Re: [TLS] Genart last call review of draft-ietf-tls-ticketrequests-06

Christopher Wood <caw@heapingbits.net> Fri, 04 December 2020 03:22 UTC

Return-Path: <caw@heapingbits.net>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5505D3A128B; Thu, 3 Dec 2020 19:22:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.12
X-Spam-Level:
X-Spam-Status: No, score=-2.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=heapingbits.net header.b=IvMX0/5F; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=Y7bGkg7N
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K98iNXqpW2mM; Thu, 3 Dec 2020 19:22:23 -0800 (PST)
Received: from wout4-smtp.messagingengine.com (wout4-smtp.messagingengine.com [64.147.123.20]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A37AE3A128A; Thu, 3 Dec 2020 19:22:23 -0800 (PST)
Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id A5A32E21; Thu, 3 Dec 2020 22:22:21 -0500 (EST)
Received: from imap4 ([10.202.2.54]) by compute4.internal (MEProxy); Thu, 03 Dec 2020 22:22:22 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=heapingbits.net; h=mime-version:message-id:in-reply-to:references:date:from:to :cc:subject:content-type; s=fm3; bh=AbB80w9boPeyWhGUZ0O7nEWai/8P sSEiiUoxTfv8M7Q=; b=IvMX0/5F67m8yDa1oaT/byrioRnQgSAIPofcG3/ZWtkG KGByfsIMSDh2XMQtij2IFAg0H9pXnCPNkqQW6uN5LBShi/kA+LUT0RFHLQShnPl2 CHp99qESE7bHlGpBl7wJY58vgq/q1wo9o9kDyeR3Mtd8wlnBc9WECY9e3O+qbqgZ 8zKs7AD8mtYiT4ix5jtBvPn6EmlV42sZOytMq4bMS3JavNx0pnhMRNWClRG1XU1R UUi+D4hjPItabQfetdw+8A5KQPLsktOGDs4fvmugL/aaXtHK3UoJqjGyfbDQM5nb Hxu06YcOpbeUet423DYTbT/ciJejAcwN4fZvhwrkRQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=AbB80w 9boPeyWhGUZ0O7nEWai/8PsSEiiUoxTfv8M7Q=; b=Y7bGkg7NFacnFiS5P6StD6 hYSPUcIiwQSZ5KYBtRqIVqTq06cKX0Eo4/CRxxZ5e08yGGWTTu5krbBRAKYiot3z TsGa9onq4U5mvBxrMxvsSnZHSUEd007z8Di/F+2/QcnGFbFSr6j0Ux5LE8NKGPzH l201tCbZCUwHW4Pj1qkZFzrsHFqREfZQq0XDdTU+3OBZeG8dsEvfhvmZqZEinNNW u7gGICOnJFDQK+Vh2ftwWJr0twMjH4GfWLN9QRLeJtJy13issVC/GHJfglw+QMLf RUuAsb66a6oZh+NJ2V1s3hjHR9B1fg13JzF3qFILmkc03/tO9Tm5Zp9NPnTXx4Og ==
X-ME-Sender: <xms:bavJX1IjKAGV3Mx2lOQNH8p6uWXedZuV49uz6dGBqSr-SNe_T551Nw> <xme:bavJXxLSYIE-7bPRquiQLJxm1ybH6Xts4gvWEBmmgOh5KkMQ7gNV_d-LWSCeZd5-e XGHN5GFic9-7yspbXs>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedujedrudeijedgheelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepofgfggfkjghffffhvffutgesthdtredtreertdenucfhrhhomhepfdevhhhr ihhsthhophhhvghrucghohhougdfuceotggrfieshhgvrghpihhnghgsihhtshdrnhgvth eqnecuggftrfgrthhtvghrnhepgfevgeegffdvueegveevgfevffeludelffegjedufffh feekgeeuudegtdevffdtnecuffhomhgrihhnpehivghtfhdrohhrghenucevlhhushhtvg hrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegtrgifsehhvggrphhinhhg sghithhsrdhnvght
X-ME-Proxy: <xmx:bavJX9v17U5iyjNjPcfA7Q5CA2TtOoXA0cIdL00_M6T3YblRzVeDjg> <xmx:bavJX2bc-zqseI2Umqv7b_nfl6N1MRBjEyy5Sq8KkUWWZVLf30FcCw> <xmx:bavJX8Y_jENUB3z5G4TAsx6WHMvmtL0URroOgBi0DkOUtTLgQ6NgfQ> <xmx:bavJX7k_Gb_IBrvg2Ri27yFlUUhvRrJIK7DnSiG7fN4b7cSfybHhMw>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 0FBA53C00A1; Thu, 3 Dec 2020 22:22:21 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.3.0-622-g4a97c0b-fm-20201115.001-g4a97c0b3
Mime-Version: 1.0
Message-Id: <f53bd799-1a13-443e-bbdb-9dc89f13aeae@www.fastmail.com>
In-Reply-To: <160653564435.9376.7782618547521054521@ietfa.amsl.com>
References: <160653564435.9376.7782618547521054521@ietfa.amsl.com>
Date: Thu, 03 Dec 2020 19:22:00 -0800
From: Christopher Wood <caw@heapingbits.net>
To: Dale Worley <worley@ariadne.com>, gen-art@ietf.org
Cc: "TLS@ietf.org" <tls@ietf.org>, last-call@ietf.org, draft-ietf-tls-ticketrequests.all@ietf.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/lm7MCF9Q09oWdMVXTHiV1NNB4mw>
Subject: Re: [TLS] Genart last call review of draft-ietf-tls-ticketrequests-06
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Dec 2020 03:22:25 -0000

