
From nobody Mon May  1 07:37:33 2017
Return-Path: <lear@ofcourseimright.com>
X-Original-To: art@ietf.org
Delivered-To: art@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A22BC129C35; Mon,  1 May 2017 07:37:31 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Eliot Lear <lear@ofcourseimright.com>
To: <art@ietf.org>
Cc: dnssd@ietf.org, ietf@ietf.org, draft-ietf-dnssd-mdns-dns-interop.all@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149364945162.9895.14720756538747663998@ietfa.amsl.com>
Date: Mon, 01 May 2017 07:37:31 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/px3-vL2Fd8ljuJkKMSD9H7xRSt8>
Subject: [art] Artart telechat review of draft-ietf-dnssd-mdns-dns-interop-04
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 May 2017 14:37:32 -0000

Reviewer: Eliot Lear
Review result: Ready with Issues

Well written and comprehensive.  Just a few comments.

First, the use of "rejected" several times in the document leads one
to conclude that the WG is making design decisions at this time for
input into the next document. Combined with when the profile is
applicable, and its rough outline, one gets the impression of a first
step towards its writing.  Stating the audience and next steps would
help the reader.

Second, in Section 4.3, ppg 7-8, the following sentence:

   ... DNS-SD
   implementations ought somehow to identify the <Domain> portion of
   the Service Instance Name and treat it subject to IDNA2008 in case
   the domain is to be queried from the global DNS.

The sentence implies that it will not be easy to separate <Domain>
from <Instance> and <Service>, when the previous paragraphs seem to
make it clear that one can clearly identify <Service>.  Is this
because one might envision naked octets that begin with underscore in
either the <Domain> or <Instance> sections?  If so, it might be worth
reiterating that.

Third, while one might say that the fundamental issue has to do with
processing of labels in some form versus not doing so, most of the
document is spent on the case of IDNA2008 v. LDH v. naked UTF8.  The
abstract really should probably state that up front.  Similarly, the
impact to both deployments and implementations should be tersely
summarized.

The key callouts to me are suggestions as to when to perform IDNA2008
processing and when to not do so, potential restriction of character
sets, etc.

Fourth: the following sentence leads to a question:

   A practical consequence of this is that zone operators need to be
   prepared not to apply the LDH rule to all labels.

The implication here is that zone operators make this decision.  I
*think* what we are talking about here are user interfaces, no?  BIND
handles this just fine, right?[1]

Finally one nit: expand LDH on first use.

Eliot
[1] http://www.dns-sd.org/servertestsetup.html



From nobody Mon May  1 19:39:52 2017
Return-Path: <martin.thomson@gmail.com>
X-Original-To: art@ietf.org
Delivered-To: art@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F95F12EB1E; Mon,  1 May 2017 19:39:50 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Martin Thomson <martin.thomson@gmail.com>
To: <art@ietf.org>
Cc: draft-ietf-anima-grasp.all@ietf.org, ietf@ietf.org, anima@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149369279041.9906.5712707340786253297@ietfa.amsl.com>
Date: Mon, 01 May 2017 19:39:50 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/tFoac4dniuFvXTk3xXtsGkCtUag>
Subject: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 May 2017 02:39:50 -0000

Reviewer: Martin Thomson
Review result: Not Ready

This document describes a generic protocol that is for doing just
about anything and run over just about any transport protocol.  Within
that remit, the document is coherent and though I agree with Barry
about unnecessary verbiage, it seems to achieve the goals it sets.

I don't believe that this document describes a protocol that could be
deployed.

Caveat here: I didn't review this as thoroughly as I would have liked.
 It's a large document, though it's clear that it isn't large enough
to cover its intended scope in a couple of key areas.  There is with
lots of content in some areas - some of it quite detailed.  But there
is surprisingly little detail in areas that I would have imagined to
be critical.  The two areas that concern me most are transport and
security.


The draft talks very little about how messages get to their
destinations.  There's a brief section on UDP/TCP usage in one place
and an admonishment to use DTLS/TLS in another, but those sections
don't seem to have ever met each other.  I'm forced to conclude that
this is well ahead of the other pieces that will fill in those gaps. 
Given that there are no drafts associated with the ANIMA working group
that attempt to fill those gaps, I really don't know how this would
ever get deployed.  The status of the implementations only really
confirms this.

As an aside, use of UDP needs a few more details.  A few that spring
to mind:

  Congestion - Since this appears to be a lock-step protocol, that is
probably acceptable (one packet per round trip is generally considered
fine).

  Loss - This doesn't appear to have any provision for loss recovery. 
For a long-running negotiation that includes wait steps, this seems
necessary.

  Middleboxes - If a peer has to wait a long time for a negotiation,
what happens if the NAT binding goes away in the meantime?  How does a
peer ensure reachability?  Can middleboxes verify that endpoints are
willing to communicate?

The locators concept relates to this.  It would appear to be
under-specified, largely as a result of not having any concrete
transport definitions.  For instance, how would you use each of the
different locators used in the protocol?  Though it might seem
obvious, even the IPv6 locator doesn't actually include a definition
of what you might do with it.  

Does the endpoint construct a UDP packet with the CBOR of a GRASP
message as its payload and unicast it to the identified IP and port? 
Seems obvious, needs writing down.  

The same goes for the FQDN, which I suppose involves an AAAA/A record
lookup. It needs to say that, unless it's really SRV or something
else.  And URIs aren't generically usable, so a lot more work would be
needed to make sense of a URI.


Security seems to be critical, but the key question of establishing a
trust domain is left out of scope.  That conveniently removes some
hard problems, but I believe that there were a few inconvenient
problems that were removed at the same time.  For instance,
authentication and confidentiality mechanisms for discovery seem to be
non-existent.  (D)TLS can't secure a multicast signal, but no effort
has been put into providing an authentication framework.


Nits

The document really isn't clear about how multi-round negotiation
works.  A picture might help here.  I ask because the definition of
how timers run is a little unclear.  I probably missed the text about
this, but I assume that an endpoint that responds to M_REQ_NEG with
M_NEGOTIATE  starts a new timer, and if a multiple rounds are used the
timer is reset each time that M_NEGOTIATE is sent.  Is there any need
for any overall negotiation timer, or do you just multiply out the hop
(loop) count?

The existence of "dry run" negotiations leads me to ask how a protocol
participant is expected to behave when negotiating.  Is it expected to
enact intermediate values, or does it commit only when the negotiation
concludes?



From nobody Tue May  2 14:08:42 2017
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2682C1289B0; Tue,  2 May 2017 14:08:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xBJ7hCx3pdd2; Tue,  2 May 2017 14:08:39 -0700 (PDT)
Received: from mail-pf0-x243.google.com (mail-pf0-x243.google.com [IPv6:2607:f8b0:400e:c00::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06FD8128959; Tue,  2 May 2017 14:06:11 -0700 (PDT)
Received: by mail-pf0-x243.google.com with SMTP id v14so957528pfd.3; Tue, 02 May 2017 14:06:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=from:subject:to:references:cc:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=BW7kPzJkKzetlFKZMIRRbKCWLdwXQnLfOglxiiLiJUw=; b=k6zC21As9ze/epxI8UAchpKhOhOo4sdi2nB2RAtA3TNsmeMHgs1nSQbsGRZogvpSvp J6zO1V01voKS6xODEZVzWnfZHVl0IrYgiuoYERDR4d4W3DAhkfwU1xsLZXkTgO8xFt0D LDbUJ2otl69CDVT4cxT2OirrVWT3zmXSEnlcLmH7WPUqBBsyw9oVDhxMxE+IM9aALDRZ 1+UPAsRg3qn563DKVySm4wjdSo6QQjD0o6BKp9hfNBX1hwQap/7/cbqBIWW6M2vmHBcx RjeLtnuaYM+XQ5Z/P+PhYeVvKjwk/HDZmoqVXiFTYGb8haV31ioefzolkV5Uy2Ya63KD 8ygA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:references:cc:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=BW7kPzJkKzetlFKZMIRRbKCWLdwXQnLfOglxiiLiJUw=; b=cfEG0Q1jwyCQOCksFEeRK89q9IFm7/vRV9tL0a8eDQaMl4OlyqKFqj/4aK4+dFqKVs 8Gbj9qS/x071IXJsIMxJ9PKo+H1i5knF6acwAMACoc4IKqDWily+kcqHbpAlNO7W1GGX qvlYsOy74iHiha7/iGCUduUCj7nnAgMo3pcVy41q0ZpFvhuwd5rQ8EWL1DiEf3orpAiH mXcsXK42czpzMdRJqD41GZm+VLQCbnKY9QGX8iRTtnZD1Dtoa/3hv8547SiKkwR+93F7 en1Cz9zfYUM1H0hn5/CLKJx0pygMsFGywflS07em76tX8nnqwcLJ/qoUwlgDyF5rb//b H4eQ==
X-Gm-Message-State: AN3rC/5y2f1pAyEypIzcIbCsGuTfV4LsZdFItXtGgGMypcX0yEJH6yvW 8mqO6kZeGTIhBE8O
X-Received: by 10.98.64.69 with SMTP id n66mr1054865pfa.211.1493759170263; Tue, 02 May 2017 14:06:10 -0700 (PDT)
Received: from ?IPv6:2406:e001:3a49:1:28cc:dc4c:9703:6781? ([2406:e001:3a49:1:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id g66sm583257pfj.11.2017.05.02.14.06.07 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 02 May 2017 14:06:09 -0700 (PDT)
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
To: Martin Thomson <martin.thomson@gmail.com>, art@ietf.org
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com>
Cc: draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
Organization: University of Auckland
Message-ID: <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com>
Date: Wed, 3 May 2017 09:06:09 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <149369279041.9906.5712707340786253297@ietfa.amsl.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/oR0Bj6hetkpu7PT22j-SXwgTGRs>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 May 2017 21:08:42 -0000

(IETF list removed from CCs. Nothing secret here, it just seems
unnecessary to fill several thousand inboxes with this...)

Thanks for the review, Martin. Responses below:

On 02/05/2017 14:39, Martin Thomson wrote:
> Reviewer: Martin Thomson
> Review result: Not Ready
> 
> This document describes a generic protocol that is for doing just
> about anything and run over just about any transport protocol.  Within
> that remit, the document is coherent and though I agree with Barry
> about unnecessary verbiage, it seems to achieve the goals it sets.
> 
> I don't believe that this document describes a protocol that could be
> deployed.

Obviously, the WG disagrees, so I will try to see below where the
discrepancy lies.

In a few places I've marked points where IMHO a text change is
needed by ***. But generally I hope the issue is just that it's
a long, complex document.

> Caveat here: I didn't review this as thoroughly as I would have liked.
>  It's a large document,

Yes. If we could have made it shorter, we would have :-(

> though it's clear that it isn't large enough
> to cover its intended scope in a couple of key areas.  There is with
> lots of content in some areas - some of it quite detailed.  But there
> is surprisingly little detail in areas that I would have imagined to
> be critical.  The two areas that concern me most are transport and
> security.

Security as such is simply out of scope. This protocol does not
secure itself. I thought that was very clearly stated, e.g.
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#page-14

The main references for external security are
https://tools.ietf.org/html/draft-ietf-anima-bootstrapping-keyinfra
https://tools.ietf.org/html/draft-ietf-anima-autonomic-control-plane
which are indeed normative dependencies.

> The draft talks very little about how messages get to their
> destinations.  There's a brief section on UDP/TCP usage in one place
> and an admonishment to use DTLS/TLS in another, but those sections
> don't seem to have ever met each other.  I'm forced to conclude that
> this is well ahead of the other pieces that will fill in those gaps.

This puzzles me, because
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.3
says:

>>    GRASP discovery and flooding messages are designed for use over link-
>>    local multicast UDP.  They MUST NOT be fragmented, and therefore MUST
>>    NOT exceed the link MTU size.
>> 
>>    All other GRASP messages are unicast and could in principle run over
>>    any transport protocol.  An implementation MUST support use of TCP.
>>    It MAY support use of another transport protocol.  However, GRASP
>>    itself does not provide for error detection or retransmission.  Use
>>    of an unreliable transport protocol is therefore NOT RECOMMENDED.

What more do we need to say in general? See below, where we do say more
for sepcific message types.

> Given that there are no drafts associated with the ANIMA working group
> that attempt to fill those gaps, I really don't know how this would
> ever get deployed.  The status of the implementations only really
> confirms this.

Actually we sent packets from a more recent version of the BUPT
implementation to the Python implementation in Chicago, but it
revealed problems with the BUPT code that couldn't be fixed during
the week. But it did verify that they could send CBOR and we could
receive it; just the wrong CBOR ;-).

> As an aside, use of UDP needs a few more details.

Why? It's NOT RECOMMENDED except for the link-local multicasts.

You're correct that *if* we recommended UDP for the unicast messages,
we'd need more details. In fact, I did make a start on changing my
prototype to do that, and decided that it was a complex matter
and not worth the effort. You give some of the reasons below, and I
think there are others. If we wanted to change this to a recommended
approach, it would very likely need a separate document. Basically,
having to cope with any number of simultaneous overlapping UDP
sessions requires a lot of mechanism, all of which comes for free
with SOCK_STREAM.

> A few that spring to mind:
> 
>   Congestion - Since this appears to be a lock-step protocol, that is
> probably acceptable (one packet per round trip is generally considered
> fine).
> 
>   Loss - This doesn't appear to have any provision for loss recovery. 
> For a long-running negotiation that includes wait steps, this seems
> necessary.

True, but the GRASP timeout mechanism would kick in - the session
would fail. An ASA has to be designed to recover from failure anyway.
However, in an overloaded network we want the autonomic solution to work
even when everything else is broken, which is IMHO a good argument
against UDP.
 
>   Middleboxes - If a peer has to wait a long time for a negotiation,
> what happens if the NAT binding goes away in the meantime?  How does a
> peer ensure reachability?  Can middleboxes verify that endpoints are
> willing to communicate?

The ACP is transparent, and we definitely recommend IPv6 anyway,
so NATs are out of scope. That's stated as a note at
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.9.5
*** It should be stated more prominently, however, probably in
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.2

> The locators concept relates to this.  It would appear to be
> under-specified, largely as a result of not having any concrete
> transport definitions.  For instance, how would you use each of the
> different locators used in the protocol?  Though it might seem
> obvious, even the IPv6 locator doesn't actually include a definition
> of what you might do with it.  
> 
> Does the endpoint construct a UDP packet with the CBOR of a GRASP
> message as its payload and unicast it to the identified IP and port? 
> Seems obvious, needs writing down.

UDP for multicast, TCP for unicast, but yes.

We are explicit at several points, for example
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.2
for discovery messages,
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.2
for discovery responses,
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8.6
for request messages.
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8.6
for flood messages.

We aren't explicit for the other unicast messages because they are
direct replies within a TCP connection, so it truly seems obvious.
   
> The same goes for the FQDN, which I suppose involves an AAAA/A record
> lookup. It needs to say that, unless it's really SRV or something
> else.  And URIs aren't generically usable, so a lot more work would be
> needed to make sense of a URI.

We do in fact say something about them in
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8.6
but I agree it is a bit wrong. FQDNs are clear enough, but URI usage
would definitely depend on the use case. We still want to define them
as a locator type, because somebody is certain to define such a use case. 
*** So that does need a change to the text, leaving the usage
of URIs explicitly for future work.
 
> Security seems to be critical, but the key question of establishing a
> trust domain is left out of scope.  That conveniently removes some
> hard problems, but I believe that there were a few inconvenient
> problems that were removed at the same time.  For instance,
> authentication and confidentiality mechanisms for discovery seem to be
> non-existent.  (D)TLS can't secure a multicast signal, but no effort
> has been put into providing an authentication framework.

As above, that whole issue is covered in the Anima secure bootstrap
work and the autonomic control plane. Since they are normative
dependencies, the GRASP RFC cannot appear without them.
 
> Nits
> 
> The document really isn't clear about how multi-round negotiation
> works.  A picture might help here.  I ask because the definition of
> how timers run is a little unclear.  I probably missed the text about
> this, but I assume that an endpoint that responds to M_REQ_NEG with
> M_NEGOTIATE  starts a new timer, and if a multiple rounds are used the
> timer is reset each time that M_NEGOTIATE is sent.  Is there any need
> for any overall negotiation timer, or do you just multiply out the hop
> (loop) count?

Firstly, the sample message exchanges in Appendix D, especially
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#appendix-D.5
were intended to help on this point. IMHO, ASCII art wouldn't
add much.

https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.5
explains how timeouts work for initial negotiation requests. But we
have cunningly hidden the explanation of timeout for the whole
negotiation in
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8.6 :

   When an initiator sends a Request Negotiation message, it MUST
   initialize a negotiation timer for the new negotiation thread.  The
   default is GRASP_DEF_TIMEOUT milliseconds.  Unless this timeout is
   modified by a Confirm Waiting message (Section 3.8.9), the initiator
   will consider that the negotiation has failed when the timer expires.

*** At the minimum, we need a forward reference to that in section 3.5.5.

(Of course the actual timeout values are local, so they don't appear
in the protocol, but they do appear in the API, which is not a WG
item at present: draft-liu-anima-grasp-api)
 
> The existence of "dry run" negotiations leads me to ask how a protocol
> participant is expected to behave when negotiating.  Is it expected to
> enact intermediate values, or does it commit only when the negotiation
> concludes?

That depends on the semantics of the individual objective; including the
flag in the protocol is a sort of convenience function. We should cover
this point somewhere; there's another non-WG draft where that probably
belongs (draft-carpenter-anima-asa-guidelines).

We do say this in
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.10.4 :

   An issue requiring particular attention is that GRASP itself is a
   stateless protocol.  Any state associated with a dry run operation,
   such as temporarily reserving a resource for subsequent use in a live
   run, is entirely a matter for the designer of the ASA concerned.

Personally I imagine that an ASA would mark a resource as 'reserved'
during a dry-run negotiation but only commit it when a live negotiation
ensues. But we don't want to over-specify before there is some
experience with writing full scale ASAs.

Hope all this helps,

     Brian


From nobody Tue May  2 17:49:23 2017
Return-Path: <martin.thomson@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0920E12945F; Tue,  2 May 2017 17:49:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqyhMwzdw6in; Tue,  2 May 2017 17:49:19 -0700 (PDT)
Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A5C6129A9B; Tue,  2 May 2017 17:47:03 -0700 (PDT)
Received: by mail-wm0-x22d.google.com with SMTP id w64so130144632wma.0; Tue, 02 May 2017 17:47:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=llwzcNFmyBOYNxJJP8KwFkfAk298i29eZLUaqK1RC5Q=; b=WmBHZS5sh83NBokK9jQK+WlQwTTbAXhuZ7K656FXTVb9HG8YZGlDd4SFnxRdoTzTCv RVdh6LAmfItEkYYY933eM2UpNSg/BntMf7NnA4SOE5CYvY4Vj7gyao1ken4iCoS2JRUq BBnria2fJWhlU2Sxct5VoPeI2QHewsSdRHqLN7s+yW2zoV4Y73eDWjo3s7cNyGK2KVlj rTErMKFcU/+7BaB7I8yXmNOAcmnupmacefJLsC0MWoEohzEslLkJrvQYSdvx5odNGetF 9CMpckem9ENYtqgFp4z3+NqTa64SNEUL7BfHNfpQ1SGdgRC0i7KQdoBva+NMj6l2rmFU gaVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=llwzcNFmyBOYNxJJP8KwFkfAk298i29eZLUaqK1RC5Q=; b=kcRM867IYYcInEb6MLTMQMFJXsW6EoXdgI6bR4k0AHuE3PTmhzSlu+5vwUeEns0EPp 98UfMj2BwZ5dyKMXeCquuCY0EH7c/Rro/q6reTTyMBgPJA2dtg0zFWiAXa/tj8j1YXA7 Ou1imhJN/GXBOsMiWb4U/teBrq3da5CnhTVcNkv1goU6nZPakZIyjNGPhFZYcobIPrzs ukFWpBS2z5DNm+IEMDjihRDYisVbxtQUIe4/8k+cnTtfUh2BA5um8gVj7pyGdGgYThB9 CXO5MaCZQn5Ya16mxRq/XXGqwQSXPKg3n7TGhgG+0fGQqhZJtvFdzwK2rWcv0+QUU0x1 +CkA==
X-Gm-Message-State: AN3rC/4xLq4Vb3bGIVVSPzSO3j+/6ea88o9gg4MHBAkShtzRZsBdB+To 1kiQo2nzp9uB76ZNKVSO3Nh/RzgU6Q==
X-Received: by 10.25.212.19 with SMTP id l19mr10655956lfg.169.1493772421637; Tue, 02 May 2017 17:47:01 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.46.83.2 with HTTP; Tue, 2 May 2017 17:47:01 -0700 (PDT)
In-Reply-To: <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
Date: Wed, 3 May 2017 10:47:01 +1000
Message-ID: <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/ZNVdPFW-7R_fGclcA45lv9gla9Q>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 May 2017 00:49:22 -0000

Thanks for the replies Brian,

It seems like I missed the transport stuff entirely.  I'd selfishly
and sheepishly suggest making that text more precise, but I will
respect your editorial discretion.

I remain deeply concerned about the security parts.  At a minimum, the
protocol needs a clear definition of how authentication and
confidentiality mechanisms are used, even if the process by which keys
and so forth are established is left to other work.  In part, that's
easy, all the unicast stuff can use TLS and you can wave your hands
about how trust anchors get around.  However, given that this
traverses the Internet, I am going to suggest that not having
confidentiality for the general discovery case is unwise and not
having authentication for the same seems like a real deal-breaker.

On 3 May 2017 at 07:06, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> (IETF list removed from CCs. Nothing secret here, it just seems
> unnecessary to fill several thousand inboxes with this...)

Yeah, the tool added that.  That might have been an unwise choice.  (Alexey?)

> Security as such is simply out of scope. This protocol does not
> secure itself. I thought that was very clearly stated, e.g.
> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#page-14
>
> The main references for external security are
> https://tools.ietf.org/html/draft-ietf-anima-bootstrapping-keyinfra
> https://tools.ietf.org/html/draft-ietf-anima-autonomic-control-plane
> which are indeed normative dependencies.

Both are informative.

>> The draft talks very little about how messages get to their
>> destinations.  There's a brief section on UDP/TCP usage in one place
>> and an admonishment to use DTLS/TLS in another, but those sections
>> don't seem to have ever met each other.  I'm forced to conclude that
>> this is well ahead of the other pieces that will fill in those gaps.
>
> This puzzles me, because
> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.3
> says:
>
>>>    GRASP discovery and flooding messages are designed for use over link-
>>>    local multicast UDP.  They MUST NOT be fragmented, and therefore MUST
>>>    NOT exceed the link MTU size.
>>>
>>>    All other GRASP messages are unicast and could in principle run over
>>>    any transport protocol.  An implementation MUST support use of TCP.
>>>    It MAY support use of another transport protocol.  However, GRASP
>>>    itself does not provide for error detection or retransmission.  Use
>>>    of an unreliable transport protocol is therefore NOT RECOMMENDED.
>
> What more do we need to say in general? See below, where we do say more
> for sepcific message types.

OK, that isn't as imperative as I am used to.  "designed for" isn't
the same as "are sent using".  And the leading sentence of the second
paragraph does a great job of obfuscating things.

There are still a couple of pieces missing.  I assume that you create
a CBOR serialization of the message and put those end to end on a TCP
socket; or you create a CBOR serialization of the message and put that
in a UDP datagram.  Saying that would genuinely help, even if it seems
even absurdly obvious.  (Caveat: I would naturally ask where TLS fits
in when you do this...)

>> Security seems to be critical, but the key question of establishing a
>> trust domain is left out of scope.  That conveniently removes some
>> hard problems, but I believe that there were a few inconvenient
>> problems that were removed at the same time.  For instance,
>> authentication and confidentiality mechanisms for discovery seem to be
>> non-existent.  (D)TLS can't secure a multicast signal, but no effort
>> has been put into providing an authentication framework.
>
> As above, that whole issue is covered in the Anima secure bootstrap
> work and the autonomic control plane. Since they are normative
> dependencies, the GRASP RFC cannot appear without them.

See above.

>> Nits
>>
>> The document really isn't clear about how multi-round negotiation
>> works.  A picture might help here.  I ask because the definition of
>> how timers run is a little unclear.  I probably missed the text about
>> this, but I assume that an endpoint that responds to M_REQ_NEG with
>> M_NEGOTIATE  starts a new timer, and if a multiple rounds are used the
>> timer is reset each time that M_NEGOTIATE is sent.  Is there any need
>> for any overall negotiation timer, or do you just multiply out the hop
>> (loop) count?
>
> Firstly, the sample message exchanges in Appendix D, especially
> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#appendix-D.5
> were intended to help on this point. IMHO, ASCII art wouldn't
> add much.

That's up to you, I'm just trying to help.

> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.5
> explains how timeouts work for initial negotiation requests. But we
> have cunningly hidden the explanation of timeout for the whole
> negotiation in
> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8.6 :
>
>    When an initiator sends a Request Negotiation message, it MUST
>    initialize a negotiation timer for the new negotiation thread.  The
>    default is GRASP_DEF_TIMEOUT milliseconds.  Unless this timeout is
>    modified by a Confirm Waiting message (Section 3.8.9), the initiator
>    will consider that the negotiation has failed when the timer expires.
>
> *** At the minimum, we need a forward reference to that in section 3.5.5.

So my understanding is that the timeout runs for the entire
multi-message exchange?  That seems unfortunate because it can't then
be based on the observed RTT.


From nobody Tue May  2 19:00:50 2017
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 678F3129498; Tue,  2 May 2017 19:00:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JloOjEh3ribr; Tue,  2 May 2017 19:00:40 -0700 (PDT)
Received: from mail-pg0-x241.google.com (mail-pg0-x241.google.com [IPv6:2607:f8b0:400e:c05::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D474129BB2; Tue,  2 May 2017 18:58:13 -0700 (PDT)
Received: by mail-pg0-x241.google.com with SMTP id i63so6123235pgd.2; Tue, 02 May 2017 18:58:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=OhccwrGpCPdlBBNbxQsw9IXhzcHHiywBAmRkLgEJzxg=; b=cCdDNqgCC9BxxIQbgHGcoTJeI8XNzOVW0rLyMlmQpU2jVBtSZqx3t9k14j//SX/l0E 3LNXV3iMX1tdEWYbt2AIXF70RSF1vHzAYIIfswEOmbwNyyTRPWMc6eYysczOvfppt7RF q28/BiHHn3og4ukB7UjX7wbEh7slC0DJS6kyoFrQhEuhgx5x5DeBwdOYWETVx1PhQJC6 TQeBab1Fk6gsOjFY+h41DhgrSpyEC+wABje14D8V7zN9JAPWJTE7BSS1dx0u31DLVi+X kWeDvkpHCkDkcG0U7aUXT6xmvFx2WLpn2M6scw9gLvk/XxIWocaUa4Cfuudlj2p895UQ aiwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=OhccwrGpCPdlBBNbxQsw9IXhzcHHiywBAmRkLgEJzxg=; b=XirI6XW4ISGe2fJpeFKwrSVceRtlIkLzxwv5FrkeO7xXbUR2k9VprNeA3qWQdhUO1s ZClsZs+JLDMdNIThgvMMUNa7J7wdBuj8QD+yr+LrGnyffbQCVh6olvGMoMkqPZWzzi4h bUwhAZ9IFZmGKbiYKe3mHgP7hUAMkyNaVcBkRfw1zMKeDq0yGnC+F1gQXKQ5KF+8J9t9 SJucokRpd6WT5NxEzwB2oObY217Zdv2OxLU2L13acg82E4uJ4K6sjgCxtQazX6puVNbd SyZa1x4Sy3FC0GAhHp4WKEOyTBvQkK+RutRAKjX1hGd2IHSDeHPdkG6akWR9RTnvh1tI NlGQ==
X-Gm-Message-State: AN3rC/4H7dXwu6xlr4VHFbMLrvc48476Ce6ClymdefxN4VQ/E3hAnvTr mgmTGPhwk0u42/Ay
X-Received: by 10.98.69.213 with SMTP id n82mr2163430pfi.216.1493776692611; Tue, 02 May 2017 18:58:12 -0700 (PDT)
Received: from ?IPv6:2406:e001:3a49:1:28cc:dc4c:9703:6781? ([2406:e001:3a49:1:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id e185sm1065861pfa.115.2017.05.02.18.58.09 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 02 May 2017 18:58:11 -0700 (PDT)
To: Martin Thomson <martin.thomson@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com>
Date: Wed, 3 May 2017 13:58:12 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/S1snBkOG85DVPmOvn0wa4QwPct0>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 May 2017 02:00:42 -0000

On 03/05/2017 12:47, Martin Thomson wrote:
> Thanks for the replies Brian,
> 
> It seems like I missed the transport stuff entirely.  I'd selfishly
> and sheepishly suggest making that text more precise, but I will
> respect your editorial discretion.
> 
> I remain deeply concerned about the security parts.  At a minimum, the
> protocol needs a clear definition of how authentication and
> confidentiality mechanisms are used, even if the process by which keys
> and so forth are established is left to other work.  In part, that's
> easy, all the unicast stuff can use TLS and you can wave your hands
> about how trust anchors get around.  However, given that this
> traverses the Internet, 

No. In the recommended scenario, it is confined to the ACP.
In the scenario of a limited deployment across an operator
boundary, we do recommend TLS:
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.2.1

> I am going to suggest that not having
> confidentiality for the general discovery case is unwise and not
> having authentication for the same seems like a real deal-breaker.

Link-local multicasts don't traverse the Internet, and the relaying
process is limited by the loop count even if there is no ACP. Except
during bootstrap, everything is supposed to go over the ACP, even 
the LL multicasts. During the insecure part bootstrap, there is no
relaying of multicasts off-link. However, as far as we know that
is the only exposure, and nobody knows a way round it.
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.2.2
After that, all the nodes in the ACP are authenticated.

> 
> On 3 May 2017 at 07:06, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>> (IETF list removed from CCs. Nothing secret here, it just seems
>> unnecessary to fill several thousand inboxes with this...)
> 
> Yeah, the tool added that.  That might have been an unwise choice.  (Alexey?)

You can delete it manually in the review tool. I often do that
when reviewing, unless there does seem to be an IETF-wide issue.

> 
>> Security as such is simply out of scope. This protocol does not
>> secure itself. I thought that was very clearly stated, e.g.
>> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#page-14
>>
>> The main references for external security are
>> https://tools.ietf.org/html/draft-ietf-anima-bootstrapping-keyinfra
>> https://tools.ietf.org/html/draft-ietf-anima-autonomic-control-plane
>> which are indeed normative dependencies.
> 
> Both are informative.

Oh. Well, technically you don't need to know how they work in order
to implement GRASP. I'll do whatever the community wants, of course.

> 
>>> The draft talks very little about how messages get to their
>>> destinations.  There's a brief section on UDP/TCP usage in one place
>>> and an admonishment to use DTLS/TLS in another, but those sections
>>> don't seem to have ever met each other.  I'm forced to conclude that
>>> this is well ahead of the other pieces that will fill in those gaps.
>>
>> This puzzles me, because
>> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.3
>> says:
>>
>>>>    GRASP discovery and flooding messages are designed for use over link-
>>>>    local multicast UDP.  They MUST NOT be fragmented, and therefore MUST
>>>>    NOT exceed the link MTU size.
>>>>
>>>>    All other GRASP messages are unicast and could in principle run over
>>>>    any transport protocol.  An implementation MUST support use of TCP.
>>>>    It MAY support use of another transport protocol.  However, GRASP
>>>>    itself does not provide for error detection or retransmission.  Use
>>>>    of an unreliable transport protocol is therefore NOT RECOMMENDED.
>>
>> What more do we need to say in general? See below, where we do say more
>> for sepcific message types.
> 
> OK, that isn't as imperative as I am used to.  "designed for" isn't
> the same as "are sent using".  And the leading sentence of the second
> paragraph does a great job of obfuscating things.
> 
> There are still a couple of pieces missing.  I assume that you create
> a CBOR serialization of the message and put those end to end on a TCP
> socket; or you create a CBOR serialization of the message and put that
> in a UDP datagram.  Saying that would genuinely help, even if it seems
> even absurdly obvious.

*** We can add that early in 
https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8

> (Caveat: I would naturally ask where TLS fits
> in when you do this...)

If there's no ACP, then yes, we need to use TLS but "Further details are
out of scope for this document." If the community shows any signs of
wanting to do this, as for the UDP case, another document would be
needed, I think.

>>> Security seems to be critical, but the key question of establishing a
>>> trust domain is left out of scope.  That conveniently removes some
>>> hard problems, but I believe that there were a few inconvenient
>>> problems that were removed at the same time.  For instance,
>>> authentication and confidentiality mechanisms for discovery seem to be
>>> non-existent.  (D)TLS can't secure a multicast signal, but no effort
>>> has been put into providing an authentication framework.

Indeed, but the ACP is supposed to provide this.

>> As above, that whole issue is covered in the Anima secure bootstrap
>> work and the autonomic control plane. Since they are normative
>> dependencies, the GRASP RFC cannot appear without them.
> 
> See above.
> 
>>> Nits
>>>
>>> The document really isn't clear about how multi-round negotiation
>>> works.  A picture might help here.  I ask because the definition of
>>> how timers run is a little unclear.  I probably missed the text about
>>> this, but I assume that an endpoint that responds to M_REQ_NEG with
>>> M_NEGOTIATE  starts a new timer, and if a multiple rounds are used the
>>> timer is reset each time that M_NEGOTIATE is sent.  Is there any need
>>> for any overall negotiation timer, or do you just multiply out the hop
>>> (loop) count?
>>
>> Firstly, the sample message exchanges in Appendix D, especially
>> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#appendix-D.5
>> were intended to help on this point. IMHO, ASCII art wouldn't
>> add much.
> 
> That's up to you, I'm just trying to help.
> 
>> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.5.5
>> explains how timeouts work for initial negotiation requests. But we
>> have cunningly hidden the explanation of timeout for the whole
>> negotiation in
>> https://tools.ietf.org/html/draft-ietf-anima-grasp-11#section-3.8.6 :
>>
>>    When an initiator sends a Request Negotiation message, it MUST
>>    initialize a negotiation timer for the new negotiation thread.  The
>>    default is GRASP_DEF_TIMEOUT milliseconds.  Unless this timeout is
>>    modified by a Confirm Waiting message (Section 3.8.9), the initiator
>>    will consider that the negotiation has failed when the timer expires.
>>
>> *** At the minimum, we need a forward reference to that in section 3.5.5.
> 
> So my understanding is that the timeout runs for the entire
> multi-message exchange?  That seems unfortunate because it can't then
> be based on the observed RTT.

True. It's more aimed at being based on the nature of the autonomic
function concerned, which might involve some time-consuming action,
like making a measurement, resetting a slave device, or even
physically moving an antenna. And in the far future, maybe even
invoking a machine learning algorithm or some other slow process. 

We do have a mechanism for extending the timeout (the Confirm Waiting
message). That was included on the assumption that occasionally an
agent might to go off and do some homework before replying to a request.
I must say I hadn't thought of RTT as an issue, because we tend to assume
that the timescale for an autonomic action will be far greater than
an RTT, so timeouts will be milliseconds to seconds, and RTTs within
the autonomic domain will be sub-millisecond in many cases.

Are you suggesting we should be able to reduce the timeout as well?
(That would simply mean the parameter in the Confirm Waiting message
would become a signed integer, I guess.)

    Brian


From nobody Tue May  2 19:34:40 2017
Return-Path: <martin.thomson@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 124B9127ABE; Tue,  2 May 2017 19:34:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Ld0yUwSG7-F; Tue,  2 May 2017 19:34:28 -0700 (PDT)
Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1EE212EAAC; Tue,  2 May 2017 19:32:19 -0700 (PDT)
Received: by mail-wm0-x232.google.com with SMTP id w64so131597339wma.0; Tue, 02 May 2017 19:32:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=sDVcI06mOHrYICbcMLriS1qnl2dEFwfITEkI4bJmbBU=; b=sBt0LvmzErKELR6Bvo1yYDsKtMGFXSfmXjnVXBQtDF4wAqBUfS5Ng5x0qJCPVd8la3 SsJL7ZxLplQavwPiAxxw8mTvHkOXZB7nLfSlP+Zpco31PXWj+eA+NHdFmHnzGL2ywzxw ZRwExlJPn1EzPEPMiKSP3A8/dV6pjJhTQqJQ+Nbsf0Nq9k/0GJcIbxXtu02FVElNeSYs ZMFZosHTXIQ92KFtB9zqWhX/FDHGnU0CULI2Agu5H4+HGxWIrPNlTRbHM+iMonkuZGDj RTe9+UwbiKT8ep3TgVDTz7EP+Wc8N/huSusNKaoUZtDVMioyQb2KI8jJkTzp9eTZVazc PK8w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=sDVcI06mOHrYICbcMLriS1qnl2dEFwfITEkI4bJmbBU=; b=CqSd65sALE/eL/vZMXGWyO/8gZtXSCyebbGSOknO7Kx4w7zC6oyyjkr8HSH2FfY2hg YPu1Bkbw70te9v5V0yUk9grKdJLSg9+OKOutowQZ9FT2/M3IT+LeLSe7dreO2sC45ILL muet4rLJ/GtF8MA2o5QtWQp4XRAFbtd5vVvBKJ9TqU6EWte37rvnP32MWcoVmzO4UJgv RNIhYzYE/6F/UQFgBN/Dc/jFXBv/5COVCGvp2YiMjdMygRr9T99w5eQU5GITjJMEz0PH Qw4f2mMTK2XHs5yFImGeHbxZDfNBHx/4wjB8phQROs4p2YqU4z8pzaA6BeBVuM8WXCWS 0/fA==
X-Gm-Message-State: AN3rC/46O46OUkA7B3mkl6XDk/ySfLRsNkOEhJQf8mXe9NE++3koi+8e MB1N2OFDYAtep4iKPFGCMD3a9J1k3pNI8Do=
X-Received: by 10.25.212.19 with SMTP id l19mr10759495lfg.169.1493778738248; Tue, 02 May 2017 19:32:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.46.83.2 with HTTP; Tue, 2 May 2017 19:32:17 -0700 (PDT)
In-Reply-To: <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
Date: Wed, 3 May 2017 12:32:17 +1000
Message-ID: <CABkgnnV1pPnGRBb+SNYJGiZ9EfL_6JPaPor45_SmUiBQ-u=deQ@mail.gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/YPT6ZhmnSwbFaOBbNoj_Kof1wQ8>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 May 2017 02:34:31 -0000

You seem to have covered the other points well enough.  I won't say
that I'm happy with the security story; I would strongly prefer that
you at least say that unicast messages are added to TLS.

In fact, here's an idea: use TLS for unicast always and leave the
rules about what authentication is offered and accepted to the other
documents.  Then you only have the link-local multicast stuff in the
clear.

On the topic of link-local multicast, you definitely want text in
"3.5.4.5.  Rapid Mode (Discovery/Negotiation binding)" on the
implications for security.  I would prefer that you forbid triggering
a negotiation during a multicast discovery because it lacks any form
of protection.

On 3 May 2017 at 11:58, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> I must say I hadn't thought of RTT as an issue, because we tend to assume
> that the timescale for an autonomic action will be far greater than
> an RTT, so timeouts will be milliseconds to seconds, and RTTs within
> the autonomic domain will be sub-millisecond in many cases.

Ahh, I always assume that machines work faster than the network, so
the opposite really..

> Are you suggesting we should be able to reduce the timeout as well?

Can't it already do that?  I mean, it can't account for any time
already spent waiting, but it could include the value 0, which means
don't wait any more when you receive this (a nonsensical thing here,
but it demonstrates that a reduction is possible).


From nobody Tue May  2 19:48:19 2017
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D890012EB02; Tue,  2 May 2017 19:48:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pdkhcQhX1kaM; Tue,  2 May 2017 19:48:16 -0700 (PDT)
Received: from mail-pg0-x241.google.com (mail-pg0-x241.google.com [IPv6:2607:f8b0:400e:c05::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E020A12EB09; Tue,  2 May 2017 19:45:53 -0700 (PDT)
Received: by mail-pg0-x241.google.com with SMTP id i63so6311694pgd.2; Tue, 02 May 2017 19:45:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=v0SOmH+Jlo+taWZrHB9v/80WqHMe/TNLiNIJ8IPfCuw=; b=dy8k+YowNPo7wekshAJIyiHw+e3x+FcYftOEgx1RjbABpqyBwugnE/CBbnSSU6nYwT Tqbmzj3mRu/asfzsUQawdFu81JTQMHQbV5FFLrM33ZiFR6fEXQMyLbhO4BPTdo/VGEGP 0yhtSTSSgspmpm2Fs5y09TpW1aOY3fBtDxuPQnUUzrfIXjeUlTgmVl0y1/nIMUH75wqg 01lxRHb6I7IAHbYRrDWhBkjyaQPjMuYdPzu1umAq989D+CI7ZDRzs0dVh6WqU3jCBgEW bfWKsv38GoJYifQ8+wyObahjnvtlUQ3z6THNeSeQIBrkxC+S6lV3tqGYTlKb0JpolZdf ow3A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=v0SOmH+Jlo+taWZrHB9v/80WqHMe/TNLiNIJ8IPfCuw=; b=UaoGYioO2nzTgph+okilLk0oB8FIzqDn3DE++8ibQAhzFri9M7Bwtiil3AvX1eSJ5W 4508hwu4nyjchHg2dzFCe2DusVmkQi1oCvZqealLv29hkH5XGEJuQP2CaEwnOIvX/m2O TKKBntiGNnM/ltwM5zYZmiVqxq9C5G+DVNA5e0Ja/aXMuG+JWwkaAAVN5E4lf2y89uxb coqCNlsmTWmJ/Neqt9dSZpsoz3J0XJA81u6HEF7VeGII5kV9ZXdgkAxooom3RhMhmnzM 55zp6R8XrwQqnJ1qSI5PkhHI6XZu6UY5TOgaNVojEE/H+xL9XWL4lsJHKiD4m0HetFnW FwQQ==
X-Gm-Message-State: AN3rC/5iE7qMjNZM0srFDtWJipVx+Alh6hcZFukObdjY0/8/JeK60NAd uqlfK8upNuiqKA==
X-Received: by 10.84.238.134 with SMTP id v6mr5674984plk.137.1493779553537; Tue, 02 May 2017 19:45:53 -0700 (PDT)
Received: from ?IPv6:2406:e001:3a49:1:28cc:dc4c:9703:6781? ([2406:e001:3a49:1:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id p3sm27809711pgd.36.2017.05.02.19.45.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 02 May 2017 19:45:52 -0700 (PDT)
To: Martin Thomson <martin.thomson@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com> <CABkgnnV1pPnGRBb+SNYJGiZ9EfL_6JPaPor45_SmUiBQ-u=deQ@mail.gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <fd2dc3bf-e3aa-c233-7d63-c837e7caf9e6@gmail.com>
Date: Wed, 3 May 2017 14:45:53 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CABkgnnV1pPnGRBb+SNYJGiZ9EfL_6JPaPor45_SmUiBQ-u=deQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/8b-iglLvW1Bc0CR6SIydbSAjPgg>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 May 2017 02:48:18 -0000

Duly noted.

At this point I think we'll wait for direction from the AD. I expect
other points will come up from the IESG.

Regards
   Brian

On 03/05/2017 14:32, Martin Thomson wrote:
> You seem to have covered the other points well enough.  I won't say
> that I'm happy with the security story; I would strongly prefer that
> you at least say that unicast messages are added to TLS.
> 
> In fact, here's an idea: use TLS for unicast always and leave the
> rules about what authentication is offered and accepted to the other
> documents.  Then you only have the link-local multicast stuff in the
> clear.
> 
> On the topic of link-local multicast, you definitely want text in
> "3.5.4.5.  Rapid Mode (Discovery/Negotiation binding)" on the
> implications for security.  I would prefer that you forbid triggering
> a negotiation during a multicast discovery because it lacks any form
> of protection.
> 
> On 3 May 2017 at 11:58, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>> I must say I hadn't thought of RTT as an issue, because we tend to assume
>> that the timescale for an autonomic action will be far greater than
>> an RTT, so timeouts will be milliseconds to seconds, and RTTs within
>> the autonomic domain will be sub-millisecond in many cases.
> 
> Ahh, I always assume that machines work faster than the network, so
> the opposite really..
> 
>> Are you suggesting we should be able to reduce the timeout as well?
> 
> Can't it already do that?  I mean, it can't account for any time
> already spent waiting, but it could include the value 0, which means
> don't wait any more when you receive this (a nonsensical thing here,
> but it demonstrates that a reduction is possible).
> 


From nobody Mon May  8 05:15:48 2017
Return-Path: <ietf@kuehlewind.net>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7667012944E for <art@ietfa.amsl.com>; Mon,  8 May 2017 05:15:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.697
X-Spam-Level: 
X-Spam-Status: No, score=0.697 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=ietf@kuehlewind.net header.d=kuehlewind.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iHdDAkOJBq8Q for <art@ietfa.amsl.com>; Mon,  8 May 2017 05:15:44 -0700 (PDT)
Received: from kuehlewind.net (kuehlewind.net [83.169.45.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41DC112944B for <art@ietf.org>; Mon,  8 May 2017 05:15:44 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kuehlewind.net;  b=RKl6njQoSRDn94HGwRDt9x9rkW0Gl7pDYxqaNwCwS8uUoMU6NTc/dnI8mdTjP2qZv8FTcXajbltqWXRYsHcbvqBYlRJ3vWNAE5a34fPVdfSONaER4JxBJP3akFBsobkUzdbg24LUaCXivuXZmlmpk/ZQZ6itwJUKlgnRi3H57LE=; h=Received:Received:Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:X-Mailer:X-PPP-Message-ID:X-PPP-Vhost;
Received: (qmail 29726 invoked from network); 8 May 2017 14:15:42 +0200
Received: from p5dec259c.dip0.t-ipconnect.de (HELO ?192.168.178.33?) (93.236.37.156) by kuehlewind.net with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 8 May 2017 14:15:42 +0200
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: "Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net>
In-Reply-To: <HE1PR0701MB2459B2173C921635A61CC24695100@HE1PR0701MB2459.eurprd07.prod.outlook.com>
Date: Mon, 8 May 2017 14:15:40 +0200
Cc: "art@ietf.org" <art@ietf.org>, "alto@ietf.org" <alto@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "draft-ietf-alto-multi-cost.all@ietf.org" <draft-ietf-alto-multi-cost.all@ietf.org>, "Randriamasy, Sabine (Nokia - FR/Nozay)" <sabine.randriamasy@nokia-bell-labs.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <2A376548-9BB0-4D7B-81C6-1BD951227FEA@kuehlewind.net>
References: <149144445494.22036.11923880719369865745@ietfa.amsl.com> <DB6PR0701MB24543D95D78557DDEACA2D71951E0@DB6PR0701MB2454.eurprd07.prod.outlook.com> <CABkgnnWAn9r4ZGtVq6yLyYcC7w5rDy4dV+98q0K__Nnm2UfRew@mail.gmail.com> <HE1PR0701MB2459B2173C921635A61CC24695100@HE1PR0701MB2459.eurprd07.prod.outlook.com>
To: Martin Thomson <martin.thomson@gmail.com>
X-Mailer: Apple Mail (2.3273)
X-PPP-Message-ID: <20170508121542.29717.60305@lvps83-169-45-111.dedicated.hosteurope.de>
X-PPP-Vhost: kuehlewind.net
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/S2xYeDGsogkRZIZNuVGcjdBcTIU>
Subject: Re: [art] Artart telechat review of draft-ietf-alto-multi-cost-08
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 May 2017 12:15:46 -0000

Hi Martin,

just to double check: do you think this document is ready now and all =
your comments have been addressed?

Mirja


> Am 27.04.2017 um 13:57 schrieb Randriamasy, Sabine (Nokia - FR/Nozay) =
<sabine.randriamasy@nokia-bell-labs.com>:
>=20
> Hello Martin,
>=20
> I just posted an update where the " Requirements Language" text has =
been moved in a section 1.1.
> As I saw it on a number of other ietf drafts, I also added the =
sentence=20
> "When the words appear in lower case, their natural language meaning =
is used."
>=20
> The update and status are available at =
https://datatracker.ietf.org/doc/draft-ietf-alto-multi-cost/
>=20
> Thanks,
> Sabine
>=20
>=20
>>> -----Original Message-----
>>> From: Martin Thomson [mailto:martin.thomson@gmail.com]
>>> Sent: 26 April 2017 08:39
>>> To: Randriamasy, Sabine (Nokia - FR/Nozay) =
<sabine.randriamasy@nokia-
>>> bell-labs.com>
>>> Cc: art@ietf.org; alto@ietf.org; ietf@ietf.org; =
draft-ietf-alto-multi-
>>> cost.all@ietf.org
>>> Subject: Re: Artart telechat review of draft-ietf-alto-multi-cost-08
>>>=20
>>> On 26 April 2017 at 03:26, Randriamasy, Sabine (Nokia - FR/Nozay)
>>> <sabine.randriamasy@nokia-bell-labs.com> wrote:
>>>>>> This document doesn't cite RFC 2119, but it uses the keywords.
>>>> [SR     ] RFC 2119 is cited on page 1, section " Requirements =
Language" and
>>> section "9.1.  Normative References". Should it be referenced =
elsewhere?
>>>=20
>>> The convention is to put those in the body, I missed it in the =
boilerplate.
>>>=20
>>> I skimmed the other changes, and they look fine.


From nobody Mon May  8 15:39:41 2017
Return-Path: <martin.thomson@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4376124BE8; Mon,  8 May 2017 15:39:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j-BK8Hj-5YUX; Mon,  8 May 2017 15:39:39 -0700 (PDT)
Received: from mail-wr0-x236.google.com (mail-wr0-x236.google.com [IPv6:2a00:1450:400c:c0c::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19A531200FC; Mon,  8 May 2017 15:39:38 -0700 (PDT)
Received: by mail-wr0-x236.google.com with SMTP id z52so55911671wrc.2; Mon, 08 May 2017 15:39:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=bvZwFeBKOpn3zmOdduGxZxz4nx3C5F2aXmUevdpGyX4=; b=HTgbzrHoJI9D5F+sUXlf93JfsVBblGPfh171fZ+8V7bWjj58K43aKEssE9i6FCYLkx deR+SbR/lZhrMUbQxNSR+YY3gdV7Sdx0yuAIdcDEjTd88Q4chdxiJqJR9vaWoB6CFdaC gY4NaYjIP/gFauprMcF6l9WDbu7ZSmtqE31i+O0ZtCN9MPTTNQ5F8bWpY62wWK6c8QMB pCm2vgmMAWkplLOM2Ih4DvSezMHKTMKn0TsbpkvB3HUPYNLFAuc6BnygVdiTN65NIThE 7wzR1Bdy3Khnw7PiFnXor9u1S+2j3F4rwL+hWEZ+s5LgzSTHrC5C/l6ZNsKddR12vyEx b4hw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=bvZwFeBKOpn3zmOdduGxZxz4nx3C5F2aXmUevdpGyX4=; b=ORulXaiTfRXlM8Y863dBi2JqqEJHfhNdFZzHNjaJ754IHRWR+ueO4Ku+BjMCX57dyi R1fKG5AccHmX0IJdEecZ2jkao8x6FSogv4zQM2dASVZtLo2zQxUrcLELLf70dY3bsOYU JFPfnN7f+0HkrO3Yn0tK3s4+3ZCkd4axaMfv35Xg+SpH7f72XJ4NoFpmo+hxNz4gS7fy /UvSbvotKrIk5IpKZ2L+vzFCaZ2W1w2U7UMtm6D9yMs3GRmCLhjyFT77FHsvwaQgkMPU bFn4YD3bNprkTWbZXIYil5Zl1yX7umMKvPLPYn5tGvKCyh13RBPmgMW3g7xUVRakaebd QLsw==
X-Gm-Message-State: AODbwcA32ukmP7Pxuf2sqUiYlU++U999MuXIjw6FJ8ukv0l9TJ4phZ7V XsIw3Uqlu00XNjTRtv2WhZsNZnBlj9Ps
X-Received: by 10.46.0.70 with SMTP id 67mr7516197lja.113.1494283177290; Mon, 08 May 2017 15:39:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.46.83.2 with HTTP; Mon, 8 May 2017 15:39:36 -0700 (PDT)
In-Reply-To: <2A376548-9BB0-4D7B-81C6-1BD951227FEA@kuehlewind.net>
References: <149144445494.22036.11923880719369865745@ietfa.amsl.com> <DB6PR0701MB24543D95D78557DDEACA2D71951E0@DB6PR0701MB2454.eurprd07.prod.outlook.com> <CABkgnnWAn9r4ZGtVq6yLyYcC7w5rDy4dV+98q0K__Nnm2UfRew@mail.gmail.com> <HE1PR0701MB2459B2173C921635A61CC24695100@HE1PR0701MB2459.eurprd07.prod.outlook.com> <2A376548-9BB0-4D7B-81C6-1BD951227FEA@kuehlewind.net>
From: Martin Thomson <martin.thomson@gmail.com>
Date: Tue, 9 May 2017 08:39:36 +1000
Message-ID: <CABkgnnUiyvokXWbgWFp96in3=Ge5PUhoKjNNZpxhykaMTyxQ-A@mail.gmail.com>
To: "Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net>
Cc: "art@ietf.org" <art@ietf.org>, "alto@ietf.org" <alto@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>, "draft-ietf-alto-multi-cost.all@ietf.org" <draft-ietf-alto-multi-cost.all@ietf.org>, "Randriamasy, Sabine (Nokia - FR/Nozay)" <sabine.randriamasy@nokia-bell-labs.com>
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/6YDOra51LiToLHujHvnbSmotxAM>
Subject: Re: [art] Artart telechat review of draft-ietf-alto-multi-cost-08
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 May 2017 22:39:40 -0000

Yes, I believe that the changes made were sufficient.

