Re: [Ice] Benjamin Kaduk's Yes on draft-ietf-ice-trickle-18: (with COMMENT)

Peter Saint-Andre <stpeter@mozilla.com> Wed, 04 April 2018 16:32 UTC

Return-Path: <stpeter@mozilla.com>
X-Original-To: ice@ietfa.amsl.com
Delivered-To: ice@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF98A127869 for <ice@ietfa.amsl.com>; Wed, 4 Apr 2018 09:32:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mozilla.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y_zAFVnXZUyT for <ice@ietfa.amsl.com>; Wed, 4 Apr 2018 09:32:32 -0700 (PDT)
Received: from mail-io0-x232.google.com (mail-io0-x232.google.com [IPv6:2607:f8b0:4001:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BED53120724 for <ice@ietf.org>; Wed, 4 Apr 2018 09:32:32 -0700 (PDT)
Received: by mail-io0-x232.google.com with SMTP id d6so25105438iog.1 for <ice@ietf.org>; Wed, 04 Apr 2018 09:32:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mozilla.com; s=google; h=subject:to:cc:references:from:openpgp:autocrypt:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=cKhibshHYOSapvb3RMv4tVgiyXBcBfAoHUBv9RFyvSc=; b=ICsEoqhFsV3gvqJdNXwrzwhotI1QZFh0rde4GkIEexNRgLWlWm71aZO3yPl+HsoyY7 q05H+ct6hlETeCu2btm8FKlRNwcLwpougpMbYJnBcJv3ZRxBgePYpvwF3+SLdLFAbp/r vx2d9JmAROyfcIsYgsVlqbp+y3kcxLPJxqdco=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:openpgp:autocrypt :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=cKhibshHYOSapvb3RMv4tVgiyXBcBfAoHUBv9RFyvSc=; b=KJHTTmAbRGN+QLTNErRsH4VIV2uBxc8N3TVojVbQnDy7XyqPsFmsYejgkdAgOmiqZ4 pPS6Om0PrXdwo4U3sVb2vIuLmZ6Sa/m08yKrR/eRxeRquxIijAECRyNwcl7Cii+onYFZ p+8AF48qaiVlX/xrwZfTQMGnqMUGabEHCPIQnvT0wKTaEz8nxRfoPD9Rs94e8EzSDeso 9arl2ptxUaMUCQjKObfz4KUuAMo42l3Z//t79t4r48XAjnpivFdpM1677e0doBAWRTbw 0Hb9vP0D9dTB1TZUWp2VJNCkRFUk2KJuWGjjFGlxNE1SwexbyscSALqaeJwD/3bmBOPG yy3A==
X-Gm-Message-State: ALQs6tDsfP70uHLOUKrwXATL5zJLxtKp/yQ+pWX3hYkUuy+eBk673FWq UQ6/fMUQNKqt9fQ7iaG4djlaFg==
X-Google-Smtp-Source: AIpwx48rNzoDP1J3AwQnSA481uJEP/Q01+3U+/GciKsvHp/hyPWttIyKr/7UlgYE7YLHGHT9XU3CKg==
X-Received: by 10.107.134.85 with SMTP id i82mr16518987iod.210.1522859552017; Wed, 04 Apr 2018 09:32:32 -0700 (PDT)
Received: from dragon.local ([76.25.3.152]) by smtp.gmail.com with ESMTPSA id q13sm3468502ioh.83.2018.04.04.09.32.30 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 04 Apr 2018 09:32:31 -0700 (PDT)
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: The IESG <iesg@ietf.org>, draft-ietf-ice-trickle@ietf.org, Nils Ohlmeier <nohlmeier@mozilla.com>, ice-chairs@ietf.org, ice@ietf.org
References: <152235718235.4397.6159667533096871849.idtracker@ietfa.amsl.com> <a4962891-4fac-782c-b868-1f9bd01f357c@mozilla.com> <20180329220203.GA80088@kduck.kaduk.org> <aaed7772-b1f3-4127-6746-6e36cf7d395d@mozilla.com> <20180331175225.GE80088@kduck.kaduk.org>
From: Peter Saint-Andre <stpeter@mozilla.com>
Openpgp: preference=signencrypt
Autocrypt: addr=stpeter@mozilla.com; prefer-encrypt=mutual; keydata= xsFNBFonEf4BEADvZ+RGsJoOyZaw2rKedB9pBb2nNXVGgymNS9+FAL/9SsfcrKaGYSiWEz7P Lvc97hWH3LACFAHvnzoktv+4IWHjItvhdi9kUQ3Gcbahe55OcdZuSXXH3w5cHF0rKz9aYRpN jENqXM5dA8x4zIymJraqYvHlFsuuPB8rcRIV9SKsvcy14w9iRqu770NjXfE/aIsyRwwmTPiU FQ0fOSDPA/x2DLjed/GYHem90C5vF4Er9InMqH5KAMLnjIYZ9DbPx5c5EME4zW/d648HOvPB bm+roZs4JTHBhjlrTtzDDpMcxHq1e8YPvSdDLPvgFXDcTD4+ztkdO5rvDkbc61QFcLlidU8H 3KBiOVMA/5Rgl4lcWZzGfJBnwvSrKVPsxzpuCYDg01Y/7TH4AuVkv5Na6jKymJegjxEuJUNw CBzAhxOb0H9dXROkvxnRdYS9f0slcNDBrq/9h9dIBOqLhoIvhu+Bhz6L/NP5VunQWsEleGaO 