Re: [babel] Murray Kucherawy's No Objection on draft-ietf-babel-dtls-09: (with COMMENT)

David Schinazi <dschinazi.ietf@gmail.com> Tue, 30 June 2020 23:01 UTC

Return-Path: <dschinazi.ietf@gmail.com>
X-Original-To: babel@ietfa.amsl.com
Delivered-To: babel@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 888A73A0965; Tue, 30 Jun 2020 16:01:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tubs2jW-Yl2B; Tue, 30 Jun 2020 16:01:51 -0700 (PDT)
Received: from mail-lf1-x12f.google.com (mail-lf1-x12f.google.com [IPv6:2a00:1450:4864:20::12f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F9F13A095F; Tue, 30 Jun 2020 16:01:48 -0700 (PDT)
Received: by mail-lf1-x12f.google.com with SMTP id c21so12432316lfb.3; Tue, 30 Jun 2020 16:01:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=DcLwoBxSoXRlUIE2x6HM/p3LGjrmVpdHHRLh2uZdvUM=; b=f6xpO55S9i2Mszz9cHnn2QgPWfqc8z/zmd9l+051grXGSI6wil+U3gGimBNqSA3Kd8 ZA/K9NwT1FXktMzH6b4ebyu8umDzzQJum7P7XA6aixJQXDGBPfdifMNQSy6nz1AxafRd B3T4dipKFLe48a6y8De/HzzXyLbRhgspW0+jealexhZiKQCCzFN7unSsMPnpew/rKlee hCpMncZ+0Y9UQNUiZzH5NPz+B0WTcbk1yMR6AgstDYyt9uGEyxU3ZVBZ0C0QQJ7U5WnQ wAj5Sxzjg0t4yTkTCLjECnOkQsO2VYtElEiIZLYdQSmDi00mGPKjXnDyv7A0PtiYeM9H UWzg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DcLwoBxSoXRlUIE2x6HM/p3LGjrmVpdHHRLh2uZdvUM=; b=mf3FTjqLJCUWcAUlKPYE5drCsAgsnZhmxtXZnBkaHcPdfe/7Cu7UxnHAjFtGFU0lf6 pdXe6jm83S0dX9mFM4br9kssG9HuLs/+hS1tLpPRfMauG4pzvrTf6iRhaQ04q3XLlstA ouaE+vcgUfKcuKPX9+/qm9JHgQT/ilnk9CuXMsOnCvXtidfwOlG7UZ0SBc0UL9pkyTnF PhBciBw4/CQ+smNEHw0HEbpFhTGpDiSG84tDnFAYz2/fpLGqZ0yNAKi6fC08NCMq+E36 TyR7BlecKCp8EVZPOUA3O+Mhwiata29Jg4OxtZ0Izb8/oE/bEWJBAsMvJXgjwrSuNjHZ /xjw==
X-Gm-Message-State: AOAM531N0VF1TMcVk6KWt+Wws76nkxwKYpTDAF5UV6raHr3466yovGEf PDEPni0Kz3/S/PdG+OBCXMBq0ANv7/HiJVi1f7U=
X-Google-Smtp-Source: ABdhPJzw6AL/FKRReT1KdPyCakt72p+ZE5gN1gOqXVN7xXS6CXL87h7jH9kSukuOBC6lzgqyadqgxjml9gBR1ovsU/o=
X-Received: by 2002:ac2:5467:: with SMTP id e7mr13118389lfn.122.1593558106433; Tue, 30 Jun 2020 16:01:46 -0700 (PDT)
MIME-Version: 1.0
References: <159329532285.23961.12116288483331623753@ietfa.amsl.com>
In-Reply-To: <159329532285.23961.12116288483331623753@ietfa.amsl.com>
From: David Schinazi <dschinazi.ietf@gmail.com>
Date: Tue, 30 Jun 2020 16:01:35 -0700
Message-ID: <CAPDSy+4YQ2-6asFxRwAKP2awMxSoKaC-d2gFzY=yH34k-CH=5g@mail.gmail.com>
To: Murray Kucherawy <superuser@gmail.com>
Cc: The IESG <iesg@ietf.org>, draft-ietf-babel-dtls@ietf.org, babel-chairs <babel-chairs@ietf.org>, Babel at IETF <babel@ietf.org>, Donald Eastlake <d3e3e3@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000dceea205a955287e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/babel/VlO5kZWbQv2mdzou1Alsk3o5M9E>
Subject: Re: [babel] Murray Kucherawy's No Objection on draft-ietf-babel-dtls-09: (with COMMENT)
X-BeenThere: babel@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "A list for discussion of the Babel Routing Protocol." <babel.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/babel>, <mailto:babel-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/babel/>
List-Post: <mailto:babel@ietf.org>
List-Help: <mailto:babel-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/babel>, <mailto:babel-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jun 2020 23:01:54 -0000

