[Tsv-art] Re: draft-ietf-tls-dtls-rrc-15 ietf last call Tsvart review

Thomas Fossati <thomas.fossati@linaro.org> Mon, 16 June 2025 13:25 UTC

Return-Path: <thomas.fossati@linaro.org>
X-Original-To: tsv-art@mail2.ietf.org
Delivered-To: tsv-art@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 587863576538 for <tsv-art@mail2.ietf.org>; Mon, 16 Jun 2025 06:25:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4O7QGFcP3HZc for <tsv-art@mail2.ietf.org>; Mon, 16 Jun 2025 06:25:48 -0700 (PDT)
Received: from mail-ed1-x533.google.com (mail-ed1-x533.google.com [IPv6:2a00:1450:4864:20::533]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id E12BF3576528 for <tsv-art@ietf.org>; Mon, 16 Jun 2025 06:25:48 -0700 (PDT)
Received: by mail-ed1-x533.google.com with SMTP id 4fb4d7f45d1cf-60497d07279so9369800a12.3 for <tsv-art@ietf.org>; Mon, 16 Jun 2025 06:25:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; t=1750080348; x=1750685148; darn=ietf.org; h=in-reply-to:content-transfer-encoding:content-disposition :mime-version:references:message-id:subject:cc:to:from:date:from:to :cc:subject:date:message-id:reply-to; bh=3kByGuNxIt0gl7aV4VyvQz4K7dq+bKEt/k+oDOku7ps=; b=zzqtJPv6p5tqv/2dy7stfkYsc0ddGzQHeaYc+cA0q6O8m6qHSOtL1tn+3XgcvT0VrT bEkbNbZWh3lBU0G3KqsjnpReiP4miSci3uuI3/Ex5bDPgWQ7+RkjuGPuvbYMZ1GGfg0U fYEtDdW6cTM03nF9DKXRCcGB2f5AK2h7akKy5QMqljiOJVYPH7WU86LXZ4xdBwLtjVDz BspFSVA0f7alrYkVS0C2sAmVXR3eRVyglz/SIHCDTJtDa7XkfJNeCWpiX8n0CdMkOOUV Sb5TTF4ZorCl9tiK2/Nmfq4FZTaqPoJN1cTO5TxXdw+QCN3mJepOQSJkmLEkuBZ8j+tO v9rg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1750080348; x=1750685148; h=in-reply-to:content-transfer-encoding:content-disposition :mime-version:references:message-id:subject:cc:to:from:date :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=3kByGuNxIt0gl7aV4VyvQz4K7dq+bKEt/k+oDOku7ps=; b=NfdcLyJEOIuKe0JBJC2ZqLLZ3J0BKYyJXpUCxcyEiN2dHt45BiYyN2npf5eRsv0EMK U0Yz3Z34x08DfpfrFrXGCwLo3Sm1GzfHNkcvzsi4eS/Vw6zcXchU7fpo+OuD+lyNa8/b 3HE733SXJpNXmzJx9sboRAGGriRbS7ueF6oJHg9QVoY21scLSo2n8bYSJkSZX4aMXRYP Fjo+eo7EFkmTScbYzDR/Iw8zR4A5knwYmp0Q+GdNvX2JVFc71VqLyn5SyN81HfM9wlat plnLmm/rdOwWEUORiq/RCYvKj5RPPajfBvOObUu/ebhtX9DInM0nsfJOGpWB+zcYCkyh 8yaA==
X-Gm-Message-State: AOJu0YzE0WGRgAYL2MmiNtZyeK8y+1ZCsJzIaQeb0P5L/8VNzoJxqz+n hKIvyu92jsvRhrvySwFaJilvakegVrqeUTa/efenQ8kgS0muCTLddGc8fkyh3gxVT0g=
X-Gm-Gg: ASbGncsf1vrKRRY5OBYAhU+HV78vFlNbC9xb7NTi5gJviUtlhhX+jPWN6T96mnYJmNj b0mqnufAPLbEjsyL55jjI73n08DxhOU9kLr3K6zDPl+r5yDnp006l4AFjOq4/HyLnYl0xDeo7hB a+n9+JjRX8Ajx76g5q+LH7MCECybXPrCYV4iagM387V6Kc29la7SNSV/vxANbtPslEaUrBdv2zw rgTCvVmPO5n2Aik0qB3elyvvOOew8zaEw0hQ2tNNuncL8+cUKzY3Dr31iXZD6Ph0S40OV6SLVKV akmownoyFSmNPWdduq5nu2BxSb4aaea3bn8jd/qRvLoAALDmZLv+/IhHBMnrP9rJ8yG4xujSGX/ YCUAa73gQgDXacpr8MdHXAxbS33w=
