Re: [tsvwg] [saag] TSVWG WGLC: draft-ietf-tsvwg-transport-encrypt-08, -> logging

Tom Herbert <tom@herbertland.com> Sat, 12 October 2019 19:11 UTC

Return-Path: <tom@herbertland.com>
X-Original-To: tsvwg@ietfa.amsl.com
Delivered-To: tsvwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A5F912009C for <tsvwg@ietfa.amsl.com>; Sat, 12 Oct 2019 12:11:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=herbertland-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28VuWgiIltLf for <tsvwg@ietfa.amsl.com>; Sat, 12 Oct 2019 12:11:34 -0700 (PDT)
Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com [IPv6:2a00:1450:4864:20::531]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CA59120098 for <tsvwg@ietf.org>; Sat, 12 Oct 2019 12:11:34 -0700 (PDT)
Received: by mail-ed1-x531.google.com with SMTP id r16so11422386edq.11 for <tsvwg@ietf.org>; Sat, 12 Oct 2019 12:11:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=herbertland-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=RhzG9D64/BvTRwzkBDEorCJ+DVgCs2Yqj/fjaGK8xPY=; b=wJ9XmnoVvraqr2Ikwd0k8Loe13d9gQItpXjnG7YZ9BVyhodmGZwJ+SszCAzdc/iG5V E8Ih9M64TO/JTYOTXZLAbr2xOc1j6EBw2cZgzHf3o0YUoZhJ3cM2WXXtehlrhOniXZ9o x1MJViy+oc89c/N+yu9pcGCp3gEzKeqM/O6vbe1qseFYQ7e5ltmdWOMq7GqcChIhLbYM rbznOH2HYlBrUqK9QXbBgHBxWdkz2YDv8OeCIsMww0EqifCIYkdu0z0BkzlF4Y7/mZZm 5ASRJ/rA2W+dfe16NKWaeLTYZldiLxf39qChmaRuVxbC1FxDpV0eMeSiWDND/Oh+gJeK hthQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=RhzG9D64/BvTRwzkBDEorCJ+DVgCs2Yqj/fjaGK8xPY=; b=WdXY5GQ3XKrvyZbB9FMoQapGJ0w7p/HfxVD2caLaX/af1vZhYAL0U3Wno1cOOIL55j r9yyp6WY0sva5dBw8CNk029Ey5BYaPvTeV2tPIkEzN83CP+jvSDNqLKjg+zzyqTGXndh M2ahHmA18puVuJ88hQ+4qniWiBfZxqoVfqNlbAhMIzF4Dv9mFfRNqS7wxstn4zctnbNl 9u+HHM878kgHxitfNqQ81fFPRKzsFFRgvbLpMzILWj0LZhPLD7DctPQMoWF9fPQQ3BEO wP1mrLkvQR9HbSr9gJMo4tVJUyk1nu59ytQ7BtLYpU9pHiuuabcmPA14NaRF1pjdTTJR nPZg==
X-Gm-Message-State: APjAAAVYA0AB2n5qyeNTwHIutYZMlO/Qvh97Ouef3/DKjTUMMhSHtx60 y2XsrIc4ts69R9y9jD6sfO3vh/9GluAKHWLcVP+UPA==
X-Google-Smtp-Source: APXvYqxAA9KCxA/Ts80g996s2FFyBn40y07/9gGxFQW91rl3MeGhRfAAE7UQcT1anSU3y2iHOn3CRKlLux9UyVAMAkk=
X-Received: by 2002:a17:906:2319:: with SMTP id l25mr20530462eja.309.1570907492668; Sat, 12 Oct 2019 12:11:32 -0700 (PDT)
MIME-Version: 1.0
References: <CE03DB3D7B45C245BCA0D2432779493630766752@MX307CL04.corp.emc.com> <e8c30f3f-606f-0c0d-a7dd-b2bb6f31a9fd@huitema.net> <5DA18567.9060400@erg.abdn.ac.uk>
In-Reply-To: <5DA18567.9060400@erg.abdn.ac.uk>
From: Tom Herbert <tom@herbertland.com>
Date: Sat, 12 Oct 2019 12:11:22 -0700
Message-ID: <CALx6S36wwX=e6NQvnMo=pL13zrWukESo4H1uNgL9_tXi0vfOTg@mail.gmail.com>
To: Gorry Fairhurst <gorry@erg.abdn.ac.uk>
Cc: Christian Huitema <huitema@huitema.net>, "tsvwg@ietf.org" <tsvwg@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsvwg/8qxQs9ScqBvdB_IQ7KpRRWF-qDE>
Subject: Re: [tsvwg] [saag] TSVWG WGLC: draft-ietf-tsvwg-transport-encrypt-08, -> logging
X-BeenThere: tsvwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Transport Area Working Group <tsvwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg/>
List-Post: <mailto:tsvwg@ietf.org>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Oct 2019 19:11:37 -0000

