Re: [TLS] draft-kinnear-tls-client-net-address comments

Jim Schaad <ietf@augustcellars.com> Wed, 20 March 2019 18:57 UTC

Return-Path: <ietf@augustcellars.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C626B130ECE for <tls@ietfa.amsl.com>; Wed, 20 Mar 2019 11:57:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xd_wdYvQNWXi for <tls@ietfa.amsl.com>; Wed, 20 Mar 2019 11:57:41 -0700 (PDT)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4FF81310FE for <tls@ietf.org>; Wed, 20 Mar 2019 11:57:37 -0700 (PDT)
Received: from Jude (62.168.35.125) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 20 Mar 2019 11:56:52 -0700
From: Jim Schaad <ietf@augustcellars.com>
To: 'Tommy Pauly' <tpauly=40apple.com@dmarc.ietf.org>
CC: tls@ietf.org
References: <6c010eff-d2cf-4438-956f-c4ec29ce97e5@www.fastmail.com> <427D0B01-B96F-46A5-B990-46FE14801BBE@apple.com>
In-Reply-To: <427D0B01-B96F-46A5-B990-46FE14801BBE@apple.com>
Date: Wed, 20 Mar 2019 19:56:49 +0100
Message-ID: <014c01d4df4e$ae8e46f0$0baad4d0$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQFpY7XBvcXVUQrKBGMR3/VQlfZEVgHp8Q4gptyGS8A=
Content-Language: en-us
X-Originating-IP: [62.168.35.125]
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/XH_2Dpbm2n2XrzoENkrZhtGJpQs>
Subject: Re: [TLS] draft-kinnear-tls-client-net-address comments
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Mar 2019 18:57:44 -0000

I have not looked at this draft yet, but what about DTLS/UDP?

Jim


> -----Original Message-----
> From: TLS <tls-bounces@ietf.org> On Behalf Of Tommy Pauly
> Sent: Wednesday, March 20, 2019 3:00 PM
> To: Martin Thomson <mt@lowentropy.net>
> Cc: tls@ietf.org
> Subject: Re: [TLS] draft-kinnear-tls-client-net-address comments
> 
> The QUIC and TLS drafts were written together, and are quite similar as
you
> note. The intention is to use the TLS extension over TLS/TCP connections,
> and the QUIC extension for QUIC/UDP.
> 
> I agree that QUIC as a protocol benefits more from the extension than TLS
> does, but applications on top of both can benefit by detecting NATs, for
> making decisions about long-lived connections and privacy mitigations.
> 
> Thanks,
> Tommy
> 
> > On Mar 20, 2019, at 2:26 AM, Martin Thomson <mt@lowentropy.net>
> wrote:
> >
> > I see a substantially similar draft in
draft-pauly-quic-address-extension.  I'd
> like to understand how these might be complementary, or whether the idea
> is to pursue only one.  The QUIC extension seems superior, if you have
QUIC.
> There are a lot more plausible reasons to want this information in QUIC
> though.
> >
> > Nits:
> >
> > The format of the extension is not ideal.  Wouldn't you want to know
which
> family it came from?
> 
> I think the intention was to use the length to infer the family.
> >
> > The term of art is reflexive address (or reflected address).
> 
> Thanks, good to know!
> >
> > _______________________________________________
> > TLS mailing list
> > TLS@ietf.org
> > https://www.ietf.org/mailman/listinfo/tls
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls