Re: [Ace] Alexey Melnikov's Discuss on draft-ietf-ace-coap-est-17: (with DISCUSS and COMMENT)

"Panos Kampanakis (pkampana)" <pkampana@cisco.com> Fri, 27 December 2019 05:20 UTC

Return-Path: <pkampana@cisco.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D18B12006D; Thu, 26 Dec 2019 21:20:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.501
X-Spam-Level:
X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=gDoUTpu5; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=ZF6S2KaF
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id on1JDo5saFnB; Thu, 26 Dec 2019 21:20:10 -0800 (PST)
Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BE6B12001E; Thu, 26 Dec 2019 21:20:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=19738; q=dns/txt; s=iport; t=1577424010; x=1578633610; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=3VCl8PpjNz9nW5xYq/J5UBi5fZHAJIElH5BDCDLmwts=; b=gDoUTpu5hMJaC+tf3hzEp3ImvZd8xXJl3BfuN7WtLJyXxlmfvYlgVg2a ZiRTlud2r1ZhYPdGtExMDLRnhWjd2S2a+pSybQyNq8e3nID5TYIeAFHF7 QSB2Fs6AowwYgn4j5hPveVgNps5Or5l/yxVp+TRNQvxpMkx4C6eJx4qxT k=;
X-Files: smime.p7s : 4024
IronPort-PHdr: 9a23:HGIH6xZhQZ2wTNq7qurwyRX/LSx94ef9IxIV55w7irlHbqWk+dH4MVfC4el20gabRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn1NksAKh0olCc+BB1f8KavybCU/BM1EXXdu/mqwNg5eH8OtL1A=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0A/BgDVkwVe/5NdJa1kHAEBAQEBBwEBEQEEBAEBgXyBJS9QBWwrLSAECyqECINGA4p5gl+TKIRhglIDVAIHAQEBCQMBASUIAgEBhEACgh8kOBMCAw0BAQQBAQECAQUEbYU3DIVeAQEBAQMSEQoTAQE3AQ8CAQYCDgMEAQEoAwICAjAUCQgCBAoEBQgGFIMBgXlNAx8PAQIMjnmQZAKBOIhhdYEygn4BAQWBNQGDSxiCBQcDBoE2gVOKRhqBQT+BEUeCTD6CZAEBgWUVFgmCWjKCLJAEOY84jyIKgjSDYYI3gRuPAZpXlySSBAIEAgQFAg4BAQWBaSKBWHAVgydQGA2NEjiDO4pTdAqBHpImAQE
X-IronPort-AV: E=Sophos;i="5.69,361,1571702400"; d="p7s'?scan'208,217";a="410611159"
Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Dec 2019 05:20:08 +0000
Received: from XCH-RCD-009.cisco.com (xch-rcd-009.cisco.com [173.37.102.19]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xBR5K8cM026461 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 27 Dec 2019 05:20:08 GMT
Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-009.cisco.com (173.37.102.19) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 26 Dec 2019 23:20:07 -0600
Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 26 Dec 2019 23:20:07 -0600
Received: from NAM04-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 26 Dec 2019 23:20:06 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GsOartDH9mq+wzEUSKqqsQ0XcnXSxvQxftYHsW4509J5v6aVnF4t2bf24DXR4zi57Nxh5FgO1/1iAacXV6U56q5eSF+nYP8h2x/3gw81+4WDA7N3fUdsaJ0KLV3vfGDy2I7tSulSlMs4AJUT+elARW2USmqDJlpwLszhmO0kqMHf4U9U7MjYTplsCLmkCdOXsg/CM5D3J+3k8A0SHh27L1EwdAXoUvrCtEmkelVsOYEae6vHeuZ7GtcqOirKSwBQ8mQtRLumMXDfLfCuJh4v/gwEuHfpbQC9QER+9Z92+sxdEF38haMe4J8bkAPzyP121qx3uPxjKM9X5lfneyW9GA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fLDHrTqBTab+8Cqodfae4kNvHEuq1a9XTY1N8biHFuw=; b=Hz6EEZkEKwxViJC8IM0AICpHaOuHsAV9WHYvKX6rzK3AB+aLjcXZaqwZaIHCI5Fc3Hd1Gy3M50fOFrIOSrWxa9OjtScir0LLaA6iFvhSBrSGhc1Hpsiemo2WbAy/nsAACYM6DLQ2gixRZ/eJsxVj5fczclghm9mzUB5IH4fn1WtBoApmDWYL6UoJl4XnMFlwaPd5NXjROCVcC2nW1hRwos5zQy3lcJbz1PsjpKGjR8ktz6AFBSuGOTgAAwrFjlUL72KTTtDnyPeHA/ZUZbT17RcQivgStK1GRBjh7KmlYP0DiCXg/L0J6ubuoUVZ7z0fBR2h9Ysb41e0iVhpYWE7jQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fLDHrTqBTab+8Cqodfae4kNvHEuq1a9XTY1N8biHFuw=; b=ZF6S2KaF9cLRm5YQQ6sLU3DGH7p8My0vncSi74CMOGGj2qpNpu7hrWMm+rS7jTqHl6z+/amd67X7AtVVaGXniOWlNLiuWuQxaESRqTxF5kRKfdwuQtKd5alZoUfqw/1q2WPFKz3I2ZxEv8J/5mPKFWLyf3aX71/Gdl60J+B8D54=
