Re: [core] Editors' draft of changes to draft-ietf-core-coap-tcp-tls-08 after IESG input

Dave Thaler <dthaler@microsoft.com> Thu, 15 June 2017 18:08 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97527126C22 for <core@ietfa.amsl.com>; Thu, 15 Jun 2017 11:08:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.811
X-Spam-Level:
X-Spam-Status: No, score=-2.811 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Js-6DRv0NaJ6 for <core@ietfa.amsl.com>; Thu, 15 Jun 2017 11:08:20 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0098.outbound.protection.outlook.com [104.47.42.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E18BA120726 for <core@ietf.org>; Thu, 15 Jun 2017 11:08:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VBhlq7qx6+x5jC44TzVQutTvvMWyIJk+ZL5rKLcB/0c=; b=DtzSgRtPgR6eMh42VaNnTXtzrVRFMT3NhYW+nlvYLfIP4v2P1SjkyWAEzgGK6v/Gp11lYi/GDhpA3eGQTFbPlnAwJd+SbaO3Br9Civ3sfNEfU5C+HmBAs4Zr6/Hk7wMXZ8tLftj7G8wLrb22ZBokTmENz0lSlL4jkavKMtNObOE=
Received: from CY1PR03MB2265.namprd03.prod.outlook.com (10.166.207.17) by CY1PR03MB2267.namprd03.prod.outlook.com (10.166.207.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1157.12; Thu, 15 Jun 2017 18:08:18 +0000
Received: from CY1PR03MB2265.namprd03.prod.outlook.com ([10.166.207.17]) by CY1PR03MB2265.namprd03.prod.outlook.com ([10.166.207.17]) with mapi id 15.01.1157.017; Thu, 15 Jun 2017 18:08:18 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: Carsten Bormann <cabo@tzi.org>, "Kraus Achim (INST/ECS4)" <Achim.Kraus@bosch-si.com>
CC: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] Editors' draft of changes to draft-ietf-core-coap-tcp-tls-08 after IESG input
Thread-Index: AQHSzYjBwBIBdIBPxEuU/kZRm5tUPKH1ereAgAAOooCAMOBQAA==
Date: Thu, 15 Jun 2017 18:08:18 +0000
Message-ID: <CY1PR03MB2265ED47B6ADE6B7A2810C77A3C00@CY1PR03MB2265.namprd03.prod.outlook.com>
References: <76EA187B-4A41-4363-B49E-75064626190A@tzi.org> <ee31590027944221a50467618d36fb2e@FE-MBX1027.de.bosch.com> <BACD0C4E-5438-46B8-ADEA-30AF44409440@tzi.org>
In-Reply-To: <BACD0C4E-5438-46B8-ADEA-30AF44409440@tzi.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: tzi.org; dkim=none (message not signed) header.d=none;tzi.org; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [2001:4898:80e8:7::607]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2267; 7:JOM58gIFkSjPVOd2nI03QFhv/Y9zLxsiMgFKmiLwE7bH3VY2Q1GZgj92SlqTKZWsP2pT+Ny4uazblH9cOHBSxKGVbOGfPcz6rO1BB1v8/j80TprjFjdeuz83WFJSz9oaDqy6xeKSL4+zysS4h1NAveJeKrI7K7VJ3Oa9fPSEWxie1V/rntc0ENLI08Bcqf9ENe+OLxAdfNfpLI2mp3o4RAEJ5x4PM0g0A5CqbHTpcwcAJatUaogf307t/js2+tVAbaWuvbjxU8hXUuFaVXUOTA84feZ3JqdwvuLwaeezyYllXmXj0XFDb0rWoCJdo606oSMkaz6+k8oX1ysKFdrnOXZKXTii54gO5hIrrt3KDK0=
x-ms-traffictypediagnostic: CY1PR03MB2267:
x-ms-office365-filtering-correlation-id: 5c593750-1807-4e00-d0c9-08d4b419807a
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254075)(48565401081)(201703131423075)(201703031133081); SRVR:CY1PR03MB2267;
x-microsoft-antispam-prvs: <CY1PR03MB2267B019E2B516DBACFEE47DA3C00@CY1PR03MB2267.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(166708455590820)(275740015457677)(150554046322364)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(61425038)(6040450)(601004)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(10201501046)(3002001)(93006095)(93001095)(6055026)(61426038)(61427038)(6041248)(20161123562025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123555025)(20161123564025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:CY1PR03MB2267; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:CY1PR03MB2267;
x-forefront-prvs: 0339F89554
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39450400003)(39850400002)(39410400002)(39400400002)(39860400002)(39840400002)(377454003)(24454002)(13464003)(76176999)(54356999)(5005710100001)(5660300001)(10290500003)(50986999)(53936002)(10090500001)(3660700001)(3280700002)(77096006)(6506006)(966005)(14454004)(478600001)(7696004)(7736002)(7906003)(2950100002)(74316002)(189998001)(81166006)(6306002)(86362001)(8676002)(8936002)(25786009)(229853002)(4326008)(53546009)(102836003)(6116002)(122556002)(230783001)(54896002)(33656002)(55016002)(236005)(790700001)(6436002)(606005)(8990500004)(9686003)(2906002)(99286003)(1680700002)(2900100001)(38730400002)(53386004)(6246003)(19609705001)(86612001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2267; H:CY1PR03MB2265.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY1PR03MB2265ED47B6ADE6B7A2810C77A3C00CY1PR03MB2265namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2017 18:08:18.7703 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2267
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/PMVaMe7KI13yVoaCTZ3IOn_7awo>
Subject: Re: [core] Editors' draft of changes to draft-ietf-core-coap-tcp-tls-08 after IESG input
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Jun 2017 18:08:23 -0000

I haven’t seen any response to my WG post about resource directory so I’ll add onto Carsten’s response here which I agree with.
Specifically draft -09 says:
7.1<https://tools.ietf.org/html/draft-ietf-core-coap-tcp-tls-09#section-7.1>.  Use of the "coap" URI scheme with TCP

   The "coap" URI scheme defined in Section 6.1 of [RFC7252]<https://tools.ietf.org/html/rfc7252#section-6.1> can also be

   used to identify CoAP resources that are intended to be accessible

   using CoAP over TCP.



