Re: [alto] Eric Rescorla's Discuss on draft-ietf-alto-multi-cost-08: (with DISCUSS)

"Randriamasy, Sabine (Nokia - FR/Nozay)" <sabine.randriamasy@nokia-bell-labs.com> Tue, 25 April 2017 17:49 UTC

Return-Path: <sabine.randriamasy@nokia-bell-labs.com>
X-Original-To: alto@ietfa.amsl.com
Delivered-To: alto@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6089713013D; Tue, 25 Apr 2017 10:49:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.7
X-Spam-Level:
X-Spam-Status: No, score=-4.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dXJwiOM8QIkX; Tue, 25 Apr 2017 10:49:05 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0123.outbound.protection.outlook.com [104.47.0.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 587AE131724; Tue, 25 Apr 2017 10:49:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector2-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mziBu37hAjizOfXYedkQVYkwUvh/UYueL1Ro22D/9jo=; b=KGUaZhV1sEBPXFzDT3Iuit2oEcJNziAhvJ++GqWxflbfNcP2wd2MB0aX0clOLz+7uwF0ZRVfZBJBvSbeHyFxSyzjfQpcJ6nbsWmYvbW/E6kbaShgLZ2tc0xKY3xRuAKQgPnXTCyHHHsh+8h6idS09v8YArTbXeTpX/aoUZhw2ug=
Received: from DB6PR0701MB2454.eurprd07.prod.outlook.com (10.168.75.147) by DB6PR0701MB2453.eurprd07.prod.outlook.com (10.168.75.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1061.6; Tue, 25 Apr 2017 17:49:02 +0000
Received: from DB6PR0701MB2454.eurprd07.prod.outlook.com ([10.168.75.147]) by DB6PR0701MB2454.eurprd07.prod.outlook.com ([10.168.75.147]) with mapi id 15.01.1061.011; Tue, 25 Apr 2017 17:49:02 +0000
From: "Randriamasy, Sabine (Nokia - FR/Nozay)" <sabine.randriamasy@nokia-bell-labs.com>
To: Eric Rescorla <ekr@rtfm.com>
CC: The IESG <iesg@ietf.org>, "draft-ietf-alto-multi-cost@ietf.org" <draft-ietf-alto-multi-cost@ietf.org>, "alto-chairs@ietf.org" <alto-chairs@ietf.org>, "ietf@j-f-s.de" <ietf@j-f-s.de>, "alto@ietf.org" <alto@ietf.org>
Thread-Topic: Eric Rescorla's Discuss on draft-ietf-alto-multi-cost-08: (with DISCUSS)
Thread-Index: AQHSsxeykvXSyB2hDEeHNZAOAQklyKHWbcyggAADF4CAAAFCYA==
Date: Tue, 25 Apr 2017 17:49:02 +0000
Message-ID: <DB6PR0701MB2454E0C17F9823E9C0D232E4951E0@DB6PR0701MB2454.eurprd07.prod.outlook.com>
References: <149195174602.15710.12028453376853096422.idtracker@ietfa.amsl.com> <DB6PR0701MB2454099B8928AC25AB935219951E0@DB6PR0701MB2454.eurprd07.prod.outlook.com> <CABcZeBNRUzXZf20uc70UNBB-xz0OVhHqihD3e8tW-oo7xpnV9Q@mail.gmail.com>
In-Reply-To: <CABcZeBNRUzXZf20uc70UNBB-xz0OVhHqihD3e8tW-oo7xpnV9Q@mail.gmail.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: rtfm.com; dkim=none (message not signed) header.d=none;rtfm.com; dmarc=none action=none header.from=nokia-bell-labs.com;
x-originating-ip: [135.245.212.18]
x-microsoft-exchange-diagnostics: 1; DB6PR0701MB2453; 7:eUoifhiclBw1gpIz8dn8YrnHOTWGH+ZLFbqzjqtFead0L8tSAeuKJDyZ4Rxl3GCX5Xhwf/bFlCwhFWCltl0lAe819mYOlP1ClUVKHsaDXIw63XwxCMrly4Gqh+/weR+q2j1pdp5Dclk7CzJhVCtBEgutSAFO2sg7E3yql6gsSYAMFgzUsBBxbclBRbBzc1Z9uvcKxERw6Z8K6W9ipu92dbX3bkCc9HfeAK9u0MMH073Fr3oPssI/jwomb81dDAY1Guy8MPCJ+SiSOt4K8Cfa9JbLA0iExi4TPHgHp/mSZ9rKCNwLF/gimUHZvsDzFwSPe6rt7nEnp8+um1uYa31UHg==
x-ms-office365-filtering-correlation-id: 34096f72-25d8-42ba-a0cd-08d48c035c08
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:DB6PR0701MB2453;
x-microsoft-antispam-prvs: <DB6PR0701MB245399E01803E5EB87A97F76951E0@DB6PR0701MB2453.eurprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(278428928389397)(120809045254105)(192374486261705)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(93006095)(93001095)(6055026)(6041248)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123560025)(20161123562025)(20161123555025)(20161123558100)(6072148); SRVR:DB6PR0701MB2453; BCL:0; PCL:0; RULEID:; SRVR:DB6PR0701MB2453;
x-forefront-prvs: 0288CD37D9
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(39840400002)(39450400003)(39400400002)(39850400002)(39410400002)(13464003)(24454002)(377454003)(229853002)(122556002)(3280700002)(8936002)(2906002)(74316002)(6916009)(8676002)(81166006)(7906003)(3660700001)(7696004)(7736002)(5660300001)(2950100002)(189998001)(2900100001)(77096006)(66066001)(6116002)(33656002)(86362001)(230783001)(50986999)(6246003)(3846002)(790700001)(102836003)(54356999)(76176999)(4326008)(6436002)(54896002)(53936002)(6306002)(236005)(9686003)(54906002)(38730400002)(55016002)(606005)(53546009)(110136004)(25786009)(6506006)(99286003)(90052001); DIR:OUT; SFP:1102; SCL:1; SRVR:DB6PR0701MB2453; H:DB6PR0701MB2454.eurprd07.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_DB6PR0701MB2454E0C17F9823E9C0D232E4951E0DB6PR0701MB2454_"
MIME-Version: 1.0
X-OriginatorOrg: nokia-bell-labs.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Apr 2017 17:49:02.1421 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0701MB2453
Archived-At: <https://mailarchive.ietf.org/arch/msg/alto/dOBUSZHLfmC-jAWatGDCDtMmYCQ>
Subject: Re: [alto] Eric Rescorla's Discuss on draft-ietf-alto-multi-cost-08: (with DISCUSS)
X-BeenThere: alto@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Application-Layer Traffic Optimization \(alto\) WG mailing list" <alto.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/alto>, <mailto:alto-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/alto/>
List-Post: <mailto:alto@ietf.org>
List-Help: <mailto:alto-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/alto>, <mailto:alto-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Apr 2017 17:49:07 -0000

