Re: [tcpm] Flaw in RFC793 (Fwd: New Version Notification for draft-gont-tcpm-tcp-seq-validation-03.txt)

Wesley Eddy <wes@mti-systems.com> Wed, 07 March 2018 03:18 UTC

Return-Path: <wes@mti-systems.com>
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97A9B126B72 for <tcpm@ietfa.amsl.com>; Tue, 6 Mar 2018 19:18:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mti-systems-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2vY43LQPJ2Kn for <tcpm@ietfa.amsl.com>; Tue, 6 Mar 2018 19:18:01 -0800 (PST)
Received: from mail-pg0-x234.google.com (mail-pg0-x234.google.com [IPv6:2607:f8b0:400e:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30A92124BE8 for <tcpm@ietf.org>; Tue, 6 Mar 2018 19:18:01 -0800 (PST)
Received: by mail-pg0-x234.google.com with SMTP id l131so393786pga.2 for <tcpm@ietf.org>; Tue, 06 Mar 2018 19:18:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mti-systems-com.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=dv3uw6/e3PnizsFfasrT7ZyiKPgqLOXP10L+xrrBBPo=; b=GbzkG26FQDVvr9YV3WDHysr7hcqchvCXCpn7kdiKmdXhb5MqiMb/++H7YExd0AKI3+ jfdWzyinV0UJTbQhGyOAplz6mtagBzegHrzVXVgVkG6cQdpe7C2OkJ2cW5n5cusZsg5n Reu3heHA01D13yo64qomG5Sf7fd0PlFH4V1K1PARqVo9YHs/HmLwWDaBWwuwv8o/AI8y 8xJu1VOwaTRkW6Agntus41c0Hf649hSlfK7ok0Z6pci2NoEdM9nFU8BUHlPr5D4tVDfL nGInbQT32Mv9uKpg1lNrcVoZpFUwohY+Cz/wgNTD86NmSNkcwg4WeHqHdMjWZMxAFzU5 Av7w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=dv3uw6/e3PnizsFfasrT7ZyiKPgqLOXP10L+xrrBBPo=; b=l6UgBrKyfPIglBdrCjuoDkDKTHHkLQmrOfXx50urZ48yB+vlssOa/pP14nqYwvLIY9 YfuyNhTUmERFMHj6QpidvhnCuKfagWd7AXd7rOm5cOZCSnzU2t62iS6Pj7ShHdfOuhvq km+cH68eVlg6abQel5rew+lDCCtH3euGDBGQQ24DZ0dY13ZIHP1WtStq9QlXLb5lFIGS zxz7AHtUBLKecmSjDcqRekUlvXiSUCjGr40XUtG3tywZ2K1U2oMftOWOfsPB9Cey/0yj jI9ZUCwsne9zznqPn0SEG3tF7NwaW01W2C6tjdgksjeEi5iixP5ErtUOSwhWBjmzUtg5 +iEg==
X-Gm-Message-State: APf1xPCtPoyBQpDh9GgnULCiBnEkyEjIimJW6/h86Jr6QwwDbEYKrRmo Vy2znLhzvppbQMBH6rlYxaP/GHRs3T4=
X-Google-Smtp-Source: AG47ELuXVEZIw8GGFJZBpxOm45A8MBVFIL6co5KEFoeiJjU6Zzs6zHMLXDqxQz6DpYSCSukkAE5vaA==
X-Received: by 10.98.155.93 with SMTP id r90mr21213523pfd.132.1520392680489; Tue, 06 Mar 2018 19:18:00 -0800 (PST)
Received: from [172.20.15.100] ([65.154.215.98]) by smtp.gmail.com with ESMTPSA id i2sm26699879pgp.88.2018.03.06.19.17.59 for <tcpm@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 06 Mar 2018 19:18:00 -0800 (PST)
To: tcpm@ietf.org
References: <152029339529.12825.5038413838558267392.idtracker@ietfa.amsl.com> <3edad22d-d6ed-31ea-cfc8-26b04b10de3e@si6networks.com> <E327115A-F8BC-4954-9635-76427199D295@netapp.com> <CAO249ycn-pv_TCpJEcpuV85RJ9eUqzzF7b6Hhx6S7s-CqwpKsQ@mail.gmail.com>
From: Wesley Eddy <wes@mti-systems.com>
Message-ID: <7ef9427f-3f12-9dd1-3d86-1135ce28c9cf@mti-systems.com>
Date: Tue, 06 Mar 2018 22:17:57 -0500
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version: 1.0
In-Reply-To: <CAO249ycn-pv_TCpJEcpuV85RJ9eUqzzF7b6Hhx6S7s-CqwpKsQ@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------36981A4D800623AE68C42EE9"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpm/I04Wmu1VRa7A1zv_Vj_L5bwy3P4>
Subject: Re: [tcpm] Flaw in RFC793 (Fwd: New Version Notification for draft-gont-tcpm-tcp-seq-validation-03.txt)
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpm/>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Mar 2018 03:18:02 -0000

On 3/6/2018 4:53 PM, Yoshifumi Nishida wrote:
> Hello,
>
> On Tue, Mar 6, 2018 at 11:05 AM, Eggert, Lars <lars@netapp.com 
> <mailto:lars@netapp.com>> wrote:
>
>     Hi,
>
>     isn't this something that could simply go into 793bis, after there
>     is consensus that something needs to be fixed?
>
>
> I think the observation of the bug can go into 793bis (which has been 
> done in the current version).
> However, I think the solution for it needs to be reviewed and discussed.
>


FYI - there is a paragraph on the issue in Appendix A of the current 
revision, which was added after discussion around the Chicago meeting 
(IIRC).  I think if no solution is blessed by the working group, that 
this warning about a "known bug" would be the best we can do in 793bis, 
but is certainly far less desirable than having an actual solution in 
the body of the document.  To work that solution out, discuss the 
options, etc., I'm in favor of advancing it via the draft Fernando and 
David have put together.  They already briefly discuss the Linux 
approach, for instance.


> It will be really great if some implementers speak up if the solution 
> in the draft looks good or they take different approach to address the 
> issue.

Agreed; feedback is useful, though I do think this bug is evident and we 
at least can see what has evidently been done about it already in open 
source stacks, as examples.