Re: [Masque] New Version Notification for draft-schwartz-masque-access-descriptions-03.txt

Tommy Pauly <tpauly@apple.com> Tue, 18 October 2022 21:35 UTC

Return-Path: <tpauly@apple.com>
X-Original-To: masque@ietfa.amsl.com
Delivered-To: masque@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F005AC152575; Tue, 18 Oct 2022 14:35:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.677
X-Spam-Level:
X-Spam-Status: No, score=-7.677 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.571, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id su9Vr3HZs_ej; Tue, 18 Oct 2022 14:35:15 -0700 (PDT)
Received: from ma1-aaemail-dr-lapp01.apple.com (ma1-aaemail-dr-lapp01.apple.com [17.171.2.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6B73C152591; Tue, 18 Oct 2022 14:35:14 -0700 (PDT)
Received: from pps.filterd (ma1-aaemail-dr-lapp01.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp01.apple.com (8.16.0.42/8.16.0.42) with SMTP id 29ILZC6h048073; Tue, 18 Oct 2022 14:35:13 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=xBmtlBt+sCuDtowiwS2NW7Sl4a+d5NBRDG7bnhMVc4c=; b=naa654wwOkdQPcl8yxvIwh2+yQLPh59lwAZXEuxEzaPhP+uTofdz9OL+a5Jjey9l/Alz XcP/7RZSCEmA/sI2KG9j1x0PsdB+OOW95nweQG+rzIN5ohJaAHNx7OEx035lBCUUbYJU zg/RIfklsJpLGgMHo/pEsbMogcWu1BtOP5xKyFaH1JYjfUZ51szrYG1If2AKv6Myd/nl DEOCERVbG4zBWacEd60U1MEsaec4BEULfUyC/4UU2MhzZgAddDmjMTgcnSj2MY3ZWxzZ WPU0lQSDlQpVkEvQ0qLEWGXxy6kvwui0FZCnp92QJ27IF45a2gaGiU8uUjupxGvoupoy Jw==
Received: from rn-mailsvcp-mta-lapp02.rno.apple.com (rn-mailsvcp-mta-lapp02.rno.apple.com [10.225.203.150]) by ma1-aaemail-dr-lapp01.apple.com with ESMTP id 3k7uh2nr48-4 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Tue, 18 Oct 2022 14:35:13 -0700
Received: from rn-mailsvcp-mmp-lapp02.rno.apple.com (rn-mailsvcp-mmp-lapp02.rno.apple.com [17.179.253.15]) by rn-mailsvcp-mta-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.19.20220711 64bit (built Jul 11 2022)) with ESMTPS id <0RJY00N7ZXAN2U70@rn-mailsvcp-mta-lapp02.rno.apple.com>; Tue, 18 Oct 2022 14:35:11 -0700 (PDT)
Received: from process_milters-daemon.rn-mailsvcp-mmp-lapp02.rno.apple.com by rn-mailsvcp-mmp-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.19.20220711 64bit (built Jul 11 2022)) id <0RJY00F00X182L00@rn-mailsvcp-mmp-lapp02.rno.apple.com>; Tue, 18 Oct 2022 14:35:11 -0700 (PDT)
X-Va-A:
X-Va-T-CD: e72da815dcb01dab2f988f94f1719970
X-Va-E-CD: 69948604bcbbfe33241c7f3188e9aab7
X-Va-R-CD: eeb9eb1d415d12e646be83ae625af052
X-Va-CD: 0
X-Va-ID: e3b57b0d-72ab-40c0-97f2-d353e74d016e
X-V-A:
X-V-T-CD: e72da815dcb01dab2f988f94f1719970
X-V-E-CD: 69948604bcbbfe33241c7f3188e9aab7
X-V-R-CD: eeb9eb1d415d12e646be83ae625af052
X-V-CD: 0
X-V-ID: e5efa026-e87f-47eb-a972-ac6494720204
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.545, 18.0.895 definitions=2022-10-18_07:2022-10-18, 2022-10-18 signatures=0
Received: from smtpclient.apple ([17.11.158.249]) by rn-mailsvcp-mmp-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.19.20220711 64bit (built Jul 11 2022)) with ESMTPSA id <0RJY00O3LXALI400@rn-mailsvcp-mmp-lapp02.rno.apple.com>; Tue, 18 Oct 2022 14:35:10 -0700 (PDT)
From: Tommy Pauly <tpauly@apple.com>
Message-id: <53620FFC-DA9A-438B-B837-2CA3707F11FF@apple.com>
Content-type: multipart/alternative; boundary="Apple-Mail=_D98BA391-AC42-4D71-998D-1E763DB27274"
MIME-version: 1.0 (Mac OS X Mail 16.0 \(3730.0.21\))
Date: Tue, 18 Oct 2022 14:34:58 -0700
In-reply-to: <CAHbrMsCd9qiooTSbGcucW=2F3Zv92z_oH3sVdTqc_-gcZEyM8A@mail.gmail.com>
Cc: MASQUE <masque@ietf.org>
To: Ben Schwartz <bemasc=40google.com@dmarc.ietf.org>
References: <166612469784.26130.2083338856348864490@ietfa.amsl.com> <CAHbrMsCd9qiooTSbGcucW=2F3Zv92z_oH3sVdTqc_-gcZEyM8A@mail.gmail.com>
X-Mailer: Apple Mail (2.3730.0.21)
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.545, 18.0.895 definitions=2022-10-18_07:2022-10-18, 2022-10-18 signatures=0
Archived-At: <https://mailarchive.ietf.org/arch/msg/masque/YCI2J_IX1OheCpbGNlmdRXDDmYA>
Subject: Re: [Masque] New Version Notification for draft-schwartz-masque-access-descriptions-03.txt
X-BeenThere: masque@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Multiplexed Application Substrate over QUIC Encryption <masque.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/masque>, <mailto:masque-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/masque/>
List-Post: <mailto:masque@ietf.org>
List-Help: <mailto:masque-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/masque>, <mailto:masque-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Oct 2022 21:35:17 -0000

