
From nobody Tue Nov  1 08:30:36 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9763C129AA6; Tue,  1 Nov 2016 08:30:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FBQBLqb9BRzn; Tue,  1 Nov 2016 08:30:29 -0700 (PDT)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0137.outbound.protection.outlook.com [104.47.38.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CFBD129AB6; Tue,  1 Nov 2016 08:30:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=rlUHUzknxgNVNW+HFnXmDyPGJX8X9lKgKDCNFJVwq4U=; b=QQfH4mDVVN5xhRtSD4eW0Fbchl2ihyFHkab1EKoSYKL/xi2zDF5JYO/s0TBenv7qMeQE7YKPOP7qzVEZARMC6/4uHjl3RJSobv79k8u7mzZmKG24OYnyZ329OaMC0+HYTqgjzhnHlALSndLH1KPbeyITbiow8LYwhAXYXSNEjbk=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2611.namprd06.prod.outlook.com (10.173.145.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Tue, 1 Nov 2016 15:30:27 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0679.015; Tue, 1 Nov 2016 15:30:26 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>, Anima-bootstrap <anima-bootstrap@ietf.org>, Core <core@ietf.org>
Thread-Topic: [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt
Thread-Index: AQHSMfbT9L6wtjR1qUmGz/IT6U8mBaDEQd4g
Date: Tue, 1 Nov 2016 15:30:26 +0000
Message-ID: <BN6PR06MB23085179D4DE382A6E21C125FEA10@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <147775346922.30618.14590857285848221161.idtracker@ietfa.amsl.com> <e191cf557b00e7003048fac4e72ba59c@xs4all.nl>
In-Reply-To: <e191cf557b00e7003048fac4e72ba59c@xs4all.nl>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2611; 7:B7fYQN55Pn5Q8pLf3MApLWHjyW1bBoshhLdSY0U3ck5lmUvUv2uCNZzy35XShCT8WWsQFMgTx2JVoGmxniSp0c574hDlutqTyayAPn8nlncPMBVLcRQMd33g9ZBrhE0eJhEHF5oG+rDvOXPc0G7+4ZRgmzwVmxt2KVVLKDcy6jUvMx9oF/hiZwkBLt+k9pyBJCWhZWLhiY9/yMSrbtZAEFbm30xhw2xbzentIermciwYPk/FS/Kc1dVNQIpz1ZJTqpeH11qsYJl2/nISPJsuRX4n/OOURGNP1k90zwCcWy+pVzx9qotu17Kl06L7GeLfD2bdLA7f3yYZzoFZKz/HS1M9nnsGNx+kByqj1iC9EOY=
x-forefront-antispam-report: SFV:SKI; SCL:-1SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(377454003)(377424004)(13464003)(189002)(2950100002)(7736002)(54356999)(15975445007)(5002640100001)(2900100001)(77096005)(76176999)(15650500001)(8676002)(50986999)(81166006)(86362001)(230783001)(81156014)(8936002)(3660700001)(101416001)(92566002)(2501003)(586003)(122556002)(74316002)(3280700002)(33656002)(9686002)(31430400001)(68736007)(2906002)(305945005)(107886002)(5660300001)(99286002)(105586002)(66066001)(189998001)(5001770100001)(3846002)(106116001)(6116002)(76576001)(102836003)(7846002)(19580405001)(7696004)(97736004)(19580395003)(87936001)(4001150100001)(10400500002)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2611; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
x-ms-office365-filtering-correlation-id: 5a183daa-99a4-4415-4fc9-08d4026c011d
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN6PR06MB2611;
x-microsoft-antispam-prvs: <BN6PR06MB261191F38D0F99B8E137A3B0FEA10@BN6PR06MB2611.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(120809045254105)(192374486261705);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001);  SRVR:BN6PR06MB2611; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2611; 
x-forefront-prvs: 01136D2D90
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2016 15:30:26.2392 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2611
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/5B3P84zyJzGddDKVK1sbCS5AUh8>
Subject: Re: [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Nov 2016 15:30:31 -0000

Hi Peter

In section 3 of "draft-vanderstok-core-coap-est-00", "Server-generated key"=
 is listed as supported.
This service returns two components, a PKCS8 containing the private key mat=
erial and a PKCS7 containing the device certificate chain.
In RFC7030, this information is returned using a Content-Type: multipart/mi=
xed.
How this is supported in "draft-vanderstok-core-coap-est-00"?

     REQ: POST /.well-known/est/serverkeygen (Content-Format: application/p=
kcs10)
     <ASN.1 CertificationRequest>  // Certificate request carry in a PKCS10
 =20
    RES: 2.05 Content (Content-Format: ???)
    <ASN.1 ContentSet>            // Private key material for this node car=
ry in a PKCS8
    <ASN.1 ContentInfo>           // Certificate and associated PKI for thi=
s node carry in a PKCS7

Regards,
Michel

-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der Stok
Sent: Saturday, October 29, 2016 11:12 AM
To: Anima-bootstrap <anima-bootstrap@ietf.org>; Core <core@ietf.org>
Subject: [core] Fwd: New Version Notification for draft-vanderstok-core-coa=
p-est-00.txt

Dear all,

we have submitted a new draft  Enrollment over Secure Transport (EST) over =
coaps to make BRSKI over coap possible.
We expect (parts of) this draft to be integrated with coap-bootstrap draft =
of pritikin and Kampanakis.
This draft removes EST functionality not absolutely needed within the conte=
xt we expect the BRSKI deployment for low-resource devices.

Greetings,

Peter

-------- Oorspronkelijke bericht --------
Onderwerp: New Version Notification for draft-vanderstok-core-coap-est-00.t=
xt
Datum: 2016-10-29 17:04
Afzender: internet-drafts@ietf.org
Ontvanger: "Peter van der Stok" <consultancy@vanderstok.org>, "Peter Van de=
r Stok" <consultancy@vanderstok.org>, "Sandeep Kumar"=20
<ietf@sandeep.de>, "Sandeep S. Kumar" <ietf@sandeep.de>

A new version of I-D, draft-vanderstok-core-coap-est-00.txt
has been successfully submitted by Peter van der Stok and posted to the IET=
F repository.

Name:		draft-vanderstok-core-coap-est
Revision:	00
Title:		EST based on DTLS secured CoAP (EST-coaps)
Document date:	2016-10-29
Group:		Individual Submission
Pages:		15
URL:           =20
https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-00.txt
Status:        =20
https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/
Htmlized:      =20
https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00


Abstract:
    Low-resource devices in a Low-power and Lossy Network (LLN) can
    operate in a mesh network using the IPv6 over Low-power Personal Area
    Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards.
    Provisioning these devices in a secure manner with keys (often called
    security bootstrapping) used to encrypt and authenticate messages is
    the subject of Bootstrapping of Remote Secure Key Infrastructures
    (BRSKI) [I-D.ietf-anima-bootstrapping-keyinfra].  Enrollment over
    Secure Transport (EST) [RFC7030], based on TLS and HTTP, is used for
    BRSKI.  This document defines how low-resource devices are expected
    to use EST over DTLS and CoAP. 6LoWPAN fragmentation management and
    minor extensions to CoAP are needed to enable EST over DTLS-secured
    CoAP (EST-coaps).




Please note that it may take a couple of minutes from the time of submissio=
n until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Tue Nov  1 08:55:16 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD43129460; Tue,  1 Nov 2016 08:55:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 85AuawNi3OBd; Tue,  1 Nov 2016 08:55:09 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC815129AB2; Tue,  1 Nov 2016 08:55:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA1Ft0MX002818; Tue, 1 Nov 2016 16:55:00 +0100 (CET)
Received: from nar-4.local.mail (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t7bQq70dLz7xmx; Tue,  1 Nov 2016 16:54:59 +0100 (CET)
Date: Tue, 1 Nov 2016 16:34:25 +0100
From: Carsten Bormann <cabo@tzi.org>
To: Michel Veillette <michel.veillette@trilliantinc.com>, "=?utf-8?Q?consultancy=40vanderstok.org?=" <consultancy@vanderstok.org>, Anima-bootstrap <anima-bootstrap@ietf.org>, Core <core@ietf.org>
Message-ID: <etPan.5818bad3.78c6b580.9528@tzi.org>
In-Reply-To: <etPan.5818b52f.a07279a.9528@AirmailxGenerated.am>
References: <147775346922.30618.14590857285848221161.idtracker@ietfa.amsl.com> <e191cf557b00e7003048fac4e72ba59c@xs4all.nl> <etPan.5818b52f.a07279a.9528@AirmailxGenerated.am>
X-Mailer: Airmail (390)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="5818bad3_28ba0ee2_9528"
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/YON8pVCzfSrn06lqCWkj3d9iitk>
Subject: Re: [core] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Nov 2016 15:55:12 -0000

--5818bad3_28ba0ee2_9528
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Sending around MIME messages between constrained devices doesn=E2=80=99t =
strike me as the optimal way forward.
=46ortunately, we have COSE, which would be an easy way to combine a key =
wrap with some signing info.

Gr=C3=BC=C3=9Fe, Carsten

On 1 November 2016 at 16:30:43, Michel Veillette (michel.veillette=40tril=
liantinc.com) wrote:

Hi Peter =20

In section 3 of =22draft-vanderstok-core-coap-est-00=22, =22Server-genera=
ted key=22 is listed as supported. =20
This service returns two components, a PKCS8 containing the private key m=
aterial and a PKCS7 containing the device certificate chain. =20
In R=46C7030, this information is returned using a Content-Type: multipar=
t/mixed. =20
How this is supported in =22draft-vanderstok-core-coap-est-00=22=3F =20

REQ: POST /.well-known/est/serverkeygen (Content-=46ormat: application/pk=
cs10) =20
<ASN.1 CertificationRequest> // Certificate request carry in a PKCS10 =20

RES: 2.05 Content (Content-=46ormat: =3F=3F=3F) =20
<ASN.1 ContentSet> // Private key material for this node carry in a PKCS8=
 =20
<ASN.1 ContentInfo> // Certificate and associated PKI for this node carry=
 in a PKCS7 =20

Regards, =20
Michel =20

-----Original Message----- =20
=46rom: core =5Bmailto:core-bounces=40ietf.org=5D On Behalf Of peter van =
der Stok =20
Sent: Saturday, October 29, 2016 11:12 AM =20
To: Anima-bootstrap <anima-bootstrap=40ietf.org>; Core <core=40ietf.org> =
=20
Subject: =5Bcore=5D =46wd: New Version Notification for draft-vanderstok-=
core-coap-est-00.txt =20

Dear all, =20

we have submitted a new draft Enrollment over Secure Transport (EST) over=
 coaps to make BRSKI over coap possible. =20
We expect (parts of) this draft to be integrated with coap-bootstrap draf=
t of pritikin and Kampanakis. =20
This draft removes EST functionality not absolutely needed within the con=
text we expect the BRSKI deployment for low-resource devices. =20

Greetings, =20

Peter =20

-------- Oorspronkelijke bericht -------- =20
Onderwerp: New Version Notification for draft-vanderstok-core-coap-est-00=
.txt =20
Datum: 2016-10-29 17:04 =20
Afzender: internet-drafts=40ietf.org =20
Ontvanger: =22Peter van der Stok=22 <consultancy=40vanderstok.org>, =22Pe=
ter Van der Stok=22 <consultancy=40vanderstok.org>, =22Sandeep Kumar=22 =20
<ietf=40sandeep.de>, =22Sandeep S. Kumar=22 <ietf=40sandeep.de> =20

A new version of I-D, draft-vanderstok-core-coap-est-00.txt =20
has been successfully submitted by Peter van der Stok and posted to the I=
ET=46 repository. =20

Name:	draft-vanderstok-core-coap-est =20
Revision:	00 =20
Title:	EST based on DTLS secured CoAP (EST-coaps) =20
Document date:	2016-10-29 =20
Group:	Individual Submission =20
Pages:	15 =20
URL: =20
https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-00.tx=
t =20
Status: =20
https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/ =20
Htmlized: =20
https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00 =20


Abstract: =20
Low-resource devices in a Low-power and Lossy Network (LLN) can =20
operate in a mesh network using the IPv6 over Low-power Personal Area =20
Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards. =20
Provisioning these devices in a secure manner with keys (often called =20
security bootstrapping) used to encrypt and authenticate messages is =20
the subject of Bootstrapping of Remote Secure Key Infrastructures =20
(BRSKI) =5BI-D.ietf-anima-bootstrapping-keyinfra=5D. Enrollment over =20
Secure Transport (EST) =5BR=46C7030=5D, based on TLS and HTTP, is used fo=
r =20
BRSKI. This document defines how low-resource devices are expected =20
to use EST over DTLS and CoAP. 6LoWPAN fragmentation management and =20
minor extensions to CoAP are needed to enable EST over DTLS-secured =20
CoAP (EST-coaps). =20




Please note that it may take a couple of minutes from the time of submiss=
ion until the htmlized version and diff are available at tools.ietf.org. =
=20

The IET=46 Secretariat =20

=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F =20
core mailing list =20
core=40ietf.org =20
https://www.ietf.org/mailman/listinfo/core =20

=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F =20
core mailing list =20
core=40ietf.org =20
https://www.ietf.org/mailman/listinfo/core =20


--5818bad3_28ba0ee2_9528
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

<html><head><style>body=7Bfont-family:Helvetica,Arial;font-size:13px=7D</=
style></head><body style=3D=22word-wrap: break-word; -webkit-nbsp-mode: s=
pace; -webkit-line-break: after-white-space;=22><div id=3D=22bloop=5Fcust=
omfont=22 style=3D=22font-family:Helvetica,Arial;font-size:13px; color: r=
gba(0,0,0,1.0); margin: 0px; line-height: auto;=22>Sending around MIME me=
ssages between constrained devices doesn=E2=80=99t strike me as the optim=
al way forward.</div><div id=3D=22bloop=5Fcustomfont=22 style=3D=22font-f=
amily:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px=
; line-height: auto;=22>=46ortunately, we have COSE, which would be an ea=
sy way to combine a key wrap with some signing info.</div> <br> <div id=3D=
=22bloop=5Fsign=5F1478014407063664896=22 class=3D=22bloop=5Fsign=22><div =
style=3D=22font-family:helvetica,arial;font-size:13px=22>Gr=C3=BC=C3=9Fe,=
 Carsten</div></div> <br><p class=3D=22airmail=5Fon=22>On 1 November 2016=
 at 16:30:43, Michel Veillette (<a href=3D=22mailto:michel.veillette=40tr=
illiantinc.com=22>michel.veillette=40trilliantinc.com</a>) wrote:</p> <bl=
ockquote type=3D=22cite=22 class=3D=22clean=5Fbq=22><span><div><div></div=
><div>Hi Peter
<br>
<br>In section 3 of =22draft-vanderstok-core-coap-est-00=22, =22Server-ge=
nerated key=22 is listed as supported.
<br>This service returns two components, a PKCS8 containing the private k=
ey material and a PKCS7 containing the device certificate chain.
<br>In R=46C7030, this information is returned using a Content-Type: mult=
ipart/mixed.
<br>How this is supported in =22draft-vanderstok-core-coap-est-00=22=3F
<br>
<br>     REQ: POST /.well-known/est/serverkeygen (Content-=46ormat: appli=
cation/pkcs10)
<br>     &lt;ASN.1 CertificationRequest&gt;  // Certificate request carry=
 in a PKCS10
<br>  =20
<br>    RES: 2.05 Content (Content-=46ormat: =3F=3F=3F)
<br>    &lt;ASN.1 ContentSet&gt;            // Private key material for t=
his node carry in a PKCS8
<br>    &lt;ASN.1 ContentInfo&gt;           // Certificate and associated=
 PKI for this node carry in a PKCS7
<br>
<br>Regards,
<br>Michel
<br>
<br>-----Original Message-----
<br>=46rom: core =5Bmailto:core-bounces=40ietf.org=5D On Behalf Of peter =
van der Stok
<br>Sent: Saturday, October 29, 2016 11:12 AM
<br>To: Anima-bootstrap &lt;anima-bootstrap=40ietf.org&gt;; Core &lt;core=
=40ietf.org&gt;
<br>Subject: =5Bcore=5D =46wd: New Version Notification for draft-vanders=
tok-core-coap-est-00.txt
<br>
<br>Dear all,
<br>
<br>we have submitted a new draft  Enrollment over Secure Transport (EST)=
 over coaps to make BRSKI over coap possible.
<br>We expect (parts of) this draft to be integrated with coap-bootstrap =
draft of pritikin and Kampanakis.
<br>This draft removes EST functionality not absolutely needed within the=
 context we expect the BRSKI deployment for low-resource devices.
<br>
<br>Greetings,
<br>
<br>Peter
<br>
<br>-------- Oorspronkelijke bericht --------
<br>Onderwerp: New Version Notification for draft-vanderstok-core-coap-es=
t-00.txt
<br>Datum: 2016-10-29 17:04
<br>Afzender: internet-drafts=40ietf.org
<br>Ontvanger: =22Peter van der Stok=22 &lt;consultancy=40vanderstok.org&=
gt;, =22Peter Van der Stok=22 &lt;consultancy=40vanderstok.org&gt;, =22Sa=
ndeep Kumar=22 =20
<br>&lt;ietf=40sandeep.de&gt;, =22Sandeep S. Kumar=22 &lt;ietf=40sandeep.=
de&gt;
<br>
<br>A new version of I-D, draft-vanderstok-core-coap-est-00.txt
<br>has been successfully submitted by Peter van der Stok and posted to t=
he IET=46 repository.
<br>
<br>Name:		draft-vanderstok-core-coap-est
<br>Revision:	00
<br>Title:		EST based on DTLS secured CoAP (EST-coaps)
<br>Document date:	2016-10-29
<br>Group:		Individual Submission
<br>Pages:		15
<br>URL:            =20
<br>https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-0=
0.txt
<br>Status:         =20
<br>https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/
<br>Htmlized:       =20
<br>https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00
<br>
<br>
<br>Abstract:
<br>    Low-resource devices in a Low-power and Lossy Network (LLN) can
<br>    operate in a mesh network using the IPv6 over Low-power Personal =
Area
<br>    Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards.
<br>    Provisioning these devices in a secure manner with keys (often ca=
lled
<br>    security bootstrapping) used to encrypt and authenticate messages=
 is
<br>    the subject of Bootstrapping of Remote Secure Key Infrastructures=

