RE: QUIC ossification

Mike Bishop <mbishop@evequefou.be> Thu, 14 February 2019 20:42 UTC

Return-Path: <mbishop@evequefou.be>
X-Original-To: quic@ietfa.amsl.com
Delivered-To: quic@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F7B312D4F2 for <quic@ietfa.amsl.com>; Thu, 14 Feb 2019 12:42:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=evequefou.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xlxRiwDeaNXc for <quic@ietfa.amsl.com>; Thu, 14 Feb 2019 12:42:03 -0800 (PST)
Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680094.outbound.protection.outlook.com [40.107.68.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34912128D52 for <quic@ietf.org>; Thu, 14 Feb 2019 12:42:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evequefou.onmicrosoft.com; s=selector1-evequefou-be; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rOm6cKlqqLOyTvgWG/jnmVIqFULM2UvV79AQ4py/B74=; b=j0ytmSr2BD0yMVoJetj1v9I5HY+6s2R4Y3gut3qaL8b8WYEi2swoW0qyU3NlQ4Q2wFEJ0Lr2q15ec9BKKqRTGEIW2nvkIBBYnIlWRJW5AKLPERdnrLZ6DoXrZFl1YMwee+0cO3TRzS/F4R6LnugoEaLgmeBr9FfAhX+iIRthnfc=
Received: from MWHPR22MB0991.namprd22.prod.outlook.com (10.171.145.21) by MWHPR22MB0142.namprd22.prod.outlook.com (10.168.249.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1601.22; Thu, 14 Feb 2019 20:41:59 +0000
Received: from MWHPR22MB0991.namprd22.prod.outlook.com ([fe80::31b1:b2c0:74a2:772e]) by MWHPR22MB0991.namprd22.prod.outlook.com ([fe80::31b1:b2c0:74a2:772e%5]) with mapi id 15.20.1601.023; Thu, 14 Feb 2019 20:41:52 +0000
From: Mike Bishop <mbishop@evequefou.be>
To: David Benjamin <davidben@chromium.org>, Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com>
CC: Jana Iyengar <jri.ietf@gmail.com>, QUIC WG <quic@ietf.org>, Martin Thomson <mt@lowentropy.net>
Subject: RE: QUIC ossification
Thread-Topic: QUIC ossification
Thread-Index: AQHUwxikpkoFMiv1H0edotsvCAcFS6Xcr5EAgAAK3YCAACEsAIAAAikAgAELLICAAArqgIAABPsAgAAA14CAAAMfgIAACY0AgABAYACAAAfzgIAAPEaAgAAKFoCAABbCAIAAAY+AgAACigCAAArcAIAABcEAgAAOGgCAAPW8gIAAAEPA
Date: Thu, 14 Feb 2019 20:41:52 +0000
Message-ID: <MWHPR22MB09916CC98D4AB60AA6A185BEDA670@MWHPR22MB0991.namprd22.prod.outlook.com>
References: <CAM4esxTm0GiXnow4Vyv0UX6kFW4U3zJgVrN_JzD31Sm6sxoYGg@mail.gmail.com> <1550007332.441557.1656692832.0E5412AE@webmail.messagingengine.com> <9425344B-D72F-474D-A549-AA2453E57F19@fb.com> <CAPDSy+5LikoojquLhaW58DbJ3VrGXUViaD0aHcTkxBJGzFjgQA@mail.gmail.com> <47E7A834-B6CD-4D73-BF49-8768A48CADF0@fb.com> <CAM4esxThzPJUxU7R5-CY-ZcgmqhYdPFMoM5Fg17vN-Hsk_pJ8A@mail.gmail.com> <CAKcm_gMmxeHHN3dtH9kby_En96oPwTqrfHE=wpqy5Z0YbX4png@mail.gmail.com> <CAN1APdegy8n3+8J-pkgB6f-SNxHtju9p1Hiyct2tHWQ0KyeiGg@mail.gmail.com> <CA+9kkMC95TnFatowKU6121g+1DPy1hMNbKPagveMfKCXtpFSUQ@mail.gmail.com> <5B7F7D53-546D-4E3F-A0FC-AC29B1B05742@huitema.net> <CAKKJt-cQm+D2vptcfCLywz_QmuZW8tMYgcxNLoxyfC67OvYPUw@mail.gmail.com> <271E52ED-FA3A-4B4D-978C-90CE5CE57053@fb.com> <CAKKJt-f4U15Nr316xjuPb2S0QYOO6YAi9HRZzLWaZVfyXT3s8A@mail.gmail.com> <6b503e6a-d9ed-e747-9db6-f943f92fe114@huitema.net> <CACpbDcdixBEBFnLNbN1OhiKv9iTGjCpT3LQH13Rd64x1N0sJsA@mail.gmail.com> <CAM4esxTRsj7WqOSiCKfhQu2CfEosC+1-wJcm9uS1ryjchtpxdA@mail.gmail.com> <CAM4esxSqOAHEXXgAYP3iHyb-mkScrkXg1e5Dx+zA=Bi=yAcnQg@mail.gmail.com> <1550117350.927768.1657684024.116377B8@webmail.messagingengine.com> <CACpbDceGpp2Vs1pztJB3o7CJqg2f4HbL2mOoJtEPPeL7CvbXsA@mail.gmail.com> <1550120918.954942.1657706568.2C59A22F@webmail.messagingengine.com> <DB6PR10MB1766CDECAEED8E8391F61CD4AC670@DB6PR10MB1766.EURPRD10.PROD.OUTLOOK.COM> <CAF8qwaD8TKN251Ru5Q0G+NH9osyVw8MqWY5g+7VvLkzQph6jOQ@mail.gmail.com>