   The syntax defined in Section 6.1 of [RFC7252]<https://tools.ietf.org/html/rfc7252#section-6.1> applies to this

   transport, with the following change:



   o  The port subcomponent indicates the TCP port at which the CoAP

      server is located.  (If it is empty or not given, then the default
      port 5683 is assumed, as with UDP.)

The problem I have with the above text is that it makes the meaning of the port in the URI be ambiguous, which is problematic.
You cannot assume (since no such requirement is stated in the doc) that the UDP port number and TCP port number are the same.
So let’s say the server uses ephemeral ports for a given resource that is accessible over both UDP and TCP, and it got given
UDP port 50000 and TCP port 51000.   Does it have two URIs for that resource?  i.e.
                coap://hostname:50000/resource/path
                coap://hostname:51000/resource/path

If a client gets either or both of those, it has no idea whether the port number is a UDP or a TCP port number, and if it guesses wrong,
it’s a completely different resource (e.g., /resource/path on UDP port 51000 might be a different app with a different resource).
As such, there is no guarantee of interoperability.  Indeed an RFC 7252 compliant client will treat both as UDP port numbers,
and can end up accessing the wrong resource as a result.   That breaks backwards compatibility.

Hence unless someone can explain why this doesn’t break backwards compatibility, I think section 7.1 in draft-09 is broken.

Dave

From: core [mailto:core-bounces@ietf.org] On Behalf Of Carsten Bormann
Sent: Monday, May 15, 2017 8:45 AM
To: Kraus Achim (INST/ECS4) <Achim.Kraus@bosch-si.com>
Cc: core@ietf.org
Subject: Re: [core] Editors' draft of changes to draft-ietf-core-coap-tcp-tls-08 after IESG input

Well, I just tried to realize what the IESG thought was right. But I can't fail to notice that the existing solution didn't really address the situation very well either, except where the server (or other entity supplying the link) knew exactly what the client should be doing. Section 7.8 is trying to give some guidance, but it will hardly ever be good enough to propose solutions for all possible situations.

Sent from mobile

On 15. May 2017, at 16:52, Kraus Achim (INST/ECS4) <Achim.Kraus@bosch-si.com<mailto:Achim.Kraus@bosch-si.com>> wrote:
Hi Carsten,


IESG members have asked us to stop proliferating URI schemes, and as a result the draft remains with coap:// and coaps:// for all new transports.

Assuming a system, which supports CoAP over UDP and over TCP, how should such a system select, if UDP or TCP is intended to be used for a given destination?

Mit freundlichen Grüßen / Best regards

Achim Kraus

(INST/ECS4)
Bosch Software Innovations GmbH | Stuttgarter Straße 130 | 71332 Waiblingen | GERMANY | www.bosch-si.com<http://www.bosch-si.com>

Sitz: Berlin, Registergericht: Amtsgericht Charlottenburg; HRB 148411 B
Geschäftsführung: Dr.-Ing. Rainer Kallenbach, Michael Hahn



-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of Carsten Bormann
Sent: Montag, 15. Mai 2017 16:32
To: core <core@ietf.org<mailto:core@ietf.org>>
Subject: [core] Editors' draft of changes to draft-ietf-core-coap-tcp-tls-08 after IESG input

I have generate a first editors’ draft of what might become draft-ietf-core-coap-tcp-tls-09, addressing IESG input on the draft.
(This draft addresses DISCUSSes, but almost no COMMENTS; see https://github.com/core-wg/coap-tcp-tls/issues for an overview what else needs to be done.)

This has a bit of Brownian motion (default ports etc.), but also one important change:

IESG members have asked us to stop proliferating URI schemes, and as a result the draft remains with coap:// and coaps:// for all new transports.

Please see:

https://tools.ietf.org/rfcdiff?url1=draft-ietf-core-coap-tcp-tls&url2=https://raw.githubusercontent.com/core-wg/coap-tcp-tls/gh-pages/iesg/draft-ietf-core-coap-tcp-tls.txt

for the changes from -08, and

https://core-wg.github.io/coap-tcp-tls/iesg/

for a full document.

For example,

https://core-wg.github.io/coap-tcp-tls/iesg/#rfc.section.7.8

is a new section, but many other sections concerned with URIs and URI schemes have received changes.

It is important if the WG can live with this change, or whether we need to incur further delay pushing back on this change.
Please let us know!

Grüße, Carsten

_______________________________________________
core mailing list
core@ietf.org<mailto:core@ietf.org>
https://www.ietf.org/mailman/listinfo/core
_______________________________________________
core mailing list
core@ietf.org<mailto:core@ietf.org>
https://www.ietf.org/mailman/listinfo/core