Re: [tcpm] [Editorial Errata Reported] RFC5925 (5347)

Joe Touch <touch@strayalpha.com> Fri, 04 May 2018 01:54 UTC

Return-Path: <touch@strayalpha.com>
X-Original-To: tcpm@ietfa.amsl.com
Delivered-To: tcpm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49AC812D941 for <tcpm@ietfa.amsl.com>; Thu, 3 May 2018 18:54:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.99
X-Spam-Level:
X-Spam-Status: No, score=-1.99 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4E3G_p1qTdFu for <tcpm@ietfa.amsl.com>; Thu, 3 May 2018 18:54:24 -0700 (PDT)
Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF89812D889 for <tcpm@ietf.org>; Thu, 3 May 2018 18:54:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:References:Cc:To:Subject:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=69YLep+HGxPpTprPAq6j943JeXWGxv3GF+orUmb3ysg=; b=ncE7axvojGsV7ZA+bPKfMm7Opg 4fc/VHb3QeeqwzpNC3N+YVNJXFFXWd4/lq2s2zFRN0C3DAPNGiDwylsbUfRmOs1wvabJS3NVrPyRi TyF4lVVxCVp2dhJ8nvQDZpJefJ9bT3BQXW6LWbvrxmQjBriZR1Ql7k2bB4S439ixFLrimfnnnmaW8 Yig2eiMymDgFYvZCzfErZIyCFo+H/G53rqD8w464kdoO8p9oyS2v4DRw5KOvakaMcGkQiJbp6cAMm +ysTvZDwNuIpYcw1BHhWMOtl6CSbXXsk6BSx1eUrrpZtCJ64e2Hd8WAZZGNn36FjM5hOYqCP/du+d I8wuHF0A==;
Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:50952 helo=[192.168.1.189]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89_1) (envelope-from <touch@strayalpha.com>) id 1fEPvP-003Slu-QV; Thu, 03 May 2018 21:54:20 -0400
To: Ignacio Goyret <ignacio.goyret@nokia.com>
Cc: RFC Errata System <rfc-editor@rfc-editor.org>, touch@isi.edu, mankin@psg.com, rbonica@juniper.net, spencerdawkins.ietf@gmail.com, ietf@kuehlewind.net, michael.scharf@nokia.com, tuexen@fh-muenster.de, nishida@sfc.wide.ad.jp, tcpm@ietf.org
References: <20180503203252.D2005B82AA4@rfc-editor.org> <fcbc3182691fb2d763d4966b79a48591@strayalpha.com> <201805040027.w440R3ji011041@cliff.eng.ascend.com>
From: Joe Touch <touch@strayalpha.com>
Message-ID: <f210b12a-ca8d-4323-05b2-193cceb88669@strayalpha.com>
Date: Thu, 03 May 2018 18:54:17 -0700
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0
MIME-Version: 1.0
In-Reply-To: <201805040027.w440R3ji011041@cliff.eng.ascend.com>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Language: en-US
X-OutGoing-Spam-Status: No, score=-0.2
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server217.web-hosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - strayalpha.com
X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com
X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Archived-At: <https://mailarchive.ietf.org/arch/msg/tcpm/ubpyM33R8pLqIO_OsrFsROPtjiQ>
X-Mailman-Approved-At: Fri, 04 May 2018 08:10:16 -0700
Subject: Re: [tcpm] [Editorial Errata Reported] RFC5925 (5347)
X-BeenThere: tcpm@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: TCP Maintenance and Minor Extensions Working Group <tcpm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tcpm>, <mailto:tcpm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tcpm/>
List-Post: <mailto:tcpm@ietf.org>
List-Help: <mailto:tcpm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tcpm>, <mailto:tcpm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 May 2018 01:54:27 -0000


On 5/3/2018 5:20 PM, Ignacio Goyret wrote:
> The reason for the errata is because it happened: someone read
> that text and interpreted that the tcp checksum would only need
> to be cleared when only the TCP-AO option was included because the
> text stated "when included, only the TCP-AO MAC field is zeroed".
> Your suggested text addition does not address this incorrect
> interpretation.
It actually does directly, with this phrase: "within those options".

