Re: [rtcweb] Consent Freshness: Some suggestions for editorial clarifications

Muthu Arul Mozhi Perumal <muthu.arul@gmail.com> Thu, 25 September 2014 09:22 UTC

Return-Path: <muthu.arul@gmail.com>
X-Original-To: rtcweb@ietfa.amsl.com
Delivered-To: rtcweb@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D678B1A1B7C for <rtcweb@ietfa.amsl.com>; Thu, 25 Sep 2014 02:22:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wL4OCWTgTMhg for <rtcweb@ietfa.amsl.com>; Thu, 25 Sep 2014 02:22:19 -0700 (PDT)
Received: from mail-we0-x22c.google.com (mail-we0-x22c.google.com [IPv6:2a00:1450:400c:c03::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E6EB1A02ED for <rtcweb@ietf.org>; Thu, 25 Sep 2014 02:22:18 -0700 (PDT)
Received: by mail-we0-f172.google.com with SMTP id p10so7209399wes.31 for <rtcweb@ietf.org>; Thu, 25 Sep 2014 02:22:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=kNysm+bBPwk8AKAwT9saYjUEC9yg7mV+U/8X04jrkBw=; b=bXvhKmA3cqEIJJpQp6mq3nfwEfy6EIDNX/2yxpd+hEHMa3Fawh/IZAVZ+Is5CLU3S+ H4fiwiXpuj/ShicV4cVfuHyfALbfF2CyQKI/qB/CAWAajbNQHZgrAvjvv+r60vEi0VFq bk6E3DNUI2HvsG4VnGgzuvofx8ipHlDWLY7BA4Lexim9GB5LeD2B5tw9H6Pr2zWQWQAF ih0rPijwOxkXPYlawSLUlQzOy/sKuU7OCN3JmDklAQV212BYXn1PP02jnPoNf8uwJhrK 3P04DVNg+RNRLMv8tYM4kBT1XFc+bErSeAEgCLYTs3ACQbI1ZAl1iaGVR4P+PbW14gkU fpPg==
MIME-Version: 1.0
X-Received: by 10.180.78.138 with SMTP id b10mr36363028wix.37.1411636937133; Thu, 25 Sep 2014 02:22:17 -0700 (PDT)
Received: by 10.180.197.168 with HTTP; Thu, 25 Sep 2014 02:22:17 -0700 (PDT)
In-Reply-To: <7594FB04B1934943A5C02806D1A2204B1D45A186@ESESSMB209.ericsson.se>
References: <7594FB04B1934943A5C02806D1A2204B1D44E72A@ESESSMB209.ericsson.se> <CAKz0y8xB6VaJtcABPhyP2FMr13_ZGZNFzafaUs590ym2T5OPyA@mail.gmail.com> <7594FB04B1934943A5C02806D1A2204B1D45A186@ESESSMB209.ericsson.se>
Date: Thu, 25 Sep 2014 14:52:17 +0530
Message-ID: <CAKz0y8x624Pwib+1Mxj9eOW2ACB55agfTXewp=YybRFiFzhKrA@mail.gmail.com>
From: Muthu Arul Mozhi Perumal <muthu.arul@gmail.com>
To: Christer Holmberg <christer.holmberg@ericsson.com>
Content-Type: multipart/alternative; boundary="f46d043c80203096890503e0561b"
Archived-At: http://mailarchive.ietf.org/arch/msg/rtcweb/5wKCvgvDgSk7k7o2bi7Ej_VYyCM
Cc: "rtcweb@ietf.org" <rtcweb@ietf.org>
Subject: Re: [rtcweb] Consent Freshness: Some suggestions for editorial clarifications
X-BeenThere: rtcweb@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Real-Time Communication in WEB-browsers working group list <rtcweb.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/rtcweb/>
List-Post: <mailto:rtcweb@ietf.org>
List-Help: <mailto:rtcweb-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rtcweb>, <mailto:rtcweb-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Sep 2014 09:22:21 -0000

On Thu, Sep 25, 2014 at 2:02 PM, Christer Holmberg <
christer.holmberg@ericsson.com> wrote:

>  Hi,
>
>  Based on feedback I receive from implementers, there are a couple of
> clarifications I think would be useful in the consent freshness draft.
>
>
>
>
>
>
>
> Q1:
>
> -----
>
>
>
> As STUN binding requests for consent are sent unreliably, and are not
> re-transmitted, I think it would be useful to have some explicit text
> saying that individual requests (and/or their associated responses) may get
> lost in the network, and that a sender must be prepared that a response to
> such requestmay never arrive.
>
>
>
> It may be obvious to us, but maybe not as clear to the first-time reader
> of the draft.
>
>
>
>
>
>
>
>
>
> Q2:
>
> -----
>
>
>
> Section 4.1 says:
>
>
>
> “That is, if a valid STUN binding response corresponding to one of the
> STUN requests sent in the last 30 seconds
>
>                 has not been received from the remote peer's Transport
> Address, the endpoint MUST cease transmission on that 5-tuple.”
>
>
>
> First, I suggest the following clarification:
>
>
>
> s/”to one of the STUN requests sent in the last 30 seconds”/”to one of the
> STUN requests (not necessarily the last one) sent in the last 30 seconds”.
>
>
>
>
>
> Second, there is no explicit text on for how long the client keeps the
> STUN transaction alive, i.e. for how long it waits for the response.
>
>
>
> I assume that, after 30 seconds, the client does not need to maintain
> state and wait for the response anymore.
>
>
>
> ​My understanding is that the sender doesn't need remember the request for
> 30 sec, instead it needs to remember it only for RTT duration. If a
> matching response is received within that duration you have a 'hit'. If
> there is no 'hit' over the last 30 sec, consent expires.
>
>
>
> I agree this isn't clear in the current version.
>
>
>
> How do you calculate the RTT? Based on previous transactions?
>

​I should have said smoothed RTT. ​I believe that is what STUN and TCP
currently use.



> What if, for whatever reason, the roundtrip for a STUN binding
> request/response takes longer that previously? You would discard the
> response.
>

​Yes, but that shouldn't a problem for consent I think, because only if
there was no 'hit' over the last 30 sec would consent expire.


>
>
> I think it is much more clear the specify a time. 30 seconds is a good
> value, because if it takes longer the response is “unvalid” anyway.
>

​I am okay with a fixed duration instead of a smoothed RTT. However, 30 sec
looks too long to me to remember the request, holding unnecessary resources
(we just need one matching response over the last 30 sec).

The other question is, do we really need to specify the duration to achieve
interoperability here? I though Martin's opinion was that isn't needed to
achieve interoperability, but I could have misread one of those
discussions..

Muthu


>
>
> Regards,
>
>
>
> Christer
>
>
>
>
>
>
>
>
>
>  I think it would be useful to explicitly indicate that, and also say
> that responses that are received after that time must be discarded.
>
>
>
> Thanks!
>
>
>
> Regards,
>
>
>
> Christer
>
>
>
>
>
>
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb
>
>
>