Re: [regext] Benjamin Kaduk's Discuss on draft-ietf-regext-epp-fees-18: (with DISCUSS and COMMENT)

Benjamin Kaduk <kaduk@mit.edu> Thu, 31 October 2019 20:49 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80A2012084F; Thu, 31 Oct 2019 13:49:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eMu56uAM4hKy; Thu, 31 Oct 2019 13:49:23 -0700 (PDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D332120826; Thu, 31 Oct 2019 13:49:23 -0700 (PDT)
Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x9VKnHGS004907 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 31 Oct 2019 16:49:19 -0400
Date: Thu, 31 Oct 2019 13:49:16 -0700
From: Benjamin Kaduk <kaduk@mit.edu>
To: Roger D Carney <rcarney@godaddy.com>
Cc: The IESG <iesg@ietf.org>, "regext@ietf.org" <regext@ietf.org>
Message-ID: <20191031204916.GM88302@kduck.mit.edu>
References: <156865116700.28085.15808873167007736678.idtracker@ietfa.amsl.com> <BL0PR02MB5491F9406EDBA3790CD6F254B19D0@BL0PR02MB5491.namprd02.prod.outlook.com> <20191004192523.GG6722@kduck.mit.edu> <20191023224013.GD69013@kduck.mit.edu> <BL0PR02MB5491DEEBB6896EB5D28446CDB1660@BL0PR02MB5491.namprd02.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <BL0PR02MB5491DEEBB6896EB5D28446CDB1660@BL0PR02MB5491.namprd02.prod.outlook.com>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/UNhzL-mdk4c31q4q56ezWtqWBqY>
Subject: Re: [regext] Benjamin Kaduk's Discuss on draft-ietf-regext-epp-fees-18: (with DISCUSS and COMMENT)
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Oct 2019 20:49:26 -0000

Hi Roger,

Thanks for the additional explanation.  I could ask where these conventions
are documented, but it seems more expedient to concede that I'm in the
rough and change my ballot position to Abstsain, to let the document get
published without further delay.

