Re: [Ntp] WG Call for Adoption: draft-stenn-ntp-extension-fields

Harlan Stenn <stenn@nwtime.org> Sat, 29 September 2018 05:32 UTC

Return-Path: <stenn@nwtime.org>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C713130E5D for <ntp@ietfa.amsl.com>; Fri, 28 Sep 2018 22:32:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r7NzJHbJTOzZ for <ntp@ietfa.amsl.com>; Fri, 28 Sep 2018 22:32:01 -0700 (PDT)
Received: from chessie.everett.org (chessie.everett.org [IPv6:2001:470:1:205::234]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57006130DDF for <ntp@ietf.org>; Fri, 28 Sep 2018 22:32:01 -0700 (PDT)
Received: from hms-mbp11.pfcs.com (96-41-166-181.dhcp.mdfd.or.charter.com [96.41.166.181]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by chessie.everett.org (Postfix) with ESMTPSA id 42MccH5npBzL7K; Sat, 29 Sep 2018 05:31:59 +0000 (UTC)
To: ntp@ietf.org
References: <20180929034126.537EA40605C@ip-64-139-1-69.sjc.megapath.net>
From: Harlan Stenn <stenn@nwtime.org>
Openpgp: preference=signencrypt
Autocrypt: addr=stenn@nwtime.org; prefer-encrypt=mutual; keydata= xsDNBFI2xmQBDACrPayw18eU4pIwCvKh7k0iMkAV9cvzs49kBppM+xoH+KKj4QWmkKELD39H ngQnT3RkKsTLlwxyLqPdUmeQNAY2M5fsOK+OF6EvwLPK9hbmE3Wx2moX+sbEUxJ2VzFhKSKb OPZALXwk1XxL0qBedz0xHYcDwaSAZZkEFXURv2pDIdrmnoUnq2gdC8GpoFJiXoUaCLSYzzaY ac4Njw7Mue8IqfzRQb70aMjXl/qmsmfmEVAyGXywDdc/ler4XSgiuYOV7Kf69bj9PFZZSMdJ MWgEyZH6lJ0TU5ccR2zp5ZRmWzQQkxJMyH2th7q0Nmz3aX4A0K4yE0Ba9/5Dr7ctpF15BrMF aEo4s5lwI6tUnkgMWo265mMzCz4mAPV/ac0w0OXQg7r9E2r0+dRapnzUlG43D0JLDqDr9uRR L6IrRQqoCWUC75lfmPYQYSlaTJaK68r3lXd0z1cXJUgVtEL5H3/Z71R2B20twcQVAnw2iIH6 L5vdrsIjHrMmkqRVbs9nNyEAEQEAAc0nSGFybGFuIE0gU3Rlbm4gKFBGQ1MpIDxoYXJsYW5A cGZjcy5jb20+wsD8BBMBAgAmAhsvBwsJCAcDAgEGFQgCCQoLBBYCAwECHgECF4AFAlI2xr0C GQEACgkQyIwAt1pH+kDfsQv/Q8fSJks4uNNyLf0O2kX9cepWExSTBpSgc1wsr65ldAx3fuPT ci+gymO0qs1PlGYPYuMFEVmIRpJFy/tUVXZIGIZtlOURAHXjov0NbdwyZnOahEaja3jL+bBH GGJpRtmD+CCAVkj1UEUNF2mLqUgwEQarvHLCI6j1xz5+kxzdXsF3jVAlLMRkpScOfZ2NiHq7 Dp8ClCcEALI+lU2sUIP8dGTqNCM03ma0M5T53PIzkD8tRMNa5Dznv6E3+eFE6xefm5uMzCWs XEzxxaaoVnkoFxyrJpHBkDuIl5MKhcyG0lcmmVeM35MoZpJXE6fgqvbq9XZccSQUcpY1OrwM mc2CjjTsm5K9IFDyD7yRA6xh4Z/ExSFBnwky2JwMJtJgqDRsLFkSvYCq+m+Zc3YWP8rGbmdR Lk57eZ3hdt9MuUX879LyjAKHWm5aFbCs5vsq2n8XWrxJMVHVOUy5pQlzAz5fa+5yjba9YM7L 