IETF Logo Mail Archive

Re: [TLS] WGLC for draft-ietf-tls-ticketrequests

Rob Sayre <sayrer@gmail.com> Thu, 21 November 2019 06:18 UTC

Return-Path: <sayrer@gmail.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB00D1200FB for <tls@ietfa.amsl.com>; Wed, 20 Nov 2019 22:18:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.997
X-Spam-Level:
X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vGT0VyKlicfi for <tls@ietfa.amsl.com>; Wed, 20 Nov 2019 22:18:40 -0800 (PST)
Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 761D112006F for <tls@ietf.org>; Wed, 20 Nov 2019 22:18:40 -0800 (PST)
Received: by mail-io1-xd36.google.com with SMTP id k1so2080569ioj.6 for <tls@ietf.org>; Wed, 20 Nov 2019 22:18:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=FEvQa1C+SB0A1Bo832QxYNhCEr64wXLP4ffeUYw4J7I=; b=AYuDkXtjTBmerFPJUPy2IWE8cou3RWFxiBNVQB3nfB4v5ftAEvr+MIqinXUSJhwRr5 lgzCwH+Y/SefiwFAyRDT69yYbHshL2VZRPddiSB29gK7UNqYcseceWPBsyUM/aVAmOMP cE5t4rBCM83v7/suQfVs31Ip4jjZE34MObNaVGOPGjo5BwZ4drsDk9yAAAwNcwS0rSRY RomAADAnVM8v8TGuEk9yfb9nJt/8Mxt1x6genH8r2BrOF7sXuzOMkhN2ZCWzznNMu4t+ CqJhE6cvI7fKjH2ZDL9fSTZrob5RL8S1AnLitUoYskVG1OXZWvDUMZf+M+jvFz4rFCk0 VMbg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=FEvQa1C+SB0A1Bo832QxYNhCEr64wXLP4ffeUYw4J7I=; b=g0dyfHqp8jkwZ8AxX74QMcqkQS8Je0r1fYCg6DmB/FVJPNzlQyUJSzxMcDElEYA9Xy CUYhILGXhb9yxnIDO2uepcAPvY7NJTAbGTHXQiYBV0qaNlcDrNoklr1lAgQeG6EuHaIo /AIWIVmbiHCYPiUVokm60NAGOszj29C4+A3pMDU9dmiCKLu6EygMZKrJH54Ev442EVoG bFKktenIjZFjel4Wca92fx/BHSXt8eWxP8QWpYdz8SzqVp3dcbv+kOz/dS9ZVqB+RRsr vBjQZZl8azrKXrKTufj4/9OKhrnp0tAVFJfw5637XgJGNiqjGKF/Af8PEN1l6YVQajK6 YqmA==
X-Gm-Message-State: APjAAAVeKD62XYHcTa2sjKx0w7fYG4AuDxCnnYdEgErNbhBSV28YVkLs 0xB3HBlLcouSF/nMmYfeT2o/1UYeMupcc0oESUE=
X-Google-Smtp-Source: APXvYqwRrlWKiYHMPrV4cRiCa5tGqqdWldAf1ZT3BQjIzYmi0UhZE5wjSaZ+Tex8M8il5hVLaSX6uUVv2ea065ONHWM=
X-Received: by 2002:a6b:ec08:: with SMTP id c8mr1355203ioh.257.1574317119537; Wed, 20 Nov 2019 22:18:39 -0800 (PST)
MIME-Version: 1.0
References: <20191116103855.GQ20609@akamai.com> <20191116110425.GR34850@straasha.imrryr.org> <556d2210-4af7-b398-fbd7-eab2685d7c62@wizmail.org> <20191116210617.GS34850@straasha.imrryr.org> <20191116235952.GR20609@akamai.com> <20191117002249.GV34850@straasha.imrryr.org> <CADZyTkmaUVj=sFdgg93MuM2au0B=1M1k3yCA1XDoaAneVDmnNw@mail.gmail.com> <14690874-E301-4BC0-B385-00DEBCBA94C2@apple.com> <20191120034812.GQ34850@straasha.imrryr.org> <5FBFE820-8C53-4B32-9520-343279C1A6CC@apple.com> <20191120064819.GR34850@straasha.imrryr.org> <CAPDSy+6DFJ+OYRtYK6eEiUt1noiik4KxqrGFx0ro_RL2Mft_VA@mail.gmail.com> <67c2ed4f-ce87-4d63-87bf-c38a36c8fb70@www.fastmail.com> <CAPDSy+4NQeVpmawRAOnC=whQ6S25Lc7GZMT2syTStqEt8a7XRQ@mail.gmail.com>
In-Reply-To: <CAPDSy+4NQeVpmawRAOnC=whQ6S25Lc7GZMT2syTStqEt8a7XRQ@mail.gmail.com>
From: Rob Sayre <sayrer@gmail.com>
Date: Wed, 20 Nov 2019 22:18:26 -0800
Message-ID: <CAChr6SxooRW-8hdp-JtjLVNy1jq3SDK+PK0Y=4qYyVVa_nOOTw@mail.gmail.com>
To: David Schinazi <dschinazi.ietf@gmail.com>
Cc: Martin Thomson <mt@lowentropy.net>, "TLS@ietf.org" <tls@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000ac87590597d54487"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Rpr0t4TWRmPRRD0vD5QzWLypEaw>
Subject: Re: [TLS] WGLC for draft-ietf-tls-ticketrequests
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 06:18:43 -0000

So, the current PR says:

"Clients can use TicketRequestContents.count to indicate the number of
tickets they would prefer to receive. Servers SHOULD NOT send more tickets
than TicketRequestContents.count, as clients will most likely discard any
additional tickets. Servers SHOULD additionally place a limit on the number
of tickets they are willing to send to save resources. Therefore, the
number of NewSessionTicket messages sent will be the minimum of the
server's self-imposed limit and TicketRequestContents.count."

I would suggest two edits to this text:

1: The second sentence can read: "If servers send more tickets than
TicketRequestContents.count, clients will likely discard excess tickets.".
This avoids a "SHOULD NOT" that should be a "MAY" or unmentioned.

2: The third sentence is implementation advice, not an interoperability
requirement: "Servers SHOULD additionally place a limit on the number of
tickets they are willing to send to save resources." I think this sentence
should be struck, or rewritten in non-2119 English. If the editors wish to
keep the text, I think there should be a comma after "send".

These proposed edits make sense to me, because servers can't know if their
tickets will be used successfully (network problems, unreliable clients,
etc).

thanks,
Rob


On Wed, Nov 20, 2019 at 9:45 PM David Schinazi <dschinazi.ietf@gmail.com>
wrote:

> Thanks. I've updated the PR to take MT's suggestion s/SHOULD/will/.
>
> David
>
> On Thu, Nov 21, 2019 at 1:38 PM Martin Thomson <mt@lowentropy.net> wrote:
>
>> On Thu, Nov 21, 2019, at 11:19, David Schinazi wrote:
>> >  resources. Therefore, the number of NewSessionTicket messages sent
>> >  SHOULD be the minimum of the server's self-imposed limit and
>> >  TicketRequestContents.count.
>>
>> Thanks for doing this David.
>>
>> Friendly amendment: remove the SHOULD from this sentence (it's a
>> consequence of the two other "SHOULD"s):
>>
>> Therefore, the number of NewSessionTicket messages sent will be the
>> minimum [...]
>>
>> _______________________________________________
>> TLS mailing list
>> TLS@ietf.org
>> https://www.ietf.org/mailman/listinfo/tls
>>
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>

v2.23.0 | Report a Bug | By Email