RE: negotiating Packet Number Protection

Lucas Pardue <Lucas.Pardue@bbc.co.uk> Fri, 07 September 2018 17:11 UTC

Return-Path: <Lucas.Pardue@bbc.co.uk>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3ECD130DE4 for <quic@ietfa.amsl.com>; Fri, 7 Sep 2018 10:11:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Db9lh1yZchY1 for <quic@ietfa.amsl.com>; Fri, 7 Sep 2018 10:10:59 -0700 (PDT)
Received: from mailout0.cwwtf.bbc.co.uk (mailout0.cwwtf.bbc.co.uk [132.185.160.179]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DFE3126F72 for <quic@ietf.org>; Fri, 7 Sep 2018 10:10:59 -0700 (PDT)
Received: from BGB01XI1006.national.core.bbc.co.uk ([10.184.50.56]) by mailout0.cwwtf.bbc.co.uk (8.15.2/8.15.2) with ESMTP id w87HAnbr018610; Fri, 7 Sep 2018 18:10:49 +0100 (BST)
Received: from BGB01XUD1012.national.core.bbc.co.uk ([10.161.14.10]) by BGB01XI1006.national.core.bbc.co.uk ([10.184.50.56]) with mapi id 14.03.0408.000; Fri, 7 Sep 2018 18:10:48 +0100
From: Lucas Pardue <Lucas.Pardue@bbc.co.uk>
To: Ian Swett <ianswett=40google.com@dmarc.ietf.org>, Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com>
CC: Martin Thomson <martin.thomson@gmail.com>, IETF QUIC WG <quic@ietf.org>, Christian Huitema <huitema@huitema.net>, "gabriel.montenegro=40microsoft.com@dmarc.ietf.org" <gabriel.montenegro=40microsoft.com@dmarc.ietf.org>
Subject: RE: negotiating Packet Number Protection
Thread-Topic: negotiating Packet Number Protection
Thread-Index: AdRGNFtNHdOO+Z3gRiiFS3eOLSplqgAAcqsAAARNpYAAAtZIgAATJxSAAAttqFc=
Date: Fri, 07 Sep 2018 17:10:48 +0000
Message-ID: <7CF7F94CB496BF4FAB1676F375F9666A3BB968F3@bgb01xud1012>
References: <DM5PR21MB01393FE7097A16C7A68EA7BE95010@DM5PR21MB0139.namprd21.prod.outlook.com> <CABkgnnViOSQOYeEL4bL_hq6jPDaGR-G+O=A96C78+X4mheWaxg@mail.gmail.com> <0d5fb94c-3a79-ac40-ee12-193d190d4408@huitema.net> <DB6PR10MB1766D14FF9B5C1971B72471DAC000@DB6PR10MB1766.EURPRD10.PROD.OUTLOOK.COM>, <CAKcm_gPWf=GZoMr3Nf2k75oRifK51+ZkUbH42-cM2Oa1Smy6Sg@mail.gmail.com>
In-Reply-To: <CAKcm_gPWf=GZoMr3Nf2k75oRifK51+ZkUbH42-cM2Oa1Smy6Sg@mail.gmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [172.19.161.211]
x-exclaimer-md-config: 1cd3ac1c-62e5-43f2-8404-6b688271c769
x-tm-as-product-ver: SMEX-12.5.0.1300-8.2.1013-24052.007
x-tm-as-result: No-29.485400-8.000000-10
x-tmase-matchedrid: Q2+zkeG6t3o7iuZ/mdYYtndysr7mPnqL6kOL/MSUCvfbpSaZJR8Y2J8z k9ZWpCrPqb8bt5iwUztYKMMlFh4BnYWdLRedvR18Hp6T0pXs+wOvWZOiy0Cjj3b4Bm7FqQnLz1+ 7FJCqpLJMM5J114k3nrqQyAveNtg6h+w9Wz/xXDqgVQtVkAwMv/Qo+vmZoe3d9s9S35IVPp3F6+ 8r30DovKtJ52Oi6rtnf01qcJQDhV6l9VzHf0qr7kiO8DX9hL7RR771cLUwNWzDWRaPt1cEv1MMg chF5dP3rGP4+JC+RKWVUcz8XpiS9OM14oirFh4fWPxubhjE+CqxJab/0C7ITvhdVfNkw9/Ifwjb 1ege1rffr/48DfD8ikKcYi5Qw/RVdQX1HlNY4wSISI683skDCnr7hjeGiWblRrA3T7fgwD5hyP4 97GV1bDzr4TJKjukKLIRqQbCuh+6dtJSsyReYaSuDGYz2kVX/CeuP5Fj9QuYG2mU1Rj0WWnB383 OHHcWZgCbgtjvbcKb1RUeLAvHT8lW63brkhSs4bx0lpadwJZva/zOixoFGdhyYOjDTocqB5gfQ9 dr1UoMQd7zZg6YiFZ3iEJrvFJmhLAnNohUyMa0ep400rdpOC2SlQ8qAvIMRgxLTF5wtWZJsBPEs FAU7tGfxc1DJz3ucjoyKzEmtrEe0NJ9wxH7tk2Udr4Z7uEf9WIAWAqR3u1UA8l7COv1ZttRkgfX wQXSRVB55dkRMs8zvVbHa5Rs8twVyeo9hM9SHFCdhWBxrvLCjUcN7uviF1nGTbL5t8BjX5vrAX8 USatgp23mj39P7arxygpRxo4693Dm7Ebb7HTKbKItl61J/ybLn+0Vm71Lc8A0fdITW7wUsuu9pF NfftZ65eh4C+F2Fb2FMpCW1qu4z9ot49m5SJlcRjdMI944Kr6AZ0BguZO0=
x-tm-as-user-approved-sender: Yes
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--29.485400-8.000000
x-tmase-version: SMEX-12.5.0.1300-8.2.1013-24052.007
Content-Type: multipart/alternative; boundary="_000_7CF7F94CB496BF4FAB1676F375F9666A3BB968F3bgb01xud1012_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/gH0N5aT36l4r9dUfD_qgzzUegUg>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Sep 2018 17:11:01 -0000

