IETF Logo Mail Archive

Re: [core] [Add] DNR: Mandatory ALPN indication and non-TLS protocols (eg. OSCORE)

Benjamin Schwartz <ietf@bemasc.net> Mon, 01 May 2023 18:00 UTC

Return-Path: <benjamin.m.schwartz@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3556BC15171F; Mon, 1 May 2023 11:00:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.552
X-Spam-Level:
X-Spam-Status: No, score=-1.552 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.096, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d6tkxuy9GC1N; Mon, 1 May 2023 11:00:41 -0700 (PDT)
Received: from mail-ej1-f44.google.com (mail-ej1-f44.google.com [209.85.218.44]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B349C15153D; Mon, 1 May 2023 11:00:38 -0700 (PDT)
Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-94f109b1808so559707166b.1; Mon, 01 May 2023 11:00:38 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682964036; x=1685556036; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=kTXiAP9x/DJCdwISI+KK6Cq4t3uCVaxwjEMpk7u5ixc=; b=JI13Ap8jp9NfdkIiLcjH5m/ngOWhQVoStXBvg4ZNZH3BrVu+XfWVPan9aXNFeNbrkG 8tKDabqPaW9BadTLoCrb5fsDCIbmRKiBjadEitZChKHF5ISeQ1yKq9cBhoOsCA2hIIeO EwsvlSGmST+Hi6Tsg71V61RQUyLpkZGXweuzkOI8fjVFOC7Lb6A+4jaPbglqwD43SPIc 17yOzChdmBf4tV8oA1bBgq6+i7OBYCS3RSS+yCuJj65FA2JHuENyGdHPBymmvYywiVwP 0Tf1ogH2OYqAx8AZ4b8MhGWNpAdbnBKeUwjNoCKpxScCK8V4iNCo9+hMcdZ+6XvxygNx KQlA==
X-Gm-Message-State: AC+VfDzTRwKSj9yg+zl7pK+RxkRFxIRIhTVpqXITaCnsbR4oTMzZIyXM 2snUV2Eh7c/4JPmPv0LC7/zrLHwDuTG5asqv
X-Google-Smtp-Source: ACHHUZ7GOqJpKtZumSgcYMUaIQoBHW8GvEmuIIkEuLZ2SKLj+hIF0bnduEZE8uGECJ6PYMSjHGKeGw==
X-Received: by 2002:a17:906:9755:b0:962:582d:89bf with SMTP id o21-20020a170906975500b00962582d89bfmr140772ejy.55.1682964035670; Mon, 01 May 2023 11:00:35 -0700 (PDT)
Received: from mail-wm1-f49.google.com (mail-wm1-f49.google.com. [209.85.128.49]) by smtp.gmail.com with ESMTPSA id o25-20020aa7d3d9000000b00509bd19b869sm11255273edr.48.2023.05.01.11.00.34 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 01 May 2023 11:00:35 -0700 (PDT)
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-3f18dacd392so15642555e9.0; Mon, 01 May 2023 11:00:34 -0700 (PDT)
X-Received: by 2002:a7b:c5c6:0:b0:3f1:9acf:8682 with SMTP id n6-20020a7bc5c6000000b003f19acf8682mr9840253wmk.17.1682964034608; Mon, 01 May 2023 11:00:34 -0700 (PDT)
MIME-Version: 1.0
References: <7C5E08FC-B362-49B5-A65A-E8F5BD48D5DA@gmail.com> <CAJF-iTRoANDJjdrX5v6GcS4n3nuDFgMZpeof3R-j8F-GNp7w9w@mail.gmail.com> <ZCKkM7w6oRDkxxlG@hephaistos.amsuess.com>
In-Reply-To: <ZCKkM7w6oRDkxxlG@hephaistos.amsuess.com>
From: Benjamin Schwartz <ietf@bemasc.net>
Date: Mon, 01 May 2023 14:00:22 -0400
X-Gmail-Original-Message-ID: <CAJF-iTS_5W+Ny6T6exN+vY0ZiWxEz3Fcvm7iv8gOCdX6WF66tw@mail.gmail.com>
Message-ID: <CAJF-iTS_5W+Ny6T6exN+vY0ZiWxEz3Fcvm7iv8gOCdX6WF66tw@mail.gmail.com>
To: Christian Amsüss <christian@amsuess.com>
Cc: Dan Wing <danwing@gmail.com>, draft-ietf-add-dnr@ietf.org, draft-ietf-core-dns-over-coap@ietf.org, add@ietf.org, core@ietf.org
Content-Type: multipart/alternative; boundary="00000000000073e15405faa599dd"
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/ki2XsqGm4qwtpEewDJvBr7Dm9vo>
Subject: Re: [core] [Add] DNR: Mandatory ALPN indication and non-TLS protocols (eg. OSCORE)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 May 2023 18:00:42 -0000

FYI, I've added a relevant text change here:
https://github.com/ietf-wg-add/draft-ietf-add-svcb-dns/commit/65927be7ba79fbc6c93a2c793f8b8b455b394ea5

On Tue, Mar 28, 2023 at 4:24 AM Christian Amsüss <christian@amsuess.com>
wrote:

> Hello Dan, Ben,
>
> On Sun, Mar 26, 2023 at 05:35:17PM -0400, Benjamin Schwartz wrote:
> > > > This field MUST include at least "alpn" SvcParam (...), *or an
> SvcParam
> > > > that indicates some other security and disambiguation mechanism*.
> >
> > This seems like a reasonable change to me.
>
> On Sun, Mar 26, 2023 at 02:01:01PM +0100, Dan Wing wrote:
> > Sounds reasonable to me.
>
> Thanks, that will allow us to make more comprehensive use of DNR.
>
> On Sun, Mar 26, 2023 at 02:01:01PM +0100, Dan Wing wrote:
> > As you know well, many specs are TLS-specific, too, of course. You’ll
> > likely need an over-arching Updates RFC for all of those to IANA
> > register OSCORE.
>
> Yes, but many of these are not applicable to the Constrained environment
> niche for which OSCORE & co are designed. This one is, because it's sent
> in RAs, which are also used in the 6LoWPAN context. I don't plan to
> update any of the >800 documents that reference RFC5246 or RFC8446 :-)
>
> BR
> Christian
>

v2.46.0 | Report a Bug | By Email | System Status