<br>    (BRSKI) =5BI-D.ietf-anima-bootstrapping-keyinfra=5D.  Enrollment =
over
<br>    Secure Transport (EST) =5BR=46C7030=5D, based on TLS and HTTP, is=
 used for
<br>    BRSKI.  This document defines how low-resource devices are expect=
ed
<br>    to use EST over DTLS and CoAP. 6LoWPAN fragmentation management a=
nd
<br>    minor extensions to CoAP are needed to enable EST over DTLS-secur=
ed
<br>    CoAP (EST-coaps).
<br>
<br>
<br>
<br>
<br>Please note that it may take a couple of minutes from the time of sub=
mission until the htmlized version and diff are available at tools.ietf.o=
rg.
<br>
<br>The IET=46 Secretariat
<br>
<br>=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
<br>core mailing list
<br>core=40ietf.org
<br>https://www.ietf.org/mailman/listinfo/core
<br>
<br>=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
<br>core mailing list
<br>core=40ietf.org
<br>https://www.ietf.org/mailman/listinfo/core
<br>
<br></div></div></span></blockquote></body></html>
--5818bad3_28ba0ee2_9528--


From w.matt.long@gmail.com  Tue Nov  1 07:12:07 2016
Return-Path: <w.matt.long@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 304DA129527 for <core@ietfa.amsl.com>; Tue,  1 Nov 2016 07:12:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gMGpuKP-PwP7 for <core@ietfa.amsl.com>; Tue,  1 Nov 2016 07:12:06 -0700 (PDT)
Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E02161294C1 for <core@ietf.org>; Tue,  1 Nov 2016 07:12:05 -0700 (PDT)
Received: by mail-wm0-x230.google.com with SMTP id a197so80416866wmd.0 for <core@ietf.org>; Tue, 01 Nov 2016 07:12:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:from:date:message-id:subject:to; bh=7v+012Xxx0+4NtA8NlS/oHgdh/Cz0kh8OTXxuH8gE+w=; b=0e2ZIjF8QWepoDOeTmvelZSAT6ao3yui0G5XLKIGgMI+bHE6k5b0Hb/fbY3oijgc3p uRP4qaTHv42bTeFVu+HnWwkyuBGqRkgE8HJUQi2jVAsxMnJPPb75KrrRkrXKHn+JHYIQ FV66uZTb2tLsgD8bPt0Y87EwGLpb1ue5PjZJIJPLCSit4d+U2YcMid1Mzp6Vs+K1fVLi shn2kCAkgBiFeJmyx9gzqgvLT+O+PWypZrrIPYnZXJ6YUz9v5DYtJcMXCxRLe2CsCp5L j72xVjNZw2nsjw08G//hUStGonXuyA+jMrLNONDFMhundHQRllMvSurVhymP11Lq3BA2 +ygw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=7v+012Xxx0+4NtA8NlS/oHgdh/Cz0kh8OTXxuH8gE+w=; b=XKp4PveywzXJN7GgdmKeUczeDszKFF2/lC1Oh+CraInWJSqSViha4XzP00Vox7C3yR mETbaHsVxr4EKi2heerbubU1PPWJzvB6lEXubFq1Bp20MvCg4vH0gaVvXongxZicktOA dsvFpKm44e0me+o/P7K9sbSIh8xWf10SlSLEFSupNwv3Fwwduwwcrbz2tH/N6V9Ro0n7 Qtrut96pI3N7F6owYvnNSuhb+51WD/1+NOoLikxXv/59coN2K5LZieR2S9KyeIeDO7u7 c90EhsCufi6kuNh1nnX6+ev9M/IUibjPLaLFwNsmIEPTqkpEdXjNGrMeZd23F+mSWXIC /mTA==
X-Gm-Message-State: ABUngvd7RLMYhbnCDIFf8Ok3Ljs0NGJkB0N7JcbEZGcokYD/QAQMrwLOrlozUZPtve1XOx9BjrDDqBpPHU5Epg==
X-Received: by 10.194.112.196 with SMTP id is4mr4988957wjb.92.1478009524325; Tue, 01 Nov 2016 07:12:04 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.28.137.133 with HTTP; Tue, 1 Nov 2016 07:12:03 -0700 (PDT)
From: Matt Long <w.matt.long@gmail.com>
Date: Tue, 1 Nov 2016 09:12:03 -0500
Message-ID: <CA+kc3frHS5-d1D047QS-MyeJk=as9dVw2+KCwbuZ-z9Ex9SWwA@mail.gmail.com>
To: core@ietf.org
Content-Type: multipart/alternative; boundary=001a1130c8ecac166a05403de83d
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/AXiQJRiYBs0zTGARHzyZKL7wNag>
X-Mailman-Approved-At: Tue, 01 Nov 2016 09:22:06 -0700
Subject: [core] Question regarding RFC 7252
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Nov 2016 16:12:07 -0000

--001a1130c8ecac166a05403de83d
Content-Type: text/plain; charset=UTF-8

Behaviors for "Empty Message" (0.00) seems to be clearly defined with the
exception of a NON message sent.  If the expectation is RST response, then
section 1.2 (below) should contain "or Nonconfirmable" for clarity.
Otherwise, RFC 7252 is silent on the behavior.


"...provoking a reset message (e.g., by sending an Empty Confirmable
message) is also
      useful as an inexpensive check of the liveness of an endpoint
      ("CoAP ping")."

--001a1130c8ecac166a05403de83d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Behaviors for &quot;Empty Message&quot; (0.00) seems to be=
 clearly defined with the exception of a NON message sent.=C2=A0 If the exp=
ectation is RST response, then section 1.2 (below) should contain &quot;or =
Nonconfirmable&quot; for clarity.=C2=A0 Otherwise, RFC 7252 is silent on th=
e behavior.<div><br></div><div><br></div><div><pre class=3D"gmail-newpage">=
&quot;...provoking a reset message (e.g., by sending an Empty Confirmable m=
essage) is also
      useful as an inexpensive check of the liveness of an endpoint
      (&quot;CoAP ping&quot;).&quot;</pre><div><br></div><div><br><pre clas=
s=3D"gmail-newpage">      </pre><pre class=3D"gmail-newpage"><br></pre><pre=
 class=3D"gmail-newpage"><br></pre></div></div></div>

--001a1130c8ecac166a05403de83d--


From nobody Tue Nov  1 17:16:13 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C4C6129438; Tue,  1 Nov 2016 17:16:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UNfuRMDpo0Fk; Tue,  1 Nov 2016 17:16:09 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0130.outbound.protection.outlook.com [104.47.37.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C921129859; Tue,  1 Nov 2016 17:16:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9ABn8IulD7S3cDRc7seY4qAejqSkFy2exWGwgmxiapU=; b=lnHG4boPfP4CrvfSbuWy7a+GZ9XMWjyLPaZiTsc8KunFI7hxH8ZYKXnBsgq3L3HbXe6b5PUwZIkuU0pXlp138pDNW5HCv6bJZKuPU1xkP7Hl5eimZtP6GmxsjWfVO05kxyR7RvRcnwP9P1NnJDTna+na3iIhkR/AM4GnKpu6EFs=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2379.namprd03.prod.outlook.com (10.166.207.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Wed, 2 Nov 2016 00:16:06 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0693.009; Wed, 2 Nov 2016 00:16:06 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: =?utf-8?B?8J+UlCBXR0xDIG9uIGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHM=?=
Thread-Index: AQHSLpW5Z9gSQdMCvkatjPcQsteaNaDEzpZg
Date: Wed, 2 Nov 2016 00:16:05 +0000
Message-ID: <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com>
In-Reply-To: <D434CFFC.6B35D%goran.selander@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [174.61.159.182]
x-ms-office365-filtering-correlation-id: f950f117-ad71-4b9e-74fe-08d402b5704f
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2379; 7:MiQaKipQf6ZWv89/1WjeWNEMKjJnQ1rpj4cx0XdyWJzAigKksL4ck3aQbQRi3sHWCDioW7qrzOzorHCW66mSV23WsLaV3h8Ej3tj3C1JZjPxNfQunjlsXZKXdk3wSNiFvgP2kpo4905ahtxj7QC25lqA4vSjCi/MOGncXgHjkDV/db9zrGUf5Dk2eys3MiiHpDRs5sgQfQRzaHKVLJiybCbB8fA2JqzUZEo4p/fL/bZJXhjsAqZFF0rxqLJYHh4dK+LJGNYVo+ZN/FGNbp9LWXhQOfkDKrBfEuvIkaWzalX99RjaZ58dxBLQiH/2Z9M6RvIFSA28LCHqGm1rM109pZMySqrHl6gdJjFWfg05gzNuwjDcygQwwQWU/9RWzpC5
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR03MB2379;
x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr
x-microsoft-antispam-prvs: <CY1PR03MB2379FA57B021AB8EF860FE6583A00@CY1PR03MB2379.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(37575265505322)(190756311086443)(180628864354917)(166708455590820)(192374486261705)(100405760836317)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040176)(6045074)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038)(6046074)(6072074); SRVR:CY1PR03MB2379; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2379; 
x-forefront-prvs: 0114FF88F6
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(199003)(189002)(377454003)(76576001)(586003)(3660700001)(74316002)(50986999)(76176999)(16236675004)(54356999)(92566002)(10090500001)(5660300001)(229383001)(106116001)(8990500004)(106356001)(105586002)(189998001)(19625215002)(99286002)(10290500002)(3280700002)(122556002)(7846002)(7736002)(2950100002)(10400500002)(3846002)(5005710100001)(230783001)(7696004)(6116002)(790700001)(101416001)(5002640100001)(102836003)(19617315012)(7906003)(33656002)(97736004)(5001770100001)(8936002)(15975445007)(87936001)(77096005)(66066001)(2900100001)(4326007)(19580405001)(11100500001)(2906002)(9686002)(561944003)(19609705001)(19300405004)(68736007)(86612001)(81156014)(86362001)(19580395003)(81166006); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2379; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY1PR03MB23808242C1857DA8F3B2FE4983A00CY1PR03MB2380namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2016 00:16:05.9941 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2379
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/iQ_4AUzaEp6hieZuvD0dUX3NRA8>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>, Klaus Hartke <hartke@tzi.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 00:16:12 -0000

--_000_CY1PR03MB23808242C1857DA8F3B2FE4983A00CY1PR03MB2380namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_CY1PR03MB23808242C1857DA8F3B2FE4983A00CY1PR03MB2380namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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==

--_000_CY1PR03MB23808242C1857DA8F3B2FE4983A00CY1PR03MB2380namp_--


From nobody Tue Nov  1 17:20:11 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 141E21298C8; Tue,  1 Nov 2016 17:20:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yDb9RfP5Kn-b; Tue,  1 Nov 2016 17:20:08 -0700 (PDT)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0127.outbound.protection.outlook.com [104.47.34.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3867127078; Tue,  1 Nov 2016 17:20:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+ayyAP2TaSxW7P74oYMRoDl/edz8awQj7scSqKLMWW0=; b=LZFWNW752litn+bBOaC/XY3ssuXQSKVLeVFam3RYP14ul/eKoPF7tF3msDhnAYIHyfeJRAZwLYgLuI1TlmsbI2VCzKdCTvJdvUMm9QEHwCTCooZP+WikQ2OgPy4jt3nauzQgL9DvujXYmQIE7CExmAV08mSdmOC5BLGyPy9sWfI=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2377.namprd03.prod.outlook.com (10.166.207.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Wed, 2 Nov 2016 00:20:04 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0693.009; Wed, 2 Nov 2016 00:20:04 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: weigengyu <weigengyu@bupt.edu.cn>, =?utf-8?B?SmFpbWUgSmltw6luZXo=?= <jaime.jimenez@ericsson.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: =?utf-8?B?W2NvcmVdICDwn5SUIFdHTEMgb24gZHJhZnQtaWV0Zi1jb3JlLWNvYXAtdGNw?= =?utf-8?Q?-tls?=
Thread-Index: AQHSMPYnGfHyy//a/UCeQxCy5nyBwaDE2rjg
Date: Wed, 2 Nov 2016 00:20:04 +0000
Message-ID: <CY1PR03MB2380555392EFE6080B8861CC83A00@CY1PR03MB2380.namprd03.prod.outlook.com>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <6B253D16A10B43F396F0325ACEF50FE1@WeiGengyuPC>
In-Reply-To: <6B253D16A10B43F396F0325ACEF50FE1@WeiGengyuPC>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [174.61.159.182]
x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr
x-ms-office365-filtering-correlation-id: c039badf-cd1a-4206-40ef-08d402b5fe4a
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2377; 7:gVgnd8/iDwwfkiNle3BwhsJryOx25QsjRwlWj6c/HITI0ZMgECyXyufCSB6KGm71GDlqEi4grmcAi5zDM3J8zaPpMO4gghEM/Zod+FhsRMu1NRZ869EYILI2yyXbOP6ho/Q9AjLM9gyCSLRQLTq68KXB1ratsnAh3MmFG/5QUjG2F9RVQw4pF6Oqi8qP3Lsf5xRVgO459ssdOmDrB6qaqlB4wI/+qNWKlbhaSgVAhT7fDUZdgWHIsDyb+XNUxdZVXsUAXZvbMByknH54JdFtsPsmfHE9SuixrHK7XKHn/VBrxgLlfywIAKTJx8c/mB04qBQ8ifQpf6BX+4dPsKg+Q6I2FptX6ppUvPqQZnvwL/IPZ/zMTnQZTspbZ5SNFJFc
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR03MB2377;
x-microsoft-antispam-prvs: <CY1PR03MB23777225752FEBA61D55B8F583A00@CY1PR03MB2377.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(37575265505322)(190756311086443)(180628864354917)(166708455590820)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040176)(6045074)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(61426038)(61427038)(6046074)(6072074); SRVR:CY1PR03MB2377; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2377; 
x-forefront-prvs: 0114FF88F6
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(189002)(377454003)(199003)(10090500001)(54356999)(76176999)(68736007)(122556002)(9686002)(50986999)(19580405001)(7696004)(19580395003)(66066001)(2950100002)(19609705001)(2906002)(4326007)(101416001)(2171001)(87936001)(3900700001)(7736002)(7846002)(5660300001)(76576001)(81156014)(81166006)(19625215002)(74316002)(2501003)(92566002)(586003)(3846002)(86612001)(10290500002)(8990500004)(7906003)(2900100001)(11100500001)(3660700001)(3280700002)(8936002)(33656002)(106116001)(229383001)(106356001)(105586002)(230783001)(99286002)(97736004)(5001770100001)(189998001)(5002640100001)(19617315012)(19300405004)(102836003)(86362001)(790700001)(6116002)(5005710100001)(10400500002)(16236675004)(15975445007)(77096005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2377; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY1PR03MB2380555392EFE6080B8861CC83A00CY1PR03MB2380namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2016 00:20:04.2465 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2377
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/jXtC7NaCqASOwbSNIeFrZL9lknI>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>, Klaus Hartke <hartke@tzi.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 00:20:10 -0000

--_000_CY1PR03MB2380555392EFE6080B8861CC83A00CY1PR03MB2380namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

