Re: [Sframe] WGLC for draft-ietf-sframe-enc-04

Youenn Fablet <youenn@apple.com> Tue, 07 November 2023 08:31 UTC

Return-Path: <youenn@apple.com>
X-Original-To: sframe@ietfa.amsl.com
Delivered-To: sframe@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 912B9C19846D for <sframe@ietfa.amsl.com>; Tue, 7 Nov 2023 00:31:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.104
X-Spam-Level:
X-Spam-Status: No, score=-7.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=apple.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4zGo4i8_AJFU for <sframe@ietfa.amsl.com>; Tue, 7 Nov 2023 00:31:24 -0800 (PST)
Received: from hfd-mx02.apple.com (hfd-mx02.apple.com [17.132.100.1]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16D34C0A8587 for <sframe@ietf.org>; Tue, 7 Nov 2023 00:30:58 -0800 (PST)
Received: from am11p01nt-mtap02.apple.com (am11p01nt-mtap02.apple.com [100.85.69.166]) by am11p01nt-mxp02.apple.com (Oracle Communications Messaging Server 8.1.0.23.20230328 64bit (built Mar 28 2023)) with ESMTPS id <0S3Q033MKVNKON10@am11p01nt-mxp02.apple.com> for sframe@ietf.org; Tue, 07 Nov 2023 08:30:56 +0000 (GMT)
X-Proofpoint-ORIG-GUID: aDlwrieJWn8rSggYKB-Nk-elSE1Hf3WM
X-Proofpoint-GUID: aDlwrieJWn8rSggYKB-Nk-elSE1Hf3WM
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.619, 18.0.987 definitions=2023-11-06_15:2023-11-02, 2023-11-06 signatures=0
X-Proofpoint-Spam-Details: rule=interactive_user_notspam policy=interactive_user score=0 mlxlogscore=999 mlxscore=0 bulkscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2310240000 definitions=main-2311070069
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=from : message-id : content-type : mime-version : subject : date : in-reply-to : cc : to : references; s=20180706; bh=2whENg4IhHRYnZXOaCy5dyyOpO1ZQv10IAwohHgRPbw=; b=UWBEJrrdoY4fMh5WkZBKOz7fCI1D5xHRuhziBpSHVQWgR2Ep/45XSgBnzQUTZE18WjZ1 LFVcGDMHwu3tNiqi3RlLkzqXxoNlNN2pCrT0JDrrxy+gJUrLKruAfpS9d3IBLsdCxwYJ hEkovgX1fPxIxwZOoTNtDmOaLknvZuWRmXxzVmQ04+Ud1ukU/Ozb7Yj/30ns15c6oQUf cILZGN/urejSa2V2GbQfyXnDW1QYDkHGmIgd66hLeyJQ3wVXOgKMeU4w3IXOacLqVFnF dh2Dj8I74mIqIWcGsf4H3Q2q421+eOXW8i7DudqGYxCT7Gp6HGY9D/lBJJjNwvqVhvgg Hw==
Received: from am11p01nt-mmpp03.apple.com (am11p01nt-mmpp03.apple.com [100.85.69.141]) by am11p01nt-mtap02.apple.com (Oracle Communications Messaging Server 8.1.0.23.20230328 64bit (built Mar 28 2023)) with ESMTPS id <0S3Q01K5GVNKUB20@am11p01nt-mtap02.apple.com>; Tue, 07 Nov 2023 08:30:56 +0000 (GMT)
Received: from process_milters-daemon.am11p01nt-mmpp03.apple.com by am11p01nt-mmpp03.apple.com (Oracle Communications Messaging Server 8.1.0.23.20230328 64bit (built Mar 28 2023)) id <0S3Q02I00VJBNI00@am11p01nt-mmpp03.apple.com>; Tue, 07 Nov 2023 08:30:56 +0000 (GMT)
X-Va-A:
X-Va-T-CD: 9a351a80f8005473307b0fdaa86b372b
X-Va-E-CD: 51a8cc016b27261c37ab55423c17e5b3
X-Va-R-CD: 3618b1e13f4c28ca1fee7302e589ee12
X-Va-ID: 6898ac21-49c9-4203-9e2e-ea395752fe33
X-Va-CD: 0
X-V-A:
X-V-T-CD: 9a351a80f8005473307b0fdaa86b372b
X-V-E-CD: 51a8cc016b27261c37ab55423c17e5b3
X-V-R-CD: 3618b1e13f4c28ca1fee7302e589ee12
X-V-ID: 11c7076d-42ad-4abd-bd38-c3da907ead01
X-V-CD: 0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.619, 18.0.987 definitions=2023-11-06_15:2023-11-02, 2023-11-06 signatures=0
Received: from smtpclient.apple (unknown [17.235.208.146]) by am11p01nt-mmpp03.apple.com (Oracle Communications Messaging Server 8.1.0.23.20230328 64bit (built Mar 28 2023)) with ESMTPSA id <0S3Q02C72VNG0X00@am11p01nt-mmpp03.apple.com>; Tue, 07 Nov 2023 08:30:56 +0000 (GMT)
From: Youenn Fablet <youenn@apple.com>
Message-id: <5D35DD47-788D-4BEF-B035-54E7168D061F@apple.com>
Content-type: multipart/alternative; boundary="Apple-Mail=_CF9D7A3B-BF78-4980-8CBC-A56F3D11C097"
MIME-version: 1.0 (Mac OS X Mail 16.0 \(3774.300.21\))
Date: Tue, 07 Nov 2023 09:30:41 +0100
In-reply-to: <CAL02cgTZVCJGw3Eaeitnwr1no1yi-rS0f0ZngQzhd0_reQF0tg@mail.gmail.com>
Cc: Martin Thomson <mt@lowentropy.net>, sframe@ietf.org
To: Richard Barnes <rlb@ipv.sx>
References: <c2a02556-0009-4932-a939-e923bc07d202@betaapp.fastmail.com> <9FCC4D15-2335-4296-B428-A0A2FB310989@apple.com> <CAL02cgTZVCJGw3Eaeitnwr1no1yi-rS0f0ZngQzhd0_reQF0tg@mail.gmail.com>
X-Mailer: Apple Mail (2.3774.300.21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sframe/pG3vmOkzOrnRppbvepbhste8jqw>
Subject: Re: [Sframe] WGLC for draft-ietf-sframe-enc-04
X-BeenThere: sframe@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Media Frames <sframe.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sframe>, <mailto:sframe-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sframe/>
List-Post: <mailto:sframe@ietf.org>
List-Help: <mailto:sframe-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sframe>, <mailto:sframe-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Nov 2023 08:31:28 -0000