On 8 May 2017 at 22:15, Mirja Kuehlewind (IETF) <ietf@kuehlewind.net> wrote:
> Hi Martin,
>
> just to double check: do you think this document is ready now and all your comments have been addressed?
>
> Mirja
>
>
>> Am 27.04.2017 um 13:57 schrieb Randriamasy, Sabine (Nokia - FR/Nozay) <sabine.randriamasy@nokia-bell-labs.com>:
>>
>> Hello Martin,
>>
>> I just posted an update where the " Requirements Language" text has been moved in a section 1.1.
>> As I saw it on a number of other ietf drafts, I also added the sentence
>> "When the words appear in lower case, their natural language meaning is used."
>>
>> The update and status are available at https://datatracker.ietf.org/doc/draft-ietf-alto-multi-cost/
>>
>> Thanks,
>> Sabine
>>
>>
>>>> -----Original Message-----
>>>> From: Martin Thomson [mailto:martin.thomson@gmail.com]
>>>> Sent: 26 April 2017 08:39
>>>> To: Randriamasy, Sabine (Nokia - FR/Nozay) <sabine.randriamasy@nokia-
>>>> bell-labs.com>
>>>> Cc: art@ietf.org; alto@ietf.org; ietf@ietf.org; draft-ietf-alto-multi-
>>>> cost.all@ietf.org
>>>> Subject: Re: Artart telechat review of draft-ietf-alto-multi-cost-08
>>>>
>>>> On 26 April 2017 at 03:26, Randriamasy, Sabine (Nokia - FR/Nozay)
>>>> <sabine.randriamasy@nokia-bell-labs.com> wrote:
>>>>>>> This document doesn't cite RFC 2119, but it uses the keywords.
>>>>> [SR     ] RFC 2119 is cited on page 1, section " Requirements Language" and
>>>> section "9.1.  Normative References". Should it be referenced elsewhere?
>>>>
>>>> The convention is to put those in the body, I missed it in the boilerplate.
>>>>
>>>> I skimmed the other changes, and they look fine.
>


From nobody Mon May  8 15:45:39 2017
Return-Path: <ietf@kuehlewind.net>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FA14127333 for <art@ietfa.amsl.com>; Mon,  8 May 2017 15:45:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); domainkeys=pass (1024-bit key) header.from=ietf@kuehlewind.net header.d=kuehlewind.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gga0s3j5P9so for <art@ietfa.amsl.com>; Mon,  8 May 2017 15:45:35 -0700 (PDT)
Received: from kuehlewind.net (kuehlewind.net [83.169.45.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31288124BE8 for <art@ietf.org>; Mon,  8 May 2017 15:45:35 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=kuehlewind.net;  b=N9xJ4hnwmzrqrN18QcxoFGPfPG7tBB81qzYkfr1RD5CbY64f3Z1UxX4s7dpfMFsjj0iulaY8XL8CQYsQsIkF/2a6HFIrTvogqoOPaAHrqakePJHu8wOxW5wbTqjJkKZkvyK5TaqxuWI8vX8MCnh/OvTcJUw9p5PJge/hbENyUV8=; h=Received:Received:Content-Type:Mime-Version:Subject:From:In-Reply-To:Date:Cc:Content-Transfer-Encoding:Message-Id:References:To:X-Mailer:X-PPP-Message-ID:X-PPP-Vhost;
Received: (qmail 1211 invoked from network); 9 May 2017 00:45:32 +0200
Received: from p5dec259c.dip0.t-ipconnect.de (HELO ?192.168.178.33?) (93.236.37.156) by kuehlewind.net with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated); 9 May 2017 00:45:32 +0200
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: "Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net>
In-Reply-To: <CABkgnnUiyvokXWbgWFp96in3=Ge5PUhoKjNNZpxhykaMTyxQ-A@mail.gmail.com>
Date: Tue, 9 May 2017 00:45:31 +0200
Cc: "art@ietf.org" <art@ietf.org>, "draft-ietf-alto-multi-cost.all@ietf.org" <draft-ietf-alto-multi-cost.all@ietf.org>,  "alto@ietf.org" <alto@ietf.org>, "ietf@ietf.org" <ietf@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <61DA787B-0E86-4343-88F6-5EF03ABA274A@kuehlewind.net>
References: <149144445494.22036.11923880719369865745@ietfa.amsl.com> <DB6PR0701MB24543D95D78557DDEACA2D71951E0@DB6PR0701MB2454.eurprd07.prod.outlook.com> <CABkgnnWAn9r4ZGtVq6yLyYcC7w5rDy4dV+98q0K__Nnm2UfRew@mail.gmail.com> <HE1PR0701MB2459B2173C921635A61CC24695100@HE1PR0701MB2459.eurprd07.prod.outlook.com> <2A376548-9BB0-4D7B-81C6-1BD951227FEA@kuehlewind.net> <CABkgnnUiyvokXWbgWFp96in3=Ge5PUhoKjNNZpxhykaMTyxQ-A@mail.gmail.com>
To: Martin Thomson <martin.thomson@gmail.com>
X-Mailer: Apple Mail (2.3273)
X-PPP-Message-ID: <20170508224532.1197.62492@lvps83-169-45-111.dedicated.hosteurope.de>
X-PPP-Vhost: kuehlewind.net
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/FWKkZi13p7W5tzlYpCY_tPHgGqc>
Subject: Re: [art] [alto] Artart telechat review of draft-ietf-alto-multi-cost-08
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 May 2017 22:45:37 -0000

Thanks!

> Am 09.05.2017 um 00:39 schrieb Martin Thomson =
<martin.thomson@gmail.com>:
>=20
> Yes, I believe that the changes made were sufficient.
>=20
> On 8 May 2017 at 22:15, Mirja Kuehlewind (IETF) <ietf@kuehlewind.net> =
wrote:
>> Hi Martin,
>>=20
>> just to double check: do you think this document is ready now and all =
your comments have been addressed?
>>=20
>> Mirja
>>=20
>>=20
>>> Am 27.04.2017 um 13:57 schrieb Randriamasy, Sabine (Nokia - =
FR/Nozay) <sabine.randriamasy@nokia-bell-labs.com>:
>>>=20
>>> Hello Martin,
>>>=20
>>> I just posted an update where the " Requirements Language" text has =
been moved in a section 1.1.
>>> As I saw it on a number of other ietf drafts, I also added the =
sentence
>>> "When the words appear in lower case, their natural language meaning =
is used."
>>>=20
>>> The update and status are available at =
https://datatracker.ietf.org/doc/draft-ietf-alto-multi-cost/
>>>=20
>>> Thanks,
>>> Sabine
>>>=20
>>>=20
>>>>> -----Original Message-----
>>>>> From: Martin Thomson [mailto:martin.thomson@gmail.com]
>>>>> Sent: 26 April 2017 08:39
>>>>> To: Randriamasy, Sabine (Nokia - FR/Nozay) =
<sabine.randriamasy@nokia-
>>>>> bell-labs.com>
>>>>> Cc: art@ietf.org; alto@ietf.org; ietf@ietf.org; =
draft-ietf-alto-multi-
>>>>> cost.all@ietf.org
>>>>> Subject: Re: Artart telechat review of =
draft-ietf-alto-multi-cost-08
>>>>>=20
>>>>> On 26 April 2017 at 03:26, Randriamasy, Sabine (Nokia - FR/Nozay)
>>>>> <sabine.randriamasy@nokia-bell-labs.com> wrote:
>>>>>>>> This document doesn't cite RFC 2119, but it uses the keywords.
>>>>>> [SR     ] RFC 2119 is cited on page 1, section " Requirements =
Language" and
>>>>> section "9.1.  Normative References". Should it be referenced =
elsewhere?
>>>>>=20
>>>>> The convention is to put those in the body, I missed it in the =
boilerplate.
>>>>>=20
>>>>> I skimmed the other changes, and they look fine.
>>=20
>=20
> _______________________________________________
> alto mailing list
> alto@ietf.org
> https://www.ietf.org/mailman/listinfo/alto


From nobody Tue May  9 14:31:01 2017
Return-Path: <mnot@mnot.net>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2066F129A9C; Tue,  9 May 2017 14:30:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.703
X-Spam-Level: 
X-Spam-Status: No, score=-0.703 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6x7EUvCv7wvd; Tue,  9 May 2017 14:30:45 -0700 (PDT)
Received: from mxout-07.mxes.net (mxout-07.mxes.net [216.86.168.182]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58C12127977; Tue,  9 May 2017 14:30:45 -0700 (PDT)
Received: from [192.168.1.14] (unknown [124.189.96.43]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 435BF22E2B7; Tue,  9 May 2017 17:30:37 -0400 (EDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Mark Nottingham <mnot@mnot.net>
In-Reply-To: <5E5238DC-B835-4BDF-B50D-8D594A46C4D4@tzi.org>
Date: Wed, 10 May 2017 07:30:35 +1000
Cc: art@ietf.org, draft-ietf-core-coap-tcp-tls.all@ietf.org, ietf@ietf.org, core@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <767F913A-586B-42A2-B021-F9AC5C478702@mnot.net>
References: <149179722452.3118.982908107963516290@ietfa.amsl.com> <5E5238DC-B835-4BDF-B50D-8D594A46C4D4@tzi.org>
To: Carsten Bormann <cabo@tzi.org>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/butc4cu6o07BcfAxrgUM1jx4eQE>
Subject: Re: [art] Artart last call review of draft-ietf-core-coap-tcp-tls-07
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 09 May 2017 21:30:48 -0000

> On 10 Apr 2017, at 7:46 pm, Carsten Bormann <cabo@tzi.org> wrote:
>=20
>> Section 7.4 shows how to convert a "coap+ws://" URI into a "wss://"
>> URI, using a well-known URI in the "wss" scheme. However, "wss" is =
not
>> defined to use well-known URIs, so this is an invalid use.=20
>=20
> This incorrect use of RFC 5785 is indeed embarrassing.  More about =
that later.

To close this loop -- the change in -08 isn't sufficiently prominent =
IME; while the general nature of the change is listed in the Abstract, =
the actual normative text is very hard to find. Given that this is a =
pretty fundamental change in the operation of a URI scheme, I'd think it =
at least deserves its own section, if not a separate document.

Cheers,

--
Mark Nottingham   https://www.mnot.net/





From nobody Tue May  9 18:51:19 2017
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85E7B12EBAF; Tue,  9 May 2017 18:51:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.6
X-Spam-Level: 
X-Spam-Status: No, score=-0.6 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4U5XsqrYA9Tx; Tue,  9 May 2017 18:51:09 -0700 (PDT)
Received: from mail-pg0-x244.google.com (mail-pg0-x244.google.com [IPv6:2607:f8b0:400e:c05::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 128B312EB98; Tue,  9 May 2017 18:51:09 -0700 (PDT)
Received: by mail-pg0-x244.google.com with SMTP id 64so2071682pgb.3; Tue, 09 May 2017 18:51:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=FF7VNJU3EfEvyoub1uiexvCVWWrtdbSLOxe6qzWOiWY=; b=p+udcK76/nODeBhXkb5amKZaaMfdO+2W8oMZsQG55BmPKZQoAceZBjSkElpxc+DGVw K/bnONAzQ/Caej3ElUiiOhzMoBxN4S9PX5XRipYuLpgkJTbqbvWfArZPyBl0EFpHLwvo brpKdNLV++E3i9u9esTbw+wDax1AxnuhKqzwNQkUPQE9mphxFi4u3qdZd/ShqvWEpmip RBxkI+Uv2xZx1KokL3MV4WhD4eQhaki3eqwsjWIERUBTRD3N6EuSC9fJA4TC6+ArjpE1 5sl0UQL1OSpxNlmw7CNVdbeA1F2qePeTguIZwD+mjRgV5wMYIbnRtHFXYu7XVStVeqiq Baaw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=FF7VNJU3EfEvyoub1uiexvCVWWrtdbSLOxe6qzWOiWY=; b=oVIu9yTYrlbk5ZQ4YriKxIlMMSh4vClW6kXKcYdt2eG3YurEsCn1UZUsgXtLI1sUDJ C4And5QSJfogPr3zC+OBDbJgaV3XZGyx+5NHGQYAAuMQ0f2oEnOfplDwGGdXHWTPxDqi VtNrTe7u/TidP883bQEDCNsgfOFVZyeULCmC1+2hokOGB2YMW3i5YezclsAElLeg0kfr VSUpQN7wWji9DngNjc7LvlEkDXsEfo07LbFwcCO5lWgDTnELicEJz8Fo5Z8T2M+sg2nj Tx+4I0X6AHL7ZzCBxH0BzoMjhngzUqevUXlteohtWbHv5rvWgq3jgzjeZKpGOvnXOp8Q Dk7A==
X-Gm-Message-State: AODbwcCmKboehUgf/25i7DIrmTEUoms7lY4ycQrWjmWswndkgMfqAkBh 2RlSfGzpPnIwSQWG
X-Received: by 10.98.98.66 with SMTP id w63mr3459029pfb.44.1494381068517; Tue, 09 May 2017 18:51:08 -0700 (PDT)
Received: from [130.216.38.30] (sc-cs-567-laptop.uoa.auckland.ac.nz. [130.216.38.30]) by smtp.gmail.com with ESMTPSA id a21sm2029827pfc.60.2017.05.09.18.51.05 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 09 May 2017 18:51:07 -0700 (PDT)
To: Martin Thomson <martin.thomson@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com> <CABkgnnV1pPnGRBb+SNYJGiZ9EfL_6JPaPor45_SmUiBQ-u=deQ@mail.gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <caa19b66-9001-b35d-7e49-6b57d71cc8a5@gmail.com>
Date: Wed, 10 May 2017 13:51:08 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CABkgnnV1pPnGRBb+SNYJGiZ9EfL_6JPaPor45_SmUiBQ-u=deQ@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/THrhV-vFjPRaR6JNl99EHYRpdwY>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 May 2017 01:51:11 -0000

Just one point while working on the text:

On 03/05/2017 14:32, Martin Thomson wrote:
...
> On 3 May 2017 at 11:58, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>> I must say I hadn't thought of RTT as an issue, because we tend to assume
>> that the timescale for an autonomic action will be far greater than
>> an RTT, so timeouts will be milliseconds to seconds, and RTTs within
>> the autonomic domain will be sub-millisecond in many cases.
> 
> Ahh, I always assume that machines work faster than the network, so
> the opposite really..
> 
>> Are you suggesting we should be able to reduce the timeout as well?
> 
> Can't it already do that?  I mean, it can't account for any time
> already spent waiting, but it could include the value 0, which means
> don't wait any more when you receive this (a nonsensical thing here,
> but it demonstrates that a reduction is possible).

Actually it's redundant. If the peer replies with another Negotiation
message we keep going; if it replies with a Negotiation End message
we're done anyway. So there's never anything to gain by shortening
the timeout that I can see.

    Brian


From nobody Tue May  9 19:29:28 2017
Return-Path: <martin.thomson@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6409512EBC2; Tue,  9 May 2017 19:29:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z1iCLdSb4j9Y; Tue,  9 May 2017 19:29:19 -0700 (PDT)
Received: from mail-lf0-x235.google.com (mail-lf0-x235.google.com [IPv6:2a00:1450:4010:c07::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB07512EBB6; Tue,  9 May 2017 19:29:18 -0700 (PDT)
Received: by mail-lf0-x235.google.com with SMTP id 99so12047710lfu.1; Tue, 09 May 2017 19:29:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=A2OwnAYpiTZtXY9GTlJVIQOx/hRrkMVPHJt2jVdb2o0=; b=NbAXNjHr0+4CyYKWd4mxq0zSrrqqJHvi7vnCf+xrjk8+tNqLDYST1HT2urxXKvwZZZ 7MB63Sd7RfmHgW/g1U4rSN+EBTZmS9Kglbpi1+PURpOWl5kuhlMS1ymiunSjDsBQyV5N DW2KN1cR37Nf6ER4L609TIp7rllobBpkQtCBXbmq2eOep6VCd8LdY9WNazXgMohXrtc/ C+PiqKLW1dWjtuMmdRnHZSTzyS/pXyWUdqjBjdtTfi8CCWhwizb6qk7wmDA9CDmW6bcb 94CCe53aRB2t1822LrzUT8tU7jnw9XRVbJ671wPUf0B846/bkmQ8VkR6JSMBNrk61b1T dxjg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=A2OwnAYpiTZtXY9GTlJVIQOx/hRrkMVPHJt2jVdb2o0=; b=LmhEloEbUQXOYq67Q5lcTsBz6THpl0QVF2jtaEjp56bjcfz2RTf0vU2sURstwAr//A wCFD46A+FBTLt0qwyTCosilVMCHrxNwp582HxD4mX3qHmZKPS7rhX30COD4xfqvC0EdZ 4LUGWvX08J/dXgQkSUuVoFyau/iPqulGtkryyXDIYnBjDcY45396YVsfqHvsHrpMvAVj Ic2iR7SLgT2Lt4JUcQsl7xAkQNMQsfyZ2GOBbkLeFZ1HQgGVuwtbFLwRTkfX/ugfXKOk vhvnR33HfBe51sav9NG2tje2KCrGv0niDf0DpXBP7k3N40rKTHsJJ7tm/tnRnAg1vDNT kW2Q==
X-Gm-Message-State: AODbwcChUWgLNTj0m7qoERN3YMaPnIes9a/CX4gfdVbho/czjJbdHkV1 cm8ET0zGh+/RISB4GA/mr0QfBPHsqQ==
X-Received: by 10.25.33.138 with SMTP id h132mr1716101lfh.43.1494383356983; Tue, 09 May 2017 19:29:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.46.83.2 with HTTP; Tue, 9 May 2017 19:29:16 -0700 (PDT)
In-Reply-To: <caa19b66-9001-b35d-7e49-6b57d71cc8a5@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com> <CABkgnnV1pPnGRBb+SNYJGiZ9EfL_6JPaPor45_SmUiBQ-u=deQ@mail.gmail.com> <caa19b66-9001-b35d-7e49-6b57d71cc8a5@gmail.com>
From: Martin Thomson <martin.thomson@gmail.com>
Date: Wed, 10 May 2017 12:29:16 +1000
Message-ID: <CABkgnnUMwerh6Cih2D4WRLXsfZn5GGKXwGt-_FteQeohvPUM5Q@mail.gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/hXE0Cia7oKtKD_jWn6rhRv-EW4c>
Subject: Re: [art] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 May 2017 02:29:20 -0000

On 10 May 2017 at 11:51, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> Actually it's redundant. If the peer replies with another Negotiation
> message we keep going; if it replies with a Negotiation End message
> we're done anyway. So there's never anything to gain by shortening
> the timeout that I can see.


WFM


From nobody Tue May  9 19:47:31 2017
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F3B812EBCC; Tue,  9 May 2017 19:47:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.599
X-Spam-Level: 
X-Spam-Status: No, score=-0.599 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id delpb06y3jxC; Tue,  9 May 2017 19:47:21 -0700 (PDT)
Received: from mail-pg0-x243.google.com (mail-pg0-x243.google.com [IPv6:2607:f8b0:400e:c05::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE2BD128B8D; Tue,  9 May 2017 19:47:21 -0700 (PDT)
Received: by mail-pg0-x243.google.com with SMTP id u187so2230800pgb.1; Tue, 09 May 2017 19:47:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=uZnL7gXVz/zUMyUNVWxYgFtmTg9EJutaLo28WSBsTZ8=; b=LC3tL9I6HIdQ0F9peoligrE9vBI1XLBMYOZg89vMkbQv2jLFDyvW6IFRJU+j0kBjIJ UKsoZNMiysuMrIQU/gdyJ8rSJJTfnsu879fGi3wmd188EEl8eLp2XLTHz3+QqMm5DN1p 2wk6xVxx0zmUcbCvQSsl/G4boT4pMgstx6PZ+kUrJGRrYttRflUCqwnaIsvNfzocdPPO NA3LnkkXpdV1zWCF6u5DSnfBBDmwqTy3k2n6kbEdETo5KjlX9wtByBSgS6YXSlJA/q+t smg3xlg7gpirXlzq9icfDEo3p84dNy+PSt4pUtT7oUMf9o0FF8iJbhOkqq+6vlTowVBs NC/w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=uZnL7gXVz/zUMyUNVWxYgFtmTg9EJutaLo28WSBsTZ8=; b=nrKPIOLTumoysK2zCj4/beTiWEEE/Hw3ykrRQaO+L8wECONmps3T+MfcR49ZFobc6h vgYQlKg/T9ccLVw2zOEIPM3dTVlInB0XdB+DKp5HBPL/2qv/hrWX7xKVW+KuZldYiXnC ISfgY2xU46DOYCYro8YNVXegMdJuAuioCqNZYEXDQ/an85SOj5KdAkE9DaMBFO+eN3X2 tkL4seaynYHgNOPB8uLS6bcyJ5HRKguO5TJa9H3pqNVP8UWruvUTwxOAzZJOEi9KUhEw 0ux4PDElLT9CEAnxB8tfR02/s2YDsTNMCaFdVuZPQmEmDNiEd5oc0CEcxNcPYnAm1Kdw 2ILw==
X-Gm-Message-State: AODbwcBXuRAC3tYpzsSfTyQShiRTJlKhIrSoz0clW/Nsh1WlJ8sC3Asj Xe/H808PwhYfTg==
X-Received: by 10.84.174.67 with SMTP id q61mr4809983plb.97.1494384441416; Tue, 09 May 2017 19:47:21 -0700 (PDT)
Received: from [130.216.38.30] (sc-cs-567-laptop.uoa.auckland.ac.nz. [130.216.38.30]) by smtp.gmail.com with ESMTPSA id m125sm2233268pfc.3.2017.05.09.19.47.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 09 May 2017 19:47:20 -0700 (PDT)
To: Martin Thomson <martin.thomson@gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <ac083342-5cb4-d01b-4168-18e29f6c2b5b@gmail.com>
Date: Wed, 10 May 2017 14:47:20 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <b2f02758-49bd-5048-6b1c-3c81e4fde504@gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/sMoZCGpENCbh6mgU8syHketoQvw>
Subject: [art] Security references [Re: Artart telechat review of draft-ietf-anima-grasp-11]
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 May 2017 02:47:23 -0000

On 03/05/2017 13:58, Brian E Carpenter wrote:
> On 03/05/2017 12:47, Martin Thomson wrote:
...
>>> The main references for external security are
>>> https://tools.ietf.org/html/draft-ietf-anima-bootstrapping-keyinfra
>>> https://tools.ietf.org/html/draft-ietf-anima-autonomic-control-plane
>>> which are indeed normative dependencies.
>>
>> Both are informative.
> 
> Oh. Well, technically you don't need to know how they work in order
> to implement GRASP. I'll do whatever the community wants, of course.

The reason that these two references are currently Informative
in GRASP is that a person coding the protocol has no need to 
understand their details. (She will need to understand the ACP's
API, but that is not described in the ACP draft.) Therefore,
technically, although using the ACP is a SHOULD requirement in
GRASP, my understanding of the rules is that it is not a
normative reference.

The downside is that if we get into the RFC Editor queue, GRASP
could in theory be published before the ACP becomes an RFC.
That seems wrong.

Opinions, please!

    Brian


From nobody Tue May  9 21:31:30 2017
Return-Path: <cabo@tzi.org>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 332DD12EAB2; Tue,  9 May 2017 21:31:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.799
X-Spam-Level: 
X-Spam-Status: No, score=-2.799 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mE7caBuZxXjE; Tue,  9 May 2017 21:31:12 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9204A1205F1; Tue,  9 May 2017 21:31:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id v4A4V8ZY025040; Wed, 10 May 2017 06:31:09 +0200 (CEST)
Received: from [192.168.217.124] (p5DC7F3A7.dip0.t-ipconnect.de [93.199.243.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3wN3G45Wt8zDHmm; Wed, 10 May 2017 06:31:08 +0200 (CEST)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <767F913A-586B-42A2-B021-F9AC5C478702@mnot.net>
Date: Wed, 10 May 2017 06:31:07 +0200
Cc: art@ietf.org, draft-ietf-core-coap-tcp-tls.all@ietf.org, ietf@ietf.org, core@ietf.org
X-Mao-Original-Outgoing-Id: 516083467.066919-e7cf67f9e5bffe784973075c0e683012
Content-Transfer-Encoding: quoted-printable
Message-Id: <2D57FF92-3A56-43BC-A815-27801E31F770@tzi.org>
References: <149179722452.3118.982908107963516290@ietfa.amsl.com> <5E5238DC-B835-4BDF-B50D-8D594A46C4D4@tzi.org> <767F913A-586B-42A2-B021-F9AC5C478702@mnot.net>
To: Mark Nottingham <mnot@mnot.net>
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/sxkqie-vBCU5b63hjTs9CpYcWno>
Subject: Re: [art] Artart last call review of draft-ietf-core-coap-tcp-tls-07
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 May 2017 04:31:15 -0000

> On May 9, 2017, at 23:30, Mark Nottingham <mnot@mnot.net> wrote:
>=20
> To close this loop -- the change in -08 isn't sufficiently prominent =
IME; while the general nature of the change is listed in the Abstract, =
the actual normative text is very hard to find.

Certainly, let=E2=80=99s see what the IESG decides here.

> Given that this is a pretty fundamental change in the operation of a =
URI scheme, I'd think it at least deserves its own section, if not a =
separate document.

I don=E2=80=99t agree that this is such a fundamental change here =E2=80=94=
 the /.well-known name space in the URI already was special (by the fact =
that ws URIs are mapped to http URIs, which do have /.well-known =
reserved already).

But that doesn=E2=80=99t matter, we should find the best editorial way =
to document making the well-known URI concept available to WebSocket =
URIs.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Wed May 10 12:25:55 2017
Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50E8312EA94; Wed, 10 May 2017 12:25:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pXrFP9Es7qJE; Wed, 10 May 2017 12:25:25 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C49512EAB2; Wed, 10 May 2017 12:25:22 -0700 (PDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 2A5CBE19D; Wed, 10 May 2017 15:51:41 -0400 (EDT)
Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id E90DF636E0; Wed, 10 May 2017 15:25:20 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Martin Thomson <martin.thomson@gmail.com>
cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
In-Reply-To: <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com>
X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.5.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature"
Date: Wed, 10 May 2017 15:25:20 -0400
Message-ID: <15394.1494444320@obiwan.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/1dfpqlolAJySnlmisYhrgUu_Za8>
Subject: Re: [art] [Anima] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 May 2017 19:25:30 -0000

--=-=-=
Content-Type: text/plain


Martin Thomson <martin.thomson@gmail.com> wrote:
    > I remain deeply concerned about the security parts.  At a minimum, the
    > protocol needs a clear definition of how authentication and
    > confidentiality mechanisms are used, even if the process by which keys
    > and so forth are established is left to other work.  In part, that's
    > easy, all the unicast stuff can use TLS and you can wave your hands
    > about how trust anchors get around.  However, given that this

I've argued strongly against doing this.
"Use TLS" with hand-waving is akin to rfc5406 "Use IPsec": it gets us nowhere.

We are doing quite a lot of work to get trust anchors in the right place
(BRSKI), to describe how to bring up IP (or maybe GRE) over IPsec in the ACP
document.

GRASP does not stand alone.