U2VlIHRoZSByZWxhdGVkIGlzc3VlIC0gaHR0cHM6Ly9naXRodWIuY29tL2NvcmUtd2cvY29hcC10
Y3AtdGxzL2lzc3Vlcy83MA0KDQpJIHBsYW4gb24gcmVtb3ZpbmcgdGhpcyBzZWN0aW9uIHdoaWNo
IHdhcyBtb3JlIGluIHRoZSBzcGlyaXQgb2YgYW4gZXhhbXBsZSBpbiBIYW5uZXPigJlzIGVhcmxp
ZXIgZHJhZnQuDQoNCg0KRnJvbTogd2VpZ2VuZ3l1IFttYWlsdG86d2VpZ2VuZ3l1QGJ1cHQuZWR1
LmNuXQ0KU2VudDogRnJpZGF5LCBPY3RvYmVyIDI4LCAyMDE2IDE6MzUgQU0NClRvOiBKYWltZSBK
aW3DqW5leiA8amFpbWUuamltZW5lekBlcmljc3Nvbi5jb20+OyBjb3JlQGlldGYub3JnDQpDYzog
S2xhdXMgSGFydGtlIDxoYXJ0a2VAdHppLm9yZz47IGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10
bHNAaWV0Zi5vcmc7IEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29t
Pg0KU3ViamVjdDogUmU6IFtjb3JlXSDwn5SUIFdHTEMgb24gZHJhZnQtaWV0Zi1jb3JlLWNvYXAt
dGNwLXRscw0KDQpIae+8jA0KDQpUaGVyZSBpcyBvbmUgcXVlc3Rpb24uDQoNCkluIHRoaXMgZHJh
ZnQsIGl0IGluY2x1ZGVzIOKAnCAyLjIuIFVEUC10by1UQ1AgZ2F0ZXdheXPigJ0NClRoaXMgc2Vl
bXMgdG8gaW1wbHkgdGhhdCBDb0FQIHJ1bnMgb3ZlciBVRFAsIHRoZW4gZ29lcyB0aHJvdWdoIGEg
Z2F0ZXdheSBvZiDigJxVRFAtdG8tVENQ4oCdLCBhbmQgQ29BUCBydW5zIG92ZXIgVENQLg0KQnkg
Q29BUCByZXF1ZXN0L3Jlc3BvbnNlIHNlbWFudGljcywgIGlmIGEgQ29BUCByZXF1ZXN0IGdvZXMg
dGhyb3VnaCB0aGUgZ2F0ZXdheSBvZiDigJxVRFAtdG8tVENQ4oCdLA0KdGhlIENvQVAgcmVzcG9u
c2Ugd2lsbCBnbyB0aHJvdWdoICB0aGUgZ2F0ZXdheSBvZiDigJxUQ1AtdG8tVURQ4oCdLg0KV2l0
aCB0aGUgZ2F0ZXdheSBvZiDigJxUQ1AtdG8tVURQ4oCdIENvQVAgY2FuIHdvcmsgYXQgbGVhc3Qu
DQoNCldoZXJlIGlzIHRoZSBwbGFjZSBvZiB0aGUgc3BlY2l0aWNhdGlvbnMgb2Yg4oCcVENQLXRv
LVVEUCBnYXRld2F54oCdID8NCg0KDQpSZWdhcmRzLA0KDQpHZW5neXUgV0VJDQpOZXR3b3JrIFRl
Y2hub2xvZ3kgQ2VudGVyDQpTY2hvb2wgb2YgQ29tcHV0ZXINCkJlaWppbmcgVW5pdmVyc2l0eSBv
ZiBQb3N0cyBhbmQgVGVsZWNvbW11bmljYXRpb25zDQoNCkZyb206IEphaW1lIEppbcOpbmV6PG1h
aWx0bzpqYWltZS5qaW1lbmV6QGVyaWNzc29uLmNvbT4NClNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIg
MTgsIDIwMTYgNToyMiBQTQ0KVG86IG1haWx0bzpjb3JlQGlldGYub3JnDQpDYzogS2xhdXMgSGFy
dGtlPG1haWx0bzpoYXJ0a2VAdHppLm9yZz4gOyBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxz
QGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzQGlldGYub3JnPiA7
IEhhbm5lcyBUc2Nob2ZlbmlnPG1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPg0KU3Vi
amVjdDogW2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzDQoN
CkRlYXIgQ29SRSBXRywNCg0KVGhlIGNvcmUtY29hcC10Y3AtdGxzIGRyYWZ0IGhhcyBnb3R0ZW4g
dG8gYSBzdGF0ZSB0aGF0IHRoZSBhdXRob3JzIGZlZWwgaXMgaW4gZ29vZCBzaGFwZSBmb3IgV0dM
Qy4NCldlIHdvdWxkIGxpa2UgdG8gYXNrIHRoZSBncm91cCB0byBzdGFydCBjaGVja2luZyB0aGlz
IGxhc3QgdmVyc2lvbiBhbmQgdGhlIGlzc3VlcyBvbiB0aGUgR2l0aHViIHJlcG9zaXRvcnkuDQoN
Cmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxz
LTA1DQoNClRoZXJlIGlzIGF0IHRoZSBtb21lbnQgb25lIG9wZW4gaXNzdWUgbGVmdCBpbiB0aGUg
dHJhY2tlciAoIGh0dHBzOi8vZ2l0aHViLmNvbS9jb3JlLXdnL2NvYXAtdGNwLXRscy9pc3N1ZXMv
MzEgICkgd2hpY2ggaXMgbW9zdGx5IGVkaXRvcmlhbC4gVGhlIGlzc3VlcyByYWlzZWQgZHVyaW5n
IGxhc3QgSUVURiAtIGFib3V0IE9ic2VydmUgb3ZlciByZWxpYWJsZSB0cmFuc3BvcnRzIC0gIGhh
dmUgYmVlbiBjbG9zZWQgYW5kIG5ldyB0ZXh0IGhhcyBiZWVuIGFkZGVkIHRvIHRoZSBhcHBlbmRp
eDogaHR0cHM6Ly9naXRodWIuY29tL2NvcmUtd2cvY29hcC10Y3AtdGxzL2lzc3Vlcy81DQoNCkJl
c3QgUmVnYXJkcywNCi0gLSBKYWltZSBKaW3DqW5leg0KDQpfX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fXw0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X18NCmNvcmUgbWFpbGluZyBsaXN0DQpjb3JlQGlldGYub3JnPG1haWx0bzpjb3JlQGlldGYub3Jn
Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3JlDQo=

--_000_CY1PR03MB2380555392EFE6080B8861CC83A00CY1PR03MB2380namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_CY1PR03MB2380555392EFE6080B8861CC83A00CY1PR03MB2380namp_--


From nobody Wed Nov  2 00:28:59 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6340F129471 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 00:28:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TIUoqH8cQgd6 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 00:28:56 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11770129417 for <core@ietf.org>; Wed,  2 Nov 2016 00:28:55 -0700 (PDT)
Received: from vsmta11.fe.internet.bosch.com (unknown [10.4.98.51]) by imta24.fe.bosch.de (Postfix) with ESMTP id EEAD8D800EA for <core@ietf.org>; Wed,  2 Nov 2016 08:28:53 +0100 (CET)
Received: from be6vw2exc00.bosch-si.com (vsgw23.fe.internet.bosch.com [10.4.98.23]) by vsmta11.fe.internet.bosch.com (Postfix) with ESMTP id 5863F2380C39 for <core@ietf.org>; Wed,  2 Nov 2016 08:28:53 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc00.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Wed, 2 Nov 2016 08:29:22 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNNrUQiFxM4jxF0uf7wXxo8NqTA==
Date: Wed, 2 Nov 2016 07:29:22 +0000
Message-ID: <1478071732.8543.7.camel@bosch-si.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <1049F45AAE5A4B47B066568468BECFCD@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22672.006
X-TMASE-MatchedRID: nUaX6WnR0eThuaNyIeP+cxWCVBr+Ay98hEIiqNvBrmMY0A95tjAn+7OL QBDhH6LBLmx6CwcRopwUTmQi97+uijI2mGvTdj4usyNb+yeIRAp4XLNBjM9D5JMxNpDOG+h68ox ws5NEUGhV0zXF6woEeU+OZCq3KwAJv6BXK4P/i1YZLjy91v7M5dbkquUQVQpuL/xHEOyoUfwlg0 P4KwZbnKLqiYUS9IVmi+zfZ24sxmKRQnbVeiX91pGtJGqXJFNbwAZu0JyCD/ybKItl61J/yfmS+ aPr0Ve8SXhbxZVQ5H+OhzOa6g8KrRPQdFVebwVSNjEtqNGjGir6/IxKVOLF5haQjnwXi3Rrn7WU 5dmipoRDDKa3G4nrLQ==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/xD7eABHb98bE03Hn3n0dFVmZXNE>
Subject: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 07:28:58 -0000
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From nobody Wed Nov  2 01:27:15 2016
Return-Path: <Achim.Kraus@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FE0C129490 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 01:27:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2zhIsavXV4Ii for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 01:27:11 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CA0E12947D for <core@ietf.org>; Wed,  2 Nov 2016 01:27:11 -0700 (PDT)
Received: from vsmta11.fe.internet.bosch.com (unknown [10.4.98.51]) by imta24.fe.bosch.de (Postfix) with ESMTP id 4F1D1D80141 for <core@ietf.org>; Wed,  2 Nov 2016 09:27:08 +0100 (CET)
Received: from IMBVW2EXC00.bosch-si.com (vsgw24.fe.internet.bosch.com [10.4.98.24]) by vsmta11.fe.internet.bosch.com (Postfix) with ESMTP id 3043B2380C38 for <core@ietf.org>; Wed,  2 Nov 2016 09:27:06 +0100 (CET)
Received: from IMBPW2EXD01.bosch-si.com ([fe80::d052:f355:928e:e5ba]) by IMBVW2EXC00 ([10.55.1.51]) with mapi id 14.03.0319.002; Wed, 2 Nov 2016 09:27:35 +0100
From: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>
To: "core@ietf.org WG" <core@ietf.org>
Thread-Topic: Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNNrUQiFxM4jxF0uf7wXxo8NqTKDFWrQA
Date: Wed, 2 Nov 2016 08:27:34 +0000
Message-ID: <BC36447FF5C62E46BEF3F124D3C1E8925E1F5E2C@imbpw2exd01.bosch-si.com>
References: <1478071732.8543.7.camel@bosch-si.com>
In-Reply-To: <1478071732.8543.7.camel@bosch-si.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.55.144.83]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22672.006
X-TMASE-MatchedRID: 3z7rH9YwHvXvXvInwhwK20K9qlwiTElfloP1dU1/5qOvloAnGr4qhj+z j3UoOhXMxjDxAMHu36bMUkPBkCEgxMbD4aZzngQU4nbwqqmOd2limi8LvNfmr3N4oJrDvdmB1xx lkjjIEL6C6m6j2cLF1OJlF/XBwGkWWCWxk51Kgn2db+Vq50kV4fmwbeWo3QuHCmZiYUUf05hqeZ +AzBMmzfnLgYpU4F/+4GwRH+lp7hqC1GdE5oylhARH1Nr7oERdBdebOqawiLtiZCTkFQiKcJY50 t4a+3g5FhWRAFBi/VVhjdPZ6iZcXJYH0xdtbvBRk3rl+MaNgxCSDmRgJT2o+XN5v6KtpQytWU4P VaxZEWP+cTYjc30iLS83Rst4LUB+mNrlAIQG7r/bNDWQseUeZSpMx3IbK4vmI2Nwy9MUiPchiFc gVFf3EL/nxCbgY4kQ0EoWQgt6rV8pz7oBrDd6eeor0PKDup1CIaLR+2xKRDLIvQIyugvKdfpGcU VZJmzPmuPiXafpzwvcnJHktq8LPVSd3xC25Fno+cKX6yCQ13tA5wWZjBcA8lwO3q59vT+EOlt91 MBw1ebi8zVgXoAltj2Xsf5MVCB1jaPj0W1qn0SQZS2ujCtcuA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/ubhXG70q5Rj8bcnWMDWFBT9ui-Q>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 08:27:13 -0000