The minimum bar to me is to have one implementation and a test suite including the feature, which is currently met with the reference implementation I think.
Do you know of any additional implementation that supports it?

W3C SFrameTransform does not seem a blocker as we could probably extend the API to support it, should there be a need in the future.

I do not see any blocker that would strongly indicate to remove it (nor a strong indicator we should keep it).

I still find the spec a bit light on when users should use metadata and when they should not.
The RTP header extension case is a bit unclear to me and section 9.4 does not provide applicability guidance.
For the record, the past discussion summary is at https://github.com/sframe-wg/sframe/issues/63#issuecomment-1484641916 which indicates we should decide what to do at WGLC, now is the time.


> On 6 Nov 2023, at 17:17, Richard Barnes <rlb@ipv.sx> wrote:
> 
> Thanks, Youenn.
> 
> With regard to metadata: Given that we're about to finalize the spec, the time for "feature at risk" has passed.  We need to decide whether it's in or it's out.
> 
> Personally I would be inclined to keep it.  This is the classic "proactively add an extension point" (which inherently leaves it underspecified) vs. "YAGNI / add the extension point when it's needed" (thus requiring a code change later) argument.  My inclination for the former is based on this being a very simple extension point that doesn't change the behavior of the protocol much.  And it seems like there are some things like frame marking that might benefit from being bound into the metadata.
> 
> A comparable story from MLS/MIMI: We added an `authenticated_data` field to the MLS encrypted message structure, which has largely the same trade-offs we have here (except it *also* consumes space in the message).  When it was added, there wasn't an explicit use case for it, but it looks like MIMI is going to make a fair bit of use.
> 
> On Mon, Nov 6, 2023 at 10:34 AM Youenn Fablet <youenn=40apple.com@dmarc.ietf.org <mailto:40apple.com@dmarc.ietf.org>> wrote:
>> The document looks ready to advance.
>> 
>> About metadata, it is considered a feature at risk. It might still be a bit early to decide whether this is a useful addition. How are we planning to deal with it in the future?
>> 
>> Thanks,
>> 	Youenn
>> 
>>> On 23 Oct 2023, at 01:08, Martin Thomson <mt@lowentropy.net <mailto:mt@lowentropy.net>> wrote:
>>> 
>>> Hi All,
>>> 
>>> This starts a 3 week working group last call for draft-ietf-sframe-enc-04.
>>> 
>>> https://datatracker.ietf.org/doc/draft-ietf-sframe-enc/
>>> 
>>> We've been somewhat slow about this, but progress has been steady and the discussions have all been very productive.  The editors tell me that this is ready.  Please let us know whether you agree.
>>> 
>>> This WGLC will end at about the end of the upcoming IETF meeting.
>>> 
>>> Cheers,
>>> Martin
>>> 
>>> -- 
>>> Sframe mailing list
>>> Sframe@ietf.org <mailto:Sframe@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/sframe
>> 
>> -- 
>> Sframe mailing list
>> Sframe@ietf.org <mailto:Sframe@ietf.org>
>> https://www.ietf.org/mailman/listinfo/sframe