[Sidrops] Re: new MerkleTree/HTTP-based cache syncing approach: draft-spaghetti-sidrops-rpki-erik-protocol-00

Job Snijders <job@sobornost.net> Thu, 10 July 2025 12:04 UTC

Return-Path: <job@instituut.net>
X-Original-To: sidrops@mail2.ietf.org
Delivered-To: sidrops@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 86EC142600F6 for <sidrops@mail2.ietf.org>; Thu, 10 Jul 2025 05:04:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.881
X-Spam-Level:
X-Spam-Status: No, score=-1.881 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.017, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=instituut-net.20230601.gappssmtp.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w2syyCovVMzd for <sidrops@mail2.ietf.org>; Thu, 10 Jul 2025 05:04:26 -0700 (PDT)
Received: from mail-ed1-x52c.google.com (mail-ed1-x52c.google.com [IPv6:2a00:1450:4864:20::52c]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 0049F42600ED for <sidrops@ietf.org>; Thu, 10 Jul 2025 05:04:25 -0700 (PDT)
Received: by mail-ed1-x52c.google.com with SMTP id 4fb4d7f45d1cf-604bff84741so1725573a12.2 for <sidrops@ietf.org>; Thu, 10 Jul 2025 05:04:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=instituut-net.20230601.gappssmtp.com; s=20230601; t=1752149065; x=1752753865; darn=ietf.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=XyKZWFaueap/xJWpXOQeIGbDqO49s2v+KTyw9z337OA=; b=CIqxVEKPqiu1gSdbi8k/yWCRPPrtb5y3EYekYYkrl7pXgBtnovYSuzkZ6JAIOrRNAo GJke0PuKVCse25MYWGA5q2KFAcFUfQbTHvev7bn4pec/w/beE0IVTG/ywIkTj++fFz6B sspUrO0NkMiDgZ+xiry1Yx7/JdKGFaCN5TB5azj2xuK73jeD0OXMZXKQLaRRrbqGyZ9B +SKpo15TlC4HpQt+qAFBSFTg2UqgrQqtMMJj7ZBZ6YydLuhojeVUgPb3bY9SsOAkq/gt 1Q6vhI5FltTLUEIv/QH56VcLgdXQ+oUhXQrZmNVtfiDDCRpaOY88bc6enxOWIaGLSLRf 4dUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752149065; x=1752753865; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=XyKZWFaueap/xJWpXOQeIGbDqO49s2v+KTyw9z337OA=; b=L4T/zshaSSJVLqzLVskcXeDnmY1rqVv2TlucKyozeSXMv+Z+WuukN6gB0xEMwVCXQS INwioozml5hwm+ASgnjWsrfYCD+0encYUKUllnwm4lqZGL5ChtPTpKL3Vb+tSx4gxkFB 6pZlaUf1utShcy8m88D7j63yqsWDLZGgWT/5FOBXGgse/CctllYXPSX1CrkHB1fC+0NE X/0xsL3YU+U5avy3MEegdQbQ6m2wlUWcvA6q69kyw0PJ4eroUP022b8E2DOZEs9eysuQ vVc/qqujO1LGOdJf8Scn3LUswhSVlTztSlxkP036UhNlMDWyWtUG3wNpl8RonvbBilOh 8opg==
X-Gm-Message-State: AOJu0YzJuDWxToE5j2g46cyJQpbqznu4nZY+caJd3cv6O5UhOEBk6zCf JxtlFSJ2US83oPtcgg4JbCMwTDI29K19vTYI0WqAb8i3dwW65CfHCux5BFvNXJeXxNd18ZWBiiW EDm9xtp0eTw==
X-Gm-Gg: ASbGnctzHZJeDRC1CgCHccf7s3hW1d5XJhWR+E6wgbhzlcJtNyLwehmPmOU0gsOu/tE QUnmNRyqY0CO0tYfd/m7Exa7p+wn/qeIk8aXkjDR+N1XXXR63xPzYEp/zFW0SJ4kC/b3uZSQf21 4HLHn3m3gZ9F7hOZi0cQtEbLGkNWw9Q00rY6RJLD3PqnHQXFa5X6wZvkDWeyN/zlkvz8mU78Wj1 CMrVEDZi7sDkrz9NnaPHRHiZGO+0R5MN/S3vaaImqxyrmBv9XJzcqNo5o7DbQpB+WZ7bwrvWbfx vE1DdGNxNPCmpo6nWplqKtp1jfniiz/r8CaahXBeXEmoqr4CJaR/212lHApscTiQi+hYgmPgSl9 9AZk=
X-Google-Smtp-Source: AGHT+IH9p9pPv8gA/eoLz9t6D8L5+rS6qAyiywOnxMRnsATXO1UuEHmYuI+5aW8iukdcS4JDjflIBA==
X-Received: by 2002:a17:906:1b54:b0:ae0:daca:f06f with SMTP id a640c23a62f3a-ae6e1458bafmr282524566b.60.1752149064384; Thu, 10 Jul 2025 05:04:24 -0700 (PDT)
Received: from anton.sobornost.net (anton.sobornost.net. [192.147.168.5]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ae6e82df4dasm119345966b.157.2025.07.10.05.04.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 10 Jul 2025 05:04:23 -0700 (PDT)
Date: Thu, 10 Jul 2025 12:04:22 +0000
From: Job Snijders <job@sobornost.net>
To: Russ Housley <housley@vigilsec.com>
Message-ID: <aG-sRmlwGK_tqvnc@anton.sobornost.net>
References: <aGw0FblU5WTN1D48@anton.sobornost.net> <EFFB771F-02BB-47D1-B1BC-4AA8712708EC@vigilsec.com> <aG1cS_G2gfrLYye3@anton.sobornost.net> <32EE6725-1D80-461C-AFA2-5AE11E4B544F@vigilsec.com> <aG2KOua7caWi_ngv@anton.sobornost.net> <39D54D05-8B6D-4630-9D8A-9593B8835C78@vigilsec.com> <CACWOCC8w9fLOumWegm956YY1AVmAQySBjpguQ6ss79v3Rs0p7g@mail.gmail.com> <3E870504-285C-416F-B53D-A2092A37FC67@vigilsec.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <3E870504-285C-416F-B53D-A2092A37FC67@vigilsec.com>
X-Clacks-Overhead: GNU Erik Bais
Message-ID-Hash: W2INLE5GACFJ322H7QI7QK6U4YEUHCOH
X-Message-ID-Hash: W2INLE5GACFJ322H7QI7QK6U4YEUHCOH
X-MailFrom: job@instituut.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-sidrops.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: IETF SIDRops <sidrops@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Sidrops] Re: new MerkleTree/HTTP-based cache syncing approach: draft-spaghetti-sidrops-rpki-erik-protocol-00
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/rtqsh7hekx7ADjUIbICvdNRpYUY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Owner: <mailto:sidrops-owner@ietf.org>
List-Post: <mailto:sidrops@ietf.org>
List-Subscribe: <mailto:sidrops-join@ietf.org>
List-Unsubscribe: <mailto:sidrops-leave@ietf.org>

On Wed, Jul 09, 2025 at 10:42:10AM -0400, Russ Housley wrote:
> Certificates use both implicitly tags things and explicitly tagged
> things.  The mix does not seem to cause implementation problems.

Thanks Russ! Will change to something else than OCTET STRING in the next
version of the draft.