[stir] error handling 03

Chris Wendt <chris-ietf@chriswendt.net> Fri, 05 August 2022 15:42 UTC

Return-Path: <chris-ietf@chriswendt.net>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC642C147921 for <stir@ietfa.amsl.com>; Fri, 5 Aug 2022 08:42:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.906
X-Spam-Level:
X-Spam-Status: No, score=-6.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20210112.gappssmtp.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6BiouLve5y2W for <stir@ietfa.amsl.com>; Fri, 5 Aug 2022 08:42:16 -0700 (PDT)
Received: from mail-qv1-xf2e.google.com (mail-qv1-xf2e.google.com [IPv6:2607:f8b0:4864:20::f2e]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3BADEC14F740 for <stir@ietf.org>; Fri, 5 Aug 2022 08:42:16 -0700 (PDT)
Received: by mail-qv1-xf2e.google.com with SMTP id u8so2018798qvv.1 for <stir@ietf.org>; Fri, 05 Aug 2022 08:42:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20210112.gappssmtp.com; s=20210112; h=from:mime-version:subject:message-id:date:to; bh=QeiW2reLSGzvVv6sJE7TDggp5KxjiWobeSqCKGfKXVc=; b=RsJGasAUflQfcxsQ5hd1NoW4+KBhGvqXIeHoPOQAFKkS0KrXyG5s+wJN00BtVxiZP7 Mt+VdAelK3+/saw5FOeTZQznDOEqWR1FPuKJRX+hBVBhTIGxB0UIQGoEsDuhQGJVfmK5 1v3BMsL1ZqvXeh1cHYYU93UDDgR12UglQcTe+5gdcBHid8mm3VfNTdsQpwG4t1mo5VDP hPa+NDqbsjEqueJeBX09g91v0CQeZpJWZ/hUT/aSGrq9vv+8yzWb+ZqkHjYUQLY2ibEx 8Ra2SLHvvQWdreAxi4qFev9kFzCGMQwxr3Sko1g8thLJMLw/QXj7ZZ74XJcZgtdUqBXc tOcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:mime-version:subject:message-id:date:to; bh=QeiW2reLSGzvVv6sJE7TDggp5KxjiWobeSqCKGfKXVc=; b=Ll7vaqvHvKUMM8f+PCTW8zCZxHKocGuks/EcFLYE2y+lndAQvEDMdIhqeFqMndk1Uf /Q1/6sZg/0QSyETR19jevHKNRTFR8arG1+aDycikfJgjo/F0sU7rmHt6OlZOJ9Nbck/F vgRFoM5h+59dUlU9h/0W4hYTv8KWfNz9wTxQBYdLnhuu0tld6QWbgMnaYkWtjB4+Ecv3 T5Gcx9gkaJgm/uBqpjGtB93kg9RScGteAKG6iZEEuAY1i/k17y7xk9cMn3AAXOfM641E 8vkTgiAJgo6IIW2S1knoSq8Oc3tlZwVeQdUW2AtwYsYr7dF2MDOp/4SW+1/n4jwPobZh 3Gww==
X-Gm-Message-State: ACgBeo2BClls8s4N5NG9cu484S2NYiFBS7DF7IFp0Gc3i4knkbcb20Zk x2Lez9ASC/nbpMQK3JoV1EdwRjZd9JJGy7qu
X-Google-Smtp-Source: AA6agR70Nl3VikbzQCrB4rXR5jt3Se7gFx8J7rxDauV9AxOL2SzBY73pDZ9D+yTwJoOctgr33J52GQ==
X-Received: by 2002:a05:6214:400a:b0:476:10cc:f92c with SMTP id kd10-20020a056214400a00b0047610ccf92cmr6243589qvb.4.1659714135012; Fri, 05 Aug 2022 08:42:15 -0700 (PDT)
Received: from smtpclient.apple ([65.242.61.51]) by smtp.gmail.com with ESMTPSA id s16-20020a05620a255000b006af08c26774sm3185281qko.47.2022.08.05.08.42.14 for <stir@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 05 Aug 2022 08:42:14 -0700 (PDT)
From: Chris Wendt <chris-ietf@chriswendt.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_7703253C-473B-431E-BED8-3C252F2A22C2"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
Message-Id: <7916A2BD-EB30-45A5-B6DD-9AD0FE4DA762@chriswendt.net>
Date: Fri, 05 Aug 2022 11:42:15 -0400
To: IETF STIR Mail List <stir@ietf.org>
X-Mailer: Apple Mail (2.3696.120.41.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/UrpnL_50s_saeuTjk3DUmYckYEc>
Subject: [stir] error handling 03
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Aug 2022 15:42:17 -0000

Hi All,

As a follow up from the 114 stir meeting discussion, we went through both Christer’s question and Paul’s questions.  My action item from the meeting was to clarify two of Paul’s comments, specifically:

>>>>
Also, I think this draft should be more explicit in stating that the new STIR protocol it defines permits multiple uses, and perhaps constraints on how. (E.g., in what ways the multiple uses must differ, or how to resolve ambiguities among them. I *think* the response codes defined in RFC 8224 are mutually exclusive for a single passport, so perhaps constrain to a single cause per ppi.)
<<<<

>>>>
The Protocol Cause for the STIR Protocol Value is specified as "Status code". This is the same as is defined for the SIP protocol. The values used for STIR as a subset of the SIP Protocol Causes. It isn't clear what values are valid for use here. I guess you intend the values specified in section 6.2.2 of RFC 8224. But defining that way isn't future proof. What if a subsequent extension/update to RFC 8224 defines some additional codes?
<<<<

Based on discussion in the meeting, I plan to cover both of these comments with the following:

As implied and defined in {{RFC8224}}, error codes associated with STIR targeted at authentication services that produced a specific identity header represent a single error occurring with the verification and processing of that identity header. Therefore the association of a "ppi" parameter with a Reason header using "STIR" protocol MUST only identify a single cause code in the context of a call dialog defined in {{RFC8224}} or in future documents defining STIR related errors.

Would like to get some initial feedback on that, I plan to create an -03 version early next week depending on comments.

Thanks!

-Chris