4DMefzQZ9Q3P+TfBofmsQSbH54rkK/WAzsDNBFI2xmQBDADXLsBkI7CSa5UXlrNVFJQHER1V xRBKqjWWCh/8Qv9v3p3NrIc2UnhoZ1uWQ2voBGty5Xfy9k4afV5kWwDyRDUIb7PX+Tj4HjVV r7qvnOVe/0KzZpNq0Azd0ggFbsM+8mydktHIwJykW0NUsGwPRYuDOA0Lro0ohb5IiCt3sSQi 1X1hYjo7O1Vmn8Gy/XYOnhnMux+5zDPO2yTkCNX5PocYi9IJJy6pMq1yQV4Y2Dl8KtQzvtq5 5vCUxx6n0MMzFViGwNW6F4ge9ItO4tDScsgowDrHa208ehwOpv/iwjf93lCClQ6vaKmOBX87 2K/tdY/hwhxPPjgl1bcrOwMRYVemOPPehwnXH5bwclk1hvDQdkJQ5pJOkE4VCryTF/iDAt4g 2QnHocUwt3b6/ChUUWmj2GZ22OR12rbnCtLedwp0DpViKPUCQHBOvpgXdzE/L9zWar9fqM0E REMgfWbsJc9028qluCcFLIN1gYsq4cC+YGAcOu7HOI5orBBV4m9jXfsAEQEAAcLCfgQYAQIA CQUCUjbGZAIbLgGpCRDIjAC3Wkf6QMDdIAQZAQIABgUCUjbGZAAKCRDfCQ/G52/8P/uWDACe 7OEM+VETDRqjQgAwzX+RjCVPvtgrqc1SExS0fV7i1mUUxr/B8io3Y1cRHFoFKmedxf8prHZq 316Md5u4egjFdTT6ZqEqkK0hvv+i0pRpCa5EX9VIStcJStomZp8FcY34grA+EOWITaLQ4qNZ UP7rf2e7gq1ubQTj7uLr6HZZvMZ5em+IvrOWEuWDI6yOiI6px04wRDfkoR2h6kgdw4V0PT4N jK9WYYKrVCf1bjLlVImNBEcXfvlUTrIYO8y6ptvoUsBQky5pQRvP99Pn42WfyLy50aII6+vy udD4T0yLjXAz4KteUttxtIte64m/F9/7GEIZAxTUcLyOq/7bP4leh39jBckwc62iYzeK/VkU /bMMh2D68Z3QylMnhhcW27BcgQHPKsHhmFa2SNytYcuQiSdf9+pj4i32ETz1nJAvYAAqgTF/ 0PL+8ZNQoEpe/n9woMKrlZrqD4EgFmhQ3bNVhlaXz1nuTZDrwPt1yMxBuUNbCF4jFnaruwrS iGTRoIfUZQwAjQglahrV4/mcjfnvbNoseHX0PKd9q+wjg7MIjWqrf2CI8Fa6MdanqwYphz43 I2yXANKFZuMWsWqyQYlvGuPUlUUcAL3stp24RkzDB1Q+JS0IZJSTT2JSu0aTfUdWVNqr2UI1 9eX+zxbOTckSi3Ng14ezG8ZX194ZH10b8JzntQOwmA20pd5JDhugzQfASER+CZDiPPcQ4mvC 4y7rMrfV6XGQbDynC3ekDxo8SC5SvjaczXMwXg6SZ8iFtEWmEwW9r7zPjjIPDrX8w5LXBgxA rM5o/HbERpc2EdAvMh1D7LC0SvmoE7fBKxsicVBe4h6vXjEZ+LLr/wuZiBld9OnxAUIpwptb BspO6WKTQYvgFH2OeDG27hiE5P4Xs4WSp5j9ez8OVB1iZnA2nCQ+tNTjO8c+C/P92vPLx5+b pGRXTXMNaLh34PS3ZsYoUDkKZNhczRZUWJ7nynSbeeyF+QW7SLwAqY7O7dyk9LFTsfJqRQJ7 tWnIAjJPCwmSgQ8Kl0UJ
Message-ID: <3f9d2bb4-d286-9bb3-4970-249140e19b1c@nwtime.org>
Date: Fri, 28 Sep 2018 22:31:58 -0700
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <20180929034126.537EA40605C@ip-64-139-1-69.sjc.megapath.net>
Content-Type: text/plain; charset="utf-8"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/0lcUzS3YhXi2stua8QTeMaZFntw>
Subject: Re: [Ntp] WG Call for Adoption: draft-stenn-ntp-extension-fields
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Sep 2018 05:32:04 -0000