    > traverses the Internet, I am going to suggest that not having
    > confidentiality for the general discovery case is unwise and not
    > having authentication for the same seems like a real deal-breaker.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-




--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlkTaSAACgkQgItw+93Q
3WV2EQgAtL362CzHrm5sCS45bdMWW7C9yBRf9NAvj+Nnclc0ypBaL7mar22q0yWV
qt4G+0J2pCnvmyId34YbB6sCONitHlFi1lUHOzE9M15vYWcQIiJ9tuJg0NfYvFhZ
Kn2vUL9VutD/kKlOphnhY5uxzc+ZBPvXGhFRPwWNXxJjwhGBOa058JA2PPz//YOr
dQYC/1SiBIvRtmN52jRcWxh6fjp+9V9TkEm0UGY7On0kjcFEe/EHBPW1sC0HzIgK
dZJeg9OhntSdvUOKC+KjUkLVAS3cozG8PBgdi/iIsLJxve0rcxi4jZS9qMbf8sxZ
N+HZUgzJOgxoxdQy0lMybZTcrLpX0g==
=5AsS
-----END PGP SIGNATURE-----
--=-=-=--


From nobody Wed May 10 14:18:36 2017
Return-Path: <martin.thomson@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD18A128959; Wed, 10 May 2017 14:18:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yvDDXy-tB8F4; Wed, 10 May 2017 14:18:29 -0700 (PDT)
Received: from mail-wr0-x22f.google.com (mail-wr0-x22f.google.com [IPv6:2a00:1450:400c:c0c::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DD52128616; Wed, 10 May 2017 14:18:29 -0700 (PDT)
Received: by mail-wr0-x22f.google.com with SMTP id l50so6120412wrc.3; Wed, 10 May 2017 14:18:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=P1jhZQrSkMsNcfFNPlxPCUf7QL8eRmWIlAUTCdVWfec=; b=Y2gYhAcqahwGJAne5e+jH3awZ64/Atehk7qGOGCCFPEGswAWD5Rtet9uuhhrZ9Na0K tmp9Rhb+hGqnNm7hpHyDxYDxZmbYDiH6Ov1Hwj4Xq8ZRClXvxjPwjwHme3kRTsJPukH9 X7Vde9nW9joirwnIERIHhOHArCahOYMWr4noWZKEIbhaci05yYw915LBPWnBFz9kzsUm laq7/ds3lteEU6N4iLMvzFTIU9CptJVrL0pe55nFW0dxZ6te8potN/NB0jvl5ourUitj JxAYaf7lr/PGoBBqeZzEur/2yDyRyvOImBvMncjR4X26n22cywIvzli7px1f/ZRmItxB FoUw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=P1jhZQrSkMsNcfFNPlxPCUf7QL8eRmWIlAUTCdVWfec=; b=JiCIgTPUdWFZSFJS+YNDNPuI4r7f+M30Bg9DioxKzW+DVjLQKT44k57RyH9nDt8XW7 9nepMYt4UH6UfneK+d9+Aw4dK1hhC/q1HP74aYFY94jTDKEeCbGIK9x61y/YFIej35ln eRtrgc+ft5xgDWSap1HyzNm+zwmHbS7zHah4e0lJsE/TvY7cEDnDSg3539G8JfPnT8mS KjPSzOyd69wczOuyP1N48ZZbl0aB3Fywjw7h8vgp0w0597WUeAEK5giTtmT0yDO5rnGz tIsdQ3EDEh3Plt1TGHEZXA07XCJZYmUnV7qDldRXS6fEAkCRUp+X4VNcBxGc2SxWunFA 8UwQ==
X-Gm-Message-State: AODbwcC/AmEiFGB7u8LF9Od1ePvzJiXQxOuue7BQWHGK7WD10eukBu+l kRmzonb4P7MWV6gapidRqZv/rtHbOQ==
X-Received: by 10.46.0.23 with SMTP id 23mr3572783lja.33.1494451107941; Wed, 10 May 2017 14:18:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.46.83.2 with HTTP; Wed, 10 May 2017 14:18:27 -0700 (PDT)
In-Reply-To: <15394.1494444320@obiwan.sandelman.ca>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <15394.1494444320@obiwan.sandelman.ca>
From: Martin Thomson <martin.thomson@gmail.com>
Date: Thu, 11 May 2017 07:18:27 +1000
Message-ID: <CABkgnnX40GQjbXafEMNuhQdt+BSDnW6ESAdHZJuHHv8RU-pJ-A@mail.gmail.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, ART Area <art@ietf.org>,  draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/ahl4DS_TWF8SA3dxtmX7FkdzLmI>
Subject: Re: [art] [Anima] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 May 2017 21:18:31 -0000

On 11 May 2017 at 05:25, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> GRASP does not stand alone.


I have to assess the document on its own merits.  As already
established, there are no normative dependencies on any sort of key
management.

That this work has been done suggests that perhaps a small change to
the structure of this and other documents could be made to rectify the
problem.


From nobody Wed May 10 17:47:13 2017
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3699C12EAB6; Wed, 10 May 2017 17:47:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sEJqPAMxbJCK; Wed, 10 May 2017 17:47:01 -0700 (PDT)
Received: from mail-pg0-x242.google.com (mail-pg0-x242.google.com [IPv6:2607:f8b0:400e:c05::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91FC912EAB0; Wed, 10 May 2017 17:47:01 -0700 (PDT)
Received: by mail-pg0-x242.google.com with SMTP id s62so1409224pgc.0; Wed, 10 May 2017 17:47:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=4Rsh+f4WzQY0r4g+C66q5we73/FPu86GmHvqL7NKowk=; b=GKSp8KE7PFHQH8QcPnrZCnbbVuPyUV9fZe+LMKNmbWFOMPvLJo1ZzFjqO2PJYXj4AV lrTigdphBGbU+B0gfNb1+6uvBEVGwO0kznQlJmJcOu5nu2UQMBw/eYcwFlSPBcwM9CAr GzpQk1J5V9+tUfsIzXHUIul6ReN19xBI0UjdXpttflp2/6ZRGradWm9DMi4Gj5HbuygO M+UW/+bWMAQd1OlqJtuuGArWL+7mqX5SEYF8rMXkNW0NLXx5UprNxZVEVKM5zHEv/PSF W/Dmn/+i0xb76ygaesovpCqsAL4uASWxcFh2DKVHtz/VW260UFy94GAR6di/1VVW/+ax Wj5A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=4Rsh+f4WzQY0r4g+C66q5we73/FPu86GmHvqL7NKowk=; b=ivpgGt5YpkknxWDQt/JzKCHUc03LGqc1xkptgNt2WhTdV0Y1dOw/Xk23ss68YGmXpb LkV2u7XroFUpGCv2J/PNdQudj/4rcHHP/L5d9pFCLX94LLBWIhvcBupZgNw+4gaFNbHG fqQPyNcAqKOeSZkNWZKLD+dOuzIWbUQA5r1nDvDfQCN9ztEph+R2znrmBK6eYYKGBX4K biCEFIaRGbn+skETFVmIqTYbHNu7oZpB8Qzo1+BCfytXjwKYF5KeWfDxwMi8iOACkHti TT0vaWz/Bf1/sP6nPZaR2mjkP1a9kQfYNw9rQbGkCLMuGaXVaZ2kCC7NZ0+SzyjQBSfN IUZA==
X-Gm-Message-State: AODbwcA5ronxyvxM4z6Vx3m60lOiB5+3iJvbVDTcdz0kSCtmFydftveG 1oRpxvailcqOVg==
X-Received: by 10.99.61.134 with SMTP id k128mr9241870pga.201.1494463621114; Wed, 10 May 2017 17:47:01 -0700 (PDT)
Received: from [192.168.178.21] (173.230.69.111.dynamic.snap.net.nz. [111.69.230.173]) by smtp.gmail.com with ESMTPSA id s187sm140000pfs.54.2017.05.10.17.46.58 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 10 May 2017 17:47:00 -0700 (PDT)
To: Martin Thomson <martin.thomson@gmail.com>, Michael Richardson <mcr+ietf@sandelman.ca>
References: <149369279041.9906.5712707340786253297@ietfa.amsl.com> <a2180f7a-da9c-ae85-293d-eb01a6e0c49a@gmail.com> <CABkgnnU=xxFMHP3zECUUnf-6b4P-n6-HKLnKHuu5qQ6z8SdUVA@mail.gmail.com> <15394.1494444320@obiwan.sandelman.ca> <CABkgnnX40GQjbXafEMNuhQdt+BSDnW6ESAdHZJuHHv8RU-pJ-A@mail.gmail.com>
Cc: ART Area <art@ietf.org>, draft-ietf-anima-grasp.all@ietf.org, anima@ietf.org
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <862226cd-2092-e3bd-2329-48f0ae3e4071@gmail.com>
Date: Thu, 11 May 2017 12:47:05 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <CABkgnnX40GQjbXafEMNuhQdt+BSDnW6ESAdHZJuHHv8RU-pJ-A@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/AsRvuN5v1mv7_yNUAnezWQQS5hM>
Subject: Re: [art] [Anima] Artart telechat review of draft-ietf-anima-grasp-11
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 May 2017 00:47:03 -0000

On 11/05/2017 09:18, Martin Thomson wrote:
> On 11 May 2017 at 05:25, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
>> GRASP does not stand alone.
> 
> 
> I have to assess the document on its own merits.  As already
> established, there are no normative dependencies on any sort of key
> management.
> 
> That this work has been done suggests that perhaps a small change to
> the structure of this and other documents could be made to rectify the
> problem.

The ACP will now be a normative reference for GRASP. It's the ACP whose
trust model depends on the security bootstrap, which will therefore need
to be a normative reference for the ACP.

How trust is established when there is no ACP is explicitly out of scope,
see section 3.5.2.1.

    Brian


From nobody Fri May 12 13:37:33 2017
Return-Path: <linuxwolf+ietf@outer-planes.net>
X-Original-To: art@ietf.org
Delivered-To: art@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5ED3A131445; Fri, 12 May 2017 13:37:31 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Matthew Miller <linuxwolf+ietf@outer-planes.net>
To: <art@ietf.org>
Cc: ietf@ietf.org, draft-ietf-nfsv4-versioning.all@ietf.org, nfsv4@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.50.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <149462145126.13443.7366912235626631179@ietfa.amsl.com>
Date: Fri, 12 May 2017 13:37:31 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/9porRxEUiZi9Y-pug0Ekyv3dnhE>
Subject: [art] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 May 2017 20:37:31 -0000

Reviewer: Matthew Miller
Review result: Ready with Issues

Document: draft-ietf-nfsv4-versioning-09
IETF LC End Date: 2017-05-12
IESG Telechat date: 2017-05-25

This document provides guidance for dealing with extensions
and versioning in NFSv4, including how and when to update
minor versions.

This document is mostly ready.  Some of the grammatical choices
make for a more difficult read; the most obvious ones to me are
nits below.

Major issues:

NONE

Minor issues:

NONE

Nits/editorial comments:

* For the bullet points in this document, some end in periods and
some don't.  I recommend the authors choose one and update
accordingly.

* In section 1. "Introduction", the last sentence is very clumsy.
The Gen-ART review already points this out, and provides what I think
is a good suggested change.

* In section 4.4.2 "Establishing Interoperability", the phrase
"client
would uses" should be "client uses"

* In section 5.2 "Behavioral Changes", the following sentence is
difficult parse:

   """
   One class of behavioral change involves changes in the set of
errors
   to be returned in the event of various errors.
   """

I think the following has the same meaning:

   """
   One class of behavior change involves changes in the set of errors
   to be returned when various failure conditions occur.
   """

That's not tremendously better, but I think it's a little easier to
wrap one's mind around.

* In the title for Section 9.3 "XDR Corrections to REQUIRED
features",
"Features" should be capitalized.

* In Section 9.3 "XDR Corrections to REQUIRED features", the word
"correct" should be "corrected" in the sentence "Such clients would
only
be capable of interoperating with servers that supported the correct
version."



From nobody Fri May 12 14:17:05 2017
Return-Path: <pmcmanus@mozilla.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B7291314BB; Fri, 12 May 2017 14:17:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.734
X-Spam-Level: 
X-Spam-Status: No, score=-0.734 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_SORBS_SPAM=0.5, SPF_HELO_PASS=-0.001, SPF_SOFTFAIL=0.665, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hLr7m4rT1McK; Fri, 12 May 2017 14:17:01 -0700 (PDT)
Received: from linode64.ducksong.com (linode6only.ducksong.com [IPv6:2600:3c02::f03c:91ff:fe6e:e8da]) by ietfa.amsl.com (Postfix) with ESMTP id 0C359126DED; Fri, 12 May 2017 14:12:55 -0700 (PDT)
Received: from mail-qt0-f177.google.com (mail-qt0-f177.google.com [209.85.216.177]) by linode64.ducksong.com (Postfix) with ESMTPSA id 5AC0F3A0A2; Fri, 12 May 2017 17:12:53 -0400 (EDT)
Received: by mail-qt0-f177.google.com with SMTP id f55so9305115qta.3; Fri, 12 May 2017 14:12:53 -0700 (PDT)
X-Gm-Message-State: AODbwcBBxmndEuK8IDt6M4QYOtlV+mMbdjmctDRyNMnps/ZG8lbs8KYR kM+Atot/8MDE8wfBgeFzJbgFqLBcXA==
X-Received: by 10.200.40.193 with SMTP id j1mr6158200qtj.186.1494623573075; Fri, 12 May 2017 14:12:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.12.178.74 with HTTP; Fri, 12 May 2017 14:12:52 -0700 (PDT)
In-Reply-To: <2D57FF92-3A56-43BC-A815-27801E31F770@tzi.org>
References: <149179722452.3118.982908107963516290@ietfa.amsl.com> <5E5238DC-B835-4BDF-B50D-8D594A46C4D4@tzi.org> <767F913A-586B-42A2-B021-F9AC5C478702@mnot.net> <2D57FF92-3A56-43BC-A815-27801E31F770@tzi.org>
From: Patrick McManus <pmcmanus@mozilla.com>
Date: Fri, 12 May 2017 17:12:52 -0400
X-Gmail-Original-Message-ID: <CAOdDvNppxEj4NoTcE5_LvcnK80zxRdFjgwepCdNs0N2E+-00HQ@mail.gmail.com>
Message-ID: <CAOdDvNppxEj4NoTcE5_LvcnK80zxRdFjgwepCdNs0N2E+-00HQ@mail.gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Cc: Mark Nottingham <mnot@mnot.net>, art@ietf.org, draft-ietf-core-coap-tcp-tls.all@ietf.org,  IETF Discussion Mailing List <ietf@ietf.org>, core@ietf.org
Content-Type: multipart/alternative; boundary="001a11406bf6257010054f5a2b50"
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/rVt6KPKv_Y4sTsfcIH-I8a7adlk>
Subject: Re: [art] Artart last call review of draft-ietf-core-coap-tcp-tls-07
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 May 2017 21:17:04 -0000

--001a11406bf6257010054f5a2b50
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I have a few thoughts on this draft too.

6455-Websockets was a point in time solution for a problem that was solved
later and better by HTTP/2 (RFC 7540) with the introduction of parallelism,
multiplexing, and non 1:1 bi-directional message capabilities (which 6455
only solves 1/3 of).. 6455 is now considered historical and legacy cruft by
many. I don't know of anyone that would think that if 6455 did not exist it
should be introduced into today's ecosystem. (we would still want a
dev-facing interface doing some of the same things as websockets at a js
layer, but it would not be implemented on the wire 6455 style.)

If the motivation of the websockets-coap binding is to deal with
bi-directional problems better than HTTP/1, the answer to me seems to be to
use HTTP/2 (and maybe an extension of the existing http mapping) rather
than building a parallel system of gateways, proxies, and tunnels on top of
6455. It is unfortunate enough (perhaps unavoidable?) that we have a
parallel stack of constrained protocols without building a gatewaying
system between them rooted in legacy baggage.

The draft as much as acknowledges this with some not totally convincing
handwaving (that is not meant pejoratively - I've been known to hand wave
:))

Although HTTP/2 could also potentially address these requirements,
there would be
   additional costs and delays introduced by such a transition.
   Currently, there are also fewer HTTP/2 implementations available for
   constrained devices in comparison to CoAP.

The aspects of the proposed solution that would seem to pose the largest
challenges for constrained devices, (tcp and tls) are also present in
wss:// as well - which begs the question of whether this is designing a
nominally constrained-device ecosystem actually for
not-so-badly-constrained gateways and they should be using our primary
security, application, and transport standards directly. This parallel
stack has to end somewhere, right?

also, if you stay within the semantics of http, but require 7540 or its
successors for reasons of performance, you will pick up quic for free when
we get there - which is just a specific instance of the general argument
with forking standards.

lastly I think the security considerations (both in that section and
elsewhere) could use some work.

The purpose of websockets-6455 is to deploy a mechanism, consistent with
the web security model, for non-privileged javascript to be able to
communicate using communication patterns that do not fit into the HTTP/1
request/reply pattern well. To be consistent with that security model a
websockets end point needs to opt into doing websockets, potentially doing
a particular sub-protocol, and be expecting this request to have been
triggered by a particular Origin.

The net effect is to prohibit random javascript from the web from spraying
around arbitrary TCP streams behind every user agent's firewall, or
otherwise generating arbitrary botnets (beyond what is allowed by SOP
anyhow).

The coap-tcp-tls-websockets forward-proxy model builds an arbitrary gateway
from websockets to coap based on proxy-uri and would seem to run afoul of
the security model by spraying arbitrary coap around instead of arbitrary
tcp :).. Reverse proxy models, being locked down to particular origins,
work better.

(and as a final nit the websocket handshake examples do not have an Origin
request header as required by 6455 for browsers, and I think browsers are
in scope of this document - but thinking and talking about Origin is a key
part of when websockets is and is not appropriate.).

-Patrick



On Wed, May 10, 2017 at 12:31 AM, Carsten Bormann <cabo@tzi.org> wrote:

>
> > On May 9, 2017, at 23:30, Mark Nottingham <mnot@mnot.net> wrote:
> >
> > To close this loop -- the change in -08 isn't sufficiently prominent
> IME; while the general nature of the change is listed in the Abstract, th=
e
> actual normative text is very hard to find.
>
> Certainly, let=E2=80=99s see what the IESG decides here.
>
> > Given that this is a pretty fundamental change in the operation of a UR=
I
> scheme, I'd think it at least deserves its own section, if not a separate
> document.
>
> I don=E2=80=99t agree that this is such a fundamental change here =E2=80=
=94 the
> /.well-known name space in the URI already was special (by the fact that =
ws
> URIs are mapped to http URIs, which do have /.well-known reserved already=
).
>
> But that doesn=E2=80=99t matter, we should find the best editorial way to=
 document
> making the well-known URI concept available to WebSocket URIs.
>
> Gr=C3=BC=C3=9Fe, Carsten
>
>

--001a11406bf6257010054f5a2b50
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>I have a few thoughts on this draft too.<br></div><di=
v><br></div><div>6455-Websockets was a point in time solution for a problem=
 that was solved later and better by HTTP/2 (RFC 7540) with the introductio=
n of parallelism, multiplexing, and non 1:1 bi-directional message capabili=
ties (which 6455 only solves 1/3 of).. 6455 is now considered historical an=
d legacy cruft by many. I don&#39;t know of anyone that would think that if=
 6455 did not exist it should be introduced into today&#39;s ecosystem. (we=
 would still want a dev-facing interface doing some of the same things as w=
ebsockets at a js layer, but it would not be implemented on the wire 6455 s=
tyle.)<br></div><div><br></div><div>If the motivation of the websockets-coa=
p binding is to deal with bi-directional problems better than HTTP/1, the a=
nswer to me seems to be to use HTTP/2 (and maybe an extension of the existi=
ng http mapping) rather than building a parallel system of gateways, proxie=
s, and tunnels on top of 6455. It is unfortunate enough (perhaps unavoidabl=
e?) that we have a parallel stack of constrained protocols without building=
 a gatewaying system between them rooted in legacy baggage.<br></div><div><=
br></div><div>The draft as much as acknowledges this with some not totally =
convincing handwaving (that is not meant pejoratively - I&#39;ve been known=
 to hand wave :))<br></div><div><pre class=3D"gmail-newpage">Although HTTP/=
2 could also potentially address these requirements, there would be
   additional costs and delays introduced by such a transition.
   Currently, there are also fewer HTTP/2 implementations available for
   constrained devices in comparison to CoAP.</pre></div><div></div><div> T=
he aspects of the proposed solution that would seem to pose the largest cha=
llenges for constrained devices, (tcp and tls) are also present in wss:// a=
s well - which begs the question of whether this is designing a nominally c=
onstrained-device ecosystem actually for not-so-badly-constrained gateways =
and they should be using our primary security, application, and transport s=
tandards directly. This parallel stack has to end somewhere, right?<br></di=
v><div><br></div><div>also, if you stay within the semantics of http, but r=
equire 7540 or its successors for reasons of performance, you will pick up =
quic for free when we get there - which is just a specific instance of the =
general argument with forking standards.</div><div><br></div><div>lastly I =
think the security considerations (both in that section and elsewhere) coul=
d use some work.</div><div><br></div><div><div>The purpose of websockets-64=
55 is to deploy a mechanism, consistent
 with the web security model, for non-privileged javascript to be able=20
to communicate using communication patterns that do not fit into the=20
HTTP/1 request/reply pattern well. To be consistent with that security=20
model a websockets end point needs to opt into doing websockets,=20
potentially doing a particular sub-protocol, and be expecting this=20
request to have been triggered by a particular Origin.</div><div><br></div>=
<div>The
 net effect is to prohibit random javascript from the web from spraying=20
around arbitrary TCP streams behind every user agent&#39;s firewall, or=20
otherwise generating arbitrary botnets (beyond what is allowed by SOP=20
anyhow).<br></div><div><br></div><div>The coap-tcp-tls-websockets=20
forward-proxy model builds an arbitrary gateway from websockets to coap=20
based on proxy-uri and would seem to run afoul of the security model by=20
spraying arbitrary coap around instead of arbitrary tcp :).. Reverse=20
proxy models, being locked down to particular origins, work better.</div><d=
iv><br></div><div>(and as
 a final nit the websocket handshake examples do not have an Origin request=
=20
header as required by 6455 for browsers, and I think browsers are in=20
scope of this document - but thinking and talking about Origin is a key par=
t of when websockets is and is not appropriate.).</div></div><div><br></div=
><div>-Patrick</div><div><br></div><div><br></div></div><div class=3D"gmail=
_extra"><br><div class=3D"gmail_quote">On Wed, May 10, 2017 at 12:31 AM, Ca=
rsten Bormann <span dir=3D"ltr">&lt;<a href=3D"mailto:cabo@tzi.org" target=
=3D"_blank">cabo@tzi.org</a>&gt;</span> wrote:<br><blockquote class=3D"gmai=
l_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left=
:1ex"><span class=3D""><br>
&gt; On May 9, 2017, at 23:30, Mark Nottingham &lt;<a href=3D"mailto:mnot@m=
not.net">mnot@mnot.net</a>&gt; wrote:<br>
&gt;<br>
&gt; To close this loop -- the change in -08 isn&#39;t sufficiently promine=
nt IME; while the general nature of the change is listed in the Abstract, t=
he actual normative text is very hard to find.<br>
<br>
</span>Certainly, let=E2=80=99s see what the IESG decides here.<br>
<span class=3D""><br>
&gt; Given that this is a pretty fundamental change in the operation of a U=
RI scheme, I&#39;d think it at least deserves its own section, if not a sep=
arate document.<br>
<br>
</span>I don=E2=80=99t agree that this is such a fundamental change here =
=E2=80=94 the /.well-known name space in the URI already was special (by th=
e fact that ws URIs are mapped to http URIs, which do have /.well-known res=
erved already).<br>
<br>
But that doesn=E2=80=99t matter, we should find the best editorial way to d=
ocument making the well-known URI concept available to WebSocket URIs.<br>
<br>
Gr=C3=BC=C3=9Fe, Carsten<br>
<br>
</blockquote></div><br></div>

--001a11406bf6257010054f5a2b50--


From nobody Sat May 13 06:28:53 2017
Return-Path: <davenoveck@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56C961270A3; Sat, 13 May 2017 06:28:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DUruH1c0tder; Sat, 13 May 2017 06:28:42 -0700 (PDT)
Received: from mail-it0-x229.google.com (mail-it0-x229.google.com [IPv6:2607:f8b0:4001:c0b::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6E2C126C7A; Sat, 13 May 2017 06:26:46 -0700 (PDT)
Received: by mail-it0-x229.google.com with SMTP id c15so23696914ith.0; Sat, 13 May 2017 06:26:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=YZY8iA6bLd3FmN+jqpzi3k+Xr4N8TsPjinEHKdLnDjM=; b=s6lJ61VNCyaH+k/x0KTiLqTo1ZuWnagQlxqF7LMubJgM2J5nVAFzzLWOvsu5iU7D/u st1rkeFNsdRz4M/mn/AwU/zb4i9pVb3SoqfAYB3HJoKFJRfGjbtXJkqywcjQMtNbTk54 A8mPK6E/JE2yw6VxB7COoVbOaeIgg/eOjftTtgf5whhqDZx4Odj9CofwcGcb1RJ89a0K Q8KhFqBAHF9LNH3wPKPJB/7wHbl81zuwZBZExworvyem7WwrZbtWMnshS7Sq/PcMn4nu S6/wr5E2TRbBeV2yPpBPyyCukGzeSRVfe0MlsVgAHUha8TI8x5uTyrBnGnid1CLbipHE 0hIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=YZY8iA6bLd3FmN+jqpzi3k+Xr4N8TsPjinEHKdLnDjM=; b=eh20JcLPF6zK5XwNTvEKZkCZwAYnuNDDiU9639IoaazkDh2aVIVFkDWmjreN75gCjx ekj246UFNhNDrnMJEsDeIaIN4HOAwSmikj+7BM/PsFLWt90Z9rFuo3fdzORAwcEWwiDO m9SJf+M6HFyl4x+adlIKWjjQ2GFb5gCdhiXbyXklIvugRPhJ0ftwk8o15noXBcAbgatO PLO3DhdFsw0/26n/mriv568caxqOgLDiFPalyL0diRld7llm20jrnSW/Jevgm0YIVih1 JKkqDcUXeWq6s75ndt/Gi5FgaNx0un2cAL1r3toYXid0ItBW1UQnM1Yb6Wzj5KhWNIWy RF+Q==
X-Gm-Message-State: AODbwcCvotIIduCvWOpq7SNwsG+p2sX0FLvCOl+0I6j+zZWYsIm94PKj gYjPU/6YJe8Id8xVza7I4kXYC8xeHg==
X-Received: by 10.36.108.147 with SMTP id w141mr9090415itb.57.1494682006002; Sat, 13 May 2017 06:26:46 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.20.75 with HTTP; Sat, 13 May 2017 06:26:45 -0700 (PDT)
In-Reply-To: <149462145126.13443.7366912235626631179@ietfa.amsl.com>
References: <149462145126.13443.7366912235626631179@ietfa.amsl.com>
From: David Noveck <davenoveck@gmail.com>
Date: Sat, 13 May 2017 09:26:45 -0400
Message-ID: <CADaq8jctpRi95B97LdTb7TZ_4oib0i56ArPym95h8R4eBDwVtg@mail.gmail.com>
To: Matthew Miller <linuxwolf+ietf@outer-planes.net>
Cc: art@ietf.org, ietf@ietf.org, draft-ietf-nfsv4-versioning.all@ietf.org,  "nfsv4@ietf.org" <nfsv4@ietf.org>
Content-Type: multipart/alternative; boundary="001a114417aa052965054f67c626"
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/y1-G692vRVmJz-f76mCuTOPdX74>
Subject: Re: [art] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 May 2017 13:28:44 -0000

--001a114417aa052965054f67c626
Content-Type: text/plain; charset="UTF-8"

Thanks for the review.

