Re: [Captive-portals] Fwd: I-D Action: draft-ietf-capport-architecture-03.txt

Martin Thomson <mt@lowentropy.net> Mon, 31 December 2018 03:16 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: captive-portals@ietfa.amsl.com
Delivered-To: captive-portals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4D31277D2 for <captive-portals@ietfa.amsl.com>; Sun, 30 Dec 2018 19:16:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=dxV9gWp5; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=ChytFsO3
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MW0gwPRfTJpq for <captive-portals@ietfa.amsl.com>; Sun, 30 Dec 2018 19:16:10 -0800 (PST)
Received: from new4-smtp.messagingengine.com (new4-smtp.messagingengine.com [66.111.4.230]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D656127598 for <captive-portals@ietf.org>; Sun, 30 Dec 2018 19:16:10 -0800 (PST)
Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailnew.nyi.internal (Postfix) with ESMTP id 3DEF6D582 for <captive-portals@ietf.org>; Sun, 30 Dec 2018 22:16:09 -0500 (EST)
Received: from web3 ([10.202.2.213]) by compute1.internal (MEProxy); Sun, 30 Dec 2018 22:16:09 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=message-id:from:to:mime-version:content-transfer-encoding :content-type:in-reply-to:subject:date:references; s=fm1; bh=O6a bEfWjB21xAt0VBlVPzDcZYEQmmAQ4wAtXmU/XoII=; b=dxV9gWp5Zov3cRjdw2k cjPoAv5f/cIjSlLYTkmR+gX/5LPeTQT/wOCPxbJlpF1YqmfCMeG2sDATRVCosLIb w5X1tJXyD9gYXeNhWYK8Pw+r/OadKaP5SgnqQ95tfZVAlCP3216WVBGySQV9So32 MMgZzEmgLgacG8vhTLDbF242LpsfgOtAuaH2gLy/0nNipxX1u7wDQ9mBJ9japDAQ qCslvUjK3llxwp372TKJDCi6mqjFmFaXkCERs+cntJloUnFacu/ATqLRbZh7SqJJ 7lw3+mW3HqtU00yn2q3HpCb8DF1v4nK7aN4FHn5i3hw7oHqwb0Br/U9m8QcMqaWH xrA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=O6abEfWjB21xAt0VBlVPzDcZYEQmmAQ4wAtXmU/Xo II=; b=ChytFsO3Uud+ODihsDI9cphpE4g8tKwQo/6nRSYLJRoxHseA8CBqbEKO3 LFDEdswQvwV5OgIFMLfV0iM6xbaPBvXEOqUe43SZ2Z5m5ZT5i8vOCLOtLSHgoeWA hLrRD6gRPC4BY38NCjPMyZ5dHVcy+nSPvsVhfUUhXs8ozJtgDGX0BDbJg2xkWxY1 WszVFoVngvYAYAe6Mz5GWAXjtPjhN+cdamwgZUMd6RAC6SCFHG9lPziEernqM2aL dNkwCbUQp+7qfwREWO64Bw0AWgV1FSVWxxA0if/9ybgYm/DRgRa02qNELetX7OIE OM0I8mp2IAhc1XII8xFt7bslQtN+A==
X-ME-Sender: <xms:-IkpXNzVsIbirVbCNPfQRuPkjlDn2dpKWU7IWMrzCkdYh5BbfTixbQ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedtledruddugdehjeculddtuddrgedtkedrtddtmd cutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfhuthen uceurghilhhouhhtmecufedttdenucgoteefjeefqddtgeculdehtddmnecujfgurhepkf fhvfgggfgtofgjuffffhesthejredtredtjeenucfhrhhomhepofgrrhhtihhnucfvhhho mhhsohhnuceomhhtsehlohifvghnthhrohhphidrnhgvtheqnecuffhomhgrihhnpehgih hthhhusgdrtghomhenucfrrghrrghmpehmrghilhhfrhhomhepmhhtsehlohifvghnthhr ohhphidrnhgvthenucevlhhushhtvghrufhiiigvpedt
X-ME-Proxy: <xmx:-IkpXFNtNSxPjR8o1ud38gbcf63EymCSfZlrPZXCYnrNYjY9G2LVcg> <xmx:-IkpXOgnIqscCA5QZoAPkQ42yvdpifdQCTbrcfsvp7eYUF5fRLTpsQ> <xmx:-IkpXF_LKJwC8zV5k_cihzNPB_49QFe7ffjlFzLeuJNoIyGCuHRc7A> <xmx:-YkpXL7L8HzvOqjkwrQVBd8RYRN06VhDbF69eF32bZsWqgR1XxeTcg>
Received: by mailuser.nyi.internal (Postfix, from userid 99) id 89CA29E565; Sun, 30 Dec 2018 22:16:08 -0500 (EST)
Message-Id: <1546226168.2302634.1621590656.150FEA52@webmail.messagingengine.com>
From: Martin Thomson <mt@lowentropy.net>
To: captive-portals@ietf.org
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="utf-8"
X-Mailer: MessagingEngine.com Webmail Interface - ajax-2f590f9a
In-Reply-To: <CADo9JyWAFvBiBqb5oA-vGED1Cpo8F37GzAQhke_=E1ZpJrWdSQ@mail.gmail.com>
Date: Mon, 31 Dec 2018 14:16:08 +1100
References: <154593193395.11930.16738431366515870255@ietfa.amsl.com> <CACuvLgwCSB13U6rXGLTwpQ-riT+7fi_HyKLD2FjzDexA4u0Rkg@mail.gmail.com> <CADo9JyWAFvBiBqb5oA-vGED1Cpo8F37GzAQhke_=E1ZpJrWdSQ@mail.gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/captive-portals/Oeeb1mLqEn5yezY8HsphZ0KJq5Y>
Subject: Re: [Captive-portals] Fwd: I-D Action: draft-ietf-capport-architecture-03.txt
X-BeenThere: captive-portals@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of issues related to captive portals <captive-portals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/captive-portals/>
List-Post: <mailto:captive-portals@ietf.org>
List-Help: <mailto:captive-portals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 31 Dec 2018 03:16:12 -0000

no hats...

On Fri, Dec 28, 2018, at 06:14, David Bird wrote:
> I, for one, think "Document that the signaling protocol does not provide
> mechanisms for non-binary blocking." is where IETF tries to become a some
> sort of legal authority...

The IETF describes what consenting protocol participants can do.  So, I'm fairly sure that legal authority has no bearing on this.  However, your point remains a good one.

There are relatively few places where you will find that blocking a per-destination basis doesn't happen at all.  No two networks are the same, and many apply policies that affect how your packets are passed.

Maybe it's a shortcoming in the draft, but recognizing that the intent is to provide an indication of whether access meets common expectations for network access should help.
 
> At this point, I think you might as well remove the entire signaling
> section... It reads like propaganda against signaling as a concept.. then
> later has a entire section on the Nuisance factor of signaling, where it is
> suggested "it may be possible for any user on the Internet to send
> signals"... Hmm..

Personally, I'm comfortable with what is there as a set of requirements.  They aren't that negatively phrased, just narrowly scoped.  I think that a more narrowly targeted version of your ICMP draft would have met these requirements, as would several of the other things we've considered.  I might concede - as some have argued - that the resulting value is so greatly diminished as to not make it worthwhile, but that's the essence of the debate.


> The section titled  "Risk of Nuisance Captive Portal" should really be
> talking about networks that USE the API and have NO network integration
> (e.g. Captive by API only, not by any network enforcement function).

Opened https://github.com/capport-wg/architecture/issues/24

Thanks,
Martin