Re: [Curdle] Alexey Melnikov's Discuss on draft-ietf-curdle-ssh-ext-info-12: (with DISCUSS and COMMENT)

denis bider <denisbider.ietf@gmail.com> Thu, 14 September 2017 17:16 UTC

Return-Path: <denisbider.ietf@gmail.com>
X-Original-To: curdle@ietfa.amsl.com
Delivered-To: curdle@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E923313218F; Thu, 14 Sep 2017 10:16:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9-RKbvzfFaw4; Thu, 14 Sep 2017 10:16:39 -0700 (PDT)
Received: from mail-lf0-x22f.google.com (mail-lf0-x22f.google.com [IPv6:2a00:1450:4010:c07::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03E0C126BF0; Thu, 14 Sep 2017 10:16:39 -0700 (PDT)
Received: by mail-lf0-x22f.google.com with SMTP id q132so4340lfe.5; Thu, 14 Sep 2017 10:16:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=ia+qMt+eG3mRlRtLs1b1YVEz6qH0hUTDoEb1dKhGNm4=; b=poh6eI0AeYG/GVsb+Kz7lWJn7OEi80Sb6KDewAxSfRxnmOxXgfaj4gKQ+d2tq6fxaj 225razgbt9EeJVtcrNC3CbOa2s5NuM2D7hu7f9DjPy4T9GFRYEA36Uv529xO6z0Joo1/ PIrKYaU1oUy4StA2OrzzyrbA3pgYZrqgGzcFwkRJvK2oLNu1bCo2bx5bqi7QSZz//52I 6E3H/F2e51gMDtRcAVUwIKlzmSbQjedDoEOQtz7G2RPiEyg0xgKFLVdrrez/oLtCC/H6 BYUHuV7MUc3+/JR9nvx2n/XoozUrcz45EDbhA/ZU2TahdM1Dycf+sARkNqfOi8U2WbJC Os9Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=ia+qMt+eG3mRlRtLs1b1YVEz6qH0hUTDoEb1dKhGNm4=; b=X07/F7VxQJh9fHtvKyt3zaAJjGRTUKT9nOfTZHjrxxUDQPe+3KXx1d/TupB+pCgvmx oQ7xS95vhf047iy/twq1jbw1fHFHFpwlg4/hkLLyCsvIfF+WZBuDnllJpSgLUtNGWk99 RA45JeJoYqtI+GIK9zuly33DlAYCGjQ47AsNC50r7AbXznRq5G6kWf4sMyGr5g3+AlYL wdaUKtWZ2kA89u9ghq3GbyOjHgp6S4ODJNna8t3fddX7jnCtoEt2Nj8XQe24dVrxaVDD GZJawWI5J5mreL+oCF8AistxEaj4LqBa1BhCQUxvCTIa1KjrRmq6OS8kSm8JLQWTvbgW TpSw==
X-Gm-Message-State: AHPjjUgFsqm5KpAiQfesXyme+Had3tCq+Kt4Cb4HLNC+iJZHMwfrIf90 5yVDM5N9vEQSLWCr2bruwYaZ66rML9zfI04c3kU=
X-Google-Smtp-Source: AOwi7QBatX2e1oilu6PpJLWngtphJyN9FZIWk9MJLF9NBYsT7U7R+5ffcs5eqrpUsA8N9hdZT4uwWrrmFMOKX0wwcNc=
X-Received: by 10.25.0.144 with SMTP id 138mr9290451lfa.64.1505409397354; Thu, 14 Sep 2017 10:16:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.179.27.209 with HTTP; Thu, 14 Sep 2017 10:16:36 -0700 (PDT)
In-Reply-To: <344c3cf4-029e-8a8c-ab83-42e18002da23@nostrum.com>
References: <150530402783.30467.17664468923363358742.idtracker@ietfa.amsl.com> <CADPMZDAENLRJEhbhYv86L=Q9v9nARtsrkicyPg86yGqrjUP0mg@mail.gmail.com> <1505308325.2062993.1104706296.3E3DDD7F@webmail.messagingengine.com> <CADPMZDAqb8QND30c+zADZRz4yo=XL_5=DYOkRPA=OCp55tq+yg@mail.gmail.com> <CABcZeBN7kYhV_1kzP21B6gAdOOnf60bkC5dcqbLDvAxdgtqGLA@mail.gmail.com> <CADPMZDBMLNamDq+32S9t=e5-dp4w3-tiu92cVjuvVgej0_Epzg@mail.gmail.com> <344c3cf4-029e-8a8c-ab83-42e18002da23@nostrum.com>
From: denis bider <denisbider.ietf@gmail.com>
Date: Thu, 14 Sep 2017 11:16:36 -0600
Message-ID: <CADPMZDBTrKFp=zVHe3igXg6e_P05K+gzVrNfm4ybcfzS0_rsbQ@mail.gmail.com>
To: Adam Roach <adam@nostrum.com>
Cc: Eric Rescorla <ekr@rtfm.com>, Daniel Migault <daniel.migault@ericsson.com>, Alexey Melnikov <aamelnikov@fastmail.fm>, curdle-chairs <curdle-chairs@ietf.org>, curdle <curdle@ietf.org>, The IESG <iesg@ietf.org>, draft-ietf-curdle-ssh-ext-info@ietf.org
Content-Type: multipart/alternative; boundary="001a113c9e0c5ef6f60559297094"
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/wNAWkRh6zF7gjvpfFDQ8RWDhZKQ>
Subject: Re: [Curdle] Alexey Melnikov's Discuss on draft-ietf-curdle-ssh-ext-info-12: (with DISCUSS and COMMENT)
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Sep 2017 17:16:41 -0000

But seriously, the spec defines the encoding. There needs to be no
guessing. The definition is right there. The example further fool-proofs so
there's no excuse for anyone to misunderstand.

Nested strings in SSH are not weird. They are used ubiquitously. For
example, in public key authentication, the public key is encoded as a
string. This string itself contains other strings which are part of the
public key format. This is not unusual. Anyone who works with SSH would be
familiar with this.

On Thu, Sep 14, 2017 at 8:15 AM, Adam Roach <adam@nostrum.com> wrote:

> On 9/14/17 08:08, denis bider wrote:
>
>> Submitted. :-)
>>
>
> Thanks. This newest version includes an example, but no further
> explanation of the encoding. Normative examples that implementors have to
> reverse engineer are generally bad for interoperability, since implementors
> have to guess at the handling for corner cases. Could you please add text
> that describes the encoding itself? It doesn't need to be overly complex,
> but it does need to be explained.
>
> /a
>