Re: [DNSOP] Spencer Dawkins' Discuss on draft-ietf-dnsop-session-signal-12: (with DISCUSS and COMMENT)

Benjamin Kaduk <kaduk@mit.edu> Fri, 27 July 2018 17:33 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BEAC131084; Fri, 27 Jul 2018 10:33:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.201
X-Spam-Level:
X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N9Jyd34JjOvo; Fri, 27 Jul 2018 10:33:22 -0700 (PDT)
Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FA0613105F; Fri, 27 Jul 2018 10:33:21 -0700 (PDT)
X-AuditID: 12074424-125ff70000004129-a1-5b5b575e4dfc
Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 81.26.16681.F575B5B5; Fri, 27 Jul 2018 13:33:19 -0400 (EDT)
Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id w6RHXGPd015026; Fri, 27 Jul 2018 13:33:17 -0400
Received: from mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w6RHXCgY010591 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 27 Jul 2018 13:33:14 -0400
Date: Fri, 27 Jul 2018 12:33:12 -0500
From: Benjamin Kaduk <kaduk@mit.edu>
To: Spencer Dawkins <spencerdawkins.ietf@gmail.com>
Cc: The IESG <iesg@ietf.org>, tjw.ietf@gmail.com, dnsop@ietf.org, dnsop-chairs@ietf.org, draft-ietf-dnsop-session-signal@ietf.org
Message-ID: <20180727173312.GE12983@mit.edu>
References: <153266600019.24802.9316144897968330271.idtracker@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <153266600019.24802.9316144897968330271.idtracker@ietfa.amsl.com>
User-Agent: Mutt/1.9.1 (2017-09-22)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmleLIzCtJLcpLzFFi42IR4hRV1o0Pj442mNkhafFm+yQWi7tvLrNY zFu/hslixp+JzBbLpuxhtpjWtpnZgc1j56y77B5LlvxkCmCK4rJJSc3JLEst0rdL4Mr4//gW W8EM3oq7t9cyNTCe5upi5OSQEDCRWLn2E2sXIxeHkMBiJok3j58wQTgbGSV+rP7GDOGcZZLo 2d7EAtLCIqAqsXjeQSYQm01ARaKh+zIziC0iYCzx5dorNhCbWaCLUaKvPQLEFhbIlPj9vBGs nldAR+LxjQOsILaQgK/ErVe3WCDighInZz5hgejVkrjx7yVQPQeQLS2x/B8HSJhTwE9iw5J/ YGNEBZQl9vYdYp/AKDALSfcsJN2zELoXMDKvYpRNya3SzU3MzClOTdYtTk7My0st0jXXy80s 0UtNKd3ECApndheVHYzdPd6HGAU4GJV4eC/YREcLsSaWFVfmHmKU5GBSEuWdGwIU4kvKT6nM SCzOiC8qzUktPsQowcGsJMIrrAKU401JrKxKLcqHSUlzsCiJ896tCY8WEkhPLEnNTk0tSC2C ycpwcChJ8AaEATUKFqWmp1akZeaUIKSZODhBhvMADXcEqeEtLkjMLc5Mh8ifYtTl+PN+6iRm IZa8/LxUKXFeDZAiAZCijNI8uDmgNCSRvb/mFaM40FvCvMwgVTzAFAY36RXQEiagJcfjIkGW lCQipKQaGBfmnT7+g+9k86PKhFV28g6fjnw4dnD/g5f37uzQ/TRr7fOLHR0zK/UlmXT+816Q 6/5Ubap+INJHhslu4Z8FJSuZJ5uere0PWdo7eYGin5d+bodbRMT89PyXp/v09zaZfrZKrv51 7bLVv/TNE9i3Rm2f//TzhwBXX+7IUldja7uEYuc7Sh8lmJVYijMSDbWYi4oTAf+YmfgeAwAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/F4RzUUHYH3qRVeFnGGpCkpb4yaE>
Subject: Re: [DNSOP] Spencer Dawkins' Discuss on draft-ietf-dnsop-session-signal-12: (with DISCUSS and COMMENT)
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2018 17:33:29 -0000

On Thu, Jul 26, 2018 at 09:33:20PM -0700, Spencer Dawkins wrote:
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
[snip]
> 
> This next one is well within the "Spencer wouldn't have done it this way, but
> Spencer's not the working group, or the IETF" range, but
> 
>   However, in the typical case a server will not know in advance
>    whether a client supports DSO, so in general, unless it is known in
>    advance by other means that a client does support DSO, a server MUST
>    NOT initiate DSO request messages or DSO unacknowledged messages
>    until a DSO Session has been mutually established by at least one
>    successful DSO request/response exchange initiated by the client, as
>    described below.  Similarly, unless it is known in advance by other
>    means that a server does support DSO, a client MUST NOT initiate DSO
>    unacknowledged messages until after a DSO Session has been mutually
>    established.
> 
> seems fragile, especially in environments where clients can come and go, and
> servers may be addressed using anycast (so I knew in advance that the four
> servers at that anycast address supported DSO, but somebody installed a fifth
> server that does not). Is that unlikely to be a problem?

Note that the client is only prohibted from using "unacknowledged"
(one-shot) messages -- it can send always normal requests and use the
presence of a reply to determine server support, on this connection.
So this seems like a pretty vanilla "client initiates" thing, if I
understand correctly.

-Benjamin

[snip]