IETF Logo Mail Archive

Re: [Ace] AD review of draft-ietf-ace-cmpv2-coap-transport-07

Mohit Sahni <mohit06jan@gmail.com> Thu, 30 March 2023 18:22 UTC

Return-Path: <mohit06jan@gmail.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B15AC15C29F; Thu, 30 Mar 2023 11:22:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.094
X-Spam-Level:
X-Spam-Status: No, score=-2.094 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hGWw6MFqLtf9; Thu, 30 Mar 2023 11:22:34 -0700 (PDT)
Received: from mail-yb1-xb32.google.com (mail-yb1-xb32.google.com [IPv6:2607:f8b0:4864:20::b32]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DF67C1526FF; Thu, 30 Mar 2023 11:22:34 -0700 (PDT)
Received: by mail-yb1-xb32.google.com with SMTP id r187so24641815ybr.6; Thu, 30 Mar 2023 11:22:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; t=1680200553; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=RaDkp3jkFyn0oo6mRtDt6lZt3jM6s1TYTOOW5vkxH70=; b=ltj8/dx0YYol0OarV5Qg5hojt/Y1klCGIfAzZRv3ckgcj8IzHWBD/eOZ1CrWO8VQXZ Q0Wk5oj6O5VeM9VB2Zcy626lSSJM0iDBO8mx6Id+a6TcIMJzLo7/ae/Cl5G+wB/oooLR c1K7bRKOFidiP+ZcmKfrIRcEfUQL7+FVg6Q9shmeNFri6IMSZgE8q+coR2fJHou3rX0C WVAYA0IUsU7pBsirahzHewLEDlJGPlkrLECwedABGm8MVfAVJp7Ih0eKo2YuZAP1eQ1j 0swmB2HPgSP+eaHY3HrOD3l5xLvO6K8NNLbao2UG5y1K9ABYsqww1SKjRzUZXG4KazFj u9Ew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1680200553; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=RaDkp3jkFyn0oo6mRtDt6lZt3jM6s1TYTOOW5vkxH70=; b=TaDONvh6M/jQLxH3nyZFGXGbjoHqP19fF4ifgddqzhu+2vnT1F1ncepK/nJsrkTVPG Ya5K05lZ/dE18ILESKQD5PRmlVW3CxaQnVCZC5cbHGYzllH3X+XCOTghD9C6S0Z62RY7 XA5aZXS9rs8AG3WoS04qQn6g94c1Ub2p3wWpjMWDJnkYLwPiTlo8xur74HqwKy2V0WtZ V8zQ1gC0u5Dmh+KiaAdjmDmwvFqmllbl45nUuxZTrHIyhe3xoS/4nuIeYgBL9SnpRhKV QMDamMPFY+QBkcnm2FJe4oMdGZikU26c8owsSQ6/hRD5GS5BD49HTWsKglKqoY5T2Xot MMFQ==
X-Gm-Message-State: AAQBX9eyMDTJLstYsz0D2yfVSb7TuoCGB91+mH2UPCtFMuBBwiIwzs7b XIDiStFRkZ7X1fSMdTBI2OU1azwlcQL/xH9Ttv0FyLML
X-Google-Smtp-Source: AKy350aGHi48bCIx8ljCNJJHMWBjagHcqllVzNXKTzJXVNWPXjCdsomtApnQRD2pKCz0+Cyl1ewM7ZmZUWEan/6uBMs=
X-Received: by 2002:a05:6902:1201:b0:b6c:4d60:1bd6 with SMTP id s1-20020a056902120100b00b6c4d601bd6mr16688876ybu.9.1680200553140; Thu, 30 Mar 2023 11:22:33 -0700 (PDT)
MIME-Version: 1.0
References: <CAGL5yWZEWE5LfRQ+bNn2mRLo8XPyyaVzvEWAGQLMa6QXvKwabA@mail.gmail.com> <CAMRcsGR44FDPL-KuJ68yoP=6xHEnZnrx=af2888Ow5A=XV-TFw@mail.gmail.com> <CAMRcsGTron7s6O9GB=F3KSzkyouXoAZuw-hXPo-34ud6ePYNtg@mail.gmail.com> <CAGL5yWZQc+dNbHjb58P0Gi2NU_A5wd52bPaxfDH9NKoGyNW2iA@mail.gmail.com>
In-Reply-To: <CAGL5yWZQc+dNbHjb58P0Gi2NU_A5wd52bPaxfDH9NKoGyNW2iA@mail.gmail.com>
From: Mohit Sahni <mohit06jan@gmail.com>
Date: Thu, 30 Mar 2023 11:22:22 -0700
Message-ID: <CAEpwuw3aw15mH29dXf=sXBzJ7iWieB0rYHpVgGkj1DzK32jQJQ@mail.gmail.com>
To: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>
Cc: Mohit Sahni <msahni@paloaltonetworks.com>, ace@ietf.org, draft-ietf-ace-cmpv2-coap-transport@ietf.org
Content-Type: multipart/alternative; boundary="0000000000001f179005f8222d6d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/kz-RP321_a_QqvU94lox6FtA-Sw>
Subject: Re: [Ace] AD review of draft-ietf-ace-cmpv2-coap-transport-07
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Mar 2023 18:22:38 -0000

Thanks Paul, I will upload a new version today.


On Wed, Mar 29, 2023 at 9:33 PM Paul Wouters <paul.wouters=
40aiven.io@dmarc.ietf.org> wrote:

>
>
>
> On Fri, Mar 10, 2023 at 4:12 AM Mohit Sahni <msahni@paloaltonetworks.com>
> wrote:
>
> [ proposed changes / confirmations in the xml file ]
>
> I have read the xml diff and I agree with all changes made.
>
>
>
>> Just noticed an incomplete response for this comment, responding again to
>> it.
>>
>> >The next bullet I just do not understand:
>> >
>> >        In order to to reduce the risks imposed by DoS attacks, the
>> >        implementations SHOULD optimally use the available datagram size
>> >        i.e. avoid small datagrams containing partial CMP PKIMessage
>> data.
>> >
>> >Please explain what is meant here and/or rephrase it.
>>
>> <M.S.>The intent here is to instruct clients to send CMP messages in as
>> few packets as possible. Fragmentation of CMP messages may cause the server
>> to buffer packets which will consume resources on the server. With clients
>> instructed to send CMP messages in as few packets as possible, servers can
>> choose to ignore fragmented CMP messages to mitigate such DOS attacks.
>>
>>
> So maybe:
>
> Implementations SHOULD use the available datagram size and avoid small
> datagrams containing partial CMP PKIMessage data in order to reduce memory
> usage for packet buffering.
>
> Please submit a new version to the datatracker with these changes, so we
> can start the IETF Last Call.
>
> Paul
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>

v2.23.0 | Report a Bug | By Email