Re: [Captive-portals] Use Case: "Carrier Grade Captive Portal"

Erik Kline <ek@google.com> Tue, 27 June 2017 12:11 UTC

Return-Path: <ek@google.com>
X-Original-To: captive-portals@ietfa.amsl.com
Delivered-To: captive-portals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3CF3126C25 for <captive-portals@ietfa.amsl.com>; Tue, 27 Jun 2017 05:11:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pXLioC7nESLy for <captive-portals@ietfa.amsl.com>; Tue, 27 Jun 2017 05:11:35 -0700 (PDT)
Received: from mail-yw0-x231.google.com (mail-yw0-x231.google.com [IPv6:2607:f8b0:4002:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23982120227 for <captive-portals@ietf.org>; Tue, 27 Jun 2017 05:11:35 -0700 (PDT)
Received: by mail-yw0-x231.google.com with SMTP id l21so2496689ywb.1 for <captive-portals@ietf.org>; Tue, 27 Jun 2017 05:11:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=weuj5HX+lqB8MF1SonglenLMpWIZI1AwHKWOo8hkR6c=; b=PH70gNRu0FxIu7xE/ihAASgVPBRDeb3hZtAFsd0kl06Tn+eIsOlWUX7svvPyopzgXE ZTTJZ6vqf4L1GcRZxNfeBO7BQb8UXstSfbLBlyUt4ogdNytHccuanTS0yb08hzIaa2dq 5NTWG51gu4DcgTWdVuRwr7zx6+cvf/P/o+uRJSOGE1MppSSdkZyW+MOJZgTKYaw5slrr IR9OBggoJA2RLaw63AxJRMJg92kePMrcOfSBzhcSq6KbYaxEqa/3PfIx3ZcI6hp1wJUu PsZG2ilW5G15dNkXtliClM59a2r0psKA6jJeZj/OvQg7kLODvSHJ4BFRXjKx813BHWUF 9xwA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=weuj5HX+lqB8MF1SonglenLMpWIZI1AwHKWOo8hkR6c=; b=iqEdrdW/EfarRgm5AdinKhbWVIFMRkqJil41igj6W9pbDkZrRVfwZGoTFQ+3M4OsYw Il7z2mYGbMyq9buVNXznCoxezNnH1lofd2hSrxZUawkoil1OIljiRwyrYA4eaxtuhOm8 7h7qKbtcohPEihwlGicwDZ2nkwf8r2F2JodKOU9UeIjXk/Zk2XA8HvQY2cfAB0mYe3qn p41q9jCNH5wFvMIU9GlevCHvKYRaCKyjJ5QHspw+nNqH6MxQUSvaV1FMwtl2BcP9xZtI 3lILrZ0vo4fBioJkY4Tjege1yq5vDMP15U9KuxKRbpkgM2NG4k6+8l2pO+Teg++ku3Rp /xyA==
X-Gm-Message-State: AKS2vOzV2CCvvqAPiKqKeqph11t1bWu+fwxlrRZxDXiOkCO1VmrA2Qr9 Z+eRH8ADjWxVDasQZ6jo9c7vGPaOQnk1
X-Received: by 10.129.121.84 with SMTP id u81mr717253ywc.288.1498565493842; Tue, 27 Jun 2017 05:11:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.59.85 with HTTP; Tue, 27 Jun 2017 05:11:12 -0700 (PDT)
In-Reply-To: <E8355113905631478EFF04F5AA706E987061FACA@wtl-exchp-1.sandvine.com>
References: <201705031442.50683.heiko.folkerts@bsi.bund.de> <E8355113905631478EFF04F5AA706E98705C6C57@wtl-exchp-1.sandvine.com> <CAHw9_iJARf4MUA8nHqHA54jLvJNq-_Vek67A-rjHpSK6vC7r+Q@mail.gmail.com> <1BB90528-B35F-43F0-AF18-0215DC735FF0@cable.comcast.com> <CABkgnnWT6Xtqyx6pofpNOGa5E1FjJO1gPX1axmmiRaMnzxdoPg@mail.gmail.com> <AD3F2B14-E9AD-4156-96A6-9B83F8545B54@cable.comcast.com> <754719c5-c74c-fbdc-405e-b8c91478c0a5@netcologne.de> <CAAedzxoZkuauME8n3B3aZqE1rra8p2hB9rGJLqoYyVi8usnx+g@mail.gmail.com> <CADo9JyVsfVYTPQjHiEn1JcJ=_NzOOvtWjbuCZdQ-4jsRPpz2wQ@mail.gmail.com> <E8355113905631478EFF04F5AA706E987061FACA@wtl-exchp-1.sandvine.com>
From: Erik Kline <ek@google.com>
Date: Tue, 27 Jun 2017 21:11:12 +0900
Message-ID: <CAAedzxp93R=LMA0Nj2Wqr3K48QfkYk3Nbq=mrE1A5JudocDQZA@mail.gmail.com>
To: Dave Dolson <ddolson@sandvine.com>
Cc: "captive-portals@ietf.org" <captive-portals@ietf.org>, David Bird <dbird@google.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="001a114a203cfa42040552eff72f"
Archived-At: <https://mailarchive.ietf.org/arch/msg/captive-portals/ujf4kP4zna4kHvbDicEVlaWmA-U>
Subject: Re: [Captive-portals] Use Case: "Carrier Grade Captive Portal"
X-BeenThere: captive-portals@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Discussion of issues related to captive portals <captive-portals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/captive-portals/>
List-Post: <mailto:captive-portals@ietf.org>
List-Help: <mailto:captive-portals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jun 2017 12:11:38 -0000

