Re: Comments on draft-mm-wg-effect-encrypt-11

Randy Bush <randy@psg.com> Thu, 04 May 2017 03:38 UTC

Return-Path: <randy@psg.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30D94129B3A; Wed, 3 May 2017 20:38:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level:
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JwJlRUE9XLUx; Wed, 3 May 2017 20:38:19 -0700 (PDT)
Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7254B129B51; Wed, 3 May 2017 20:38:11 -0700 (PDT)
Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from <randy@psg.com>) id 1d67ai-0002gt-Uc; Thu, 04 May 2017 03:38:09 +0000
Date: Thu, 04 May 2017 12:38:05 +0900
Message-ID: <m2shkl47he.wl-randy@psg.com>
From: Randy Bush <randy@psg.com>
To: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Cc: Christian Huitema <huitema@huitema.net>, IESG <iesg@ietf.org>, IETF Discussion Mailing List <ietf@ietf.org>
Subject: Re: Comments on draft-mm-wg-effect-encrypt-11
In-Reply-To: <CAHbuEH4+SFUyq5w1VvY8Mr3GU7kuyEj=WMBEvV+RvjNwNS7oPA@mail.gmail.com> <BF887C92-1ADD-47F7-A958-04538372AA15@qti.qualcomm.com> <8cb6fefd-200e-1d90-6a36-c32530ecbaf8@cisco.com>
References: <C49A16E7-1680-4FC9-A423-15A32EFF3D8F@mnot.net> <21A01174-4FB6-4F8C-AA3D-DCF6D1FEBA01@trammell.ch> <8cb6fefd-200e-1d90-6a36-c32530ecbaf8@cisco.com> <8114ef76-591f-630e-5464-2b63d0efea61@huitema.net> <CAHbuEH4+SFUyq5w1VvY8Mr3GU7kuyEj=WMBEvV+RvjNwNS7oPA@mail.gmail.com>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset="US-ASCII"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/vSp9EFFWsJMFX09HjHM6yaXVe3I>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 04 May 2017 03:38:21 -0000

Benoit Claise wrote:
> The operators are used to manage their network in a certain way.

the ways operators manage their networks is highly varied.

but, in reality, what packet data do i need beyond the basic four-tuple
and congestion markings?

> The change for more encrypted traffic will force a change of those
> operational practices.

not necessarily.  of course it will seriously impact those operators
doing dpi, http header insertion, etc.  many of us consider this a
feature of encryption not a bug.

> This document should serve as for a starting point to have this debate
> at the IETF> practices.

it is.  and it should not go forward until we have had this debate.  and
we clearly have significant differences today.

> based on the documentation of those operational practices.

the set of operational practices is manifold.

Kathleen Moriarty wrote:
> There's an explicit statement that says the IETF does not endorse the
> documented practices.

standard wiggle 14.3.  please specifically call them out as negatively
affecting privacy and dis-recommended.

> It's not the practices, but the overall document that we should have
> consensus on - that it is important to document these practices so we
> have a starting point for discussion.

as christian alluded, the practices are not a closed set.

Pete Resnick wrote:
> I cannot come up with any way to read the mention of super cookies in
> section 8 as an endorsement at all.

or as an anti-endorsement.  so you would lay out the road map with no
marking of the evil paths.

> Either way, lack of overt disapproval is not endorsement.

in the real world of "buy our X device which implements rfc 666's
description of how to murder users" it is endorsement.

randy