SGkgS2FpLA0KDQpJIHBvc3RlZCBhIHJlbGF0ZWQgcXVlc3Rpb24gYWxzbyBvbiB0aGUgdGxzIG1h
aWxpbmcgbGlzdC4NCg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi90bHMv
Y3VycmVudC9tc2cyMTczNy5odG1sDQoNCiJEZWFyIEF1dGhvcnMsDQoNCmRyYWZ0LWZvc3NhdGkt
dGxzLWlvdC1vcHRpbWl6YXRpb25zLTAwIG1lbnRpb25zIGluIDQuMiwgcGFnZSA1LCBhIGhhc2gg
Y2hhaW4gKExhbXBlcnQsICJQYXNzd29yZCBBdXRoZW50aWNhdGlvbiB3aXRoIEluc2VjdXJlIENv
bW11bmljYXRpb24iKS4gDQoNCldvdWxkIGl0IGJlIHBvc3NpYmxlLCB0byBnZXQgbW9yZSBkZXRh
aWxzIGFib3V0IHRoYXQgYXBwcm9hY2g/DQoNCkluIG15IG9waW5pb24sIERUTFMgbmVlZHMgYSBj
b25uZWN0aW9uIGlkLCB0aGUgcmVjb3JkIGlzIHVzdWFsbHkgc2VjdXJlZCBieSB0aGUgTUFDLiAN
ClNvIHRoZSBoYXNoIGNoYWluIHByb3ZpZGluZyBhICJwYXNzd29yZCIgc2VlbXMgZm9yIG1lIHRv
IHJlbHkgb24gYSAiaWRlbnRpdHkiLCBmb3Igd2hpY2ggdGhlICJwYXNzd29yZCIgc2hvdWxkIGJl
IHZlcmlmaWVkLiANCkJ1dCB0aGF0IGlkZW50aXR5IGlzIG1pc3NpbmcgYW5kIHRoZSB2ZXJpZmlj
YXRpb24gaXMgZG9uZSB3aXRoIHRoZSBNQUMuDQoNClVzZSB0aGlzIGluIHJldmVyc2UsIEkgY291
bGQgdGhpbmsgb2Ygc29tZXRoaW5nIGFzOg0KDQpjb25uZWN0aW9uIGhhc2ggOj0gSCBeIHJlY29y
ZC5zZXF1ZW5jZV9udW1iZXIgKGNvbm5lY3Rpb24gaWQpDQogICAgDQpTbyB3aXRoIGFuIGluY29t
aW5nIHJlY29yZCB7c2VxdWVuY2VfbnVtYmVyLCBjb25uZWN0aW9uIGhhc2h9IHlvdSBtYXkgbG9v
ayB1cCwgaWYgImNvbm5lY3Rpb24gaWRzIiBoYXNoZWQNCiJzZXF1ZW5jZV9udW1iZXIiIHRpbWVz
IHJlc3VsdHMgaW4gdGhlIHByb3ZpZGVkICJjb25uZWN0aW9uIGhhc2giIGFuZCB0aGVuIHlvdSBt
YXkgdmVyaWZ5LCBpZiBvbmUgb2YgdGhlDQpjYW5kaWRhdGVzIHdpbGwgdmVyaWZ5IHdpdGggdGhl
IE1BQy4gIEV2ZW4gd2l0aCBkZWZpbmluZyBhICJzZXF1ZW5jZSBudW1iZXIgd2luZG93IiB0byBl
eGNsdWRlICJmYXJhd2F5Ig0Kc2Vzc2lvbnMsIEknbSBub3Qgc3VyZSwgIGhvdyBzdWNoIGFuIGFw
cHJvYWNoIHdvdWxkIHNjYWxlIGZvciBhIGxhcmdlIG51bWJlciBvZiBzZXNzaW9uLg0KDQpTbyBj
b3VsZCB5b3UgcGxlYXNlIHByb3ZpZGUgeW91ciBpZGVhcyBhYm91dCB0aGF0IGhhc2ggY2hhaW4/
Ig0KDQpTbyBob3BlZnVsbHkgd2UgZ2V0IHNvbWUgY2xhcmlmaWNhdGlvbiBvbiB0aGF0IGlzc3Vl
LCBldmVuIGlmIHRoZSBtYWluIGZvY3VzIGluIHRscyByaWdodCBub3cgc2VlbXMgdG8gYmUgdGxz
IDEuMy4NCg0KTWl0IGZyZXVuZGxpY2hlbiBHcsO8w59lbiAvIEJlc3QgcmVnYXJkcw0KDQpBY2hp
bSBLcmF1cw0KDQpCb3NjaCBTb2Z0d2FyZSBJbm5vdmF0aW9ucyBHbWJIDQpDb21tdW5pY2F0aW9u
cyAoSU5TVC9FU1kxKQ0KU3R1dHRnYXJ0ZXIgU3RyYcOfZSAxMzANCjcxMzMyIFdhaWJsaW5nZW4N
CkdFUk1BTlkNCnd3dy5ib3NjaC1zaS5kZQ0Kd3d3LmJsb2cuYm9zY2gtc2kuY29tIA0KDQpSZWdp
c3RlcmVkIG9mZmljZTogQmVybGluLCBSZWdpc3RlciBjb3VydDogQW10c2dlcmljaHQgQ2hhcmxv
dHRlbmJ1cmcsIEhSQiAxNDg0MTEgQg0KRXhlY3V0aXZlczogRHIuLUluZy4gUmFpbmVyIEthbGxl
bmJhY2g7IE1pY2hhZWwgSGFobg0KDQoNCg0KLS0tLS1VcnNwcsO8bmdsaWNoZSBOYWNocmljaHQt
LS0tLQ0KVm9uOiBjb3JlIFttYWlsdG86Y29yZS1ib3VuY2VzQGlldGYub3JnXSBJbSBBdWZ0cmFn
IHZvbiBIdWRhbGxhIEthaSAoSU5TVC9FU1kxKQ0KR2VzZW5kZXQ6IE1pdHR3b2NoLCAyLiBOb3Zl
bWJlciAyMDE2IDA4OjI5DQpBbjogY29yZUBpZXRmLm9yZw0KQmV0cmVmZjogW2NvcmVdIFF1ZXN0
aW9uIHJlZy4gZHJhZnQtZm9zc2F0aS10bHMtaW90LW9wdGltaXphdGlvbnMtMDANCg0KSGkgbGlz
dCwNCg0KSSBoYXZlIGF0dGVuZGVkIGxhc3Qgd2VlaydzIG1lZXRpbmcgb2YgdGhlIFQyVCBSRyBp
biBMdWR3aWdzYnVyZyB3aGVyZSB3ZSBoYWQgYSB2aXZpZCBkaXNjdXNzaW9uIGFyb3VuZCB0aGUg
cHJvYmxlbXMgb2YgRFRMUyBvbiBtb2JpbGUgYW5kIG90aGVyIE5BVGVkIG5ldHdvcmtzIHdoZXJl
IHRoZSBkZXZpY2UncyBJUCBhZGRyZXNzIGFuZC9vciBwb3J0IGFyZSBleHBlY3RlZCB0byBjaGFu
Z2Ugb25jZSBpbiBhIHdoaWxlLg0KDQpXZSBxdWlja2x5IGNhbWUgdG8gdGhlIGNvbmNsdXNpb24g
dGhhdCB0aGUgQ29BUCBzcGVjIHdpbGwgbmVlZCB0byBiZSBjaGFuZ2VkIGluIGEgd2F5IHRoYXQg
cmVtb3ZlcyB0aGUgdHJhbnNwb3J0J3MgYWRkcmVzc2luZyBpbmZvcm1hdGlvbiBmcm9tIHRoZSBS
ZXF1ZXN0L1Jlc3BvbnNlIG1hdGNoaW5nIGNyaXRlcmlhIHdoZW4gdXNpbmcgRFRMUy4NCg0KSG93
ZXZlciwgd2hhdCBhbHRlcm5hdGl2ZSBtZWNoYW5pc20gY291bGQgYmUgdXNlZCBpbnN0ZWFkPw0K
DQpTZWN0aW9uIDQuMiBvZiBkcmFmdC1mb3NzYXRpLXRscy1pb3Qtb3B0aW1pemF0aW9ucy0wMCBw
cm9wb3NlcyB0byB1c2UgYSBjb25uZWN0aW9uIElEIGFzIHBhcnQgb2YgdGhlIERUTFMgcmVjb3Jk
IHN0cnVjdHVyZS4gV2hpbGUgSSB1bmRlcnN0YW5kIHRoZSB1c2VmdWxuZXNzIG9mIHVzaW5nIGEg
ImxvbmcgdGVybSBpZGVudGlmaWVyIiBmb3IgYXNzb2NpYXRpbmcgdGhlIHNlc3Npb24gd2l0aCB0
aGUgY2xpZW50LCBJIGRvIG5vdCByZWFsbHkgdW5kZXJzdGFuZCwgaG93IGEgImhhc2ggY2hhaW4i
IGNvdWxkIGJlIHB1dCB0byB1c2UgaW4gdGhpcyBjb250ZXh0IHRvIHByb3ZpZGUgYW4gaW1wcm92
ZWQgbGV2ZWwgb2YgcHJpdmFjeS4NCg0KQ291bGQgc29tZW9uZSAob2YgdGhlIGF1dGhvcnMpIGNv
bW1lbnQgb24gdGhhdD8NCsKgDQotLQ0KTWl0IGZyZXVuZGxpY2hlbiBHcsO8w59lbiAvIEJlc3Qg
cmVnYXJkcw0KDQpLYWkgSHVkYWxsYQ0KQ2hpZWYgU29mdHdhcmUgQXJjaGl0ZWN0DQoNCkJvc2No
IFNvZnR3YXJlIElubm92YXRpb25zIEdtYkgNClNjaMO2bmViZXJnZXIgVWZlciA4OS05MQ0KMTA3
ODUgQmVybGluDQpHRVJNQU5ZDQp3d3cuYm9zY2gtc2kuY29tDQoNClJlZ2lzdGVyZWQgb2ZmaWNl
OiBCZXJsaW4sIFJlZ2lzdGVyIGNvdXJ0OiBBbXRzZ2VyaWNodCBDaGFybG90dGVuYnVyZywgSFJC
IDE0ODQxMSBCOw0KRXhlY3V0aXZlczogRHIuLUluZy4gUmFpbmVyIEthbGxlbmJhY2gsIE1pY2hh
ZWwgSGFobiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K
Y29yZSBtYWlsaW5nIGxpc3QNCmNvcmVAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21h
aWxtYW4vbGlzdGluZm8vY29yZQ0K


From nobody Wed Nov  2 02:37:29 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05334129A41 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 02:37:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9ieumx4qEwz7 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 02:37:26 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18715129A37 for <core@ietf.org>; Wed,  2 Nov 2016 02:37:26 -0700 (PDT)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id A7B73B143D02E; Wed,  2 Nov 2016 09:37:21 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA29bNGE016619 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 2 Nov 2016 09:37:23 GMT
Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uA29YhSP024131 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 2 Nov 2016 10:37:22 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0301.000; Wed, 2 Nov 2016 10:34:57 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNOxftrDwnBm7nkS6PSjsWoQnzw==
Date: Wed, 2 Nov 2016 09:34:56 +0000
Message-ID: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.38]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <B2C3B1E8C2FE5549B7A306FA59B5CF8F@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/5jf7gRq8g6K5taddvmwXU9C0YEE>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 09:37:28 -0000

Hi Kai, Achim (sorry for the late reply, I wasn't looking at the TLS list).

IIRC the idea came from Stephen (Farrell) in an attempt to add
privacy-preserving properties to the (potentially) long term identifier.

It's clearly a strawman and I'm happy to discuss its merits (in particular
the fact that when NAT rebinding happens without the client knowing it in
advance, the privacy of this is already gone) and impact in the IoT space
(in term of state that is kept on server side if handling multiple
connections at a time).

However, whatever the mechanism we come up with, I think privacy
preservation should be a goal, or at least something that is taken as a
first class criterion for selection.

Cheers, t


On 02/11/2016 07:29, "core on behalf of Hudalla Kai (INST/ESY1)"
<core-bounces@ietf.org on behalf of Kai.Hudalla@bosch-si.com> wrote:
>Hi list,
>
>I have attended last week's meeting of the T2T RG in Ludwigsburg where we
>had a
>vivid discussion around the problems of DTLS on mobile and other NATed
>networks
>where the device's IP address and/or port are expected to change once in
>a while.
>
>We quickly came to the conclusion that the CoAP spec will need to be
>changed in a
>way that removes the transport's addressing information from the
>Request/Response
>matching criteria when using DTLS.
>
>However, what alternative mechanism could be used instead?
>
>Section 4.2 of draft-fossati-tls-iot-optimizations-00 proposes to use a
>connection ID as part of the DTLS record structure. While I understand the
>usefulness of using a "long term identifier" for associating the session
>with the
>client, I do not really understand, how a "hash chain" could be put to
>use in
>this context to provide an improved level of privacy.
>
>Could someone (of the authors) comment on that?
>=20
>--=20
>Mit freundlichen Gr=FC=DFen / Best regards
>
>Kai Hudalla
>Chief Software Architect
>
>Bosch Software Innovations GmbH
>Sch=F6neberger Ufer 89-91
>10785 Berlin
>GERMANY
>www.bosch-si.com
>
>Registered office: Berlin, Register court: Amtsgericht Charlottenburg,
>HRB 148411 B;
>Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn
>_______________________________________________
>core mailing list
>core@ietf.org
>https://www.ietf.org/mailman/listinfo/core


From nobody Wed Nov  2 03:33:13 2016
Return-Path: <Achim.Kraus@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C05F129A94 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 03:33:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rLRT73AczrRO for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 03:33:05 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C259E12948A for <core@ietf.org>; Wed,  2 Nov 2016 03:33:04 -0700 (PDT)
Received: from vsmta12.fe.internet.bosch.com (unknown [10.4.98.52]) by imta23.fe.bosch.de (Postfix) with ESMTP id BD81615800EB for <core@ietf.org>; Wed,  2 Nov 2016 11:33:02 +0100 (CET)
Received: from IMBVW2EXC00.bosch-si.com (vsgw22.fe.internet.bosch.com [10.4.98.11]) by vsmta12.fe.internet.bosch.com (Postfix) with ESMTP id 5AE4B1B802CE for <core@ietf.org>; Wed,  2 Nov 2016 11:33:02 +0100 (CET)
Received: from IMBPW2EXD01.bosch-si.com ([fe80::d052:f355:928e:e5ba]) by IMBVW2EXC00 ([10.55.1.51]) with mapi id 14.03.0319.002; Wed, 2 Nov 2016 11:33:31 +0100
From: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNOxftrDwnBm7nkS6PSjsWoQnz6DFc/4w
Date: Wed, 2 Nov 2016 10:33:31 +0000
Message-ID: <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.55.144.83]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22672.006
X-TMASE-MatchedRID: rR9SQp8n2dyI0KPyMNrNUmiYls8x2M90g99C97sXB8BaW2Ktn+I8/gJi /2DIfq9Rez/EUh3QCyHHpZuZ3IYNvWFqPXSLpNdAQr2qXCJMSV9xueIW2fKuyBmdszUMJB8N7x9 p3gUCtau38hZSe5R4COIj5FCNOlGGMH15eekLeUjdVIk47x+oozuKSkmuy7/oseONmEIl6cJA4P VjVK5/Im+Zvj88gdTZddp9twAzPQfqdbO3BmJfQS97pb4g5HCtINC+F8tjh5Vb6PBUqmq+UgSZ5 qOGnBM5gct++BEaTInQ8BdF0tIzbAMWCgdCzp+adXz3l78F3Yk4WsSNiH/UXv5PMwphTQFKwrdU duPQbycjaqRm+lkbK0cl4K/01QBtTEZzxMifA6DWmh5xCo4mMCnGh6cFQ6shY8r/ndGdDsXLsLv Op8aQimL5s4ubXppG1OPX3xI6D8eRQnbVeiX91pGtJGqXJFNbGa8+8BBl2GZ9oMm9FgNHpPILKG vXWj5AjzgVoOjNndxbliWSnph9PlBG6pbcJ33UW3dczJ1Roxdwd1KoPLMiFO2bjZi+EXNnmtHuQ hKV0oOPvD59Vg5864k314wYp692CPZ3/cnGpCT6VYPrdDdperxy3Klthorp8GcWhSV/q9Vw7RHq jDtHrGW2u0246gKRy++vVUcR0QpPl4fYsHrovya1MaKuob8PC/ExpXrHizzgl5c3SmXK4vRWeCs wuZrgV+lCDzhvoi3QXnWb4yS/fd+v/jwN8PyKuZH4LSX2+NUbTlrvbfDnJ8A5YKm8dwM6WB1CTk tboe5V0zXF6woEeWfBx9sBf6lQxnBNS7lXiZeeAiCmPx4NwGNn8XPiALIb+gD2vYtOFhgqtq5d3 cxkNQP90fJP9eHt
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/2_Rtm5TYB_YTqNd0F413CwsABb0>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 10:33:09 -0000

Hi Thomas,

thanks for your answer.=20
Though draft-fossati-tls-iot-optimizations-00 was published in the tls wg, =
I posted my question there.

Currently I'm simply not sure, if I understood the approach right, but acco=
rding your answer,=20
I guess Stephen (Farrell) may be the right person, to give an answer.

With my understanding (see mail in tls, https://www.ietf.org/mail-archive/w=
eb/tls/current/msg21737.html),

I see following issues with the hash chain:
The scaling/performance depends on the "hash chain window" used to related =
the record to the dtls connection.
As larger the window, the more I'm in doubt, if that scales.
The robustness for clients, when we lose more packets then we assume in the=
 window.
As smaller the window, the more I'm in doubt, if it's robust enough.

There may be an escape using the "record sequence number" in a more sophist=
ic way
(e.g. using H(record.sequence_numer | connection_id) would help to skip fas=
ter over=20
lost messages, but still with a large number of clients/connections, I don'=
t see how this
scales). But right now I guess, we need more guidance, how it was intended.

Therefore I could think also of an alternative solution with an "connection=
 id ticket" system.
The DTLS server sends after the handshake a ticket with the "encrypted conn=
ection id".
The DTLS client decrypts that ticket into the connection id and, if the cli=
ent later =20
didn't receive a message for a certain period of time (e.g. 20s), it adds t=
hat connection id to
the records until it receives a new ticket (encrypted new connection id) .
When the client receives a new ticket, then it could send the messages agai=
n without the=20
connection id until it doesn't receive messages for the certain period of t=
ime, after which
the new ticket is used.
The DTLS server only accepts records with that "decrypted" connection id, i=
f the MAC check is passed.
It the adjusts the address/port and emits a new ticket. If the DTLS server =
receives "invalid"=20
(or no longer valid) connection ids, it uses the current address/port mappi=
ng to check the MAC and ignores
the message, when the check fails.=20
The advantage of that would be, that "high frequent" traffic doesn't requir=
e such a connection id,
so it would just be used for "rarely" communicating client periods. Indicat=
e with an extension, it would
leave the current DTLS implementation unchanged as long as they are proper =
working right now and
just offer an extension to those, wo would require it because of either to =
frequent address changes or
to limited bandwidth (for dtls resumes/handshakes).
And the server only needs those tickets, if the client and the server agree=
s on using them.

Mit freundlichen Gr=FC=DFen / Best regards

Achim Kraus

Bosch Software Innovations GmbH
Communications (INST/ESY1)
Stuttgarter Stra=DFe 130
71332 Waiblingen
GERMANY
www.bosch-si.de
www.blog.bosch-si.com=20

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB =
148411 B
Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn



-----Urspr=FCngliche Nachricht-----
Von: core [mailto:core-bounces@ietf.org] Im Auftrag von Fossati, Thomas (No=
kia - GB)
Gesendet: Mittwoch, 2. November 2016 10:35
An: Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.com>; core@ietf.org
Betreff: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00

Hi Kai, Achim (sorry for the late reply, I wasn't looking at the TLS list).

IIRC the idea came from Stephen (Farrell) in an attempt to add privacy-pres=
erving properties to the (potentially) long term identifier.

It's clearly a strawman and I'm happy to discuss its merits (in particular =
the fact that when NAT rebinding happens without the client knowing it in a=
dvance, the privacy of this is already gone) and impact in the IoT space (i=
n term of state that is kept on server side if handling multiple connection=
s at a time).

However, whatever the mechanism we come up with, I think privacy preservati=
on should be a goal, or at least something that is taken as a first class c=
riterion for selection.

