstances, and as mobility increases in its proliferation I would argue that it will not work for the majority of cases in a few years without significant modification. The suggestion has often been made that the client can simply re-plug the DHCP server for updated location information when it wants it, I would like to understand how you plan to make this work. For non-mobile users fine, but in this case the re-plug is hardly necessary, for anything remotely mobile this simply breaks down. The entire DHCP location determination mechanism is reliant upon relay information which has a multitude of problems. 1) It does not support cascading relay agents. If the network is configured with a hierarchy of relays the relay seen by the DHCP server is the last one. So this implementation already places tight constraints on network configuration. 2) Relay information for most DHCP servers today is not included in the lease data, further to this, if a client has moved the original relay data may not be valid anymore. 3) Sending a lease renewal message by-passes any relays in the network, I quote from RFC-2131, "DHCPREQUEST generated during RENEWING state: 'server identifier' MUST NOT be filled in, 'requested IP address' option MUST NOT be filled in, 'ciaddr' MUST be filled in with client's IP address. In this situation, the client is completely configured, and is trying to extend its lease. This message will be unicast, so no relay agents will be involved in its transmission. Because 'giaddr' is therefore not filled in, the DHCP server will trust the value in 'ciaddr', and use it when replying to the client. A client MAY choose to renew or extend its lease prior to T1. The server may choose not to extend the lease (as a policy decision by the network administrator), but should return a DHCPACK message regardless." In this case, where is my location determination going to come from? The arguments you raise against HELD and a LIS identifier are equally applicable if not more so to DHCP LCI since you propose no alternatives to DHCP relay determination. HELD does not restrict itself to a single location determination technology, as such it presents a uniform way of acquiring location, nothing more. Cheers James >=20 > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv ---------------------------------------------------------------------------= --------------------- This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. =20 If you have received it in error, please notify the sender immediately and delete the original. Any unauthorized use of this email is prohibited. ---------------------------------------------------------------------------= --------------------- [mf2] _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Tue Sep 13 15:32:36 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFGWC-0004ZK-Mp; Tue, 13 Sep 2005 15:32:36 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFB1P-00074z-Mj for geopriv@megatron.ietf.org; Tue, 13 Sep 2005 09:40:29 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA21613 for ; Tue, 13 Sep 2005 09:40:15 -0400 (EDT) Received: from jalapeno.cc.columbia.edu ([128.59.29.5] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFB5e-0002lV-1r for geopriv@ietf.org; Tue, 13 Sep 2005 09:44:51 -0400 Received: from [192.168.0.31] (pool-141-153-174-94.mad.east.verizon.net [141.153.174.94]) (user=hgs10 mech=PLAIN bits=0) by jalapeno.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j8DDe239003777 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Sep 2005 09:40:15 -0400 (EDT) Message-ID: <4326D6B1.8050506@cs.columbia.edu> Date: Tue, 13 Sep 2005 09:40:01 -0400 From: Henning Schulzrinne Organization: Columbia University User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Winterbottom, James" Subject: Re: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.5 X-Spam-Score: 0.2 (/) X-Scan-Signature: 08170828343bcf1325e4a0fb4584481c Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Winterbottom, James wrote: > Hi Henning, > > Martin Thomson and I added a couple of extra Civic address types to our > draft draft-thomson-revised-civic-lo-00.txt, these were SEAT and > ADDINFO. These might be useful to add to the DHCP civic draft also. I've added SEAT (CAtype 33). I'm less convinced of ADDINFO, given that we already have LOC: "additional location information". Having several free-text fields with somewhat fuzzy boundaries seems likely to cause confusion. The likely consequence is that implementations will just concatenate them all... Henning _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 14 02:08:45 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFQRp-0006Zf-CG; Wed, 14 Sep 2005 02:08:45 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFQRm-0006Xc-DL for geopriv@megatron.ietf.org; Wed, 14 Sep 2005 02:08:43 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id CAA04311 for ; Wed, 14 Sep 2005 02:08:38 -0400 (EDT) Received: from marauder.andrew.com ([198.17.217.129]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFQWG-0007kO-RC for geopriv@ietf.org; Wed, 14 Sep 2005 02:13:22 -0400 Received: from aopmfilt4.andrew.com ([127.0.0.1]) by marauder.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 14 Sep 2005 01:08:18 -0500 Received: from Unknown [10.3.20.69] by aopmfilt4.andrew.com - SurfControl E-mail Filter (4.7); Wed, 14 Sep 2005 01:08:17 -0500 Received: from aopex5.andrew.com ([10.3.20.205]) by aopexbh2.andrew.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 14 Sep 2005 01:08:16 -0500 Message-ID: From: "Thomson, Martin" To: "Henning Schulzrinne" Date: Wed, 14 Sep 2005 01:08:12 -0500 Subject: RE: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt MIME-Version: 1.0 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 X-OriginalArrivalTime: 14 Sep 2005 06:08:16.0980 (UTC) FILETIME=[B2B61140:01C5B8F2] X-SEF-16EBA1E9-99E8-4E1D-A1CA-4971F5510AF: 1 Content-class: urn:content-classes:message Thread-Topic: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt Thread-Index: AcW4nLL0I5Y48P5yRNKBXgGEom9fgwAVBFBg X-Spam-Score: 0.0 (/) X-Scan-Signature: b19722fc8d3865b147c75ae2495625f2 Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1084407326==" Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org --===============1084407326== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Content-class: urn:content-classes:message Content-Transfer-Encoding: base64 WW91IGFyZSByaWdodCBIZW5uaW5nLCBBRERJTkZPIGRvZXNuJ3QgYWRkIGFueXRoaW5nIG9mIHZh bHVlLiAgSSBoYWQgc29tZSB3ZWlyZCBpZGVhIHRoYXQgTE9DIGhhZCBzb21lIGFzc29jaWF0ZWQg c2VtYW50aWMgLSBwZXJoYXBzIGJlY2F1c2UgdGhlIGV4YW1wbGUgaW4gUElERi1MTyB3YXMgIlJv b20geCIuDQoNCkkganVzdCB3aXNoIHRoYXQgaXQgd2Fzbid0IGNhbGxlZCBMT0MsIHdoaWNoIGlz IHRvIG15IG1pbmQgYSBwb29yIGNob2ljZSBvZiBuYW1lLg0KDQpDaGVlcnMsDQpNYXJ0aW4NCg0K LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IGdlb3ByaXYtYm91bmNlc0BpZXRmLm9y ZyBbbWFpbHRvOmdlb3ByaXYtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIEhlbm5pbmcg U2NodWx6cmlubmUNClNlbnQ6IFR1ZXNkYXksIDEzIFNlcHRlbWJlciAyMDA1IDExOjQwIFBNDQpU bzogV2ludGVyYm90dG9tLCBKYW1lcw0KQ2M6IGdlb3ByaXZAaWV0Zi5vcmcNClN1YmplY3Q6IFJl OiBbR2VvcHJpdl0gSS1EIEFDVElPTjpkcmFmdC1pZXRmLWdlb3ByaXYtZGhjcC1jaXZpbC0wNy50 eHQNCg0KV2ludGVyYm90dG9tLCBKYW1lcyB3cm90ZToNCj4gSGkgSGVubmluZywNCj4gDQo+IE1h cnRpbiBUaG9tc29uIGFuZCBJIGFkZGVkIGEgY291cGxlIG9mIGV4dHJhIENpdmljIGFkZHJlc3Mg dHlwZXMgdG8gb3VyDQo+IGRyYWZ0IGRyYWZ0LXRob21zb24tcmV2aXNlZC1jaXZpYy1sby0wMC50 eHQsIHRoZXNlIHdlcmUgU0VBVCBhbmQNCj4gQURESU5GTy4gVGhlc2UgbWlnaHQgYmUgdXNlZnVs IHRvIGFkZCB0byB0aGUgREhDUCBjaXZpYyBkcmFmdCBhbHNvLg0KDQpJJ3ZlIGFkZGVkIFNFQVQg KENBdHlwZSAzMykuDQoNCkknbSBsZXNzIGNvbnZpbmNlZCBvZiBBRERJTkZPLCBnaXZlbiB0aGF0 IHdlIGFscmVhZHkgaGF2ZSBMT0M6IA0KImFkZGl0aW9uYWwgbG9jYXRpb24gaW5mb3JtYXRpb24i LiBIYXZpbmcgc2V2ZXJhbCBmcmVlLXRleHQgZmllbGRzIHdpdGggDQpzb21ld2hhdCBmdXp6eSBi b3VuZGFyaWVzIHNlZW1zIGxpa2VseSB0byBjYXVzZSBjb25mdXNpb24uIFRoZSBsaWtlbHkgDQpj b25zZXF1ZW5jZSBpcyB0aGF0IGltcGxlbWVudGF0aW9ucyB3aWxsIGp1c3QgY29uY2F0ZW5hdGUg dGhlbSBhbGwuLi4NCg0KSGVubmluZw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KR2VvcHJpdiBtYWlsaW5nIGxpc3QNCkdlb3ByaXZAaWV0Zi5vcmcN Cmh0dHBzOi8vd3d3MS5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2dlb3ByaXYNCg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpUaGlzIG1lc3NhZ2UgaXMgZm9yIHRo ZSBkZXNpZ25hdGVkIHJlY2lwaWVudCBvbmx5IGFuZCBtYXkNCmNvbnRhaW4gcHJpdmlsZWdlZCwg cHJvcHJpZXRhcnksIG9yIG90aGVyd2lzZSBwcml2YXRlIGluZm9ybWF0aW9uLiAgDQpJZiB5b3Ug aGF2ZSByZWNlaXZlZCBpdCBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyDQppbW1l ZGlhdGVseSBhbmQgZGVsZXRlIHRoZSBvcmlnaW5hbC4gIEFueSB1bmF1dGhvcml6ZWQgdXNlIG9m DQp0aGlzIGVtYWlsIGlzIHByb2hpYml0ZWQuDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NClttZjJd --===============1084407326== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv --===============1084407326==-- From geopriv-bounces@ietf.org Wed Sep 14 08:16:32 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFWBk-0002aH-3n; Wed, 14 Sep 2005 08:16:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFWBh-0002a5-Q8 for geopriv@megatron.ietf.org; Wed, 14 Sep 2005 08:16:29 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA07130 for ; Wed, 14 Sep 2005 08:16:28 -0400 (EDT) Received: from mail.911.org ([65.67.130.188]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFWGD-0000GG-RF for geopriv@ietf.org; Wed, 14 Sep 2005 08:21:15 -0400 Received: from mail pickup service by mail.911.org with Microsoft SMTPSVC; Wed, 14 Sep 2005 07:15:57 -0500 From: "Marc Berryman" To: "Thomson, Martin" , "Henning Schulzrinne" Date: Wed, 14 Sep 2005 07:15:57 -0500 Subject: RE: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 Content-Class: urn:content-classes:message Message-ID: <911MAIL1HVBAIWPxguB00002759@mail.911.org> X-OriginalArrivalTime: 14 Sep 2005 12:15:57.0844 (UTC) FILETIME=[1002C540:01C5B926] X-Spam-Score: 0.0 (/) X-Scan-Signature: c0bedb65cce30976f0bf60a0a39edea4 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Yes, the naming of it as LOC is confusing, but I can see ADDINFO containing information in some cases, such as room 112 or inner corridor A. Marc B -----Original Message----- From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On Behalf Of Thomson, Martin Sent: Wednesday, September 14, 2005 1:08 AM To: Henning Schulzrinne Cc: geopriv@ietf.org Subject: RE: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt You are right Henning, ADDINFO doesn't add anything of value. I had some weird idea that LOC had some associated semantic - perhaps because the example in PIDF-LO was "Room x". I just wish that it wasn't called LOC, which is to my mind a poor choice of name. Cheers, Martin -----Original Message----- From: geopriv-bounces@ietf.org [mailto:geopriv-bounces@ietf.org] On Behalf Of Henning Schulzrinne Sent: Tuesday, 13 September 2005 11:40 PM To: Winterbottom, James Cc: geopriv@ietf.org Subject: Re: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt Winterbottom, James wrote: > Hi Henning, >=20 > Martin Thomson and I added a couple of extra Civic address types to our > draft draft-thomson-revised-civic-lo-00.txt, these were SEAT and > ADDINFO. These might be useful to add to the DHCP civic draft also. I've added SEAT (CAtype 33). I'm less convinced of ADDINFO, given that we already have LOC:=20 "additional location information". Having several free-text fields with=20 somewhat fuzzy boundaries seems likely to cause confusion. The likely=20 consequence is that implementations will just concatenate them all... Henning _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv ------------------------------------------------------------------------ ------------------------ This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. =20 If you have received it in error, please notify the sender immediately and delete the original. Any unauthorized use of this email is prohibited. ------------------------------------------------------------------------ ------------------------ [mf2] _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 14 08:49:33 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFWhg-0001PA-U0; Wed, 14 Sep 2005 08:49:32 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFWhe-0001JM-8Y for geopriv@megatron.ietf.org; Wed, 14 Sep 2005 08:49:30 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA08224 for ; Wed, 14 Sep 2005 08:49:28 -0400 (EDT) Received: from serrano.cc.columbia.edu ([128.59.29.6] ident=cu41754) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFWmE-0000y4-N8 for geopriv@ietf.org; Wed, 14 Sep 2005 08:54:16 -0400 Received: from [192.168.0.31] (pool-141-153-174-94.mad.east.verizon.net [141.153.174.94]) (user=hgs10 mech=PLAIN bits=0) by serrano.cc.columbia.edu (8.13.0/8.13.0) with ESMTP id j8ECnCDh021239 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 14 Sep 2005 08:49:15 -0400 (EDT) Message-ID: <43281C44.5000203@cs.columbia.edu> Date: Wed, 14 Sep 2005 08:49:08 -0400 From: Henning Schulzrinne Organization: Columbia University User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Marc Berryman Subject: Re: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt References: <911MAIL1HVBAIWPxguB00002759@mail.911.org> In-Reply-To: <911MAIL1HVBAIWPxguB00002759@mail.911.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-No-Spam-Score: Local X-Scanned-By: MIMEDefang 2.48 on 128.59.29.6 X-Spam-Score: 0.2 (/) X-Scan-Signature: d17f825e43c9aed4fd65b7edddddec89 Content-Transfer-Encoding: 7bit Cc: geopriv@ietf.org, "Thomson, Martin" X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Marc Berryman wrote: > Yes, the naming of it as LOC is confusing, but I can see ADDINFO > containing information in some cases, such as room 112 or inner corridor > A. > > Marc B I agree the term could be better, but that's the term NENA uses, so it seemed best not to gratuitously make up a new one, particularly since I wanted to make sure that all relevant pieces of MSAG information could find a home. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 14 10:52:28 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFYce-0005Ts-9R; Wed, 14 Sep 2005 10:52:28 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFYcc-0005TT-5v; Wed, 14 Sep 2005 10:52:26 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA15300; Wed, 14 Sep 2005 10:52:23 -0400 (EDT) Received: from sj-iport-4.cisco.com ([171.68.10.86]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFYhE-0003xt-J8; Wed, 14 Sep 2005 10:57:12 -0400 Received: from sj-core-2.cisco.com ([171.71.177.254]) by sj-iport-4.cisco.com with ESMTP; 14 Sep 2005 07:52:16 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.12.10/8.12.6) with ESMTP id j8EEpbKg017296; Wed, 14 Sep 2005 07:52:06 -0700 (PDT) Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 14 Sep 2005 07:52:14 -0700 Received: from MLINSNER ([171.68.225.134]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.211); Wed, 14 Sep 2005 07:52:13 -0700 From: "Marc Linsner" To: "'Henning Schulzrinne'" Date: Wed, 14 Sep 2005 10:52:12 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcW5O+HMlXhEiZqLRAuqYti41FfORg== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Message-ID: X-OriginalArrivalTime: 14 Sep 2005 14:52:13.0573 (UTC) FILETIME=[E4617B50:01C5B93B] X-Spam-Score: 1.1 (+) X-Scan-Signature: 769a46790fb42fbb0b0cc700c82f7081 Content-Transfer-Encoding: 7bit Cc: 'GEOPRIV' , dhcwg@ietf.org Subject: [Geopriv] draft-ietf-geopriv-dhcp-civil-07 X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Henning, Wrt: "This document only defines the delivery of location information from the DHCP server to the client, due to security concerns related to using DHCP to update the database. Within the GEOPRIV architecture as defined by RFC 3693 [10], the defined mechanism in this document for conveying initial location information is known as a "sighting" function. Sighting functions are not required to have security capabilities and are only intended to be configured in trusted and controlled environments. (A classic example of the sighting function is a Global Positioning System wired directly to a network node.) After initial location information has been introduced, it MUST be afforded the protections defined in RFC 3694 [11]. Therefore, location information MUST NOT be sent from a DHCP client to a DHCP server as is normally allowed by DHCP." Correct me if I've interpreted this wrong. I derived from this text (at least) 3 issues: 1) Due to [wiremap] database security concerns, we must disallow client to dhcp server [upstream] communication of this LCI. 2) This DHCP LCI mechanism falls under the 'sighting' category as defined in the geopriv architecture used in trusted and controlled environments. 3) Communication of location information outside of this special 'sighting' category must be afforded the protections defined in RFC 3694. I'd like clarification on: 1) Since neither this document nor RFC 3825 defines the wiremap database architecture, I don't understand this db security concern. How can the transport of a db record be a security risk to the effecting of database change within the unknown database architecture? Is this not a concern for the database administration? We should not disallow this function solely based on the assumption of poor database administration design. 