Thanks a lot,
Sabine


From: Eric Rescorla [mailto:ekr@rtfm.com]
Sent: 25 April 2017 19:44
To: Randriamasy, Sabine (Nokia - FR/Nozay) <sabine.randriamasy@nokia-bell-labs.com>
Cc: The IESG <iesg@ietf.org>; draft-ietf-alto-multi-cost@ietf.org; alto-chairs@ietf.org; ietf@j-f-s.de; alto@ietf.org
Subject: Re: Eric Rescorla's Discuss on draft-ietf-alto-multi-cost-08: (with DISCUSS)

Thanks. I have removed my discuss.

-Ekr


On Tue, Apr 25, 2017 at 10:36 AM, Randriamasy, Sabine (Nokia - FR/Nozay) <sabine.randriamasy@nokia-bell-labs.com<mailto:sabine.randriamasy@nokia-bell-labs.com>> wrote:
Hello Eric,

Thanks a lot for your feedback and suggested text on privacy or security issues.
I have added it to section 7 "Privacy And Security Considerations" of the draft update that has
just been posted and can be found at https://tools.ietf.org/html/draft-ietf-alto-multi-cost-09 .

Best regards,
Sabine


>>-----Original Message-----
>>From: Eric Rescorla [mailto:ekr@rtfm.com<mailto:ekr@rtfm.com>]
>>Sent: 12 April 2017 01:02
>>To: The IESG <iesg@ietf.org<mailto:iesg@ietf.org>>
>>Cc: draft-ietf-alto-multi-cost@ietf.org<mailto:draft-ietf-alto-multi-cost@ietf.org>; Jan Seedorf <ietf@j-f-s.de<mailto:ietf@j-f-s.de>>; alto-
>>chairs@ietf.org<mailto:chairs@ietf.org>; ietf@j-f-s.de<mailto:ietf@j-f-s.de>; alto@ietf.org<mailto:alto@ietf.org>
>>Subject: Eric Rescorla's Discuss on draft-ietf-alto-multi-cost-08: (with
>>DISCUSS)
>>
>>Eric Rescorla has entered the following ballot position for
>>draft-ietf-alto-multi-cost-08: Discuss
>>
>>When responding, please keep the subject line intact and reply to all email
>>addresses included in the To and CC lines. (Feel free to cut this introductory
>>paragraph, however.)
>>
>>
>>Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
>>for more information about IESG DISCUSS and COMMENT positions.
>>
>>
>>The document, along with other ballot positions, can be found here:
>>https://datatracker.ietf.org/doc/draft-ietf-alto-multi-cost/
>>
>>
>>
>>----------------------------------------------------------------------
>>DISCUSS:
>>----------------------------------------------------------------------
>>
>>This document states:
>>"This document does not introduce any privacy or security issues not
>>   already present in the ALTO protocol."
>>
>>This may be true, but it's not obvious it is, because when questions are asked
>>together, that's more of a privacy signature than independently.
>>So, suppose that application A asks for metric A and application B asks for
>>metric B and application C asks for A and B. If these applications are mixed
>>behind a CGN, with single queries then you don't know whether you have
>>some A clients and some B clients, but if you do multi-query, it's clear these
>>are C clients. This is a potentially serious issue if (for instance) Bittorrent
>>always asks for a very distinguished set of parameters, so an ALTO server
>>might use this to find Bittorrent clients.
>>
>>
>>