Re: [IPP] Fwd: [TLS] [Technical Errata Reported] RFC2817 (4187)

Michael Sweet <msweet@apple.com> Mon, 24 November 2014 02:29 UTC

Return-Path: <ipp-bounces@pwg.org>
X-Original-To: ietfarch-ipp-archive@ietfa.amsl.com
Delivered-To: ietfarch-ipp-archive@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44D9C1A1BA3 for <ietfarch-ipp-archive@ietfa.amsl.com>; Sun, 23 Nov 2014 18:29:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.899
X-Spam-Level:
X-Spam-Status: No, score=0.899 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, SPF_PASS=-0.001, T_DKIM_INVALID=0.01, T_RP_MATCHES_RCVD=-0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CL9eue0isgMe for <ietfarch-ipp-archive@ietfa.amsl.com>; Sun, 23 Nov 2014 18:29:23 -0800 (PST)
Received: from www.pwg.org (www.pwg.org [IPv6:2600:3c01::f03c:91ff:fe70:b03f]) by ietfa.amsl.com (Postfix) with ESMTP id 8DBE21A1A43 for <ipp-archive@lists.ietf.org>; Sun, 23 Nov 2014 18:29:23 -0800 (PST)
Received: by www.pwg.org (Postfix, from userid 502) id 9E7D085A4; Mon, 24 Nov 2014 02:36:36 +0000 (UTC)
Received: from pwg.org (localhost [IPv6:::1]) by www.pwg.org (Postfix) with ESMTP id 8E7B48475; Mon, 24 Nov 2014 02:36:27 +0000 (UTC)
X-Original-To: ipp@pwg.org
Delivered-To: ipp@pwg.org
Received: by www.pwg.org (Postfix, from userid 502) id D5D9E847C; Mon, 24 Nov 2014 02:36:26 +0000 (UTC)
Received: from mail-in2.apple.com (mail-out2.apple.com [17.151.62.25]) by www.pwg.org (Postfix) with ESMTPS id E534E8473 for <ipp@pwg.org>; Mon, 24 Nov 2014 02:36:25 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1416796151; x=2280709751; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-transfer-encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=n2Rzdb5xVnvP0g4DjoV1AEPSyHoc90c+cmtkrYti/tM=; b=vPcaBmoZGw16WZW6jKyr6xeo7D6ahRH6FQZwvp2ogKvMoq16nzmjoEsyx7QPoSZq aAFtvSpp5ExX1lZYllaaf64DK0sZjq4UtGDTTkt07bYpMVCy1M/zzr0SHTEZeO8I OE01udN8HrmlSwFf0z2TGOzQlzEGkzVth165WHMIdy5+18EahR6KN0E9lmlIDrF3 xib6LrewP+HnVlIEu8fnsGNN5icvW1QB3kwbEORnVviXI/B4uBvFGffDoi5ZMYzD I7m8HH1u8OpHPI0jYPrkTgcHBA19J/hC3B7POsOZG8b9Zx+TMLe20l9PyPxLVly5 nuh03TelF9L5Id/NGa5oUQ==;
Received: from relay8.apple.com (relay8.apple.com [17.128.113.102]) by mail-in2.apple.com (Apple Secure Mail Relay) with SMTP id 31.22.18976.7F792745; Sun, 23 Nov 2014 18:29:11 -0800 (PST)
X-AuditID: 11973e11-f79a66d000004a20-c8-547297f76ac4
Received: from sesame.apple.com (sesame.apple.com [17.128.115.128]) (using TLS with cipher RC4-MD5 (128/128 bits)) (Client did not present a certificate) by relay8.apple.com (Apple SCV relay) with SMTP id 79.42.05452.9F792745; Sun, 23 Nov 2014 18:29:13 -0800 (PST)
Received: from [17.153.51.150] (unknown [17.153.51.150]) by sesame.apple.com (Oracle Communications Messaging Server 7.0.5.30.0 64bit (built Oct 22 2013)) with ESMTPSA id <0NFI000F0UWL9F10@sesame.apple.com> for ipp@pwg.org; Sun, 23 Nov 2014 18:29:10 -0800 (PST)