> * For the bullet points in this document, some end in periods and
> some don't.  I recommend the authors choose one and update
> accordingly.

Will update those without periods.

> * In section 1. "Introduction", the last sentence is very clumsy.
> The Gen-ART review already points this out, and provides what I think
> is a good suggested change.

It has been updated.

> * In section 4.4.2 "Establishing Interoperability", the phrase
> "client
> would uses" should be "client uses"

Will fix.

> * In section 5.2 "Behavioral Changes", the following sentence is
> difficult parse:

...

> I think the following has the same meaning:
>
>   """
>   One class of behavior change involves changes in the set of errors
>   to be returned when various failure conditions occur.
>   """
>
> That's not tremendously better, but I think it's a little easier to
> wrap one's mind around.

Will change.

> * In the title for Section 9.3 "XDR Corrections to REQUIRED
> features",
> "Features" should be capitalized.

Will fix.

> * In Section 9.3 "XDR Corrections to REQUIRED features", the word
> "correct" should be "corrected" in the sentence "Such clients would
> only
> be capable of interoperating with servers that supported the correct
> version."

Will fix.


On Fri, May 12, 2017 at 4:37 PM, Matthew Miller <
linuxwolf+ietf@outer-planes.net> wrote:

> Reviewer: Matthew Miller
> Review result: Ready with Issues
>
> Document: draft-ietf-nfsv4-versioning-09
> IETF LC End Date: 2017-05-12
> IESG Telechat date: 2017-05-25
>
> This document provides guidance for dealing with extensions
> and versioning in NFSv4, including how and when to update
> minor versions.
>
> This document is mostly ready.  Some of the grammatical choices
> make for a more difficult read; the most obvious ones to me are
> nits below.
>
> Major issues:
>
> NONE
>
> Minor issues:
>
> NONE
>
> Nits/editorial comments:
>
> * For the bullet points in this document, some end in periods and
> some don't.  I recommend the authors choose one and update
> accordingly.
>
> * In section 1. "Introduction", the last sentence is very clumsy.
> The Gen-ART review already points this out, and provides what I think
> is a good suggested change.
>
> * In section 4.4.2 "Establishing Interoperability", the phrase
> "client
> would uses" should be "client uses"
>
> * In section 5.2 "Behavioral Changes", the following sentence is
> difficult parse:
>
>    """
>    One class of behavioral change involves changes in the set of
> errors
>    to be returned in the event of various errors.
>    """
>
> I think the following has the same meaning:
>
>    """
>    One class of behavior change involves changes in the set of errors
>    to be returned when various failure conditions occur.
>    """
>
> That's not tremendously better, but I think it's a little easier to
> wrap one's mind around.
>
> * In the title for Section 9.3 "XDR Corrections to REQUIRED
> features",
> "Features" should be capitalized.
>
> * In Section 9.3 "XDR Corrections to REQUIRED features", the word
> "correct" should be "corrected" in the sentence "Such clients would
> only
> be capable of interoperating with servers that supported the correct
> version."
>
>
>

--001a114417aa052965054f67c626
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thanks for the review.<div><br></div><div><span style=3D"f=
ont-size:16px">&gt; * For the bullet points in this document, some end in p=
eriods and</span><br style=3D"font-size:16px"><span style=3D"font-size:16px=
">&gt; some don&#39;t.=C2=A0 I recommend the authors choose one and update<=
/span><br style=3D"font-size:16px"><span style=3D"font-size:16px">&gt; acco=
rdingly.</span><br></div><div><span style=3D"font-size:16px"><br></span></d=
iv><div><span style=3D"font-size:16px">Will update those without periods.</=
span></div><div><span style=3D"font-size:16px"><br></span></div><div><span =
style=3D"font-size:16px">&gt; * In section 1. &quot;Introduction&quot;, the=
 last sentence is very clumsy.</span></div><span style=3D"font-size:16px">&=
gt; The Gen-ART review already points this out, and provides what I think</=
span><br style=3D"font-size:16px"><span style=3D"font-size:16px">&gt; is a =
good suggested change.</span><div><span style=3D"font-size:16px"><br></span=
></div><div><span style=3D"font-size:16px">It has been updated.</span></div=
><div><span style=3D"font-size:16px"><br></span></div><div><span style=3D"f=
ont-size:16px">&gt; * In section 4.4.2 &quot;Establishing Interoperability&=
quot;, the phrase</span><br style=3D"font-size:16px"><span style=3D"font-si=
ze:16px">&gt; &quot;client</span><br style=3D"font-size:16px"><span style=
=3D"font-size:16px">&gt; would uses&quot; should be &quot;client uses&quot;=
</span><span style=3D"font-size:16px"><br></span></div><div><span style=3D"=
font-size:16px"><br></span></div><div><span style=3D"font-size:16px">Will f=
ix.</span></div><div><span style=3D"font-size:16px"><br></span></div><div><=
span style=3D"font-size:16px">&gt; * In section 5.2 &quot;Behavioral Change=
s&quot;, the following sentence is</span></div><span style=3D"font-size:16p=
x">&gt; difficult parse:</span><div><br style=3D"font-size:16px">...<br sty=
le=3D"font-size:16px"><span style=3D"font-size:16px">=C2=A0 =C2=A0</span><b=
r style=3D"font-size:16px"><span style=3D"font-size:16px">&gt; I think the =
following has the same meaning:</span><br style=3D"font-size:16px">&gt;<br =
style=3D"font-size:16px"><span style=3D"font-size:16px">&gt; =C2=A0 &quot;&=
quot;&quot;</span><br style=3D"font-size:16px"><span style=3D"font-size:16p=
x">&gt; =C2=A0 One class of behavior change involves changes in the set of =
errors</span><br style=3D"font-size:16px"><span style=3D"font-size:16px">&g=
t; =C2=A0 to be returned when various failure conditions occur.</span><br s=
tyle=3D"font-size:16px"><span style=3D"font-size:16px">&gt; =C2=A0 &quot;&q=
uot;&quot;</span><br style=3D"font-size:16px">&gt;<br style=3D"font-size:16=
px"><span style=3D"font-size:16px">&gt; That&#39;s not tremendously better,=
 but I think it&#39;s a little easier to</span><br style=3D"font-size:16px"=
><span style=3D"font-size:16px">&gt; wrap one&#39;s mind around.</span></di=
v><div><br></div><div>Will change.</div><div><br></div><div><span style=3D"=
font-size:16px">&gt; * In the title for Section 9.3 &quot;XDR Corrections t=
o REQUIRED</span><br style=3D"font-size:16px"><span style=3D"font-size:16px=
">&gt; features&quot;,</span><br style=3D"font-size:16px"><span style=3D"fo=
nt-size:16px">&gt; &quot;Features&quot; should be capitalized.</span><br st=
yle=3D"font-size:16px"><br>Will fix.</div><div><br><span style=3D"font-size=
:16px">&gt; * In Section 9.3 &quot;XDR Corrections to REQUIRED features&quo=
t;, the word</span><br style=3D"font-size:16px"><span style=3D"font-size:16=
px">&gt; &quot;correct&quot; should be &quot;corrected&quot; in the sentenc=
e &quot;Such clients would</span><br style=3D"font-size:16px"><span style=
=3D"font-size:16px">&gt; only</span><br style=3D"font-size:16px"><span styl=
e=3D"font-size:16px">&gt; be capable of interoperating with servers that su=
pported the correct</span><br style=3D"font-size:16px"><span style=3D"font-=
size:16px">&gt; version.&quot;</span><br></div><div><span style=3D"font-siz=
e:16px"><br></span></div><div><span style=3D"font-size:16px">Will fix.</spa=
n></div><div><div><div><span style=3D"font-size:16px"><br></span></div></di=
v></div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On =
Fri, May 12, 2017 at 4:37 PM, Matthew Miller <span dir=3D"ltr">&lt;<a href=
=3D"mailto:linuxwolf+ietf@outer-planes.net" target=3D"_blank">linuxwolf+iet=
f@outer-planes.net</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quot=
e" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">=
Reviewer: Matthew Miller<br>
Review result: Ready with Issues<br>
<br>
Document: draft-ietf-nfsv4-versioning-09<br>
IETF LC End Date: 2017-05-12<br>
IESG Telechat date: 2017-05-25<br>
<br>
This document provides guidance for dealing with extensions<br>
and versioning in NFSv4, including how and when to update<br>
minor versions.<br>
<br>
This document is mostly ready.=C2=A0 Some of the grammatical choices<br>
make for a more difficult read; the most obvious ones to me are<br>
nits below.<br>
<br>
Major issues:<br>
<br>
NONE<br>
<br>
Minor issues:<br>
<br>
NONE<br>
<br>
Nits/editorial comments:<br>
<br>
* For the bullet points in this document, some end in periods and<br>
some don&#39;t.=C2=A0 I recommend the authors choose one and update<br>
accordingly.<br>
<br>
* In section 1. &quot;Introduction&quot;, the last sentence is very clumsy.=
<br>
The Gen-ART review already points this out, and provides what I think<br>
is a good suggested change.<br>
<br>
* In section 4.4.2 &quot;Establishing Interoperability&quot;, the phrase<br=
>
&quot;client<br>
would uses&quot; should be &quot;client uses&quot;<br>
<br>
* In section 5.2 &quot;Behavioral Changes&quot;, the following sentence is<=
br>
difficult parse:<br>
<br>
=C2=A0 =C2=A0&quot;&quot;&quot;<br>
=C2=A0 =C2=A0One class of behavioral change involves changes in the set of<=
br>
errors<br>
=C2=A0 =C2=A0to be returned in the event of various errors.<br>
=C2=A0 =C2=A0&quot;&quot;&quot;<br>
<br>
I think the following has the same meaning:<br>
<br>
=C2=A0 =C2=A0&quot;&quot;&quot;<br>
=C2=A0 =C2=A0One class of behavior change involves changes in the set of er=
rors<br>
=C2=A0 =C2=A0to be returned when various failure conditions occur.<br>
=C2=A0 =C2=A0&quot;&quot;&quot;<br>
<br>
That&#39;s not tremendously better, but I think it&#39;s a little easier to=
<br>
wrap one&#39;s mind around.<br>
<br>
* In the title for Section 9.3 &quot;XDR Corrections to REQUIRED<br>
features&quot;,<br>
&quot;Features&quot; should be capitalized.<br>
<br>
* In Section 9.3 &quot;XDR Corrections to REQUIRED features&quot;, the word=
<br>
&quot;correct&quot; should be &quot;corrected&quot; in the sentence &quot;S=
uch clients would<br>
only<br>
be capable of interoperating with servers that supported the correct<br>
version.&quot;<br>
<br>
<br>
</blockquote></div><br></div>

--001a114417aa052965054f67c626--


From nobody Sun May 14 07:24:45 2017
Return-Path: <julian.reschke@gmx.de>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4618812932A; Sun, 14 May 2017 07:24:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.899
X-Spam-Level: 
X-Spam-Status: No, score=-4.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WDFZQ9KGF3LD; Sun, 14 May 2017 07:24:42 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79F961201FA; Sun, 14 May 2017 07:23:57 -0700 (PDT)
Received: from [192.168.178.20] ([93.217.100.51]) by mail.gmx.com (mrgmx001 [212.227.17.190]) with ESMTPSA (Nemesis) id 0M8eAd-1dxDjM0yvL-00wB2G; Sun, 14 May 2017 16:23:55 +0200
To: IETF Discussion <ietf@ietf.org>, art@ietf.org
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de>
Date: Sun, 14 May 2017 16:23:52 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:q1Dk5fbzBRKSa9CB+rFw6/JTwk9Td0BAfmilJFWL9t0cQG4wHhQ M2uOx/6K+uglFCdsSehCJlH/DbScGIQzuJ02GFSDME7GURy7GGFYnTMORio+UoegdupLieJ PWOP5gunn5l0pg7oB7UJnUldjxVcSyjSjFF3R34wZ6j6wy6vdWGoenWVJgaKb3iZTZKe5zv MAjwQUbqlA8j0Pdmyb0Zw==
X-UI-Out-Filterresults: notjunk:1;V01:K0:Mz0PWO78b0g=:0uvJQyjeK6lyx65QF3x9gl BOhjR7pNQOUlJ5lhj7aBHdaTvv8m8sqotLS2hKNrMhjtu8leeBlBxOJzcXnUNdmKByCx7FLsb 6xaXJWukjylIn5fp7H3qaELAaknOKeg1JgmsRHVVxMe5PkNibsOPXtMXkt/rZmBGEoWweQjc4 XgnbDwtcSTTh/52NyPMSBWEmeqcL+5pOKdPCo8zfY9ersQSdgrP/EbnrqwSL8NMAWoPPEgkH3 VN9jsZno4uM5U67OulUWzWmyJEOMuH6Bo5XVGEZEkkcRS3ywwHNdi3pPg19xbzxq2I9UhvnKv et5VkE1V1eEEmLFffJlmIRVOty2BJOuIhke1lW0siHi0POBiu7ByLQ2L/xAtPeoUB/1++P/iJ fWpJy1tJMSqemxgkMF2wDlRh6VDEHEUZzkjNF5Z+qqrSl5V/6Nl2IvXUP3HVisIuZmLrJaLO+ T/vS9303LK9mW9TFMcZW1Pz5ooKJ8QHbrMg5DTCpN7PGi1ByzLgJkvlMabAWqar2JKaL1/PDe pED2HF7hv828e1Wjo1T4G8oTyvSdzrtHsoxFw64J4kxY2MtsUCq+00s3v8xJNi3knirMPC1cb W3022/gsOgLF76bAgm6E8+SjFkCO2yooc0ui97h8mLRTtUAQ2WRXyumYQTnPwUMs2ebNuu+kk 0j0IRjKANIX1QB534edHfk26JrRCsl5KyaZn2/jfDsYonhnh9zOWadduBSxhkkmrbgG4R0a3x QTuSgrFgHFufUOhhuAvBJOs7y1rOqMjjGn/rI91GTSc7v+lJxBG14gngJKGhoQ3+09qQWo6Ow DOy/R2X
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/dz43MoKDOwAKnn1vfN9kXF2DO-A>
Subject: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 14 May 2017 14:24:44 -0000

Reviewer: Julian Reschke
Review result: Not Ready

Document: draft-ietf-calext-caldav-attachments-02
IETF LC End Date: 2017-05-14
IESG Telechat date: 2017-05-25

This document describes attachment handling in CalDAV (WebDAV based 
calendaring).

The mechanism described by this document is essential RPCish, using HTTP 
POST for tunneling. It will work in practice, but it definitively isn't 
state of the art in IETF protocols, in particular in an otherwise 
WebDAV/CalDAV-based ecosystem.

Major issues:

The main issue with this specification is that it

1) models operations on attachments as POST operations, where the actual 
type of operation is specified using a query parameter, instead of using 
the HTTP methods POST, PUT, and DELETE.

2) hardwires specific query strings into the protocol, violating a MUST 
level requirement in BCP 190 (see 
https://tools.ietf.org/html/rfc7320#section-2.4):

    Applications MUST NOT directly specify the syntax of queries, as this
    can cause operational difficulties for deployments that do not
    support a particular form of a query.  For example, a site may wish
    to support an application using "static" files that do not support
    query parameters.

Re 1) this is even called out specifically in Sections 3.8 (update) and 
3.9 (remove), but it's not clear at all why that is the case.

Re 2) Part of the hard-wiring could be avoided by using different HTTP 
methods for the different actions. The other parameters could be made 
discoverable using URIs / URI templates, exposed as WebDAV properties, 
as is the case in RFC 5995.


5.1.  Cal-Managed-ID Response Header Field

This doesn't seem to address the points listed in 
<https://greenbytes.de/tech/webdav/rfc7231.html#considerations.for.new.header.fields> 
(and it wouldn't be needed if the attachment would be modeled as an HTTP 
resource whose values could be reported back in a Location header field 
upon creation).

Minor issues:

3.12.4.  Processing Time

    Clients can expect servers to take a while to respond to POST
    requests that include large attachment bodies.  Servers SHOULD use
    the "102 (Processing)" interim response defined in Section 10.1 of
    [RFC2518] to keep the client connection alive if the POST request
    will take significant time to complete.

While discussing the new code 103 in the HTTP WG, we considered interop 
problems with existing code that doesn't handle 1xx status codes at all, 
or had problems with status codes other than 100. I personally support 
use of new 1xx status codes, but it would be good to hear whether the WG 
considered deployment problems when making this a SHOULD-level requirement.

3.12.5.  Automatic Clean-up by servers

    Servers MAY automatically remove attachment data, for example to
    regain the storage taken by unused attachments, or as the result of a
    virus scanning.  When doing so they SHOULD NOT modify calendar data
    referencing those attachments.  Instead they SHOULD respond with "410
    (Gone)" to any request on the removed attachment URI.

This essentially requires servers to distinguish between resources that 
never have been there, and those which have been there but were removed. 
It's definitively additional work for the server, where it's not clear 
what the benefit for clients is.

6.1.  CALDAV:managed-attachments-server-URL property

This mechanism is really funky. Depending on the presence of this 
property, the authority part of attachment URIs is rewritten or not. 
Depending on its contents, the rewrite is based on yet another default 
or the given value.

It's not clear why all this can't be replaced by a mechanism where 
attachment URIs can be relative references to be resolved against a base 
URI.


Nits/editorial comments:

    In addition, such a server MUST support the "return=representation"
    Prefer header field value [RFC7240] on successful HTTP PUT and POST
    requests targeting existing calendar object resources, by returning
    the new representation of that calendar resource (including its new
    ETag header field value) in the response.

(not specific to this spec, but to the CalDAV ecosystem: the specs rely 
a lot on DAV feature names, but there's no registry - I believe it would 
be good if we added one in a separate spec)

1.  Introduction

    The iCalendar [RFC5545] data format is used to represent calendar
    data and is used with iTIP [RFC5546] to handle scheduling operations
    between calendar users.

    [RFC4791] defines the CalDAV Calendar Access protocol, based on HTTP
    [RFC7230], for accessing calendar data stored on a server.

Maybe also mention RFC 4918 here. RFC 4918 currently isn't referenced at 
all, despite the fact that the specification relies on stuff defined 
over there, such as the "DAV" response header field.



From nobody Mon May 15 07:09:33 2017
Return-Path: <murch@andrew.cmu.edu>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4C01129AEB; Mon, 15 May 2017 07:09:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o1iAHhScTzlE; Mon, 15 May 2017 07:09:20 -0700 (PDT)
Received: from smtp.andrew.cmu.edu (SMTP.ANDREW.CMU.EDU [128.2.105.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54C7912EAB9; Mon, 15 May 2017 07:03:31 -0700 (PDT)
Received: from [192.168.1.22] (cpe-74-77-85-250.buffalo.res.rr.com [74.77.85.250]) (user=murch mech=PLAIN (0 bits)) by smtp.andrew.cmu.edu (8.15.2/8.15.2) with ESMTPSA id v4FE3P6L032523 (version=TLSv1.2 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 15 May 2017 10:03:26 -0400
To: Julian Reschke <julian.reschke@gmx.de>, IETF Discussion <ietf@ietf.org>, art@ietf.org
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de>
From: Ken Murchison <murch@andrew.cmu.edu>
Organization: Carnegie Mellon University
Message-ID: <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu>
Date: Mon, 15 May 2017 10:03:25 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.0
MIME-Version: 1.0
In-Reply-To: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-PMX-Version: 6.3.0.2556906, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2017.5.15.135416
X-SMTP-Spam-Clean: 33% ( SXL_IP_DYNAMIC 3, TO_IN_SUBJECT 0.5, HTML_00_01 0.05, HTML_00_10 0.05, BODY_SIZE_4000_4999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, DATE_TZ_NA 0, FROM_EDU_TLD 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, RDNS_GENERIC_POOLED 0, RDNS_POOLED 0, RDNS_RESIDENTIAL 0, RDNS_SUSP 0, RDNS_SUSP_GENERIC 0, RDNS_SUSP_SPECIFIC 0, REFERENCES 0, URI_WITH_PATH_ONLY 0,  __ANY_URI 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FORWARDED_MSG 0, __HAS_FROM 0, __HAS_MSGID 0, __HTTPS_URI 0, __IN_REP_TO 0, __MIME_TEXT_ONLY 0,  __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_VERSION 0, __MOZILLA_USER_AGENT 0, __MULTIPLE_URI_TEXT 0, __NO_HTML_TAG_RAW 0, __PHISH_SPEAR_STRUCTURE_1 0, __RDNS_POOLED_1 0, __REFERENCES 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __TO_IN_SUBJECT2 0, __TO_MALFORMED_2 0, __TO_NAME 0, __TO_NAME_DIFF_FROM_ACC 0, __TO_REAL_NAMES 0, __URI_IN_BODY 0, __URI_NOT_IMG 0, __URI_NO_MAILTO 0, __URI_NO_WWW 0, __URI_NS , __URI_WITH_PATH 0, __USER_AGENT 0)
X-SMTP-Spam-Score: 33%
X-Scanned-By: MIMEDefang 2.78 on 128.2.105.202
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/v_yfaDlIJjtJFcpY9a9Iw4W1oyM>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 May 2017 14:09:23 -0000

Hi Julian,

Thanks for the review.  Comments inline.


On 05/14/2017 10:23 AM, Julian Reschke wrote:
> Reviewer: Julian Reschke
> Review result: Not Ready
>
> Document: draft-ietf-calext-caldav-attachments-02
> IETF LC End Date: 2017-05-14
> IESG Telechat date: 2017-05-25
>
> This document describes attachment handling in CalDAV (WebDAV based 
> calendaring).
>
> The mechanism described by this document is essential RPCish, using 
> HTTP POST for tunneling. It will work in practice, but it definitively 
> isn't state of the art in IETF protocols, in particular in an 
> otherwise WebDAV/CalDAV-based ecosystem.
>
> Major issues:
>
> The main issue with this specification is that it
>
> 1) models operations on attachments as POST operations, where the 
> actual type of operation is specified using a query parameter, instead 
> of using the HTTP methods POST, PUT, and DELETE.

The resource being acted upon is an actual calendar resource, which is 
already in place.  The attachments are meta-data associated with one or 
more calendar resources, which is why a POST is used on the calendar 
resource to manipulate an attachment.  Can you explain how you would 
envision different HTTP methods be used to add/update/delete an 
attachment associated with a calendar resource?

> 2) hardwires specific query strings into the protocol, violating a 
> MUST level requirement in BCP 190 (see 
> https://tools.ietf.org/html/rfc7320#section-2.4):
>
>    Applications MUST NOT directly specify the syntax of queries, as this
>    can cause operational difficulties for deployments that do not
>    support a particular form of a query.  For example, a site may wish
>    to support an application using "static" files that do not support
>    query parameters.

Which part(s) of the query syntax MUST not be specified?  The entire 
thing?  Just the keywords?  Did RFC 7808 get this wrong, or is URI 
templating ok?


> Re 1) this is even called out specifically in Sections 3.8 (update) 
> and 3.9 (remove), but it's not clear at all why that is the case.
>
> Re 2) Part of the hard-wiring could be avoided by using different HTTP 
> methods for the different actions. The other parameters could be made 
> discoverable using URIs / URI templates, exposed as WebDAV properties, 
> as is the case in RFC 5995.

As above, can you explain how different HTTP methods would be used where 
the target of the add/update/remove operation is an existing calendar 
resource?



> 5.1. Cal-Managed-ID Response Header Field
>
> This doesn't seem to address the points listed in 
> <https://greenbytes.de/tech/webdav/rfc7231.html#considerations.for.new.header.fields> 
> (and it wouldn't be needed if the attachment would be modeled as an 
> HTTP resource whose values could be reported back in a Location header 
> field upon creation).

Can parameters be added to a Location header field (it doesn't appear 
so), or are you suggesting that the managed-id value be encoded in the 
URI-reference value?



>
> Minor issues:
>
> 3.12.4.  Processing Time
>
>    Clients can expect servers to take a while to respond to POST
>    requests that include large attachment bodies.  Servers SHOULD use
>    the "102 (Processing)" interim response defined in Section 10.1 of
>    [RFC2518] to keep the client connection alive if the POST request
>    will take significant time to complete.
>
> While discussing the new code 103 in the HTTP WG, we considered 
> interop problems with existing code that doesn't handle 1xx status 
> codes at all, or had problems with status codes other than 100. I 
> personally support use of new 1xx status codes, but it would be good 
> to hear whether the WG considered deployment problems when making this 
> a SHOULD-level requirement.

Existing implementations of this CalDAV extension all seem to handle 1xx 
status codes.