Dave,

Eric Vyncke (or another principal author) should have a presentation slot
in Prague to re-introduce us all and restart some discussion.

(Sorry for the long delay in responding.)

On 24 June 2017 at 03:57, Dave Dolson <ddolson@sandvine.com> wrote:

> [resend with fewer recipients to avoid mailing list problems]
>
>
>
> To echo David’s request,
>
> > If the authors of the PvD concept (re-)present their I-D to the mailing
> list, and stick around for discussion, that would be helpful.
>
>
>
>
>
> *From:* David Bird [mailto:dbird@google.com]
> *Sent:* Wednesday, June 14, 2017 9:36 AM
> *To:* Erik Kline
> *Cc:* Gunther Nitzsche; Mark Townsley; Heiko Folkerts; Martin Thomson;
> captive-portals@ietf.org; Livingood, Jason; Herzig, Willi; Warren Kumari;
> Dave Dolson
> *Subject:* Re: [Captive-portals] Use Case: "Carrier Grade Captive Portal"
>
>
>
> On Sun, Jun 11, 2017 at 11:17 PM, Erik Kline <ek@google.com> wrote:
>
> I'm not sure we have enough input on whether 511 is useful or not.  There
> seemed to be some suggestion it would help, and some that it wouldn't.
> Perhaps one question we could ask is whether it's harmful?  And if we agree
> it's not harmful, is it worth developing some recommendations for its use?
>
>
>
>
>
> In of itself, I don't believe it is harmful. However, if vendors use it as
> a reason to continue to terminate TLS connection in order to deliver the
> 511, then perhaps it is a bit harmful - or at least misleading. As the
> world moves to TLS (and QUIC), I think the time for the 511 code has
> already passed, to some degree. That, combined with the fact you may still
> have browsers not handling that return code properly, I don't see the value
> for any vendor or venue to implement this.
>
>
>
>
>
> As for the ICMP unreachable option, I certainly don't think it would be
> harmful (with the extra URL bits removed for now).  Is that something we
> wish to progress?
>
>
>
>
>
> I will work on a new draft that is only the basics. The additional fields
> could always be add in their own draft as extensions.
>
>
>
>
>
> Given that we're probably looking at a portal detection method based on
> entirely new work, it seems to me we're free to look at new things like
> utilizing the PVD detection scheme (DNS queries for "provisioning domain
> names", followed by other interaction still TBD).  Have the portal
> implementors reviewed this and given consideration as to whether its
> useful?  (I think of the discovery of the portal and subsequent interaction
> with it as 2 separate processes conducted, obviously, in serial.)
>
>
>
>
>
> I believe there are several talking points here, as the PvD method seems
> to have several possible implementations.
>
>
>
> I think requiring Ipv6 to configure Ipv4 is weird (I believe that was one
> proposed method to convey configuration)
>
>
>
> Several points I made in the thread "Arguments against any Capport API"
> regarding a web service - detached from the NAS - controlling the
> UE/station I think are relevant.
>
>
>
> If the authors of the PvD concept (re-)present their I-D to the mailing
> list, and stick around for discussion, that would be helpful.
>
>
>
>
>
> Thoughts?
>
>
> _______________________________________________
> Captive-portals mailing list
> Captive-portals@ietf.org
> https://www.ietf.org/mailman/listinfo/captive-portals
>
>
>
> _______________________________________________
> Captive-portals mailing list
> Captive-portals@ietf.org
> https://www.ietf.org/mailman/listinfo/captive-portals
>
>