Thanks Murray! I've incorporated your feedback into
the document and posted draft-ietf-babel-dtls-10
<https://tools.ietf.org/html/draft-ietf-babel-dtls-10>.
More detailed responses inline.

David


On Sat, Jun 27, 2020 at 3:02 PM Murray Kucherawy via Datatracker <
noreply@ietf.org> wrote:

> Murray Kucherawy has entered the following ballot position for
> draft-ietf-babel-dtls-09: No Objection
>
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
>
>
> Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-babel-dtls/
>
>
>
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
> Reading the shorter document before the longer one, so I may be missing
> some
> important context here.
>
> This was pretty easy to read, so nice work.  A number of editorial
> comments and
> suggestions follow:
>
> Section 2:
>
> * "... sent over to both unicast ..." -- s/over to both/over both/, right?
>

Fixed to "can be sent to both"


> Section 2.1:
>
> * "... intervals, to avoid ..." -- remove the comma
>

I personally prefer the comma, so I'll let the RFC Editor decide this one.


> * "Nodes SHOULD drop packets that have been reordered ..." -- Why would an
> implementer not do this?  (i.e., why is it only a SHOULD?)
>

Tracking reordering like this is not a feature that is available in all
DTLS stacks.
Requiring Babel implementors to add features to DTLS stacks is not a
realistic
possibility, so we made this a SHOULD.


> Section 2.2:
>
> * "... from the Magic byte ..." -- s/Magic/magic/
>

The casing here is consistent with the definition of the Magic field:
https://tools.ietf.org/html/draft-ietf-babel-rfc6126bis-17#section-4.2


> Section 2.3:
>
> * Please expand/explain "TLV" on first use.
>

TLV is considered a well-known abbreviation by the RFC Editor:
https://www.rfc-editor.org/materials/abbrev.expansion.txt
We'll let them decide this one.


> * Just an aesthetic suggestion: In this sentence...
>
>    Since Babel over DTLS only protects unicast packets, implementors may
>    implement Babel over DTLS by modifying an implementation of Babel
>    without DTLS support, and replacing any TLV previously sent over
>    multicast with a separate TLV sent over unicast for each neighbour.
>
> ...you use "implementors", "implement", and "implementation".  Maybe this?
>
>    Since Babel over DTLS only protects unicast packets, implementors may
>    provide Babel over DTLS by using a variant of Babel
>    without DTLS support, and replacing any TLV previously sent over
>    multicast with a separate TLV sent over unicast for each neighbour.
>

I do agree that repeating "implement" isn't ideal, but I feel that it more
accurately represents what we mean. We'll defer to the RFC Editor.


> Section 2.5:
>
> * Why is the stuff in the first paragraph only SHOULD/RECOMMENDED?  (The
> answer
> may lie in the second paragraph, but I'm uncertain.)
>

Because it's not required for the correctness or security of the protocol.
For example,
we do not need to mandate where implementors save their DTLS state.


> * I suggest that Section 5 should make a backward reference to this section
> since it talks about mitigation of an attack.
>

Good point. I fixed this by moving the second paragraph to the
Security Considerations section.


> Section 2.6:
>
> * "A node MAY allow configuration options to allow ..." -- change one of
> those
> "allow"s to "permit"
>

Done.