3gxGh9PP/LMyjweDjPz74+7pbyOW0b5VnIDFcvCTJKP0sBJjRU/uqmQ25ckozuYrml0kqVGp EfxhSKVqCFoAS4Q7ux99yT4re2X1kmlHh3xntzmOaRpcZsS8mJEnVyhJZBMOhqE280m80ZbS CYghd2K0EIuRbexd+lfdjZ+t8ROMMdW5L51CJVigF0anyYTcAwARAQABzSdQZXRlciBTYWlu dC1BbmRyZSA8c3RwZXRlckBtb3ppbGxhLmNvbT7CwZQEEwEIAD4WIQQ1VSPTuPTvyWCdvvRl YYwYf2gUqQUCWicR/gIbIwUJCWYBgAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBlYYwY f2gUqdaREAChG8qU1853mP0sv2Mersns8TLG1ztgoKHvMXFlMUpNz6Oi6CjjaMNFhP7eUY4T D43+yQs7f4qCkOAPWuuqO8FbNWQ+yUoVkqF8NUrrVkZUlZ1VZBMQHNlaEwwu1CGoHsLoRohP SiZ0hpmGTWB3V6cDDK4KN6nl610WJbzE9LeKY1AxtePdJi2KM281U0Fz8ntij1jWu0gF2xU4 Sez46JDogHLWKgd0srauhcCVzZjAhiWrXp1+ryzSWYaZO8Kh8SnF1f4o6jtYikMqkxUaI5nX wvD3kNX4AMSkCAZfG7Jcfj/SLDojTcREgO87g7B9bcOOsHN4lj3lHoFV0aXpgPmjfIvAjJHu fHkXZAQAH8w0u9bgJqRn703+A4NPfLopnjegyhlNi7fQ3cMQV1H7Oj7WrB/pCcprx+1u/6Uq oTtDwWh1U5uVthVAI0QojpNWR08zABDX19TlGtVoeygaQV3CAEolxTiYQtCfVavUzUplCZ/t 3v4YiRov+NylflJd+1akyOs1IAgARf444BnoH1fotkpfXNOpp9wUXXwsQcFRdP7vpMkSCkc0 sxPNTVX3ei0QImp4NsrFdaep7LV3zEb3wkAp6KE5Qno4hVVEypULbvB0G6twNZbeRfcs2Rjp jnPb2fofvg2WhAKB20dnRfIfK8OKTD/P+JDcauJANjmekM7BTQRaJxH+ARAApPwkbOTChAQu jMvteb/xcwuL5JZElmLxIqvJhqybV7JknM+3ATyN0CTYQFvPTgIrhpk4zSn0A6pEePdK8mKK 5/aHyd7pr7rLEi1sI/X3UE8ld/E83MExksKrYbs0UX1wSQwYXU6g64KicnuP2Abqg+8wrQ18 1nPcZci9jJI75XVPnTdUpZD5aaQWGp7IJ06NTbiOk30I50ORfulgKoe4m3UfsMALFxIx3pJk oy76xC2tjxYGf+4Uq1M0iK3Wy655GrcwXq/5ieODNUcAZzvK5hsUVRodBq0Lq3g1ivQF4ba7 RQayDzlW6XgoeU49xnCr9XdZYnTnj4iaPmr2NtY6AacBwRz+bJsyugeSyGgHsnVGyUSMk8YN wZHvUykMjH21LLzIUX5NFlcumLUXDOECELCJwewui4W81sI5Sq/WDJet+iJwwylUX22TSulG VwDS+j66TLZpk1hEwPanGLwFBSosafqSNBMDVWegKWvZZVyoNHIaaQbrTIoAwuAGvdVncSQz ttC6KkaFlAtlZt3+eUFWlMUOQ9jxQKTWymyliWKrx+S6O1cr4hwVRbg7RQkpfA8E2Loa13oO vRSQy/M2YBRZzRecTKY6nslJo6FWTftpGO7cNcvbmQ6I++5cBG1B1eNy2RFGJUzGh1vlYo51 pdfSg0U1oPHBPCHNvPYCJ7UAEQEAAcLBfAQYAQgAJhYhBDVVI9O49O/JYJ2+9GVhjBh/aBSp BQJaJxH+AhsMBQkJZgGAAAoJEGVhjBh/aBSpAw0P/1tEcEaZUO1uLenNtqysi3mQ6qAHYALR Df3p2z/RBKRVx0DJlzDfDvJ2R/GRwoo+vyCviecuG2RNKmJbf1vSm/QTtbQMUjwut9mx6KCY CyKwniqdhaMBmjCfV2DB2MxxZLYMtDfx/2mY7vzAci7AkjC+RkSUByMEOkyscUydKC/ETdf9 tvI8GhTY/8Q7JSylS3lQA5pMUHiIf+KpSmqKZeBPkGc7nSKM1w1UKUvFAsyyVsiG6A/hWrTr 7tTQAl7YfjtOGE8n4IKGktvrT99bbh9wdWKZ5FdHUN9hx2Q8VP8+0lR1CH2laVFbEwCOv1vM W4cgQDLxwwpo1iOTdHBVtQDxlQ9hPMKVlB1KP9KjchxuiLc24wLmCjP3pDMml4LQxOYB34Eq cgPZ3uHvJZG309sb2wTMTWaXobWNI++ZrsRD5GTmuzF3kkx3krtrq6HI5NSaemxK6MTDTjDN Rj/OwTl0yU35eJXuuryB20GFOSUsxiw00I2hMGQ1Cy9L/+IW6Dvotd8O3LmKh2tFArzXaKLx /rZyGNurS/Go5YjHp8wdJOs7Ka2p1U31js24PMWO6hf6hIiY2WRUsnE6xZNhvBTgKOY6u0KT V6hTevFqEw7OAZDCWUoE2Ob2/oHGZCCMW5SLAMgp7eihF0kGf2S2CmpIFYXGb61hAD8SqSY7 Fn7V
Message-ID: <503697bf-9b02-1585-9506-50f38aac8346@mozilla.com>
Date: Wed, 04 Apr 2018 10:32:30 -0600
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version: 1.0
In-Reply-To: <20180331175225.GE80088@kduck.kaduk.org>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ice/bO9Rw_OalBYkd5HfxsA37_RN2qI>
Subject: Re: [Ice] Benjamin Kaduk's Yes on draft-ietf-ice-trickle-18: (with COMMENT)
X-BeenThere: ice@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Interactive Connectivity Establishment \(ICE\)" <ice.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ice>, <mailto:ice-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ice/>
List-Post: <mailto:ice@ietf.org>
List-Help: <mailto:ice-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ice>, <mailto:ice-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Apr 2018 16:32:35 -0000