-- 
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University


From nobody Mon May 15 09:09:48 2017
Return-Path: <julian.reschke@gmx.de>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E41AE12EAC6; Mon, 15 May 2017 09:09:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.4
X-Spam-Level: 
X-Spam-Status: No, score=-5.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2dcfzZW0ltGn; Mon, 15 May 2017 09:09:39 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73EAE12EAC1; Mon, 15 May 2017 09:04:42 -0700 (PDT)
Received: from [192.168.178.20] ([93.217.120.200]) by mail.gmx.com (mrgmx103 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MSdRI-1dblX92eSC-00RbhZ; Mon, 15 May 2017 18:04:31 +0200
To: Ken Murchison <murch@andrew.cmu.edu>, IETF Discussion <ietf@ietf.org>, art@ietf.org
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu>
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de>
Date: Mon, 15 May 2017 18:04:28 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:n/iUtHBhmkiQmU1oJS98CwbDX2IFXcMEh6e8+EZw0cb9BF/Ju11 p/y29Nt+LgQ+IMW/gmKmxmoxv2m2J/7PRv1Nmx8SzYUkShqN1JimVJn1WFcLHssYktmQGGc BweUazeMCw+67lKi+jmTFMZ3SOMqXBVEb7zswu650wCRrBK3V41OJv4hNVNJffWmuOvCFkv BzizMnmh4V8bTqx+LtW3A==
X-UI-Out-Filterresults: notjunk:1;V01:K0:49s4ZXwvPek=:ffhbn/sr94+FoQ7xDhqIpr cgYMLiCv6ldpDaREMpxTOx/HBFWFf3u4GM586eCq30c4m8tnuRlsje0nY+9MiELFhVbIp51H1 WPE2uwMLXcg4mE6oUgA8IpoxKRc4bkYcwOciAagmHPoMqFj/x7kpTBeI2c2viLOj5N3r/eqHc U3k5qkVByBGNZzYZIQ+2k/KTKjv3b5nKzQS9ALY4nM7TAkxk/kpLF2pPecmnT1uU4tRNXfpze r7dEOL/lfyT84phuLh0kWbAlB7lc+Jxo1qnBtZT2S338ej+twpuiP8Em5AYSPzgveogFwoooW vBLbxqfHjvGZ/o55EoP6TSPxenYYWID75qQzOQYUCfTWU6dv6FLozQrMztfkYWYwBmtlVhPuw qVH8RIVJdlMtUkcsa5ok3YQQ5DfgVYWF6vLgCEmdZn2cl3WOr8p8d6GosdpAi3PWJnqAnHS9J EHYC9IKdO2TgyjfL2DlMmCnE4BR+ttf5O/S6UbEtOZvCx27bIOvEbmb4wXAy8Zc4tr65DolrJ rBAObbjkzKKgvwRjnFpNlI9J4WUmGuN+dysA27aI/hU8ET3ytvb2tjsiYrwci3CVG/03Z0yTv CxP4xt+lhRkabMhdEev+uIXCyUSsoc7ulwxYvCKueHpgxYwPrNWxcwXOLW0g66PUCG0I+FSIf j+mCZ37luMK3URH9HLF8p8K+/aPbFZLmK72Tww/YcDBmE988/OK0s+XfMR5c4/iLobmYpLc+3 PjRdtrna3BBuJsu2JlAjPHDPWMjckpp55USlSc0k9EiNU2mecFq+hePij1ML5wgwik0GtTv2N M6V4bJ4
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/48PnA2jQULH89RvNBfcfDORaaVs>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 15 May 2017 16:09:41 -0000

On 2017-05-15 16:03, Ken Murchison wrote:
> Hi Julian,
>
> Thanks for the review.  Comments inline.
>
>
> On 05/14/2017 10:23 AM, Julian Reschke wrote:
>> Reviewer: Julian Reschke
>> Review result: Not Ready
>>
>> Document: draft-ietf-calext-caldav-attachments-02
>> IETF LC End Date: 2017-05-14
>> IESG Telechat date: 2017-05-25
>>
>> This document describes attachment handling in CalDAV (WebDAV based
>> calendaring).
>>
>> The mechanism described by this document is essential RPCish, using
>> HTTP POST for tunneling. It will work in practice, but it definitively
>> isn't state of the art in IETF protocols, in particular in an
>> otherwise WebDAV/CalDAV-based ecosystem.
>>
>> Major issues:
>>
>> The main issue with this specification is that it
>>
>> 1) models operations on attachments as POST operations, where the
>> actual type of operation is specified using a query parameter, instead
>> of using the HTTP methods POST, PUT, and DELETE.
>
> The resource being acted upon is an actual calendar resource, which is
> already in place.  The attachments are meta-data associated with one or

Only for creation of the attachment. Once is has been created, it should 
have its own URI, and the usual HTTP methods should be applicable.

> more calendar resources, which is why a POST is used on the calendar
> resource to manipulate an attachment.  Can you explain how you would
> envision different HTTP methods be used to add/update/delete an
> attachment associated with a calendar resource?

For adding, I would define an HTTP resource that can be posted to. It 
could be discovered through a WebDAV property.

>> 2) hardwires specific query strings into the protocol, violating a
>> MUST level requirement in BCP 190 (see
>> https://tools.ietf.org/html/rfc7320#section-2.4):
>>
>>    Applications MUST NOT directly specify the syntax of queries, as this
>>    can cause operational difficulties for deployments that do not
>>    support a particular form of a query.  For example, a site may wish
>>    to support an application using "static" files that do not support
>>    query parameters.
>
> Which part(s) of the query syntax MUST not be specified?  The entire
> thing?  Just the keywords?  Did RFC 7808 get this wrong, or is URI
> templating ok?

I'm not familiar with 7808. URI templates are superior than hardwiring 
everything for sure. We just shouldn't enforce specific URI templates - 
the server should be able to specify them, clients would need to 
discover them.


>> Re 1) this is even called out specifically in Sections 3.8 (update)
>> and 3.9 (remove), but it's not clear at all why that is the case.
>>
>> Re 2) Part of the hard-wiring could be avoided by using different HTTP
>> methods for the different actions. The other parameters could be made
>> discoverable using URIs / URI templates, exposed as WebDAV properties,
>> as is the case in RFC 5995.
>
> As above, can you explain how different HTTP methods would be used where
> the target of the add/update/remove operation is an existing calendar
> resource?
> ...

(see above)

>> 5.1. Cal-Managed-ID Response Header Field
>>
>> This doesn't seem to address the points listed in
>> <https://greenbytes.de/tech/webdav/rfc7231.html#considerations.for.new.header.fields>
>> (and it wouldn't be needed if the attachment would be modeled as an
>> HTTP resource whose values could be reported back in a Location header
>> field upon creation).
>
> Can parameters be added to a Location header field (it doesn't appear
> so), or are you suggesting that the managed-id value be encoded in the
> URI-reference value?

I suggest that the attachment *is* a HTTP resource, thus has it's own URI.

>> Minor issues:
>>
>> 3.12.4.  Processing Time
>>
>>    Clients can expect servers to take a while to respond to POST
>>    requests that include large attachment bodies.  Servers SHOULD use
>>    the "102 (Processing)" interim response defined in Section 10.1 of
>>    [RFC2518] to keep the client connection alive if the POST request
>>    will take significant time to complete.
>>
>> While discussing the new code 103 in the HTTP WG, we considered
>> interop problems with existing code that doesn't handle 1xx status
>> codes at all, or had problems with status codes other than 100. I
>> personally support use of new 1xx status codes, but it would be good
>> to hear whether the WG considered deployment problems when making this
>> a SHOULD-level requirement.
>
> Existing implementations of this CalDAV extension all seem to handle 1xx
> status codes.

I'm more concerned about HTTP libraries and intermediaries. See, for 
instance, <http://bugs.java.com/bugdatabase/view_bug.do?bug_id=8170305>.

Best regards, Julian


From nobody Wed May 17 06:07:18 2017
Return-Path: <murch@andrew.cmu.edu>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31EF012EB53; Wed, 17 May 2017 06:07:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.501
X-Spam-Level: 
X-Spam-Status: No, score=-1.501 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ymnj9aZWULZR; Wed, 17 May 2017 06:07:07 -0700 (PDT)
Received: from smtp.andrew.cmu.edu (SMTP.ANDREW.CMU.EDU [128.2.105.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 775791294B7; Wed, 17 May 2017 06:07:07 -0700 (PDT)
Received: from [192.168.1.22] (cpe-74-77-85-250.buffalo.res.rr.com [74.77.85.250]) (user=murch mech=PLAIN (0 bits)) by smtp.andrew.cmu.edu (8.15.2/8.15.2) with ESMTPSA id v4HD723i019793 (version=TLSv1.2 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 17 May 2017 09:07:03 -0400
To: Julian Reschke <julian.reschke@gmx.de>, IETF Discussion <ietf@ietf.org>, art@ietf.org
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de>
From: Ken Murchison <murch@andrew.cmu.edu>
Organization: Carnegie Mellon University
Message-ID: <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
Date: Wed, 17 May 2017 09:07:02 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.0
MIME-Version: 1.0
In-Reply-To: <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-PMX-Version: 6.3.0.2556906, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2017.5.17.125716
X-SMTP-Spam-Clean: 33% ( SXL_IP_DYNAMIC 3, TO_IN_SUBJECT 0.5, HTML_00_01 0.05, HTML_00_10 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_2000_2999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, DATE_TZ_NA 0, FROM_EDU_TLD 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, NO_CTA_URI_FOUND 0, NO_URI_FOUND 0, NO_URI_HTTPS 0, RDNS_GENERIC_POOLED 0, RDNS_POOLED 0, RDNS_RESIDENTIAL 0, RDNS_SUSP 0, RDNS_SUSP_GENERIC 0, RDNS_SUSP_SPECIFIC 0, REFERENCES 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FORWARDED_MSG 0, __HAS_FROM 0, __HAS_MSGID 0, __IN_REP_TO 0, __MIME_TEXT_ONLY 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_VERSION 0, __MOZILLA_USER_AGENT 0, __NO_HTML_TAG_RAW 0, __PHISH_SPEAR_STRUCTURE_1 0, __RDNS_POOLED_1 0, __REFERENCES 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __TO_IN_SUBJECT2 0, __TO_MALFORMED_2 0, __TO_NAME 0, __TO_NAME_DIFF_FROM_ACC 0, __TO_REAL_NAMES 0,  __USER_AGENT 0)
X-SMTP-Spam-Score: 33%
X-Scanned-By: MIMEDefang 2.78 on 128.2.105.202
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/oxLTbFiauod3GfWUgl9qe3SyScs>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 May 2017 13:07:09 -0000

On 05/15/2017 12:04 PM, Julian Reschke wrote:
> On 2017-05-15 16:03, Ken Murchison wrote:
>> Hi Julian,
>>
>> Thanks for the review.  Comments inline.
>>
>>
>> On 05/14/2017 10:23 AM, Julian Reschke wrote:
>>> Reviewer: Julian Reschke
>>> Review result: Not Ready
>>>
>>> Document: draft-ietf-calext-caldav-attachments-02
>>> IETF LC End Date: 2017-05-14
>>> IESG Telechat date: 2017-05-25
>>>
>>> This document describes attachment handling in CalDAV (WebDAV based
>>> calendaring).
>>>
>>> The mechanism described by this document is essential RPCish, using
>>> HTTP POST for tunneling. It will work in practice, but it definitively
>>> isn't state of the art in IETF protocols, in particular in an
>>> otherwise WebDAV/CalDAV-based ecosystem.
>>>
>>> Major issues:
>>>
>>> The main issue with this specification is that it
>>>
>>> 1) models operations on attachments as POST operations, where the
>>> actual type of operation is specified using a query parameter, instead
>>> of using the HTTP methods POST, PUT, and DELETE.
>>
>> The resource being acted upon is an actual calendar resource, which is
>> already in place.  The attachments are meta-data associated with one or
>
> Only for creation of the attachment. Once is has been created, it 
> should have its own URI, and the usual HTTP methods should be applicable.

Using HTTP methods directly on the attachment URI makes things more 
difficult because the calendar resource(s) referencing the attachment 
also need to be updated.  This would have to be done either as a 
side-effect of the PUT/DELETE on the attachment, or as a separate PUT 
(and separate round-trips) on the resource(s).  The desire was to avoid 
doing either one of these, which is why a POST on the calendar resource 
was chosen as the method to add/update/delete an attachment from a 
calendar resource.



>> more calendar resources, which is why a POST is used on the calendar
>> resource to manipulate an attachment.  Can you explain how you would
>> envision different HTTP methods be used to add/update/delete an
>> attachment associated with a calendar resource?
>
> For adding, I would define an HTTP resource that can be posted to. It 
> could be discovered through a WebDAV property.

We could certainly define a template or series of templates for 
add/update/delete and expose them as WebDAV properties.


-- 
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University


From nobody Wed May 17 06:57:39 2017
Return-Path: <cyrus@daboo.name>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5423412EB33; Wed, 17 May 2017 06:57:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.797
X-Spam-Level: 
X-Spam-Status: No, score=0.797 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M6VyhUatB5Be; Wed, 17 May 2017 06:57:28 -0700 (PDT)
Received: from daboo.name (daboo.name [173.13.55.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08D2012EC7A; Wed, 17 May 2017 06:51:23 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by daboo.name (Postfix) with ESMTP id F0B4C6D53789; Wed, 17 May 2017 09:51:21 -0400 (EDT)
X-Virus-Scanned: amavisd-new at daboo.name
Received: from daboo.name ([127.0.0.1]) by localhost (daboo.name [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7QOO5RxFFuiv; Wed, 17 May 2017 09:51:21 -0400 (EDT)
Received: from caldav.corp.apple.com (unknown [17.44.178.52]) by daboo.name (Postfix) with ESMTPSA id C0D276D5377E; Wed, 17 May 2017 09:51:20 -0400 (EDT)
Date: Wed, 17 May 2017 09:51:19 -0400
From: Cyrus Daboo <cyrus@daboo.name>
To: Ken Murchison <murch@andrew.cmu.edu>, Julian Reschke <julian.reschke@gmx.de>, IETF Discussion <ietf@ietf.org>, art@ietf.org
Message-ID: <5A6C244B4A6B876F82606F31@caldav.corp.apple.com>
In-Reply-To: <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
X-Mailer: Mulberry/4.1.0b1 (Mac OS X)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline; size=625
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/IWo4z6GdXr8cyE7557MYE23PIaI>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 May 2017 13:57:31 -0000

Hi Ken,

--On May 17, 2017 at 9:07:02 AM -0400 Ken Murchison <murch@andrew.cmu.edu> 
wrote:

>> For adding, I would define an HTTP resource that can be posted to. It
>> could be discovered through a WebDAV property.
>
> We could certainly define a template or series of templates for
> add/update/delete and expose them as WebDAV properties.
>

I would be OK with adding that, provided we also include an Appendix that 
describes what currently shipping implementations do - basically what is 
coded into the current spec. i.e., the template allows the same form of 
query param based URIs as we have today.

-- 
Cyrus Daboo


From nobody Wed May 17 06:59:56 2017
Return-Path: <cyrus@daboo.name>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 528C5129BCE; Wed, 17 May 2017 06:59:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.004
X-Spam-Level: 
X-Spam-Status: No, score=-0.004 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZgetMk6RsFwh; Wed, 17 May 2017 06:59:52 -0700 (PDT)
Received: from daboo.name (daboo.name [173.13.55.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9FB3128656; Wed, 17 May 2017 06:53:47 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by daboo.name (Postfix) with ESMTP id 210C86D53811; Wed, 17 May 2017 09:53:47 -0400 (EDT)
X-Virus-Scanned: amavisd-new at daboo.name
Received: from daboo.name ([127.0.0.1]) by localhost (daboo.name [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tBeP1xenGJ55; Wed, 17 May 2017 09:53:46 -0400 (EDT)
Received: from caldav.corp.apple.com (unknown [17.44.178.52]) by daboo.name (Postfix) with ESMTPSA id 1D9ED6D53802; Wed, 17 May 2017 09:53:46 -0400 (EDT)
Date: Wed, 17 May 2017 09:53:44 -0400
From: Cyrus Daboo <cyrus@daboo.name>
To: Ken Murchison <murch@andrew.cmu.edu>, Julian Reschke <julian.reschke@gmx.de>, IETF Discussion <ietf@ietf.org>, art@ietf.org
Message-ID: <D109686063172A99C2FDEFC9@caldav.corp.apple.com>
In-Reply-To: <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
X-Mailer: Mulberry/4.1.0b1 (Mac OS X)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline; size=1174
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/MZ6Y2lwIX4NqQdz1zGMEphBy51o>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 May 2017 13:59:54 -0000

Hi Ken,

--On May 17, 2017 at 9:07:02 AM -0400 Ken Murchison <murch@andrew.cmu.edu> 
wrote:

>> Only for creation of the attachment. Once is has been created, it
>> should have its own URI, and the usual HTTP methods should be applicable.
>
> Using HTTP methods directly on the attachment URI makes things more
> difficult because the calendar resource(s) referencing the attachment
> also need to be updated.  This would have to be done either as a
> side-effect of the PUT/DELETE on the attachment, or as a separate PUT
> (and separate round-trips) on the resource(s).  The desire was to avoid
> doing either one of these, which is why a POST on the calendar resource
> was chosen as the method to add/update/delete an attachment from a
> calendar resource.

One tricky aspect here is that calendar servers may not "host" the 
attachments themselves - i.e., they could use a separate "drop box" service 
to store the resources. In that case it is important that changes to the 
attachments are always managed through the calendar server so that it can 
alert clients via changes to the calendar data whenever an attachment is 
added, changed, or removed.

-- 
Cyrus Daboo


From nobody Wed May 17 07:06:17 2017
Return-Path: <julian.reschke@gmx.de>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73034129418; Wed, 17 May 2017 07:06:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dJEDtbprdtcT; Wed, 17 May 2017 07:06:02 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADD96124281; Wed, 17 May 2017 06:58:10 -0700 (PDT)
Received: from [192.168.178.20] ([93.217.117.158]) by mail.gmx.com (mrgmx102 [212.227.17.168]) with ESMTPSA (Nemesis) id 0Lwoiq-1e45352cEC-016RvB; Wed, 17 May 2017 15:58:03 +0200
To: Ken Murchison <murch@andrew.cmu.edu>, IETF Discussion <ietf@ietf.org>, art@ietf.org
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <7bcfecea-3a89-978c-9e1b-edf9aac5dd44@gmx.de>
Date: Wed, 17 May 2017 15:58:00 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:w6GTVvb1P50+BbhIgQc9idkKIq+GaHaSg7av9cY3+/lIykUj/2r vXNsT7+0USymC6z4xGuP+9snrxaev3FiyA/eKrJyUHXHzuqCugmYrFxi08DWTrJ/U6jEPB2 u3u26aS9wxwswMatDAu92s0hvQirex94q+e8OY1CPwX+KAcm/g6GdTunouvsykum/cAIhOL JQ0EVyS67AR9BQdO+OVrQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:MwWTpvXgYYw=:Kc50tQ9aKrXyRdwtW3e/h6 jZsn92p8Z6fzFDp+7sKGlbPeObFlMBANDJkmcpidDi/t6/btSuIi5+mJUt27rx/ns77p1/20p gN38NqrT00rJ0A24PZ1Y20wZklygbd7erjPtsBROrVCDON46hv3WJZXteN2CprgS47EGKI+cA nrYKuPpLbXh+1UyyzO3emTbEZZ6UF3licBSp8BiSubxlcQbszaAFJ6wViLrGm3Ev2GF5S102T ni+5Qi2XmsVTo3sIL22qSMmqAsXoAj9ZvO34C3bqs0AQX+HNsA4jeS8CCKMm6ToYcAR+8hRtt 131bn1kDpiSU7LBkkfH8doSqZV9WFNLG2FbFt7RyUjwj21fbLqkdZFR7ZE9bwAjokqODXKIN1 66iUpsqBKeJ8D7c6/V5J2/fU5YPEjBvlCcIMA5voBo29PcJrbtYEFkqvsj2B+rgsYj0TVJhe4 axcXwqWpBzhvCv3Kf009c0A7H0rw0nu0Byfcc0qfSd1GzJV4TtJyVi86GlvW4JQTbTVKXDzvF edeRXipijKtwG4cORkKTk7zotHn1tGepzxOaTymoOb7V+59eQnZoCevy4XjZ9u43w/tl3jllj tuRZgDOmFZxR3c0BstU1E7EQG89fYaop3W7X2A48/11PuYxE6QoAXcmnOX2pFrJghkHcYfv8o vhvfvcmW9yDv+CxcyXixWCC9BMGjfZxyi2+74vUvt3NjUAEle0ceg7KkgikjiGf9HqY+ZPYDU JYYOzxsTRIcY6c3DGof2M2YrVVLfPY//xxYehSnwSCt9r4A5lwXpNjwsUX2m0IG3JuEOPlM2w 9h1dvWn
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/E0JGO705GtXG-ecuMu0pGl6Gu3Y>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 May 2017 14:06:08 -0000

On 2017-05-17 15:07, Ken Murchison wrote:
> ...
>> Only for creation of the attachment. Once is has been created, it
>> should have its own URI, and the usual HTTP methods should be applicable.
>
> Using HTTP methods directly on the attachment URI makes things more
> difficult because the calendar resource(s) referencing the attachment
> also need to be updated.  This would have to be done either as a
> side-effect of the PUT/DELETE on the attachment, or as a separate PUT
> (and separate round-trips) on the resource(s).  The desire was to avoid
> doing either one of these, which is why a POST on the calendar resource
> was chosen as the method to add/update/delete an attachment from a
> calendar resource.

But the POST is *not* on the calendar resource, but on the calendar 
resource + query parameters, which, from HTTP's point of view is a 
different resource already.

Furthermore, what URIs are used is orthogonal to the question of which 
methods to use.

Why is

   POST /calendar-entry?action=remove&attachment=xyz

easier to process than

   DELETE /calendar-entry?attachment=xyz

or

   DELETE /calendar-entry/attachments/xyz

?

> ...

Best regards, Julian


From nobody Wed May 17 07:10:12 2017
Return-Path: <julian.reschke@gmx.de>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C84F129537; Wed, 17 May 2017 07:10:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_50=0.8, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yrdb2EgAro7M; Wed, 17 May 2017 07:10:10 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D7EB12EBBD; Wed, 17 May 2017 07:01:45 -0700 (PDT)
Received: from [192.168.178.20] ([93.217.117.158]) by mail.gmx.com (mrgmx002 [212.227.17.190]) with ESMTPSA (Nemesis) id 0MXZw6-1dWNjz11hG-00WY5i; Wed, 17 May 2017 16:01:29 +0200
To: Cyrus Daboo <cyrus@daboo.name>, Ken Murchison <murch@andrew.cmu.edu>, IETF Discussion <ietf@ietf.org>, art@ietf.org
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu> <D109686063172A99C2FDEFC9@caldav.corp.apple.com>
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <ffeb5967-a0ff-c0cc-0140-d6c42fc4ec23@gmx.de>
Date: Wed, 17 May 2017 16:01:20 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <D109686063172A99C2FDEFC9@caldav.corp.apple.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:Sk8ZU+ZN4nmfIWLo8PmVmC++wsVKMHckaY/9IhmOWsdaXzGtl5L nKsg7bre4vuobywgm9lr+nNZFbIa2k2JGi/1y0aO+ZYmXc0iIZoObXbjtbozdMpB+mqyD3x m8sPu7Ne0grghandgNz+YgplMJLQ85xqrz8IFz6Y4Y2wu199yOF7dED7HDaC3F/k7I0N3zy AYLfWDkX89lPBpwRvmWOQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:0G5DnqNmknM=:g6DXoFbtgjidE+tbRerKYd DENIAuq8rQeJ/1XuoNhVtvTi4o4RH5tGfxaLJ8q83ju93T+x5LKZWfNEm5fScOcdKbzyqJLgX YMvh8mFUsSvYUDehT4PrnFBWl7WaLKrY/7VypOVraF5QmWI3BF24B4R73ona5MxG9uxY06Ri8 pMFKIgpEDjgM+dK74Af2zen2zc5+7gcy/IdJEu7v03d9CbyjwdpmGNScesiXL8Dp9d+8hcdub MyolTjoqpj0icSRCd8CupMByYldWwqA6CVZ73LHhNKuSatH0L0Q8KfeHmFPiS2Dna9aa+bgxw XmkgSi4p91CKqvs9sL/bZyWNxEnNj5/4UbXsVQqDnB6UvN7leqR0KyBSJ/ILZD2HsxvPXkNyA sFjQLIthVx9+x6CSksKEqSphWCCohGFUZ7/vuno4pReZ7qR+DWaEKf2rEsepyABVTbnrO39og JxaEkFyvvhToaVbaBFPr1l5a0yravgwG1U4ytX319OnpE4CinyXAhYeKjbJ6w1Am2y4rtQSHN K+OU+Lsb8HLFtZuOmSt86tCUoC8a5RA7MI7g3AJOJDzAeFbrkd0ZMPKYtztGwrEK4dyiIJFsH 5otV0x5kwQNLxaArWV9tZ3Jc5c1XesQxbgCRM98dKppDNUa37AHo1xAAaNCl3tHwfO4UZATbY oqO3d+mDynV0yEn4QF7a2eeDtIHaHfOXU9i2so5eMB9QMr0UEUg1fhOepni98uWG8dRn1t9rT GVvgiZKfNSsXJFk/Yr1lMjVPoLOLsGwGMp5hVAwsvIwQ8I83TnjxxDukszmsF8XCJ/hpDnveD bCFeKq3
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/bKczvvgZCjyY-FmkqHqI5fK4ZhA>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 17 May 2017 14:10:11 -0000

On 2017-05-17 15:53, Cyrus Daboo wrote:
>> Using HTTP methods directly on the attachment URI makes things more
>> difficult because the calendar resource(s) referencing the attachment
>> also need to be updated.  This would have to be done either as a
>> side-effect of the PUT/DELETE on the attachment, or as a separate PUT
>> (and separate round-trips) on the resource(s).  The desire was to avoid
>> doing either one of these, which is why a POST on the calendar resource
>> was chosen as the method to add/update/delete an attachment from a
>> calendar resource.
>
> One tricky aspect here is that calendar servers may not "host" the
> attachments themselves - i.e., they could use a separate "drop box"
> service to store the resources. In that case it is important that
> changes to the attachments are always managed through the calendar
> server so that it can alert clients via changes to the calendar data
> whenever an attachment is added, changed, or removed.

Again, that's an implementation detail. Just because the calendar server 
stores attachments somewhere else doesn't mean it has to expose those URIs.

Best regards, Julian



From nobody Mon May 22 11:59:33 2017
Return-Path: <murch@andrew.cmu.edu>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CFB712878D; Mon, 22 May 2017 11:59:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.501
X-Spam-Level: 
X-Spam-Status: No, score=-1.501 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UpilocMj7ZWp; Mon, 22 May 2017 11:59:22 -0700 (PDT)
Received: from smtp.andrew.cmu.edu (SMTP.ANDREW.CMU.EDU [128.2.105.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 985AB126C2F; Mon, 22 May 2017 11:59:22 -0700 (PDT)
Received: from [172.31.24.242] (VPN-172-31-24-242.VPN.CMU.LOCAL [172.31.24.242]) (user=murch mech=PLAIN (0 bits)) by smtp.andrew.cmu.edu (8.15.2/8.15.2) with ESMTPSA id v4MIx7xR050219 (version=TLSv1.2 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 22 May 2017 14:59:08 -0400
To: Julian Reschke <julian.reschke@gmx.de>, IETF Discussion <ietf@ietf.org>, art@ietf.org
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu> <7bcfecea-3a89-978c-9e1b-edf9aac5dd44@gmx.de>
From: Ken Murchison <murch@andrew.cmu.edu>
Organization: Carnegie Mellon University
Cc: Cyrus Daboo <cyrus@daboo.name>
Message-ID: <07f64bc5-13f6-62a0-3c04-91c780f69672@andrew.cmu.edu>
Date: Mon, 22 May 2017 14:59:07 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.0
MIME-Version: 1.0
In-Reply-To: <7bcfecea-3a89-978c-9e1b-edf9aac5dd44@gmx.de>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-PMX-Version: 6.3.0.2556906, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2017.5.22.185116
X-SMTP-Spam-Clean: 10% ( TO_IN_SUBJECT 0.5, HTML_00_01 0.05, HTML_00_10 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_2000_2999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, DATE_TZ_NA 0, FROM_EDU_TLD 0, IN_REP_TO 0, LEGITIMATE_SIGNS 0, MSG_THREAD 0, MULTIPLE_REAL_RCPTS 0, NO_CTA_URI_FOUND 0, NO_URI_FOUND 0, NO_URI_HTTPS 0, REFERENCES 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CC_NAME 0, __CC_NAME_DIFF_FROM_ACC 0, __CC_REAL_NAMES 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FORWARDED_MSG 0, __HAS_CC_HDR 0, __HAS_FROM 0, __HAS_MSGID 0, __IN_REP_TO 0, __MIME_TEXT_ONLY 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_VERSION 0, __MOZILLA_USER_AGENT 0, __NO_HTML_TAG_RAW 0, __PHISH_SPEAR_STRUCTURE_1 0, __REFERENCES 0, __SANE_MSGID 0, __SUBJ_ALPHA_NEGATE 0, __TO_IN_SUBJECT2 0, __TO_MALFORMED_2 0,  __TO_NAME 0, __TO_NAME_DIFF_FROM_ACC 0, __TO_REAL_NAMES 0, __USER_AGENT 0)
X-SMTP-Spam-Score: 10%
X-Scanned-By: MIMEDefang 2.78 on 128.2.105.202
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/Xb8KsNU5llRCtHfU7dDjN_XY6o4>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 May 2017 18:59:24 -0000

On 05/17/2017 09:58 AM, Julian Reschke wrote:
> On 2017-05-17 15:07, Ken Murchison wrote:
>> ...
>>> Only for creation of the attachment. Once is has been created, it
>>> should have its own URI, and the usual HTTP methods should be 
>>> applicable.
>>
>> Using HTTP methods directly on the attachment URI makes things more
>> difficult because the calendar resource(s) referencing the attachment
>> also need to be updated.  This would have to be done either as a
>> side-effect of the PUT/DELETE on the attachment, or as a separate PUT
>> (and separate round-trips) on the resource(s).  The desire was to avoid
>> doing either one of these, which is why a POST on the calendar resource
>> was chosen as the method to add/update/delete an attachment from a
>> calendar resource.
>
> But the POST is *not* on the calendar resource, but on the calendar 
> resource + query parameters, which, from HTTP's point of view is a 
> different resource already.
>
> Furthermore, what URIs are used is orthogonal to the question of which 
> methods to use.
>
> Why is
>
>   POST /calendar-entry?action=remove&attachment=xyz
>
> easier to process than
>
>   DELETE /calendar-entry?attachment=xyz
>
> or
>
>   DELETE /calendar-entry/attachments/xyz
>
> ?

