Re: [multipathtcp] comments for draft-hewu-mptcp-trust-00

<philip.eardley@bt.com> Thu, 14 November 2019 10:14 UTC

Return-Path: <philip.eardley@bt.com>
X-Original-To: multipathtcp@ietfa.amsl.com
Delivered-To: multipathtcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA2F2120170 for <multipathtcp@ietfa.amsl.com>; Thu, 14 Nov 2019 02:14:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=bt.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MYJwrOxPIf4V for <multipathtcp@ietfa.amsl.com>; Thu, 14 Nov 2019 02:14:15 -0800 (PST)
Received: from smtpe1.intersmtp.com (smtpe1.intersmtp.com [62.239.224.234]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37B041200A1 for <multipathtcp@ietf.org>; Thu, 14 Nov 2019 02:14:15 -0800 (PST)
Received: from tpw09926dag14h.domain1.systemhost.net (10.9.212.38) by RDW083A012ED68.bt.com (10.187.98.38) with Microsoft SMTP Server (TLS) id 14.3.439.0; Thu, 14 Nov 2019 10:12:54 +0000
Received: from tpw09926dag13h.domain1.systemhost.net (10.9.212.37) by tpw09926dag14h.domain1.systemhost.net (10.9.212.38) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 14 Nov 2019 10:14:11 +0000
Received: from bwp09926082.bt.com (10.36.82.113) by tpw09926dag13h.domain1.systemhost.net (10.9.212.37) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Thu, 14 Nov 2019 10:14:11 +0000
Received: from GBR01-LO2-obe.outbound.protection.outlook.com (104.47.21.50) by smtpe1.intersmtp.com (10.36.82.113) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1713.5; Thu, 14 Nov 2019 10:14:09 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OPOgsrNJluD63aLrDDxzV3IIhQ6JzlI3sIoF0CcnhGEMVocSyt1f4mBexuQ2NYxbMQlrtpDyglvDIhj3R/oY+90pXuhVXFPbKOeZbuSPigZqjEWV2lx/qR0AeZoVc9+nG39aSR72u/Wr9K4oB2g48FTcn3fWWPEHmnm4Qlfa6IGllralHkGuB023BTxKdTr/5xa5zcmCkFh1btBfBRYZnYZiYfCz26ER8Eok5NJwH+mgvRoOL+cCqOEBMV8wT2cj2uyteBA49AAe/UiqAMG4MoAk3FVcFwL+6SJNOkfd9RLHNao25HE4H5QoqpiwJcoIjBh7xKkVJKoXwcAaUlxseA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a0Zay2L6NzmzSPOOiKIuJ1sx5HifK1fS8Zm+jvwYJ9o=; b=QfkDQvEB/C4KPBX1CLdrl6DVqQLRPlmQvMW1PTj7nt10jLIZ0zUxKGA4jicxP2GFv21uz5pOv0/Ub+G/hEDhdyMehxbEeghudK80Zajs5SBUnyjeFCS/ztdSCYO2h5f17eJIYmYsxNoBh8oBb7BjuMlr1GlMuDORmkdKMizprtZelVl6it2v/JrGlYxHZkfUWzQ2+lLbNB517xM161ehZ7KSGSyhfVoG5npRxr3I1CizndEpQXOWZDjpQoNwuYmiEq1VuIAAHrEDL37MHijHl0cPf7mJXqq9IUqBd/8Wbh6GIXkCTwzntjO8iWVTfQAFR0YC8Q1zz6f5dl2xJ7NtRg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=bt.com; dmarc=pass action=none header.from=bt.com; dkim=pass header.d=bt.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bt.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a0Zay2L6NzmzSPOOiKIuJ1sx5HifK1fS8Zm+jvwYJ9o=; b=SP78xpPBNgI9Z8+ALDRB4dVFXFA6DzPnaAiV5slh1xQvJOU+04ALaHkIfM0h1NCacqK4W2ZezFjBTi994hhmPNtr89WfiN/Zg6V0o8OG068VKimTI9sIfRG2Emlb0NAwos7nh/IPhT2M9q+UWUi8XsKWkNg6TZq+PljqIsCglYY=
Received: from CWLP123MB2579.GBRP123.PROD.OUTLOOK.COM (20.176.58.79) by CWLP123MB2260.GBRP123.PROD.OUTLOOK.COM (20.176.58.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.26; Thu, 14 Nov 2019 10:14:08 +0000
Received: from CWLP123MB2579.GBRP123.PROD.OUTLOOK.COM ([fe80::f89b:e372:f34e:4849]) by CWLP123MB2579.GBRP123.PROD.OUTLOOK.COM ([fe80::f89b:e372:f34e:4849%5]) with mapi id 15.20.2451.027; Thu, 14 Nov 2019 10:14:08 +0000
From: philip.eardley@bt.com
To: nsd.ietf@gmail.com, multipathtcp@ietf.org
Thread-Topic: [multipathtcp] comments for draft-hewu-mptcp-trust-00
Thread-Index: AQHVmsAL0s4QaDt3nE268qg3IM6ji6eKcgAA
Date: Thu, 14 Nov 2019 10:14:08 +0000
Message-ID: <CWLP123MB2579FB6BB8E29D7DD820F95CEB710@CWLP123MB2579.GBRP123.PROD.OUTLOOK.COM>
References: <CAAK044QdjCrXsmDWyztGZ=w3_yxS=S=OmGaOMG7=VNzThP+vEQ@mail.gmail.com>
In-Reply-To: <CAAK044QdjCrXsmDWyztGZ=w3_yxS=S=OmGaOMG7=VNzThP+vEQ@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=philip.eardley@bt.com;
x-originating-ip: [193.113.37.9]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a8fdc817-ae9c-4b9b-bfd6-08d768eb630c
x-ms-traffictypediagnostic: CWLP123MB2260:
x-microsoft-antispam-prvs: <CWLP123MB2260B3067C8B4B491BEA7770EB710@CWLP123MB2260.GBRP123.PROD.OUTLOOK.COM>
x-antispam-2: 1
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 02213C82F8
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(396003)(366004)(346002)(376002)(39860400002)(199004)(51914003)(189003)(64756008)(66066001)(74316002)(71190400001)(71200400001)(99286004)(14454004)(7736002)(486006)(81156014)(81166006)(6246003)(86362001)(25786009)(476003)(446003)(11346002)(8676002)(8936002)(229853002)(7696005)(76176011)(186003)(55016002)(6506007)(478600001)(53546011)(102836004)(26005)(9686003)(6306002)(6436002)(54896002)(5070765005)(316002)(5660300002)(110136005)(256004)(14444005)(2906002)(3846002)(790700001)(6116002)(66556008)(76116006)(66446008)(66946007)(33656002)(66476007)(52536014); DIR:OUT; SFP:1101; SCL:1; SRVR:CWLP123MB2260; H:CWLP123MB2579.GBRP123.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: bt.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: iREsmlO82+PqVngLPp6xaxyNG2uebP4zR5K06i6QQyD3+LcT/5xnDG2JgaAyA7uUX8lt4Z1cTwEpDHHLcYciYeBZyIpgohrYYGroyaaBIcGWXDKmTzNK5SvvllyR5uJh+qoFb2HZaBwJJTJ/DUW2KATi3vhR1apqdhKUyvAhnvsBg0gkhDs43HfdRrTXyEH+MSPVacf9quzr3bHDjk4OUCNe1LarlWseXH8Jdfj3ugCbvfMhNF/QP/l9E3y2nx6EHlFDZ1Le8EEwbmTdTckyFJQH8ISONH4jo9g7gUI4PvHfTAQwgD1k6Jt5wmP+mWi4PvN4S/W+xENdXdEG3fR3xDoUPAzelOtfH3OWaRtF9CWTkadEl9Bjd2tpnqeyV5MpZYABPwL6tZrbou8JKxrS1vjGWKEgvkg38hmDpHzjFgYy5rpPRnswYWTOkTe3cLQY
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_CWLP123MB2579FB6BB8E29D7DD820F95CEB710CWLP123MB2579GBRP_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: a8fdc817-ae9c-4b9b-bfd6-08d768eb630c
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2019 10:14:08.3008 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: a7f35688-9c00-4d5e-ba41-29f146377ab0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CSd9yOvoGGi9aQf3Ut6b6vR1ts2Rm6/6jjJzyCZ5xS6w+fd8TFMwsl8Coxe2GW6c963FIkhxEEFkJyS76gFQig==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP123MB2260
X-OriginatorOrg: bt.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/multipathtcp/N20C9iKsV3CLiKtAf2HPJ2BQymY>
Subject: Re: [multipathtcp] comments for draft-hewu-mptcp-trust-00
X-BeenThere: multipathtcp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Multi-path extensions for TCP <multipathtcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/multipathtcp/>
List-Post: <mailto:multipathtcp@ietf.org>
List-Help: <mailto:multipathtcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/multipathtcp>, <mailto:multipathtcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Nov 2019 10:14:19 -0000

Thanks for the draft
One thing that wasn’t clear to me – can you be sure that the Trust Flag has been correctly set ie not been set by a host for a connection that isn’t source-address-validated?

Thanks
phil

From: multipathtcp <multipathtcp-bounces@ietf.org> On Behalf Of Yoshifumi Nishida
Sent: 14 November 2019 07:49
To: multipathtcp <multipathtcp@ietf.org>
Subject: [multipathtcp] comments for draft-hewu-mptcp-trust-00

Hello,
I've read draft-hewu-mptcp-trust-00.Thanks for preparing this.
I have listed my comments below.

1: The idea for exchanging trusted addresses info for peers sounds interesting, but i might want to see how the info will be used a bit more. Say, if an endpoint has 1 trusted address and 2 non-trusted address, how the endpoint utilizes these addresses?

2: I am wondering if the Trust-Flag in echo-backed ADD_ADDR can indicate this source address is trusted. If so,  Host A in Figure 1 can update TPBT after receiving ADD_ADDR from B.
If this is possible,  I am guessing we can reduce the cases where you need to send ADDR_TRUST option.

Thanks,
--
Yoshi