MIME-version: 1.0 (Mac OS X Mail 8.1 \(1993\))
From: Michael Sweet <msweet@apple.com>
In-reply-to: <CAN40gSsA6dP8x2G=JzXS+jfkEQo5vuF4K6PyBVeEWoJuppSH+A@mail.gmail.com>
Date: Sun, 23 Nov 2014 21:29:08 -0500
Message-id: <F8D7B240-9789-4D55-8653-738D07A87FF6@apple.com>
References: <20141120231723.DA2FF181C8E@rfc-editor.org> <CAN40gSsA6dP8x2G=JzXS+jfkEQo5vuF4K6PyBVeEWoJuppSH+A@mail.gmail.com>
To: Ira McDonald <blueroofmusic@gmail.com>
X-Mailer: Apple Mail (2.1993)
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrILMWRmVeSWpSXmKPExsUi2FCYpvt9elGIwec9XBbH9r1kcWD0mLd4 OlMAYxSXTUpqTmZZapG+XQJXxrGpjUwFm5Uqdn5Ka2DcIN3FyMkhIWAisXv5BDYIW0ziwr31 QDYXh5DAPkaJL2sOM8EU/T04gQUi0ccksW3VHVYIp5tJov3rR1aQKmEBD4nFE76yg9i8AnoS TU8eg3UzC2hJrN95HMxmE1CT+D2pD6yeUyBY4sa5VmYQm0VAVWLDiRZGiHp+iYO9H5ghbG2J J+8usELMtJHoWtMJNkdIoE7i38/NQPUcHCJA85c8V4Q4VFbi38Uz7CC3SQi8ZZW4+fsG+wRG 4VlITpqF5KRZSFYsYGRexSiUm5iZo5uZZ6SXWFCQk6qXnJ+7iREUxtPtBHcwHl9ldYhRgINR iYf3Q2thiBBrYllxZe4hRmkOFiVxXlOTghAhgfTEktTs1NSC1KL4otKc1OJDjEwcnFINjIdC MyP+RtjoyzkcZXRwXC9r4em3w6OcLzmvaYbutrplh9lfGul29x6SfXxa3ys6jrHLq/dqYoFg Sdmtqx2njprdmGIRc6D+kNX7k4a/Fjx+90Ti6/m6mdt8D9xWreIoqdbS7lEV/9px82mTq3v3 WTWBMNW8M1MWzDabM/151uaIWUnzd828ocRSnJFoqMVcVJwIAL11ClBEAgAA
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrCLMWRmVeSWpSXmKPExsUi2FDcoPtzelGIwYqDFhbH9r1kcWD0mLd4 OlMAYxSXTUpqTmZZapG+XQJXxrGpjUwFm5Uqdn5Ka2DcIN3FyMkhIWAi8ffgBBYIW0ziwr31 bF2MXBxCAn1MEttW3WGFcLqZJNq/fmQFqRIW8JBYPOErO4jNK6An0fTkMROIzSygJbF+53Ew m01ATeL3pD6wek6BYIkb51qZQWwWAVWJDSdaGCHq+SUO9n5ghrC1JZ68u8AKMdNGomtNJ9gc IYE6iX8/NwPVc3CIAM1f8lwR4lBZiX8Xz7BPYBSYheSKWUiumIVk6gJG5lWMAkWpOYmVFnqJ BQU5qXrJ+bmbGMFhV5i2g7FpudUhRgEORiUe3g+thSFCrIllxZW5hxglOJiVRHjP/gMK8aYk VlalFuXHF5XmpBYfYpTmYFES5216lBsiJJCeWJKanZpakFoEk2Xi4JRqYFxXOvdLfPDXchbn C502p9Ki/dsCl+67odbk3CNV+TBW7dbWb6l8MxTnacl7/nKaMUNvyaM7r2fH732kw7tzptkz lsMXLlsf7Or6Kxw+SXfdtbfVc7ob7q9y2HbTZ6FHW/n5mH9Bgi+i9B5ZCJi9likwmLW6cMKu 5GnvfORb/p/6XsRz+5GtxTQlluKMREMt5qLiRACiFduqNwIAAA==
Cc: ipp@pwg.org
Subject: Re: [IPP] Fwd: [TLS] [Technical Errata Reported] RFC2817 (4187)
X-BeenThere: ipp@pwg.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Internet Printing Protocol Workgroup discussion list <ipp.pwg.org>
List-Unsubscribe: <https://www.pwg.org/mailman/options/ipp>, <mailto:ipp-request@pwg.org?subject=unsubscribe>
List-Archive: <http://www.pwg.org/pipermail/ipp/>
List-Post: <mailto:ipp@pwg.org>
List-Help: <mailto:ipp-request@pwg.org?subject=help>
List-Subscribe: <https://www.pwg.org/mailman/listinfo/ipp>, <mailto:ipp-request@pwg.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ipp-bounces@pwg.org
Errors-To: ipp-bounces@pwg.org

Ira,

The issue here is that before they registered TLS/1.0 as the protocol name instead of just "TLS".  In practice implementations have needed to support "TLS/1.0", "TLS/1.1", and "TLS/1.2" anyways so this change is just fixing the registration and making it clear what the reality is...


