Re: [Captive-portals] Remediation url for CAPPORT

Tommy Pauly <tpauly@apple.com> Tue, 14 January 2020 01:02 UTC

Return-Path: <tpauly@apple.com>
X-Original-To: captive-portals@ietfa.amsl.com
Delivered-To: captive-portals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D074B120020 for <captive-portals@ietfa.amsl.com>; Mon, 13 Jan 2020 17:02:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e0DOwbjCqzwS for <captive-portals@ietfa.amsl.com>; Mon, 13 Jan 2020 17:02:23 -0800 (PST)
Received: from ma1-aaemail-dr-lapp03.apple.com (ma1-aaemail-dr-lapp03.apple.com [17.171.2.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62E8512004C for <Captive-portals@ietf.org>; Mon, 13 Jan 2020 17:02:23 -0800 (PST)
Received: from pps.filterd (ma1-aaemail-dr-lapp03.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp03.apple.com (8.16.0.27/8.16.0.27) with SMTP id 00E12Jxi002525; Mon, 13 Jan 2020 17:02:19 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=sender : from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=03gKP/3xq9rESZj+7saafaAXyS57Yt3Scp0k2bYn2Mo=; b=amXMg8VdjumyhHGpQL35E72/pQt5F94GAlU0M7WjONz947JhlsPW5yuICnsqXOUnuxAY If8w6HIXm4zHU5pLqEkEw8GGxtLC8ztKDdpS9rSkzjtCK4vwkAWYa6K+TmCrtVFtaCmg U49sUMdm0RxmZ4Pq/0MvNi7agqOq0iv1ugsQfjZAYp0EEoWM0Bj0oQPmBd32lTa/ksEZ RScVTEwCrEShlPtD+2AfrIMz8EHKIw9QV1o9/kpvb0zZaKMQyLm/Wq9416Qlf2BzQwp4 zF4Gdp+KbsCMQ5B2hmSaU0Cn4kZxOaoIfGqwQZJNmaysHJkZsjCy5saWFh9p3RzxMA6j Lw==
Received: from ma1-mtap-s01.corp.apple.com (ma1-mtap-s01.corp.apple.com [17.40.76.5]) by ma1-aaemail-dr-lapp03.apple.com with ESMTP id 2xfe7y3m9p-11 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Mon, 13 Jan 2020 17:02:19 -0800
Received: from nwk-mmpp-sz11.apple.com (nwk-mmpp-sz11.apple.com [17.128.115.155]) by ma1-mtap-s01.corp.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPS id <0Q42005S8O7MKW20@ma1-mtap-s01.corp.apple.com>; Mon, 13 Jan 2020 17:02:12 -0800 (PST)
Received: from process_milters-daemon.nwk-mmpp-sz11.apple.com by nwk-mmpp-sz11.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) id <0Q4200J00NQEG500@nwk-mmpp-sz11.apple.com>; Mon, 13 Jan 2020 17:02:12 -0800 (PST)
X-Va-A:
X-Va-T-CD: b9464ade94490f860e479577c6c808b3
X-Va-E-CD: c8bcc3b38ffaa402db9f454ecb937c3b
X-Va-R-CD: b796d79ffa039dc8707314280a8bcb24
X-Va-CD: 0
X-Va-ID: bf72c5d1-5961-46c1-ac2d-742c46e43a4c
X-V-A:
X-V-T-CD: b9464ade94490f860e479577c6c808b3
X-V-E-CD: c8bcc3b38ffaa402db9f454ecb937c3b
X-V-R-CD: b796d79ffa039dc8707314280a8bcb24
X-V-CD: 0
X-V-ID: d3924df0-30f0-4def-b032-657d60044858
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2020-01-13_08:,, signatures=0
Received: from [17.192.171.152] by nwk-mmpp-sz11.apple.com (Oracle Communications Messaging Server 8.0.2.4.20190507 64bit (built May 7 2019)) with ESMTPSA id <0Q4200JXWO7N1170@nwk-mmpp-sz11.apple.com>; Mon, 13 Jan 2020 17:02:12 -0800 (PST)
Sender: tpauly@apple.com
From: Tommy Pauly <tpauly@apple.com>
Message-id: <D00FBAF2-3825-4435-8426-10C300E491F2@apple.com>
Content-type: multipart/alternative; boundary="Apple-Mail=_FCC56089-6A3E-45C1-97F9-39056BBE5714"
MIME-version: 1.0 (Mac OS X Mail 13.0 \(3594.4.17\))
Date: Mon, 13 Jan 2020 17:02:08 -0800
In-reply-to: <CAAedzxocTUhQ-z+_Cpz8PhG=o3CR4aZHOGddngiEjZ1HZChP1A@mail.gmail.com>
Cc: Heng Liu <liucougar=40google.com@dmarc.ietf.org>, Erik Kline <ek.ietf@gmail.com>, captive-portals <Captive-portals@ietf.org>, Remi NGUYEN VAN <reminv=40google.com@dmarc.ietf.org>
To: ek@loon.com
References: <CAKMty=Ks0j6dxPvsDHTpWBCrujihCe7Yzsb4zaV5SkRfh8fx9Q@mail.gmail.com> <CAKxhTx_uaZVFs4VhM+nro61XxTjPtwZ+pZ_gsJtNQXiNHtf2vQ@mail.gmail.com> <CAMGpriX1ct9y53HZ2FtbK00TfVm3uNRFMwYQW0Wb_18XoXjFJw@mail.gmail.com> <CAKMty=KhYr4XfJWzXeBiod1oiyG-qVp7-ANKJaZF1-_nPZhrTw@mail.gmail.com> <CAAedzxocTUhQ-z+_Cpz8PhG=o3CR4aZHOGddngiEjZ1HZChP1A@mail.gmail.com>
X-Mailer: Apple Mail (2.3594.4.17)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2020-01-13_08:, , signatures=0
Archived-At: <https://mailarchive.ietf.org/arch/msg/captive-portals/nz1jI0pXSdbnTfabtQhqyTMhek0>
Subject: Re: [Captive-portals] Remediation url for CAPPORT
X-BeenThere: captive-portals@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of issues related to captive portals <captive-portals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/captive-portals/>
List-Post: <mailto:captive-portals@ietf.org>
List-Help: <mailto:captive-portals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Jan 2020 01:02:25 -0000