I agree with relaxing the MUST for Internet-facing.

There may be some future applications of future versions of QUIC where the benefits of PNP are harder to rationalise (i.e. traceabiity of mutlicasted QUIC packets that share a packet number). Indeed, there may be some other schemes that a benefit from a readble and/or deterministic packet number. However, that's all a long way off. What I like about the extension for the QUIC we have today is that it sets the right frame up for implementations that might want to do things slightly differently.

Regards
Lucas
________________________________
From: QUIC [quic-bounces@ietf.org] on behalf of Ian Swett [ianswett=40google.com@dmarc.ietf.org]
Sent: 07 September 2018 13:38
To: Mikkel Fahnøe Jørgensen
Cc: Martin Thomson; IETF QUIC WG; Christian Huitema; gabriel.montenegro=40microsoft.com@dmarc.ietf.org
Subject: Re: negotiating Packet Number Protection

I agree with Mikkel that the MUST not enable it on the public internet is either too strong or potentially impractical to enforce, so I would be inclined to change that to a SHOULD.

I would request that this MUST not be used when voluntary/intentional connection migration is enabled.

On Thu, Sep 6, 2018 at 11:30 PM Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com<mailto:mikkelfj@gmail.com>> wrote:
The MUST not disable PNP on internet facing nodes is too strong - you want a deployment to be able to move to a new DC while talking to the old DC - although ossification could br a concern, it is not egen limited to quasi stationært use cases.

________________________________
From: QUIC <quic-bounces@ietf.org<mailto:quic-bounces@ietf.org>> on behalf of Christian Huitema <huitema@huitema.net<mailto:huitema@huitema.net>>
Sent: Friday, September 7, 2018 4:09:01 AM
To: Martin Thomson; Gabriel.Montenegro=40microsoft.com@dmarc.ietf.org<mailto:40microsoft.com@dmarc.ietf.org>
Cc: QUIC WG
Subject: Re: negotiating Packet Number Protection

This draft requests assignment of single byte code point. I would rather
not do that know, as we are discussing reserving several consecutive
codes for ACK variants and options. Would it be a deal breaker if the
option used a longer code?

-- Christian Huitema


On 9/6/2018 5:05 PM, Martin Thomson wrote:
> This is an entirely appropriate use of transport parameters and it
> looks like the design works as intended.  I tend to think that the
> IETF doesn't need to publish this - this sort of extension is why we
> have relatively loose registration policies - but I'm happy to have
> that conversation at the appropriate time.
> On Fri, Sep 7, 2018 at 8:55 AM Gabriel Montenegro
> <Gabriel.Montenegro=40microsoft.com@dmarc.ietf.org<mailto:40microsoft.com@dmarc.ietf.org>> wrote:
>> Folks,
>>
>>
>>
>> We just submitted a draft to negotiate Packet Number Protection. This would allow disabling it in environments (e.g., in a datacenter) where it may no be needed if both sides agree. Browsers, of course, would probably not bother with this.
>>
>>
>>
>> https://tools.ietf.org/html/draft-montenegro-quic-negotiate-pnp-00
>>
>>
>>
>> thanks,
>>
>>
>>
>> Gabriel, Nick, Praveen




----------------------------

http://www.bbc.co.uk
This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in error, please delete it from your system.
Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately.
Please note that the BBC monitors e-mails sent or received.
Further communication will signify your consent to this.

---------------------