Thanks for sharing, Ben!

I appreciate the simplifications. I wonder if we can go a bit further and not include DoH, since that also seems to be a bit of an odd one out, but we can discuss that more.

If we have this scoped to the use case of “I know a URL or hostname for proxying, but I don’t know how to get the right URL for TCP vs UDP vs IP proxying”, then I think that can work in MASQUE.

I see that one of the ways to fetch this is off a well-known URI — something we should try to avoid adding more of, if possible, although we’ve gone down that road for UDP and IP. How are you imagining clients would fetch this JSON in the case they are not using a well-known? Would it be something where clients would be configured with a specific URL that only gets them access to the access description? Or could clients request this content type from some proxy URL they know (let’s say they just know a connect-udp URL and want to check for connect-ip…)?

Thanks,
Tommy



> On Oct 18, 2022, at 1:35 PM, Ben Schwartz <bemasc=40google.com@dmarc.ietf.org> wrote:
> 
> Hi MASQUE,
> 
> At the last meeting, I presented a simple JSON blob format for representing multiple related proxyish services.  I recall the following feedback:
> 
> * This format is trying to do too many different things.
> * Configuration of all these things is not in-charter for MASQUE.
> * We need a better explanation of how this can be used for access-controlled services.
> 
> In this version, I've made the following changes:
> 
> * Removed any mention of Oblivious HTTP.
> * Added support for HTTP request proxies and TCP proxies (via "Modern HTTP Proxies" [1]).
> * Added instructions on how to use this format with access-controlled proxies (via "Popup Authentication" [2]).
> 
> Hopefully this makes the purpose and utility of the draft clearer.
> 
> I would like to present this draft at IETF 115.  Perhaps the chairs can advise whether MASQUE, HTTPBIS, or DISPATCH would be the best venue.
> 
> Please review,
> Ben Schwartz
> 
> [1] https://datatracker.ietf.org/doc/draft-schwartz-modern-http-proxies/
> [2] https://datatracker.ietf.org/doc/draft-schwartz-httpapi-popup-authentication/
> 
> ---------- Forwarded message ---------
> From: <internet-drafts@ietf.org <mailto:internet-drafts@ietf.org>>
> Date: Tue, Oct 18, 2022 at 4:25 PM
> Subject: New Version Notification for draft-schwartz-masque-access-descriptions-03.txt
> To: Benjamin M. Schwartz <bemasc@google.com <mailto:bemasc@google.com>>
> 
> 
> 
> A new version of I-D, draft-schwartz-masque-access-descriptions-03.txt
> has been successfully submitted by Benjamin Schwartz and posted to the
> IETF repository.
> 
> Name:           draft-schwartz-masque-access-descriptions
> Revision:       03
> Title:          HTTP Access Service Description Objects
> Document date:  2022-10-18
> Group:          Individual Submission
> Pages:          6
> URL:            https://www.ietf.org/archive/id/draft-schwartz-masque-access-descriptions-03.txt
> Status:         https://datatracker.ietf.org/doc/draft-schwartz-masque-access-descriptions/
> Html:           https://www.ietf.org/archive/id/draft-schwartz-masque-access-descriptions-03.html
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-schwartz-masque-access-descriptions
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-schwartz-masque-access-descriptions-03
> 
> Abstract:
>    HTTP proxies can operate several different kinds of access services.
>    This specification provides a format for identifying a collection of
>    such services.
> 
> About This Document
> 
>    This note is to be removed before publishing as an RFC.
> 
>    Status information for this document may be found at
>    https://datatracker.ietf.org/doc/draft-schwartz-masque-access-
>    descriptions/.
> 
>    Source for this draft and an issue tracker can be found at
>    https://github.com/bemasc/access-services.
> 
> 
> 
> 
> The IETF Secretariat
> 
> 
> -- 
> Masque mailing list
> Masque@ietf.org
> https://www.ietf.org/mailman/listinfo/masque