Re: [Sidrops] WGLC = draft-ietf-sidrops-aspa-verification - ENDS 03/22/2023 (Mar 22 2023)

Aftab Siddiqui <me@aftabsiddiqui.com> Fri, 24 March 2023 00:35 UTC

Return-Path: <me@aftabsiddiqui.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9970CC1516E9 for <sidrops@ietfa.amsl.com>; Thu, 23 Mar 2023 17:35:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.896
X-Spam-Level:
X-Spam-Status: No, score=-6.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=aftabsiddiqui-com.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OI67CCbxpO6P for <sidrops@ietfa.amsl.com>; Thu, 23 Mar 2023 17:35:48 -0700 (PDT)
Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCE22C15C285 for <sidrops@ietf.org>; Thu, 23 Mar 2023 17:35:48 -0700 (PDT)
Received: by mail-ed1-x531.google.com with SMTP id b20so1909273edd.1 for <sidrops@ietf.org>; Thu, 23 Mar 2023 17:35:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aftabsiddiqui-com.20210112.gappssmtp.com; s=20210112; t=1679618147; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=w5Y1ohxi2HkLXz5jVUg8ORNCr9M9bN9gKphlLFIlpAM=; b=QzatrrRH+CDasDT9HBZstCT4Q8j6W9zuUN7Y8XGR33ZZj9uPGOT3pzsPl21RS/n6Xg GvqdG3i8FkWeYBP0Ngmk+cEnqJoR7HTgpQrqdQs21Unj0Uiy+wEaNN1hQvsVWNHsynde 7j+NF4wmjttpEL5CVqkyZ59EbqRNtz6Y33HKZqSQQXB2xf0XK4khg8urDoBq5h5knsxw imqNraWg1THzoJajt96PoGMod98CuRIRqURGAaWpbTXYtGe5jt5Ocd/NP8EN7wIHUvuf 0YWcW80e6h7cHVroYOLZ7NWDTodDxqSGrb0lgaSqmPMDT7O4ZFr6tl3Ovl46v8Npo4Jn V5PA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679618147; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=w5Y1ohxi2HkLXz5jVUg8ORNCr9M9bN9gKphlLFIlpAM=; b=kUGwYSgLfO7xNTUl5spGq6haeL8Y5V+7arVsS2T7CQNVjrgk6umdVFwbwHBORFLarv i0aUWp7jhrq6NICmf5gQs8WU/PatgQnLEbs7hU/OpUJXAt5J0695WchuiGHdDF7PfiMD fYIs8GlyWvDYX+O8s2vvEFY+qq3I0UP7Q4UKUMRlZkb2vQP5dTSek/1PSk+ypPGAyqFO bhiz9sIj7Apir/6LK+gG7Fmc6d9fXnG+RBmiIftPQ5uwKWEI9WiY/hPH+UNf8hD4gDHo GmeS8WHx57PE9fsNWJOb4TM9VRkvd2VbAyOxsy3UWRsIZOOUpl4tqeoiqJ1Fgb69/FNM 5Lxg==
X-Gm-Message-State: AAQBX9f/I4lF8zncMrqH2hByGFHOc6gbI8cipzazZ2pFcUZT4l5gytR1 2Yy5BoMMUrfcsUHu0uhqjldpxUqN1p9kxDCgLi9Kdw==
X-Google-Smtp-Source: AKy350ZJlJBoCwfuH8/39zn2dUhZ/fpGxkWAHqr3j2eud91+o6FngDzwzHLY1QPI5735TGFGenjm8b9SSLA+QnuKI1o=
X-Received: by 2002:a17:906:f18b:b0:931:ecdc:14dd with SMTP id gs11-20020a170906f18b00b00931ecdc14ddmr454732ejb.4.1679618146560; Thu, 23 Mar 2023 17:35:46 -0700 (PDT)
MIME-Version: 1.0
References: <SJ0PR06MB7677230255CC9134CAF94E98D6879@SJ0PR06MB7677.namprd06.prod.outlook.com> <ZBxcTHebGjhJGpzh@snel>
In-Reply-To: <ZBxcTHebGjhJGpzh@snel>
From: Aftab Siddiqui <me@aftabsiddiqui.com>
Date: Fri, 24 Mar 2023 11:35:35 +1100
Message-ID: <CAB5NZESXFF68ez7NwK6s3hqYY6ChkHyu_r8jPggO3ysHQB0emA@mail.gmail.com>
To: Job Snijders <job=40fastly.com@dmarc.ietf.org>
Cc: Amreesh Phokeer <phokeer=40isoc.org@dmarc.ietf.org>, "sidrops@ietf.org" <sidrops@ietf.org>, Aftab Siddiqui <Siddiqui@isoc.org>, Max Stucchi <stucchi@isoc.org>, Hanna Kreitem <Kreitem@isoc.org>
Content-Type: multipart/alternative; boundary="000000000000fc02ec05f79a92e3"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/OA0UagB4sZt0pvySTXFEHpTPST4>
Subject: Re: [Sidrops] WGLC = draft-ietf-sidrops-aspa-verification - ENDS 03/22/2023 (Mar 22 2023)
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Mar 2023 00:35:49 -0000

Hi Job,


>
> >      *   To make it clear “AS 0 ASPA MUST only have AS 0 as Provider
> >          AS”, it doesn’t clearly mention that “normal” ASPA (non AS 0
> >          ASPA) MUST NOT have AS 0 in the Provider AS.
> >      *   In the absence of point ‘b’ what if AS 0 is added as Provider
> >          AS in the ‘normal’ ASPA?
>
> I'm a bit unclear on what is meant with the above two points, can you
> further clarify?
>

As per the definition "An ASPA object showing only AS 0 as a provider AS is
referred to as an AS0 ASPA." i.e. {CAS, AS(0)}
Any ASPA which is not "AS 0 ASPA" is referred to in the draft as "normal
ASPA" but it doesn't say that normal ASPA can't have AS 0 in the provider
AS. i.e. {CAS, AS(139038), AS(0)}. Yes, there is no reason to have AS 0 in
the provider AS but make it clear in the draft.


>
>
> >   4.  ROV vs ASPA validation states, keep the states consistent
> (Unknown/notfound)
> >      *   ROV States [valid, invalid, notfound] vs ASPA states [valid,
> invalid, unknown]
>
> Why? Route Origin Validation and ASPA verification are two different
> algorithms with different inputs and different outputs. To me it doesn't
> seem to increase consistency.
>

OK then why using terms like "valid", "invalid" and "unknown" why not just
use "Provider", "Not Provider" and "No Attestation" because these are
actual outputs of the function? don't you think the latter creates more
clarity than the former?

--
Best Wishes,

Aftab Siddiqui