2) Since upstream communication of this LCI information would still take place within the confines of the 'sighting' category, a trusted and controlled environment, what has happened that has made this upstream communication fall under issue #3 (above)? This LCI option can only contain information allowed by the draft, whether it's upstream or downstream. Thanks, -Marc- _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 14 11:58:57 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFZez-0005Bf-AA; Wed, 14 Sep 2005 11:58:57 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFZex-0005BX-8G for geopriv@megatron.ietf.org; Wed, 14 Sep 2005 11:58:55 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA18618 for ; Wed, 14 Sep 2005 11:58:52 -0400 (EDT) Received: from mail.911.org ([65.67.130.188]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFZjZ-0005nx-GO for geopriv@ietf.org; Wed, 14 Sep 2005 12:03:42 -0400 Received: from mail pickup service by mail.911.org with Microsoft SMTPSVC; Wed, 14 Sep 2005 10:58:35 -0500 From: "Marc Berryman" To: "Henning Schulzrinne" Date: Wed, 14 Sep 2005 10:58:35 -0500 Subject: RE: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 Content-Class: urn:content-classes:message Message-ID: <911MAIL1HXC9xubfedl0000286a@mail.911.org> X-OriginalArrivalTime: 14 Sep 2005 15:58:35.0717 (UTC) FILETIME=[29EC6F50:01C5B945] X-Spam-Score: 0.0 (/) X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, "Thomson, Martin" X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Completely agree - Marc B -----Original Message----- From: Henning Schulzrinne [mailto:hgs@cs.columbia.edu]=20 Sent: Wednesday, September 14, 2005 7:49 AM To: Marc Berryman Cc: Thomson, Martin; geopriv@ietf.org Subject: Re: [Geopriv] I-D ACTION:draft-ietf-geopriv-dhcp-civil-07.txt Marc Berryman wrote: > Yes, the naming of it as LOC is confusing, but I can see ADDINFO > containing information in some cases, such as room 112 or inner corridor > A. >=20 > Marc B I agree the term could be better, but that's the term NENA uses, so it=20 seemed best not to gratuitously make up a new one, particularly since I=20 wanted to make sure that all relevant pieces of MSAG information could=20 find a home. _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 14 16:51:45 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFeEK-0005Hy-Sx; Wed, 14 Sep 2005 16:51:44 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EFeED-0005GY-DX; Wed, 14 Sep 2005 16:51:37 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA10720; Wed, 14 Sep 2005 16:51:35 -0400 (EDT) Received: from opus.cs.columbia.edu ([128.59.20.100]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EFeIs-0007pQ-4r; Wed, 14 Sep 2005 16:56:27 -0400 Received: from [128.59.16.206] (chairpc.win.cs.columbia.edu [128.59.16.206]) (authenticated bits=0) by opus.cs.columbia.edu (8.12.10/8.12.10) with ESMTP id j8EKpVWk014928 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 14 Sep 2005 16:51:32 -0400 (EDT) Message-ID: <43288D35.5020908@cs.columbia.edu> Date: Wed, 14 Sep 2005 16:51:01 -0400 From: Henning Schulzrinne User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Marc Linsner References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0, __USER_AGENT 0' X-Spam-Score: 0.0 (/) X-Scan-Signature: 5a9a1bd6c2d06a21d748b7d0070ddcb8 Content-Transfer-Encoding: 7bit Cc: 'GEOPRIV' , dhcwg@ietf.org Subject: [Geopriv] Re: draft-ietf-geopriv-dhcp-civil-07 X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Marc, I'm just the "transmitter" in this case. The text was provided to me as part of resolving the IESG comments. Maybe those more closely involved with its drafting can provide additional input on your concerns. Henning Marc Linsner wrote: > Henning, > > Wrt: > > "This document only defines the delivery of location information from the > DHCP server to the client, due to security concerns related to using DHCP to > update the database. Within the GEOPRIV architecture as defined by RFC 3693 > [10], the defined mechanism in this document for conveying initial location > information is known as a "sighting" function. Sighting functions are not > required to have security capabilities and are only intended to be > configured in trusted and controlled environments. (A classic example of > the sighting function is a Global Positioning System wired directly to a > network node.) After initial location information has been introduced, it > MUST be afforded the protections defined in RFC 3694 [11]. Therefore, > location information MUST NOT be sent from a DHCP client to a DHCP server as > is normally allowed by DHCP." > > Correct me if I've interpreted this wrong. I derived from this text (at > least) 3 issues: > > 1) Due to [wiremap] database security concerns, we must disallow client to > dhcp server [upstream] communication of this LCI. > > 2) This DHCP LCI mechanism falls under the 'sighting' category as defined in > the geopriv architecture used in trusted and controlled environments. > > 3) Communication of location information outside of this special 'sighting' > category must be afforded the protections defined in RFC 3694. > > I'd like clarification on: > > 1) Since neither this document nor RFC 3825 defines the wiremap database > architecture, I don't understand this db security concern. How can the > transport of a db record be a security risk to the effecting of database > change within the unknown database architecture? Is this not a concern for > the database administration? We should not disallow this function solely > based on the assumption of poor database administration design. > > 2) Since upstream communication of this LCI information would still take > place within the confines of the 'sighting' category, a trusted and > controlled environment, what has happened that has made this upstream > communication fall under issue #3 (above)? This LCI option can only contain > information allowed by the draft, whether it's upstream or downstream. > > > Thanks, > > -Marc- _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Tue Sep 20 23:04:43 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHuuY-0004qI-TH; Tue, 20 Sep 2005 23:04:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EHuuX-0004oc-JS for geopriv@megatron.ietf.org; Tue, 20 Sep 2005 23:04:41 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id XAA22535 for ; Tue, 20 Sep 2005 23:04:38 -0400 (EDT) Received: from carrierpigeon.cs.umd.edu ([128.8.129.58]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EHv0U-0002py-4L for geopriv@ietf.org; Tue, 20 Sep 2005 23:10:50 -0400 Received: from MINDLAP2 (pool-70-108-45-68.res.east.verizon.net [70.108.45.68]) (authenticated bits=0) by carrierpigeon.cs.umd.edu (8.12.10/8.12.5) with ESMTP id j8L34PfI000660 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO) for ; Tue, 20 Sep 2005 23:04:31 -0400 (EDT) Message-Id: <200509210304.j8L34PfI000660@carrierpigeon.cs.umd.edu> From: "Moustafa Youssef" To: Date: Tue, 20 Sep 2005 23:04:18 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-Spam-Score: 0.0 (/) X-Scan-Signature: 1a1bf7677bfe77d8af1ebe0e91045c5b Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] CFP: Journal of Computer Communications Special Issue on "Sensor-Actuator Networks (SANETs)" X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org (Our apologies if you receive multiple copies of this CFP) ------------------------------------------------------------- Call for Papers Journal of Computer Communications (http://www.elsevier.com/locate/comcom) Special Issue on "Sensor-Actuator Networks (SANETs)" Sensor-Actuator NETworks (SANETs) are comprised of networked sensor and actuator nodes that communicate among each other using wireless links to perform distributed sensing and actuation tasks. The recent few years have witnessed an increasing interest in the potential use of SANETs in many applications ranging from healthcare to warfare. In these applications, sensors are engaged in gathering information about the physical environment, while actuators are involved in taking decisions and then performing appropriate actions in the area of interest. This enables SANETs to provide remote sensing and actuation services to their users. SANETs are heterogeneous networks having widely differing sensor and actuator node characteristics; while sensor nodes are small, inexpensive, usually static devices with limited computation, communication and energy resources, actuator nodes are resource-rich and usually mobile. Also, the number of sensor nodes deployed may be in the order of hundreds or thousands. In contrast, actuator nodes are smaller in number due to the different coverage requirements and physical interaction methods of actuation. Typically, a deployed SANET is expected to operate autonomously in unattended environments. Operational requirements of SANETs may vary according to a network=92s mission defined over a multi-dimensional context, such as field of deployment (e.g., hostile versus friendly), type of application (e.g., monitoring, tracking, intrusion detection and mitigation), mode of operation (e.g., normal, exception, post-event recovery), and time. In SANETs, depending on the application, there may be a need to rapidly respond to sensor input. Moreover, so as to provide right actions, sensor data must still be valid at the time of acting. Consequently, the issues of real-time communication and coordination are vital in SANETs. Finally, to realize their potential, dependable, secure, application-aware design and operation of SANETs have to be ensured. Apparently, research is needed to resolve the many complicating issues that may impede wide-scale SANET adoption. This special issue of the Journal of Computer Communications will be designated for reporting on recent research results on SANETs. It is expected that non-conventional techniques more suited to the characteristics of SANETs need to be employed. Also, in many cases trade-off would be necessary in order to ensure practicality by dynamically setting bounds on aspects such as dependability, security, and QoS. Papers presenting original and unpublished work are being solicited. Topics of interest include, although not limited to, the following: - Sensor-actuator coordination and communication - Architectural and operational models - Robust routing and MAC protocols - Fault and attack resilience middleware - Models, metrics and measurements - Self-aware and autonomous networks - Localization and mobility - Energy-efficient cross-layer protocols - Security, dependability, privacy and QoS issues - Network management - Formal representation and verification - Network inference (tomography, etc.) - Testbeds, simulation and visualization - Novel applications of sensor and actuator networks ** Submission deadline: February 15 , 2006 ** Decision notification: May 15, 2006 ** Final manuscript due: July 31, 2006 ** Publication date: 1st Quarter 2007 ** Submission instructions: Prospective authors should submit their paper and inquiries electronically to toweissy@vt.edu. The manuscript should not exceed 30 double-space pages in PDF. The manuscript should be in a single column font size 11 or larger format. The first page should include title, authors=92 contact information, an abstract and five keywords. Authors should include the paper abstract in their message. ** Guest Editors: Mohamed Eltoweissy: The Bradley Dept. of Electrical & Computer Eng., Virginia Tech, USA, toweissy@vt.edu Silvia Giordano: Dept. of Informatics & Electronics, Univ. of Applied Sci., Switzerland, silvia.giordano@supsi.ch Stephan Olariu: Dept. of Computer Science, Old Dominion University, USA, olariu@cs.odu.edu David Simplot-Ryl: IRCICA/LIFL, University of Lille 1, INRIA Futurs, France, David.Simplot@lifl.fr _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 21 13:04:28 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EI81E-0000qZ-6R; Wed, 21 Sep 2005 13:04:28 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EI81A-0000pJ-7q for geopriv@megatron.ietf.org; Wed, 21 Sep 2005 13:04:26 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA04904 for ; Wed, 21 Sep 2005 13:04:21 -0400 (EDT) Received: from bws14.bridgewatersystems.com ([216.113.7.14] helo=exchange.bridgewatersys.com) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EI87C-000090-7v for geopriv@ietf.org; Wed, 21 Sep 2005 13:10:40 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 21 Sep 2005 13:04:50 -0400 Message-ID: Thread-Topic: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) Thread-Index: AcW1ktrPPv5+Ag+nQSKMf5g1j2UF+gJOUCfw From: "Avi Lior" To: "Emile van Bergen" X-Spam-Score: 0.0 (/) X-Scan-Signature: 86f85b2f88b0d50615aed44a7f9e33c7 Content-Transfer-Encoding: quoted-printable Cc: geopriv@ietf.org, radiusext@ops.ietf.org, Bernard Aboba Subject: [Geopriv] RE: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Hi Emile, This is a late response sorry. See inline.....=20 > -----Original Message----- > From: Emile van Bergen [mailto:openradius-radextwg@e-advies.nl]=20 > Sent: Friday, September 09, 2005 7:04 PM > To: Avi Lior > Cc: Bernard Aboba; Nelson, David; radiusext@ops.ietf.org;=20 > geopriv@ietf.org > Subject: Re: Capabilities (was Re: AW: Review of=20 > draft-ietf-geopriv-radius-lo-04.txt ) >=20 > Hi, >=20 > (Cross posting to GEOPRIV-WG; this discussion pertains to=20 > http://www.ietf.org/internet-drafts/draft-ietf-geopriv-radius- > lo-04.txt, > in particular section 8). >=20 > On Fri, Sep 09, 2005 at 04:49:09PM -0400, Avi Lior wrote: >=20 > > > The question is why GEOPRIV has decided not to send location by=20 > > > default. > >=20 > > Initially we did exactly that we sent the location=20 > information in the=20 > > Access-Request. But Geopriv being about privacy, was=20 > concerned what=20 > > if the user did not want to have their location exposed. > >=20 > > So now we have the case where in some systems, the user's policy of=20 > > whether or not to expose location is stored in the a database and=20 > > during authentication the AAA learns that policy. >=20 > Presumably you mean that the NAS learns the user's policy=20 > from the home server, who has access to the user's profile. >=20 > I see that your position is in line with that, but I still do=20 > not see the point. >=20 > 1. If the home AAA makes access or billing conditional on=20 > Location, the > user's own policy is irrelevant; the home AAA will only=20 > list the user > in his database if the user agrees with his location being > transmitted to the home AAA.=20 It could do that but it may also limit what it authorizes the user to do if the user doesn't agree to location, >=20 > So if that is the case, if the home AAA doesn't see Location in a > request without State, it challenges. If it sees no Location in a > request with State, it rejects.=20 See above comment. =20 > Advertising the positive case (NAS supports GEOPRIV and will send > Location when challenged) in the access request does not=20 > prevent the > challenge. >=20 > Advertising the negative case (NAS supports GEOPRIV but=20 > will not send > Location when challenged) will prevent the challenge and allow the > home AAA to send a reject immediately.=20 Reject or Accept with limited access etc.... =20 > But that's a corner case that seems hardly worth dealing=20 > with. You'll > either have a NAS that supports it and needs a challenge, or a > pre-GEOPRIV NAS that won't do any negative GEOPRIV-advertising > either. I don't follow/understand the "negative case" > Only the home AAA advertising to its upstream the policy that it > needs Location, else don't bother sending an access request, would > prevent the access request and the challenge. But the general idea > with RADIUS is not that home AAA push their policies=20 > downstream, but > that downstream queries upstream in the individual case. The RADIUS server pushing their policy to the NAS before the access-request is not possible today. =20 > In short: if Location is /needed/ by the home AAA, then you need a > Challenge step anyway, a. for the NAS to learn about the user's > policy, and b. for the AAA server to postpone its decision until it > learns the presence or value of Location. You miss my point. If the AAA server requires Location information and it knows that the NAS does not support Location information then it will not challenge. It will simply reject or accept based on its local policies. If the AAA server requires location information but it does not know whether or not the NAS supports location information -- it has no option but to challenge for the information. This is wasteful and worse can result in the NAS treating the challenge as a reject and terminating the session. =20 > 2. If Location is optional, and only used for statistics, marketing, > and other shady purposes, then NAS can learn from the access accept > whether the user allows Location to be included in accounting > packets (start, interim and stop). Sure.... =20 > The access accept could include a dummy Location value in=20 > that case, > and we could have language saying that the NAS MUST NOT=20 > send Location > in accounting unless an empty Location attribute is present in the > access accept. Draft-capexchange as proposes a way to signal this.=20 =20 > In both cases: no advertising needed. Or even helpful. I don't agree!!! > > > > But that advertisement is also an extra transaction. What's > > > the home > > > > AAA supposed to do, keep state from separate=20 > > > > pseudo-authentications that include the advertised=20 > information for=20 > > > > later use? That doesn't sound like RADIUS, at all. > > > Right.