Re: [Cacao] [EXT] Re: [EXT] RE: Charter

Bret Jordan <jordan.ietf@gmail.com> Fri, 21 June 2019 08:21 UTC

Return-Path: <jordan.ietf@gmail.com>
X-Original-To: cacao@ietfa.amsl.com
Delivered-To: cacao@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06624120123 for <cacao@ietfa.amsl.com>; Fri, 21 Jun 2019 01:21:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.996
X-Spam-Level:
X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iHERXtqKA6Fa for <cacao@ietfa.amsl.com>; Fri, 21 Jun 2019 01:20:57 -0700 (PDT)
Received: from mail-wm1-x333.google.com (mail-wm1-x333.google.com [IPv6:2a00:1450:4864:20::333]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D49F12015D for <cacao@ietf.org>; Fri, 21 Jun 2019 01:20:57 -0700 (PDT)
Received: by mail-wm1-x333.google.com with SMTP id z23so5623025wma.4 for <cacao@ietf.org>; Fri, 21 Jun 2019 01:20:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=nEr/DHT7a7XsOUjFFZayCownE3YcMYAQAb58StfURD0=; b=Az4SYNrGKyO/S7CSoZXL1ejgrhp3cg/thsZADzzssdFGEAmG0kHkx3CF4oW7dzVEzA y1asq2DlX/++MjZ1Xqjp1E/Y6ayvXEYhYE4X7A55gHnNGuO6gMrxRv278Lc+ww6dyW/6 XMA5mnvhKcj2up6EzqMgNNCxzSoRMcGJ9X5rBGHlD9KSZfUzlHXYlbETKKGEIuDRrYnY 3UlwXW2vG1JF2gulW6kRpi5S2F7cXcITTMcexiVGNaCD40jinv60y43++tqmPZlXAa08 0HEGy01QDklsU/Jt+ysrN0CYJVLAADfj1VDG2Gm8X5zMbUOv8OnLeLz8bbc7pclRfYCC sEKw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=nEr/DHT7a7XsOUjFFZayCownE3YcMYAQAb58StfURD0=; b=MzYZPGWqMvUDeCSE8EDwI90V0tFXualR8RjzTIyDUw/JMEN6tBTfKdHgC6c4OHpLwg CfYgDs/6wHiE47Pen3eSlmKjSzO34oQ020WeXfyAsroUoM0aQjoVA1mXXUaFa80BJJSI 3LWTAiBPXDSL//uNwvqcSQIKPWP8pjEZpZ8kCeD/O5kKqNY5eOyZktRjczqc1e1HQqsp NaW/TGKczt2vjFFy14fIJ0chq1z/oste5uMuu7iyUwfnf3pnFSkzUD/YrbrckHL7eECS SK6VkFuOAWifEiRKyMFh8XLwTQk0rjcX33xsdBlHdW4ull9nXRUljYj7uKsEW/W+N5OX v6bA==
X-Gm-Message-State: APjAAAWYuMLLm8atiV56ZctCj7ejGro050cFx7cSceWEXvJfkIJM7J4p fiw57W64PAvhe46aQAZejyzPoVcT
X-Google-Smtp-Source: APXvYqzUHdt5Lx8ZXU23Mh8LmyrPOPXeeXB1NGHHMR3xEX7YwEeGChQXTDjzo6tATNZgPW/LJH+9nQ==
X-Received: by 2002:a1c:eb16:: with SMTP id j22mr2970033wmh.140.1561105255549; Fri, 21 Jun 2019 01:20:55 -0700 (PDT)
Received: from [10.0.1.109] (26.34.71.37.rev.sfr.net. [37.71.34.26]) by smtp.gmail.com with ESMTPSA id a2sm2723198wmj.9.2019.06.21.01.20.54 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Jun 2019 01:20:54 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail-186FC0D0-AE90-42C0-AE6D-47F53F987985"
Mime-Version: 1.0 (1.0)
From: Bret Jordan <jordan.ietf@gmail.com>