Thanks for the feedback, Dale! We addressed your comments and updated the draft. The diff is available here:

   https://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-tls-ticketrequests-07.txt

Best,
Chris

On Fri, Nov 27, 2020, at 7:54 PM, Dale Worley via Datatracker wrote:
> Reviewer: Dale Worley
> Review result: Ready
> 
> I am the assigned Gen-ART reviewer for this draft. The General Area
> Review Team (Gen-ART) reviews all IETF documents being processed
> by the IESG for the IETF Chair.  Please treat these comments just
> like any other last call comments.
> 
> For more information, please see the FAQ at
> 
> <https://trac.ietf.org/trac/gen/wiki/GenArtfaq>.
> 
> Document:  draft-ietf-tls-ticketrequests-06
> Reviewer:  Dale R. Worley
> Review Date:  2020-11-27
> IETF LC End Date:  2020-12-03
> IESG Telechat date:  Not known
> 
> Summary:
> 
>     This draft is ready for publication as a Standards Track RFC.
> 
> Editorial comments:
> 
> 2.  Use Cases
> 
>    *  Parallel HTTP connections: To minimize ticket reuse while still
>       improving performance, it may be useful to use multiple, distinct
>       tickets when opening parallel connections.
> 
> To the naive reader, the ordering of the phrases doesn't seem to match
> the logical ordering of the concepts.  Perhaps
> 
>    *  Parallel HTTP connections: To improve performance, a client
>       may open parallel connections.  To avoid ticket reuse, the client
>       may use multiple, distinct tickets on each connection.
> 
> --
> 
>    *  Decline resumption: Clients can indicate they have no intention of
>       resuming connections by sending a ticket request with count of
>       zero.
> 
> "have no intention" seems to me to suggest a decision that will not
> change.  Since the future cannot be guaranteed, perhaps better wording
> is "do not intend to resume", suggesting a current state that might
> possibly change in the future.
> 
>    new_session_count  The number of tickets desired by the client when
>       the server chooses to negotiate a new connection.
> 
>    resumption_count  The number of tickets desired by the client when
>       the server is willing to resume using a ticket presented in this
>       ClientHello.
> 
> If I understand the processing which is suggested correctly, when the
> client sends a ClientHello, the server can choose to either negotiate
> a new connection, or (if a ticket is present in the ClientHello) the
> server can choose to resume the previous connection represented by the
> ticket.  These two parameters provide the requested ticket count for
> the two situations.
> 
> Assuming the above is correct, I would recommend changing the wording
> slightly, as "when" suggests a fact which is true over an extended
> period of time, whereas the provided counts are applicable in just this
> one instance:
> 
>    new_session_count  The number of tickets desired by the client if
>       the server chooses to negotiate a new connection.
> 
>    resumption_count  The number of tickets desired by the client if
>       the server chooses to resume (using the ticket presented in this
>       ClientHello).
> 
> (Change "the" to "a" in the last sentence if the ClientHello can
> present more than one ticket among which the server can choose.)
> 
> [END]
> 
> 
> 
>