Re: [tram] Last Call: <draft-ietf-tram-alpn-06.txt> (Application Layer Protocol Negotiation (ALPN) labels for Session Traversal Utilities for NAT (STUN) Usages) to Proposed Standard

Spencer Dawkins <spencerdawkins.ietf@gmail.com> Mon, 27 October 2014 14:08 UTC

Return-Path: <spencerdawkins.ietf@gmail.com>
X-Original-To: tram@ietfa.amsl.com
Delivered-To: tram@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E16F1ACD3A for <tram@ietfa.amsl.com>; Mon, 27 Oct 2014 07:08:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.888
X-Spam-Level:
X-Spam-Status: No, score=-0.888 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_CUSTOM_MED=0.001, DKIM_SIGNED=0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NML_ADSP_CUSTOM_MED=0.9, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ltvo6ZdNphgf for <tram@ietfa.amsl.com>; Mon, 27 Oct 2014 07:08:54 -0700 (PDT)
Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA2BF1ACD36 for <tram@ietf.org>; Mon, 27 Oct 2014 07:08:34 -0700 (PDT)
Received: by mail-oi0-f43.google.com with SMTP id e131so719216oig.30 for <tram@ietf.org>; Mon, 27 Oct 2014 07:08:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type; bh=z87Ly62G1oFJqil9qA2RGycu+fwEdur5eWiGaspoZcc=; b=ohnDkf4SCrJnu2yPr21Nho2sa238mlryOYrCZ246Hmnslr4eU2mXMjIZlAbCfAFjqP +4gcdR+pD7qF7t43XnefyFEAULzQtgC0+m3zb1W1F94hkNAq2DxodRs8F0QZ5kgCv994 3LFQ80nBhcIuASKeAPkC+igM/M6+E5aFwPEFQL5b6kEX1wPL8HxpElpD5eYTEiK4iz5e eRObha1rSs56iPk8QtbQOD/TUA3iNJ42jZE6H1aCe8pLHISrZg6UT309vAL3B1/PIP+s dKP3HEln/49MRT+B9mK3AwJnuSTeqRmokihssNWGb0tvHNk8wKmLo2m9irwx+s3s5D2J 6D5A==
X-Received: by 10.182.176.40 with SMTP id cf8mr20557124obc.22.1414418914209; Mon, 27 Oct 2014 07:08:34 -0700 (PDT)
Received: from ?IPv6:2605:6000:9004:ce00:1554:d705:2681:ed08? ([2605:6000:9004:ce00:1554:d705:2681:ed08]) by mx.google.com with ESMTPSA id e73sm5103880oih.3.2014.10.27.07.08.30 for <multiple recipients> (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 27 Oct 2014 07:08:32 -0700 (PDT)
Message-ID: <544E51DC.1010908@gmail.com>
Date: Mon, 27 Oct 2014 09:08:28 -0500
From: Spencer Dawkins <spencerdawkins.ietf@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Thunderbird/31.2.0
MIME-Version: 1.0
To: "Prashanth Patil (praspati)" <praspati@cisco.com>, "agl@imperialviolet.org" <agl@imperialviolet.org>, Simon Perreault <sperreault@jive.com>
References: <D06419B6.51618%praspati@cisco.com>
In-Reply-To: <D06419B6.51618%praspati@cisco.com>
Content-Type: multipart/alternative; boundary="------------070007020005050401010009"
Archived-At: http://mailarchive.ietf.org/arch/msg/tram/GX4MY7B_SC9Uw6KwwdkrDPswoZM
Cc: "tram@ietf.org" <tram@ietf.org>
Subject: Re: [tram] Last Call: <draft-ietf-tram-alpn-06.txt> (Application Layer Protocol Negotiation (ALPN) labels for Session Traversal Utilities for NAT (STUN) Usages) to Proposed Standard
X-BeenThere: tram@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Discussing the creation of a Turn Revised And Modernized \(TRAM\) WG, which goal is to consolidate the various initiatives to update TURN and STUN." <tram.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tram>, <mailto:tram-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tram/>
List-Post: <mailto:tram@ietf.org>
List-Help: <mailto:tram-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tram>, <mailto:tram-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Oct 2014 14:08:55 -0000

On 10/15/2014 02:01 AM, Prashanth Patil (praspati) wrote:
> Hi Adam,
> The concerning use cases described in the draft were to indicate that 
> the new ALPN identifiers could also be considered for WebRTC firewall 
> traversal (as pointed out in 
> http://tools.ietf.org/html/draft-hutton-rtcweb-nat-firewall-considerations-03#section-4.2).
> End to end identifier negotiation is still the goal of this draft i.e. 
> to negotiate the use of stun and its usages.
> We'll remove these use cases and stick to end to end negotiation.

Sorry for chiming in late. I saw this exchange when it happened, but I'm 
still thinking about it.

I understood Adam's point to be "the draft says you can use ALPN labels 
to do something we don't think people should do", and Prashanth's 
response to be "we'll make sure the draft doesn't say that".

That might be the right action.

What finally sunk in for me, was that changing the draft so that it 
doesn't include those use cases, doesn't prevent anyone from doing what 
Adam doesn't think should be done, does it?

Would it be better to point out this concern in the draft, and perhaps 
explain why this is discouraged?

That's not a suggestion that you should do that. It's an honest question.

Thanks,

Spencer, as your more alert AD ...

> -Prashanth
> >On Thu, Oct 9, 2014 at 15:41, Adam Langley <agl@imperialviolet.org> wrote:
> >> Is your concern specific to TRAM's proposed use of ALPN, or does it apply to
> >> ALPN in general?
>
> > In general I think the IETF should be promoting the end-to-end
> > principle. My concern is specifically about TRAM implicitly endorsing
> > the idea that the network should be applying policy like that.
>
> > (There's also a fair amount of irony in that fact that the second
> > example suggests ALPN be used to get around the fact that networks
> > often discriminate based on TCP port numbers, and the first example is
> > suggesting that networks do exactly the same thing to ALPN
> > identifiers.)
>
> > Cheers
>
> > AGL
>
>
> _______________________________________________
> tram mailing list
> tram@ietf.org
> https://www.ietf.org/mailman/listinfo/tram