Re: [MMUSIC] Benjamin Kaduk's No Objection on draft-ietf-mmusic-rfc4566bis-35: (with COMMENT)

Paul Kyzivat <pkyzivat@alum.mit.edu> Tue, 04 June 2019 15:54 UTC

Return-Path: <pkyzivat@alum.mit.edu>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FABF120025; Tue, 4 Jun 2019 08:54:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w-taZp4epXUb; Tue, 4 Jun 2019 08:54:32 -0700 (PDT)
Received: from outgoing-alum.mit.edu (outgoing-alum.mit.edu [18.7.68.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4EE4120089; Tue, 4 Jun 2019 08:54:26 -0700 (PDT)
Received: from PaulKyzivatsMBP.localdomain (c-24-62-227-142.hsd1.ma.comcast.net [24.62.227.142]) (authenticated bits=0) (User authenticated as pkyzivat@ALUM.MIT.EDU) by outgoing-alum.mit.edu (8.14.7/8.12.4) with ESMTP id x54FsMQ1023560 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT); Tue, 4 Jun 2019 11:54:22 -0400
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: The IESG <iesg@ietf.org>, fandreas@cisco.com, mmusic-chairs@ietf.org, draft-ietf-mmusic-rfc4566bis@ietf.org, mmusic@ietf.org
References: <155922686313.22081.12209259015077736906.idtracker@ietfa.amsl.com> <df7509c8-5bba-fcc2-5d75-3cc179266cf8@alum.mit.edu> <20190603221717.GF1902@prolepsis.kaduk.org>
From: Paul Kyzivat <pkyzivat@alum.mit.edu>
Message-ID: <35bf8aaf-f0ed-7d5e-471d-bc455eca5824@alum.mit.edu>
Date: Tue, 04 Jun 2019 11:54:21 -0400
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:60.0) Gecko/20100101 Thunderbird/60.7.0
MIME-Version: 1.0
In-Reply-To: <20190603221717.GF1902@prolepsis.kaduk.org>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/mmusic/JOLI44dIAauN6-f9dhzIUJxy1VU>
Subject: Re: [MMUSIC] Benjamin Kaduk's No Objection on draft-ietf-mmusic-rfc4566bis-35: (with COMMENT)
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Jun 2019 15:54:35 -0000

Ben,

Just responding to a few points below. I think we are good now.

On 6/3/19 6:17 PM, Benjamin Kaduk wrote:

>>> I reviewed the diff from RFC 4566 but didn't make it quite all the way
>>> through the full document itself.  What I did find in that partial read
>>> suggests that a full read-through by the authors may find some lingering
>>> stale language or minor internal inconsistencies.
>>
>> There really hasn't been an attempt to thoroughly remove stale (dated)
>> language. Fundamentally this is a 21 year old document that has been tidied
>> up a bit. Anyone that started over today to define something new for the
>> same purpose would surely define something very different. We've only been
>> trying to fix areas where there has been confusion or ambiguity has been
>> found, or where new concerns (e.g., security) have needed to be addressed.
> 
> I think the RFC Editor is still going to be reviewing the whole thing for
> consistency with the current style/practices, so getting a headstart now
> would probably be more effective and save some time overall.

I prefer to wait and see. Doing this preemptively seems like a time sink.

>>> Section 4.3
>>>
>>> The usual security considerations about (potentially) referencing remote
>>> content would seem to apply.  Perhaps a RFC 3986 reference (or more)
>>> would be appropriate.
>>
>> Will adding a reference to [RFC3986] be sufficient?
> 
> I would prefer a note about "Use of URIs to indicate remote resources
> is subject to the security considerations from [RFC3986]", but just the
> reference would be okay.

OK, I'll do the long form.

>>> Section 5.x
>>>
>>> It's interesting to note that while the SDP attributes (Sections 6.x)
>>> got ABNF constructions for their values, the type descriptions here
>>> are still presented in a somewhat informal syntax (that, e.g., relies on
>>> implicitly stating that fields are whitespace-separated).
>>
>> It is an interesting point. The best rationale I can give is that *not*
>> having ABNF got to be a serious problem for attributes, because there are a
>> lot of them, and new ones get defined regularly (with complex syntax) and
>> the syntax was often recognized as being ambiguous. So we wanted to demand
>> ABNF for future extensions, and felt we should make the ones defined in this
>> document comply with that.
>>
>> OTOH, the other fields are revised/extended much more rarely, so it hasn't
>> been a problem. And so there is much less motivation to "rock the boat" by
>> changing the manner of defining them.
> 
> Indeed.  Changing this seems like more effort than it's worth, at this point
> in the process.  (But can I have whitespace in a comma-separated list?  I
> assume "no", but have been wrong on many occasions...)

In general whitespace is only allowed where *specifically* permitted.
  	Thanks,
	Paul