Re: [6lo] Benjamin Kaduk's Discuss on draft-ietf-6lo-minimal-fragment-12: (with DISCUSS and COMMENT)

"Pascal Thubert (pthubert)" <pthubert@cisco.com> Wed, 04 March 2020 18:07 UTC

Return-Path: <pthubert@cisco.com>
X-Original-To: 6lo@ietfa.amsl.com
Delivered-To: 6lo@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 216263A13DD; Wed, 4 Mar 2020 10:07:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.598
X-Spam-Level:
X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=IuA1y+4O; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=HnA9E0Da
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a5s8T7G9yDdO; Wed, 4 Mar 2020 10:07:41 -0800 (PST)
Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD3CF3A13DA; Wed, 4 Mar 2020 10:07:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2253; q=dns/txt; s=iport; t=1583345260; x=1584554860; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=tu8UqhwfyS2Cv87qGw8oM2V88lx04Y5Iw6711+CnYuA=; b=IuA1y+4OX5WSTv7J+0QIRXmlIECCJR9nNvYLQx+WrQZzVJlL6tW402HK 9Y2+b3zjIRmD2ryM0lhpf2BHu1M1/su6ErUTgjUag0Mg4Mu8STLf6228U 8lAKVtd7U9hemWHOQ4mf4SqZfVpLvSus8KH2CAku/tai0oJDVK38HAgl+ I=;
IronPort-PHdr: 9a23:x5CH1R0xv0nUxWu2smDT+zVfbzU7u7jyIg8e44YmjLQLaKm44pD+JxKGt+51ggrPWoPWo7JfhuzavrqoeFRI4I3J8RVgOIdJSwdDjMwXmwI6B8vQEVH7MfTndTASF8VZX1gj9Ha+YgBY
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0CRBQBB7V9e/4wNJK1mDg4BAQEBAQcBAREBBAQBAYF7gVRQBWxYIAQLKodbA4pqgl+YFYFCgRADVAkBAQEMAQElCAIEAQGEQwKCASQ4EwIDAQELAQEFAQEBAgEFBG2FVgyFYwEBAQECARIoBgEBNwEPAgEINgULMiUCBAENDRqDBYJKAw4gAQ6iZgKBOYhigieCfwEBBYUgGIIMAwaBOIwnGoFBP4FYgk0+gmQCAgEZgQ88g0GCLI1xknCOT3AKgjyHUo8wgkmIH5BJjnKBTYcvkk8CBAIEBQIOAQEFgWkigVhwFYMnUBgNjh04gzuFFIUEPXQCgSeNHwEB
X-IronPort-AV: E=Sophos;i="5.70,514,1574121600"; d="scan'208";a="736915626"
Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 04 Mar 2020 18:07:39 +0000
Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id 024I7d7l008628 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 4 Mar 2020 18:07:39 GMT
Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 4 Mar 2020 12:07:39 -0600
Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 4 Mar 2020 13:07:38 -0500
Received: from NAM04-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 4 Mar 2020 12:07:38 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iwOazep5SDiXA2kVF3Wvd8U7unfVD4d1CbJ1pWe3rwgkPWLxnU2X2W/z1lb31xcFZJJ3Zl+vJYifNmO8ytEDOqTl11yCI55fLQm1XoP+S2d2CDub4iM9vy2YddAgL+4FON2tUiq0xUFvCjOZ3cw8SWe8ifRdgnMaNSGOxYn1AzR8Oad/yk82vUcyC/iL0KIQD1lW10cAdCx0cWT3bATduubSXJT7ltPKDHICYmEKSq8JH+6oJ6Xe5nPhSxKNj9cgnALF5Eh6WMQgrq1hKGaqO/so+chpUdg084Vz7Pc/YNC49G7gXZZ1I26kRLN/QvVy48gvqM41QWQsAu5FnYUX3Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=ROG1+Qtx9ULA0UCAR6oc41V5lwvjbNwWY+24AoR96x0=; b=jI+csC1Y6VXQOFc7TTgBEPvQdy9Itara8C3t7lgyEcc7hs5rCN0RByFEPtKQeJIKjsOeC1uxwXQHtIpYcfN9TOsiJmd9PeEieix7xJ7EYbSB0rQ4NI8cvHnuUnB0WNg2zSP5Nd+sVXlA63DxZil0Q+Egy+E8LSM62a+FDmbPiOD5dz6WVahLOZtIoOvxdCmncXl95sdq0KOg5fw4GposT188dimtvT6F3Ke1E0ZsyERA9LcdabVbo7CijTSwOTfDLDXyA4J8zBuh3GOhrzxRHp3Nyl3w/8Jh2WznjIzRLSQV35DVuZGDkjIvc6FNUJRYEy1JUR61mZQRhU8GBETmFA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ROG1+Qtx9ULA0UCAR6oc41V5lwvjbNwWY+24AoR96x0=; b=HnA9E0DaZrC73v7/z+tsiv0fCohGOQyWJBq4JPF7ekymEYnFxhWNEhif9bWq/qzQ/FukPxQvNTI+SduKAi5XiZIf1Y0u54Nl7KClFNWEaPGDDgzRokM3U1nfEcnTzPi7xPxB0MYRHcgAwarc/bBHh7nKl9OjmWuU1+YwKWhoMCY=
Received: from MN2PR11MB3565.namprd11.prod.outlook.com (2603:10b6:208:ea::31) by MN2PR11MB4645.namprd11.prod.outlook.com (2603:10b6:208:269::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2772.15; Wed, 4 Mar 2020 18:07:37 +0000
Received: from MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::edba:2b0f:7341:2c24]) by MN2PR11MB3565.namprd11.prod.outlook.com ([fe80::edba:2b0f:7341:2c24%6]) with mapi id 15.20.2772.019; Wed, 4 Mar 2020 18:07:37 +0000
From: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
To: Benjamin Kaduk <kaduk@mit.edu>, The IESG <iesg@ietf.org>
CC: "6lo-chairs@ietf.org" <6lo-chairs@ietf.org>, "carlesgo@entel.upc.edu" <carlesgo@entel.upc.edu>, "draft-ietf-6lo-minimal-fragment@ietf.org" <draft-ietf-6lo-minimal-fragment@ietf.org>, "6lo@ietf.org" <6lo@ietf.org>
Thread-Topic: [6lo] Benjamin Kaduk's Discuss on draft-ietf-6lo-minimal-fragment-12: (with DISCUSS and COMMENT)
Thread-Index: AQHV5hsAGAtSqpJOyEG7IegC943yL6g40lww
Date: Wed, 04 Mar 2020 18:07:31 +0000
Deferred-Delivery: Wed, 4 Mar 2020 18:07:00 +0000
Message-ID: <MN2PR11MB35655CB7CFD19C275C07B254D8E50@MN2PR11MB3565.namprd11.prod.outlook.com>
References: <158200315586.4970.7352556140284234422.idtracker@ietfa.amsl.com>
In-Reply-To: <158200315586.4970.7352556140284234422.idtracker@ietfa.amsl.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=pthubert@cisco.com;
x-originating-ip: [2a01:cb1d:4ec:2200:298f:6314:b7bc:cce8]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c4ba71dc-4520-467e-8706-08d7c066ec27
x-ms-traffictypediagnostic: MN2PR11MB4645:
x-microsoft-antispam-prvs: <MN2PR11MB4645A20100CA1CEA7F72E8FFD8E50@MN2PR11MB4645.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0332AACBC3
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(366004)(346002)(136003)(39860400002)(376002)(199004)(189003)(66476007)(6666004)(66556008)(76116006)(64756008)(9686003)(66446008)(71200400001)(33656002)(6506007)(186003)(7696005)(55016002)(66946007)(316002)(81156014)(81166006)(8676002)(4326008)(5660300002)(54906003)(110136005)(478600001)(86362001)(52536014)(2906002)(966005)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR11MB4645; H:MN2PR11MB3565.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata: 1/ItvBYpnnb35+H1qu09jE8bppTPF5DMqyePbgemFkls4vcr99KoaCQTZfxBvoYghN/RMSlIAyjPAJlfuaD6/BjQXQUD+TYujwn63gNBIjj7xlnK0hAw94lZnt0olZF9Y+hDLzzLUbPdxIErBB7cZvo1s6tlgn2ZWyeJdwd77DfAoaBPLUL4xbccH2i+gwDT8QEGLwAhCOnnWrmQiGf5LQ==
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: c4ba71dc-4520-467e-8706-08d7c066ec27
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Mar 2020 18:07:37.6075 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CL/E8jW14L98OhigCFebao6dX9FWceaZJ6DaSxtlLWvF1ObJtEypANtXzGmcar37K/bJ+9ihgLQb57h6X7NjUg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4645
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com
X-Outbound-Node: alln-core-7.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/6lo/lob3yVHeEDDGHAQB2lYJPzSSUgk>
Subject: Re: [6lo] Benjamin Kaduk's Discuss on draft-ietf-6lo-minimal-fragment-12: (with DISCUSS and COMMENT)
X-BeenThere: 6lo@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Mailing list for the 6lo WG for Internet Area issues in IPv6 over constrained node networks." <6lo.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/6lo>, <mailto:6lo-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/6lo/>
List-Post: <mailto:6lo@ietf.org>
List-Help: <mailto:6lo-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/6lo>, <mailto:6lo-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Mar 2020 18:07:45 -0000