Received: from BN7PR11MB2547.namprd11.prod.outlook.com (52.135.255.146) by BN7PR11MB2545.namprd11.prod.outlook.com (52.135.244.27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2581.11; Fri, 27 Dec 2019 05:20:05 +0000
Received: from BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::e03c:e55a:c03f:5f4f]) by BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::e03c:e55a:c03f:5f4f%7]) with mapi id 15.20.2581.007; Fri, 27 Dec 2019 05:20:04 +0000
From: "Panos Kampanakis (pkampana)" <pkampana@cisco.com>
To: Alexey Melnikov <aamelnikov@fastmail.fm>
CC: "ace-chairs@ietf.org" <ace-chairs@ietf.org>, Jim Schaad <ietf@augustcellars.com>, Ace Wg <ace@ietf.org>, The IESG <iesg@ietf.org>, "draft-ietf-ace-coap-est@ietf.org" <draft-ietf-ace-coap-est@ietf.org>
Thread-Topic: [Ace] Alexey Melnikov's Discuss on draft-ietf-ace-coap-est-17: (with DISCUSS and COMMENT)
Thread-Index: AQHVuZ9MKws1vJPug0iD63ohArWgxKfNdnxQ
Date: Fri, 27 Dec 2019 05:20:04 +0000
Message-ID: <BN7PR11MB2547408F79E742E622F75E6EC92A0@BN7PR11MB2547.namprd11.prod.outlook.com>
References: <157667562611.29907.6804425237641037015.idtracker@ietfa.amsl.com> <20191220004728.GF35479@kduck.mit.edu> <d798b1a3-8462-4605-a8d1-71fd9c3b6421@www.fastmail.com> <CAAzbHvZdLMQyX_wpeVCErzqS=0q9n5b-XbXfGDN_2iQAGRX6Yw@mail.gmail.com> <12E7D8E7-8354-4700-B92E-A07A9BC4B881@tzi.org> <32540abd39940ad245e3c814e64a40e7@bbhmail.nl> <f1704915-d073-4bca-a933-9fc26a1d70b4@www.fastmail.com>
In-Reply-To: <f1704915-d073-4bca-a933-9fc26a1d70b4@www.fastmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=pkampana@cisco.com;
x-originating-ip: [2001:420:c0c4:1003::61]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 76f1aa3b-58a0-4a6a-56d5-08d78a8c6e76
x-ms-traffictypediagnostic: BN7PR11MB2545:
x-microsoft-antispam-prvs: <BN7PR11MB2545C41F3B6310C0B96641E8C92A0@BN7PR11MB2545.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-forefront-prvs: 0264FEA5C3
x-forefront-antispam-report: SFV:NSPM; SFS:(10001)(10009020)(39860400002)(396003)(376002)(136003)(366004)(346002)(189003)(199004)(53754006)(2906002)(33656002)(66556008)(71200400001)(86362001)(9686003)(66476007)(55016002)(81156014)(8676002)(966005)(66446008)(8936002)(81166006)(64756008)(66946007)(66616009)(76116006)(186003)(9326002)(52536014)(4326008)(6506007)(7696005)(53546011)(54906003)(4001150100001)(478600001)(316002)(5660300002)(6916009); DIR:OUT; SFP:1101; SCL:1; SRVR:BN7PR11MB2545; H:BN7PR11MB2547.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="2.16.840.1.101.3.4.2.1"; boundary="----=_NextPart_000_0007_01D5BC4B.61E36800"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 76f1aa3b-58a0-4a6a-56d5-08d78a8c6e76
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Dec 2019 05:20:04.8259 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: QaQ+hj2dVkH3r1MITgBtPq8ONyg7Iiiv/ryfNxx00Ow8KKhqjSl6ag5B4emVCViAGzGSENPa1wGU6wjRisSLtg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR11MB2545
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.19, xch-rcd-009.cisco.com
X-Outbound-Node: rcdn-core-11.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/IC7c9vfqfRf1dysnmRTXL7bldpw>
Subject: Re: [Ace] Alexey Melnikov's Discuss on draft-ietf-ace-coap-est-17: (with DISCUSS and COMMENT)
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Dec 2019 05:20:12 -0000