X-Google-Smtp-Source: AGHT+IHxxpS9hus66Kjv6TTrFhlzF8Qyhip9UtHmmogouD/Suvz/yoDFDt+ErwtTmEGwtDGu8B8H+w==
X-Received: by 2002:aa7:d4cc:0:b0:608:f8b3:89d6 with SMTP id 4fb4d7f45d1cf-608f8b38b1fmr5352640a12.34.1750080347792; Mon, 16 Jun 2025 06:25:47 -0700 (PDT)
Received: from tho-mbp.home ([2a02:1210:6ac5:f500:1469:8d5f:cc7c:2c66]) by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-608b4a5e72csm6244016a12.48.2025.06.16.06.25.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 16 Jun 2025 06:25:47 -0700 (PDT)
Date: Mon, 16 Jun 2025 15:25:46 +0200
From: Thomas Fossati <thomas.fossati@linaro.org>
To: Colin Perkins <csp@csperkins.org>
Message-ID: <h3bbb27lpcng6i6zcltwxjm5sztohmbmw2folxsj6g75id2qid@xczjv2aq2ijw>
References: <174973169765.4169355.2905346214627995584@dt-datatracker-59b84fc74f-84jsl> <gbouwhtzpsic5j4yzzaiu3nl5lq3osd6ivuo7lom3wh4r7kdz2@iayeheoquqig> <E35D3B4B-CF51-47FF-8D88-2C8B93F18342@csperkins.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <E35D3B4B-CF51-47FF-8D88-2C8B93F18342@csperkins.org>
Message-ID-Hash: OH3HF4FW55B44IVOPKAMPXRSSEQFOZXQ
X-Message-ID-Hash: OH3HF4FW55B44IVOPKAMPXRSSEQFOZXQ
X-MailFrom: thomas.fossati@linaro.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tsv-art.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: tsv-art@ietf.org, draft-ietf-tls-dtls-rrc.all@ietf.org, last-call@ietf.org, tls@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Tsv-art] Re: draft-ietf-tls-dtls-rrc-15 ietf last call Tsvart review
List-Id: Transport Area Review Team <tsv-art.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsv-art/YT2K7vRcJTicDM-i11GyKK4kgyE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsv-art>
List-Help: <mailto:tsv-art-request@ietf.org?subject=help>
List-Owner: <mailto:tsv-art-owner@ietf.org>
List-Post: <mailto:tsv-art@ietf.org>
List-Subscribe: <mailto:tsv-art-join@ietf.org>
List-Unsubscribe: <mailto:tsv-art-leave@ietf.org>

On Mon, Jun 16, 2025 at 02:02:06PM +0100, Colin Perkins wrote:
> Hi,
>
> On 13 Jun 2025, at 14:34, Thomas Fossati wrote:
> > The current algorithm is not designed to handle nested rebindings.
> > If this occurs (hopefully rarely), the path_response message is
> > dropped, and path validation eventually times out.  The address is
> > not updated, and a new path validation will be triggered when new
> > data is received.
>
> I’d also expect this to be an uncommon occurrence, so there’s likely
> to need to optimise the behaviour further. It might be helpful to
> include the above explanation though, just to be clear that the
> protocol doesn’t fail in that case?

Makes sense.

See https://github.com/tlswg/dtls-rrc/pull/94/commits/bc4de703631a222

cheers, thanks again!