Dear Benjamin

Many thanks for your  review this time again!

I answered the track question separately (with you and Mirja), this is a conscious discussion that was debated with Suresh in Singapore, we decided for STD track and made the changes accordingly.

Let's address the DISCUSS first, more tomorrow on the COMMENTs

> ----------------------------------------------------------------------
> DISCUSS:
> ----------------------------------------------------------------------
> 
> I think we need to be more explicit (whether inline or by reference) about
> what "Secure joining and the Link-Layer security that it sets up"
> (Section 7) entails in terms of ensuring that access to the LLN is only available
> to authenticated and authorized entities.  It might be worth doing so as
> explicit assumptions or an applicability statement early in the document
> (e.g., the Introduction).

For one thing, in https://tools.ietf.org/rfcdiff?url2=draft-ietf-6lo-minimal-fragment-05.txt text was moved that makes this unreadable.

Changed the first paragraph of the intro to:
"
   The original 6LoWPAN fragmentation is defined in [RFC4944] for use
   over a single Layer 3 hop, though possibly multiple Layer 2 hops in a
   mesh-under network, and was not modified by the [RFC6282] update.
   6LoWPAN operations including fragmentation depend on a Link-Layer
   security that prevents any rogue access to the network.
"
 
> 
> Also, in Section 2.3 we refer to the datagram_tag plus layer-2 sender address
> as being "a globally unique identifier for the datagram", but I think this can
> only hold within some time-bounded window (e.g., the lifetime of the
> packet), since the tag space is finite and reuse somewhat inevitable.

This is certainly correct was better make it explicit. What about:
"
   datagram_tag:  An identifier of a datagram that is locally unique to
      the Layer 2 sender.  Associated with the MAC address of the
      sender, this becomes a globally unique identifier for the datagram
      within the duration of its transmission.

"

Please let me know if that addresses your DISCUSS so I can move on with the COMMENTS

Many thanks again!

Pascal