Re: [Dots] draft-ietf-dots-signal-channel-23: application/cbor media types

"Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com> Wed, 05 September 2018 02:59 UTC

Return-Path: <TirumaleswarReddy_Konda@mcafee.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2071A1286D9 for <dots@ietfa.amsl.com>; Tue, 4 Sep 2018 19:59:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level:
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mcafee.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UaqNZMtAV1iz for <dots@ietfa.amsl.com>; Tue, 4 Sep 2018 19:59:38 -0700 (PDT)
Received: from DNVWSMAILOUT1.mcafee.com (dnvwsmailout1.mcafee.com [161.69.31.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD2AD127B92 for <dots@ietf.org>; Tue, 4 Sep 2018 19:59:37 -0700 (PDT)
X-NAI-Header: Modified by McAfee Email Gateway (5500)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mcafee.com; s=s_mcafee; t=1536116388; h=From: To:CC:Subject:Thread-Topic:Thread-Index:Date: Message-ID:References:In-Reply-To:Accept-Language: Content-Language:X-MS-Has-Attach:X-MS-TNEF-Correlator: dlp-product:dlp-version:dlp-reaction:authentication-results: x-originating-ip:x-ms-publictraffictype:x-microsoft-exchange-diagnostics: x-ms-exchange-antispam-srfa-diagnostics:x-ms-office365-filtering-correlation-id: x-microsoft-antispam:x-ms-traffictypediagnostic: x-microsoft-antispam-prvs:x-exchange-antispam-report-test: x-ms-exchange-senderadcheck:x-exchange-antispam-report-cfa-test: x-forefront-prvs:x-forefront-antispam-report: received-spf:x-microsoft-antispam-message-info: spamdiagnosticoutput:spamdiagnosticmetadata: Content-Type:Content-Transfer-Encoding:MIME-Version: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-originalarrivaltime: X-MS-Exchange-CrossTenant-fromentityheader: X-MS-Exchange-CrossTenant-id:X-MS-Exchange-Transport-CrossTenantHeadersStamped: X-OriginatorOrg:X-NAI-Spam-Flag:X-NAI-Spam-Threshold: X-NAI-Spam-Score:X-NAI-Spam-Version; bh=l nE7GfkjBkBratbJvf+RCi1CAqb+lyEdUByPdWceyS s=; b=GpO8uCHiN8akekEvshGiqmUsvXsG/MzKLpAG2exgoN35 V5nbNX4SpcC+bT/iAtZgx1d+0kLW04f5nEYub51mQqJ312ttNs sNjolPc216B/YXATaKfXA/ZZPT+DrPATj8cYmuNvig4MGa5qzN HHoyC2DgaMHb7rw5U+PZxpvtH9g=
Received: from DNVEXAPP1N06.corpzone.internalzone.com (unknown [10.44.48.90]) by DNVWSMAILOUT1.mcafee.com with smtp (TLS: TLSv1/SSLv3,256bits,ECDHE-RSA-AES256-SHA384) id 251b_5053_62ce6a97_14c5_40a0_9450_d96691123eb8; Tue, 04 Sep 2018 21:59:47 -0500
Received: from DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) by DNVEXAPP1N06.corpzone.internalzone.com (10.44.48.90) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 4 Sep 2018 20:59:32 -0600
Received: from DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) by DNVEXUSR1N08.corpzone.internalzone.com (10.44.48.81) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 4 Sep 2018 20:59:31 -0600
Received: from DNVO365EDGE2.corpzone.internalzone.com (10.44.176.74) by DNVEXAPP1N05.corpzone.internalzone.com (10.44.48.89) with Microsoft SMTP Server (TLS) id 15.0.1347.2 via Frontend Transport; Tue, 4 Sep 2018 20:59:31 -0600
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (10.44.176.242) by edge.mcafee.com (10.44.176.74) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 4 Sep 2018 20:59:31 -0600
Received: from BN6PR16MB1425.namprd16.prod.outlook.com (10.172.207.19) by BN6PR16MB0002.namprd16.prod.outlook.com (10.172.111.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1101.17; Wed, 5 Sep 2018 02:59:28 +0000
Received: from BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::a14e:458f:4a71:ef35]) by BN6PR16MB1425.namprd16.prod.outlook.com ([fe80::a14e:458f:4a71:ef35%6]) with mapi id 15.20.1101.016; Wed, 5 Sep 2018 02:59:28 +0000
From: "Konda, Tirumaleswar Reddy" <TirumaleswarReddy_Konda@McAfee.com>
To: Benjamin Kaduk <kaduk@mit.edu>
CC: Klaus Hartke <klaus.hartke@ericsson.com>, "dots@ietf.org" <dots@ietf.org>
Thread-Topic: [Dots] draft-ietf-dots-signal-channel-23: application/cbor media types
Thread-Index: AdQ/b26U3FfnApeMS7ujoqUUJwn0tQACktwwAAKtBgAABGPBsAD4uBzwACmYXxAAGWcegAAPOyww
Date: Wed, 05 Sep 2018 02:59:28 +0000
Message-ID: <BN6PR16MB1425B2F9A54927CE014011CBEA020@BN6PR16MB1425.namprd16.prod.outlook.com>
