[core] Updated CoAP option template and OSCORE handling

Christian Amsüss <christian@amsuess.com> Wed, 09 December 2020 14:28 UTC

Return-Path: <christian@amsuess.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7EDA3A16A1 for <core@ietfa.amsl.com>; Wed, 9 Dec 2020 06:28:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z9rMvpPBf9Bv for <core@ietfa.amsl.com>; Wed, 9 Dec 2020 06:28:28 -0800 (PST)
Received: from prometheus.amsuess.com (alt.prometheus.amsuess.com [IPv6:2a01:4f8:190:3064::3]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B7D93A1663 for <core@ietf.org>; Wed, 9 Dec 2020 06:28:27 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id C9689405E4 for <core@ietf.org>; Wed, 9 Dec 2020 15:28:25 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [IPv6:2a02:b18:c13b:8010:a800:ff:fede:b1bf]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id B239AAB for <core@ietf.org>; Wed, 9 Dec 2020 15:28:24 +0100 (CET)
Received: from hephaistos.amsuess.com (unknown [IPv6:2a02:b18:c13b:8010:c33c:d942:e648:1b58]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 63C4F121 for <core@ietf.org>; Wed, 9 Dec 2020 15:28:24 +0100 (CET)
Received: (nullmailer pid 3036685 invoked by uid 1000); Wed, 09 Dec 2020 14:28:23 -0000
Date: Wed, 09 Dec 2020 15:28:23 +0100
From: Christian Amsüss <christian@amsuess.com>
To: Core WG mailing list <core@ietf.org>
Message-ID: <X9DfB12PZe2/08F2@hephaistos.amsuess.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="4oNyC6Uz05ln9EP/"
Content-Disposition: inline
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/1xxDaI64EtNP5pDWKnX7RFeq1Sg>
Subject: [core] Updated CoAP option template and OSCORE handling
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Dec 2020 14:28:31 -0000

Hello CoRE,

it is custom so far with all RFCs that introduce CoAP options to
summarize their options in a table like 


 +--------+---+---+---+---+-----------+--------+--------+---------+
 | Number | C | U | N | R | Name      | Format | Length | Default |
 +========+===+===+===+===+===========+========+========+=========+
 | 16     |   |   |   |   | Hop-Limit | uint   | 1      | 16      |
 +--------+---+---+---+---+-----------+--------+--------+---------+

With OSCORE, its [table 5] introduces two more columns that, when
plainly added, but their naming conflicts on "U" as noted in the Genart
review[1].

As "how is this handled with object security" is a good thing to have at
hand, I propose 

 +--------+---+---+---+---+-----------+--------+--------+---------+---+
 | Number | C | U | N | R | Name      | Format | Length | Default | O |
 +========+===+===+===+===+===========+========+========+=========+===+
 | 16     |   |   |   |   | Hop-Limit | uint   | 1      | 16      | U |
 +--------+---+---+---+---+-----------+--------+--------+---------+---+

annotated as "O: OSCORE classification (U: unprotected)", and intend to
use this with echo-request-tag (ERT).

The practical alternative is to leave that information out of the table,
and only have it present textually; I think that would make it harder
for an implementer to grasp at one look how the option is supposed to
behave.


KR
Christian

PS. Yeah I know this is not something that needs WG-wide agreement on or
  would be binding for anyone registering an option, but still we can
  contribute to a consistent ecosystem here.

[table 5]: https://tools.ietf.org/html/rfc8613#page-17
[1]: https://datatracker.ietf.org/doc/review-ietf-core-echo-request-tag-11-genart-lc-robles-2020-12-02/

-- 
To use raw power is to make yourself infinitely vulnerable to greater powers.
  -- Bene Gesserit axiom