Re: [stir] quoted ppt parameter value redux

Chris Wendt <chris-ietf@chriswendt.net> Thu, 03 October 2019 20:20 UTC

Return-Path: <chris-ietf@chriswendt.net>
X-Original-To: stir@ietfa.amsl.com
Delivered-To: stir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 533D212025D for <stir@ietfa.amsl.com>; Thu, 3 Oct 2019 13:20:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=chriswendt-net.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jnPQlYhVE9Ce for <stir@ietfa.amsl.com>; Thu, 3 Oct 2019 13:20:00 -0700 (PDT)
Received: from mail-qt1-x833.google.com (mail-qt1-x833.google.com [IPv6:2607:f8b0:4864:20::833]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB4FA1200B7 for <stir@ietf.org>; Thu, 3 Oct 2019 13:19:59 -0700 (PDT)
Received: by mail-qt1-x833.google.com with SMTP id c3so5412943qtv.10 for <stir@ietf.org>; Thu, 03 Oct 2019 13:19:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chriswendt-net.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=uJOc1ehjKmdxwXxE3+plX0Z5GDFHQ/TeZqK/dm4CnTw=; b=xclK/bqfBPu12lKzMIRXGMNk3b5d8KxyDmib1k78tBoxm/1z8gszvjr2Ptv9QXrOzw IH2LSD/dE7oeBOCqBdfjLHATVUcYFYczS9vfH5NGuoeGf0NWr4Pc+PmMdU7Y8AcNGHoG fWrCbvqSPuE0UFAIpJE5Lgb5/JICTdE8mmqmXrr7xSgz81aUV96DYGR6H4wur1VppgBS 2tQqcQ2W/FNx25WOU/E4dmwVR6leibwxlX8tRcBTnT35SfpbyExlqvaXaVw5su+FFaDp MaQ1ln1uJrw/m+BZRqZOVODeLN2AM5630wcwqHEbVo5lE+5I/dPiwQ97vdgskILBoosf 0F3A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=uJOc1ehjKmdxwXxE3+plX0Z5GDFHQ/TeZqK/dm4CnTw=; b=QXuXr7mLvr3c0aCGOpZcoYd9nyFiuzNrke56GBv1MiXWMhUdMushMhKTRav/WcEPwJ MBn/QNumkMCF9t4LdT7/aJb/LzaNHhG6irBKWCmufXCY/Sk8Ejoy5c15qB8jrdoj2oNt SKFQA5x1/hFOH+u8EGfORgU9pdltBO8ESP5PUlaUk2Z8TOtrnCheeYzeOa1JbKJD/ZfU F77mnJlLZVhJNe/ew1oo5Sonn4coEa9akyEGVl2Ag9FyeF2vBl9vXbZohQUyRbbrqGyd l27g/FrhzimbbtkeSf00dU6uR0kXmHTKEQuUbDmZE0XSiO9BiTSPi0aC71dGx+eEv2H1 7zRQ==
X-Gm-Message-State: APjAAAUcEotBfm3rysHo7THxeTx4a3eoH5uP+/WRMgDMyj3jpLlcmbvT 0J+C3ATemp1oQuX5Q5J1I3sr9w==
X-Google-Smtp-Source: APXvYqxwVIxiRFaxqa0Sqn7hiCO24RUq6jd40J93fpHS6ImgcD55ALZhNq0HD3uFy8rcI0JDWLfE9A==
X-Received: by 2002:a05:6214:1549:: with SMTP id t9mr10698535qvw.68.1570133998996; Thu, 03 Oct 2019 13:19:58 -0700 (PDT)
Received: from ?IPv6:2601:41:c402:39e0:350f:d864:d005:c51e? ([2601:41:c402:39e0:350f:d864:d005:c51e]) by smtp.gmail.com with ESMTPSA id b22sm1924238qkc.58.2019.10.03.13.19.57 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 03 Oct 2019 13:19:58 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: Chris Wendt <chris-ietf@chriswendt.net>
In-Reply-To: <79880B31-1AAC-45FD-A60D-CBFF01B584AE@team.neustar>
Date: Thu, 03 Oct 2019 16:19:57 -0400
Cc: "stir@ietf.org" <stir@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <9650A5C9-723A-4E9E-84FF-88A7CE087A37@chriswendt.net>
References: <79880B31-1AAC-45FD-A60D-CBFF01B584AE@team.neustar>
To: "Peterson, Jon" <jon.peterson@team.neustar>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/stir/ntUe783SWvQpKs3k4YD0LhvASIw>
Subject: Re: [stir] quoted ppt parameter value redux
X-BeenThere: stir@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Secure Telephone Identity Revisited <stir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stir>, <mailto:stir-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/stir/>
List-Post: <mailto:stir@ietf.org>
List-Help: <mailto:stir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stir>, <mailto:stir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Oct 2019 20:20:03 -0000

Yes, i think we should stick with that decision, if other parameters are quoted, it only makes sense ppt should be as well.

Let’s do an errata on this.

-Chris

> On Oct 3, 2019, at 1:27 PM, Peterson, Jon <jon.peterson@team.neustar> wrote:
> 
> 
> RFC8224 section 4.1 gives the following guidance about the syntax for PASSporT Types:
> 
>      Fourth, if a PASSporT extension is in use, then the optional JSON
>      key "ppt" MUST be present and have a value equivalent to the
>      quoted value of the "ppt" parameter of the Identity header field.
> 
> Does that imply that the values of the "ppt" parameter in the Identity header field are quoted? If so, that seems to create a conflict with the ABNF for the Identity header field, which gives "token" as the type for "ppt" parameter values.  Back in IETF 101, as we were pushing along the first PASSporT types as extensions to STIR, "div" and "rph", we had a discussion about whether the values of the "ppt" parameter of the Identity header should be quoted or unquoted. As we said at the time, it isn't really important whether ppt parameter values are quoted or not from a design perspective, but It is important that we all just agree on it one way or another. The outcome of that discussion was reflected in the minutes as:
> 
>   ISSUE: Should ppt values be quoted or not?
>   OUTCOME: Quoting is mandatory.
> 
> Based on that outcome, we baked quoted ppts into the resulting docs (see RFC8443 4.1 for an example with ppt="rph" rather than ppt=rph). However, as STIR implementation ramps up, we are hearing a number of reports of AS's using unquoted ppt parameter values, and it sounds like many VS implementations are resigned to accepting both - but that some implementations are only accepting unquoted.
> 
> We have the opportunity to errata RFC8224 to set this matter straight, but it seems the implementation community still doesn't agree on what should count as straight. Unquoted saves two octets, but let's be honest, saving two octets of a STIR Identity header field value, especially one with a PASSporT extension, is not going to let anyone fall back to UDP. Quoted conforms with what's in RFCs we've already shipped, and ones in the pipeline. I hate to re-open a discussion we had already, but it does seem to be necessary. If we’re going to errata this, should the fix conform to the IETF 101 consensus call ("quoting is mandatory") or not?
> 
> Jon Peterson
> Neustar, Inc.
> 
> _______________________________________________
> stir mailing list
> stir@ietf.org
> https://www.ietf.org/mailman/listinfo/stir