Re: deprecating Postel's principle- considered harmful

Dave Cridland <dave@cridland.net> Wed, 08 May 2019 14:13 UTC

Return-Path: <dave@cridland.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B24F12010C for <ietf@ietfa.amsl.com>; Wed, 8 May 2019 07:13:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cridland.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KwhWtc_ezYki for <ietf@ietfa.amsl.com>; Wed, 8 May 2019 07:13:27 -0700 (PDT)
Received: from mail-ed1-x530.google.com (mail-ed1-x530.google.com [IPv6:2a00:1450:4864:20::530]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4206D1200FD for <ietf@ietf.org>; Wed, 8 May 2019 07:13:27 -0700 (PDT)
Received: by mail-ed1-x530.google.com with SMTP id m4so22208914edd.8 for <ietf@ietf.org>; Wed, 08 May 2019 07:13:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cridland.net; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=DdLu23i4Pd12L6a5A2Zv/ISOscvyN27OmC+oCtdIRVA=; b=PDdv1+7PZift4SSK2cY8HMd9nNr/8R0EODp+7pH7Q2OS/l29zu5LmsAGb4dykMJk5x 4JdM2prDDFO6J2Ph9qXXy40Km8dwLAD+HqRYhWt3cjfqKJiiefPBiWSxQelbTzO9tjwJ zBejKG5rbKsj6TPmdogtIMCHql0p/V4JHc4F0=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DdLu23i4Pd12L6a5A2Zv/ISOscvyN27OmC+oCtdIRVA=; b=uH08fqE6JTzYfdR81HK+xiq7ZQ/HHAwj/tFmhjY642kR26TUHhcez7FDrpPd4+lQyI 6m0qg2ToqxsbRHHhwROaoKc2YlRWYO0M0s/Iqsv38rSBaXbNppGB7Cr6B7mImvT/OVPY E10LoOuFsyZt8kqJNuS0OHuxZE+HpyIWKoQEHuUV271qwneCr8xaZSQ5TLKfT7uA0sZF ynwSkCphYuBkI7Z6y2RtEhkV3UL4KFIYR/Mn11RcQGzXfDeYUUBYVUDBSvw9XUy8B5mx R6ccLI1OptD9nauNE1bBvuSQe23n4nuS2opQ40wGbh8lc2gMsPfjZmhmEuUTcHImi4jN jFiA==
X-Gm-Message-State: APjAAAUJW9i6LZMt8TJLWXSsPCGcRqffZyLeLZt9jdP1u0wEcdDQtNrR rHw80uZx35GlCpKEnW4KXm7JI1ho6G6Vra6vZWNQaQ==
X-Google-Smtp-Source: APXvYqzqbYK9BmikKtrCrghhVP4KINaYXXRs9AyZud94pyN6I3r8ue82QthBn2Zhc+UJWk5AJAcHYs3MVBoYWYiwxks=
X-Received: by 2002:a50:89b0:: with SMTP id g45mr40400481edg.200.1557324805716; Wed, 08 May 2019 07:13:25 -0700 (PDT)
MIME-Version: 1.0
References: <F64C10EAA68C8044B33656FA214632C89F024CD3@MISOUT7MSGUSRDE.ITServices.sbc.com> <CALaySJJDHg5j9Z7+noS=YXoNROqdsbJ6coEECtLtbJ6fWJ3xsQ@mail.gmail.com> <DBD4837F-299B-497C-8922-AFF858B06C0F@strayalpha.com> <CAKHUCzwa89Qd6PD2EtkZU1LnT+1ZSsNiMQGAPnu5P_r=bvgMLg@mail.gmail.com> <10DC85D6-A9D1-4B4F-905D-4BD87D2F95EA@strayalpha.com>
In-Reply-To: <10DC85D6-A9D1-4B4F-905D-4BD87D2F95EA@strayalpha.com>
From: Dave Cridland <dave@cridland.net>
Date: Wed, 08 May 2019 14:13:09 +0100
Message-ID: <CAKHUCzwdYLT+sY+cSuUC6bNkSn31ouGHXMx2Dj3Gc-ezaf8vyQ@mail.gmail.com>
Subject: Re: deprecating Postel's principle- considered harmful
To: Joe Touch <touch@strayalpha.com>
Cc: "ietf@ietf.org" <ietf@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000d85916058860ef2a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/RM3RbUleEwTTWQE21oSdjlHiWmg>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 08 May 2019 14:13:29 -0000

On Wed, 8 May 2019 at 14:18, Joe Touch <touch@strayalpha.com> wrote:

>
>
> On May 8, 2019, at 12:05 AM, Dave Cridland <dave@cridland.net> wrote:
>
> *NONE* of it is about tolerating bugs or errors, nor is it about allowing
>> arbitrary behavior for senders.
>>
>>
> Sure about that?
>
> From RFC 760:
>
> That is, it should be careful to send well-formed datagrams, but should
> accept any datagram that it can interpret (e.g., not object to technical
> errors where the meaning is still clear).
>
> The parenthetical example is explicitly stating that a datagram with a
> technical error should still be accepted.
>
>
> Your cut off the part about the meaning being clear.
>
> And technical error doesn’t necessarily mean bug. It could mean
> specification error.
>
> If you stick with the “meaning is clear” part, it’s safe. It’s when we get
> into what things might, could, or probably mean that there be dragons.
>

I accept your points, but if the meaning were genuinely unambiguously
clear, it'd likely have been in the specification - the problem is that
when there's some kind of technical error, what is and is not clear becomes
very much in the eye of the implementer.

So while I did indeed fixate on that "technical errors" to the exclusion of
"the meaning is still clear", that's because it's the technical error bit
that I think is the technical error here.

This is also why I drew attention to the RFC 1122 Section 1.2.2 restatement
and lengthy discussion - I don't see anything I could reasonably disagree
with there, yet both the first RFC to discuss the principle (RFC 760 above)
and the last (RFC 1958) both seem problematic to me.

Dave.