In-Reply-To: <CAF8qwaD8TKN251Ru5Q0G+NH9osyVw8MqWY5g+7VvLkzQph6jOQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=mbishop@evequefou.be;
x-originating-ip: [38.134.241.6]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: f82ab487-f178-4f6e-582f-08d692bcd9df
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600110)(711020)(4605077)(2017052603328)(7153060)(7193020); SRVR:MWHPR22MB0142;
x-ms-traffictypediagnostic: MWHPR22MB0142:
x-microsoft-antispam-prvs: <MWHPR22MB0142B7D5C3FB53638DC16197DA670@MWHPR22MB0142.namprd22.prod.outlook.com>
x-forefront-prvs: 09480768F8
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39830400003)(136003)(366004)(396003)(189003)(199004)(71200400001)(71190400001)(81166006)(93886005)(99286004)(476003)(446003)(4326008)(221733001)(11346002)(14454004)(8676002)(256004)(74316002)(8936002)(14444005)(7696005)(2906002)(186003)(508600001)(110136005)(486006)(81156014)(68736007)(3480700005)(54906003)(74482002)(76176011)(6246003)(229853002)(53546011)(790700001)(53936002)(66066001)(7116003)(25786009)(26005)(316002)(102836004)(3846002)(6306002)(6436002)(9686003)(236005)(54896002)(66574012)(105586002)(6116002)(55016002)(7736002)(97736004)(6506007)(33656002)(106356001)(86362001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR22MB0142; H:MWHPR22MB0991.namprd22.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: evequefou.be does not designate permitted sender hosts)
x-microsoft-exchange-diagnostics: 1;MWHPR22MB0142;23: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
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: /SVAj+c7Xe7OJ/JqZ0AiYF2F868f5cBJCX07vFX9FfSnUgDOwPJEVpHzN2+SiM0cuGq0hLyMik3OYEK9Tf+Y81+FmyZIJmLrVIXsb6ibQMl9dGG/0JwQq5PMOf2LBD+AHhfWn0UgPtcjjzH7rHzO52AXX+sSkZ96oRJtjZKF9pKqL3gzlHQTxKNZvE3h1UVaLCAiP1kSjf2VC2z3DxO1HFyOVnBtVYKJAxWGjbsZenHsnxUPtzmTHHmiQ+4YkpyURUzh3mLdgJXiz+DhYA3Gc9U9ZcX55FiMBdPDvG3duEKe6AduGyG/MwsPlJN/I5C+mVWzT161Wl0D8KMvBOpDtce6Fn2U9wb4csE9M1TbZzMSjHpIg/lV04r4NH8dNRhk3m3V+eAicSL7DkS/mwKBf0G/y1gb06aOsaXYVbuxC7s=
Content-Type: multipart/alternative; boundary="_000_MWHPR22MB09916CC98D4AB60AA6A185BEDA670MWHPR22MB0991namp_"
MIME-Version: 1.0
X-OriginatorOrg: evequefou.be
X-MS-Exchange-CrossTenant-Network-Message-Id: f82ab487-f178-4f6e-582f-08d692bcd9df
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Feb 2019 20:41:52.3121 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 41eaf50b-882d-47eb-8c4c-0b5b76a9da8f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR22MB0142
Archived-At: <https://mailarchive.ietf.org/arch/msg/quic/BKXVpdc_ztXsjpZo9EUvzIXgepc>
X-BeenThere: quic@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Main mailing list of the IETF QUIC working group <quic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/quic>, <mailto:quic-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/quic/>
List-Post: <mailto:quic@ietf.org>
List-Help: <mailto:quic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/quic>, <mailto:quic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Feb 2019 20:42:06 -0000

