Re: [tsvwg] Comment on draft-ietf-tsvwg-transport-encrypt-13

Joseph Touch <touch@strayalpha.com> Mon, 23 March 2020 23:07 UTC

Return-Path: <touch@strayalpha.com>
X-Original-To: tsvwg@ietfa.amsl.com
Delivered-To: tsvwg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BFA13A0EDA for <tsvwg@ietfa.amsl.com>; Mon, 23 Mar 2020 16:07:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.318
X-Spam-Level:
X-Spam-Status: No, score=-1.318 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NEUTRAL=0.779, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=strayalpha.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hp7S_yNOuWO0 for <tsvwg@ietfa.amsl.com>; Mon, 23 Mar 2020 16:07:39 -0700 (PDT)
Received: from server217-3.web-hosting.com (server217-3.web-hosting.com [198.54.115.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06F593A0ED3 for <tsvwg@ietf.org>; Mon, 23 Mar 2020 16:07:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strayalpha.com; s=default; h=To:References:Message-Id:Cc:Date:In-Reply-To: From:Subject:Mime-Version:Content-Type:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=L9wgVUDvceTwzXMqHW8X8MZNhUvKzYC1LB8wW3HgWjg=; b=i0/6A4lOajQgaPbX3xqZXv4g+ RMjhbLdFuDWAdaUBwP0rcvHfOfl3EsiDX1HYgPW+7CckXpxfvMGmL167wmZ8A9628kyKiGI5fpvO1 cRRXrA9X8qDZUNTJhAEvyZl6jegvIp2oY1tS1jOj+mV/wGGvNHmVE8/W6cBcOekVoVIxFkzDQO42s HuuunMLlo1+9XOsrRUu0NyDH4Q26zpuYf1osMW/zNp7gDt8cHVhhen1MYDf5Ifobs+qh07xTs8ZG4 n+IEmRk/BV9HPl+dHDyRr0VblYLuiHkNBhT6bEdE/gwEoOwyNGX9vdU2+X1veMBXdouy+G9B3QZM7 r3SLJ0X9Q==;
Received: from cpe-172-250-225-198.socal.res.rr.com ([172.250.225.198]:50000 helo=[192.168.1.10]) by server217.web-hosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.92) (envelope-from <touch@strayalpha.com>) id 1jGWAQ-002TKP-DM; Mon, 23 Mar 2020 19:07:38 -0400
Content-Type: multipart/alternative; boundary="Apple-Mail=_7B59F0B5-AE6F-490D-95D7-21FF7182CCD2"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Joseph Touch <touch@strayalpha.com>
In-Reply-To: <MN2PR19MB40455E00DB52880A38EB494C83F00@MN2PR19MB4045.namprd19.prod.outlook.com>
Date: Mon, 23 Mar 2020 16:07:33 -0700
Cc: Tom Herbert <tom@herbertland.com>, tsvwg <tsvwg@ietf.org>
Message-Id: <4FA8060E-C661-42FB-BCA1-43F32E5FA1F5@strayalpha.com>
References: <CALx6S349SE2Ho0V2bJPSE7dh3+2f5Wiw1AofMke0RY4FwF=ebw@mail.gmail.com> <679FAA73-401E-499D-87CB-10F973E05DD6@strayalpha.com> <MN2PR19MB40455E00DB52880A38EB494C83F00@MN2PR19MB4045.namprd19.prod.outlook.com>
To: "Black, David" <David.Black@dell.com>
X-Mailer: Apple Mail (2.3445.9.1)
X-OutGoing-Spam-Status: No, score=-0.5
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server217.web-hosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - strayalpha.com
X-Get-Message-Sender-Via: server217.web-hosting.com: authenticated_id: touch@strayalpha.com
X-Authenticated-Sender: server217.web-hosting.com: touch@strayalpha.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: unmodified, already matched
Archived-At: <https://mailarchive.ietf.org/arch/msg/tsvwg/zHXZq9sgXk8NaqNHwy3Ayz5Ny6w>
Subject: Re: [tsvwg] Comment on draft-ietf-tsvwg-transport-encrypt-13
X-BeenThere: tsvwg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Transport Area Working Group <tsvwg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tsvwg/>
List-Post: <mailto:tsvwg@ietf.org>
List-Help: <mailto:tsvwg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tsvwg>, <mailto:tsvwg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Mar 2020 23:07:41 -0000

> On Mar 23, 2020, at 3:19 PM, Black, David <David.Black@dell.com> wrote:
> 
> [writing as draft shepherd]
>  
> Point taken – would it be reasonable to rework that paragraph to observe that there should be incentives for endpoints to expose transport information, e.g., otherwise implementers may simply not bother?

That sounds like it’s leaning towards extortion - the kind we have now, in which “if you don’t let us see your ports and we don’t like them, we’ll block you”.

I’d lean the other way - that the network really shouldn’t be doing anything based on information gleaned from transports - explicitly given or not - because it only serves to create mutual escalation of misinformation.

Joe

>  
> Thanks, --David
>  
> From: tsvwg <tsvwg-bounces@ietf.org <mailto:tsvwg-bounces@ietf.org>> On Behalf Of Joseph Touch
> Sent: Monday, March 23, 2020 11:20 AM
> To: Tom Herbert
> Cc: tsvwg
> Subject: Re: [tsvwg] Comment on draft-ietf-tsvwg-transport-encrypt-13
>  
> [EXTERNAL EMAIL] 
> 
>  
> 
> 
> On Mar 23, 2020, at 7:58 AM, Tom Herbert <tom@herbertland.com <mailto:tom@herbertland.com>> wrote:
>  
> Fundamentally, transport layer is end-to-end information. There is no
> contract between end hosts and the network that hosts have to be
> honest or correct in setting information in the transport layer-- the
> only contract is between the endpoints. 
>  
> +1
>  
> Another point worth mentioning:
>  
> - if endpoints can lie or mislead about transport info to get their way, they can, will, and IMO *SHOULD*.
>  
> That goes for using port 53 for nearly anything anyone wants to. Transport info isn’t there to make things nice for network operators - that’s what the network layer is for.
>  
> Oh, yeah, I know - network operators don’t want “heavy” stuff in *their* headers because it slows them down when they don’t want it. Too bad, IMO. If they want the info, they need to deal with the pain.
>  
> Joe