X-Mailer: iPhone Mail (16F203)
In-Reply-To: <787AE7BB302AE849A7480A190F8B93302EAAA500@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
Date: Fri, 21 Jun 2019 10:20:54 +0200
Cc: Bret Jordan <Bret_Jordan@symantec.com>, Allan Thomson <athomson@lookingglasscyber.com>, "cacao@ietf.org" <cacao@ietf.org>
Content-Transfer-Encoding: 7bit
Message-Id: <506ADA76-3C4D-48E6-BBE9-E81858BCCD1E@gmail.com>
References: <BYAPR16MB30133C3DAF3CF2060CE4B565EDEA0@BYAPR16MB3013.namprd16.prod.outlook.com> <787AE7BB302AE849A7480A190F8B93302EAA890F@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <BYAPR16MB30137AC9C00633E80C7C8D65EDEA0@BYAPR16MB3013.namprd16.prod.outlook.com> <779CCF55-FABB-4BA1-9D84-1D9761A32944@tzi.org> <BYAPR16MB30139D44233E0256099264DCEDEA0@BYAPR16MB3013.namprd16.prod.outlook.com> <25088b69-1225-3f3c-b0e2-38e25f1f48fb@article19.org> <A7038D6C-C1C3-4B6A-B928-AC87F7A87AFC@gmail.com> <6130.1560896363@dooku.sandelman.ca> <634A811D-3674-42ED-A46F-9CDD8EFD5CEE@symantec.com> <787AE7BB302AE849A7480A190F8B93302EAA8FE0@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <B29832F6-8239-498C-A65D-A22B70A4A691@gmail.com> <787AE7BB302AE849A7480A190F8B93302EAA905B@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <05E3F9C3-20C6-47E4-9B68-DE9D81D9C358@lookingglasscyber.com> <787AE7BB302AE849A7480A190F8B93302EAA917C@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <92A6388D-ED3D-4B77-BA01-AE97E201681F@symantec.com> <787AE7BB302AE849A7480A190F8B93302EAA91C9@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <A8E5A7FB-F771-477C-90E5-4E2DE4FA69E6@gmail.com> <787AE7BB302AE849A7480A190F8B93302EAA9CD5@OPEXCAUBMA2.corporate.adroot.infra.ftgroup> <3DF37C63-B813-4D7E-8AD0-0BF038899E34@gmail.com> <787AE7BB302AE849A7480A190F8B93302EAAA500@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
To: mohamed.boucadair@orange.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/cacao/T1kC2h7b_29q7NONG08wXdoaTP4>
Subject: Re: [Cacao] [EXT] Re: [EXT] RE: Charter
X-BeenThere: cacao@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Collaborative Automated Course of Action Operations <cacao.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cacao>, <mailto:cacao-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cacao/>
List-Post: <mailto:cacao@ietf.org>
List-Help: <mailto:cacao-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cacao>, <mailto:cacao-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Jun 2019 08:21:01 -0000

