Re: [Sidrops] WG Adoption call for draft-harrison-sidrops-manifest-numbers-01 - ENDS 04/15/2024 (April 15 2024)

Tom Strickx <tstrickx@cloudflare.com> Fri, 05 April 2024 11:49 UTC

Return-Path: <tstrickx@cloudflare.com>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3E25C15108C for <sidrops@ietfa.amsl.com>; Fri, 5 Apr 2024 04:49:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.073
X-Spam-Level:
X-Spam-Status: No, score=-1.073 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cloudflare.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LseCfQ2ylbv6 for <sidrops@ietfa.amsl.com>; Fri, 5 Apr 2024 04:49:46 -0700 (PDT)
Received: from mail-pf1-x42e.google.com (mail-pf1-x42e.google.com [IPv6:2607:f8b0:4864:20::42e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B265CC151071 for <sidrops@ietf.org>; Fri, 5 Apr 2024 04:49:46 -0700 (PDT)
Received: by mail-pf1-x42e.google.com with SMTP id d2e1a72fcca58-6e74bd85f26so1824943b3a.1 for <sidrops@ietf.org>; Fri, 05 Apr 2024 04:49:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudflare.com; s=google09082023; t=1712317785; x=1712922585; darn=ietf.org; h=cc:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=6x4ZmBg9eWe6VcaE6r9nuyBlxmVlG7FtP30BCoTGit8=; b=cNkp1YRKSnx0Yg2vxTEFiyFHxmEafVgHqV+v0VUumkpRMtBkKeTpJ2Fv/Cc30IPcSP HTM5oq8nFloJEaUqyktBBlJ/vr0b4Mvl+JT4TiOhRkH2+1f/lu9lScKLT0SZTTS1ptTx IgeJtlRZ/etdnf3fI6KYzmKi/Yk/U4lm6IU7AMiHkBc4O7sG4fNaUyMcwNPT2R1Y1eAz CMh9r+aGqvQFVHAIlF+KhtOYvYVGrsUOBvNTBbsHK93cMLNkkuhTCfOX9TzBvLPKBVk/ Fx8UmPRz19daRAs+dTmg9OQwDaPr80/ohI0TkZIFauFhPR2jlqA02b6ftoQmq7XaV3lg lbIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712317785; x=1712922585; h=cc:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=6x4ZmBg9eWe6VcaE6r9nuyBlxmVlG7FtP30BCoTGit8=; b=pcZM8r5xrq+GntVZPguFsHRmWwraLOXIzXMpj5HUgly5pNGUklnKQKFA+bjK2T47dT gQhgXWAMsyxA36RB8Ww4Q+axdYvac5mmmDHMMuUGxYAKkmMUecqNJSzitKL5hJfNXkXB NFWNUAZtdj+gIiPIBWQ1NqIUNHpQnP7d5vfCVmgyyLwkEMs9D7fgqYZkoKfwsWIGjBBM ox0vcZmiasoeJ7R5QtnVDznKKVm93zZsSvronoXyIdosu1Z9jJsztG7GYgE59+OaCB5Z W3chnAjqlVCmfzg9ymUyl/sSFPm8seXhHrEyt1qeQ+Z9tIX2PFzm42eoySO1ixvkEMl3 +KOg==
X-Gm-Message-State: AOJu0YyObgk5MGhO79QuC07F+K/RqRZ1oS7DknTXXzYide3UYOhips42 S+xJDvlq2c7lZie8lReAwiGiv1g9L1K55BGNEJDpn7BC5/6Pes7yogC84u6A9/8P05hBpK7XKdI dZDkpKxI9jIFL145IyTBvBjoLDSMbCqNvfgv0TKQ0cXEph80+
X-Google-Smtp-Source: AGHT+IG4nZzZo3qSuzwYSXBb5oeI8PDaguEpa8+v7+jAgkOVdfo1NUZ7OtnGimiDBwlk0aUg0snPD3H7NN4DTcqqaco=
X-Received: by 2002:a05:6a20:54a8:b0:1a7:4880:4d36 with SMTP id i40-20020a056a2054a800b001a748804d36mr26736pzk.41.1712317785361; Fri, 05 Apr 2024 04:49:45 -0700 (PDT)
MIME-Version: 1.0
References: <4744462D-78D9-45EE-B3A2-06FF329EA87C@arrcus.com> <A77D691F-57BD-4A00-90E6-E61F257B43EB@ripe.net> <Zgwz2HEWQndhRYkg@snel> <20240404225824.71B3F57A2C43@orthanc.hactrn.net>
In-Reply-To: <20240404225824.71B3F57A2C43@orthanc.hactrn.net>
From: Tom Strickx <tstrickx@cloudflare.com>
Date: Fri, 05 Apr 2024 12:49:32 +0100
Message-ID: <CAC93g0Q0HjSFT_v=Okc_7G0LFF74WDfOGnZ-GZR96hMjpc_PtA@mail.gmail.com>
Cc: sidrops@ietf.org
Content-Type: multipart/alternative; boundary="0000000000005764920615580df4"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/diNcZ4ChZd9-WgtzzN4MxJZrLr4>
Subject: Re: [Sidrops] WG Adoption call for draft-harrison-sidrops-manifest-numbers-01 - ENDS 04/15/2024 (April 15 2024)
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Apr 2024 11:49:50 -0000

I support adoption of this document
-- 
Tom Strickx
Principal Network Engineer
AS13335 - Cloudflare


On Thu, Apr 4, 2024 at 11:58 PM Rob Austein <sra@hactrn.net> wrote:

> I support adoption because it's worth discussing.  I'm not yet
> convinced that there's a real problem that needs solving here.
>
> On Tue, 02 Apr 2024 12:35:36 -0400, Job Snijders wrote:
> ...
> > 1) The algorithm presented by RFC 1982 ("Serial Number Arithmetic") has
> >    a significant shortcoming: there are sequence numbers for which
> >    comparison is undefined.
>
> For any given serial number there's exactly one value for which
> comparison is undefined.  Given the size of the numbers here, you're
> (much) more likely to be struck by lightening before reading the end
> of this sentence than you are to hit that case by accident, so if you
> ever do hit it you can assume it's an attack. :)
>
> >    I consider arithmetic operations on a number space this large an
> >    unwelcome complication to be avoided if possible.
>
> Implementations I've seen use bignums to hold these numbers, and the
> computational expense of one additional bignum subtraction would be
> lost in the noise compared to the signature check.
>
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops
>