IETF Logo Mail Archive

Re: [Sidrops] Reminder: SIDR Operations (sidrops) WG Virtual Meeting: 2020-04-28

Tim Bruijnzeels <tim@nlnetlabs.nl> Mon, 20 April 2020 12:00 UTC

Return-Path: <tim@nlnetlabs.nl>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648323A0BF6 for <sidrops@ietfa.amsl.com>; Mon, 20 Apr 2020 05:00:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.19
X-Spam-Level:
X-Spam-Status: No, score=-0.19 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, T_SPF_HELO_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nlnetlabs.nl
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EEkYe0ZQa3ZD for <sidrops@ietfa.amsl.com>; Mon, 20 Apr 2020 05:00:38 -0700 (PDT)
Received: from dicht.nlnetlabs.nl (dicht.nlnetlabs.nl [IPv6:2a04:b900::1:0:0:10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6CC623A0BF4 for <sidrops@ietf.org>; Mon, 20 Apr 2020 05:00:33 -0700 (PDT)
Received: from [IPv6:2001:981:4b52:1:d0a9:c67f:9de6:ce5e] (unknown [IPv6:2001:981:4b52:1:d0a9:c67f:9de6:ce5e]) by dicht.nlnetlabs.nl (Postfix) with ESMTPSA id 3373D12ED0; Mon, 20 Apr 2020 14:00:25 +0200 (CEST)
Authentication-Results: dicht.nlnetlabs.nl; dmarc=fail (p=none dis=none) header.from=nlnetlabs.nl
Authentication-Results: dicht.nlnetlabs.nl; spf=fail smtp.mailfrom=tim@nlnetlabs.nl
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nlnetlabs.nl; s=default; t=1587384025; bh=3unjm5dx4m+6D+loyzCD/piO/3IQaTNkfZTYG2OE7wA=; h=Subject:From:In-Reply-To:Date:Cc:References:To; b=EbH/xxzPbmn5sRD70NGMGQ/5worA6jFnl7yc9yl57hXDgICeeEAeXao9vjxs3InFt j7GBTOBtfvpP32iJlF2ixUInLBI3pwxRm/zSyKAN/PUkLCUaSOHkR5BOf+axLvN1Pa mLyfYcrv9lu6AGrhTujwCiLhCFNrNDGHwukkg2S0=
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 13.0 \(3608.60.0.2.5\))
From: Tim Bruijnzeels <tim@nlnetlabs.nl>
In-Reply-To: <066BFDB3-5009-4DF1-9882-E5D84E6F5380@ripe.net>
Date: Mon, 20 Apr 2020 14:00:24 +0200
Cc: SIDR Operations WG <sidrops@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <FACE2962-F0C8-47DC-B6BB-87FFCB760926@nlnetlabs.nl>
References: <066BFDB3-5009-4DF1-9882-E5D84E6F5380@ripe.net>
To: Nathalie Trenaman <nathalie@ripe.net>
X-Mailer: Apple Mail (2.3608.60.0.2.5)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/pMY0mcT-wWDGTQekahd8aLOO9x0>
Subject: Re: [Sidrops] Reminder: SIDR Operations (sidrops) WG Virtual Meeting: 2020-04-28
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Apr 2020 12:00:47 -0000

Hi Nathalie, all,


> On 20 Apr 2020, at 09:47, Nathalie Trenaman <nathalie@ripe.net> wrote:
> 
> Hi all,
> 
> This is a gentle reminder:
> 
> The SIDR Operations (sidrops) Working Group will hold
> a virtual interim meeting on 2020-04-28 from 16:00 to 18:00 Europe/Amsterdam (14:00 to 16:00 UTC).
> 
> Agenda:
> Agenda - Interim 04/2020
> 
> 1) CRL ? Manifest ? Hashbrowns? - guidance for chefs
> 2) other ongoing work
> 3) punch and pie
> 
> Please let us know if you wish to present. We still have plenty of time in the agenda. Please send slides to sidrops-chairs@ietf.org

I would like to add deprecating rsync to the agenda. I believe it's time to move on to RRDP, and I believe that doing so will help with a number of issues regarding agenda item #1.

In particular, RRDP allows publishing CRLs and MFTs and any other updated objects, as deltas - reducing the window for inconsistent fetches. And imperfect as it may be TLS verification in HTTPS adds a layer of defence w.r.t. MiTM attacks - provided TLS verification could become mandatory.

I wrote a (straw-man?) draft about this last year, which was intended to get discussion started:
https://datatracker.ietf.org/doc/draft-sidrops-bruijnzeels-deprecate-rsync/

But I am more than happy to work with others on this. And hopefully ask for WG adoption and discussion. I am sure I am not the only one thinking about this :)

Tim






> 
> We will hold the meeting on WebEx. Later this week, we’ll publish the link on https://datatracker.ietf.org/meeting/upcoming
> 
> Thanks,
> Keyur, Chris and Nathalie
> _______________________________________________
> Sidrops mailing list
> Sidrops@ietf.org
> https://www.ietf.org/mailman/listinfo/sidrops

v2.23.0 | Report a Bug | By Email