Re: [Spud] Bare-minimum PLUS (was Re: Thoughts on the privacy concerns expressed at the BoF)

Brian Trammell <ietf@trammell.ch> Fri, 29 July 2016 13:17 UTC

Return-Path: <ietf@trammell.ch>
X-Original-To: spud@ietfa.amsl.com
Delivered-To: spud@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E67212D825 for <spud@ietfa.amsl.com>; Fri, 29 Jul 2016 06:17:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.189
X-Spam-Level:
X-Spam-Status: No, score=-3.189 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.287, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w1Mc-INxe7wz for <spud@ietfa.amsl.com>; Fri, 29 Jul 2016 06:17:15 -0700 (PDT)
Received: from trammell.ch (trammell.ch [5.148.172.66]) by ietfa.amsl.com (Postfix) with ESMTP id 0F98C12D60E for <spud@ietf.org>; Fri, 29 Jul 2016 06:17:15 -0700 (PDT)
Received: from [10.0.27.103] (dynamic-94-247-222-033.catv.glattnet.ch [94.247.222.33]) by trammell.ch (Postfix) with ESMTPSA id 270BF1A0F8A; Fri, 29 Jul 2016 15:16:44 +0200 (CEST)
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
Content-Type: multipart/signed; boundary="Apple-Mail=_04873A7C-1E81-4511-B53F-42A757876B4C"; protocol="application/pgp-signature"; micalg="pgp-sha512"
X-Pgp-Agent: GPGMail
From: Brian Trammell <ietf@trammell.ch>
In-Reply-To: <CAJU8_nV7jeFmv+4UK8X1KyTL9Xo7bWi3he6vUZnr=Jx-_XFV-g@mail.gmail.com>
Date: Fri, 29 Jul 2016 15:16:43 +0200
Message-Id: <74798706-06D7-4C8C-891D-AF4D519B9D6F@trammell.ch>
References: <CAKC-DJjVF_mQb49BJmHNpt-VkJSX6JHXH8hTbYMm2bEYg3rgwA@mail.gmail.com> <CALx6S3636tzxpqjr5b+31sU5vg+8UyekhhR=R-3SUYeQhYvjug@mail.gmail.com> <E8355113905631478EFF04F5AA706E98310462EA@wtl-exchp-2.sandvine.com> <CALx6S36jXoWZxrbictFD2z3=x8XTU6OAGLw-CJjkxrMwpaouYQ@mail.gmail.com> <073728f6-f532-297f-0289-f6e9142bec62@cisco.com> <CAJU8_nV7jeFmv+4UK8X1KyTL9Xo7bWi3he6vUZnr=Jx-_XFV-g@mail.gmail.com>
To: Kyle Rose <krose@krose.org>
X-Mailer: Apple Mail (2.3124)
Archived-At: <https://mailarchive.ietf.org/arch/msg/spud/Yjqj7tFDxrOHvSJSL74nVekDaL8>
Cc: Eliot Lear <lear@cisco.com>, Tom Herbert <tom@herbertland.com>, Erik Nygren <erik+ietf@nygren.org>, Mirja Kühlewind <mirja.kuehlewind@tik.ee.ethz.ch>, spud <spud@ietf.org>, Dave Dolson <ddolson@sandvine.com>
Subject: Re: [Spud] Bare-minimum PLUS (was Re: Thoughts on the privacy concerns expressed at the BoF)
X-BeenThere: spud@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Session Protocol Underneath Datagrams <spud.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spud>, <mailto:spud-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spud/>
List-Post: <mailto:spud@ietf.org>
List-Help: <mailto:spud-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spud>, <mailto:spud-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jul 2016 13:17:17 -0000

hi Kyle,

> On 29 Jul 2016, at 14:39, Kyle Rose <krose@krose.org> wrote:
> 
>> On Fri, Jul 29, 2016 at 8:18 AM, Eliot Lear <lear@cisco.com> wrote:
>> Hi Tom,
>> 
>> Something that did not get brought up at the BOF is nagging at me...
>> 
>> 
>> On 7/28/16 8:17 PM, Tom Herbert wrote:
>> > The abstraction is only useful up to the point that networks preserve
>> > the model. If the network breaks the model in ad hoc ways that forces
>> > the application to try to compensate with more ad hoc mechanisms or
>> > just stop innovating altogether as we see happened with protocol
>> > ossification.
>> 
>> You write that as if it's a bad thing ;-)
>> 
>> Some amount of protocol ossification is a GOOD thing.  In particular,
>> the calling interface for transports needs to be stable or source code
>> will have no shelf life.  The fact that TCP's calling interface has been
>> SO stable for SO long has meant that a large code base did not require
>> substantial maintenance just to keep doing the same thing it was
>> doing.   I see this as an exercise to determine what needs ossification
>> and what does not, and there are extreme positions at both ends.
> 
> I think this conflates two issues. I think of "ossification" as unintended structure that precludes development within the protocol stack, something I think is broadly accepted as a problem by people who are trying to improve the experience of users. What you are talking about here seems to be stability of the API for a specific protocol. Frankly, if we apply "ossification" to that then the term becomes overly broad and therefore meaningless. I don't think anyone is suggesting that all APIs should be randomly perturbed over time just to see what happens.

Some of it is stability of the API, some of it is the stability of the what i'll call the "wire image": what the headers and behaviors look like to an on-path device.

I agree with Eliot that what we're trying to do here is re-ossify the wire image *on purpose*, given the things we've learned since the 1980s from the less intentional ossification that's happened since then. There is a careful line to draw when doing this. It should be generic enough that all the transport innovation we think we might want to do between now and 2040 fits inside it. It should be restrictive enough that it presents an improvement on the present state of the world with respect to the types of shenanigans described in https://tools.ietf.org/html/draft-trammell-privsec-defeating-tcpip-meta-00. But if it's too restrictive, people will just find other ways to implement the kinds of in-network functions they want to: cf. using the QUIC version number as a QUIC magic number, for instance.

> No one is going to break the sockets API anytime soon

*ahem* https://www.ietf.org/proceedings/96/slides/slides-96-taps-2.pdf *cough* -- I'm not saying we're going to be successful in breaking it, but it *is* the other half of the problem we have today.

Cheers,

Brian

> but having to develop a new API for modern protocols would be a nice problem to have. First, though, we need to figure out how to route those protocols through the boxes that right now assume the entire internet runs over a snapshot of TCP from 20 years ago.
> 
> Kyle
> _______________________________________________
> Spud mailing list
> Spud@ietf.org
> https://www.ietf.org/mailman/listinfo/spud