On 3/31/18 11:52 AM, Benjamin Kaduk wrote:
> On Thu, Mar 29, 2018 at 05:15:45PM -0600, Peter Saint-Andre wrote:
>> On 3/29/18 4:02 PM, Benjamin Kaduk wrote:
>>> On Thu, Mar 29, 2018 at 03:36:13PM -0600, Peter Saint-Andre wrote:
>>>> On 3/29/18 2:59 PM, Benjamin Kaduk wrote:

<snip/>

>>>>> Section 13 says that trickled candidate information may cause an ICE
>>>>> restart using the 5245bis semantics, but I don't see anywhere in
>>>>> 5245bis that would have additional candidate information induce a
>>>>> restart.  Is this the right reference?
>>>>
>>>> 5245bis states:
>>>>
>>>>    To restart ICE, an agent MUST change both the password and the
>>>>    username fragment for the data stream(s) being restarted.
>>>>
>>>> Such a change could be included when sending candidate information.
>>>
>>> Thanks for the clarification.  There is perhaps some subtle
>>> state-keeping requirement on implementations, then, as section 8 (of
>>> -18) notes:
>>>
>>>    Also, candidate trickling needs to be correlated to a specific ICE
>>>    session, so that if there is an ICE restart, any delayed updates for
>>>    a previous session can be recognized as such and ignored by the
>>>    receiving party.
>>>
>>> In that one needs to keep state in order to tell between ignoring
>>> delayed updates from a previous session and detecting a desire to
>>> start a new session.
>>
>> Yes, this is handled by ICE agents by tracking which ICE session is in
>> force (through the combination of Username Fragment and Password). I'm
>> not sure it's all so subtle, though.
> 
> I think it's a question of do you only keep one ufrag+password as
> state ("the current sesion"), or some level of history.  In the
> former case, you can't tell between a delayed packet coming in from
> an old session and a request to start a new one, IIUC.  So the
> subtlety would be if there is actually a requirement to track more
> history than just the current session.

Yes, this is something implementations need to handle (e.g., in order to
discard candidates from an old ICE session), but it seems to me they
could do so by knowing which ICE session is currently in force, not by
keeping a history of old sessions. In any case, this feels like an
implementation detail.

Peter