Re: [Dots] clarification questions from the hackathon

Olli Vanhoja <olli@zeit.co> Thu, 28 March 2019 10:47 UTC

Return-Path: <olli@zeit.co>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4FB4120251 for <dots@ietfa.amsl.com>; Thu, 28 Mar 2019 03:47:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.236
X-Spam-Level:
X-Spam-Status: No, score=-1.236 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=zeit-co.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7UwHD0naWu-j for <dots@ietfa.amsl.com>; Thu, 28 Mar 2019 03:47:49 -0700 (PDT)
Received: from mail-lj1-x232.google.com (mail-lj1-x232.google.com [IPv6:2a00:1450:4864:20::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 054AF120243 for <dots@ietf.org>; Thu, 28 Mar 2019 03:47:49 -0700 (PDT)
Received: by mail-lj1-x232.google.com with SMTP id h16so12702573ljg.11 for <dots@ietf.org>; Thu, 28 Mar 2019 03:47:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zeit-co.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Nsz386tLxCJmu2j8S4QU3iZnVUVDhaJVOdpHTqsPt+s=; b=ZACcCJTroqj9Ac7VutXWyHaBx6IKBKDpVIJEIEEbQQ/xe897QZqBqb6MZ4KKkJyRQ8 e609nTIHWZy3yS8ydst3lGsaUznt/5QtYAt0dV7UcE+GfOzjAHdvx5gr0p7xozSwtZk/ q3ERZG2DF4Lt2rDFebokXX7u09ICcqjpx0uXgCc+LTojmA6DOcAHqupnHiXRcDpm+kCS Y3HhSR7F+JJRrvwjb45O46/42PtRBSLMXZrmAIUvl5wDJc8pGcuccxI+KfC5xHHFRmJg p1bMqaKhc/f4rDQBsCrVPZA1es7AzUi1W0Gz8asmqCbFZqQT9gH8ZHCIsD4u3aPSoi1l Amxg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Nsz386tLxCJmu2j8S4QU3iZnVUVDhaJVOdpHTqsPt+s=; b=Q7Vpq+vVfvnprMzTJGJysFTRPTVEVXSVl+CK6z4NWcFaQu3+HoR9LiLXSDVxta0pDO 9R2hnJzk0F0Qt3ta53h3EnvVs7RXS/PfcPyRDi+ri8MmJW0LYFEpuO/LoyG93oyFfEp5 lZkv6/hbHkTv6K+UaPpSdZLNcWjyAveFQc378RrfQvmrA9Vs310+UmcChl2R+Ghbo6jt rCgbVObMxkrfwZ0AN9jOxuXJtSZLLFkTZAwqvt1Ze0109/uMyP1BkD8tC1sidPfRw7xa sVTo0ETcUD0VtV53rC1krAhImFIfEyEUoifZgOojVHCLP8h28+fjnzWdafU6PYpCv42A k8Mg==
X-Gm-Message-State: APjAAAXYc3ooahFxaKys7mYL0SNzKu3Cv+3uN110DnFK3/gqe5QfFuyE utBsLLB8kfhypW0FhxcVeBrvRT/yu3r/9BUyNcDvpnASrdU=
X-Google-Smtp-Source: APXvYqzK3aWmNOfW+PKjL8cIF3BBHt0RMPlvrdgE3Mm0iRpQZ8szneSrF7VdgGrVPLKM6i8zR3uW38Iequ4sa5v+K4k=
X-Received: by 2002:a2e:2f06:: with SMTP id v6mr22750699ljv.139.1553770067275; Thu, 28 Mar 2019 03:47:47 -0700 (PDT)
MIME-Version: 1.0
References: <946bcc8c-2e3e-3b09-b8d1-631475ea0ea0@nttv6.jp>
In-Reply-To: <946bcc8c-2e3e-3b09-b8d1-631475ea0ea0@nttv6.jp>
From: Olli Vanhoja <olli@zeit.co>
Date: Thu, 28 Mar 2019 11:47:36 +0100
Message-ID: <CABrJZ5EBALYdSXu0L1EXX+31Fsbtq_KKPfPhO8M=SnLfS56GMw@mail.gmail.com>
To: kaname nishizuka <kaname@nttv6.jp>
Cc: dots@ietf.org
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/IkSyX2t1UEqOWQ8ha__nrr9Xja4>
Subject: Re: [Dots] clarification questions from the hackathon
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Mar 2019 10:47:51 -0000

Some additional questions.

I saw somewhere a probably outdated spec with a version ned URL
/.well-known/dots/v1/mitigate
This was however dropped from the draft:
/.well-known/dots/mitigate

Why is this? Wouldn't it be a good idea to allow versioning somewhere,
either in the request path or the request body?

Was there any consideration about PKI and/or key distribution? Or
should implementors and users solve this?