Cheers, t


On 02/11/2016 07:29, "core on behalf of Hudalla Kai (INST/ESY1)"
<core-bounces@ietf.org on behalf of Kai.Hudalla@bosch-si.com> wrote:
>Hi list,
>
>I have attended last week's meeting of the T2T RG in Ludwigsburg where=20
>we had a vivid discussion around the problems of DTLS on mobile and=20
>other NATed networks where the device's IP address and/or port are=20
>expected to change once in a while.
>
>We quickly came to the conclusion that the CoAP spec will need to be=20
>changed in a way that removes the transport's addressing information=20
>from the Request/Response matching criteria when using DTLS.
>
>However, what alternative mechanism could be used instead?
>
>Section 4.2 of draft-fossati-tls-iot-optimizations-00 proposes to use a=20
>connection ID as part of the DTLS record structure. While I understand=20
>the usefulness of using a "long term identifier" for associating the=20
>session with the client, I do not really understand, how a "hash chain"=20
>could be put to use in this context to provide an improved level of=20
>privacy.
>
>Could someone (of the authors) comment on that?
>=20
>--
>Mit freundlichen Gr=FC=DFen / Best regards
>
>Kai Hudalla
>Chief Software Architect
>
>Bosch Software Innovations GmbH
>Sch=F6neberger Ufer 89-91
>10785 Berlin
>GERMANY
>www.bosch-si.com
>
>Registered office: Berlin, Register court: Amtsgericht Charlottenburg,=20
>HRB 148411 B;
>Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn=20
>_______________________________________________
>core mailing list
>core@ietf.org
>https://www.ietf.org/mailman/listinfo/core

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Wed Nov  2 07:11:03 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 258B1129661 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 07:11:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4uvSRu5aJGXl for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 07:10:59 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E39F12956D for <core@ietf.org>; Wed,  2 Nov 2016 07:10:59 -0700 (PDT)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id 3E1F7ED17426; Wed,  2 Nov 2016 14:10:54 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA2EAuRv019429 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 2 Nov 2016 14:10:57 GMT
Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uA2EAq9b023096 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 2 Nov 2016 15:10:56 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0301.000; Wed, 2 Nov 2016 15:10:54 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [ALU] Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNRLsxw+ZhmUfhkiE76fll++38g==
Date: Wed, 2 Nov 2016 14:10:53 +0000
Message-ID: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.38]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <E0E8B4E85FD3A94CB3EB32A70CD8B859@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Ww4m3j4Hp3v1ODQnQbD1B9pOvao>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 14:11:02 -0000

Hi Achim,

On 02/11/2016 10:33, "core on behalf of Kraus Achim (INST/ESY1)"
<core-bounces@ietf.org on behalf of Achim.Kraus@bosch-si.com> wrote:
>Though draft-fossati-tls-iot-optimizations-00 was published in the tls
>wg, I posted my question there.

Yes, you made the correct assumption, my fault.

>Currently I'm simply not sure, if I understood the approach right, but
>according your answer,
>I guess Stephen (Farrell) may be the right person, to give an answer.
>
>With my understanding (see mail in tls,
>https://www.ietf.org/mail-archive/web/tls/current/msg21737.html),

The idea is that, during handshake, client and server negotiate the CID
extension.

As usual with TLS, client proposes the extension, in this case indicating
the desired length of the hash chain (i.e., the number of different CIDs)
to use.

If server supports the CID extension, it replies with the effective length
of the hash chain ("L"), which shall be equal or less than what the client
proposed.

The shared secret output by the handshake is used to produce an ordered
list of "L" CIDs.  I don't think it really matters that the production
happens via a hash chain, or any other mechanism, as long as:
1. The produced list is the same on both sides of the wire (in values,
length and cardinality);
2. An external observer doesn't learn anything about the next CID(s) by
passively looking at the CID(s) that have circulated so far.

(I guess a "for i in 1..L: CID[i] =3D HMAC(shared_secret, string(i))" would
fit the purpose.)

>I see following issues with the hash chain:
>The scaling/performance depends on the "hash chain window" used to
>related the record to the dtls connection.
>As larger the window, the more I'm in doubt, if that scales.

I agree.  That's why I think "client proposes, server chooses" is the
right way to negotiate it.

>The robustness for clients, when we lose more packets then we assume in
>the window.
>As smaller the window, the more I'm in doubt, if it's robust enough.

I'm not sure I understand your concern here.

The idea is that the client has it's own "CID shift" policy (e.g., based
on time, or number of packets exchanged, NAT rebinding awareness, etc.)
and will decide unilaterally when to move to the next CID in chain, until
the chain is exhausted.  The server will mirror the last CID received.  In
this scheme, packet loss has no impact as long as client keeps alive CIDs
that have been shifted but not yet "acknowledged" by the server on the
back channel.  (This is true if both sides keep the chain in place for as
long as the security association is active.)

>There may be an escape using the "record sequence number" in a more
>sophistic way
>(e.g. using H(record.sequence_numer | connection_id) would help to skip
>faster over=20
>lost messages, but still with a large number of clients/connections, I
>don't see how this
>scales). But right now I guess, we need more guidance, how it was
>intended.
>
>Therefore I could think also of an alternative solution with an
>"connection id ticket" system.
>The DTLS server sends after the handshake a ticket with the "encrypted
>connection id".
>The DTLS client decrypts that ticket into the connection id and, if the
>client later =20
>didn't receive a message for a certain period of time (e.g. 20s), it adds
>that connection id to
>the records until it receives a new ticket (encrypted new connection id) .
>When the client receives a new ticket, then it could send the messages
>again without the=20
>connection id until it doesn't receive messages for the certain period of
>time, after which
>the new ticket is used.
>The DTLS server only accepts records with that "decrypted" connection id,
>if the MAC check is passed.
>It the adjusts the address/port and emits a new ticket. If the DTLS
>server receives "invalid"
>(or no longer valid) connection ids, it uses the current address/port
>mapping to check the MAC and ignores
>the message, when the check fails.
>The advantage of that would be, that "high frequent" traffic doesn't
>require such a connection id,
>so it would just be used for "rarely" communicating client periods.
>Indicate with an extension, it would
>leave the current DTLS implementation unchanged as long as they are
>proper working right now and
>just offer an extension to those, wo would require it because of either
>to frequent address changes or
>to limited bandwidth (for dtls resumes/handshakes).
>And the server only needs those tickets, if the client and the server
>agrees on using them.

Sorry, I'm not sure I completely understand the advantage of this scheme.

Cheers, thanks,
t


From nobody Wed Nov  2 08:06:08 2016
Return-Path: <Achim.Kraus@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E82512968F for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 08:06:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ViCACoMYagMC for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 08:06:03 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A420129695 for <core@ietf.org>; Wed,  2 Nov 2016 08:05:45 -0700 (PDT)
Received: from vsmta14.fe.internet.bosch.com (unknown [10.4.98.54]) by imta24.fe.bosch.de (Postfix) with ESMTP id 3E1E6D80234 for <core@ietf.org>; Wed,  2 Nov 2016 16:05:43 +0100 (CET)
Received: from IMBVW2EXC00.bosch-si.com (vsgw22.fe.internet.bosch.com [10.4.98.11]) by vsmta14.fe.internet.bosch.com (Postfix) with ESMTP id DE76BA40590 for <core@ietf.org>; Wed,  2 Nov 2016 16:05:42 +0100 (CET)
Received: from IMBPW2EXD01.bosch-si.com ([fe80::d052:f355:928e:e5ba]) by IMBVW2EXC00 ([10.55.1.51]) with mapi id 14.03.0319.002; Wed, 2 Nov 2016 16:06:11 +0100
From: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [ALU] Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNRLs0DzZ1PqvykK5kaEFUvT3CKDFxvJQ
Date: Wed, 2 Nov 2016 15:06:10 +0000
Message-ID: <BC36447FF5C62E46BEF3F124D3C1E8925E1F5FE0@imbpw2exd01.bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.55.144.83]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22674.005
X-TMASE-MatchedRID: rR9SQp8n2dynvKBG3nzfs4GU23hVIa8htV/WmjC/PZz+7KZICEbEsr2+ Pt89anuunKE4rOlProdk+f+u7ucyPEWzDYun6RK4kcT+m3MjC/GNxR0omuRmzfBnFoUlf6vV8ia X9/PyT2/SLjVT6XgkiE+pP/HNsYl9ZMWKXMYF1HGomy3eaWZ2rhiUT+SOigqjsneuamRRT5NZTg 9VrFkRY/5xNiNzfSItLzdGy3gtQH6Y2uUAhAbuv9s0NZCx5R5lyZnHhh2CJcHTSAChmmK9q7xe1 NYbxSb2ktlaPObHyZ/ZJ0Uya1cAHUkkO4zqprNOoiN8YTmq+ctAq6/y5AEOOn3hz57t9YhwLVdi eW1lpmfnuQ7voWOcwJ29frqI6SG4Jh+OBwdOGm2dVNZaI2n6/+yVOVUfUmM3NhJlCSBtGYVPdGN xzQGgqJZvHoc+LR11/njIDSnhvTvBpzFhXMIZwBfY306nA3boXccelkX/ubAFXFSkfaz0cb7qf3 d2iYd478jtP3NLmadbyi58IgIlUQ3OSHz4ECKIlUgQqGVMqmxbdOqDH81KSlarYdToziqFI6qq9 xPsXYg/HtJ6KuaFTRGt83D2EF7mUTBGEh9acJ7aGKmW8Fvr+81tmgdYBx2TgrAXgr/AjP1SORTg s15i+YfCQU/fOXWozTmXxAu2YgRc2P5E7apuk4Dqq/69HfgsvINwS316IVk3Z3efQH+wj/kUmy1 Y1jH8bHaHOqIKwmCMQ8lX2fpjiKJVrIWbE6AHL3ulviDkcK0g0L4Xy2OHlVvo8FSqar5SJdw7p+ h3NGXoO3k0KbK5Zf2+4Yrz7738A3d5yEnIF2CeAiCmPx4NwGNn8XPiALIb+gD2vYtOFhgqtq5d3 cxkNZUPcyuPMqCvO4hDttPPCITrXNoHH/WyaZdLK7MFkCfzkARX3j2Qoz0=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/dQv1aXQpycbyimpLOQVZwrnmqV0>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 15:06:06 -0000

Hi Thomas,

thanks! That's makes the intention of the hash chain much clearer!
=20
If it's just intended, that the client uses a fixed sized list/set of CIDs =
and may repeats a CID or chose a other=20
CID from the list (as long as the CID is not acknowledged), I don't see my =
"robustness" issue.
   =20
(I thought,  that the list of CIDs is "almost infinite" and on incrementing=
 the record sequence number the
next H() is called to ensure, that every record has its own CID. With that,=
 it's evil, if the hashs are only=20
calculated for e.g. 8 records ahead, but, caused by whatever, more messages=
 then 8 are dropped. )

Mit freundlichen Gr=FC=DFen / Best regards

Achim Kraus

Bosch Software Innovations GmbH
Communications (INST/ESY1)
Stuttgarter Stra=DFe 130
71332 Waiblingen
GERMANY
www.bosch-si.de
www.blog.bosch-si.com=20

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB =
148411 B
Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn



-----Urspr=FCngliche Nachricht-----
Von: Fossati, Thomas (Nokia - GB) [mailto:thomas.fossati@nokia.com]=20
Gesendet: Mittwoch, 2. November 2016 15:11
An: Kraus Achim (INST/ESY1) <Achim.Kraus@bosch-si.com>; core@ietf.org
Betreff: Re: [ALU] Re: [core] Question reg. draft-fossati-tls-iot-optimizat=
ions-00

Hi Achim,

On 02/11/2016 10:33, "core on behalf of Kraus Achim (INST/ESY1)"
<core-bounces@ietf.org on behalf of Achim.Kraus@bosch-si.com> wrote:
>Though draft-fossati-tls-iot-optimizations-00 was published in the tls=20
>wg, I posted my question there.

Yes, you made the correct assumption, my fault.

>Currently I'm simply not sure, if I understood the approach right, but=20
>according your answer, I guess Stephen (Farrell) may be the right=20
>person, to give an answer.
>
>With my understanding (see mail in tls,=20
>https://www.ietf.org/mail-archive/web/tls/current/msg21737.html),

The idea is that, during handshake, client and server negotiate the CID ext=
ension.

As usual with TLS, client proposes the extension, in this case indicating t=
he desired length of the hash chain (i.e., the number of different CIDs) to=
 use.

If server supports the CID extension, it replies with the effective length =
of the hash chain ("L"), which shall be equal or less than what the client =
proposed.

The shared secret output by the handshake is used to produce an ordered lis=
t of "L" CIDs.  I don't think it really matters that the production happens=
 via a hash chain, or any other mechanism, as long as:
1. The produced list is the same on both sides of the wire (in values, leng=
th and cardinality); 2. An external observer doesn't learn anything about t=
he next CID(s) by passively looking at the CID(s) that have circulated so f=
ar.

(I guess a "for i in 1..L: CID[i] =3D HMAC(shared_secret, string(i))" would=
 fit the purpose.)

>I see following issues with the hash chain:
>The scaling/performance depends on the "hash chain window" used to=20
>related the record to the dtls connection.
>As larger the window, the more I'm in doubt, if that scales.

I agree.  That's why I think "client proposes, server chooses" is the right=
 way to negotiate it.

>The robustness for clients, when we lose more packets then we assume in=20
>the window.
>As smaller the window, the more I'm in doubt, if it's robust enough.

I'm not sure I understand your concern here.

The idea is that the client has it's own "CID shift" policy (e.g., based on=
 time, or number of packets exchanged, NAT rebinding awareness, etc.) and w=
ill decide unilaterally when to move to the next CID in chain, until the ch=
ain is exhausted.  The server will mirror the last CID received.  In this s=
cheme, packet loss has no impact as long as client keeps alive CIDs that ha=
ve been shifted but not yet "acknowledged" by the server on the back channe=
l.  (This is true if both sides keep the chain in place for as long as the =
security association is active.)

>There may be an escape using the "record sequence number" in a more=20
>sophistic way (e.g. using H(record.sequence_numer | connection_id)=20
>would help to skip faster over lost messages, but still with a large=20
>number of clients/connections, I don't see how this scales). But right=20
>now I guess, we need more guidance, how it was intended.
>
>Therefore I could think also of an alternative solution with an=20
>"connection id ticket" system.
>The DTLS server sends after the handshake a ticket with the "encrypted=20
>connection id".
>The DTLS client decrypts that ticket into the connection id and, if the=20
>client later didn't receive a message for a certain period of time=20
>(e.g. 20s), it adds that connection id to the records until it receives=20
>a new ticket (encrypted new connection id) .
>When the client receives a new ticket, then it could send the messages=20
>again without the connection id until it doesn't receive messages for=20
>the certain period of time, after which the new ticket is used.
>The DTLS server only accepts records with that "decrypted" connection=20
>id, if the MAC check is passed.
>It the adjusts the address/port and emits a new ticket. If the DTLS=20
>server receives "invalid"
>(or no longer valid) connection ids, it uses the current address/port=20
>mapping to check the MAC and ignores the message, when the check fails.
>The advantage of that would be, that "high frequent" traffic doesn't=20
>require such a connection id, so it would just be used for "rarely"=20
>communicating client periods.
>Indicate with an extension, it would
>leave the current DTLS implementation unchanged as long as they are=20
>proper working right now and just offer an extension to those, wo would=20
>require it because of either to frequent address changes or to limited=20
>bandwidth (for dtls resumes/handshakes).
>And the server only needs those tickets, if the client and the server=20
>agrees on using them.

Sorry, I'm not sure I completely understand the advantage of this scheme.

Cheers, thanks,
t


From nobody Wed Nov  2 08:49:15 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62F461296B9 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 08:49:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4WvlnbQCn8vF for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 08:48:54 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53D68128874 for <core@ietf.org>; Wed,  2 Nov 2016 08:48:54 -0700 (PDT)
Received: from vsmta13.fe.internet.bosch.com (unknown [10.4.98.53]) by imta23.fe.bosch.de (Postfix) with ESMTP id 3754E15800BA for <core@ietf.org>; Wed,  2 Nov 2016 16:48:52 +0100 (CET)
Received: from be6vw2exc01.bosch-si.com (vsgw24.fe.internet.bosch.com [10.4.98.24]) by vsmta13.fe.internet.bosch.com (Postfix) with ESMTP id 99C512E4032A for <core@ietf.org>; Wed,  2 Nov 2016 16:48:51 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc01.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Wed, 2 Nov 2016 16:49:20 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNRLsxw+ZhmUfhkiE76fll++38qDFxkwA
Date: Wed, 2 Nov 2016 15:49:20 +0000
Message-ID: <1478101730.3603.9.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <29B1C6BFD769BC40AAB1659BC02E4131@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22674.005
X-TMASE-MatchedRID: qsaWi0FWcYuwtrD/qG0ruia1MaKuob8PC/ExpXrHizxlRzIE7Ct1DGKp MJoimBcb6BK26O6ZLjuRo6QHiw+C9c1ybZtba3mcaJiWzzHYz3S0k7HugtylSJUQzHWBKOFAOaw ylDS+jFqekrOjtm4oRm2mEJbW9AZhf+uqpAZbKofgcGljJ5AnZylayzmQ9QV0uFgZ2FJVs4xjPe BHMnDSMHn3uXOA53T6/njIDSnhvTvBpzFhXMIZwBfY306nA3boXccelkX/ubAFXFSkfaz0cb7qf 3d2iYd478jtP3NLmadbyi58IgIlUQ3OSHz4ECKIlUgQqGVMqmxbdOqDH81KSlarYdToziqFI6qq 9xPsXYg/HtJ6KuaFTcyP6PRI7KmHdwEIsxXSnzpVTfJWlqPdDCH2Y0Xxk8nYgrAXgr/AjP0s7EL qy7JDxksZxKIDfViuZEMv0zWaXme5Hmf1ZFy/igL09KI3I2Dpd29HD0hr7HaFc6z4a7q/xRxwZG G1rlDqz38PBR1z87n5ULgjwq+ERVkmrXvRXTvgdu0sr+M0vAs7UrmIzxDooCJ8zskw0dbrXdIam khiua9OePlKVqhFdWlDZJI0ni2HcdV1fv9AzTDY5KPiokD1Bpb07sTmkdICmyiLZetSf8n5kvmj 69FXvKEwgORH8p/AjaPj0W1qn0SyO81X3yak87JRT27XYy9G1c1yFni0x8sYSyDoLIdTn3TpZme Xfo+0xoCyS+kAhut+3BndfXUhXQ==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/anKQzPHMzrfUo9b9OjOwepHKI4c>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 15:49:05 -0000
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From nobody Wed Nov  2 09:08:45 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 103E21294C5 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 09:08:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level: 
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gDvu4XjNydo2 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 09:08:40 -0700 (PDT)
Received: from 9.mo5.mail-out.ovh.net (9.mo5.mail-out.ovh.net [178.32.96.204]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C737129462 for <core@ietf.org>; Wed,  2 Nov 2016 09:08:40 -0700 (PDT)
Received: from player692.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo5.mail-out.ovh.net (Postfix) with ESMTP id 84A973B533 for <core@ietf.org>; Wed,  2 Nov 2016 17:08:37 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player692.ha.ovh.net (Postfix) with ESMTPSA id 68D506000BA; Wed,  2 Nov 2016 17:08:35 +0100 (CET)
To: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
Date: Wed, 2 Nov 2016 17:08:34 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 1118300086453745831
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeefgdekfecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Jd55hFQqLBInzdYr1NYa5ZlRzIg>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 16:08:43 -0000

Hi all,

    I'm not sure to understand the point here.
    *   The "draft-fossati-tls-iot-optimizations-00" says "The privacy 
issue associated with the use of a long-term identifier
    must be taken into consideration."
    *   Thomas says "I think privacy preservation should be a goal".