We actually agreed at the interim to leave downgrade protection as future work, since this is currently the only version we care about.  A future version would need to be accompanied by an extension to v1 that provides downgrade protection.  🙂

If we start actively flexing version negotiation, of course, we probably need to revisit that decision.

From: QUIC <quic-bounces@ietf.org> On Behalf Of David Benjamin
Sent: Thursday, February 14, 2019 12:39 PM
To: Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com>
Cc: Jana Iyengar <jri.ietf@gmail.com>; QUIC WG <quic@ietf.org>; Martin Thomson <mt@lowentropy.net>
Subject: Re: QUIC ossification

At least in the TLS incarnation of this idea, yes, the point would be to support both V1 (for normal clients) and the rolling version.. That does not require the client reject V1 for this to work, presuming your version negotiation has downgrade protection. (Being forced onto a version other than what you would have naturally negotiated is a downgrade.)

I'm not familiar with QUIC's negotiation mechanisms, but I certainly hope you all are downgrade-protected. That's generally important independent of these kinds of games.

David
On Wed, Feb 13, 2019 at 11:59 PM Mikkel Fahnøe Jørgensen <mikkelfj@gmail.com<mailto:mikkelfj@gmail.com>> wrote:
Version of the month is problematic:

Google server would need to support a basic V1, otherwise non-chrome user agents would fail. Chrome browsers would have to reject V1 or the greasing won’t work. This can only happen towards Google servers. Middleboxes now check for V1 or Google domain. Eith future encrypted request domain, it is a perfect wsy to firewall Google via Chrome. Users switch to other browser.


________________________________
Fra: QUIC <quic-bounces@ietf.org<mailto:quic-bounces@ietf.org>> på vegne af Martin Thomson <mt@lowentropy.net<mailto:mt@lowentropy.net>>
Sendt: torsdag, februar 14, 2019 6:08 AM
Til: Jana Iyengar
Cc: QUIC WG
Emne: Re: QUIC ossification

On Thu, Feb 14, 2019, at 15:48, Jana Iyengar wrote:
> Basically, I'm proposing that QUIC v1 be assigned a random number for its
> version at RFC publication time.

What property do you expect that to provide?

> Anyone who wants to use a different version for v1 MUST request it from IANA first before using it in the wild.

This too. What does this achieve?

I get that there seems to be the emerging view that unmanaged codepoint space is not good and we should ask IANA to manage it for us, but I don't understand what these proposals would provide.