=20 > >=20 > > Wrong. > >=20 > > No the advertizement is not an extra transaction. It comes in the=20 > > Access-Request. >=20 > But if the NAS may only include Location if it learns the=20 > user's policy first, for privacy reason, then telling the NAS=20 > about the user's policy /is/ an extra transaction. You need=20 > that one, too. The extra message is required because Geopriv wants to have a mode where by the location is not provided automatically. So we cant help but using a Challenge.=20 However, what is being debated is whether it is helpful to have the NAS tell the AAA server in the initial Access-Request whether or not the NAS supports location information. I say it is helpful. Since as I stated above, if the NAS does not support location information, then the AAA can simply reject or accept the session without sending a challenge. =20 > You're not advocating (phew) that each user is to advertise=20 > his policy towards each NAS in advance, and no other form of=20 > advertising would prevent that step. I am not advocating any such thing. I never have and I don't see how you come to the above statement. > > And by the way, RADIUS does keep transactional state. =20 >=20 > Please see my other post.=20 >=20 > The NAS does not keep state about users after they log off,=20 > so it can't cache the user's policy, and the home AAA does=20 > not keep state per NAS, so it can't use information about a=20 > NAS (negative support) from earlier authentications, unless=20 > you add a whole new dimension to building a compliant RADIUS server. Can you please show me where I claim or require that the NAS keep state after the user logs off? > Kind regards, >=20 >=20 > Emile. >=20 > --=20 > E-Advies - Emile van Bergen emile@e-advies.nl =20 > tel. +31 (0)78 6136282 http://www.e-advies.nl =20 >=20 _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Wed Sep 21 16:37:11 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIBL5-000412-7T; Wed, 21 Sep 2005 16:37:11 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIBL3-00040Z-Du for geopriv@megatron.ietf.org; Wed, 21 Sep 2005 16:37:09 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA27544 for ; Wed, 21 Sep 2005 16:37:07 -0400 (EDT) Received: from [213.189.23.115] (helo=host.e-advies.nl) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1EIBQm-00011l-Ml for geopriv@ietf.org; Wed, 21 Sep 2005 16:43:27 -0400 Received: (qmail 13781 invoked from network); 21 Sep 2005 20:36:04 -0000 Received: from h8441156020.dsl.speedlinq.nl (HELO localhost) (84.41.156.20) by host.e-advies.nl with SMTP; 21 Sep 2005 20:36:04 -0000 Date: Wed, 21 Sep 2005 22:35:49 +0200 From: Emile van Bergen To: Avi Lior Message-ID: <20050921203549.GB5799@note.evbergen.xs4all.nl> Mail-Followup-To: Avi Lior , Bernard Aboba , "Nelson, David" , radiusext@ops.ietf.org, geopriv@ietf.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.9i X-Spam-Score: 0.0 (/) X-Scan-Signature: b360bd6cb019c35178e5cf9eeb747a5c Cc: geopriv@ietf.org, radiusext@ops.ietf.org, Bernard Aboba Subject: [Geopriv] Re: Capabilities (was Re: AW: Review of draft-ietf-geopriv-radius-lo-04.txt ) X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org Hi, On Wed, Sep 21, 2005 at 01:04:50PM -0400, Avi Lior wrote: > See inline..... Same. > > -----Original Message----- > > From: Emile van Bergen [mailto:openradius-radextwg@e-advies.nl] > > Sent: Friday, September 09, 2005 7:04 PM > > To: Avi Lior > > Cc: Bernard Aboba; Nelson, David; radiusext@ops.ietf.org; > > geopriv@ietf.org > > Subject: Re: Capabilities (was Re: AW: Review of > > draft-ietf-geopriv-radius-lo-04.txt ) > > > > Hi, > > > > (Cross posting to GEOPRIV-WG; this discussion pertains to > > http://www.ietf.org/internet-drafts/draft-ietf-geopriv-radius- > > lo-04.txt, > > in particular section 8). > > > > On Fri, Sep 09, 2005 at 04:49:09PM -0400, Avi Lior wrote: > > > > > > The question is why GEOPRIV has decided not to send location by > > > > default. > > > > > > Initially we did exactly that we sent the location > > information in the > > > Access-Request. But Geopriv being about privacy, was > > concerned what > > > if the user did not want to have their location exposed. > > > > > > So now we have the case where in some systems, the user's policy of > > > whether or not to expose location is stored in the a database and > > > during authentication the AAA learns that policy. > > > > Presumably you mean that the NAS learns the user's policy > > from the home server, who has access to the user's profile. > > > > I see that your position is in line with that, but I still do > > not see the point. > > > > 1. If the home AAA makes access or billing conditional on > > Location, the > > user's own policy is irrelevant; the home AAA will only > > list the user > > in his database if the user agrees with his location being > > transmitted to the home AAA. > > It could do that but it may also limit what it authorizes the user to do > if the user doesn't agree to location, > > > > > So if that is the case, if the home AAA doesn't see Location in a > > request without State, it challenges. If it sees no Location in a > > request with State, it rejects. > > See above comment. > > > Advertising the positive case (NAS supports GEOPRIV and will send > > Location when challenged) in the access request does not > > prevent the > > challenge. > > > > Advertising the negative case (NAS supports GEOPRIV but > > will not send > > Location when challenged) will prevent the challenge and allow the > > home AAA to send a reject immediately. > > Reject or Accept with limited access etc.... > > > But that's a corner case that seems hardly worth dealing > > with. You'll > > either have a NAS that supports it and needs a challenge, or a > > pre-GEOPRIV NAS that won't do any negative GEOPRIV-advertising > > either. > > I don't follow/understand the "negative case" Ok, let me try and explain it better. 1. The positive case is where the NAS advertises that it WILL send Location when asked for it. The server will need to send a challenge to tell the NAS that the user allows Location to be sent. This is required by GEOPRIV; Location may not be sent in the first access request, because Location may only be sent if the NAS knows that the user's privacy policy allows it. If the only interface between users database and NAS is RADIUS, and it does not seem reasonable to build two parallel interfaces if we're specifically creating support for all this in RADIUS, then the only way the NAS can learn about that policy is a RADIUS response (in practice, a challenge or an accept). 2. The negative case is where the NAS advertises that it WILL NOT send Location. The server may then skip the challenge step and proceed to accept, accept with reduced authorization, or reject immediately. The server may also do so if it does not care about Location. 3. A third case is where the NAS advertises capabilities in some form, but does not know anything about Location or GEOPRIV, so it cannot say that it supports Location, and it cannot say that it does not support Location. The server will then have to challenge. This can be avoided if the capabilties advertising standard says that a server can infer non-support for a feature if the server sees an advertisement without a statement about that feature. That would mean that a NAS that supports advertising must be required to advertise EVERYTHING it has support for, otherwise the server cannot conclude non-support of a feature when the NAS omits it from the advertisement. That may not be a bad thing for a capabilities advertising standard to ask (arguably the only thing that would make it worthwhile), but the current caps. draft doesn't go as far as that. 4. A fourth case is where the NAS does not know how to advertise capabilities. The server will then have to challenge if it cares about Location, unless it can conclude from the lack of advertisment that Location is not supported. This can be avoided if the GEOPRIV standard rules that no GEOPRIV support may exist without capability advertising, which would allow a server to conclude from the lack of advertisement that GEOPRIV is not supported. As you can see, you need to be /very/ careful in defining such things for maximum convergence, because without convergence, the number of states raises exponentially for each case you introduce. > > Only the home AAA advertising to its upstream the policy that it > > needs Location, else don't bother sending an access request, would > > prevent the access request and the challenge. But