    I would like to understand which privacy concern we would like to 
achieve exactly ? With TLS we have end to end encryption. You want to 
add a kind of  anonymity ? or maybe protect ourself from connectionid 
spoofing ?
    From my point of view, the connection id is just a way to replace 
the IP address by a connection identifier for use-cases where IP address 
is not fixed. So we have the same security level with connection id than 
fixed IP. We are maybe a bit more exposed to spoofing as connectionid 
spoofing is probably more simple than UDP IP address spoofing, but not 
so much. I mean connectionid is just another way to retrieve security 
context needed to decrypt Application Data.

    About CoAP Observation behind a NAT using DTLS, I think we have 
several issues.

    *  First one: define a long term identifier for CoAP. At CoAP level 
users would like to know from which or to which they send data, nothing 
more. IMHO, using the DTLS identity seems the better choice. (PSK 
identity for PSK, public key for RPK, CN for certificate). From my point 
of view there is no need to strongly link this to the DTLS session as it 
was currently the case in CoAP spec [1][2]. Nobody seems really able to 
explain this choice and this doesn't work behind NAT. With this 
constraint, it can also be tempting to increase the session lifetime to 
be able to increase the observation lifetime which seems not to be a 
good idea as security level.
    *  Second point: be able to use DTLS with dynamic IP address (e.g. 
NAT) without the need to redo full handshake or resume handshake. The 
"connectionId" proposed in this draft seems to resolve the issue. It 
could also really help to do load balancing using this connectionid 
instead of IP address in a cluster environment.

Simon

[1]https://tools.ietf.org/html/rfc7641#section-7 (All notifications 
resulting from a GET request with an Observe Option MUST be returned 
within the same epoch of the same connection as the request.)
[2]https://tools.ietf.org/html/rfc7252#section-9.1.1 (The DTLS session 
MUST be the same, and the epoch MUST be the same.)

Le 02/11/2016 à 11:33, Kraus Achim (INST/ESY1) a écrit :

> Hi Thomas,
>
> thanks for your answer.
> Though draft-fossati-tls-iot-optimizations-00 was published in the tls wg, I posted my question there.
>
> Currently I'm simply not sure, if I understood the approach right, but according your answer,
> I guess Stephen (Farrell) may be the right person, to give an answer.
>
> With my understanding (see mail in tls, https://www.ietf.org/mail-archive/web/tls/current/msg21737.html),
>
> I see following issues with the hash chain:
> The scaling/performance depends on the "hash chain window" used to related the record to the dtls connection.
> As larger the window, the more I'm in doubt, if that scales.
> The robustness for clients, when we lose more packets then we assume in the window.
> As smaller the window, the more I'm in doubt, if it's robust enough.
>
> There may be an escape using the "record sequence number" in a more sophistic way
> (e.g. using H(record.sequence_numer | connection_id) would help to skip faster over
> lost messages, but still with a large number of clients/connections, I don't see how this
> scales). But right now I guess, we need more guidance, how it was intended.
>
> Therefore I could think also of an alternative solution with an "connection id ticket" system.
> The DTLS server sends after the handshake a ticket with the "encrypted connection id".
> The DTLS client decrypts that ticket into the connection id and, if the client later
> didn't receive a message for a certain period of time (e.g. 20s), it adds that connection id to
> the records until it receives a new ticket (encrypted new connection id) .
> When the client receives a new ticket, then it could send the messages again without the
> connection id until it doesn't receive messages for the certain period of time, after which
> the new ticket is used.
> The DTLS server only accepts records with that "decrypted" connection id, if the MAC check is passed.
> It the adjusts the address/port and emits a new ticket. If the DTLS server receives "invalid"
> (or no longer valid) connection ids, it uses the current address/port mapping to check the MAC and ignores
> the message, when the check fails.
> The advantage of that would be, that "high frequent" traffic doesn't require such a connection id,
> so it would just be used for "rarely" communicating client periods. Indicate with an extension, it would
> leave the current DTLS implementation unchanged as long as they are proper working right now and
> just offer an extension to those, wo would require it because of either to frequent address changes or
> to limited bandwidth (for dtls resumes/handshakes).
> And the server only needs those tickets, if the client and the server agrees on using them.
>
> Mit freundlichen Grüßen / Best regards
>
> Achim Kraus
>
> Bosch Software Innovations GmbH
> Communications (INST/ESY1)
> Stuttgarter Straße 130
> 71332 Waiblingen
> GERMANY
> www.bosch-si.de
> www.blog.bosch-si.com
>
> Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB 148411 B
> Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: core [mailto:core-bounces@ietf.org] Im Auftrag von Fossati, Thomas (Nokia - GB)
> Gesendet: Mittwoch, 2. November 2016 10:35
> An: Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.com>; core@ietf.org
> Betreff: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
>
> Hi Kai, Achim (sorry for the late reply, I wasn't looking at the TLS list).
>
> IIRC the idea came from Stephen (Farrell) in an attempt to add privacy-preserving properties to the (potentially) long term identifier.
>
> It's clearly a strawman and I'm happy to discuss its merits (in particular the fact that when NAT rebinding happens without the client knowing it in advance, the privacy of this is already gone) and impact in the IoT space (in term of state that is kept on server side if handling multiple connections at a time).
>
> However, whatever the mechanism we come up with, I think privacy preservation should be a goal, or at least something that is taken as a first class criterion for selection.
>
> Cheers, t
>
>
> On 02/11/2016 07:29, "core on behalf of Hudalla Kai (INST/ESY1)"
> <core-bounces@ietf.org on behalf of Kai.Hudalla@bosch-si.com> wrote:
>> Hi list,
>>
>> I have attended last week's meeting of the T2T RG in Ludwigsburg where
>> we had a vivid discussion around the problems of DTLS on mobile and
>> other NATed networks where the device's IP address and/or port are
>> expected to change once in a while.
>>
>> We quickly came to the conclusion that the CoAP spec will need to be
>> changed in a way that removes the transport's addressing information
> >from the Request/Response matching criteria when using DTLS.
>> However, what alternative mechanism could be used instead?
>>
>> Section 4.2 of draft-fossati-tls-iot-optimizations-00 proposes to use a
>> connection ID as part of the DTLS record structure. While I understand
>> the usefulness of using a "long term identifier" for associating the
>> session with the client, I do not really understand, how a "hash chain"
>> could be put to use in this context to provide an improved level of
>> privacy.
>>
>> Could someone (of the authors) comment on that?
>>
>> --
>> Mit freundlichen Grüßen / Best regards
>>
>> Kai Hudalla
>> Chief Software Architect
>>
>> Bosch Software Innovations GmbH
>> Schöneberger Ufer 89-91
>> 10785 Berlin
>> GERMANY
>> www.bosch-si.com
>>
>> Registered office: Berlin, Register court: Amtsgericht Charlottenburg,
>> HRB 148411 B;
>> Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Wed Nov  2 09:24:44 2016
Return-Path: <Achim.Kraus@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 018C7128E18 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 09:24:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qi4mtB7zmrHZ for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 09:24:40 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3D1412947E for <core@ietf.org>; Wed,  2 Nov 2016 09:24:39 -0700 (PDT)
Received: from vsmta12.fe.internet.bosch.com (unknown [10.4.98.52]) by imta24.fe.bosch.de (Postfix) with ESMTP id CAD4CD800EA for <core@ietf.org>; Wed,  2 Nov 2016 17:24:36 +0100 (CET)
Received: from imbvw2exc01.bosch-si.com (vsgw22.fe.internet.bosch.com [10.4.98.11]) by vsmta12.fe.internet.bosch.com (Postfix) with ESMTP id 271B31B80353 for <core@ietf.org>; Wed,  2 Nov 2016 17:24:36 +0100 (CET)
Received: from IMBPW2EXD01.bosch-si.com ([fe80::d052:f355:928e:e5ba]) by imbvw2exc01.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Wed, 2 Nov 2016 17:25:05 +0100
From: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNOxftrDwnBm7nkS6PSjsWoQnz6DFc/4wgABYHgCAABQEAA==
Date: Wed, 2 Nov 2016 16:25:04 +0000
Message-ID: <BC36447FF5C62E46BEF3F124D3C1E8925E1F7038@imbpw2exd01.bosch-si.com>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
In-Reply-To: <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.55.144.83]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22674.005
X-TMASE-MatchedRID: XfiWGtNAVKzLmPsfsKViB8pQKjU7fBXVYOc36u6pGhbrqWpsu5XHveEd km1yGuMmhFfE5cdxeezt1pXTIlYZynLw1r9RKgOgxi0q1322bZyyNcEJTKJGJmKlK5+L2DIQo7y QBJvR2bhIItUXgDuZEM4JGyAngPORCFc8edUb9x5DXSxqBHb4QYMP4a7bu9zrs6LcaSYUJwPvlP gE+42R2mdcyFxHAhRoZQcD7XDFCM3mPJKW/Xd024zb2GR6Ttd3ZdKh+/+x0Y7D3h2nmZ4BQfI8z C9vqWtzDxyrE1Qw5BpVxnTEvn0CK8XahuIx/Hfl0XO+Yq6CqgKUi9wB9gmcSrDloE9rucgJFS/1 +GB5qwYO4s0ebohGVAntUqTKKmSfBFvUmbYpYftbKUNQk650HZJ4wTGO4igSWltirZ/iPP6kwFT CCpbFRwtKXbHniHpXfdTAWJ8WVbumnzFWe+TBCRNEPNwNrw/rFAr+wPWe7jHFQi/0T+RUwFp4lS TmbE3MRgz9sOnh4umPu+GDcsb8InmVnpZCEhlXsgYw1+LBrk0S12tj9Zvd89qCxkzSpW/XXtrej 45hZxI377L/FWmu8J29frqI6SG4Jh+OBwdOGm204Y/NhTxUgvmwbeWo3QuHv+26ZYWzwkLlnZKJ ACTRo/D/0yphSjVLjkQ/WaCHwUpTKK6xTqfjlEg5Iem1vm3H6GrWC/wEyphiW37G70xL9EuIqXp 5bGeZ/hwHSGis5stSTIrdw+LdCY0To7oIUo/ikcT+m3MjC/EhmbYg1ZcOnjvquqZAZLBPY5dut2 nOVlRdT16QLj3cXMH0Kj2rc+g3bZiLe03t/IeeAiCmPx4NwGNn8XPiALIb+gD2vYtOFhgqtq5d3 cxkNQP90fJP9eHt
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/05NCjgH7Rx5aukCvy4keT74jXX8>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 16:24:43 -0000

Hi,

> IMHO, using the DTLS identity seems the better choice. (PSK identity for =
PSK, public key for RPK, CN for certificate).

For PSK identity, and CN certificate they may be a choice.

But for RPK, can you explain, how the identity is checked on DTLS layer?

Mit freundlichen Gr=FC=DFen / Best regards

Achim Kraus

Bosch Software Innovations GmbH
Communications (INST/ESY1)
Stuttgarter Stra=DFe 130
71332 Waiblingen
GERMANY
www.bosch-si.de
www.blog.bosch-si.com=20

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB =
148411 B
Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn



-----Urspr=FCngliche Nachricht-----
Von: Simon Bernard [mailto:contact@simonbernard.eu]=20
Gesendet: Mittwoch, 2. November 2016 17:09
An: Kraus Achim (INST/ESY1) <Achim.Kraus@bosch-si.com>; core@ietf.org
Betreff: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00

Hi all,

    I'm not sure to understand the point here.
    *   The "draft-fossati-tls-iot-optimizations-00" says "The privacy=20
issue associated with the use of a long-term identifier
    must be taken into consideration."
    *   Thomas says "I think privacy preservation should be a goal".

    I would like to understand which privacy concern we would like to achie=
ve exactly ? With TLS we have end to end encryption. You want to add a kind=
 of  anonymity ? or maybe protect ourself from connectionid spoofing ?
    From my point of view, the connection id is just a way to replace the I=
P address by a connection identifier for use-cases where IP address is not =
fixed. So we have the same security level with connection id than fixed IP.=
 We are maybe a bit more exposed to spoofing as connectionid spoofing is pr=
obably more simple than UDP IP address spoofing, but not so much. I mean co=
nnectionid is just another way to retrieve security context needed to decry=
pt Application Data.

    About CoAP Observation behind a NAT using DTLS, I think we have several=
 issues.

    *  First one: define a long term identifier for CoAP. At CoAP level use=
rs would like to know from which or to which they send data, nothing more. =
IMHO, using the DTLS identity seems the better choice. (PSK identity for PS=
K, public key for RPK, CN for certificate). From my point of view there is =
no need to strongly link this to the DTLS session as it was currently the c=
ase in CoAP spec [1][2]. Nobody seems really able to explain this choice an=
d this doesn't work behind NAT. With this constraint, it can also be tempti=
ng to increase the session lifetime to be able to increase the observation =
lifetime which seems not to be a good idea as security level.
    *  Second point: be able to use DTLS with dynamic IP address (e.g.=20
NAT) without the need to redo full handshake or resume handshake. The "conn=
ectionId" proposed in this draft seems to resolve the issue. It could also =
really help to do load balancing using this connectionid instead of IP addr=
ess in a cluster environment.

Simon

[1]https://tools.ietf.org/html/rfc7641#section-7 (All notifications resulti=
ng from a GET request with an Observe Option MUST be returned within the sa=
me epoch of the same connection as the request.)
[2]https://tools.ietf.org/html/rfc7252#section-9.1.1 (The DTLS session MUST=
 be the same, and the epoch MUST be the same.)