References: <e9cf1bf596b34fad8b36df6afd9bdb0e@ericsson.com> <BN6PR16MB142517B24FF91082BEFD865EEA090@BN6PR16MB1425.namprd16.prod.outlook.com> <4296b2c10f6e4d159b4b0b655432c7ea@ericsson.com> <BN6PR16MB14256E6E3BE5797E7C1DC2A3EA090@BN6PR16MB1425.namprd16.prod.outlook.com> <cc660f0b0fc94f4b94cd05194e79fb24@ericsson.com> <BN6PR16MB1425441397C1DC26D198E06CEA030@BN6PR16MB1425.namprd16.prod.outlook.com> <20180904192411.GL91593@kduck.kaduk.org>
In-Reply-To: <20180904192411.GL91593@kduck.kaduk.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.0.500.52
dlp-reaction: no-action
authentication-results: spf=none (sender IP is ) smtp.mailfrom=TirumaleswarReddy_Konda@McAfee.com;
x-originating-ip: [185.221.69.46]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BN6PR16MB0002; 6:zHwY61MIQPwOFO5QkhigzSBsoHl5wPu8JlnUKUEC3faH/uMRngiv0007v9jiayN8va4NVyTG5dsTLR4bOQ1j9RKoLf2c1tcrEoDvQkFEdP8u76IaZlblKOb7l0ocqFRvyt824bjx2S8aHL4DocZbIybFePzbAvYmv3er6uYY+kExu0wHOz4qcA200uJxRaPYK05LjTM5H+bL/sx3GLr0W+k4rutKCRRy849VeplRZrv6tEv3z+BzRz6zbFXlZtoSHCoyjssj1bog7gWnaXXRWafUEtPAG/pnk3mya1Qge01IUNfTrxrnC5YJTRM5j+St4l+JyDmS0kHJlqxxDUkC5FHpzKy+F9zX7018mzXtyXjthqK5JjzZ3Z2HHwMgJ/da7ZrpmXIY4HwhRzBJVrIHhG1wL9rrSfy8iG0rGRj18Z8OZex9KxnamhOL9K2OB6Kb8l5kbB7GKiEB8a9DkjS+pA==; 5:2AXL5JIXkzSVHBSVww+PsnyNTu4T0gqGsQajXsknRIi4jvWS4tK2aGzZtJxlP7yzBsrubwFfU1HoasyG8xcYudCEm7atVt/64wkYBzJhS63qgXhx0t8O/RQnYoXIajZ2jU5/L4tlkOjPwiycRV44FyE4xxJQuFXQTNqxk+FvwWM=; 7:x6XxKej4lPp6HfyuwoTrnid5AI3zR7lrxVfVB7LA8bVSg1+S/8i31my0FkNxpl+9MRDRzQH0NxE4Tc0g0Tu0Id8xhBbltR5fYQOyd/OK8jeqcATKxvpfPdzaovVNWBPHDdv6DAhAa9ogifKfTQtoocEIMXY1mOqiQyZRgZiyS5xlinarwLxruhP+649amluImXCE7wf1Zd7bRzJGUT6gff1/tbZNrcLQ+2FHosdEpR6LiuffyAt7/KegVpPYqrBn
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 29aa4154-8c91-4122-6ac8-08d612db9896
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989137)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:BN6PR16MB0002;
x-ms-traffictypediagnostic: BN6PR16MB0002:
x-microsoft-antispam-prvs: <BN6PR16MB00025FB6BF277F1A0B3FD53FEA020@BN6PR16MB0002.namprd16.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(37575265505322)(158342451672863)(240460790083961)(248295561703944)(123452027830198)(103651359005742);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231311)(944501410)(52105095)(149027)(150027)(6041310)(20161123558120)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(201708071742011)(7699016); SRVR:BN6PR16MB0002; BCL:0; PCL:0; RULEID:; SRVR:BN6PR16MB0002;
x-forefront-prvs: 078693968A
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(39850400004)(346002)(396003)(366004)(376002)(51444003)(199004)(189003)(13464003)(32952001)(5024004)(86362001)(6506007)(25786009)(256004)(68736007)(74316002)(14454004)(4326008)(105586002)(106356001)(486006)(305945005)(53546011)(7736002)(7696005)(76176011)(186003)(6246003)(476003)(26005)(8676002)(54906003)(99286004)(2171002)(8936002)(316002)(11346002)(6916009)(966005)(72206003)(80792005)(2900100001)(2906002)(93886005)(6306002)(478600001)(66066001)(5250100002)(9686003)(3846002)(6116002)(6436002)(53936002)(81156014)(81166006)(33656002)(55016002)(229853002)(446003)(97736004)(5660300001)(102836004)(85282002); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR16MB0002; H:BN6PR16MB1425.namprd16.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: McAfee.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: QjIisgZjvw43pal6QStSGS0Yr06Sj41InXeDPzTeKezzMEN5FJ4RaamFvcBDZOCRpPE0qWEO7voFl42TUC3ziU7gDqwovZb5+09S2FC/KD3bO9ZcyIAdyzzIe9Dd6N/gD1UaXbwzHi6i77WzuLQnutljz+0bQLmDzGo4KH3iSWX4QpojUge1w76e2F9QXue3XxjtBd+rJeM+9dlevY1CB7QuPrbg0lERLTybKK05S9K2XCRVbUdaK7akUTfHlEbge5AQ7csjmYdhl3bK5DNqLPtLKY+iQVCIFcVBTYCGYsg7G61QcXmMFLxBKHzeTCDZzFiWVCXPvmsbVWmLH0V28pCViJfY4alomW62Xt5bK8o=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 29aa4154-8c91-4122-6ac8-08d612db9896
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Sep 2018 02:59:28.4761 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4943e38c-6dd4-428c-886d-24932bc2d5de
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR16MB0002
X-OriginatorOrg: mcafee.com
X-NAI-Spam-Flag: NO
X-NAI-Spam-Threshold: 15
X-NAI-Spam-Score: 0
X-NAI-Spam-Version: 2.3.0.9418 : core <6366> : inlines <6853> : streams <1797528> : uri <2703292>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/JWjzQ7j3aciedBBFC42oj2jVubs>
Subject: Re: [Dots] draft-ietf-dots-signal-channel-23: application/cbor media types
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Sep 2018 02:59:40 -0000

