Re: [stir] Review of: draft-ietf-stir-passport-05

Dave Crocker <dhc@dcrocker.net> Fri, 29 July 2016 21:11 UTC

Return-Path: <dhc@dcrocker.net>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC11012D89E for <stir@ietfa.amsl.com>; Fri, 29 Jul 2016 14:11:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.107
X-Spam-Level:
X-Spam-Status: No, score=-1.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LNCreoYUgIYM for <stir@ietfa.amsl.com>; Fri, 29 Jul 2016 14:11:46 -0700 (PDT)
Received: from simon.songbird.com (unknown [72.52.113.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6498112D891 for <stir@ietf.org>; Fri, 29 Jul 2016 14:11:30 -0700 (PDT)
Received: from [192.168.1.168] (76-218-8-128.lightspeed.sntcca.sbcglobal.net [76.218.8.128]) (authenticated bits=0) by simon.songbird.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id u6TLCE1C030607 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NOT); Fri, 29 Jul 2016 14:12:14 -0700
To: "Peterson, Jon" <jon.peterson@neustar.biz>
References: <07e0eb16-6758-cdf1-c571-1f1ed768e741@dcrocker.net> <D3C152B2.1A69BA%jon.peterson@neustar.biz> <b096b541-c8af-9617-c9d7-5a1beb5230e8@dcrocker.net> <D3C16040.1A6A09%jon.peterson@neustar.biz>
From: Dave Crocker <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
Message-ID: <d66d91f0-9ea2-6295-e749-e48ea37b4892@dcrocker.net>
Date: Fri, 29 Jul 2016 14:11:22 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0
MIME-Version: 1.0
In-Reply-To: <D3C16040.1A6A09%jon.peterson@neustar.biz>
Content-Type: text/plain; charset="windows-1252"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/NPEoArb0hsgl8FWznximYvQWIMs>
Cc: IETF STIR Mail List <stir@ietf.org>
Subject: Re: [stir] Review of: draft-ietf-stir-passport-05
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: dcrocker@bbiw.net
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jul 2016 21:11:47 -0000

Jon,

On 7/29/2016 10:46 AM, Peterson, Jon wrote:
> I wouldn't say it's a correction to the STIR charter - the charter was
> always clear that it was not limited to SIP (see the bits about "one or
> more non-SIP hops" and "out-of-band mechanism" in the charter). But given
> that our original signing mechanism was, as I said, a concatenation of SIP
> header field values, the intervention was that other protocols would need
> something less bound to SIP. JWT turned out to be the solution that the
> group had consensus to adopt.

JWT has nothing to do with SIP.  So when applied to a SIP context, it's 
entirely artificial.  And yes, I noted the views that thought it simpler 
or equivalent to the computed string, but could not see the explicit 
logic that made JWT a better choice, no does it seem obvious to me. 
Quite the contrary.

Note that during the wg session in Berlin there was /still/ question 
about where to put the JWT information.


> If you want a record of this intervention, I might point you to the Oct 9
> 2015 virtual interim where this was the focus:
>
> https://www.ietf.org/mail-archive/web/stir/current/msg02140.html
>
>
> ... and then the intense list discussion that followed hard upon it.

The recording of that interim is not accessible and the very terse 
summary text of the session show nothing about an intervention.  And 
there was no mailing list activity for the next several days afterward. 
Nor do I see anything in the mailing list postings that /do/ show up 
those several days later.

So I've no idea what you meant by "hard upon it."

Hence your explanation:

      "we need to build more generically for real-time communications 
rather than just SIP."

does not seem to reflected in the wg record.


d/


-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net