Le 02/11/2016 =E0 11:33, Kraus Achim (INST/ESY1) a =E9crit :

> Hi Thomas,
>
> thanks for your answer.
> Though draft-fossati-tls-iot-optimizations-00 was published in the tls wg=
, I posted my question there.
>
> Currently I'm simply not sure, if I understood the approach right, but=20
> according your answer, I guess Stephen (Farrell) may be the right person,=
 to give an answer.
>
> With my understanding (see mail in tls,=20
> https://www.ietf.org/mail-archive/web/tls/current/msg21737.html),
>
> I see following issues with the hash chain:
> The scaling/performance depends on the "hash chain window" used to relate=
d the record to the dtls connection.
> As larger the window, the more I'm in doubt, if that scales.
> The robustness for clients, when we lose more packets then we assume in t=
he window.
> As smaller the window, the more I'm in doubt, if it's robust enough.
>
> There may be an escape using the "record sequence number" in a more=20
> sophistic way (e.g. using H(record.sequence_numer | connection_id)=20
> would help to skip faster over lost messages, but still with a large=20
> number of clients/connections, I don't see how this scales). But right no=
w I guess, we need more guidance, how it was intended.
>
> Therefore I could think also of an alternative solution with an "connecti=
on id ticket" system.
> The DTLS server sends after the handshake a ticket with the "encrypted co=
nnection id".
> The DTLS client decrypts that ticket into the connection id and, if=20
> the client later didn't receive a message for a certain period of time=20
> (e.g. 20s), it adds that connection id to the records until it receives a=
 new ticket (encrypted new connection id) .
> When the client receives a new ticket, then it could send the messages=20
> again without the connection id until it doesn't receive messages for=20
> the certain period of time, after which the new ticket is used.
> The DTLS server only accepts records with that "decrypted" connection id,=
 if the MAC check is passed.
> It the adjusts the address/port and emits a new ticket. If the DTLS serve=
r receives "invalid"
> (or no longer valid) connection ids, it uses the current address/port=20
> mapping to check the MAC and ignores the message, when the check fails.
> The advantage of that would be, that "high frequent" traffic doesn't=20
> require such a connection id, so it would just be used for "rarely"=20
> communicating client periods. Indicate with an extension, it would=20
> leave the current DTLS implementation unchanged as long as they are=20
> proper working right now and just offer an extension to those, wo would r=
equire it because of either to frequent address changes or to limited bandw=
idth (for dtls resumes/handshakes).
> And the server only needs those tickets, if the client and the server agr=
ees on using them.
>
> Mit freundlichen Gr=FC=DFen / Best regards
>
> Achim Kraus
>
> Bosch Software Innovations GmbH
> Communications (INST/ESY1)
> Stuttgarter Stra=DFe 130
> 71332 Waiblingen
> GERMANY
> www.bosch-si.de
> www.blog.bosch-si.com
>
> Registered office: Berlin, Register court: Amtsgericht Charlottenburg,=20
> HRB 148411 B
> Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn
>
>
>
> -----Urspr=FCngliche Nachricht-----
> Von: core [mailto:core-bounces@ietf.org] Im Auftrag von Fossati,=20
> Thomas (Nokia - GB)
> Gesendet: Mittwoch, 2. November 2016 10:35
> An: Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.com>; core@ietf.org
> Betreff: Re: [core] Question reg.=20
> draft-fossati-tls-iot-optimizations-00
>
> Hi Kai, Achim (sorry for the late reply, I wasn't looking at the TLS list=
).
>
> IIRC the idea came from Stephen (Farrell) in an attempt to add privacy-pr=
eserving properties to the (potentially) long term identifier.
>
> It's clearly a strawman and I'm happy to discuss its merits (in particula=
r the fact that when NAT rebinding happens without the client knowing it in=
 advance, the privacy of this is already gone) and impact in the IoT space =
(in term of state that is kept on server side if handling multiple connecti=
ons at a time).
>
> However, whatever the mechanism we come up with, I think privacy preserva=
tion should be a goal, or at least something that is taken as a first class=
 criterion for selection.
>
> Cheers, t
>
>
> On 02/11/2016 07:29, "core on behalf of Hudalla Kai (INST/ESY1)"
> <core-bounces@ietf.org on behalf of Kai.Hudalla@bosch-si.com> wrote:
>> Hi list,
>>
>> I have attended last week's meeting of the T2T RG in Ludwigsburg=20
>> where we had a vivid discussion around the problems of DTLS on mobile=20
>> and other NATed networks where the device's IP address and/or port=20
>> are expected to change once in a while.
>>
>> We quickly came to the conclusion that the CoAP spec will need to be=20
>> changed in a way that removes the transport's addressing information
> >from the Request/Response matching criteria when using DTLS.
>> However, what alternative mechanism could be used instead?
>>
>> Section 4.2 of draft-fossati-tls-iot-optimizations-00 proposes to use=20
>> a connection ID as part of the DTLS record structure. While I=20
>> understand the usefulness of using a "long term identifier" for=20
>> associating the session with the client, I do not really understand, how=
 a "hash chain"
>> could be put to use in this context to provide an improved level of=20
>> privacy.
>>
>> Could someone (of the authors) comment on that?
>>
>> --
>> Mit freundlichen Gr=FC=DFen / Best regards
>>
>> Kai Hudalla
>> Chief Software Architect
>>
>> Bosch Software Innovations GmbH
>> Sch=F6neberger Ufer 89-91
>> 10785 Berlin
>> GERMANY
>> www.bosch-si.com
>>
>> Registered office: Berlin, Register court: Amtsgericht=20
>> Charlottenburg, HRB 148411 B;
>> Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn=20
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Wed Nov  2 09:52:52 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 088D0128B37 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 09:52:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AfKBJqa4QJgs for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 09:52:49 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85D24129486 for <core@ietf.org>; Wed,  2 Nov 2016 09:52:49 -0700 (PDT)
Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 61E5BD141939D; Wed,  2 Nov 2016 16:52:44 +0000 (GMT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA2GqlPt018897 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 2 Nov 2016 16:52:47 GMT
Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id uA2Gqlmk022089 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 2 Nov 2016 17:52:47 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.03.0301.000; Wed, 2 Nov 2016 17:52:47 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: Simon Bernard <contact@simonbernard.eu>, "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [ALU] Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNOxftrDwnBm7nkS6PSjsWoQnz6DFc/4wgABYHgCAAAxRgA==
Date: Wed, 2 Nov 2016 16:52:46 +0000
Message-ID: <D43FC498.74BA7%thomas.fossati@alcatel-lucent.com>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
In-Reply-To: <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.40]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <D454DA14546E4940A07F061FF86D2C44@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/cn1iiMl05Olv8RwBdXvBbpahvYo>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 16:52:51 -0000

Hi Simon,

On 02/11/2016 16:08, "core on behalf of Simon Bernard"
<core-bounces@ietf.org on behalf of contact@simonbernard.eu> wrote:
>Hi all,
>
>    I'm not sure to understand the point here.
>    *   The "draft-fossati-tls-iot-optimizations-00" says "The privacy
>issue associated with the use of a long-term identifier
>    must be taken into consideration."
>    *   Thomas says "I think privacy preservation should be a goal".

>    I would like to understand which privacy concern we would like to
>achieve exactly ? With TLS we have end to end encryption. You want to
>add a kind of  anonymity ? or maybe protect ourself from connectionid
>spoofing ?

The issue is that something like CID will make tracking a device activity
across different transports very easy.  (Personally, I think NAT rebinding
is a bit different because it usually happens without client awareness,
and therefore already exposes correlation information to a possible
tracker.)

In any case, if we make this an extension of the general TLS protocol we
need to make sure we design it in a way that a) is fit for the purpose
from a functional and security perspective, and b) takes into
consideration the tracking aspects for clients that want to have finer
control on their privacy.


>    From my point of view, the connection id is just a way to replace
>the IP address by a connection identifier for use-cases where IP address
>is not fixed. So we have the same security level with connection id than
>fixed IP. We are maybe a bit more exposed to spoofing as connectionid
>spoofing is probably more simple than UDP IP address spoofing, but not
>so much. I mean connectionid is just another way to retrieve security
>context needed to decrypt Application Data.

ISTM that if CID has enough randomness and is integrity-protected, then
spoofing is not an issue (or it is less an issue than security context
lookup based on a fully tamperable 5-tuple).  But certainly this is a
dimension to explore further (e.g. depending on the way CID is
synchronised on the two sides, there might be opportunities for an
attacker that can selectively drop packets from the network to do
different things, I guess).

Cheers, t


From nobody Wed Nov  2 10:08:58 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE6D6129582 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 10:08:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HNKZd41DEbUs for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 10:08:56 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FD6D12941D for <core@ietf.org>; Wed,  2 Nov 2016 10:08:56 -0700 (PDT)
Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id AF454434AB430; Wed,  2 Nov 2016 17:08:50 +0000 (GMT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA2H8rNk007178 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 2 Nov 2016 17:08:54 GMT
Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id uA2H8rcJ004808 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 2 Nov 2016 18:08:53 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0301.000; Wed, 2 Nov 2016 18:08:53 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNSC3YnVUcyWwoE+6FMdK5QDfI6DF3IgA
Date: Wed, 2 Nov 2016 17:08:53 +0000
Message-ID: <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com>
In-Reply-To: <1478101730.3603.9.camel@bosch-si.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.41]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <C4FEB8D76DB0F541839A8A4788A9A835@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/2-G2t9JLTkVrQtwbXIt6gjMZKyk>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 17:08:58 -0000

Hi Kai,

On 02/11/2016 15:49, "core on behalf of Hudalla Kai (INST/ESY1)"
<core-bounces@ietf.org on behalf of Kai.Hudalla@bosch-si.com> wrote:
>Assuming that "shared_secret" is derived from the pre-master or master
>secret and
> "string(i)" means "get the ASCII representation of integer i's digits",
>then
>this function would have the additional advantage of not requiring both
>sides to
>"pre-compute" the whole list of CIDs in advance but instead being able to
>compute
>the next CID ad-hoc when it is needed, wouldn't it? The client and server
>would
>only need to keep track of counter i in this case.

Yes, but then the receiver would have to do a bit of acrobatics to compute
all the future CIDs of the active sessions if the received CID is not
found in the hash table.  I think pre computation has its advantages in
this case -- the server controls the CIDs chain length and could adapt the
proposed value based on both its overall capacity and current load.

>> > I see following issues with the hash chain:
>> > The scaling/performance depends on the "hash chain window" used to
>> > related the record to the dtls connection.
>> > As larger the window, the more I'm in doubt, if that scales.
>> I agree.  That's why I think "client proposes, server chooses" is the
>> right way to negotiate it.
>>=20
>> >=20
>> > The robustness for clients, when we lose more packets then we assume
>>in
>> > the window.
>> > As smaller the window, the more I'm in doubt, if it's robust enough.
>> I'm not sure I understand your concern here.
>>=20
>> The idea is that the client has it's own "CID shift" policy (e.g., based
>> on time, or number of packets exchanged, NAT rebinding awareness, etc.)
>> and will decide unilaterally when to move to the next CID in chain,
>>until
>> the chain is exhausted.  The server will mirror the last CID received.
>>In
>> this scheme, packet loss has no impact as long as client keeps alive
>>CIDs
>> that have been shifted but not yet "acknowledged" by the server on the
>> back channel.  (This is true if both sides keep the chain in place for
>>as
>> long as the security association is active.)
>>=20
>My only concern would be that not using the full HMAC values as the CIDs
>but
>instead only using the, say, first 6 bytes would actually make the CIDs
>vulnerable again. However, I am not a security expert and have no clue
>whether
>this is a problem or not.

I think the hash should be truncated to avoid adding too much overhead on
the (possibly constrained) channel. Could you please elaborate a bit more
on the security issue you are seeing here?  (I can see potential issues
with lookup collisions (i.e. functional) if the CID is chosen from a small
space, but the security impact is not very clear to me.)

>In any case, I like the idea very much :-) What do we need to do in order
>to
>bring this forward?

If there is interest (as it seems) we could try and draft it in a slightly
less concise way :-)

The original plan with Hannes was to also prototype it in his (1.3)
implementation (mbedtls).  If you have another TLS stack that would be
really great.

Cheers, thanks,
t


From nobody Wed Nov  2 10:18:09 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 977B6129473 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 10:18:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w6gzVx9PAAeS for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 10:18:04 -0700 (PDT)
Received: from mo5.mail-out.ovh.net (mo5.mail-out.ovh.net [178.32.228.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56B33129443 for <core@ietf.org>; Wed,  2 Nov 2016 10:18:04 -0700 (PDT)
Received: from player692.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo5.mail-out.ovh.net (Postfix) with ESMTP id 6354541358 for <core@ietf.org>; Wed,  2 Nov 2016 18:18:01 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player692.ha.ovh.net (Postfix) with ESMTPSA id 23A41600088; Wed,  2 Nov 2016 18:17:59 +0100 (CET)
To: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu> <BC36447FF5C62E46BEF3F124D3C1E8925E1F7038@imbpw2exd01.bosch-si.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <ba1e5322-2ca5-ab70-0222-51e45139819a@simonbernard.eu>
Date: Wed, 2 Nov 2016 18:17:58 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <BC36447FF5C62E46BEF3F124D3C1E8925E1F7038@imbpw2exd01.bosch-si.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 2290080414071208103
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeefgdeliecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/aSUVPiuSoOe9OXqK_NBvCD2Nyjc>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 17:18:07 -0000

I think identity is not checked at DTLS layer, but at the CoAP Layer. 
For RPK we can use the public key.

I mean the DTLS layer ensure encryption and authentication.
At CoAP level, you will get your decrypted data and the DTLS identity, 
up to you to ensure you talk to the right peer.
For example, if you add the LWM2M Layer where peer are identified by 
registration endpoint , you need to associate this registration endpoint 
to a DTLS identity (the public key for RPK).


