IETF Logo Mail Archive

Re: [dnssd] Genart last call review of draft-ietf-dnssd-push-20

David Schinazi <dschinazi.ietf@gmail.com> Tue, 02 July 2019 19:36 UTC

Return-Path: <dschinazi.ietf@gmail.com>
X-Original-To: dnssd@ietfa.amsl.com
Delivered-To: dnssd@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2ABEF1206F9; Tue, 2 Jul 2019 12:36:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vv52KBjsgYTN; Tue, 2 Jul 2019 12:36:27 -0700 (PDT)
Received: from mail-lj1-x22f.google.com (mail-lj1-x22f.google.com [IPv6:2a00:1450:4864:20::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B608E120710; Tue, 2 Jul 2019 12:36:22 -0700 (PDT)
Received: by mail-lj1-x22f.google.com with SMTP id a21so18150716ljh.7; Tue, 02 Jul 2019 12:36:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=sxIFgTiC1uZrBvAuogjtd1wNaSSkchUqKSvLZ3WSCoE=; b=JJrPvBeEjkzhq6iMnvhd5u2ZduqLMMoMoi5ROKmbyRNvfNIzl6IdWCOCCmWDDK0w3o vAMYb8uJe1bJbA57zufluS9bzJf9wqpLri6znOujO8A3SyxfR7ZEam77Xt33a4ynMn3c mxjFBOgWQDzyIPcUkIwPEa/cHP5WVGCqr0sKFdYEkLirtE9qm6CHC1TNDjrQNH7mWJV+ 73+TkoLnL7nxGGc7tQfXaZmJSQiTP4IE1Yn/lDOiAZgZdvypUEfjalQE75aDlDRe2mcZ cjy8coibzMGsXqlI962S+IzCVKvXvpAM9fSLEremccARSG8vFa86OlX5kEQM2mhS+ipe nQUQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=sxIFgTiC1uZrBvAuogjtd1wNaSSkchUqKSvLZ3WSCoE=; b=BX5bxzQYfhq4qxn0QK2SRRvkpd98tBykG2QE86LQWffaVgaYVD/FbgvgoHSW/COavQ 1EqRo3LKkmKuZu9ETFuUqaoPnQWnNGmhkJ0vUkGdTBJmBmHhckF4X+KzH1AiKDHup9jn kv0NLIziU8sTJ61iQxKC/59KUPKXwgzRm7AhaXBu2qYAAnk/iJ/stTTZ9jdoX8bkBchh gNOiVKiw7xV0R1RPEr6RfwZXumYoqbNmnkD1o/QjShycXfSWKifoBJY8qdUj4GFf+K9o nqJUIpX6NSJYOoW92HhGIW9VoNmZLsgjUqES1p5uvzGVws3O3fLyqjihW7Szc/hr4pF6 9TYA==
X-Gm-Message-State: APjAAAVmQY9p/n+JMjA6DJys4bAe1khWo0OEsqS4P74iClfKnE10COrQ yz5wBCd4U48UJfF12JceA0CcIgI00vZ3p72VWFqajg==
X-Google-Smtp-Source: APXvYqz5NtHM8YhJFmTITgazXN2dHLtC0MFELQ9hcEJWHYvpWU9+kiRNKDBw9WmruoxqJSac8YsVnlPXR2D1m2vvGyE=
X-Received: by 2002:a2e:2d12:: with SMTP id t18mr6498066ljt.175.1562096180840; Tue, 02 Jul 2019 12:36:20 -0700 (PDT)
MIME-Version: 1.0
References: <156175221593.21875.9525138908968318905@ietfa.amsl.com> <9E6DE124-9262-4870-A920-4E707A38DC08@bangj.com>
In-Reply-To: <9E6DE124-9262-4870-A920-4E707A38DC08@bangj.com>
From: David Schinazi <dschinazi.ietf@gmail.com>
Date: Tue, 02 Jul 2019 12:36:09 -0700
Message-ID: <CAPDSy+7om=cBW51cyuPea9nabgJuRV3M+++gA7sy8VzfNpkn6Q@mail.gmail.com>
To: Tom Pusateri <pusateri@bangj.com>
Cc: Robert Sparks <rjsparks@nostrum.com>, draft-ietf-dnssd-push.all@ietf.org, DNSSD <dnssd@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f6ce01058cb7db55"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnssd/vDiFK_M62LLea3qYqguSUY_pm4U>
Subject: Re: [dnssd] Genart last call review of draft-ietf-dnssd-push-20
X-BeenThere: dnssd@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of extensions to DNS-based service discovery for routed networks." <dnssd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnssd>, <mailto:dnssd-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnssd/>
List-Post: <mailto:dnssd@ietf.org>
List-Help: <mailto:dnssd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnssd>, <mailto:dnssd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Jul 2019 19:36:29 -0000

Hi Tom,

If the protocol is restricted to TLS over TCP, it should send a TLS
close_notify, not a TCP RST.
TLS close_notify is cryptographically guaranteed to originate from the peer,
whereas TCP RST can be injected by an on-path entity to cause truncation
attacks.

Thanks,
David


> Page 23, top of page: Since section 4 restricts this protocol to TLS over
> TCP,
> > the "(or equivalent for other protocols)" phrase should be removed.
>
> Good catch. I removed all instances of "(or equivalent for other
> protocols)”
>

v2.23.0 | Report a Bug | By Email