On Sat, Oct 12, 2019 at 12:49 AM Gorry Fairhurst <gorry@erg.abdn.ac.uk> wrote:
>
> I'm intrigued by how far we can understand opportunities for open client
> logs to replace pcap dumps, and would like to delve a little deeper into
> what we understand - there seem many possible actors and that may be
> interesting to look at a few viewpoints:
>
> * a user of a transport protocol (e.g., understanding cost/benefit of
> feature choices);
> * a protocol developer (e.g.,  debugging transport interactions end to end);
> * a service provider (e.g., trying to understand performance impairments
> in the network);
> * researchers/equipment developers seeking to correlate/tune transport
> timing with network policies (e.g., interactions between congestion
> control and link scheduling);
> * exploring traffic archives (e.g., trends in what is supported or
> determine when an anomoly appeared).
>
For this to be a complete list the viewpoints of potentially
malevolent actors also needs to be considered.

> I've taken all of these viewpoints at some time using pcap to look at TCP.
>
> Clearly when we use QUIC, there can be alternatives and there is now
> some experience with client (and server) logs, what do you think we can
> usefully say in addition to or instead of what the draft says about
> logging (currently mentioned only briefly in section 6.1) ?
>
> The text on spin-bit could indeed be developed a little (the present
> text predates the spin bit being incorporated as an optional part of the
> base spec). What do you think should be said (currently at the end of 6.4)?
>
> Gorry
>
>
> On 09/10/2019, 15:32, Christian Huitema wrote:
> >
> > As the draft mentions:
> >
> >     The use of transport layer authentication and encryption exposes a
> >     tussle between middlebox vendors, operators, applications developers
> >     and users
> >
> > Much of the draft reads like a lamentation of the horrible
> > consequences of encrypting transport headers, which looks very much
> > like embracing the point of view of the middlebox vendors. Expressing
> > that point of view is of course fine, and it might be enough to change
> > the title, abstract and introduction to reflect that this is an
> > opinion piece. But as a transport working group document I would like
> > something a bit more balanced. It should spend more time acknowledging
> > the ossification and privacy issues. It should ideally lay the ground
> > work for alternative management solutions, such as controlled exposure
> > like the spin bit in QUIC, IP header information, or standardized logs
> > like the QLOG effort.
> >
> > -- Christian Huitema
> >
> >
> > On 10/8/2019 2:08 PM, Black, David wrote:
> >>
> >> FYI – some OPS area and SEC area eyes on this TSVWG draft now (during
> >> WGLC) would be a good thing ;-).
> >>
> >> Thanks, --David (TSVWG co-chair)
> >>
> >> *From:* Black, David <david.black@emc.com>
> >> *Sent:* Tuesday, October 8, 2019 5:06 PM
> >> *To:* tsvwg@ietf.org
> >> *Cc:* Black, David
> >> *Subject:* WGLC: draft-ietf-tsvwg-transport-encrypt-08, closes 23
> >> October 2019
> >>
> >> This email announces a TSVWG Working Group Last Call (WGLC) on:
> >>
> >> The Impact of Transport Header Confidentiality on Network Operation and
> >>
> >>                        Evolution of the Internet
> >>
> >>                  draft-ietf-tsvwg-transport-encrypt-08
> >>
> >> https://datatracker.ietf.org/doc/draft-ietf-tsvwg-transport-encrypt/
> >>
> >> This draft is intended to become an Informational RFC.
> >>
> >> This WGLC will run through the end of the day on Wednesday, October 23.
> >>
> >> That should allow time before the Singapore draft submission cutoff for
> >>
> >> the authors to revise the draft with any changes that result from WGLC.
> >>
> >> Comments should be sent to the tsvwg@ietf.org <mailto:tsvwg@ietf.org>
> >> list, although purely
> >>
> >> editorial comments may be sent directly to the authors. Please cc: the
> >>
> >> WG chairs at tsvwg-chairs@ietf.org <mailto:tsvwg-chairs@ietf.org>  if
> >> you would like the chairs to
> >>
> >> track such editorial comments as part of the WGLC process.
> >>
> >> No IPR disclosures have been submitted directly on this draft.
> >>
> >> Thanks,
> >>
> >> David, Gorry and Wes
> >>
> >> (TSVWG Co-Chairs)
> >>
> >>
> >> _______________________________________________
> >> saag mailing list
> >> saag@ietf.org
> >> https://www.ietf.org/mailman/listinfo/saag
>