Hi Alexey, 

 

This commit https://github.com/SanKumar2015/EST-coaps/commit/77d65f0eb7a28282f363e5e48cd0d28970f9366e should address your feedback. The full discussion is in https://github.com/SanKumar2015/EST-coaps/issues/155 

 

Let us know if it does not make sense. 

 

Rgs,

Panos

 

From: Ace <ace-bounces@ietf.org> On Behalf Of Alexey Melnikov
Sent: Monday, December 23, 2019 9:42 AM
To: consultancy@vanderstok.org; Carsten Bormann <cabo@tzi.org>
Cc: ace-chairs@ietf.org; Jim Schaad <ietf@augustcellars.com>; Benjamin Kaduk <kaduk@mit.edu>; Ace Wg <ace@ietf.org>; The IESG <iesg@ietf.org>; draft-ietf-ace-coap-est@ietf.org; Klaus Hartke <hartke@projectcool.de>
Subject: Re: [Ace] Alexey Melnikov's Discuss on draft-ietf-ace-coap-est-17: (with DISCUSS and COMMENT)

 

Hi Peter,

 

On Mon, Dec 23, 2019, at 9:12 AM, Peter van der Stok wrote:

HI all,

 

We had this discussion about this specific text several times.

I like to keep at least some text for the following reason:

Implementers, new to coap without a photographic memory of RFC7252 text, are surprised by the absence of uri host in the examples, and tend to assume an error.

 

The curent text does not look like a "normative rephrasing" to me. 

Nevertheless, is the suggestion below acceptable to everyone?

 

OLD

 

The Uri-Host and Uri-Port Options can be omitted if they coincide

   with the transport protocol destination address and port

   respectively.  Explicit Uri-Host and Uri-Port Options are typically

   used when an endpoint hosts multiple virtual servers and uses the

   Options to route the requests accordingly.

 

NEW

Section 5.10.1 of RFC7252 specifies that the Uri-Host and Uri-Port Options can be omitted if they coincide

   with the transport protocol destination address and port

   respectively. 

 

Other suggestions are welcome.

Your suggested text is much better.

 

Thank you,

Alexey

Peter

Carsten Bormann schreef op 2019-12-20 18:16:

On Dec 20, 2019, at 17:34, Klaus Hartke <hartke@projectcool.de <mailto:hartke@projectcool.de> > wrote: 

 

I would prefer if draft-ietf-ace-coap-est didn't say anything here,

since the Uri-Host and Uri-Port options and whether they should be

omitted or not is entirely specified by CoAP [RFC7252].*

 

Klaus has an important point here.

 

We need to be **much more** vigilant about specifications messing with their normative references.

Saying how they are used, yes, but re-stating (or, worse, re-interpreting) normative material from those references is prone to creating dialects that no longer interoperate with their unadulterated originals.  Unless these are hopelessly broken(*) and this is the only way to fix them, this is a MUST NOT.

 

Grüße, Carsten

 

(*) the normative reference EST has an example for that case: The use of content-transfer-encoding with HTTP, which is explicitly ruled out in Section 19.4.5 of RFC 2616 (and now appendix A.5 of RFC 7231).  That was a count of RFC 7030 messing with a normative reference, and in turn **needed** to be messed with in CoAP-EST (and eventually needs to be fixed in the parent specification, too).