The issue here is that a single calendar resource may contain multiple 
events (recurring event with overrides) and a particular attachment may 
be associated with more than one instance of that event.  For this 
reason, we felt it best to use the calendar resource as the gateway to 
the attachments, thus allowing manipulating multiple instances of an 
attachment in a single round-trip.  Also, by preventing clients from 
manipulating attachments directly, a CalDAV server isn't forced to alter 
all calendar resources associated with a particular attachment.

We also have a fairly large number of deployed implementations which we 
do not want to make non-compliant by substantially modifying the 
protocol.  At this point, specifying the use of HTTP methods other than 
POST would indeed make existing implementations non-compliant.

We would definitely like to make this protocol conform to current HTTP 
practice where possible, and would also document where we have strayed 
from existing practice if required to do so.  Do you think we can come 
to some kind of consensus that meets these goals?

-- 
Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University


From nobody Mon May 22 15:19:42 2017
Return-Path: <fielding@gbiv.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB5F11293E4; Mon, 22 May 2017 15:19:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.799
X-Spam-Level: 
X-Spam-Status: No, score=-4.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=gbiv.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8kEkQWFa2iKT; Mon, 22 May 2017 15:19:38 -0700 (PDT)
Received: from homiemail-a124.g.dreamhost.com (sub5.mail.dreamhost.com [208.113.200.129]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CABD81272E1; Mon, 22 May 2017 15:19:38 -0700 (PDT)
Received: from homiemail-a124.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a124.g.dreamhost.com (Postfix) with ESMTP id 3C33560000D00; Mon, 22 May 2017 15:19:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=gbiv.com; h=content-type :mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; s=gbiv.com; bh=Nz05IO1NsBfpXtaFlaWPXuvDnSo=; b=ZgLihgmtrCpKC/VviNR09HBmPn0J ALjXorRrieRDaDJqwskdlPGte5zsdP8gZ6LFnT7qlzoUk4504psaxIWfK9wvxzxb m8UjMShYowoZ9iy+dlEnPDEnDm551TLMAyRf2qnokRcnteqgk2llHYm/Gecmo0oJ OWsUJ0cqCk3UpGw=
Received: from [192.168.1.11] (ip68-228-71-159.oc.oc.cox.net [68.228.71.159]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: fielding@gbiv.com) by homiemail-a124.g.dreamhost.com (Postfix) with ESMTPSA id 1739560001B0A; Mon, 22 May 2017 15:19:38 -0700 (PDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: "Roy T. Fielding" <fielding@gbiv.com>
In-Reply-To: <07f64bc5-13f6-62a0-3c04-91c780f69672@andrew.cmu.edu>
Date: Mon, 22 May 2017 15:19:37 -0700
Cc: Julian Reschke <julian.reschke@gmx.de>, IETF Discussion <ietf@ietf.org>, art@ietf.org, Cyrus Daboo <cyrus@daboo.name>
Content-Transfer-Encoding: quoted-printable
Message-Id: <4803F47E-B29C-440A-91EA-F0D115208A53@gbiv.com>
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu> <7bcfecea-3a89-978c-9e1b-edf9aac5dd44@gmx.de> <07f64bc5-13f6-62a0-3c04-91c780f69672@andrew.cmu.edu>
To: Ken Murchison <murch@andrew.cmu.edu>
X-Mailer: Apple Mail (2.2104)
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/kjrkRQyNDzrtPjlZQgXZm3iSroY>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 22 May 2017 22:19:41 -0000

> On May 22, 2017, at 11:59 AM, Ken Murchison <murch@andrew.cmu.edu> =
wrote:
> On 05/17/2017 09:58 AM, Julian Reschke wrote:
>> On 2017-05-17 15:07, Ken Murchison wrote:
>>> ...
>>>> Only for creation of the attachment. Once is has been created, it
>>>> should have its own URI, and the usual HTTP methods should be =
applicable.
>>>=20
>>> Using HTTP methods directly on the attachment URI makes things more
>>> difficult because the calendar resource(s) referencing the =
attachment
>>> also need to be updated.  This would have to be done either as a
>>> side-effect of the PUT/DELETE on the attachment, or as a separate =
PUT
>>> (and separate round-trips) on the resource(s).  The desire was to =
avoid
>>> doing either one of these, which is why a POST on the calendar =
resource
>>> was chosen as the method to add/update/delete an attachment from a
>>> calendar resource.
>>=20
>> But the POST is *not* on the calendar resource, but on the calendar =
resource + query parameters, which, from HTTP's point of view is a =
different resource already.
>>=20
>> Furthermore, what URIs are used is orthogonal to the question of =
which methods to use.
>>=20
>> Why is
>>=20
>>  POST /calendar-entry?action=3Dremove&attachment=3Dxyz
>>=20
>> easier to process than
>>=20
>>  DELETE /calendar-entry?attachment=3Dxyz
>>=20
>> or
>>=20
>>  DELETE /calendar-entry/attachments/xyz
>>=20
>> ?
>=20
> The issue here is that a single calendar resource may contain multiple =
events (recurring event with overrides) and a particular attachment may =
be associated with more than one instance of that event.  For this =
reason, we felt it best to use the calendar resource as the gateway to =
the attachments, thus allowing manipulating multiple instances of an =
attachment in a single round-trip.  Also, by preventing clients from =
manipulating attachments directly, a CalDAV server isn't forced to alter =
all calendar resources associated with a particular attachment.

But that isn't relevant to the choices here.  HTTP is not a filesystem.
A single implementation (e.g., caldav resource) can handle a wide =
variety
of URLs (identified HTTP resources) with all sorts of co-dependencies in
the state represented by those resources.  They are all part of the =
calendar.
The method states the kind of action being made.

Likewise, an identifier for the attachment associated with the calendar =
entry
doesn't have to be the same as the identifiers for interacting with the
attachment directly.  For example, the calendar might provide one =
identifier
for the original attachment, a second for the attachment currently =
applicable
to a given instance of an entry, and a third for updating future =
instances
of that repeating event (i.e., all defined by the server, not the =
protocol).

In any case, one of the cornerstones of caldav practice is that caldav
provides just one interface to an abstract Calendar database normally
accessed via many different protocols/systems.  The Calendar should =
already
be maintaining coherence between entries and attachments, just like it
shouldn't require a new entry be created every time the invitation list
is expanded.

> We also have a fairly large number of deployed implementations which =
we do not want to make non-compliant by substantially modifying the =
protocol.  At this point, specifying the use of HTTP methods other than =
POST would indeed make existing implementations non-compliant.

Specifying method actions within URL query strings is well-known to be
bad practice. However, if you are okay with specifying an IETF protocol
that contains obviously bad practice in its application of HTTP,
a minimum would be to reference section 4.2.1 of RFC7231, where it =
states:

   When a resource is constructed such that parameters within the
   effective request URI have the effect of selecting an action,
   it is the resource owner's responsibility to ensure that the action
   is consistent with the request method semantics. For example, it is
   common for Web-based content editing software to use actions within
   query parameters, such as "page?do=3Ddelete". If the purpose of such =
a
   resource is to perform an unsafe action, then the resource owner MUST
   disable or disallow that action when it is accessed using a safe
   request method. Failure to do so will result in unfortunate side
   effects when automated processes perform a GET on every URI reference
   for the sake of link maintenance, pre-fetching, building a search =
index, etc.

> We would definitely like to make this protocol conform to current HTTP =
practice where possible, and would also document where we have strayed =
from existing practice if required to do so.  Do you think we can come =
to some kind of consensus that meets these goals?
>=20
> --=20
> Kenneth Murchison
> Principal Systems Software Engineer
> Carnegie Mellon University

I honestly don't see how this can be considered an extension of WebDAV
and yet have such a profound misunderstanding of method semantics.
Other applications of HTTP might be expected to work around PUT/DELETE,
but not a WebDAV server.

Likewise, defining a protocol in terms of predefined URL patterns and
specific query components is fundamentally incompatible with REST.

OTOH, it's not the first time this has come up.  HTTP provides plenty
of rope, for good reasons, and these types of choices seem only to
harm those using the rope.  Maybe a future version will just use HTTP.


Cheers,

Roy T. Fielding                     <http://roy.gbiv.com/>
Senior Principal Scientist, Adobe   <https://www.adobe.com/>


From nobody Tue May 23 02:47:31 2017
Return-Path: <julian.reschke@gmx.de>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F7CA129420; Tue, 23 May 2017 02:47:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.1
X-Spam-Level: 
X-Spam-Status: No, score=0.1 tagged_above=-999 required=5 tests=[BAYES_50=0.8,  FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ez-lLF0WJO1l; Tue, 23 May 2017 02:47:28 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEE8A127286; Tue, 23 May 2017 02:47:27 -0700 (PDT)
Received: from [192.168.1.57] ([217.91.35.233]) by mail.gmx.com (mrgmx001 [212.227.17.190]) with ESMTPSA (Nemesis) id 0MS5xC-1dOlXi2WjK-00TCN0; Tue, 23 May 2017 11:47:08 +0200
To: Ken Murchison <murch@andrew.cmu.edu>, IETF Discussion <ietf@ietf.org>, art@ietf.org
Cc: Cyrus Daboo <cyrus@daboo.name>
References: <c04f39e2-79d2-ab9d-59ab-26e51d7ab5fc@gmx.de> <81613220-989b-ca78-fe56-0ac7b19e7ce6@andrew.cmu.edu> <b2a4924d-c7c9-b40b-484f-9fab48bfe5de@gmx.de> <a603f3de-2d96-6f86-e0c3-3e0a4884a185@andrew.cmu.edu> <7bcfecea-3a89-978c-9e1b-edf9aac5dd44@gmx.de> <07f64bc5-13f6-62a0-3c04-91c780f69672@andrew.cmu.edu>
From: Julian Reschke <julian.reschke@gmx.de>
Message-ID: <f7a17043-3738-1157-91e5-a9f863d2aa17@gmx.de>
Date: Tue, 23 May 2017 11:47:04 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <07f64bc5-13f6-62a0-3c04-91c780f69672@andrew.cmu.edu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:7KNd+yZ1YD/PcZza3Y88SmR+4MYllZbvuDHXsZQ4i2l/3MmcyJw bEcxTvLFaSZQwCKKpRa0ZnjE+LNWcMTv/RwWC1To4vIUgRr3fVpEZE67QaXTMEvfchk+dqW mL8vu2AjWP+x7uVHHazvxVF/F/zHucSWU4V2FU71GYiRhHHX5MPIkbW7x7PIfMbEWRRyf5d hvRDP7zaZ/XSJXbSYw8xQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:pDH/97rXxHQ=:huxfk6W9VCczUBE8q/RuRs g9oBuJpqBNRso3Wi/5gLYF24srbOdKuS3k80AckA48iP6saSdYVX4R4rQIUeUfJdvnK0wlw/1 lAblSSmQFo1WfM8QDVoUd+bMOcEC+8PGTgqtAxxnoYx/DNsHB/E+CnfqxvwHJ7ZSUtJ6sTug4 EKsQgV+/TTpBY8+CzRRhgjoyLRr7PL1m2Bv1iYdoW2PWxth/WFvEbNFMJpZy8okAbQqnTm5wH JIp0sJckXOP1ZGF6DwYzDiTCvoQgdV37M4zGjdtLzrXLj815Cfy5kMdAz+lYnkwjhORC/uHSN nJ94NyY++RxSBhhpUOBIBFh1HvMh/j9QGhY1nLBKFPwPJV4dwHG5sE7zCfOTgoMW9yWhRYASR kMLw2QO51ZRjx74AswEwlQIZK9R4Kp4aE9OQRz93hyGG6O3dlVRp0omztpMCe+K0IHTTx5xRO lKjbbAo4VjiqgRwmPXSfr13vxHFQl0mUIDpDDHW0oAgpTMOpvPzpP4fEzHtS+UNsLmstM4oTP yL8qdnNcc8sf5JBWNv+bHVdC7Qcpn/+Vq0TKaz2sIClUTwm4jOIWD9MY3z0GZNRBkmc5P0UgO B5QzrVPlBEJywuP/g6ixpErilbQms3mOC/Sylun8Ra6OC6Jvy9STZaC35J3cSDziJtAgLURos 7K5YJkiJDw8C7ELHIm373gLR4eKiaXqeY0nMDv4FEctf3NDr9OU8sgjB+t7ew2gYzPl8nZT1n VPDyZ08PyQzotX1/IzgA0LwcthrZje1nn5Mpyic2mcb6uQrJuC58E4ErR0tU9TOgXoD89hHfQ fjNuWXq
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/iDzcbN9ViBBQWz4pk_hXkdPcvcY>
Subject: Re: [art] ART Area Review for draft-ietf-calext-caldav-attachments-02
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 23 May 2017 09:47:29 -0000

On 2017-05-22 20:59, Ken Murchison wrote:
> ...
> The issue here is that a single calendar resource may contain multiple 
> events (recurring event with overrides) and a particular attachment may 
> be associated with more than one instance of that event.  For this 
> reason, we felt it best to use the calendar resource as the gateway to 
> the attachments, thus allowing manipulating multiple instances of an 
> attachment in a single round-trip.  Also, by preventing clients from 
> manipulating attachments directly, a CalDAV server isn't forced to alter 
> all calendar resources associated with a particular attachment.
> ...

But that's a detail of how the server implements these resources. I 
still do not understand how the choice of HTTP methods and URI formats 
is relevant for that.

> We also have a fairly large number of deployed implementations which we 
> do not want to make non-compliant by substantially modifying the 
> protocol.  At this point, specifying the use of HTTP methods other than 
> POST would indeed make existing implementations non-compliant.

Yes.

> We would definitely like to make this protocol conform to current HTTP 
> practice where possible, and would also document where we have strayed 
> from existing practice if required to do so.  Do you think we can come 
> to some kind of consensus that meets these goals?

I'm just offering my feedback from an HTTP and web architecture point of 
view. And from that angle, the protocol as specified violates multiple 
best practices, and I would recommend not to publish it on the standards 
track. "Informational" might work, if this is indeed what's implemented, 
and implementers are unwilling to put more work into it...

Best regards, Julian





From nobody Thu May 25 11:51:42 2017
Return-Path: <touch@isi.edu>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E173912E037; Thu, 25 May 2017 11:51:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level: 
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6bku3iCcgjRk; Thu, 25 May 2017 11:51:41 -0700 (PDT)
Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA1251293E0; Thu, 25 May 2017 11:51:40 -0700 (PDT)
Received: from [128.9.184.77] ([128.9.184.77]) (authenticated bits=0) by boreas.isi.edu (8.13.8/8.13.8) with ESMTP id v4PIpDuT008458 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 25 May 2017 11:51:13 -0700 (PDT)
To: Matthew Miller <linuxwolf+ietf@outer-planes.net>, art@ietf.org
Cc: ietf@ietf.org, draft-ietf-nfsv4-versioning.all@ietf.org, nfsv4@ietf.org
References: <149462145126.13443.7366912235626631179@ietfa.amsl.com>
From: Joe Touch <touch@isi.edu>
Message-ID: <d64909ad-b71a-a932-606b-8b974cf68140@isi.edu>
Date: Thu, 25 May 2017 11:51:13 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <149462145126.13443.7366912235626631179@ietfa.amsl.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: touch@isi.edu
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/6t9-Fvqfxg1KM5AGUEA_mvYKKw8>
Subject: Re: [art] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 May 2017 18:51:42 -0000

Hi, all,

I'd like to add one point.

This doc gives guidance on creating minor versions, but never addresses
major versions.

IMO, past variants of NFS have not handled major version changes
appropriately. Each one has been assigned a new port number. This is no
longer recommended practice (see RFC7605, Sec 7.5).

Is this issue addressed in another document?

AFAICT, if (when) NFSv5 is developed, it seems to appear to need another
port number. If that's the case (and I sincerely hope it isn't), it MUST
be the last one assigned to this service.

Joe


From nobody Thu May 25 12:33:25 2017
Return-Path: <davenoveck@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97127127876; Thu, 25 May 2017 12:33:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CL6gi7cRHOZW; Thu, 25 May 2017 12:33:09 -0700 (PDT)
Received: from mail-it0-x230.google.com (mail-it0-x230.google.com [IPv6:2607:f8b0:4001:c0b::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6EF1126BF7; Thu, 25 May 2017 12:33:08 -0700 (PDT)
Received: by mail-it0-x230.google.com with SMTP id o5so62383650ith.1; Thu, 25 May 2017 12:33:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=gskXHB8Plylia7vweZIvARanglO8dX5tSPPryRy6K0s=; b=qADyrPAKLpdOSJZSSOVb+Gwmf886GXkmrFV429242s/quP14GU3pvNpMyItpEACjVX uhv19CdQN+oUHoisUkfNq5AFZxpYoWZD7mhu1x5p5N3ijZRWsPv8EnjrAj6vREu6+aTe VPzN9LueYbrNvDcCSX97YOY6TK08XLq+kxESJB/GNGub0gCq7oy+SdJgBOh2ozky2F6s squBfSmavqq7wfB6UPABZTYF+t7BnSYW+s+3dk0iwExtUS+35AKbg8OowVJjaaCtI+b2 Q11hMX2JDaXgxy8baW5/XH+uPMZ6H9Jnn4j4qkNerHy4hDCblvLYKPUKlp0EENAKUjjS Htqg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=gskXHB8Plylia7vweZIvARanglO8dX5tSPPryRy6K0s=; b=XsgmbiQiwkQ1su6op3nagWLd2lvEil0c7Po8h2od+bYvpSluQrR5kUhWBPkB/ESHPk 2jVo47rY8CrNrTnTGpyh9gZ52hcSRLEwcOypnUOGpQpZ9AqyzCBp0eAzaKkYXTCcOgdD tuDRvKlUw+WuIBlZicohxmhs9cCwMxlPsqamaiSvh1zqNnQQq43kGnNpUy9qMKdfS8jE 4qqDWekjXcfDjG/eu4TkrjLfkGBpx7wHkDqfKMiWa5ZE8DGBxXTW70gYT81j5Uk+/5qb ErYaMEjy9+g/m1knzBhWdADGZCUj1rERSLDJh9HZWQ2GO4fiqe5oRac1uWa5Itg+av/B Od9A==
X-Gm-Message-State: AODbwcCmec2PjkGSINXU642bJdoDQTgNNHmbfmwN/6mSp6VJ5RL41F13 /ymmO9r+Fmd77ZW6Qpb9EPjv5OypfQ==
X-Received: by 10.36.11.68 with SMTP id 65mr16094591itd.80.1495740788093; Thu, 25 May 2017 12:33:08 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.4.148 with HTTP; Thu, 25 May 2017 12:33:07 -0700 (PDT)
In-Reply-To: <d64909ad-b71a-a932-606b-8b974cf68140@isi.edu>
References: <149462145126.13443.7366912235626631179@ietfa.amsl.com> <d64909ad-b71a-a932-606b-8b974cf68140@isi.edu>
From: David Noveck <davenoveck@gmail.com>
Date: Thu, 25 May 2017 15:33:07 -0400
Message-ID: <CADaq8jdWgRSqGVt0UBf3sqzp3ivYAW36y1JuNg43HGp5WboKrg@mail.gmail.com>
To: Joe Touch <touch@isi.edu>
Cc: Matthew Miller <linuxwolf+ietf@outer-planes.net>, art@ietf.org, ietf@ietf.org,  draft-ietf-nfsv4-versioning.all@ietf.org, "nfsv4@ietf.org" <nfsv4@ietf.org>
Content-Type: multipart/alternative; boundary="001a1140c4ee59bfcf05505e4a1f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/1mOgKRU1nexgWTyyDyprV5-ro9Q>
Subject: Re: [art] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 May 2017 19:33:11 -0000

--001a1140c4ee59bfcf05505e4a1f
Content-Type: text/plain; charset="UTF-8"

> This doc gives guidance on creating minor versions, but never addresses
> major versions.

I think we had enough to do addressing minor versions and didn't want to
speculate about a possible v5.  after all, we're the nfsv4 working group
and not the nfsvn working group.


> IMO, past variants of NFS have not handled major version changes
> appropriately. Each one has been assigned a new port number. This is no
> longer recommended practice (see RFC7605, Sec 7.5).


Makes sense.

> Is this issue addressed in another document?

I don't think so.

> AFAICT, if (when) NFSv5 is developed, it seems to appear to need another
> port number.

I don't see why it would.  If there is another Rpc version of the NFS
program,
I don't see why the appropriate negotiation could be defined.  I think
doing\
that would be up to those defining nfsv5.

> If that's the case (and I sincerely hope it isn't), it MUST
> be the last one assigned to this service.

I don't think "MUST" is appropriate in this case but I would say that
assigning
another port would be a DAMN SHAME.

On Thu, May 25, 2017 at 2:51 PM, Joe Touch <touch@isi.edu> wrote:

> Hi, all,
>
> I'd like to add one point.
>
> This doc gives guidance on creating minor versions, but never addresses
> major versions.
>
> IMO, past variants of NFS have not handled major version changes
> appropriately. Each one has been assigned a new port number. This is no
> longer recommended practice (see RFC7605, Sec 7.5).
>
> Is this issue addressed in another document?
>
> AFAICT, if (when) NFSv5 is developed, it seems to appear to need another
> port number. If that's the case (and I sincerely hope it isn't), it MUST
> be the last one assigned to this service.
>
> Joe
>

--001a1140c4ee59bfcf05505e4a1f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><span style=3D"font-size:12.8px">&gt; This doc gives guida=
nce on creating minor versions, but never addresses</span><br style=3D"font=
-size:12.8px"><span style=3D"font-size:12.8px">&gt; major versions.</span><=
div><br></div><div>I think we had enough to do addressing minor versions an=
d didn&#39;t want to</div><div>speculate about a possible v5. =C2=A0after a=
ll, we&#39;re the nfsv4 working group</div><div>and not the nfsvn working g=
roup.</div><div><br><br style=3D"font-size:12.8px"><span style=3D"font-size=
:12.8px">&gt; IMO, past variants of NFS have not handled major version chan=
ges</span><br style=3D"font-size:12.8px"><span style=3D"font-size:12.8px">&=
gt; appropriately. Each one has been assigned a new port number. This is no=
</span><br style=3D"font-size:12.8px"><span style=3D"font-size:12.8px">&gt;=
 longer recommended practice (see RFC7605, Sec 7.5).</span><br style=3D"fon=
t-size:12.8px"><br><br>Makes sense.</div><div><br><span style=3D"font-size:=
12.8px">&gt; Is this issue addressed in another document?</span><br style=
=3D"font-size:12.8px"><br>I don&#39;t think so.</div><div><br><span style=
=3D"font-size:12.8px">&gt; AFAICT, if (when) NFSv5 is developed, it seems t=
o appear to need another</span><br style=3D"font-size:12.8px"><span style=
=3D"font-size:12.8px">&gt; port number.=C2=A0</span></div><div><span style=
=3D"font-size:12.8px"><br></span></div><div><span style=3D"font-size:12.8px=
">I don&#39;t see why it would.=C2=A0 If there is another Rpc version of th=
e NFS program,</span></div><div><span style=3D"font-size:12.8px">I don&#39;=
t see why the appropriate negotiation could be defined.=C2=A0 I think doing=
\</span></div><div><span style=3D"font-size:12.8px">that would be up to tho=
se defining nfsv5.</span></div><div><span style=3D"font-size:12.8px"><br></=
span></div><div><span style=3D"font-size:12.8px">&gt; If that&#39;s the cas=
e (and I sincerely hope it isn&#39;t), it MUST</span><br style=3D"font-size=
:12.8px"><span style=3D"font-size:12.8px">&gt; be the last one assigned to =
this service.</span><br></div><div><br></div><div>I don&#39;t think &quot;M=
UST&quot; is appropriate in this case but I would say that assigning=C2=A0<=
/div><div>another port would be a DAMN SHAME.</div></div><div class=3D"gmai=
l_extra"><br><div class=3D"gmail_quote">On Thu, May 25, 2017 at 2:51 PM, Jo=
e Touch <span dir=3D"ltr">&lt;<a href=3D"mailto:touch@isi.edu" target=3D"_b=
lank">touch@isi.edu</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quo=
te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"=
>Hi, all,<br>
<br>
I&#39;d like to add one point.<br>
<br>
This doc gives guidance on creating minor versions, but never addresses<br>
major versions.<br>
<br>
IMO, past variants of NFS have not handled major version changes<br>
appropriately. Each one has been assigned a new port number. This is no<br>
longer recommended practice (see RFC7605, Sec 7.5).<br>
<br>
Is this issue addressed in another document?<br>
<br>
AFAICT, if (when) NFSv5 is developed, it seems to appear to need another<br=
>
port number. If that&#39;s the case (and I sincerely hope it isn&#39;t), it=
 MUST<br>
be the last one assigned to this service.<br>
<span class=3D"HOEnZb"><font color=3D"#888888"><br>
Joe<br>
</font></span></blockquote></div><br></div>

--001a1140c4ee59bfcf05505e4a1f--


From nobody Thu May 25 15:18:24 2017
Return-Path: <touch@isi.edu>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31DF9127B52; Thu, 25 May 2017 15:18:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.001
X-Spam-Level: 
X-Spam-Status: No, score=-5.001 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YEQN_6obsKYx; Thu, 25 May 2017 15:18:15 -0700 (PDT)
Received: from vapor.isi.edu (vapor.isi.edu [128.9.64.64]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2F31129B21; Thu, 25 May 2017 15:18:15 -0700 (PDT)
Received: from [192.168.1.189] (cpe-172-250-240-132.socal.res.rr.com [172.250.240.132]) (authenticated bits=0) by vapor.isi.edu (8.13.8/8.13.8) with ESMTP id v4PMHhQw019774 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 25 May 2017 15:17:57 -0700 (PDT)
To: David Noveck <davenoveck@gmail.com>
Cc: Matthew Miller <linuxwolf+ietf@outer-planes.net>, art@ietf.org, ietf@ietf.org, draft-ietf-nfsv4-versioning.all@ietf.org, "nfsv4@ietf.org" <nfsv4@ietf.org>
References: <149462145126.13443.7366912235626631179@ietfa.amsl.com> <d64909ad-b71a-a932-606b-8b974cf68140@isi.edu> <CADaq8jdWgRSqGVt0UBf3sqzp3ivYAW36y1JuNg43HGp5WboKrg@mail.gmail.com>
From: Joe Touch <touch@isi.edu>
Message-ID: <d10f43d7-d136-d9b9-fcfb-dc78a52e1355@isi.edu>
Date: Thu, 25 May 2017 15:17:43 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <CADaq8jdWgRSqGVt0UBf3sqzp3ivYAW36y1JuNg43HGp5WboKrg@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------AC254B0531D11EB8A41583A9"
Content-Language: en-US
X-ISI-4-43-8-MailScanner: Found to be clean
X-MailScanner-From: touch@isi.edu
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/IHj8dFTA458vfndSJs1XDkdrCTw>
Subject: Re: [art] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 May 2017 22:18:17 -0000

This is a multi-part message in MIME format.
--------------AC254B0531D11EB8A41583A9
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Hi, David,

Thanks for the response, and agreed throughout.

