[TLS] Mahesh Jethanandani's No Objection on draft-ietf-tls-svcb-ech-07: (with COMMENT)

Mahesh Jethanandani via Datatracker <noreply@ietf.org> Tue, 06 May 2025 16:17 UTC

Return-Path: <noreply@ietf.org>
X-Original-To: tls@ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from [10.244.8.181] (unknown [104.131.183.230]) by mail2.ietf.org (Postfix) with ESMTP id 04F3F25825EB; Tue, 6 May 2025 09:17:46 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Mahesh Jethanandani via Datatracker <noreply@ietf.org>
To: The IESG <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 12.39.2
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <174654826590.676686.17201509696918263408@dt-datatracker-58d4498dbd-6gzjf>
Date: Tue, 06 May 2025 09:17:45 -0700
Message-ID-Hash: BJUC3KSOYLPM7YGZ5JMLGNJBZDDWNJ22
X-Message-ID-Hash: BJUC3KSOYLPM7YGZ5JMLGNJBZDDWNJ22
X-MailFrom: noreply@ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-tls-svcb-ech@ietf.org, tls-chairs@ietf.org, tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Reply-To: Mahesh Jethanandani <mjethanandani@gmail.com>
Subject: [TLS] Mahesh Jethanandani's No Objection on draft-ietf-tls-svcb-ech-07: (with COMMENT)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/AhkORjlVmSxW4hWRKE8Qyh0Gj9o>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

Mahesh Jethanandani has entered the following ballot position for
draft-ietf-tls-svcb-ech-07: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-tls-svcb-ech/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

I want to thank Linda Dunbar for her OPSDIR review. In particular, she brings
up this point in her review:

>> Additionally, diagnosing ECH failures can be difficult due to the lack of
>> fallback and visibility. The draft should recommend logging and monitoring
>> strategies to help operators detect misconfigurations.

> I don't believe we have any relevant recommendations for logging or
monitoring.  Any such logging would likely not be related to the DNS records,
so those recommendations would be in draft-ietf-tls-esni or a later draft.

I can understand Linda's concern. This document in particular, talks about how
the client learns ECH configuration for the server and what its behavior should
be given the ECH configuration. Implementors will therefore be looking at this
document and not a later draft on what information should be logged. Is there
no guidance that this document can provide in that regard?