the general idea > > with RADIUS is not that home AAA push their policies > > downstream, but > > that downstream queries upstream in the individual case. > > The RADIUS server pushing their policy to the NAS before the > access-request is not possible today. And should not be possible tomorrow, especially not for per-session policy. That makes no sense. I reiterate: the whole idea of RADIUS is offloading policy decisions to a central place, by asking a server a question before each session starts. Not by pushing the information needed to make policy decisions outwards. Take a look at DNS if publishing stuff is what you want. > > In short: if Location is /needed/ by the home AAA, then you need a > > Challenge step anyway, a. for the NAS to learn about the user's > > policy, and b. for the AAA server to postpone its decision until it > > learns the presence or value of Location. > > You miss my point. If the AAA server requires Location information and > it knows that the NAS does not support Location information then it will > not challenge. It will simply reject or accept based on its local > policies. Exactly, and that's immediately the only case where the NEGATIVE advertisement (does not support) adds something (efficiency). > If the AAA server requires location information but it does not know > whether or not the NAS supports location information -- it has no option > but to challenge for the information. This is wasteful and worse can > result in the NAS treating the challenge as a reject and terminating the > session. It's does not waste anything compared to the 'normal' case, where the NAS advertises 'yes, I do support' and then the server challenges for Location (because the NAS is not allowed to send Location immediately by the PRIV part of GEOPRIV). So let's please put the whole efficiency argument aside: even the most positive case requires a challenge (accept with maximum privileges) if the server /requires/ Location, so such a server may just as well use a challenge in the other cases too. The unintended reject, where a server learning that a NAS does not support GEOPRIV would rather send a limited accept rather than a challenge, causing a reject as per RFC2865 4.4 for NASes that do not support Challenge (or for NASes that don't understand why they are challenged) is the first sensible argument I hear for GEOPRIV requiring capabilities advertisements. > > 2. If Location is optional, and only used for statistics, marketing, > > and other shady purposes, then NAS can learn from the access accept > > whether the user allows Location to be included in accounting > > packets (start, interim and stop). > > Sure.... > > > The access accept could include a dummy Location value in > > that case, > > and we could have language saying that the NAS MUST NOT > > send Location > > in accounting unless an empty Location attribute is present in the > > access accept. > > Draft-capexchange as proposes a way to signal this. True, but I'm arguing the case how GEOPRIV could be done without broad capabilities advertising. This is also a bit more specific; it's not about feature support, it's about the user's privacy policy wrt. Location sending, which possibly depends on the NAS that's used for that session. Would you want to use the capabilities exchange to publish the user's specific GEOPRIV policy for that specific session? Then the capabilities exchange should be defined as a very loose signaling mechanism, where the semantics of each capability value is completely governed by the document describing the capability. This rules out the strict modes where the server may conclude non-support from a default value. > > In both cases: no advertising needed. Or even helpful. > > I don't agree!!! OK, I concede that advertising allows servers whose policy REQUIRES Location for full access to provide more limited access if the user's policy WOULD allow the sending of Location from that NAS, but Location is not sent. The question is whether this, plus the efficiency gain in the case where the NAS supports challenges but not GEOPRIV, warrants a capability advertisement feature. If one could be developed that's generic enough to support both this case and the "NAS-and-proxies-will-heed-limit-X" case, while being /extemely/ careful to avoid an explosion of states (see above how easy this is), then I would agree that it would make sense for GEOPRIV to require that. GEOPRIV requiring specific advertisements without a good capability mechanism already defined and accepted, or an overly broad advertising mechanism without very clear semantics and well defined convergence of states is what I object to. > > > > > But that advertisement is also an extra transaction. What's > > > > the home > > > > > AAA supposed to do, keep state from separate > > > > > pseudo-authentications that include the advertised > > information for > > > > > later use? That doesn't sound like RADIUS, at all. > > > > Right. > > > > > > Wrong. > > > > > > No the advertizement is not an extra transaction. It comes in the > > > Access-Request. > > > > But if the NAS may only include Location if it learns the > > user's policy first, for privacy reason, then telling the NAS > > about the user's policy /is/ an extra transaction. You need > > that one, too. > > The extra message is required because Geopriv wants to have a mode where > by the location is not provided automatically. > So we cant help but using a Challenge. Agreed. So I take it you agree that you need the Challenge in all cases where the server wants Location, and that no amount of advertising up front will remedy that? > However, what is being debated is whether it is helpful to have the NAS > tell the AAA server in the initial Access-Request whether or not the NAS > supports location information. > > I say it is helpful. Since as I stated above, if the NAS does not > support location information, then the AAA can simply reject or accept > the session without sending a challenge. Which seems useful only when it wants to offer limited access in that case. And I agree, that /is/ useful. > > You're not advocating (phew) that each user is to advertise > > his policy towards each NAS in advance, and no other form of > > advertising would prevent that step. > > I am not advocating any such thing. I never have and I don't see how you > come to the above statement. Prescience, I think, considering what you wrote in this post. I wrote: > > Only the home AAA advertising to its upstream the policy that it > > needs Location, else don't bother sending an access request, > > would prevent the access request and the challenge. But the > > general idea with RADIUS is not that home AAA push their policies > > downstream, but that downstream queries upstream in the > > individual case. and you answered: > The RADIUS server pushing their policy to the NAS before the > access-request is not possible today. I read the "today" as that you think it might be useful. Or am I wrong? Best regards, Emile. -- E-Advies - Emile van Bergen emile@e-advies.nl tel. +31 (0)78 6136282 http://www.e-advies.nl _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 22 16:27:44 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIXfU-0002AY-Bq; Thu, 22 Sep 2005 16:27:44 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EIXfS-0002AR-Ck for geopriv@megatron.ietf.org; Thu, 22 Sep 2005 16:27:42 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id QAA24488 for ; Thu, 22 Sep 2005 16:27:39 -0400 (EDT) Received: from mail.opengeospatial.org ([208.44.53.140]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EIXli-00042S-Px for geopriv@ietf.org; Thu, 22 Sep 2005 16:34:12 -0400 Received: from SusieandCarl (dialup-4.225.208.221.Dial1.Denver1.Level3.net [4.225.208.221]) (authenticated bits=0) by mail.opengeospatial.org (8.13.4/8.13.4/Debian-3) with ESMTP id j8MKROhp004703 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT) for ; Thu, 22 Sep 2005 15:27:27 -0500 Message-ID: <000701c5bfb4$0c6d37f0$ddd0e104@SusieandCarl> From: "Carl Reed OGC" To: References: Subject: Re: [Geopriv] Interesting new patent in location space with privacy implications Date: Thu, 22 Sep 2005 08:51:12 -0600 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-Virus-Scanned: ClamAV 0.87/1097/Wed Sep 21 13:56:51 2005 on mail.opengeospatial.org X-Virus-Status: Clean X-Spam-Status: No, score=-100.0 required=6.5 tests=USER_IN_WHITELIST autolearn=failed version=3.0.3 X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on mail.opengeospatial.org X-Spam-Score: 0.8 (/) X-Scan-Signature: 40161b1d86420e0807d771943d981d25 Content-Transfer-Encoding: 7bit X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Carl