> On Nov 21, 2014, at 11:55 AM, Ira McDonald <blueroofmusic@gmail.com> wrote:
> 
> Hi,
> 
> BEWARE - they're changing the product token (TLS/1.0 --> TLS)
> in RFC 2817 - I can't imagine how this will be backward compatible.
> 
> Cheers,
> - Ira
> 
> Ira McDonald (Musician / Software Architect)
> Co-Chair - TCG Trusted Mobility Solutions WG
> Chair - Linux Foundation Open Printing WG
> Secretary - IEEE-ISTO Printer Working Group
> Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
> IETF Designated Expert - IPP & Printer MIB
> Blue Roof Music / High North Inc
> http://sites.google.com/site/blueroofmusic
> http://sites.google.com/site/highnorthinc
> mailto: blueroofmusic@gmail.com
> Winter  579 Park Place  Saline, MI  48176  734-944-0094
> Summer  PO Box 221  Grand Marais, MI 49839  906-494-2434
> 
> 
> ---------- Forwarded message ----------
> From: RFC Errata System <rfc-editor@rfc-editor.org>
> Date: Thu, Nov 20, 2014 at 6:17 PM
> Subject: [TLS] [Technical Errata Reported] RFC2817 (4187)
> To: rohit@4k-associates.com, lawrence@agranat.com, stephen.farrell@cs.tcd.ie, Kathleen.Moriarty.ietf@gmail.com, turners@ieca.com, joe@salowey.net
> Cc: fielding@gbiv.com, tls@ietf.org, rfc-editor@rfc-editor.org
> 
> 
> The following errata report has been submitted for RFC2817,
> "Upgrading to TLS Within HTTP/1.1".
> 
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=2817&eid=4187
> 
> --------------------------------------
> Type: Technical
> Reported by: Roy T. Fielding <fielding@gbiv.com>
> 
> Section: 7.2
> 
> Original Text
> -------------
>    The Draft Standard for HTTP/1.1 [1] specifies that these tokens obey
>    the production for 'product':
> 
>       product         = token ["/" product-version]
>       product-version = token
> 
> [...]
> 
>    This specification defines the protocol token "TLS/1.0" as the
>    identifier for the protocol specified by The TLS Protocol [6].
> 
> 
> Corrected Text
> --------------
>    The Draft Standard for HTTP/1.1 [1] specifies that these tokens obey
>    the production for 'product':
> 
>       product         = token ["/" product-version]
>       product-version = token
> 
> [...]
> 
>    This specification defines the product token "TLS" as the
>    identifier for the protocol specified by The TLS Protocol [6].
>    When a specific version of TLS is desired, it is indicated by
>    appending a slash ("/") and the TLS version number as the
>    product-version (e.g., "TLS/1.0").
> 
> 
> Notes
> -----
> This erratum clarifies that "TLS" is the product token and any TLS version number (currently DIGIT "." DIGIT) is the product-version token.  This has already been corrected in the Upgrade Token Registry.
> 
> Instructions:
> -------------
> This erratum is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party (IESG)
> can log in to change the status and edit the report, if necessary.
> 
> --------------------------------------
> RFC2817 (draft-ietf-tls-http-upgrade-05)
> --------------------------------------
> Title               : Upgrading to TLS Within HTTP/1.1
> Publication Date    : May 2000
> Author(s)           : R. Khare, S. Lawrence
> Category            : PROPOSED STANDARD
> Source              : Transport Layer Security
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
> 
> _______________________________________________
> ipp mailing list
> ipp@pwg.org
> https://www.pwg.org/mailman/listinfo/ipp

_________________________________________________________
Michael Sweet, Senior Printing System Engineer, PWG Chair

_______________________________________________
ipp mailing list
ipp@pwg.org
https://www.pwg.org/mailman/listinfo/ipp