Re: [Masque] Roman Danyliw's No Objection on draft-ietf-masque-h3-datagram-10: (with COMMENT)

David Schinazi <dschinazi.ietf@gmail.com> Thu, 16 June 2022 00:16 UTC

Return-Path: <dschinazi.ietf@gmail.com>
X-Original-To: masque@ietfa.amsl.com
Delivered-To: masque@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 626A4C14CF0E; Wed, 15 Jun 2022 17:16:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.107
X-Spam-Level:
X-Spam-Status: No, score=-7.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jr38fAz80py5; Wed, 15 Jun 2022 17:16:58 -0700 (PDT)
Received: from mail-pg1-x536.google.com (mail-pg1-x536.google.com [IPv6:2607:f8b0:4864:20::536]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7793C14CF0B; Wed, 15 Jun 2022 17:16:58 -0700 (PDT)
Received: by mail-pg1-x536.google.com with SMTP id s135so12830577pgs.10; Wed, 15 Jun 2022 17:16:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=dnnIC4AX41nj0g7+3lbVlXP5hBxvM1y3l3uK40EVDig=; b=kknw55ylevmrgS3xbH7xhwIwdsdvBmLydfG8UrftfmLUtNGkyeNHJFP+tjzpPKxjpe v5NDcQsFR5CVjPOEuNuyOI93Zx2dsJRrckJpD4G+59Oxwl4nTHKxjnoUMibpU9kU1y7Z +kqbvztoIs3IfrS4ZsYdzjk2gesJHSZwb/mKr1XBeRigMrotw9dkgLwfYow1LuNQZtYC schTciJJaxGwOHRXlJF7aXHcAHFpe7kz9WvR6Bcqrp+RmUOx4kmJjV09U3yZX2wjbClB hER8I9tf1d6XO6LEmLOvBg9cjc4w4vnQCEgUTFEit/yRF775yCtgVX+NGR05CW7yh2HQ 7euw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=dnnIC4AX41nj0g7+3lbVlXP5hBxvM1y3l3uK40EVDig=; b=f2nGrsUBwEwOHzQLlH9xBq9aPuzOdkeqBpnpB5Q3tezn+ClxRYWa0VqMvwWCGT7Nmv TeP7gtlzoTa9R863Nwt/a3GBxXn0OwX1AX9W4T7WnHlxKQTpcx982VawcMIt5rmbFXY6 mBRgFPx4P/pV6gd4ZtMHZDKLmx2xrvEVqLkiha6XwbUI/74Fok5Ynd+IeBeEfFaCdnaU u2FPULlqWKoGyEx6bdinhA5p8VEZgUdXitrlqqR/D22qyZBOVHacIkkI8Rim0M7zRsJR sbUEWiOFjxgJvJA3HsrOmp4dC6pE47qA3VVnjlsRPBETBim40GMzS10IaL0TN6akA/g2 lyRw==
X-Gm-Message-State: AJIora/EOpHMAy3WVd1Ia5U6a2eK8Gfxk52tHXSblD8NEq9OJNbRJWbQ BWjhKWPlw8HCgSrO8sG7oKhWuC6JKWYHS/rffx9YjJ1va6Q=
X-Google-Smtp-Source: AGRyM1uC62UyG5D1gCjwvQJ7tqUw4vM9r8QtKG5STzBjgQP+UUfH44s3FDDoVrDKRNI+o2xX8QezvaFFAQWPCsslnjA=
X-Received: by 2002:a63:4e62:0:b0:398:cb40:19b0 with SMTP id o34-20020a634e62000000b00398cb4019b0mr2016503pgl.445.1655338618104; Wed, 15 Jun 2022 17:16:58 -0700 (PDT)
MIME-Version: 1.0
References: <165531625821.60099.10201447923190662907@ietfa.amsl.com>
In-Reply-To: <165531625821.60099.10201447923190662907@ietfa.amsl.com>
From: David Schinazi <dschinazi.ietf@gmail.com>
Date: Wed, 15 Jun 2022 17:16:47 -0700
Message-ID: <CAPDSy+74D6YQQNNXgLBQQKwxgdW=Gw3AH1qfB5r8-meWRFA9qA@mail.gmail.com>
To: Roman Danyliw <rdd@cert.org>
Cc: The IESG <iesg@ietf.org>, draft-ietf-masque-h3-datagram@ietf.org, masque-chairs@ietf.org, MASQUE <masque@ietf.org>, Christopher Wood <caw@heapingbits.net>
Content-Type: multipart/alternative; boundary="00000000000050b01805e1858ec4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/masque/oL61ezfqZMuI0KuXROCVQztVoH8>
Subject: Re: [Masque] Roman Danyliw's No Objection on draft-ietf-masque-h3-datagram-10: (with COMMENT)
X-BeenThere: masque@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Multiplexed Application Substrate over QUIC Encryption <masque.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/masque>, <mailto:masque-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/masque/>
List-Post: <mailto:masque@ietf.org>
List-Help: <mailto:masque-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/masque>, <mailto:masque-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Jun 2022 00:16:59 -0000

Hi Roman, thank you for your review!

Without launching into a philosophical conversation about
"what is a protocol?", I do prefer to avoid saying that "the
capsule protocol is not a protocol". I was thinking of tweaking
your text slightly to get to the same result:

    Definitions of new HTTP Upgrade Tokens that use the
    Capsule Protocol need to perform an appropriate security
    analysis that considers the impact of HTTP Datagrams and
    Capsules in the context of their protocol.

I wrote that up as the following PR:
https://github.com/ietf-wg-masque/draft-ietf-masque-h3-datagram/pull/206

Thanks,
David

On Wed, Jun 15, 2022 at 11:04 AM Roman Danyliw via Datatracker <
noreply@ietf.org> wrote:

> Roman Danyliw has entered the following ballot position for
> draft-ietf-masque-h3-datagram-10: No Objection
>
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut this
> introductory paragraph, however.)
>
>
> Please refer to
> https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/
> for more information about how to handle DISCUSS and COMMENT positions.
>
>
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-masque-h3-datagram/
>
>
>
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
> Thank you to David Mandelberg for the SECDIR review.
>
> ** Section 4.  Consider adding the following clarification:
>
> NEW
> HTTP Datagrams and the Capsule Protocol are building blocks for HTTP
> extensions
> to define new behaviors or features and do not constitute an independent
> protocol.  Any extension adopting them will need to perform an appropriate
> security analysis which considers the impact of these features in the
> context
> of a complete protocol.
>
>
>
>