[core] Mail regarding draft-ietf-ace-key-groupcomm

Jim Schaad <ietf@augustcellars.com> Thu, 04 April 2019 01:42 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14F1C120071; Wed, 3 Apr 2019 18:42:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lWit8lPSaXZT; Wed, 3 Apr 2019 18:42:41 -0700 (PDT)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C868C120003; Wed, 3 Apr 2019 18:42:40 -0700 (PDT)
Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 3 Apr 2019 18:42:34 -0700
From: Jim Schaad <ietf@augustcellars.com>
To: draft-ietf-ace-key-groupcomm@ietf.org
CC: core@ietf.org
Date: Wed, 03 Apr 2019 18:42:31 -0700
Message-ID: <003201d4ea87$acb73780$0625a680$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 16.0
Content-Language: en-us
Thread-Index: AdTqhNNyNWeMmgN+Rsq71GPkqAXXZA==
X-Originating-IP: [73.180.8.170]
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/QRQ5uwdi4BVCyQiviE_cmmdseJk>
Subject: [core] Mail regarding draft-ietf-ace-key-groupcomm
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 Apr 2019 01:42:43 -0000

Some additional things that need to be thought about.

1.  Someplace as part of the re-key discussions there ought to be some
commentary on the wisdom of rate limiting the frequency of doing re-keying
operations.

2. I think that there should be an optional parameter that says "If this
much time has elapsed since the last time you checked, see if the group id
has changed."  This would be combined with a polling client to ensure that
they check for an updated key context before doing some operation.

3.  What happens in the following situations:
a) The key context is changed between a request being sent and the server
receiving the request.  This could just be because the sender did not get
the notification of the key context changing.

b) The response takes "a while" to generate and the key context is changed
after the request is received, but before the response is sent.

c)  The key context is changed in the middle of a block-wise transfer.

Jim