> -----Original Message-----
> From: Benjamin Kaduk <kaduk@mit.edu>
> Sent: Wednesday, September 5, 2018 12:54 AM
> To: Konda, Tirumaleswar Reddy <TirumaleswarReddy_Konda@McAfee.com>
> Cc: Klaus Hartke <klaus.hartke@ericsson.com>; dots@ietf.org
> Subject: Re: [Dots] draft-ietf-dots-signal-channel-23: application/cbor media
> types
> 
> This email originated from outside of the organization. Do not click links or
> open attachments unless you recognize the sender and know the content is safe.
> 
> On Tue, Sep 04, 2018 at 07:27:07AM +0000, Konda, Tirumaleswar Reddy wrote:
> > > -----Original Message-----
> > > From: Klaus Hartke <klaus.hartke@ericsson.com>
> > > Sent: Monday, September 3, 2018 5:04 PM
> > > To: Konda, Tirumaleswar Reddy
> <TirumaleswarReddy_Konda@McAfee.com>;
> > > dots@ietf.org
> > > Subject: RE: draft-ietf-dots-signal-channel-23: application/cbor
> > > media types
> > >
> > > This email originated from outside of the organization. Do not click
> > > links or open attachments unless you recognize the sender and know the
> content is safe.
> > >
> > > Konda, Tirumaleswar Reddy wrote:
> > > > By default DOTS signal Channel uses port number 4646 assigned by
> > > > IANA and the DOTS server knows only DOTS requests will arrive on
> > > > this port, and "DOTS Signal Channel Claims" registry will be
> > > > created (just like it's done in
> > > > https://tools.ietf.org/html/rfc8392) to accommodate new fields.
> > > > Do you still see a need to define specific media types for DOTS ?
> > >
> > > In short: Yes, because "we know it from the context" is exactly what
> > > is known to cause problems, e.g., when you want to take the
> > > information out of this context or evolve the application later.
> >
> > I don't get your comment, It is mandatory for the DOTS server to
> > listen on port 4646 and DOTS client must only send mitigation requests to
> 4646. Further, the destination port is not multiplexed with any other protocol.
> What problems do you see (an example probably will help understand the
> problem better) ?
> 
> I think the claim is that you can't be sure there will not be some future usage
> scenario that involves conveying this data structure within some additional
> (supplementary?) data stream.  In effect, you are assuming the invariants that
> this data structure only goes on port 4646 and nothing else goes on port 4646;
> while the latter is likely to hold, I think that skepticism of the former is pretty
> reasonable.

Okay, will introduce new media type "application/dots+cbor" for DOTS mitigation, config and re-direction, and will be a minor change for existing implementations.
I presume we will also have to add DOTS CBOR tag (just like its done in https://tools.ietf.org/html/rfc8392#section-6) 

Cheers,
-Tiru

> 
> -Ben