> I also encountered someone that insisted that when only the TCP-AO
> option was included, that it was only the option data, not its header.
That is already addressed in the existing text directly here:

  "When TCP options are not included, all TCP options except for TCP-
  AO are omitted from MAC processing."


> That's why a reference to section 2.2 sounds reasonable to me.
Adding the reference might be useful, but should not be strictly
necessary to interpret the existing text.

> IMO, this is *exactly* the reason for an "editorial" errata.
> Technical details are not altered, just language clarifications
> to promote interoperability. I am not suggesting rewriting this or
> any other RFC.
There are many RFCs that have been misinterpreted. That doesn't always
warrant suggested alternate text.

Joe

>
> -Ignacio
>
>
> At 14:38 5/3/2018, Joe Touch wrote:
>
>> I do not agree that this is suggested text represents a clarification.
>>
>> At best, only the one sentence warrants clarification:
>>
>> From: When included, only the TCP-AO MAC field is zeroed.
>>
>> To: When TCP options are included, within those options only the TCP-AO MAC field is zeroed.
>>
>>
>> However, that context is implicit in the existing text. Yes, we could completely rewrite every RFC to be more clear, but that is not the purpose of errata nor is it productive, IMO.
>>
>> Joe
>>
>> On 2018-05-03 16:32, RFC Errata System wrote:
>>> The following errata report has been submitted for RFC5925,
>>> "The TCP Authentication Option".
>>>
>>> --------------------------------------
>>> You may review the report below and at:
>>> <http://www.rfc-editor.org/errata/eid5347>http://www.rfc-editor.org/errata/eid5347
>>>
>>> --------------------------------------
>>> Type: Editorial
>>> Reported by: Ignacio Goyret <<mailto:ignacio.goyret@nokia.com>ignacio.goyret@nokia.com>
>>>
>>> Section: 5.1
>>>
>>> Original Text
>>> -------------
>>> 3. The TCP header, by default including options, and where the TCP
>>>   checksum and TCP-AO MAC fields are set to zero, all in network-
>>>   byte order.
>>>
>>>   The TCP option flag of the MKT indicates whether the TCP options
>>>   are included in the MAC.  When included, only the TCP-AO MAC field
>>>   is zeroed.
>>>
>>>   When TCP options are not included, all TCP options except for TCP-
>>>   AO are omitted from MAC processing.  Again, the TCP-AO MAC field
>>>   is zeroed for the MAC processing.
>>>
>>>
>>> Corrected Text
>>> --------------
>>> 3. The TCP header and TCP options, where the TCP checksum and TCP-AO
>>>   MAC fields are always set to zero, all in network-byte order.
>>>
>>>   The TCP option flag of the MKT indicates which TCP options are
>>>   included in the MAC. When TCP options are not included, only the
>>>   TCP option for TCP-AO (as described in Section 2.2) is included
>>>   in the MAC. Otherwise, all the TCP options are included in the MAC.
>>>
>>>
>>> Notes
>>> -----
>>> Rewording for clarity and simplification.
>>> The original text could lead to confusion re '...When included, only the TCP-AO MAC field is zeroed.'
>>>
>>> Instructions:
>>> -------------
>>> This erratum is currently posted as "Reported". If necessary, please
>>> use "Reply All" to discuss whether it should be verified or
>>> rejected. When a decision is reached, the verifying party  
>>> can log in to change the status and edit the report, if necessary. 
>>>
>>> --------------------------------------
>>> RFC5925 (draft-ietf-tcpm-tcp-auth-opt-11)
>>> --------------------------------------
>>> Title               : The TCP Authentication Option
>>> Publication Date    : June 2010
>>> Author(s)           : J. Touch, A. Mankin, R. Bonica
>>> Category            : PROPOSED STANDARD
>>> Source              : TCP Maintenance and Minor Extensions
>>> Area                : Transport
>>> Stream              : IETF
>>> Verifying Party     : IESG