Subject: [Anima-bootstrap] Figure 1, my view for discussion

From: "Michael Behringer (mbehring)" <[email-masked]>
Date: Thu, 1 Oct 2015 13:02:18 +0000

In yesterday's discussion I was making the point that we should in the enrolment process ALWAYS assume that a new node talks to a proxy node, never directly to the registrar.

In the Layer 2 case this allows the new node to operate with exclusively link-local addressing, which I think is very elegant, and very secure: Without routable address, a node can't attack (except link local of course).

In the Layer 3 case we COULD theoretically envisage a direct communication to the registrar, but I think the same security philosophy should prevail: The registrar is in IP address space that should not be accessible to a non-domain node. Therefore, I advocate that we EXCLUSIVELY have the new node talk to a proxy node, from a protocol perspective. This doesn't prevent an implementation where proxy and registrar are on the same device, if someone really wants to do that.

Max asked me to change figure 1 in this way, for discussion. Below is my attempt. The key point is really that also in the L3 case, the connection goes to/through the proxy. While making that change, I also removed the arrows between new entity and CA (for discussion). To me, those are misleading. In my reading the figure represents not end-to-end flows, but connectivity.

This is just a suggestions. Feedback welcome.

Michael

This is my suggested drawing (if we keep it, we should "prettify" it. But let's first agree on the concept.)

                                                    Vendor components

                                                   .

                                                   .+---------------+

   +--------------Drop Ship------------------------.| Manufacturer  |

   |                                               .+---------------+

   |                                               .| M anufacturer |

   |                                               .| A uthorized   |

   |                                               .| S igning      |

   |                                               .| A uthority    |

   |                                               .+---------------+

   |                                               .........^........

   V          ............................................  |

+-------+     .  +------------+       +-----------+      .  |

| New   |<--L2-->|    Proxy   |       |           |      .  |

| Entity|     .  |            |       |           |      .  |

|       |     .  |            |<----->| Registrar |---------+

|       |     .  |            |       |           |      .

|       |<--L3-->|            |       |           |      .

|       |     .  +------------+       +-----------+      .

|       |     .                             |            .

|       |     .           +----------------------------+ .

|       |     .           | Domain Certification       | .

|       |     .           |      Authority             | .

+-------+     .           | Management and etc         | .

              .           +----------------------------+ .

              .                                          .

              ............................................

                                  "domain" components

For reference, this is current drawing from the draft:

                                                    Vendor components

                                                   .

                                                   .+---------------+

   +--------------Drop Ship------------------------.| Manufacturer  |

   |                                               .+---------------+

   |                                               .| M anufacturer |

   |                                               .| A uthorized   |

   |                                               .| S igning      |

   |                                               .| A uthority    |

   |                                               .+---------------+

   V                                               ......   ^

+-------+                                                   |

| New   |        +------------+       +-----------+         |

| Entity|<--L2-->|    Proxy   |<----->|           |         |

|       |        +------------+       |           |         |

|       |                             | Registrar |         |

|       |                             |           |         |

|       |<-----L3---------------------( may proxy )---------+

|       |                             +-----------+

|       |                                   |

|       |                 +----------------------------+

|       |<-----Enroll---->| Domain Certification       | ^

|       |<-----Config---->|      Authority             | .

+-------+        .        | Management and etc         | .

                 .        +----------------------------+ .

                 .                                       .

                 .........................................

                                  "domain" components