Resent-Date: Fri, 20 Mar 2020 02:09:34 +0000
Resent-Message-Id: <E1jF76M-0005Jz-3q@lyra.w3.org>
MIME-Version: 1.0
References: <158449485958.32126.16514800548442242620@ietfa.amsl.com>
 <3DD75975-2CA3-4071-974C-922121689310@mnot.net>
 <CAH_hAJGU=2OG-QRKSiauTFzHxLXdUBAc4ngLy93b-b3MbNLiKA@mail.gmail.com>
 <17273.1584633212@critter.freebsd.dk> <20200319161130.GA19209@1wt.eu>
 <17396.1584635103@critter.freebsd.dk>
 <C5009015-BE9D-48EC-AF95-4FAEB1A7BE7F@mnot.net>
 <ebea7134-3da6-44be-b445-7f79d1717f2b@www.fastmail.com>
 <29690.1584662529@critter.freebsd.dk>
 <29ECDF59-DB00-4037-8D43-6F7329388116@mnot.net>
 <d5b892d9-b6e0-491b-9169-4f5480baf4cd@www.fastmail.com>
In-Reply-To: <d5b892d9-b6e0-491b-9169-4f5480baf4cd@www.fastmail.com>
From: Ben Schwartz <bemasc@google.com>
Date: Thu, 19 Mar 2020 22:09:06 -0400
Message-ID:
 <CAHbrMsD3Tcg_MY_onmNBpHe04jbRBTnGp+VNK0Ts0x_0E27W0w@mail.gmail.com>
To: Martin Thomson <mt@lowentropy.net>
Cc: HTTP Working Group <ietf-http-wg@w3.org>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
 micalg="sha-256"; boundary="000000000000eb6d2105a13fc5ef"
Received-SPF: pass client-ip=2a00:1450:4864:20::433;
 envelope-from=bemasc@google.com; helo=mail-wr1-x433.google.com
Subject:
 Re: New Version Notification for draft-nottingham-bikeshed-length-00.txt
Archived-At: =?utf-8?q?=3Chttps=3A//www=2Ew3=2Eorg/mid/CAHbrMsD3Tcg=5FMY=5Fo?=
 =?utf-8?q?nmNBpHe04jbRBTnGp+VNK0Ts0x=5F0E27W0w=40mail=2Egmail=2Ecom=3E?=
Resent-From: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list

--000000000000eb6d2105a13fc5ef
Content-Type: multipart/alternative; boundary="000000000000e0e0ba05a13fc517"

--000000000000e0e0ba05a13fc517
Content-Type: text/plain; charset="UTF-8"

Could the draft endorse greasing instead?

On Thu, Mar 19, 2020 at 8:46 PM Martin Thomson <mt@lowentropy.net> wrote:

> On Fri, Mar 20, 2020, at 11:22, Mark Nottingham wrote:
> > > On 20 Mar 2020, at 11:02 am, Poul-Henning Kamp <phk@phk.freebsd.dk>
> wrote:
> > > In message <ebea7134-3da6-44be-b445-7f79d1717f2b@www.fastmail.com>,
> "Martin Tho
> > > mson" writes:
> > >> Sure, the numbers will be smaller, but why have the rounding at all?
> > >
> > > To make sure it is not precise enough for framing use.
> > This
>
> And so when someone rounds up and expects that to be ample space, what
> then?  I'm not sure that I agree that this is a valid threat model.
>
> Seems like over-rotating to me.  If implementations routinely encounter
> values that don't match the actual length, then they will learn not to
> depend on the two being the same.
>
>

--000000000000e0e0ba05a13fc517
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Could the draft endorse greasing instead?</div><br><div cl=
ass=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Mar 19, 2=
020 at 8:46 PM Martin Thomson &lt;<a href=3D"mailto:mt@lowentropy.net">mt@l=
owentropy.net</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex">On Fri, Mar 20, 2020, at 11:22, Mark Nottingham wrote:<br>
&gt; &gt; On 20 Mar 2020, at 11:02 am, Poul-Henning Kamp &lt;<a href=3D"mai=
lto:phk@phk.freebsd.dk" target=3D"_blank">phk@phk.freebsd.dk</a>&gt; wrote:=
<br>
&gt; &gt; In message &lt;<a href=3D"mailto:ebea7134-3da6-44be-b445-7f79d171=
7f2b@www.fastmail.com" target=3D"_blank">ebea7134-3da6-44be-b445-7f79d1717f=
2b@www.fastmail.com</a>&gt;, &quot;Martin Tho<br>
&gt; &gt; mson&quot; writes:<br>
&gt; &gt;&gt; Sure, the numbers will be smaller, but why have the rounding =
at all?<br>
&gt; &gt; <br>
&gt; &gt; To make sure it is not precise enough for framing use.<br>
&gt; This<br>
<br>
And so when someone rounds up and expects that to be ample space, what then=
?=C2=A0 I&#39;m not sure that I agree that this is a valid threat model.<br=
>
<br>
Seems like over-rotating to me.=C2=A0 If implementations routinely encounte=
r values that don&#39;t match the actual length, then they will learn not t=
o depend on the two being the same.<br>
<br>
</blockquote></div>

--000000000000e0e0ba05a13fc517--

--000000000000eb6d2105a13fc5ef
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--000000000000eb6d2105a13fc5ef--