Re: [Cacao] [EXT] Re: [EXT] RE: Charter

Bret Jordan <jordan.ietf@gmail.com> Wed, 19 June 2019 12:07 UTC

Return-Path: <jordan.ietf@gmail.com>
X-Original-To: cacao@ietfa.amsl.com
Delivered-To: cacao@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D926E120437 for <cacao@ietfa.amsl.com>; Wed, 19 Jun 2019 05:07:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GGsFLYaFxvhY for <cacao@ietfa.amsl.com>; Wed, 19 Jun 2019 05:07:32 -0700 (PDT)
Received: from mail-wr1-x435.google.com (mail-wr1-x435.google.com [IPv6:2a00:1450:4864:20::435]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7736012000E for <cacao@ietf.org>; Wed, 19 Jun 2019 05:07:32 -0700 (PDT)
Received: by mail-wr1-x435.google.com with SMTP id k11so3150901wrl.1 for <cacao@ietf.org>; Wed, 19 Jun 2019 05:07:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=ioZcaxVpHvkGQLI7umZ+7qFPp7zTAZ6aV25GL0MeAZs=; b=bUPupDD4CpzX4usJ3BROrEQ1ID5wB3TwdRL+QGB8m39BDleQx5bOJAiMOWs8SyrVcV PR9w2Dn+RZePzDGhy3hlh57+pf55+w8lOzDnMtzpMp/xMbjuqlJbcQpPtFcsW9S9uXix DvRMXDGefk4QMuUfGbK40ChahE6ktNFr+lcgaDwGkRLPLSwfRy5eQ2x7voukMOQGAZEp yPJVkTpw8E2xhCt+yatXA+cjS7jTBjA+wwkOn21rfdBk/MNWk2zvV0LitUkLpiO1VnwB zBnQEanb1cKjctDjMxg6SzaxSg+AcwbhoFA2f6FSLp4ROpfefoAC07ZW7PsIakUt2U7+ 2l5A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=ioZcaxVpHvkGQLI7umZ+7qFPp7zTAZ6aV25GL0MeAZs=; b=KatJb39r9wsXGLXqzqscWD1ZSw8Q/fuTi9OlQRp2I3Czom9R1TPpeGqAB4C6zNRU1B Pu3wPDeFtEePVHf9Jjn++sTUcxasHSvy71SWAAG/H2eWWIjqBIzaj6QINVatoOrnGcuZ l6j9jvdSJY5LvhDmdKrg6P3BKhOTHkZiU/ngM7hBce/YU082Duab6ainH1LEZCSql+Oi s1QhkjkavHKpQG6/Epaa4eeD/8Ig0zluaCXIKn1zfJqjx4qDEV94DubOnGZ6/h0H2PYR G1U0abFOI4Q2GhyC7s0HCgSBAEelLW3nbKZSbWZDnNhmxLQ2BHBSfXesty8c+VttnqQU qDPA==
X-Gm-Message-State: APjAAAVu0xHilFrSCPk1D0E8fICfgebD2u7iRMHgN8Qcdegk5yA8s6wE KkJ5hIWgup3m49px1iRnuEU=
X-Google-Smtp-Source: APXvYqzM+EAt12Lv7A0t3Apk+6mmpt8QeQ/0H6/girhuo8fm4T9H8GbK52vAHuc0L3+IBHnUo+1Wkg==
X-Received: by 2002:adf:dc81:: with SMTP id r1mr2933550wrj.298.1560946051045; Wed, 19 Jun 2019 05:07:31 -0700 (PDT)
Received: from [10.0.2.44] (26.34.71.37.rev.sfr.net. [37.71.34.26]) by smtp.gmail.com with ESMTPSA id f204sm1938658wme.18.2019.06.19.05.07.29 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 19 Jun 2019 05:07:29 -0700 (PDT)
From: Bret Jordan <jordan.ietf@gmail.com>
Message-Id: <A8E5A7FB-F771-477C-90E5-4E2DE4FA69E6@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_1185D0AC-4ABF-4DE5-8383-CDC490696BEB"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Wed, 19 Jun 2019 14:07:26 +0200
In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EAA91C9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
Cc: Bret Jordan <Bret_Jordan@symantec.com>, Allan Thomson <athomson@lookingglasscyber.com>, "cacao@ietf.org" <cacao@ietf.org>
To: mohamed.boucadair@orange.com
References: <BYAPR16MB30133C3DAF3CF2060CE4B565EDEA0@BYAPR16MB3013.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302EAA890F@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB30137AC9C00633E80C7C8D65EDEA0@BYAPR16MB3013.namprd16.prod.outlook.com> <779CCF55-FABB-4BA1-9D84-1D9761A32944@tzi.org> <BYAPR16MB30139D44233E0256099264DCEDEA0@BYAPR16MB3013.namprd16.prod.outlook.com> <25088b69-1225-3f3c-b0e2-38e25f1f48fb@article19.org> <A7038D6C-C1C3-4B6A-B928-AC87F7A87AFC@gmail.com> <6130.1560896363@dooku.sandelman.ca> <634A811D-3674-42ED-A46F-9CDD8EFD5CEE@symantec.com> <787AE7BB302AE849A7480A190F8B93302EAA8FE0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <B29832F6-8239-498C-A65D-A22B70A4A691@gmail.com> <787AE7BB302AE849A7480A190F8B93302EAA905B@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <05E3F9C3-20C6-47E4-9B68-DE9D81D9C358@lookingglasscyber.com> <787AE7BB302AE849A7480A190F8B93302EAA917C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <92A6388D-ED3D-4B77-BA01-AE97E201681F@symantec.com> <787AE7BB302AE849A7480A190F8B93302EAA91C9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/cacao/7tNRNXSZngcWcGwFYQPTGkdTvOg>
Subject: Re: [Cacao] [EXT] Re: [EXT] RE: Charter
X-BeenThere: cacao@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Collaborative Automated Course of Action Operations <cacao.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cacao>, <mailto:cacao-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cacao/>
List-Post: <mailto:cacao@ietf.org>
List-Help: <mailto:cacao-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cacao>, <mailto:cacao-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 19 Jun 2019 12:07:35 -0000

