Re: [stir] error handling 03

Chris Wendt <chris-ietf@chriswendt.net> Fri, 05 August 2022 18:05 UTC

Return-Path: <chris-ietf@chriswendt.net>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C959BC138FCA for <stir@ietfa.amsl.com>; Fri, 5 Aug 2022 11:05:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.904
X-Spam-Level:
X-Spam-Status: No, score=-1.904 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EW2WKZ-PNvct for <stir@ietfa.amsl.com>; Fri, 5 Aug 2022 11:05:27 -0700 (PDT)
Received: from mail-qv1-xf31.google.com (mail-qv1-xf31.google.com [IPv6:2607:f8b0:4864:20::f31]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00E80C13C502 for <stir@ietf.org>; Fri, 5 Aug 2022 11:05:26 -0700 (PDT)
Received: by mail-qv1-xf31.google.com with SMTP id i7so2264583qvr.8 for <stir@ietf.org>; Fri, 05 Aug 2022 11:05:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20210112.gappssmtp.com; s=20210112; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=5xD+2GyXqpvLD1uw1v1DlzjrxEJCb9x+G+14pw5NrPQ=; b=3WywvRwaEMWD0Q8mN+0sSBqTChyEVluNoazVMPgFf90fokx1pEXF1l8vol0DyxLPBP EwVqNt0+etmekNqZM/Uh/D146gLQv0CpvPWzVxiGreGcXMyILEwxtMp/MzIesGoiLhNG TGjgYhP0EuMQPCosWQBXr4nMZRIIMpVhwe6P4GB5MkNg8WFyEXzU1ripMCgYZ99u2vWB DN7KpqCEhYUVy3furZLc+rAxwdmMb+CMgN4ylfbp7wkKSF12Zxxc9V9vHXrYfTYxs66q 26MShBuXjnV3JJUH6a3IxOarVQlI5whHgP8WbAbkx2Y7t+gwFwp1tjbmNZvjzHl3jhSY KxMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=5xD+2GyXqpvLD1uw1v1DlzjrxEJCb9x+G+14pw5NrPQ=; b=38tpKvuYyvavlUB3RVXADHIcO4ZyYze2g4NCaVtU7w5ptZzotY4QE778ZvveF5+U21 BauESR+69vcXZBU+Y/Fx93rZ3HaLmSBa6j1RsMIPi9Q7lIxu7Y6jvv0MtYtTdUs4qI3W NkWqwrHZA0zd+SGiBoYqu2dVS13RgxF8KD+ICBh1Bk9mI3EohcwplVHS2xd9t/vYFZmE aKs0374jpqL0HN9pJ9VLrrYaVtSrMbFP5fIjb5h2IM3UT49XQWjbqT0CpW5ccuaxsW0f Sn4LzLYYDXhxXhWCedP/hy+nOZU+c2ZqBjqI9NIUfUoufV24ke1cAEL7h9WEgrtvBo1/ aGWg==
X-Gm-Message-State: ACgBeo00ZJdIWVJ8H4HbsQUVrxwZrQq7yJbQevDnaPHh7iBgTh3BTuv2 v8u/oMU38X02cfAOjeU+npA+GQ==
X-Google-Smtp-Source: AA6agR6Kf4qKRN4/+u7wv42vXJ25XRWjH68jW8iXvtG3j7EbWTwch0tPXwQp1RX/fhQpxycaDMXobQ==
X-Received: by 2002:a0c:9d01:0:b0:474:4c67:8f96 with SMTP id m1-20020a0c9d01000000b004744c678f96mr6663648qvf.32.1659722725339; Fri, 05 Aug 2022 11:05:25 -0700 (PDT)
Received: from smtpclient.apple ([2601:41:c400:1ad:b141:4fa3:28ca:4a35]) by smtp.gmail.com with ESMTPSA id z9-20020a05622a028900b003422c7ccbc5sm2785738qtw.59.2022.08.05.11.05.24 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 05 Aug 2022 11:05:24 -0700 (PDT)
From: Chris Wendt <chris-ietf@chriswendt.net>
Message-Id: <DD7C6905-20EA-4C9D-AC0E-682F7178142C@chriswendt.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_601AF60D-C116-4411-8C0E-D86E215CD196"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
Date: Fri, 05 Aug 2022 14:05:25 -0400
In-Reply-To: <5c1fcba3-5081-0e83-f3f7-631897bbfe3d@alum.mit.edu>
Cc: stir@ietf.org
To: Paul Kyzivat <pkyzivat@alum.mit.edu>
References: <7916A2BD-EB30-45A5-B6DD-9AD0FE4DA762@chriswendt.net> <5c1fcba3-5081-0e83-f3f7-631897bbfe3d@alum.mit.edu>
X-Mailer: Apple Mail (2.3696.120.41.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/8YvRq0jZ-U2jN19BjZKYo1PWdb4>
Subject: Re: [stir] error handling 03
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Aug 2022 18:05:28 -0000

Thanks Paul,  

> On Aug 5, 2022, at 12:57 PM, Paul Kyzivat <pkyzivat@alum.mit.edu> wrote:
> 
> Chris,
> 
> This text pretty much clears up my concerns.
> But I think it would also be helpful to change the "Protocol Cause" field in the registry from "Status code" to something different than for SIP and more specific to STIR. E.g. "STIR Error Code".

Yes, i like that suggestion

> 
> Also, where do you plan on inserting that paragraph? I'm guessing you intend it after the first paragraph of section 5, before the example.

yes, sorry, that is exactly where i plan to put the text.

> 
> 	Thanks,
> 	Paul
> 
> On 8/5/22 11:42 AM, Chris Wendt wrote:
>> Hi All,
>> As a follow up from the 114 stir meeting discussion, we went through both Christer’s question and Paul’s questions.  My action item from the meeting was to clarify two of Paul’s comments, specifically:
>>>>>> 
>> Also, I think this draft should be more explicit in stating that the new STIR protocol it defines permits multiple uses, and perhaps constraints on how. (E.g., in what ways the multiple uses must differ, or how to resolve ambiguities among them. I *think* the response codes defined in RFC 8224 are mutually exclusive for a single passport, so perhaps constrain to a single cause per ppi.)
>> <<<<
>> >>>>
>> The Protocol Cause for the STIR Protocol Value is specified as "Status code". This is the same as is defined for the SIP protocol. The values used for STIR as a subset of the SIP Protocol Causes. It isn't clear what values are valid for use here. I guess you intend the values specified in section 6.2.2 of RFC 8224. But defining that way isn't future proof. What if a subsequent extension/update to RFC 8224 defines some additional codes?
>> <<<<
>> Based on discussion in the meeting, I plan to cover both of these comments with the following:
>> As implied and defined in {{RFC8224}}, error codes associated with STIR targeted at authentication services that produced a specific identity header represent a single error occurring with the verification and processing of that identity header. Therefore the association of a "ppi" parameter with a Reason header using "STIR" protocol MUST only identify a single cause code in the context of a call dialog defined in {{RFC8224}} or in future documents defining STIR related errors.
>> Would like to get some initial feedback on that, I plan to create an -03 version early next week depending on comments.
>> Thanks!
>> -Chris
>> _______________________________________________
>> stir mailing list
>> stir@ietf.org
>> https://www.ietf.org/mailman/listinfo/stir
> 
> _______________________________________________
> stir mailing list
> stir@ietf.org
> https://www.ietf.org/mailman/listinfo/stir