Reed OGC List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org > Interesting new patent: > > NSA granted Net location-tracking patent > By Declan McCullagh, CNET News.com > Published on ZDNet News: September 21, 2005, 1:49 PM PT > > Forward in > EMAIL > Format for > PRINT > > > The National Security Agency has obtained a patent on a method of figuring > out an Internet user's geographic location. > > > Patent 6,947,978, granted Tuesday, describes a way to discover someone's > physical location by comparing it to a "map" of Internet addresses with > known locations. > > > The NSA did not respond Wednesday to an interview request, and the patent > description talks only generally about the technology's potential uses. It > says the geographic location of Internet users could be used to "measure > the effectiveness of advertising across geographic regions" or flag a > password that "could be noted or disabled if not used from or near the > appropriate location." > > > Other applications of the geo-location patent, invented by Stephen Huffman > and Michael Reifer of Maryland, could relate to the NSA's signals > intelligence mission--which is, bluntly put, spying on the communications > of non-U.S. citizens. > > > "If someone's engaged in a dialogue or frequenting a 'bad' Web site, the > NSA might want to know where they are," said Mike Liebhold, a senior > researcher at the Institute for the Future who has studied geo-location > technology. "It wouldn't give them precision, but it would give them a > clue > that they could use to narrow down the location with other intelligence > methods." > > > The NSA's patent relies on measuring the latency, meaning the time lag > between computers exchanging data, of "numerous" locations on the Internet > and building a "network latency topology map." Then, at least in theory, > the Internet address to be identified can be looked up on the map by > measuring how long it takes known computers to connect to the unknown one. > > > The technique isn't foolproof. People using a dial-up connection can't be > traced beyond their Internet service provider--which could be in an > different area of the country--and it doesn't account for proxy services > like Anonymizer. > > > Geo-location, sometimes called "geo-targeting" when used to deliver > advertising, is an increasingly attractive area for Internet businesses. > DoubleClick has licensed geo-location technology to deliver > location-dependent advertising, and Visa has signed a deal to use the > concept to identify possible credit card fraud in online orders. > > > Digital Envoy holds a patent on geo-location, and Quova, a privately held > firm in Mountain View, Calif., holds three more, one shared with > Microsoft. > > > "It's honestly not clear that there's anything special or technically > advanced about what they're describing," Quova Vice President Gary Jackson > said, referring to the NSA's patent. "I'd have to have our technical guys > read it, but I don't think it impacts us in any way." ----- Original Message ----- From: "Avi Lior" To: "Emile van Bergen" Cc: ; ; "Bernard Aboba" Sent: Wednesday, September 21, 2005 11:04 AM Subject: [Geopriv] RE: Capabilities (was Re: AW: Review ofdraft-ietf-geopriv-radius-lo-04.txt ) > Hi Emile, > This is a late response sorry. > > See inline..... > >> -----Original Message----- >> From: Emile van Bergen [mailto:openradius-radextwg@e-advies.nl] >> Sent: Friday, September 09, 2005 7:04 PM >> To: Avi Lior >> Cc: Bernard Aboba; Nelson, David; radiusext@ops.ietf.org; >> geopriv@ietf.org >> Subject: Re: Capabilities (was Re: AW: Review of >> draft-ietf-geopriv-radius-lo-04.txt ) >> >> Hi, >> >> (Cross posting to GEOPRIV-WG; this discussion pertains to >> http://www.ietf.org/internet-drafts/draft-ietf-geopriv-radius- >> lo-04.txt, >> in particular section 8). >> >> On Fri, Sep 09, 2005 at 04:49:09PM -0400, Avi Lior wrote: >> >> > > The question is why GEOPRIV has decided not to send location by >> > > default. >> > >> > Initially we did exactly that we sent the location >> information in the >> > Access-Request. But Geopriv being about privacy, was >> concerned what >> > if the user did not want to have their location exposed. >> > >> > So now we have the case where in some systems, the user's policy of >> > whether or not to expose location is stored in the a database and >> > during authentication the AAA learns that policy. >> >> Presumably you mean that the NAS learns the user's policy >> from the home server, who has access to the user's profile. >> >> I see that your position is in line with that, but I still do >> not see the point. >> >> 1. If the home AAA makes access or billing conditional on >> Location, the >> user's own policy is irrelevant; the home AAA will only >> list the user >> in his database if the user agrees with his location being >> transmitted to the home AAA. > > It could do that but it may also limit what it authorizes the user to do > if the user doesn't agree to location, > >> >> So if that is the case, if the home AAA doesn't see Location in a >> request without State, it challenges. If it sees no Location in a >> request with State, it rejects. > > See above comment. > >> Advertising the positive case (NAS supports GEOPRIV and will send >> Location when challenged) in the access request does not >> prevent the >> challenge. >> >> Advertising the negative case (NAS supports GEOPRIV but >> will not send >> Location when challenged) will prevent the challenge and allow the >> home AAA to send a reject immediately. > > Reject or Accept with limited access etc.... > >> But that's a corner case that seems hardly worth dealing >> with. You'll >> either have a NAS that supports it and needs a challenge, or a >> pre-GEOPRIV NAS that won't do any negative GEOPRIV-advertising >> either. > > I don't follow/understand the "negative case" > >> Only the home AAA advertising to its upstream the policy that it >> needs Location, else don't bother sending an access request, would >> prevent the access request and the challenge. But the general idea >> with RADIUS is not that home AAA push their policies >> downstream, but >> that downstream queries upstream in the individual case. > > The RADIUS server pushing their policy to the NAS before the > access-request is not possible today. > > >> In short: if Location is /needed/ by the home AAA, then you need a >> Challenge step anyway, a. for the NAS to learn about the user's >> policy, and b. for the AAA server to postpone its decision until it >> learns the presence or value of Location. > > You miss my point. If the AAA server requires Location information and > it knows that the NAS does not support Location information then it will > not challenge. It will simply reject or accept based on its local > policies. > > If the AAA server requires location information but it does not know > whether or not the NAS supports location information -- it has no option > but to challenge for the information. This is wasteful and worse can > result in the NAS treating the challenge as a reject and terminating the > session. > > >> 2. If Location is optional, and only used for statistics, marketing, >> and other shady purposes, then NAS can learn from the access accept >> whether the user allows Location to be included in accounting >> packets (start, interim and stop). > > Sure.... > >> The access accept could include a dummy Location value in >> that case, >> and we could have language saying that the NAS MUST NOT >> send Location >> in accounting unless an empty Location attribute is present in the >> access accept. > > Draft-capexchange as proposes a way to signal this. > > >> In both cases: no advertising needed. Or even helpful. > > I don't agree!!! > >> > > > But that advertisement is also an extra transaction. What's >> > > the home >> > > > AAA supposed to do, keep state from separate >> > > > pseudo-authentications that include the advertised >> information for >> > > > later use? That doesn't sound like RADIUS, at all. >> > > Right. >> > >> > Wrong. >> > >> > No the advertizement is not an extra transaction. It comes in the >> > Access-Request. >> >> But if the NAS may only include Location if it learns the >> user's policy first, for privacy reason, then telling the NAS >> about the user's policy /is/ an extra transaction. You need >> that one, too. > > The extra message is required because Geopriv wants to have a mode where > by the location is not provided automatically. > So we cant help but using a Challenge. > > However, what is being debated is whether it is helpful to have the NAS > tell the AAA server in the initial Access-Request