On 9/28/18 8:41 PM, Hal Murray wrote:
> 
> stenn@nwtime.org said:
>> In an operational setting, how is external information about what is or is
>> not supported useful? 
> 
> It helps an admin decide if they want to use that server or not.

And what happens if the remote version of NTP changes between the time
an admin reads whatever happens to be on that external mechanism and "now"?

And what assurance do you have that the external mechanism has correct
information even at the moment you read it?

>> The whole point of I-DO is that it provides a way for a newer instance of the
>> code to operationally detect what the other side can handle.
> 
> It doesn't (yet) handle the I-DONT case.

The absence of I-DO should be regarded as I-DONT.

> There is still the problem of old servers that do/don't do leap smearing, so 
> the idea of checking a web page or similar shouldn't be strange.

What does leap smearing have to do with the overall structure of
extension fields?

>> Have you actually implemented your idea?
> 
> No.  Miroslav Lichvar's comment about updating a Correction EF complicates 
> things.

I don't see it.  What do you mean, and how does it apply to my proposal?

>> What does it get you?  What does it *not* get you?
> 
> What it gets me, is simplification of the EF/MAC handling.  I don't have to 
> worry about all the kludgery to dance around MACs that might get confused with 
> EFs.
I've already implemented this and it works just great.  It's not
complicated at all.

> More importantly, I don't have to think about it.

I don't see your point here.  Would you please expand?

>> Where do you see that the minimum length is 8?  Section 4.2 (the new section
>> 7.5) says: 
> 
> I was reading quickly.
>>    While the minimum field length of an EF that contains no value or
>>    padding fields is one word (four octets), and the minimum field
>>    length of an EF that contains required fields is two words (8
>>    octets), ...
> I saw the second half which says "required fields".  If they are required, 
> then they must be there so the min length is 8.

You're still not reading it.  If there is no payload, the minimum EF
length is 4 octets.  If there is a payload, the minimum EF length is 8.

>> The text of the old and new stuff is pretty small, and it's pretty easy to
>> see what changed.  Are you saying you have tried to implement this and you
>> had difficulty? 
> I was trying to find what it said about the minimum length.  That could be a 
> simple sentence.  Instead, I have to do a manual diff.  The old section 7.5 is 
> a half page.  The new is a page and a half.  Somebody could easily focus on 
> the new stuff without noticing the length change.

I submit the only interesting bit here is does the new text make sense,
and can an implementor be expected to be able to write working code
based on it.

The introduction of the document clearly says what the purpose of this
proposal is.

Every other time I've added explanatory text to a proposal I'm told that
I should remove that text because it's not useful long-term.

>> As for your second, would you be happier with:
>>  R: 0 for "Information/Query", 1 for a "Response" 
> I think what's missing is the idea that the Request/Response bit only applies 
> to some uses.  As written, it doesn't allow for unsolicited information.

Then we disagree.  An R bit of 0 is clearly unsolicited information.

>> https://www.ietf.org/archive/id/draft-stenn-ntp-mac-last-ef-02.txt
> 
> Thanks.  That seems overly complicated, but I admit I haven't thought about 
> this area a lot.

It might make more sense to you if you were implementing it, and your
code had to deal with legacy and new NTP instances.

> Your last EF adds 4 bytes, but leaves a bare MAC.  I've been trying to think 
> of ways to get rid of bare MACs.  Your MAC-EF takes 8 more bytes for a single 
> MAC.

The way to get rid of bare MACs is to use a MAC-EF, or some other
mechanism.  But that won't work when talking to a legacy client, so you
can either dance thru hoops or use I-DO.

The MAC-EF takes 8 octets because it is preparing for the case where
multiple MACs are allowed.

It would not be hard to have a MAC-EF that only encapsulated a single
legacy MAC.  I'm not sure it's worth saving 4 octets for this case.

> I think I'd prefer a single MAC-EF - same layout as your LAST-EF except the 
> length includes the MAC.

OK.

>>> The link behind "NEW: 'RFC5905 Section 7.5.1 - Extension Fields and MACs'" 
> in
>>> the Table of Contents doesn't work.  (It's a new section.  There is no 
> place
>>> to link to.  I think the link should be removed.)
>> There is a place to link to - it's on the top of page 8.
> 
> Your "top of page 8" is in the new document.

Of course it's in the new document.  The proposal is to add that new
content.

> Here is the link I was referring to:
>   https://tools.ietf.org/html/rfc5905#section-7.5.1
> It goes to the old RFC.  There is no section 7.5.1 in the old RFC.
> There are actually 2 occurrences of that link.  One in the Table of Contents 
> and a second  at the top of page 8, the header for section 4.3

If the proposal is adopted, then the link will work.

I don't see the value in breaking the xref now, and then fixing it if
the proposal is passed.

-- 
Harlan Stenn <stenn@nwtime.org>
http://networktimefoundation.org - be a member!