Joe


On 5/25/2017 12:33 PM, David Noveck wrote:
> > This doc gives guidance on creating minor versions, but never addresses
> > major versions.
>
> I think we had enough to do addressing minor versions and didn't want to
> speculate about a possible v5.  after all, we're the nfsv4 working group
> and not the nfsvn working group.
>
>
> > IMO, past variants of NFS have not handled major version changes
> > appropriately. Each one has been assigned a new port number. This is no
> > longer recommended practice (see RFC7605, Sec 7.5).
>
>
> Makes sense.
>
> > Is this issue addressed in another document?
>
> I don't think so.
>
> > AFAICT, if (when) NFSv5 is developed, it seems to appear to need another
> > port number. 
>
> I don't see why it would.  If there is another Rpc version of the NFS
> program,
> I don't see why the appropriate negotiation could be defined.  I think
> doing\
> that would be up to those defining nfsv5.
>
> > If that's the case (and I sincerely hope it isn't), it MUST
> > be the last one assigned to this service.
>
> I don't think "MUST" is appropriate in this case but I would say that
> assigning 
> another port would be a DAMN SHAME.
>
> On Thu, May 25, 2017 at 2:51 PM, Joe Touch <touch@isi.edu
> <mailto:touch@isi.edu>> wrote:
>
>     Hi, all,
>
>     I'd like to add one point.
>
>     This doc gives guidance on creating minor versions, but never
>     addresses
>     major versions.
>
>     IMO, past variants of NFS have not handled major version changes
>     appropriately. Each one has been assigned a new port number. This
>     is no
>     longer recommended practice (see RFC7605, Sec 7.5).
>
>     Is this issue addressed in another document?
>
>     AFAICT, if (when) NFSv5 is developed, it seems to appear to need
>     another
>     port number. If that's the case (and I sincerely hope it isn't),
>     it MUST
>     be the last one assigned to this service.
>
>     Joe
>
>


--------------AC254B0531D11EB8A41583A9
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi, David,</p>
    <p>Thanks for the response, and agreed throughout.<br>
    </p>
    <p>Joe<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 5/25/2017 12:33 PM, David Noveck
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CADaq8jdWgRSqGVt0UBf3sqzp3ivYAW36y1JuNg43HGp5WboKrg@mail.gmail.com">
      <div dir="ltr"><span style="font-size:12.8px">&gt; This doc gives
          guidance on creating minor versions, but never addresses</span><br
          style="font-size:12.8px">
        <span style="font-size:12.8px">&gt; major versions.</span>
        <div><br>
        </div>
        <div>I think we had enough to do addressing minor versions and
          didn't want to</div>
        <div>speculate about a possible v5.  after all, we're the nfsv4
          working group</div>
        <div>and not the nfsvn working group.</div>
        <div><br>
          <br style="font-size:12.8px">
          <span style="font-size:12.8px">&gt; IMO, past variants of NFS
            have not handled major version changes</span><br
            style="font-size:12.8px">
          <span style="font-size:12.8px">&gt; appropriately. Each one
            has been assigned a new port number. This is no</span><br
            style="font-size:12.8px">
          <span style="font-size:12.8px">&gt; longer recommended
            practice (see RFC7605, Sec 7.5).</span><br
            style="font-size:12.8px">
          <br>
          <br>
          Makes sense.</div>
        <div><br>
          <span style="font-size:12.8px">&gt; Is this issue addressed in
            another document?</span><br style="font-size:12.8px">
          <br>
          I don't think so.</div>
        <div><br>
          <span style="font-size:12.8px">&gt; AFAICT, if (when) NFSv5 is
            developed, it seems to appear to need another</span><br
            style="font-size:12.8px">
          <span style="font-size:12.8px">&gt; port number. </span></div>
        <div><span style="font-size:12.8px"><br>
          </span></div>
        <div><span style="font-size:12.8px">I don't see why it would. 
            If there is another Rpc version of the NFS program,</span></div>
        <div><span style="font-size:12.8px">I don't see why the
            appropriate negotiation could be defined.  I think doing\</span></div>
        <div><span style="font-size:12.8px">that would be up to those
            defining nfsv5.</span></div>
        <div><span style="font-size:12.8px"><br>
          </span></div>
        <div><span style="font-size:12.8px">&gt; If that's the case (and
            I sincerely hope it isn't), it MUST</span><br
            style="font-size:12.8px">
          <span style="font-size:12.8px">&gt; be the last one assigned
            to this service.</span><br>
        </div>
        <div><br>
        </div>
        <div>I don't think "MUST" is appropriate in this case but I
          would say that assigning </div>
        <div>another port would be a DAMN SHAME.</div>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Thu, May 25, 2017 at 2:51 PM, Joe
          Touch <span dir="ltr">&lt;<a href="mailto:touch@isi.edu"
              target="_blank" moz-do-not-send="true">touch@isi.edu</a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi, all,<br>
            <br>
            I'd like to add one point.<br>
            <br>
            This doc gives guidance on creating minor versions, but
            never addresses<br>
            major versions.<br>
            <br>
            IMO, past variants of NFS have not handled major version
            changes<br>
            appropriately. Each one has been assigned a new port number.
            This is no<br>
            longer recommended practice (see RFC7605, Sec 7.5).<br>
            <br>
            Is this issue addressed in another document?<br>
            <br>
            AFAICT, if (when) NFSv5 is developed, it seems to appear to
            need another<br>
            port number. If that's the case (and I sincerely hope it
            isn't), it MUST<br>
            be the last one assigned to this service.<br>
            <span class="HOEnZb"><font color="#888888"><br>
                Joe<br>
              </font></span></blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------AC254B0531D11EB8A41583A9--


From nobody Thu May 25 15:43:22 2017
Return-Path: <tom@talpey.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86FA2127B52 for <art@ietfa.amsl.com>; Thu, 25 May 2017 15:43:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.92
X-Spam-Level: 
X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id INbc5WJmDJBP for <art@ietfa.amsl.com>; Thu, 25 May 2017 15:43:12 -0700 (PDT)
Received: from p3plsmtpa09-06.prod.phx3.secureserver.net (p3plsmtpa09-06.prod.phx3.secureserver.net [173.201.193.235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D816129BC4 for <art@ietf.org>; Thu, 25 May 2017 15:43:12 -0700 (PDT)
Received: from [10.137.198.25] ([131.107.147.196]) by :SMTPAUTH: with SMTP id E1QedC8pzqTuIE1QfdErrA; Thu, 25 May 2017 15:40:25 -0700
To: Joe Touch <touch@isi.edu>, David Noveck <davenoveck@gmail.com>
Cc: art@ietf.org, Matthew Miller <linuxwolf+ietf@outer-planes.net>, ietf@ietf.org, draft-ietf-nfsv4-versioning.all@ietf.org, "nfsv4@ietf.org" <nfsv4@ietf.org>
References: <149462145126.13443.7366912235626631179@ietfa.amsl.com> <d64909ad-b71a-a932-606b-8b974cf68140@isi.edu> <CADaq8jdWgRSqGVt0UBf3sqzp3ivYAW36y1JuNg43HGp5WboKrg@mail.gmail.com> <d10f43d7-d136-d9b9-fcfb-dc78a52e1355@isi.edu>
From: Tom Talpey <tom@talpey.com>
Message-ID: <c3ef20a9-f96e-9b26-330a-138036943db8@talpey.com>
Date: Thu, 25 May 2017 15:40:26 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <d10f43d7-d136-d9b9-fcfb-dc78a52e1355@isi.edu>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-CMAE-Envelope: MS4wfFgqD0Unhil59tIg+xyBVNyA8nfVrdu/pl43zl5VLTnxYXaYTJQ5vHzUmi/HSQwbdd0rzNDK2bJmbO+7bbwkA0NNAlSuQfLhaXOfqpJaEXi/WZPeCKIC koow8ZkNj5G7Hr749yuPzogX6ls5jrMAKQEpql0mnhwcQJf8EwDntULSfGCDVdNM2hWxcikf/PITQTwHZe9V2JK3g8vlECQjgc67gAtQbrZVjzppXkYMDui7 J9frzljPjEUofnPJL1PTsed84xcdYWNSwjK2fI6sWM9ykvymW6fY+IZBAFVfxl5wmrJvqoWefOezkw9P3Gdi868HURw00/tIwYgMiAq04CB1rXJQIdLHt3B9 1jVHu9LdmBOQPiFik+8MoKU3cqff8Q==
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/qxK2dB75JvzSbm38seewgPwK9PM>
Subject: Re: [art] [nfsv4] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 May 2017 22:43:13 -0000

On 5/25/2017 3:17 PM, Joe Touch wrote:
> Hi, David,
> 
> Thanks for the response, and agreed throughout.
> 
> Joe
> 
> 
> On 5/25/2017 12:33 PM, David Noveck wrote:
>> > This doc gives guidance on creating minor versions, but never addresses
>> > major versions.
>>
>> I think we had enough to do addressing minor versions and didn't want to
>> speculate about a possible v5.  after all, we're the nfsv4 working group
>> and not the nfsvn working group.
>>
>>
>> > IMO, past variants of NFS have not handled major version changes
>> > appropriately. Each one has been assigned a new port number. This is no
>> > longer recommended practice (see RFC7605, Sec 7.5).

I feel compelled to chime in on this one. NFS has always had a single
assigned port, 2049, which has not changed with major version. In the
NFSv2 days, it was self-assigned by Sun Microsystems, later, in NFSv3,
it was registered with IANA. For both versions, the RPC portmapper was
used by clients to resolve the server port.

In NFSv4, the portmapper is not used, but the port number assignment
did not change. This remains true for all NFSv4 minor versions.

There is one exception - NFS over RDMA received a new port assignment
from IANA, 20049, because the NFSv2 and NFSv3 protocols could not
negotiate the NFS/RDMA listener using legacy portmapping. While the
NFSv4.1+ versions provide a mechanism for that, the static 20049
assignment is still recommended.

Bottom line, the NFS ports are stable and registered, and there is no
need to allocate more, at least as foreseen at this time.

Tom.
>>
>>
>> Makes sense.
>>
>> > Is this issue addressed in another document?
>>
>> I don't think so.
>>
>> > AFAICT, if (when) NFSv5 is developed, it seems to appear to need another
>> > port number. 
>>
>> I don't see why it would. If there is another Rpc version of the NFS 
>> program,
>> I don't see why the appropriate negotiation could be defined.  I think 
>> doing\
>> that would be up to those defining nfsv5.
>>
>> > If that's the case (and I sincerely hope it isn't), it MUST
>> > be the last one assigned to this service.
>>
>> I don't think "MUST" is appropriate in this case but I would say that 
>> assigning
>> another port would be a DAMN SHAME.
>>
>> On Thu, May 25, 2017 at 2:51 PM, Joe Touch <touch@isi.edu 
>> <mailto:touch@isi.edu>> wrote:
>>
>>     Hi, all,
>>
>>     I'd like to add one point.
>>
>>     This doc gives guidance on creating minor versions, but never
>>     addresses
>>     major versions.
>>
>>     IMO, past variants of NFS have not handled major version changes
>>     appropriately. Each one has been assigned a new port number. This
>>     is no
>>     longer recommended practice (see RFC7605, Sec 7.5).
>>
>>     Is this issue addressed in another document?
>>
>>     AFAICT, if (when) NFSv5 is developed, it seems to appear to need
>>     another
>>     port number. If that's the case (and I sincerely hope it isn't),
>>     it MUST
>>     be the last one assigned to this service.
>>
>>     Joe
>>
>>
> 
> 
> 
> _______________________________________________
> nfsv4 mailing list
> nfsv4@ietf.org
> https://www.ietf.org/mailman/listinfo/nfsv4
> 


From nobody Fri May 26 06:56:14 2017
Return-Path: <spencerdawkins.ietf@gmail.com>
X-Original-To: art@ietfa.amsl.com
Delivered-To: art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF63A1295A0; Fri, 26 May 2017 06:56:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level: 
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BJYYDOLbekoA; Fri, 26 May 2017 06:56:10 -0700 (PDT)
Received: from mail-yb0-x236.google.com (mail-yb0-x236.google.com [IPv6:2607:f8b0:4002:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B329129557; Fri, 26 May 2017 06:56:10 -0700 (PDT)
Received: by mail-yb0-x236.google.com with SMTP id p143so2486582yba.2; Fri, 26 May 2017 06:56:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=QbgESz2P5pihaesDmUyn+g7NyG0lkgY6SPwSrI7In2g=; b=PdILL1YdF7KENgyvat8Fbh8sQuCWIecnZ2TcyzPqVp2vv871UQ8bTZip0MAgG3GqAR imnenKPonQSRQc4XXwXaEbGWrQB2NYqJXnnJsBbVijsqZj9UEO6si6IrEZJAxgulkw9h thSwzTJVU3l4trd0o8MEr7NTUW499zDuXE4MmW6qP9EH25QhqH38vLT5EsTkFWQcKcrW VcbIkqA9m09M678mi22K9G01UC72pxPYGlokYrFfiCS1kC4ZoiEBa+rznPWhLOJlgsF9 71CF8zFkwDmyc/KWyHBuhdYBWEUpGECFpLcBV+hoy+yrkh+Jyvof9Q7YbbA3CSMQZDY3 eRaQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=QbgESz2P5pihaesDmUyn+g7NyG0lkgY6SPwSrI7In2g=; b=LwI/e+R0FIz7JrmhjCjiyXtctNjr0gPI4QrgA4gi7BazX7klVF4ibSYdFPqZCBwv/a DgvwX3hYOM7DAl41mY0LUws9O77zW9w6JKqHN7DKVk4oqIiGE9tUgl7al8dXM1hQk2Uf a5360kzsARpnPhb7RAYNcxx0OBuw4erzw9xyLVelWrFdH9M3PGaLkjr8KQ/zOaL05WDq 3omoaThnPmFw8I9OZhLMBVu9bHakmJQt31louFUmsvvlZdsr0ktXmK8EVkNHoCp4o1QV hf2YYLZgI820ZEUespXee1hDQdOW9f5oMLaQ4yrDx7AIEwy4uNzQJk1YMWkcAjzsvowA 5+Jw==
X-Gm-Message-State: AODbwcCKGzPje4cmUx4ZxrtInXIz6ciawZ5p8khHwiK9UqtJePVU3O06 Yi2IFympVApY5UGcXly7ElJQx0FD1g==
X-Received: by 10.37.15.213 with SMTP id 204mr36918032ybp.127.1495806969674; Fri, 26 May 2017 06:56:09 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.195.194 with HTTP; Fri, 26 May 2017 06:56:09 -0700 (PDT)
In-Reply-To: <c3ef20a9-f96e-9b26-330a-138036943db8@talpey.com>
References: <149462145126.13443.7366912235626631179@ietfa.amsl.com> <d64909ad-b71a-a932-606b-8b974cf68140@isi.edu> <CADaq8jdWgRSqGVt0UBf3sqzp3ivYAW36y1JuNg43HGp5WboKrg@mail.gmail.com> <d10f43d7-d136-d9b9-fcfb-dc78a52e1355@isi.edu> <c3ef20a9-f96e-9b26-330a-138036943db8@talpey.com>
From: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
Date: Fri, 26 May 2017 09:56:09 -0400
Message-ID: <CAKKJt-caHQ0B5bs3F4MghJ2h0BT=+vO52YRcz0uNFtw5hBiNwQ@mail.gmail.com>
To: Tom Talpey <tom@talpey.com>
Cc: Joe Touch <touch@isi.edu>, David Noveck <davenoveck@gmail.com>, art@ietf.org, Matthew Miller <linuxwolf+ietf@outer-planes.net>, "ietf@ietf.org" <ietf@ietf.org>,  draft-ietf-nfsv4-versioning.all@ietf.org, "nfsv4@ietf.org" <nfsv4@ietf.org>
Content-Type: multipart/alternative; boundary="001a113f5ae614861805506db374"
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/gAMTpHowo74jocAQWAJ0YzItsFc>
Subject: Re: [art] [nfsv4] Artart last call review of draft-ietf-nfsv4-versioning-09
X-BeenThere: art@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Applications and Real-Time Area Discussion <art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/art>, <mailto:art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/art/>
List-Post: <mailto:art@ietf.org>
List-Help: <mailto:art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/art>, <mailto:art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 26 May 2017 13:56:13 -0000

--001a113f5ae614861805506db374
Content-Type: text/plain; charset="UTF-8"

Hi, Tom,

On Thu, May 25, 2017 at 6:40 PM, Tom Talpey <tom@talpey.com> wrote:

> On 5/25/2017 3:17 PM, Joe Touch wrote:
>
>> Hi, David,
>>
>> Thanks for the response, and agreed throughout.
>>
>> Joe
>>
>>
>> On 5/25/2017 12:33 PM, David Noveck wrote:
>>
>>> > This doc gives guidance on creating minor versions, but never addresses
>>> > major versions.
>>>
>>> I think we had enough to do addressing minor versions and didn't want to
>>> speculate about a possible v5.  after all, we're the nfsv4 working group
>>> and not the nfsvn working group.
>>>
>>>
>>> > IMO, past variants of NFS have not handled major version changes
>>> > appropriately. Each one has been assigned a new port number. This is no
>>> > longer recommended practice (see RFC7605, Sec 7.5).
>>>
>>
> I feel compelled to chime in on this one. NFS has always had a single
> assigned port, 2049, which has not changed with major version. In the
> NFSv2 days, it was self-assigned by Sun Microsystems, later, in NFSv3,
> it was registered with IANA. For both versions, the RPC portmapper was
> used by clients to resolve the server port.
>
> In NFSv4, the portmapper is not used, but the port number assignment
> did not change. This remains true for all NFSv4 minor versions.
>
> There is one exception - NFS over RDMA received a new port assignment
> from IANA, 20049, because the NFSv2 and NFSv3 protocols could not
> negotiate the NFS/RDMA listener using legacy portmapping. While the
> NFSv4.1+ versions provide a mechanism for that, the static 20049
> assignment is still recommended.
>
> Bottom line, the NFS ports are stable and registered, and there is no
> need to allocate more, at least as foreseen at this time.


Thanks for the history on port allocations, which I lacked, and I'm glad
that your answer is the right answer :-)


> Tom.
>
>>
>>>
>>> Makes sense.
>>>
>>> > Is this issue addressed in another document?
>>>
>>> I don't think so.
>>>
>>> > AFAICT, if (when) NFSv5 is developed, it seems to appear to need
>>> another
>>> > port number.
>>> I don't see why it would. If there is another Rpc version of the NFS
>>> program,
>>> I don't see why the appropriate negotiation could be defined.  I think
>>> doing\
>>> that would be up to those defining nfsv5.
>>>
>>> > If that's the case (and I sincerely hope it isn't), it MUST
>>> > be the last one assigned to this service.
>>>
>>> I don't think "MUST" is appropriate in this case but I would say that
>>> assigning
>>> another port would be a DAMN SHAME.
>>>
>>> On Thu, May 25, 2017 at 2:51 PM, Joe Touch <touch@isi.edu <mailto:
>>> touch@isi.edu>> wrote:
>>>
>>>     Hi, all,
>>>
>>>     I'd like to add one point.
>>>
>>>     This doc gives guidance on creating minor versions, but never
>>>     addresses
>>>     major versions.
>>>
>>>     IMO, past variants of NFS have not handled major version changes
>>>     appropriately. Each one has been assigned a new port number. This
>>>     is no
>>>     longer recommended practice (see RFC7605, Sec 7.5).
>>>
>>>     Is this issue addressed in another document?
>>>
>>>     AFAICT, if (when) NFSv5 is developed, it seems to appear to need
>>>     another
>>>     port number. If that's the case (and I sincerely hope it isn't),
>>>     it MUST
>>>     be the last one assigned to this service.
>>>
>>>     Joe
>>>
>>>
>>>
>>
>>
>> _______________________________________________
>> nfsv4 mailing list
>> nfsv4@ietf.org
>> https://www.ietf.org/mailman/listinfo/nfsv4
>>
>>

--001a113f5ae614861805506db374
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi, Tom,<div class=3D"gmail_extra"><br><div class=3D"gmail=
_quote">On Thu, May 25, 2017 at 6:40 PM, Tom Talpey <span dir=3D"ltr">&lt;<=
a href=3D"mailto:tom@talpey.com" target=3D"_blank">tom@talpey.com</a>&gt;</=
span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex"><span class=3D"">On 5/25/201=
7 3:17 PM, Joe Touch wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Hi, David,<br>
<br>
Thanks for the response, and agreed throughout.<br>
<br>
Joe<br>
<br>
<br>
On 5/25/2017 12:33 PM, David Noveck wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
&gt; This doc gives guidance on creating minor versions, but never addresse=
s<br>
&gt; major versions.<br>
<br>
I think we had enough to do addressing minor versions and didn&#39;t want t=
o<br>
speculate about a possible v5.=C2=A0 after all, we&#39;re the nfsv4 working=
 group<br>
and not the nfsvn working group.<br>
<br>
<br>
&gt; IMO, past variants of NFS have not handled major version changes<br>
&gt; appropriately. Each one has been assigned a new port number. This is n=
o<br>
&gt; longer recommended practice (see RFC7605, Sec 7.5).<br>
</blockquote></blockquote>
<br></span>
I feel compelled to chime in on this one. NFS has always had a single<br>
assigned port, 2049, which has not changed with major version. In the<br>
NFSv2 days, it was self-assigned by Sun Microsystems, later, in NFSv3,<br>
it was registered with IANA. For both versions, the RPC portmapper was<br>
used by clients to resolve the server port.<br>
<br>
In NFSv4, the portmapper is not used, but the port number assignment<br>
did not change. This remains true for all NFSv4 minor versions.<br>
<br>
There is one exception - NFS over RDMA received a new port assignment<br>
from IANA, 20049, because the NFSv2 and NFSv3 protocols could not<br>
negotiate the NFS/RDMA listener using legacy portmapping. While the<br>
NFSv4.1+ versions provide a mechanism for that, the static 20049<br>
assignment is still recommended.<br>
<br>
Bottom line, the NFS ports are stable and registered, and there is no<br>
need to allocate more, at least as foreseen at this time.</blockquote><div>=
<br></div><div>Thanks for the history on port allocations, which I lacked, =
and I&#39;m glad that your answer is the right answer :-)</div><div>=C2=A0<=
/div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-le=
ft:1px #ccc solid;padding-left:1ex">Tom.<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><blockquote class=3D"gmail_quote" style=3D"m=
argin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=
=3D"">
<br>
<br>
Makes sense.<br>
<br>
&gt; Is this issue addressed in another document?<br>
<br>
I don&#39;t think so.<br>
<br>
&gt; AFAICT, if (when) NFSv5 is developed, it seems to appear to need anoth=
er<br>
&gt; port number. <br>
I don&#39;t see why it would. If there is another Rpc version of the NFS pr=
ogram,<br>
I don&#39;t see why the appropriate negotiation could be defined.=C2=A0 I t=
hink doing\<br>
that would be up to those defining nfsv5.<br>
<br>
&gt; If that&#39;s the case (and I sincerely hope it isn&#39;t), it MUST<br=
>
&gt; be the last one assigned to this service.<br>
<br>
I don&#39;t think &quot;MUST&quot; is appropriate in this case but I would =
say that assigning<br>
another port would be a DAMN SHAME.<br>
<br></span><span class=3D"">
On Thu, May 25, 2017 at 2:51 PM, Joe Touch &lt;<a href=3D"mailto:touch@isi.=
edu" target=3D"_blank">touch@isi.edu</a> &lt;mailto:<a href=3D"mailto:touch=
@isi.edu" target=3D"_blank">touch@isi.edu</a>&gt;&gt; wrote:<br>
<br>
=C2=A0 =C2=A0 Hi, all,<br>
<br>
=C2=A0 =C2=A0 I&#39;d like to add one point.<br>
<br>
=C2=A0 =C2=A0 This doc gives guidance on creating minor versions, but never=
<br>
=C2=A0 =C2=A0 addresses<br>
=C2=A0 =C2=A0 major versions.<br>
<br>
=C2=A0 =C2=A0 IMO, past variants of NFS have not handled major version chan=
ges<br>
=C2=A0 =C2=A0 appropriately. Each one has been assigned a new port number. =
This<br>
=C2=A0 =C2=A0 is no<br>
=C2=A0 =C2=A0 longer recommended practice (see RFC7605, Sec 7.5).<br>
<br>
=C2=A0 =C2=A0 Is this issue addressed in another document?<br>
<br>
=C2=A0 =C2=A0 AFAICT, if (when) NFSv5 is developed, it seems to appear to n=
eed<br>
=C2=A0 =C2=A0 another<br>
=C2=A0 =C2=A0 port number. If that&#39;s the case (and I sincerely hope it =
isn&#39;t),<br>
=C2=A0 =C2=A0 it MUST<br>
=C2=A0 =C2=A0 be the last one assigned to this service.<br>
<br>
=C2=A0 =C2=A0 Joe<br>
<br>
<br>
</span></blockquote>
<br>
<br>
<br>
______________________________<wbr>_________________<br>
nfsv4 mailing list<br>
<a href=3D"mailto:nfsv4@ietf.org" target=3D"_blank">nfsv4@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/nfsv4" rel=3D"noreferrer" =
target=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/nfsv4</a><br>
<br>
</blockquote>
</blockquote></div><br></div></div>

--001a113f5ae614861805506db374--

