Re: [sipcore] AD Evaluation of draft-ietf-sipcore-6665-clarification-00

"Ben Campbell" <ben@nostrum.com> Fri, 05 June 2015 00:48 UTC

Return-Path: <ben@nostrum.com>
X-Original-To: sipcore@ietfa.amsl.com
Delivered-To: sipcore@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF95E1ACE0B for <sipcore@ietfa.amsl.com>; Thu, 4 Jun 2015 17:48:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.91
X-Spam-Level:
X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6ive6TTe_Trl for <sipcore@ietfa.amsl.com>; Thu, 4 Jun 2015 17:48:22 -0700 (PDT)
Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B8AA1ACE0A for <sipcore@ietf.org>; Thu, 4 Jun 2015 17:48:22 -0700 (PDT)
Received: from [10.0.1.23] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.1/8.14.9) with ESMTPSA id t550mBcS077543 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Thu, 4 Jun 2015 19:48:22 -0500 (CDT) (envelope-from ben@nostrum.com)
X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.23]
From: Ben Campbell <ben@nostrum.com>
To: Adam Roach <adam@nostrum.com>
Date: Thu, 04 Jun 2015 19:48:11 -0500
Message-ID: <F72BB8DC-6CAF-4867-9BC4-4C3606B715A1@nostrum.com>
In-Reply-To: <5570D546.1090405@nostrum.com>
References: <6A0F5649-8E72-4A18-84E5-9BE9D27FC7F9@nostrum.com> <3EC93612-13FD-4B7D-BEA7-9DD6BAF0D083@nostrum.com> <5570D546.1090405@nostrum.com>
MIME-Version: 1.0
Content-Type: text/plain; format="flowed"
X-Mailer: MailMate (1.9.1r5084)
Archived-At: <http://mailarchive.ietf.org/arch/msg/sipcore/YixJPaj2f7WiTfFdebU2mwjDPNM>
Cc: SIPCORE <sipcore@ietf.org>
Subject: Re: [sipcore] AD Evaluation of draft-ietf-sipcore-6665-clarification-00
X-BeenThere: sipcore@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: SIP Core Working Group <sipcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sipcore>, <mailto:sipcore-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sipcore/>
List-Post: <mailto:sipcore@ietf.org>
List-Help: <mailto:sipcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sipcore>, <mailto:sipcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Jun 2015 00:48:26 -0000

On 4 Jun 2015, at 17:46, Adam Roach wrote:

> On 6/3/15 18:45, Ben Campbell wrote:
>> -- section 1: "... clarity in [2119]"
>>
>> Do you really mean 2119, not 6665? That is, are you suggesting a lack 
>> of clarity on what MUST means, or the lack of clarity in 6665 
>> mentioned in section 2?
>
> Yes, this should point to RFC 6665. I presume we can fix this with an 
> RFC editor's note.

Sure.

>
>> -- section 2, last paragraph : "regardless of whether such
>> subscription would be created by a SUBSCRIBE or a REFER message. "
>>
>> I suggest you consider adding "or any other method", to future proof 
>> against people coming up with new ways to create subscriptions.
>
> Section 4.2.1 of RFC 6665 is pretty clear about normatively forbidding 
> new ways to create subscriptions. This was one of a small set of key 
> flaws in the original 3265 mechanism that prompted work on a bis 
> draft. I fear that adding "or any other method" would dilute the 
> absolute prohibition on adding new methods by implying that some other 
> method may somehow be allowed.
>
> For easy reference: https://tools.ietf.org/html/rfc6665#section-4.2.1

Okay.

(It's hard to forbid new things when all we have to do is update or 
obsolete 6665 to remove the prohibition. But that logic could equally 
apply to any attempt to future-proof this draft as well, and I take your 
point about making sure both docs are in solidarity.)