I have a similar initial reaction to Erik's. Adding another URL that effectively is just another user portal, but meant to be used at certain times, adds a lot of complexity. I'm certainly not ruling out adding such a key as need arises, but I'd hesitate to make it part of the initial set.

Particularly, if we start seeing the "venue URL" be the main landing page we redirect people to once they're logged it, it kind of makes sense to let the user portal be the status/remediation/payment page.

Tommy

> On Jan 13, 2020, at 4:06 PM, Erik Kline <ek@loon.com> wrote:
> 
> 
> 
> On Mon, 13 Jan 2020 at 15:26, Heng Liu <liucougar=40google.com@dmarc.ietf.org <mailto:40google.com@dmarc.ietf.org>> wrote:
> On Sun, Jan 12, 2020 at 2:34 PM Erik Kline <ek.ietf@gmail.com <mailto:ek.ietf@gmail.com>> wrote:
> Why should this different from the user-portal-url?  It seems to me that either the user-portal-url would remediation UI elements or it wouldn't.
> Some CP vendors want to specify a different URL specifically tailored for remediation of a session. By providing a 3rd URL, we can accommodate this use case.
> 
> If the remediation URL is available but the user (somehow) navigates to the user-portal-url, what do they see?
> 
>  
> With this 3rd URL, if the bytes/time does expire should the OS try to launch an interaction the remediation URL and then fallback to the user URL if it failed to load?  In which case, why not just leave all interaction with the user-portal-url?
> if a remediation URL is present, and if it fails to load for whatever reason, no need to fallback to user portal URL: CP vendor should make sure the remediation URL is working properly (this is similar to user-portal url should work properly, if not, there is no other way for user to clear a CP)
> 
> I guess I'm just trying to be mindful of one person's flexibility is another person's complexity.  I think this just doubles the number of URLs that the CP vendor needs to make sure function correctly.
> 
> If the vendor doesn't implement a means to extend your session without completely shutting everything down and forcing to the user to restart the interaction flow anew, I could see that an OS would not want to bother the user with an interaction where they couldn't actually do anything useful.  But that might suggest a boolean capability, rather than a new URL (remediation-supported={true|false})?
> A boolean field could also be a positive signal to notify UE that remediation is possible, but this would prevent CP vendors from using different URLs for remediation.
> 
> (As mentioned in the initial thread, this URL approach is also taken by the Passpoint release 2.0 spec to signal remediation process.)
> 
> regards,
> Heng
> _______________________________________________
> Captive-portals mailing list
> Captive-portals@ietf.org <mailto:Captive-portals@ietf.org>
> https://www.ietf.org/mailman/listinfo/captive-portals <https://www.ietf.org/mailman/listinfo/captive-portals>
> _______________________________________________
> Captive-portals mailing list
> Captive-portals@ietf.org <mailto:Captive-portals@ietf.org>
> https://www.ietf.org/mailman/listinfo/captive-portals <https://www.ietf.org/mailman/listinfo/captive-portals>