Are you talking about writing a definition in YANG, similar to writing a definition in property tables or in CDDL / JSON Schema? 

Bret 

Sent from my Commodore 128D

PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050

> On Jun 21, 2019, at 7:19 AM, <mohamed.boucadair@orange.com> <mohamed.boucadair@orange.com> wrote:
> 
> Bret,
>  
> Please don’t get paranoid :-)
>  
> I raised that question because I suspect a disconnect between two of us. For example, when you say “YANG my take off at some point”, I don’t parse that especially in reference to my proposal to use YANG for data modeling * not * for application data encoding. The use of YANG will allow to easily map to JSON object, CBOR, etc.
>  
> I won’t reiterate the comments made by Carsten. 
>  
> Cheers,
> Med
>  
> De : Bret Jordan [mailto:jordan.ietf@gmail.com] 
> Envoyé : jeudi 20 juin 2019 14:07
> À : BOUCADAIR Mohamed TGI/OLN
> Cc : Bret Jordan; Allan Thomson; cacao@ietf.org
> Objet : Re: [Cacao] [EXT] Re: [EXT] RE: Charter
>  
> Mohamed,
>  
> I am not sure I fully understand your question or what you are trying to get me to say.  As such I do not want to respond in a way that is going to be wrong.  So let me try and explain how I see this working and see if it resolves your question.
>  
> The data model will consist of a series of property tables that are defined using JSON data types. 
>  
> Example:
>  
> Property Name              | Type    | Description 
> name (required)            | string  | The name of this action 
> created (required)         | string  | The time that this action was created in RFC 3339
> sequence_number (optional) | integer | The number ….. 
>  
> All examples will also be in JSON
>  
> {
>   “name” : “deny ip”,
>   “created” : “2019-06-20T12:12:12.123”,
>   “sequence_number” : 1
> }
>  
>  
> All interoperability tests will require that tools support JSON.  
>  
> If someone want to take the property tables and write a solution for Protobuf, that is their choice.  But they would not be able to claim they are compliant or conformant with the spec if they do not support JSON.  The whole purpose is to get wide scale adoption. 
>  
>  
> Thanks,
> Bret
> PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
> "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
> 
> 
> On Jun 20, 2019, at 10:49 AM, mohamed.boucadair@orange.com wrote:
>  
> Hi Bret,
>  
> You didn’t answered my question : “Are you referring to application encoding or data modelling part?”.
>  
> In your reply, you are suggesting that versions can be considered … which implies that handling versioning will be a requirement. The data model should allow for such feature + easily allow to augment whatever initial version of that module. YANG, used for data modelling, makes a lot of sense here.
>  
> You also suggest that future encodings may be defined…which suggests that whatever solution that will be specified will need to handle such capability.
>  
> Cheers,
> Med
>  
> De : Bret Jordan [mailto:jordan.ietf@gmail.com] 
> Envoyé : mercredi 19 juin 2019 14:07
> À : BOUCADAIR Mohamed TGI/OLN
> Cc : Bret Jordan; Allan Thomson; cacao@ietf.org
> Objet : Re: [Cacao] [EXT] Re: [EXT] RE: Charter
>  
> The initial version needs to be done in JSON, if we want the market as a whole to adopt this. I have walked the floor at RSA and Blackhat for the past 2 years talking to all of the vendors that would potentially implement this.  They all say the same thing.  If it was JSON, they could easily do it.  If it is something else, well, maybe, maybe not.  We would then be reliant on market pressure and consumers to influence vendors to adopt.  That can take 10 years or more. Usually by then, the standard is failed and the market has moved on.  Let us not be yet another standard on the dusty shelves of of the SDO Library.
>  
> Further, anything not JSON would require the Web2.0 world of products and APIs to support something totally different.  CBOR may take off at some point.  YANG my take off at some point.  XML may come back from the dead. But right now, today, JSON is the model that the developers of products use and know. Adding additional hurtles for the solution to be adopted is not a good idea for this first version.  
>  
> Overtime, once we get our first versions done and out the door and they get adopted, we can make changes or add functionality based on market demand.  If the market comes back and says, hey, we really need this done in a binary format like Protobuf, then great.  We can write a binding for that.   
>  
>  
>  
> Thanks,
> Bret
> PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
> "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."
> 
> 
> 
> On Jun 19, 2019, at 1:41 PM, mohamed.boucadair@orange.com wrote:
>  
> Re-,
>  
> Please see inline.
>  
> Cheers,
> Med
>  
> De : Bret Jordan [mailto:Bret_Jordan@symantec.com] 
> Envoyé : mercredi 19 juin 2019 13:26
> À : BOUCADAIR Mohamed TGI/OLN
> Cc : Allan Thomson; Bret Jordan; cacao@ietf.org
> Objet : Re: [Cacao] [EXT] Re: [EXT] RE: Charter
>  
> I fundamentally do not support the idea of not using JSON for this work.
> [Med] Are you referring to application encoding or data modelling part?
>  
>  Over time we may write a binding document for some other serialization.  But we need something that can be implemented and have guaranteed interoperability.  
> [Med] Why CBOR wouldn’t be an option here? BTW, there might be other requirements such as compactness (that may be worth when actions are enriched/augmented on-path). As a group, we don’t have yet the full set of requirements to make a design choice.
>  
> In order to gain mass adoption, we need a solution that can be used by the existing eco system.  
>  
> Bret 
> 
> Sent from my Commodore 128D
>