Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06

<mohamed.boucadair@orange.com> Thu, 07 November 2019 07:11 UTC

Return-Path: <mohamed.boucadair@orange.com>
X-Original-To: dots@ietfa.amsl.com
Delivered-To: dots@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBE3E1200FA; Wed, 6 Nov 2019 23:11:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level:
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PMTd9V8gWzQM; Wed, 6 Nov 2019 23:11:57 -0800 (PST)
Received: from relais-inet.orange.com (relais-inet.orange.com [80.12.66.39]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC62812002E; Wed, 6 Nov 2019 23:11:56 -0800 (PST)
Received: from opfedar02.francetelecom.fr (unknown [xx.xx.xx.4]) by opfedar24.francetelecom.fr (ESMTP service) with ESMTP id 477vj72VY5z5vTJ; Thu, 7 Nov 2019 08:11:55 +0100 (CET)
Received: from Exchangemail-eme6.itn.ftgroup (unknown [xx.xx.13.92]) by opfedar02.francetelecom.fr (ESMTP service) with ESMTP id 477vj71QGrzCql4; Thu, 7 Nov 2019 08:11:55 +0100 (CET)
Received: from OPEXCAUBMA2.corporate.adroot.infra.ftgroup ([fe80::e878:bd0:c89e:5b42]) by OPEXCAUBM34.corporate.adroot.infra.ftgroup ([fe80::7873:1668:636f:52c%21]) with mapi id 14.03.0468.000; Thu, 7 Nov 2019 08:11:55 +0100
From: <mohamed.boucadair@orange.com>
To: Jon Shallow <supjps-ietf@jpshallow.com>, 'Valery Smyslov' <valery@smyslov.net>, "dots@ietf.org" <dots@ietf.org>, "dots-chairs@ietf.org" <dots-chairs@ietf.org>
Thread-Topic: [Dots] WGLC on draft-ietf-dots-signal-call-home-06
Thread-Index: AQFn6BnZPpB4bEUBCFkfkOrfTcwTQahZsvdwgADvqfA=
Date: Thu, 7 Nov 2019 07:11:54 +0000
Message-ID: <787AE7BB302AE849A7480A190F8B93303135A639@OPEXCAUBMA2.corporate.adroot.infra.ftgroup>
References: <011c01d58974$74529b00$5cf7d100$@smyslov.net> <1bfc01d594c5$61631810$24294830$@jpshallow.com>
In-Reply-To: <1bfc01d594c5$61631810$24294830$@jpshallow.com>
Accept-Language: fr-FR, en-US
Content-Language: fr-FR
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.13.247]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/dots/w5HDmchOMMWu7dB6MGbQkI0hkrU>
Subject: Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06
X-BeenThere: dots@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." <dots.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dots>, <mailto:dots-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dots/>
List-Post: <mailto:dots@ietf.org>
List-Help: <mailto:dots-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dots>, <mailto:dots-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Nov 2019 07:12:00 -0000

Hi Jon, 

Thank you for sharing this cool news. 

Please see inline. 

Cheers,
Med

> -----Message d'origine-----
> De : Dots [mailto:dots-bounces@ietf.org] De la part de Jon Shallow
> Envoyé : mercredi 6 novembre 2019 18:13
> À : 'Valery Smyslov'; dots@ietf.org; dots-chairs@ietf.org
> Objet : Re: [Dots] WGLC on draft-ietf-dots-signal-call-home-06
> 
> Hi All,
> 
> I have done a preliminary working implementation of DOTS Call-Home  - there
> is still some little used functionality to finish off.
> 
> *** Issue # 1 - TCP TLS sessions
> 
> https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-3.1
> 
> " If UDP transport is used, the Call Home DOTS server begins by
> initiating a DTLS connection to the Call Home DOTS client."
> 
> This works as expected where the UDP + DTLS layer roles are switched.
> 
> " If TCP is used, the Call Home DOTS server begins by initiating a
> TCP connection to the Call Home DOTS client.  Using this TCP
> connection, the Call Home DOTS server initiates a TLS connection
> to the Call Home DOTS client."
> 
> With the current libcoap implementation, I am unable to create a CoAP
> session using TLS on an existing TCP connection - so the DOTS Client is
> unable to accept an incoming TCP session and then initiate TLS integrated
> with the CoAP session. 

[Med] Why the client would initiate the TLS session? Do you want to test a RFC8071-like approach?   

 I agree that RFC8071 only switches the TCP layer
> roles.  

[Med] Yes. 

However all works if the TCP + TLS layer roles are switched - in
> the
> same way that UDP + DTLS work.

[Med] Great. We went for this approach because we preserve the same role for both DTLS and TLS:

              +-----------+                        +-----------+
              | Call Home |                        | Call Home |
              |    DOTS   |                        |    DOTS   |
              |   server  |                        |   client  |
              +-----+-----+                        +-----+-----+
              (D)TLS client                        (D)TLS server  

> 
> Enhancing the libcoap code to support only the TCP layer being switched is
> doable - but have no idea as to whether other CoAP implementations can
> handle this specific requirement.

[Med] Do we really need to do that? 

> 
> *** Not (yet) Implemented #1 - Redirected Signalling
> 
> https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-
> 3.2.
> 2
> 
> I do not see any issues here.
> 
> *** Not (yet) implemented #2 - New Conflict Cause 4
> 
> I do not see any issues here.
> 
> *** Not (yet) Implemented #3 - Address sharing considerations
> 
> https://tools.ietf.org/html/draft-ietf-dots-signal-call-home-06#section-
> 3.3.
> 2
> 
> I do not see any issues here - just need to interface with the translators
> to get the appropriate information.
> 
> Regards
> 
> Jon
> 
> > -----Original Message-----
> > From: Dots [mailto:ietf-supjps-dots-bounces@ietf.org] On Behalf Of Valery
> > Smyslov
> > Sent: 23 October 2019 08:36
> > To: dots@ietf.org
> > Cc: dots-chairs@ietf.org
> > Subject: [Dots] WGLC on draft-ietf-dots-signal-call-home-06
> >
> > Hi,
> >
> > this message starts a Work Group Last Call (WGLC) for
> draft-ietf-dots-signal-
> > call-home-06.
> > The version to be reviewed is here:
> https://www.ietf.org/id/draft-ietf-dots-
> > signal-call-home-06.txt
> >
> > The WGLC will last for two weeks and will end on November the 7th.
> > Please send your comments to the list before this date.
> >
> > Regards,
> > Frank & Valery.
> >
> >
> > _______________________________________________
> > Dots mailing list
> > Dots@ietf.org
> > https://www.ietf.org/mailman/listinfo/dots
> 
> _______________________________________________
> Dots mailing list
> Dots@ietf.org
> https://www.ietf.org/mailman/listinfo/dots