IETF Logo Mail Archive

Re: [nfsv4] Genart last call review of draft-ietf-nfsv4-rpc-tls-07

Chuck Lever <chuck.lever@oracle.com> Thu, 28 May 2020 03:46 UTC

Return-Path: <chuck.lever@oracle.com>
X-Original-To: nfsv4@ietfa.amsl.com
Delivered-To: nfsv4@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76D9D3A0B83; Wed, 27 May 2020 20:46:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.101
X-Spam-Level:
X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=oracle.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G2kzeeNshTCf; Wed, 27 May 2020 20:46:09 -0700 (PDT)
Received: from userp2120.oracle.com (userp2120.oracle.com [156.151.31.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60B903A0B82; Wed, 27 May 2020 20:46:09 -0700 (PDT)
Received: from pps.filterd (userp2120.oracle.com [127.0.0.1]) by userp2120.oracle.com (8.16.0.42/8.16.0.42) with SMTP id 04S3gu5x130101; Thu, 28 May 2020 03:45:58 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=content-type : mime-version : subject : from : in-reply-to : date : cc : content-transfer-encoding : message-id : references : to; s=corp-2020-01-29; bh=fA4qomYn6qe8eOkGY18nlIzZkFQ2FaBpNRxV5A5EHNo=; b=auoVcTBx8WTIGqiIfD60nyQS75gjMePIauJgti0SqrpTAGSVvZHGezXGfvW1xZ3zPOrs Dazwu7F7iIh6wvyRhRhQOIXHFSxeOXegGOB32l9cEI2mTyKO9AwDkq6ZP0slhpsjyY0K vKPoi2FtFofuw5irCH/GA+IDjfn4XLKiXEiv4PNA2P2rG1Vf61ZwXml5QHt87gSMFepz PSUGjFWBolLlATL28YMCZYNRrad/O84KuzyvACDMNVEGzx/UJQJbUxNQIcfmOybfHnVi flX7IE38ygIBM6j5h2XemZPjaGihSexHu1qrYS8DPtUpKdlpVvlYEdaNGAW7Gk1QWkoo Cg==
Received: from aserp3020.oracle.com (aserp3020.oracle.com [141.146.126.70]) by userp2120.oracle.com with ESMTP id 318xbk2qtg-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Thu, 28 May 2020 03:45:57 +0000
Received: from pps.filterd (aserp3020.oracle.com [127.0.0.1]) by aserp3020.oracle.com (8.16.0.42/8.16.0.42) with SMTP id 04S3heQr155873; Thu, 28 May 2020 03:43:57 GMT
Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75]) by aserp3020.oracle.com with ESMTP id 317j5tw4m5-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Thu, 28 May 2020 03:43:57 +0000
Received: from abhmp0010.oracle.com (abhmp0010.oracle.com [141.146.116.16]) by userv0122.oracle.com (8.14.4/8.14.4) with ESMTP id 04S3hs3u006056; Thu, 28 May 2020 03:43:55 GMT
Received: from anon-dhcp-153.1015granger.net (/68.61.232.219) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 27 May 2020 20:43:54 -0700
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\))
From: Chuck Lever <chuck.lever@oracle.com>
In-Reply-To: <87mu5siwsn.fsf@hobgoblin.ariadne.com>
Date: Wed, 27 May 2020 23:43:53 -0400
Cc: last-call@ietf.org, gen-art@ietf.org, draft-ietf-nfsv4-rpc-tls.all@ietf.org, nfsv4@ietf.org
Content-Transfer-Encoding: 7bit
Message-Id: <A9FB4B27-0389-4E25-9D6E-69CD07A77E25@oracle.com>
References: <87mu5siwsn.fsf@hobgoblin.ariadne.com>
To: "Dale R. Worley" <worley@ariadne.com>
X-Mailer: Apple Mail (2.3445.104.14)
X-Proofpoint-Virus-Version: vendor=nai engine=6000 definitions=9634 signatures=668686
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 bulkscore=0 spamscore=0 suspectscore=0 mlxlogscore=999 mlxscore=0 adultscore=0 phishscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2004280000 definitions=main-2005280016
X-Proofpoint-Virus-Version: vendor=nai engine=6000 definitions=9634 signatures=668686
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=999 spamscore=0 mlxscore=0 lowpriorityscore=0 priorityscore=1501 phishscore=0 cotscore=-2147483648 suspectscore=0 bulkscore=0 clxscore=1015 impostorscore=0 malwarescore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2004280000 definitions=main-2005280016
Archived-At: <https://mailarchive.ietf.org/arch/msg/nfsv4/O5x39-Aqul4QnbW3pvtSEfCv_uM>
Subject: Re: [nfsv4] Genart last call review of draft-ietf-nfsv4-rpc-tls-07
X-BeenThere: nfsv4@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: NFSv4 Working Group <nfsv4.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/nfsv4/>
List-Post: <mailto:nfsv4@ietf.org>
List-Help: <mailto:nfsv4-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 May 2020 03:46:11 -0000


> On May 27, 2020, at 11:05 PM, Dale R. Worley <worley@ariadne.com> wrote:
> 
> Chuck Lever <chuck.lever@oracle.com> writes:
>> I'm not comfortable citing an NFSv4 document to define a term used in
>> a document that discusses a generic RPC transport. To me that feels an
>> awful lot like a layering violation.
> 
> If doing that would be a layering violation, then this passage is also a
> layering violation:
> 
>   To protect backchannel operations, an RPC server uses the
>   existing TLS session on that connection to send backchannel
>   operations.  The server does not attempt to establish a TLS session
>   on a TCP connection for backchannel operation.

Yes, it is a layering violation. That's why I proposed replacing the
use of the term "backchannel" with the more correct "reverse-direction
operation", in addition to adding a citation of RFC 8167.


--
Chuck Lever

v2.23.0 | Report a Bug | By Email