Re: [Netconf] SSE and HTTP/2 in restcon-notif

Kent Watsen <kwatsen@juniper.net> Mon, 01 October 2018 19:35 UTC

Return-Path: <kwatsen@juniper.net>
X-Original-To: netconf@ietfa.amsl.com
Delivered-To: netconf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0ED9A130E19 for <netconf@ietfa.amsl.com>; Mon, 1 Oct 2018 12:35:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level:
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TzzxW-OOhlw1 for <netconf@ietfa.amsl.com>; Mon, 1 Oct 2018 12:35:16 -0700 (PDT)
Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01778130E73 for <netconf@ietf.org>; Mon, 1 Oct 2018 12:35:15 -0700 (PDT)
Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w91JYOq6003017; Mon, 1 Oct 2018 12:35:15 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=PPS1017; bh=lu400u3OskFdIGcW7gedx11WnFtFsBg7RReZ8tLAe2g=; b=Z2ulii5VBVSRBH52CNhLPObLjQe2KXN7xkYSBSOf5UKp4bwS8oCane8r01MsZPoMrEEP XyxgTSZZwtF8si+YDJ+GZiMzOM+2PmVkEKTglSeGrpmujIE91vGqPMvc3nUektPq+jcB 0j4sXLBE/yAJy0CmXf4VFV7i65i2xYWw+avh5P3FIF2q9VWFeM+TmQ8cdIiKBwlcib4E ar/U/LmkV5eeuuQkr2MR30qjMVAQ5ISw6BydJGBIO77gEAgP8oT7GD+tb+F9fcAwHSeI VDKFUIe507K+8XRByTn+e0vUxrBLejVy8k+DvV1tNCjYR8acRWz9jMXObU/URMnMQeky 2A==
Received: from nam02-cy1-obe.outbound.protection.outlook.com (mail-cys01nam02lp0052.outbound.protection.outlook.com [207.46.163.52]) by mx0a-00273201.pphosted.com with ESMTP id 2mupqugcqc-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Mon, 01 Oct 2018 12:35:15 -0700
Received: from DM6PR05MB4665.namprd05.prod.outlook.com (20.176.109.202) by DM6PR05MB3931.namprd05.prod.outlook.com (20.176.66.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.11; Mon, 1 Oct 2018 19:35:13 +0000
Received: from DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::8574:3388:660d:e495]) by DM6PR05MB4665.namprd05.prod.outlook.com ([fe80::8574:3388:660d:e495%5]) with mapi id 15.20.1207.018; Mon, 1 Oct 2018 19:35:12 +0000
From: Kent Watsen <kwatsen@juniper.net>
To: Martin Bjorklund <mbj@tail-f.com>, "andy@yumaworks.com" <andy@yumaworks.com>
CC: "rrahman=40cisco.com@dmarc.ietf.org" <rrahman=40cisco.com@dmarc.ietf.org>, "netconf@ietf.org" <netconf@ietf.org>
Thread-Topic: [Netconf] SSE and HTTP/2 in restcon-notif
Thread-Index: AQHUVpLBkBpJSSIQbkWRq5O8cMUK2aUEmdsAgAAMawCAAGaPgIACgpcAgALhzYCAAEoSAIAAAoQA///NvoA=
Date: Mon, 01 Oct 2018 19:35:12 +0000
Message-ID: <2EAF7889-0179-482E-AEE9-A5311EFAB680@juniper.net>
References: <CABCOCHRyuU712k+QHD0Ke5VF5bj7wSyHAcWxGyDsgT6NKA1ing@mail.gmail.com> <6E59E89D-B00C-4E8A-A3EA-970553C2F40E@juniper.net> <CABCOCHRHVP0kN68w=Wg8rR9AzF4YPteW_GvUVtAuvgTEWoNPNw@mail.gmail.com> <20181001.203508.1709854582923261288.mbj@tail-f.com>
In-Reply-To: <20181001.203508.1709854582923261288.mbj@tail-f.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.10.2.180910
x-originating-ip: [66.129.241.12]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; DM6PR05MB3931; 6:MljxAFEU9l8h65a7BxSZa6kVMpuEFXcDCRQ86ugnTYCnghIt0tiXDRdp7+iP9R+vZ8+suY5BjR7eKo6jSDmdpQJaomd9OL77CU04SoN2v2N6lfGyypTe6aVlD/oC2iDoIy9EsInFXpSy59fXA4KVn5ibMAJP4ZD/6Kt7/287cX0nPZq7FMR5JKTfTazNkNHLslE7ml70DiVy6xuTgtQq2+DE/UHMtkhAIbGQZEeV1om8Xdyo1FLciTpx+QMZp+8sRQ9Q+r8xF3rhhUUbQ4jC/vBtYW63UHZGQIwRbymb8BXV7Twgdxx9WhQC5R97xRwVgqTPaZa/D/P6EWyym1QQw7bNqXcQRXILxaNcLEQVXJ/oFCd0a8IQ9Z5o01gM/EPlfeZcn+SIUqQV7SaTzHJ3T+B1sXer85I7sG3wHTOY8MmBYwkCObSaqn4m6YHXopgNYBooqX9H+fakrSBmTJ43cA==; 5:fnTZUOJUf0+pjNppb8wqpo9jZYJJa0zR2kam9cue8fGopbd+Hwb+GGg3uZuo5NlmW7bu9/ltLF4ak7SMz6qhanggo6dMjlkrnaqYisahu2nEQ2hNiFZiumnoeZqwo7davtqNopkaibGHnJL8cHMSyaXO8kiSc7kFJlo2JIFCOKU=; 7:92hIHa3vrECc/HMvcv7ewAfxbo7phkBvTTjd+1HAYJ0uc441PIOjG57NJJSq7SToyt+pbfdoyytlnR6SF5MY2NqdfRm0AVjlwtS3+HDR7w1rHjFA2oDBpYa6qmiLNAAm3Hza1vmM1NTD7Tb09T2LzXgJdZUEWEpK6aqUt+rYsD6TRz+eSUwbCDTvS2btyIBZbt2np6F9Eu14drn8pxvZbcKGJhIA4eIf8KrDeOSmZN/4o1neni030hL9P9fIRJ2S
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 0ee8d367-335d-49fb-e1ad-08d627d501b8
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534165)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DM6PR05MB3931;
x-ms-traffictypediagnostic: DM6PR05MB3931:
x-microsoft-antispam-prvs: <DM6PR05MB3931E82D7C55A5E05325114FA5EF0@DM6PR05MB3931.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3002001)(3231355)(944501410)(52105095)(6055026)(149066)(150057)(6041310)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123560045)(201708071742011)(7699051); SRVR:DM6PR05MB3931; BCL:0; PCL:0; RULEID:; SRVR:DM6PR05MB3931;
x-forefront-prvs: 0812095267
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(376002)(136003)(396003)(366004)(346002)(199004)(189003)(229853002)(486006)(476003)(2900100001)(6246003)(66066001)(71200400001)(71190400001)(4326008)(36756003)(2906002)(86362001)(6486002)(82746002)(26005)(186003)(83716004)(256004)(14454004)(14444005)(2616005)(446003)(11346002)(6116002)(3846002)(6436002)(102836004)(6512007)(33656002)(93886005)(58126008)(54906003)(105586002)(81156014)(5250100002)(8936002)(2501003)(81166006)(110136005)(316002)(106356001)(478600001)(53936002)(99286004)(76176011)(7736002)(8676002)(305945005)(97736004)(6506007)(5660300001)(68736007)(25786009); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR05MB3931; H:DM6PR05MB4665.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts)
x-microsoft-antispam-message-info: q/1RjGF9PtNJZ52oxeii07XV25Qf0WhbBCSHyrEFxBXLm9BkqouzHKJz4YnUyK+80r40T1/TQw7uQTZty3WgbIgvRumed0UHPF+nnGpTj4mG2T863E9v5w9+MCB7B3yxrQ0AoTTgfZHpskUSwlAfzOXiMCybU7Y+jkBppXCXkHzcOUKR9c4TvGjB8I4wnC8QNPHAZYUHQweQsYidi6Ik9Nzi5ULa8fN/cuM7n1PuqtIjH9QzPLHiHFQWKWZvgT1ZQaXrp9N3OrBcjciO9f7oBQsrWznsqLlWspCUwsAyOlW5FJhe879AKsQH40SeCgKLVr7G31ru84ngTCSnWmqu6ancsiqx+lu5bw975hPtbV4=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <714A0350CF798C4490821B49BF26FFF5@namprd05.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-Network-Message-Id: 0ee8d367-335d-49fb-e1ad-08d627d501b8
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Oct 2018 19:35:12.8493 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB3931
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-10-01_10:, , signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1015 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=942 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1810010187
Archived-At: <https://mailarchive.ietf.org/arch/msg/netconf/WdIzJ4B7fi2d8t7EGYvUBQCK7Rs>
Subject: Re: [Netconf] SSE and HTTP/2 in restcon-notif
X-BeenThere: netconf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Network Configuration WG mailing list <netconf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netconf>, <mailto:netconf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netconf/>
List-Post: <mailto:netconf@ietf.org>
List-Help: <mailto:netconf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netconf>, <mailto:netconf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Oct 2018 19:35:18 -0000


>> I think the URI should be implementation-specific.
>> There is a standard mechanism to discover the correct URI to use
>> so there should not be any client issues.
>
> +1
>
>> If the URI just happens to match /streams/<stream-name>\
>> /<subscription-id> then so what?  It is just an implementation
>> detail right?

I thought the concern was for preventing access by other
clients.  One way is through obfuscation (e.g., random URI).
Another is through access control, but we wouldn't want
dynamically-generated NACM rules, in <intended> at least,
so then is the idea for dynamically-generated NACM rules
to be in <operational>?  Perhaps someone can post text?

Kent // contributor