-Ben

On Mon, Oct 28, 2019 at 03:44:11PM +0000, Roger D Carney wrote:
> Good Morning,
> 
> 
> 
> Thank you for your clarification remarks Benjamin.
> 
> 
> 
> By convention the extensions are not included in EPP error responses unless it's explicitly stated or obvious based on the purpose of the extension.  We don't see any scenario that a server that supports returning the draft-ietf-regext-epp-fees balance information will return it in an error response.  We do not recommend changing the language of the draft to explicitly state the convention for an optional response attribute.
> 
> 
> 
> 
> 
> Thanks
> 
> Roger
> 
> 
> 
> 
> 
> -----Original Message-----
> From: Benjamin Kaduk <kaduk@mit.edu>
> Sent: Wednesday, October 23, 2019 5:40 PM
> To: Roger D Carney <rcarney@godaddy.com>
> Cc: The IESG <iesg@ietf.org>; regext@ietf.org
> Subject: Re: Benjamin Kaduk's Discuss on draft-ietf-regext-epp-fees-18: (with DISCUSS and COMMENT)
> 
> 
> 
> Notice: This email is from an external sender.
> 
> 
> 
> 
> 
> 
> 
> On Fri, Oct 04, 2019 at 12:25:23PM -0700, Benjamin Kaduk wrote:
> 
> > On Tue, Oct 01, 2019 at 02:41:20PM +0000, Roger D Carney wrote:
> 
> > > Good Morning,
> 
> > >
> 
> > >
> 
> > >
> 
> > > Thanks for your comments Benjamin, please see my responses below, a new revision will be published shortly to address issues brought up in this latest round of comments.
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > Thanks
> 
> > >
> 
> > > Roger
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > -----Original Message-----
> 
> > > From: Benjamin Kaduk via Datatracker
> 
> > > <noreply@ietf.org<mailto:noreply@ietf.org<mailto:noreply@ietf.org%3cmailto:noreply@ietf.org>>>
> 
> > > Sent: Monday, September 16, 2019 11:26 AM
> 
> > > To: The IESG <iesg@ietf.org<mailto:iesg@ietf.org<mailto:iesg@ietf.org%3cmailto:iesg@ietf.org>>>
> 
> > > Cc:
> 
> > > draft-ietf-regext-epp-fees@ietf.org<mailto:draft-ietf-regext-epp-fee<mailto:draft-ietf-regext-epp-fees@ietf.org%3cmailto:draft-ietf-regext-epp-fee>
> 
> > > s@ietf.org<mailto:s@ietf.org>>; James Gould
> 
> > > <jgould@verisign.com<mailto:jgould@verisign.com<mailto:jgould@verisign.com%3cmailto:jgould@verisign.com>>>;
> 
> > > regext-chairs@ietf.org<mailto:regext-chairs@ietf.org<mailto:regext-chairs@ietf.org%3cmailto:regext-chairs@ietf.org>>;
> 
> > > jgould@verisign.com<mailto:jgould@verisign.com<mailto:jgould@verisign.com%3cmailto:jgould@verisign.com>>;
> 
> > > regext@ietf.org<mailto:regext@ietf.org<mailto:regext@ietf.org%3cmailto:regext@ietf.org>>
> 
> > > Subject: Benjamin Kaduk's Discuss on draft-ietf-regext-epp-fees-18:
> 
> > > (with DISCUSS and COMMENT)
> 
> > >
> 
> > >
> 
> > >
> 
> > > Notice: This email is from an external sender.
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > Benjamin Kaduk has entered the following ballot position for
> 
> > >
> 
> > > draft-ietf-regext-epp-fees-18: Discuss
> 
> > >
> 
> > >
> 
> > >
> 
> > > When responding, please keep the subject line intact and reply to
> 
> > > all email addresses included in the To and CC lines. (Feel free to
> 
> > > cut this introductory paragraph, however.)
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > Please refer to
> 
> > > https://www.ietf.org/iesg/statement/discuss-criteria.html
> 
> > >
> 
> > > for more information about IESG DISCUSS and COMMENT positions.
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > The document, along with other ballot positions, can be found here:
> 
> > >
> 
> > > https://datatracker.ietf.org/doc/draft-ietf-regext-epp-fees/
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > >
> 
> > > --------------------------------------------------------------------
> 
> > > --
> 
> > >
> 
> > > DISCUSS:
> 
> > >
> 
> > > --------------------------------------------------------------------
> 
> > > --
> 
> > >
> 
> > >
> 
> > >
> 
> > > I think (at least with the present formulation) we need greater clarity on when the "it's up to server policy whether to include, but that policy must be the same for all transactions" elements (<fee:balance> and <fee:creditLimit>) are returned, as at present there seems to be an internal inconsistency in the text.  Section 3.5 and 3.6 just talk about including them "in responses to all 'transform' or billable commands", but then we have more qualified text such as (but not limited to) in Section 5.2.5 that only has <fee:updData> (and its children) included when the <update> has been processed successfully.  So, are <fee:balance> and <fee:creditLimit> supposed to be included in error responses or not?
> 
> > >
> 
> > >
> 
> > >
> 
> > > [RDC] I am not sure I see the real issue as I don’t read a conflict here (technically 5.2.5 [and others] don’t say “<fee:updData> (and its children)” can only be included in successful responses, the sections just don’t discuss if “<fee:updData> (and its children)” should/shouldn’t be included in errors. I would assume a server would most likely not return these data on errors, but I also don’t see harm if they do and the extension allows for both.
> 
> >
> 
> > I'm still at a point where I don't even know what the expected
> 
> > behavior is, so I can't comment on which text is correct or confusing.
> 
> > It is sounding like you think it's okay to not have <fee:balance>
> 
> > returned in error responses, though, in which case Sections 3.5/3.6
> 
> > would benefit from another couple words (e.g., "MUST be included in
> 
> > non-error responses") to make that clear.
> 
> 
> 
> To attempt to clarify my understanding (in the hope that the flaws therein will become more clear), I read this text from Section 3.5:
> 
> 
> 
>    Whether or not the <fee:balance> is included in responses is a matter
> 
>    of server policy.  However, if a server chooses to offer support for
> 
>    this element, it MUST be included in responses to all "transform" or
> 
>    billable commands (e.g. <create>, <renew>, <update>, <delete>,
> 
>    <transfer op="request">).
> 
> 
> 
> as saying that the server has a single yes/no policy knob that is global for all clients and requests, that controls whether <fee:balance> is included in responses to [the listed] commands.  It doesn't say anything about success vs. error, so I assume it applies to all (both types of) responses.
> 
> 
> 
> This is kind of a weird requirement to me, absent further context, since it doesn't give the server any discretion to omit it when it doesn't make sense or provide it only sometimes; it also seems pretty hard to enforce, and provides only a minimum level of interoperability gain that I can see (unless we expect a large population of clients that only ever talk to one server).  But, that's what the current text seems to say.
> 
> 
> 
> Then, in Section 5.2.5, we say that:
> 
> 
> 
>    When the <update> command has been processed successfully, and the
> 
>    client included the extension in the <login> command service
> 
>    extensions, the server MAY include in the <extension> section of the
> 
>    EPP response a <fee:updData> element, which contains the following
> 
>    child elements:
> 
>    [... things including <fee:balance>]
> 
> 
> 
> There does not seem to be any treatment anywhere in the document about <fee:updData> for error responses, so I assume that what is not explicitly specified is ... not specified, and therefore not part of this spec.
> 
> 
> 
> So on the one hand, I have this global knob that, if set to "yes", says I have to include <fee:balance> on error responses, and on the other hand no specification of an element in which to include <fee:balance> for error responses.  Were I to implement this spec as-written, I'd be forced to assume that the "yes" case is unimplementable and only support the "no"
> 
> variant, or try to come up with something on my own for how to do the error case.  I want to avoid making implementers face such a choice, as "come up with something on my own" has a history of being really bad for interoperability.
> 
> 
> 
> Hope this helps,
> 
> 
> 
> Ben