Re: [Geopriv] Confirmation of GEOPRIV IETF 68 Working Group Hums

On Wed, Apr 25, 2007 at 06:50:28AM -0700, Hallam-Baker, Phillip wrote:
> But how does my application access it?
The "proper" way from my point of view would be to read from your
system's option cache, so whatever DHCP the system does filters
down to applications.


> DHCP is not something that an application layer program should be allowed
> to perform.
Amen, brother!  But, you're preaching to the choir.

Macromedia Flash Proxy whatsimahoosits...sends a DHCPINFORM.
Doesn't set ciaddr, chaddr, htype or hlen.  Let me tell you,
becoming "similarly compatible" to this as other servers
evidently are was not an experience I would like to repeat.  [1]

Microsoft Industry Update Control.  Refuses to stop sending
DHCPINFORMs until any server responds with the WPAD option,
without placing that option on the PRL.  [2]


> It is a security issue. For good reason performing DHCP operations
> requires privileges beyond mere network connectivity on Windows.
I expect it doesn't, actually, as the relevant flash proxy bits
are sufficiently nonpriveleged.  That's via a "dot net" facility,
I've been told.  I see no reason to hold the system's option cache
secret from applications, when taht cache is got by a packet that
anyone can sniff off the wire.  I understand that applications
such as Opera, Firefox, and ID [3], are said to digest at least
one option in this way.

But, I'm not a "Windows guy," so if someone knows how that actually
works it would be helpful.  I just know that it works from the
outside looking in.


> That is why configuring application programs from DHCP never caught on.  
The reason you have made this statement is false.

But that doesn't, on its own, mean that the conclusion is false.  I
would say it certainly is not mainstream, but it is pervasive.


[1] http://marc.info/?l=dhcp-server&m=113466843320099&w=2

[2] http://marc.info/?l=dhcp-server&m=110928450802695&w=2

[3] http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol

[4] http://www.ietf.org/proceedings/99nov/I-D/draft-ietf-wrec-wpad-01.txt

    "The DHCP option code for WPAD is 252 by agreement of the DHC working 
     group chair."

    Possible alternative text:

    "I can't believe it's not IANA!"

-- 
David W. Hankins        "If you don't do it right the first time,
Software Engineer               you'll just have to do it again."
Internet Systems Consortium, Inc.       -- Jack T. Hankins

pgpQklGOrNxJ4.pgp
Description: PGP signature

_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf