Re: [arch-d] deprecating Postel's principle- considered harmful

Christian Huitema <huitema@huitema.net> Tue, 07 May 2019 22:21 UTC

Return-Path: <huitema@huitema.net>
X-Original-To: architecture-discuss@ietfa.amsl.com
Delivered-To: architecture-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 539EE12019B for <architecture-discuss@ietfa.amsl.com>; Tue, 7 May 2019 15:21:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yMigrTYnAe7O for <architecture-discuss@ietfa.amsl.com>; Tue, 7 May 2019 15:21:24 -0700 (PDT)
Received: from mx36-out10.antispamcloud.com (mx36-out10.antispamcloud.com [209.126.121.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB0C212013A for <architecture-discuss@ietf.org>; Tue, 7 May 2019 15:21:23 -0700 (PDT)
Received: from xsmtp06.mail2web.com ([168.144.250.232]) by mx148.antispamcloud.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.89) (envelope-from <huitema@huitema.net>) id 1hO8Sf-0006IR-Tf for architecture-discuss@ietf.org; Wed, 08 May 2019 00:21:23 +0200
Received: from [10.5.2.12] (helo=xmail02.myhosting.com) by xsmtp06.mail2web.com with esmtp (Exim 4.63) (envelope-from <huitema@huitema.net>) id 1hO8Se-00077w-6L for architecture-discuss@ietf.org; Tue, 07 May 2019 18:21:20 -0400
Received: (qmail 19919 invoked from network); 7 May 2019 22:21:19 -0000
Received: from unknown (HELO [192.168.1.103]) (Authenticated-user:_huitema@huitema.net@[172.56.42.223]) (envelope-sender <huitema@huitema.net>) by xmail02.myhosting.com (qmail-ldap-1.03) with ESMTPA for <iesg@ietf.org>; 7 May 2019 22:21:19 -0000
To: Henning Schulzrinne <hgs@cs.columbia.edu>, "Andrew G. Malis" <agmalis@gmail.com>
Cc: "architecture-discuss@ietf.org" <architecture-discuss@ietf.org>, Barry Leiba <barryleiba@computer.org>, "ietf@ietf.org" <ietf@ietf.org>, "iab@iab.org" <iab@iab.org>, The IESG <iesg@ietf.org>
References: <F64C10EAA68C8044B33656FA214632C89F024CD3@MISOUT7MSGUSRDE.ITServices.sbc.com> <CALaySJJDHg5j9Z7+noS=YXoNROqdsbJ6coEECtLtbJ6fWJ3xsQ@mail.gmail.com> <CAA=duU1TxZx9W8huPp5md25Wf+9=f50WYGpU=Bb1OQ+OdF6k6A@mail.gmail.com> <CACgrgBYs95Q4hb=y-6i7SW9mEx9Bg-gp0TrpAYpsP-aODSx+YA@mail.gmail.com>
From: Christian Huitema <huitema@huitema.net>
Openpgp: preference=signencrypt
Autocrypt: addr=huitema@huitema.net; prefer-encrypt=mutual; keydata= mQENBFIRX8gBCAC26usy/Ya38IqaLBSu33vKD6hP5Yw390XsWLaAZTeQR64OJEkoOdXpvcOS HWfMIlD5s5+oHfLe8jjmErFAXYJ8yytPj1fD2OdSKAe1TccUBiOXT8wdVxSr5d0alExVv/LO I/vA2aU1TwOkVHKSapD7j8/HZBrqIWRrXUSj2f5n9tY2nJzG9KRzSG0giaJWBfUFiGb4lvsy IaCaIU0YpfkDDk6PtK5YYzuCeF0B+O7N9LhDu/foUUc4MNq4K3EKDPb2FL1Hrv0XHpkXeMRZ olpH8SUFUJbmi+zYRuUgcXgMZRmZFL1tu6z9h6gY4/KPyF9aYot6zG28Qk/BFQRtj7V1ABEB AAG0J0NocmlzdGlhbiBIdWl0ZW1hIDxodWl0ZW1hQGh1aXRlbWEubmV0PokBOQQTAQIAIwUC UhFfyAIbLwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAAAoJEJNDCbJVyA1yhbYH/1ud6x6m VqGIp0JcZUfSQO8w+TjugqxCyGNn+w/6Qb5O/xENxNQ4HaMQ5uSRK9n8WKKDDRSzwZ4syKKf wbkfj05vgFxrjCynVbm1zs2X2aGXh+PxPL/WHUaxzEP7KjYbLtCUZDRzOOrm+0LMktngT/k3 6+EZoLEM52hwwpIAzJoscyEz7QfqMOZtFm6xQnlvDQeIrHx0KUvwo/vgDLK3SuruG1CSHcR0 D24kEEUa044AIUKBS3b0b8AR7f6mP2NcnLpdsibtpabi9BzqAidcY/EjTaoea46HXALk/eJd 6OLkLE6UQe1PPzQC4jB7rErX2BxnSkHDw50xMgLRcl5/b1a5AQ0EUhFfyAEIAKp7Cp8lqKTV CC9QiAf6QTIjW+lie5J44Ad++0k8gRgANZVWubQuCQ71gxDWLtxYfFkEXjG4TXV/MUtnOliG 5rc2E+ih6Dg61Y5PQakm9OwPIsOx+2R+iSW325ngln2UQrVPgloO83QiUoi7mBJPbcHlxkhZ bd3+EjFxSLIQogt29sTcg2oSh4oljUpz5niTt69IOfZx21kf29NfDE+Iw56gfrxI2ywZbu5o G+d0ZSp0lsovygpk4jK04fDTq0vxjEU5HjPcsXC4CSZdq5E2DrF4nOh1UHkHzeaXdYR2Bn1Y wTePfaHBFlvQzI+Li/Q6AD/uxbTM0vIcsUxrv3MNHCUAEQEAAYkCPgQYAQIACQUCUhFfyAIb LgEpCRCTQwmyVcgNcsBdIAQZAQIABgUCUhFfyAAKCRC22tOSFDh1UOlBB/94RsCJepNvmi/c YiNmMnm0mKb6vjv43OsHkqrrCqJSfo95KHyl5Up4JEp8tiJMyYT2mp4IsirZHxz/5lqkw9Az tcGAF3GlFsj++xTyD07DXlNeddwTKlqPRi/b8sppjtWur6Pm+wnAHp0mQ7GidhxHccFCl65w uT7S/ocb1MjrTgnAMiz+x87d48n1UJ7yIdI41Wpg2XFZiA9xPBiDuuoPwFj14/nK0elV5Dvq 4/HVgfurb4+fd74PV/CC/dmd7hg0ZRlgnB5rFUcFO7ywb7/TvICIIaLWcI42OJDSZjZ/MAzz BeXm263lHh+kFxkh2LxEHnQGHCHGpTYyi4Z3dv03HtkH/1SI8joQMQq00Bv+RdEbJXfEExrT u4gtdZAihwvy97OPA2nCdTAHm/phkzryMeOaOztI4PS8u2Ce5lUB6P/HcGtK/038KdX5MYST Fn8KUDt4o29bkv0CUXwDzS3oTzPNtGdryBkRMc9b+yn9+AdwFEH4auhiTQXPMnl0+G3nhKr7 jvzVFJCRif3OAhEm4vmBNDE3uuaXFQnbK56GJrnqVN+KX5Z3M7X3fA8UcVCGOEHXRP/aubiw Ngawj0V9x+43kUapFp+nF69R53UI65YtJ95ec4PTO/Edvap8h1UbdEOc4+TiYwY1TBuIKltY 1cnrjgAWUh/Ucvr++/KbD9tD6C8=
Message-ID: <eb979c24-e9d2-4ebb-1d4b-94b8c9aa16e1@huitema.net>
Date: Tue, 07 May 2019 15:21:16 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1
MIME-Version: 1.0
In-Reply-To: <CACgrgBYs95Q4hb=y-6i7SW9mEx9Bg-gp0TrpAYpsP-aODSx+YA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Content-Language: en-US
X-Originating-IP: 168.144.250.232
X-Spampanel-Domain: xsmtpout.mail2web.com
X-Spampanel-Username: 168.144.250.0/24
Authentication-Results: antispamcloud.com; auth=pass smtp.auth=168.144.250.0/24@xsmtpout.mail2web.com
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Filter-ID: Mvzo4OR0dZXEDF/gcnlw0R4iIUvzjp5U0k+OHPPhRGapSDasLI4SayDByyq9LIhVUZbR67CQ7/vm /hHDJU4RXkTNWdUk1Ol2OGx3IfrIJKywOmJyM1qr8uRnWBrbSAGDsYLBcJLyHnVrULITPs15U6ts NHuRxlWqWR9fNqLY1ai4Dcwf+CZK8NXgy3In+fX7UJoXoSIjzvywHI/x7r26OP7Hrzz3S1b48+29 eERTSEvO/uZghkG2Thtmul0RdRnNixIHpNwYH6dG/jiqllt/T06YFiZbFOBtv+JGXfwB7s7HZv+y CsrIWQyqCxBHcxXIjfWxM2F0OQauePvLDi3CaV6H96/JH0caXs+TpX2CUUJCh4/BoUr51xumqgDv kAOcwJn4PkDI5tFsXuxuBQAEemrxEaaKeSxe0Wrx6M4G5/WKoERAKIdOo7rYk3xc5dhuLrLPN+O8 gE5C0iF6p0FRikj2Sy0sd/+gU6S+lF5k/MhUgiZZ2raUFFZA8s/fhxGt+JdEJj8o4ccWGOM/OTBd GSCv9TR+UxzLZWL8hwGBjhpZiSI8iqP6W0g0TSBDhMJTHM/O93CEccjdbgvvryCrwgpfQzAAhDCh PeyYQ6ZFY+CaeI6OSLJForjvfR4Yg//0BTsMoo2c37mDGF0NCcWh1UVvTE1jpNwOaRBTxzGNHkRY nBLVOfBHbA9196/YVYyil0NI359+UNoL1o9uBoqwRIJvAcTKm1eCxZcleOqC9EL6YrRFLMKs0FGs x7Y13zcixBc55RmMgEUaZ+fi+rWPALlRgbSdQ7Ctt1HC2HYSOehq3v4bAQcc0dGcS3B2fXToiP4F Xz36Gr3b2uc1tWTf9tv+bva/y/Qa8q0jMRH6tv/RkkvUtRLW6252Cxrkp7tufsVzlem73GNj0LA7 gLZAiOuO5TcDeKjrEmYPn2IVWRusYfTA6ISVYXeEviL/bKYMHEskMKW7GLsUjhkx+pNJXyZpD/LN RwnyyjltRdqITyfwBTL1+6vDOMemz/4I88NDoIIUGMGVSwpSKa6DYtVjNNQYeMeIfbmK5nT5choN 5bp/NLCAU3xnrGbuhc5SfD+q9jihx+Za/cV70jOJzN2r4A==
X-Report-Abuse-To: spam@quarantine9.antispamcloud.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/architecture-discuss/qvMqHf2gvbBfW-ZE7q0EpKWo4O4>
Subject: Re: [arch-d] deprecating Postel's principle- considered harmful
X-BeenThere: architecture-discuss@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: open discussion forum for long/wide-range architectural issues <architecture-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/architecture-discuss>, <mailto:architecture-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/architecture-discuss/>
List-Post: <mailto:architecture-discuss@ietf.org>
List-Help: <mailto:architecture-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/architecture-discuss>, <mailto:architecture-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 May 2019 22:21:25 -0000

On 5/7/2019 3:05 PM, Henning Schulzrinne wrote:

> I think the problem is an interaction of poor programming and
> inability to reach implementers (and then the consequences). For example,
>
> * Some major open source or big-company server implementation allows
> lots of variation beyond the spec.
> * Then, clients test against this implementation and declare "ready to
> ship" when the bits flow without error messages. Programming is mostly
> done based on examples and a casual reading of the spec. In text
> protocols, spacing, line breaks, capitalization, ordering and other
> variations are done by "feel" rather than ABNF.
> * Since implementers usually have no good way to reach other
> implementers (or assume a timely response or well-informed response),
> they have to make expedient choices, making the problem worse over time.

For an example of that, see the discussion on the IPv6 mailing list
about sticking random bits in the link local prefix. The specs do not
allow it, but the Linux implementation does. The experimenters tried on
Linux and it worked, hence concluded that it was a fine extension to the
standard...

And then for a counter example, also related to IPv6. The IPv6 specs
allows implementations to insert a variety of intermediate headers
between the IPv6 header and the transport packet, but many router
implementations just don't like that and slow down or drop packets if
such intermediate routers are present. A case where the spec is arguably
too permissive, or the implementations too strict.

-- Christian Huitema