The initial version needs to be done in JSON, if we want the market as a whole to adopt this. I have walked the floor at RSA and Blackhat for the past 2 years talking to all of the vendors that would potentially implement this.  They all say the same thing.  If it was JSON, they could easily do it.  If it is something else, well, maybe, maybe not.  We would then be reliant on market pressure and consumers to influence vendors to adopt.  That can take 10 years or more. Usually by then, the standard is failed and the market has moved on.  Let us not be yet another standard on the dusty shelves of of the SDO Library.

Further, anything not JSON would require the Web2.0 world of products and APIs to support something totally different.  CBOR may take off at some point.  YANG my take off at some point.  XML may come back from the dead. But right now, today, JSON is the model that the developers of products use and know. Adding additional hurtles for the solution to be adopted is not a good idea for this first version.  

Overtime, once we get our first versions done and out the door and they get adopted, we can make changes or add functionality based on market demand.  If the market comes back and says, hey, we really need this done in a binary format like Protobuf, then great.  We can write a binding for that.   



Thanks,
Bret
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

> On Jun 19, 2019, at 1:41 PM, mohamed.boucadair@orange.com wrote:
> 
> Re-,
>  
> Please see inline.
>  
> Cheers,
> Med
>  
> De : Bret Jordan [mailto:Bret_Jordan@symantec.com <mailto:Bret_Jordan@symantec.com>] 
> Envoyé : mercredi 19 juin 2019 13:26
> À : BOUCADAIR Mohamed TGI/OLN
> Cc : Allan Thomson; Bret Jordan; cacao@ietf.org <mailto:cacao@ietf.org>
> Objet : Re: [Cacao] [EXT] Re: [EXT] RE: Charter
>  
> I fundamentally do not support the idea of not using JSON for this work.
> [Med] Are you referring to application encoding or data modelling part?
>  
>  Over time we may write a binding document for some other serialization.  But we need something that can be implemented and have guaranteed interoperability.  
> [Med] Why CBOR wouldn’t be an option here? BTW, there might be other requirements such as compactness (that may be worth when actions are enriched/augmented on-path). As a group, we don’t have yet the full set of requirements to make a design choice.
>  
> In order to gain mass adoption, we need a solution that can be used by the existing eco system.  
>  
> Bret 
> 
> Sent from my Commodore 128D 
> 
>