Re: [sidr] WGLC for drained ft-ietf-sidr-rpki-rtr-rfc6810-bis-03

Sandra Murphy <sandy@tislabs.com> Thu, 16 July 2015 11:05 UTC

Return-Path: <sandy@tislabs.com>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C47821B39A4 for <sidr@ietfa.amsl.com>; Thu, 16 Jul 2015 04:05:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Level:
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZTIqLNtVAV-A for <sidr@ietfa.amsl.com>; Thu, 16 Jul 2015 04:05:47 -0700 (PDT)
Received: from walnut.tislabs.com (walnut.tislabs.com [192.94.214.200]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA8CB1B39A2 for <sidr@ietf.org>; Thu, 16 Jul 2015 04:05:46 -0700 (PDT)
Received: from nova.tislabs.com (unknown [10.66.1.77]) by walnut.tislabs.com (Postfix) with ESMTP id D1AD328B0041; Thu, 16 Jul 2015 07:05:45 -0400 (EDT)
Received: from [127.0.0.1] (localhost.localdomain [127.0.0.1]) by nova.tislabs.com (Postfix) with ESMTP id 745131F8035; Thu, 16 Jul 2015 07:05:45 -0400 (EDT)
Content-Type: multipart/signed; boundary="Apple-Mail=_5E1B013E-233C-461D-9A08-9D04CD55E542"; protocol="application/pgp-signature"; micalg="pgp-sha512"
Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\))
From: Sandra Murphy <sandy@tislabs.com>
In-Reply-To: <D13889F3.2237A%oliver.borchert@nist.gov>
Date: Thu, 16 Jul 2015 07:05:41 -0400
Message-Id: <44E7D017-9EC5-4C24-A8BE-903B5EEEE82B@tislabs.com>
References: <D13889F3.2237A%oliver.borchert@nist.gov>
To: "Borchert, Oliver" <oliver.borchert@nist.gov>
X-Mailer: Apple Mail (2.1510)
Archived-At: <http://mailarchive.ietf.org/arch/msg/sidr/AYTSnmUGC1wb44kWDjRZoLA6ojs>
Cc: "sidr@ietf.org" <sidr@ietf.org>, David Mandelberg <david@mandelberg.org>, Sandra Murphy <sandy@tislabs.com>
Subject: Re: [sidr] WGLC for drained ft-ietf-sidr-rpki-rtr-rfc6810-bis-03
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidr/>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Jul 2015 11:05:48 -0000

Could you please reply to the list and say whether you believe that the draft-ietf-sidr-rpki-rtr-rfc6810-bis-04.txt version satisfies your comments?  It would help with the process.

--Sandy

On Mar 25, 2015, at 5:13 PM, "Borchert, Oliver" <oliver.borchert@nist.gov> wrote:

> David,
> 
> A correction for my previous email, I mixed up session id and serial
> number.
> I think to keep it simple for version 0 - 1 switches and future changes, a
> change
> Within the session id and version id should trigger a “Cache Reset” by the
> cache
> And the client must resynch with the server.
> And yes, wording in this matter might need to be added - but still it also
> could
> Be an implementation issue.
> 
> Oliver
> 
> -------------------------------------------------------------
> Oliver Borchert, Computer Scientist
> National Institute of Standards and Technology
> (Phone) 301.975.4856 , (Fax) 301.975.6238
> 
> 
> 
> 
> 
> On 3/24/15, 10:58 AM, "Borchert, Oliver" <oliver.borchert@nist.gov> wrote:
> 
>> Isn¹t this an implementation issue? The client either speaks 0 or 1. As
>> long as the server
>> keeps track of the version for the session IMHO it does not matter if the
>> session id is
>> shared? The client doesn¹t know about it. Lets say one encounter a new key
>> and this
>> Only triggers a PDU 9, the server sends send out the notification. The
>> client can but must not
>> React to it anyhow. If the client reacts, the server sends an end of
>> update to a version 0
>> session and all pdu 9 updates to a version 1 session.
>> I don¹t see a needed wording here. Not yet but IŒm open for enlightenment.
>> 
>> Oliver
>> -------------------------------------------------------------
>> Oliver Borchert, Computer Scientist
>> National Institute of Standards and Technology
>> (Phone) 301.975.4856 , (Fax) 301.975.6238
>> 
>> 
>> 
>> 
>> 
>> On 3/24/15, 10:36 AM, "David Mandelberg" <david@mandelberg.org> wrote:
>> 
>>> Rob and I were talking about rpki-rtr, and I came up with another
>>> potential issue with switching between protocol versions. I don't see
>>> any text about whether a single session (session id and serial numbers)
>>> can be used for both version 0 and 1. If a router has a valid version 0
>>> session, upgrades to version 1, and issues a serial query with the same
>>> session id and serial number, it's unclear what the server should do.
>>> Could we add text to the document saying that the cache MUST maintain a
>>> separate session for each protocol version it supports, and a router
>>> MUST NOT attempt to reuse session information across multiple protocol
>>> versions?
>>> 
>>> --
>>> David Eric Mandelberg / dseomn
>>> http://david.mandelberg.org/
>>> 
>>> _______________________________________________
>>> sidr mailing list
>>> sidr@ietf.org
>>> https://www.ietf.org/mailman/listinfo/sidr
>> 
>> _______________________________________________
>> sidr mailing list
>> sidr@ietf.org
>> https://www.ietf.org/mailman/listinfo/sidr
> 
> _______________________________________________
> sidr mailing list
> sidr@ietf.org
> https://www.ietf.org/mailman/listinfo/sidr