Re: [stir] Eric Rescorla's Discuss on draft-ietf-stir-certificates-16: (with DISCUSS)

Sean Turner <sean@sn3rd.com> Wed, 13 December 2017 16:36 UTC

Return-Path: <sean@sn3rd.com>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA8FD12895E for <stir@ietfa.amsl.com>; Wed, 13 Dec 2017 08:36:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=sn3rd.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5vfW26jQV-0F for <stir@ietfa.amsl.com>; Wed, 13 Dec 2017 08:36:54 -0800 (PST)
Received: from mail-qt0-x22e.google.com (mail-qt0-x22e.google.com [IPv6:2607:f8b0:400d:c0d::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37993127871 for <stir@ietf.org>; Wed, 13 Dec 2017 08:36:53 -0800 (PST)
Received: by mail-qt0-x22e.google.com with SMTP id i40so4387950qti.8 for <stir@ietf.org>; Wed, 13 Dec 2017 08:36:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sn3rd.com; s=google; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=0hfWvVwyvPTAwk7Ek3q0REiNn23ZB5ZlwsFBERXva6Y=; b=PgiNMYGEPxO8BexApetMSvfuw2if8Fjmr504ad73Evn3H1u4ZGOS8cYpo5JgVocCHU ljIYWhHF0mgSXRAiBLM7DOawK496/Koa5tdxw0e1JnN5FmA7oZ0F8EIXwF8HH0Tdj0ZZ vnLLw59fI7Ud1x81Pws39F8ryxZgJbAqk3u9w=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=0hfWvVwyvPTAwk7Ek3q0REiNn23ZB5ZlwsFBERXva6Y=; b=XYM4tubVFWFaErB1LX9dRdLEP7JX7RGOemAc0FCZA9g/3VY5SXgW6Iy/t2D8h6MhaY HtU2Kp6LNcsLfA3znVMJKLZPGjuGav628X7hgCcVfmf4sNBQ0DYaoF/SN+TfMiNJz3Qn oDwYQ0PwryyUbMto1C+QC/txZyqU9bicKq/2MR6/UXg5ZDmu/1xmhsbEDp4Fhnoc7AiH dMlBGUJNNbcK6fuOO9yhGz18WhVM8TnMcc/DH3hy98hyyspSDKIn0mzxoW3RuDgXJJZC 3S4Ax7O7A+N8hSKnyU1LTJuJHYM/QkZXa5TLp5DUddBJWOjnekO7g9P/3m/M4IdAoQVl xZqA==
X-Gm-Message-State: AKGB3mK86SQk4F3+rAuMS1jgYm9BVntduxb2n0tRsVj2TxG8sOAneR/H F9kpNdQEpugsOxnlh9Gh52E3JA==
X-Google-Smtp-Source: ACJfBovM5+EU+d562Eonoh20RU8DP+2LXeM/lT5tQAgK2NFqEslknyBpqv3tR3vEGyn1Ip4vU35zSQ==
X-Received: by 10.200.41.249 with SMTP id 54mr12074437qtt.312.1513183012329; Wed, 13 Dec 2017 08:36:52 -0800 (PST)
Received: from [172.16.0.18] ([96.231.220.27]) by smtp.gmail.com with ESMTPSA id d205sm1218371qke.21.2017.12.13.08.36.51 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 13 Dec 2017 08:36:51 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
From: Sean Turner <sean@sn3rd.com>
In-Reply-To: <1e300ca0-f9fd-0079-ea1f-851fe30283cd@nostrum.com>
Date: Wed, 13 Dec 2017 11:36:50 -0500
Cc: The IESG <iesg@ietf.org>, draft-ietf-stir-certificates@ietf.org, stir-chairs@ietf.org, IETF STIR Mail List <stir@ietf.org>, Robert Sparks <rjsparks@nostrum.com>
Content-Transfer-Encoding: quoted-printable
Message-Id: <DB52F922-FAEF-4DBE-8A8B-F0F6EB009CB1@sn3rd.com>
References: <151312309254.29995.11111198641956884169.idtracker@ietfa.amsl.com> <1e300ca0-f9fd-0079-ea1f-851fe30283cd@nostrum.com>
To: Adam Roach <adam@nostrum.com>, Eric Rescorla <ekr@rtfm.com>
X-Mailer: Apple Mail (2.3445.5.20)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/7fp-FslfDXgROsF6h4D_6cu00OU>
Subject: Re: [stir] Eric Rescorla's Discuss on draft-ietf-stir-certificates-16: (with DISCUSS)
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 13 Dec 2017 16:36:56 -0000


> On Dec 13, 2017, at 11:24, Adam Roach <adam@nostrum.com> wrote:
> 
> On 12/12/17 17:58, Eric Rescorla wrote:
>> 
>>    national policies.  The count field is only applicable to start	
>>    fields' whose values do not include "*" or "#" (i.e., a	
>>    TelephoneNumber that does not include "*" or "#").  count never	
>>    overflows a TelephoneNumber digit boundary (i.e., a	
>>    TelephoneNumberRange with TelephoneNumber=10 with a count=91 will	
>>    address numbers 10-99).
>> 
>> This text doesn't seem very clear. When you say "never overflows a digit
>> boundary" do you mean "doesn't extend the integer to the left"? Because
>> you sure seem to be overflowing the 1s place here.
> 
> Based on the in-room conversation in Singapore, the notion here seems to be that the number does not increase in length.

Yep.

>> Is the algorithm that you are given the input TN, Count, and TN
>> consists D digits that the range is:
>> 
>>   MIN(TN + Count, 10^D - 1)
>> 
>> That would be consistent with your example here, but I don't think consistent
>> with your text. Or do you mean something else?
>> 
> 
> Your formula above matches my understanding, and I think including it in the document as the formal definition of how 'count' behaves would be the best way to address the lack of clarity you cite.

Agreed.  How about this change:

OLD:

    count never overflows a TelephoneNumber digit
    boundary (i.e., a TelephoneNumberRange with
    TelephoneNumber=10 with a count=91 will address
    numbers 10-99).

NEW:

    count never makes the number increase in length
    (i.e., a TelephoneNumberRange with TelephoneNumber=10
    with a count=91 will address numbers 10-99); formally,
    given the inputs count and TelephoneNumber of length D
    the end of the TelephoneNumberRange is:
    MIN(TelephoneNumber + count, 10^D - 1)

spt