whether or not the NAS > supports location information. > > I say it is helpful. Since as I stated above, if the NAS does not > support location information, then the AAA can simply reject or accept > the session without sending a challenge. > > >> You're not advocating (phew) that each user is to advertise >> his policy towards each NAS in advance, and no other form of >> advertising would prevent that step. > > I am not advocating any such thing. I never have and I don't see how you > come to the above statement. > >> > And by the way, RADIUS does keep transactional state. >> >> Please see my other post. >> >> The NAS does not keep state about users after they log off, >> so it can't cache the user's policy, and the home AAA does >> not keep state per NAS, so it can't use information about a >> NAS (negative support) from earlier authentications, unless >> you add a whole new dimension to building a compliant RADIUS server. > > Can you please show me where I claim or require that the NAS keep state > after the user logs off? > >> Kind regards, >> >> >> Emile. >> >> -- >> E-Advies - Emile van Bergen emile@e-advies.nl >> tel. +31 (0)78 6136282 http://www.e-advies.nl >> > > _______________________________________________ > Geopriv mailing list > Geopriv@ietf.org > https://www1.ietf.org/mailman/listinfo/geopriv > > _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv From geopriv-bounces@ietf.org Thu Sep 29 22:49:51 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ELAy7-0004e2-Jf; Thu, 29 Sep 2005 22:49:51 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ELAy6-0004XW-9E for geopriv@megatron.ietf.org; Thu, 29 Sep 2005 22:49:50 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id WAA00847 for ; Thu, 29 Sep 2005 22:49:23 -0400 (EDT) Received: from carrierpigeon.cs.umd.edu ([128.8.129.58]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ELB5S-0007ue-IZ for geopriv@ietf.org; Thu, 29 Sep 2005 22:57:28 -0400 Received: from MINDLAP2 (pool-70-21-66-63.res.east.verizon.net [70.21.66.63]) (authenticated bits=0) by carrierpigeon.cs.umd.edu (8.12.10/8.12.5) with ESMTP id j8U2n6fD017267 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO) for ; Thu, 29 Sep 2005 22:49:09 -0400 (EDT) Message-Id: <200509300249.j8U2n6fD017267@carrierpigeon.cs.umd.edu> From: "Moustafa Youssef" To: Date: Thu, 29 Sep 2005 22:48:29 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 X-Spam-Score: 0.0 (/) X-Scan-Signature: 0ff9c467ad7f19c2a6d058acd7faaec8 Content-Transfer-Encoding: quoted-printable Subject: [Geopriv] CFP: IEEE Workshop on Dependability and Security in Sensor Networks and Systems X-BeenThere: geopriv@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Geographic Location/Privacy List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: geopriv-bounces@ietf.org Errors-To: geopriv-bounces@ietf.org (Our apologies if you receive multiple copies of this CFP) ------------------------------------------------------------- Call for Papers Second IEEE Workshop on Dependability and Security in Sensor Networks and Systems (DSSNS'2006) http://www.dssns.org In conjunction with 2nd NASA/IEEE Systems and Software Week 30th NASA/IEEE Software Engineering Workshop (SEW'2006) Columbia, Maryland, USA ~ April 24-28, 2006 Recently, there has been a growing interest in the potential use of networked sensors in applications such as smart environments,=20 disaster management, combat field reconnaissance, and security=20 surveillance. While the initial view of the community was that=20 networked sensors will play a complementary role that enhances=20 the quality of these applications, recent research results have=20 encouraged practitioners to envision an increased reliance on sensor=20 networks and systems (SN&S) in such critical and sensitive=20 applications. Therefore to realize their potential, necessary=20 dependability and security (D&S) measures have to be=20 incorporated in the design and during the operation of SN&S.=20 Dependability is usually specified using attributes like reliability,=20 survivability, safety, maintainability, and availability in presence=20 of failure, while security is specified by attributes like integrity,=20 authenticity, confidentiality, and availability in presence of=20 attacks. D&S services accomplish tasks for attack and failure prevention, detection and response. The scope of D&S=20 services may span the deployed sensors to command nodes=20 and likely beyond. It also involves D&S support at, and=20 cross-cutting, the protocol stack layers from physical to=20 application. Achieving dependability and security in SN&S will require=20 non-conventional mechanisms due to many factors including:=20 (1) sensors are significantly constrained in the amount of=20 available resources such as energy, storage and computation;=20 (2) sensors are expected to be deployed in very large numbers=20 in normal as well as harsh/hostile environments; (3) sensor=20 networks suffer from structural weakness and limited physical protection, and (4) localization of impact is complicated due=20 to the un-tethered nature of SN&S and of the potential=20 attackers. In addition, D&S requirements may vary according to mission defined over a multi-dimensional context, such=20 as field of deployment (e.g., hostile versus friendly), type of=20 application (e.g., monitoring, tracking, data collection), mode=20 of operation (e.g., normal, exception, post-event recovery),=20 and time. This workshop will foster a forum for discussing and presenting=20 recent research results on dependability and security in SN&S.=20 Topics of interest include, although not limited to, the following: - Fault and intrusion-tolerant architectures, middleware and operational models=20 - Robust routing, storage, and processing of sensed data - D&S architectures, protocols and tools - Vulnerabilities, attacks and countermeasures - Monitoring and evaluation techniques - Robust clustering techniques - Self-awareness and context-awareness=20 - Resilient virtual infrastructures - Autonomic and adaptive D&S support. - Formal representation and verification of D&S properties - Network inference support for D&S - Quality of service provisioning - Models, metrics, and measurements for D&S - Privacy-aware D&S services - Testbeds, simulation and visualization=20 - Agent-based D&S management=20 - SN&S support for D&S in larger information grids - SN&S application development environments Submission Guidelines --------------------- For guidelines regarding paper submission, please refer to the workshop=92s=20 website (http://www.dssns.org). Papers should contain original material=20 and not be previously published, or currently submitted for consideration=20 elsewhere. The manuscript should not exceed 20 single-column double-space=20 pages in PDF format, font size 11 or larger. The first page should include=20 title, authors' contact information, abstract and five keywords.=20 Important Dates ---------------- Submission deadline: November 7, 2005 Decision notification: December 20, 2005 Final manuscript due: January 20, 2006 The accepted papers will appear in a proceedings published by IEEE. The best paper will be recognized and selected papers will be invited to a Special Issue of the Journal of Ad Hoc and Sensor Wireless Networks.=20 Workshop Co-Chairs ------------------- Mohamed Eltoweissy Virginia Tech, USA E-mail: toweissy@vt.edu=20 Mohamed Younis University of Maryland Baltimore County, USA E-mail: younis@csee.umbc.edu=20 Publicity Co-Chairs -------------------- Denis Gracanin Virginia Tech, USA E-mail: gracanin@vt.edu Moustafa Youssef University of Maryland at College Park, USA E-mail: moustafa@cs.umd.edu=20 Program Committee ------------------ Farooq Anjum, Telcordia & U. of Penn, USA David Carman, Johns Hopkins U.=96 Applied Physics Lab, USA Ing-Ray Chen, Virginia Tech, USA M. Nazih Elderini, Alexandria U., Egypt Deborah Frincke, Pacific Northwest National Lab and U. of Idaho, USA Ahmed Helmy, University of Southern California, USA Sushil Jajodia, George Mason U., USA Shivakant Mishra, U. of Colorado, USA Peng Ning, North Carolina State U., USA Cristina Nita-Rotaru, Purdue U., USA Stephan Olariu, Old Dominion U., USA David Simplot-Ryl, U. Lille, INRIA Futurs, France Mani B. Srivastava, U. of California =96 Los Angeles, USA John A. Stankovic, U. of Virginia, USA Ivan Stojmenovic, U. of Ottawa, Canada Gene Tsudik, U. of California-Irvine, USA Cliff Wang, Army Research Office, USA Stephen D. Wolthusen, Fraunhofer-IGD, Germany Albert Zomaya, U. of Sydney, Australia _______________________________________________ Geopriv mailing list Geopriv@ietf.org https://www1.ietf.org/mailman/listinfo/geopriv