Re: [Tsv-art] Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06

Joe Touch <touch@strayalpha.com> Sat, 24 November 2018 21:00 UTC

Return-Path: <touch@strayalpha.com>
X-Original-To: tsv-art@ietfa.amsl.com
Delivered-To: tsv-art@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C692130FB4; Sat, 24 Nov 2018 13:00:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.989
X-Spam-Level:
X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2y8mjjMjg9ln; Sat, 24 Nov 2018 13:00:04 -0800 (PST)
Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA534130DF5; Sat, 24 Nov 2018 13:00:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=To:References:Message-Id: Content-Transfer-Encoding:Cc:Date:In-Reply-To:From:Subject:Mime-Version: Content-Type:Sender:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=+MoP7R2+a04+i3n9p6SbNoqws5HPUEwM+qCHV09lihk=; b=ZXMZ5FApn/pMbUGyIpT/rZ5sE MhAXNBHCCn67QDEo73LXopCHLnkThb3FqEJsxEnFQVJraMSsNTrIKl1aPV6UwwVpP/U/bNNK7kI9M ojcDkbyfoCgO3g9WWYU46e2jmzALKi3KSYzUXusIdbEj5Askzm3gYVNdCUf6y9YBCwb/T+OqbPukj v+AqNm+3/MdwzXdo9JYH7mb/YmS/rksEloGfpxzt+Fx8KlPzubmhiMbAzYlSrIICMjQBsxw8E1Rt/ chn1ie+vGjxtuHAA0cT0B7oXjEOr2YnyQ6jciREzdCYcP7mwOTDJXRPxn1VeatWzq8L1ma+oUcUPH 3f2t0jecg==;
Received: from cpe-172-250-240-132.socal.res.rr.com ([172.250.240.132]:50414 helo=[192.168.1.179]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.91) (envelope-from <touch@strayalpha.com>) id 1gQf1z-000PZt-7o; Sat, 24 Nov 2018 16:00:01 -0500
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (1.0)
From: Joe Touch <touch@strayalpha.com>
X-Mailer: iPhone Mail (16B92)
In-Reply-To: <2c28d4ac-87de-bcaf-54e8-4e745235c800@gmail.com>
Date: Sat, 24 Nov 2018 12:59:58 -0800
Cc: Michael Scharf <michael.scharf@hs-esslingen.de>, tsv-art@ietf.org, opsec@ietf.org, ietf@ietf.org, draft-ietf-opsec-ipv6-eh-filtering.all@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <977CA53D-7F72-4443-9DE2-F75F7A7C1569@strayalpha.com>
References: <154300282321.9639.11604402305352742547@ietfa.amsl.com> <C4886ABA-3BBE-46AE-B2D9-9A6836D7A8BB@strayalpha.com> <2c28d4ac-87de-bcaf-54e8-4e745235c800@gmail.com>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>
X-OutGoing-Spam-Status: No, score=-0.5
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server217.web-hosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - strayalpha.com
X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com
X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsv-art/thGZaR8dM_o-Oz6NmLF9paXB0YM>
Subject: Re: [Tsv-art] Tsvart last call review of draft-ietf-opsec-ipv6-eh-filtering-06
X-BeenThere: tsv-art@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Transport Area Review Team <tsv-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsv-art>, <mailto:tsv-art-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsv-art/>
List-Post: <mailto:tsv-art@ietf.org>
List-Help: <mailto:tsv-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsv-art>, <mailto:tsv-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 24 Nov 2018 21:00:06 -0000

The problem is operators using this advice as if it were BCP - and later docs treating the suggestions as recommended advice. 

This treats everything unknown as an attack (a disease I’ve noted in many similar docs for years), where it should also consider that doing so is *itself* an attack on the very flexibility we design in as standard. 

We really need to do a better job of not letting informational docs get out of hand this way. 

Joe 

> On Nov 24, 2018, at 12:21 PM, Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
> 
>> On 2018-11-25 06:04, Joe Touch wrote:
>> Equally worrisome that this doc appears to make recommendations that imply BCP, when it is merely informational.
>> 
>> IMO, it’s overstepping to do so.
> 
> Possibly, but it's not forbidden by rule, as far as I know. However, the
> draft is inconsistent in its use of SHOULD vs should (see my previous
> message for an example of a lower case should which might or might not
> be intended pseudo-normatively).
> 
>    Brian
>> 
>> Joe
>> 
>>> On Nov 23, 2018, at 11:53 AM, Michael Scharf <michael.scharf@hs-esslingen.de> wrote:
>>> 
>>> Reviewer: Michael Scharf
>>> Review result: Ready
>>> 
>>> This document has been reviewed as part of the transport area review team's
>>> ongoing effort to review key IETF documents. These comments were written
>>> primarily for the transport area directors, but are copied to the document's
>>> authors and WG to allow them to address any issues raised and also to the IETF
>>> discussion list for information.
>>> 
>>> When done at the time of IETF Last Call, the authors should consider this
>>> review as part of the last-call comments they receive. Please
>>> always CC tsv-art@ietf.org if you reply to or forward this review.
>>> 
>>> I have reviewed draft-ietf-opsec-ipv6-eh-filtering-06. There are no apparent
>>> transport issues. The proposed filtering could slow down the deployment of
>>> experimental protocols that use IPv6 options, but the tradeoffs are explained
>>> in the document.
>>> 
>>> Thanks
>>> 
>>> Michael
>>> 
>> 
>> 
>