Le 02/11/2016 à 17:25, Kraus Achim (INST/ESY1) a écrit :
> Hi,
>
>> IMHO, using the DTLS identity seems the better choice. (PSK identity for PSK, public key for RPK, CN for certificate).
> For PSK identity, and CN certificate they may be a choice.
>
> But for RPK, can you explain, how the identity is checked on DTLS layer?
>
> Mit freundlichen Grüßen / Best regards
>
> Achim Kraus
>
> Bosch Software Innovations GmbH
> Communications (INST/ESY1)
> Stuttgarter Straße 130
> 71332 Waiblingen
> GERMANY
> www.bosch-si.de
> www.blog.bosch-si.com
>
> Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB 148411 B
> Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: Simon Bernard [mailto:contact@simonbernard.eu]
> Gesendet: Mittwoch, 2. November 2016 17:09
> An: Kraus Achim (INST/ESY1) <Achim.Kraus@bosch-si.com>; core@ietf.org
> Betreff: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
>
> Hi all,
>
>      I'm not sure to understand the point here.
>      *   The "draft-fossati-tls-iot-optimizations-00" says "The privacy
> issue associated with the use of a long-term identifier
>      must be taken into consideration."
>      *   Thomas says "I think privacy preservation should be a goal".
>
>      I would like to understand which privacy concern we would like to achieve exactly ? With TLS we have end to end encryption. You want to add a kind of  anonymity ? or maybe protect ourself from connectionid spoofing ?
>      From my point of view, the connection id is just a way to replace the IP address by a connection identifier for use-cases where IP address is not fixed. So we have the same security level with connection id than fixed IP. We are maybe a bit more exposed to spoofing as connectionid spoofing is probably more simple than UDP IP address spoofing, but not so much. I mean connectionid is just another way to retrieve security context needed to decrypt Application Data.
>
>      About CoAP Observation behind a NAT using DTLS, I think we have several issues.
>
>      *  First one: define a long term identifier for CoAP. At CoAP level users would like to know from which or to which they send data, nothing more. IMHO, using the DTLS identity seems the better choice. (PSK identity for PSK, public key for RPK, CN for certificate). From my point of view there is no need to strongly link this to the DTLS session as it was currently the case in CoAP spec [1][2]. Nobody seems really able to explain this choice and this doesn't work behind NAT. With this constraint, it can also be tempting to increase the session lifetime to be able to increase the observation lifetime which seems not to be a good idea as security level.
>      *  Second point: be able to use DTLS with dynamic IP address (e.g.
> NAT) without the need to redo full handshake or resume handshake. The "connectionId" proposed in this draft seems to resolve the issue. It could also really help to do load balancing using this connectionid instead of IP address in a cluster environment.
>
> Simon
>
> [1]https://tools.ietf.org/html/rfc7641#section-7 (All notifications resulting from a GET request with an Observe Option MUST be returned within the same epoch of the same connection as the request.)
> [2]https://tools.ietf.org/html/rfc7252#section-9.1.1 (The DTLS session MUST be the same, and the epoch MUST be the same.)
>
> Le 02/11/2016 à 11:33, Kraus Achim (INST/ESY1) a écrit :
>
>> Hi Thomas,
>>
>> thanks for your answer.
>> Though draft-fossati-tls-iot-optimizations-00 was published in the tls wg, I posted my question there.
>>
>> Currently I'm simply not sure, if I understood the approach right, but
>> according your answer, I guess Stephen (Farrell) may be the right person, to give an answer.
>>
>> With my understanding (see mail in tls,
>> https://www.ietf.org/mail-archive/web/tls/current/msg21737.html),
>>
>> I see following issues with the hash chain:
>> The scaling/performance depends on the "hash chain window" used to related the record to the dtls connection.
>> As larger the window, the more I'm in doubt, if that scales.
>> The robustness for clients, when we lose more packets then we assume in the window.
>> As smaller the window, the more I'm in doubt, if it's robust enough.
>>
>> There may be an escape using the "record sequence number" in a more
>> sophistic way (e.g. using H(record.sequence_numer | connection_id)
>> would help to skip faster over lost messages, but still with a large
>> number of clients/connections, I don't see how this scales). But right now I guess, we need more guidance, how it was intended.
>>
>> Therefore I could think also of an alternative solution with an "connection id ticket" system.
>> The DTLS server sends after the handshake a ticket with the "encrypted connection id".
>> The DTLS client decrypts that ticket into the connection id and, if
>> the client later didn't receive a message for a certain period of time
>> (e.g. 20s), it adds that connection id to the records until it receives a new ticket (encrypted new connection id) .
>> When the client receives a new ticket, then it could send the messages
>> again without the connection id until it doesn't receive messages for
>> the certain period of time, after which the new ticket is used.
>> The DTLS server only accepts records with that "decrypted" connection id, if the MAC check is passed.
>> It the adjusts the address/port and emits a new ticket. If the DTLS server receives "invalid"
>> (or no longer valid) connection ids, it uses the current address/port
>> mapping to check the MAC and ignores the message, when the check fails.
>> The advantage of that would be, that "high frequent" traffic doesn't
>> require such a connection id, so it would just be used for "rarely"
>> communicating client periods. Indicate with an extension, it would
>> leave the current DTLS implementation unchanged as long as they are
>> proper working right now and just offer an extension to those, wo would require it because of either to frequent address changes or to limited bandwidth (for dtls resumes/handshakes).
>> And the server only needs those tickets, if the client and the server agrees on using them.
>>
>> Mit freundlichen Grüßen / Best regards
>>
>> Achim Kraus
>>
>> Bosch Software Innovations GmbH
>> Communications (INST/ESY1)
>> Stuttgarter Straße 130
>> 71332 Waiblingen
>> GERMANY
>> www.bosch-si.de
>> www.blog.bosch-si.com
>>
>> Registered office: Berlin, Register court: Amtsgericht Charlottenburg,
>> HRB 148411 B
>> Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn
>>
>>
>>
>> -----Ursprüngliche Nachricht-----
>> Von: core [mailto:core-bounces@ietf.org] Im Auftrag von Fossati,
>> Thomas (Nokia - GB)
>> Gesendet: Mittwoch, 2. November 2016 10:35
>> An: Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.com>; core@ietf.org
>> Betreff: Re: [core] Question reg.
>> draft-fossati-tls-iot-optimizations-00
>>
>> Hi Kai, Achim (sorry for the late reply, I wasn't looking at the TLS list).
>>
>> IIRC the idea came from Stephen (Farrell) in an attempt to add privacy-preserving properties to the (potentially) long term identifier.
>>
>> It's clearly a strawman and I'm happy to discuss its merits (in particular the fact that when NAT rebinding happens without the client knowing it in advance, the privacy of this is already gone) and impact in the IoT space (in term of state that is kept on server side if handling multiple connections at a time).
>>
>> However, whatever the mechanism we come up with, I think privacy preservation should be a goal, or at least something that is taken as a first class criterion for selection.
>>
>> Cheers, t
>>
>>
>> On 02/11/2016 07:29, "core on behalf of Hudalla Kai (INST/ESY1)"
>> <core-bounces@ietf.org on behalf of Kai.Hudalla@bosch-si.com> wrote:
>>> Hi list,
>>>
>>> I have attended last week's meeting of the T2T RG in Ludwigsburg
>>> where we had a vivid discussion around the problems of DTLS on mobile
>>> and other NATed networks where the device's IP address and/or port
>>> are expected to change once in a while.
>>>
>>> We quickly came to the conclusion that the CoAP spec will need to be
>>> changed in a way that removes the transport's addressing information
>> >from the Request/Response matching criteria when using DTLS.
>>> However, what alternative mechanism could be used instead?
>>>
>>> Section 4.2 of draft-fossati-tls-iot-optimizations-00 proposes to use
>>> a connection ID as part of the DTLS record structure. While I
>>> understand the usefulness of using a "long term identifier" for
>>> associating the session with the client, I do not really understand, how a "hash chain"
>>> could be put to use in this context to provide an improved level of
>>> privacy.
>>>
>>> Could someone (of the authors) comment on that?
>>>
>>> --
>>> Mit freundlichen Grüßen / Best regards
>>>
>>> Kai Hudalla
>>> Chief Software Architect
>>>
>>> Bosch Software Innovations GmbH
>>> Schöneberger Ufer 89-91
>>> 10785 Berlin
>>> GERMANY
>>> www.bosch-si.com
>>>
>>> Registered office: Berlin, Register court: Amtsgericht
>>> Charlottenburg, HRB 148411 B;
>>> Executives: Dr.-Ing. Rainer Kallenbach, Michael Hahn
>>> _______________________________________________
>>> core mailing list
>>> core@ietf.org
>>> https://www.ietf.org/mailman/listinfo/core
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
>>
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Wed Nov  2 10:22:15 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 972711296EC for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 10:22:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZsYB4a_VDhTM for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 10:22:10 -0700 (PDT)
Received: from 1.mo5.mail-out.ovh.net (1.mo5.mail-out.ovh.net [188.165.57.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BA7212968B for <core@ietf.org>; Wed,  2 Nov 2016 10:22:10 -0700 (PDT)
Received: from player692.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo5.mail-out.ovh.net (Postfix) with ESMTP id 8E2494122E for <core@ietf.org>; Wed,  2 Nov 2016 18:22:08 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player692.ha.ovh.net (Postfix) with ESMTPSA id 555576000A8; Wed,  2 Nov 2016 18:22:06 +0100 (CET)
To: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>, "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu> <D43FC498.74BA7%thomas.fossati@alcatel-lucent.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <0505862c-8aba-0457-00f1-68a53019a136@simonbernard.eu>
Date: Wed, 2 Nov 2016 18:22:06 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <D43FC498.74BA7%thomas.fossati@alcatel-lucent.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 2359886207255460007
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeefgdelkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/fhP-r0PW0qAqNO1p0SG1UhEnxO8>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 17:22:12 -0000

With TLS 1.2 we currently don't have this tracking aspect consideration 
? Identity is sent in clear, by sniffing the network you could know who 
send to who. This seems to me like another issue/feature.

Currently TLS don't protect you from tracking or provide you any 
anonymity : "The primary goal of the TLS protocol is to provide privacy 
and data integrity between two communicating applications." (+ 
authentication)

As a wiseman tell to me : "one step at a time !".

(ConnectionID will have a lifetime less or equals than the session 
lifetime, this means 24h maximum. This limit the tracking activity based 
on connectionID to 24h)

Le 02/11/2016 à 17:52, Fossati, Thomas (Nokia - GB) a écrit :
> Hi Simon,
>
> On 02/11/2016 16:08, "core on behalf of Simon Bernard"
> <core-bounces@ietf.org on behalf of contact@simonbernard.eu> wrote:
>> Hi all,
>>
>>     I'm not sure to understand the point here.
>>     *   The "draft-fossati-tls-iot-optimizations-00" says "The privacy
>> issue associated with the use of a long-term identifier
>>     must be taken into consideration."
>>     *   Thomas says "I think privacy preservation should be a goal".
>>     I would like to understand which privacy concern we would like to
>> achieve exactly ? With TLS we have end to end encryption. You want to
>> add a kind of  anonymity ? or maybe protect ourself from connectionid
>> spoofing ?
> The issue is that something like CID will make tracking a device activity
> across different transports very easy.  (Personally, I think NAT rebinding
> is a bit different because it usually happens without client awareness,
> and therefore already exposes correlation information to a possible
> tracker.)
>
> In any case, if we make this an extension of the general TLS protocol we
> need to make sure we design it in a way that a) is fit for the purpose
> from a functional and security perspective, and b) takes into
> consideration the tracking aspects for clients that want to have finer
> control on their privacy.
>
>
>>     From my point of view, the connection id is just a way to replace
>> the IP address by a connection identifier for use-cases where IP address
>> is not fixed. So we have the same security level with connection id than
>> fixed IP. We are maybe a bit more exposed to spoofing as connectionid
>> spoofing is probably more simple than UDP IP address spoofing, but not
>> so much. I mean connectionid is just another way to retrieve security
>> context needed to decrypt Application Data.
> ISTM that if CID has enough randomness and is integrity-protected, then
> spoofing is not an issue (or it is less an issue than security context
> lookup based on a fully tamperable 5-tuple).  But certainly this is a
> dimension to explore further (e.g. depending on the way CID is
> synchronised on the two sides, there might be opportunities for an
> attacker that can selectively drop packets from the network to do
> different things, I guess).
>
> Cheers, t
>


From nobody Wed Nov  2 11:26:14 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7E9B129641 for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 11:26:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.117
X-Spam-Level: 
X-Spam-Status: No, score=-4.117 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GyZnio6nTz3O for <core@ietfa.amsl.com>; Wed,  2 Nov 2016 11:26:12 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 99C4B129AF4 for <core@ietf.org>; Wed,  2 Nov 2016 11:26:02 -0700 (PDT)
Received: from [192.168.91.155] ([80.92.118.15]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0LrNIC-1d0epG3SN2-0137Is; Wed, 02 Nov 2016 19:25:59 +0100
To: core@ietf.org, contact@simonbernard.eu
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <fcd2be95-5acf-00b4-64a1-d5cec67f27a2@gmx.net>
Date: Wed, 2 Nov 2016 19:25:56 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="fDDrJCJXgJCaFPD3iTNW45ujEknbbQOc4"
X-Provags-ID: V03:K0:LCwsMxlVLm1678EBoOOR8GxhNup0TamAewlBSGic6t6Diz0l2km qstHZlcvPN9dh1JWTA27Rz6nBPPbtDovgVkLI4sQsyjMBzkLf8Z+4JyVyhcJ91F3SgT7jam wQnaT2BunonLx3Iz93pQnIzKWJi427vAN1danNLoFvMXZtheJZ4KGyFAg8XrZFR1WUyZfJa 3S3KSzgJIOIsUMTtEuxRA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:stxo+pbEyVs=:DlGGmftIbqY+IKKM7QuCQN 3Qqjc7Ilm4mtrF6udnh2AJ4OzrXTn9p4ezgLEZBvQ8QZ/ISHtrFKjoh3w+dvHgwHBSMFIUPeo RKVK5Ez1lrnLV7Q9o1JWmezwPgrTBv1lKnzbQNdebXfojl2kBbQknDcfo4Y8ZxnthblegpwFb UNOcI/Y+gof64fwKdA4eFuFr+9sJTF8JtQ9UOBJYNIDOkI81lbnDZl0h1sRhih2fugFDoYYAJ PliQgl+cuLRLKZYioLClYQkFpDxyEa2R1dO7COuf/h/Qv/HO5+sLAjEx8kqHN1Qp98rMOLilB /ckUBcqiKcf6XfEJNgeUhAdpJfUSIu+GxSqg/Bn7+rW6RTHwOnQeDMhW14PzlafsrDk16iS85 cOUb4oxN0na+VHiNJ31dIOPqsaeHKLDVQmyIghQffJnyzgnLr0cfWSk/wpZ42F45MhexzeWl2 ZLon2KGnLhs4Qu1/UAU0UQPtl0IQTv1jZrC9bNBx/JBijZW8OhqfGrN7ITQ0n4azFcFS2ogs0 pD6FM2ipo5HK4x5EVupj2RpfZ+4MGg25U45vHhqeEgcDtqOnAszPs1a3kWhVaE435JdumEWWF EFPBMsjpYDjrjjg0uJNDyAb+0+YZpNLW3DZXgqe4bNbmZTHTDalXNCDWR3NI8luJo18Uw2KWR HJjCQtvPe2RdEmzzmSoeSqM8uZ4cEezceeUVJxayPGJFfC8oEytgoJst43wn584We+JnA8Hxj n7ejFKO1LW0iy1QIpn83qWbVuSpEiJMbQcGRbqdZadVi4wSA/SP797Xt5dA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/1-bGKX9wKZKoKbON7YldNeV5ojw>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Nov 2016 18:26:14 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--fDDrJCJXgJCaFPD3iTNW45ujEknbbQOc4
Content-Type: multipart/mixed; boundary="wlj1FFtMhVKPCfFkD2e8kUucfuknXn9BW";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: core@ietf.org, contact@simonbernard.eu
Message-ID: <fcd2be95-5acf-00b4-64a1-d5cec67f27a2@gmx.net>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com>
 <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com>
 <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>
In-Reply-To: <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu>

--wlj1FFtMhVKPCfFkD2e8kUucfuknXn9BW
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Hi Simon,

On 11/02/2016 05:08 PM, Simon Bernard wrote:
> I would like to understand which privacy concern we would like to
> achieve exactly ?

The privacy concern is correlation by linking independent TLS sessions
together (see RFC 6973).


Ciao
Hannes



--wlj1FFtMhVKPCfFkD2e8kUucfuknXn9BW--

--fDDrJCJXgJCaFPD3iTNW45ujEknbbQOc4
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYGi+0AAoJEGhJURNOOiAtj+cH/iFa4Kg/tv/MUjFROTLlKLn2
Jgmp8bx4L7NWD5nmsd7yIOLLmM1PIslciDEJcIgHB7fLjIOx3vnW8iwS+BHJJ2Pn
+NL3Vv0RLMgv8Mg8MaaQPJoP8/y7XWYZHbOWA9YmrNnpdWgPXs6KMGKUFeuJPXWo
Alv6t3taErWNde0WttoCdWRNw5ltYfdyClxxc4+l4MXoBP50I6M2kymh6pqK+rvE
eL1g/PiZr0ybpmuAfe0fjlSAoXTxMJ9QrdXiKTQQ/Aehg0NAEmaCLM5KgiN8t7hJ
DRgrauwhov76NIESCcBJDBRlRfR6nUe4W3gFbLBOFU9IqY9VAQco9AQDLqUCf88=
=r28I
-----END PGP SIGNATURE-----

--fDDrJCJXgJCaFPD3iTNW45ujEknbbQOc4--


From nobody Thu Nov  3 01:21:10 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5AF5129455 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 01:21:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ELH5Qq6dQKDV for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 01:21:06 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14BC2129478 for <core@ietf.org>; Thu,  3 Nov 2016 01:21:05 -0700 (PDT)
Received: from vsmta11.fe.internet.bosch.com (unknown [10.4.98.51]) by imta23.fe.bosch.de (Postfix) with ESMTP id 2380D15800BA for <core@ietf.org>; Thu,  3 Nov 2016 09:21:04 +0100 (CET)
Received: from be6vw2exc01.bosch-si.com (vsgw22.fe.internet.bosch.com [10.4.98.11]) by vsmta11.fe.internet.bosch.com (Postfix) with ESMTP id C785B2380E49 for <core@ietf.org>; Thu,  3 Nov 2016 09:21:03 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc01.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Thu, 3 Nov 2016 09:21:32 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNRLsxw+ZhmUfhkiE76fll++38qDFxkwAgAAWXYCAAP7aAA==
Date: Thu, 3 Nov 2016 08:21:32 +0000
Message-ID: <1478161262.24033.17.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <770377283F2B1644AEE734A0176CF66D@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22674.005
X-TMASE-MatchedRID: u6ojmU07PKynykMun0J1wgPZZctd3P4ByZnHhh2CJcENcckEPxfz2CU7 43HF3fJ1twGfkbxj4J/lmVvpnPwXxRRg8BxQrgE0MEK/6tg6I3F1IdjjHRSNCX8sSIZ4yzEpQ0U kLoLY8eZGRpMTw05NY2szRQ7dIgPPfglcCxeYbJMdxBAG5/hkW4/8SyGg0rIRN2d3n0B/sI84p7 Klky94IArDMcL7e9Zu2tWzt6NwSujtZl4cEh8nuK3GlV8ATaXv0i/hFXziUdMZnbM1DCQfDe8fa d4FArWrt/IWUnuUeAjUNhUXX7CXB/wyrzOpgW8A4HBpYyeQJ2d3b0cPSGvsdoVzrPhrur/FM+p+ NpswZmquBO/LdDafPEyDIoVbDElJ9BfBMFJpTLBIOSHptb5txyGZtiDVlw6eb45886yjdr/5FJs tWNYx/Gx2hzqiCsJgmg8n0rIhOWTCn+Yz1AZqrby5hnFzVM+XfkuZtv/FS5osfFlFugSGUEp0Vz fTA7tqD/gYyqVMntk1HRkuBx+E0iZfM6MRjqJVf01qcJQDhV5Vyg4Yz2U7pKvM+zzl/BST2PiJv USMSRNBdM8eNUKnmMSm8UHG6MRatPyViaiKKqaPQVakDkJU+VtP+ljwL9Cf1TKQ8rVEUCitEaJo VjyWkL/pBBhsppO2dBqI0AQ3SxxccQ8eam5EfdIFVVzYGjNKWQy9YC5qGvz6APa9i04WGCq2rl3 dzGQ1MShsdO9q4tqksqWegtRGVJ4uDMAVemXUQl+tvE9XdP5yCY1avHWczA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/hDPwaJXpZXdg8kXoHf7AdOA4rPU>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 08:21:09 -0000
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From nobody Thu Nov  3 03:26:44 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F3791296BE for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 03:26:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dbIRKbfFGOpK for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 03:26:41 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C80F4129551 for <core@ietf.org>; Thu,  3 Nov 2016 03:26:41 -0700 (PDT)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id 9DEF7EC8B906F; Thu,  3 Nov 2016 10:26:37 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA3AQdki031081 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 3 Nov 2016 10:26:39 GMT
Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uA3AQTeH028191 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 3 Nov 2016 11:26:38 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0301.000; Thu, 3 Nov 2016 11:26:31 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [ALU] Re: [core] [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNatFmLdXIp2xaES3xWUzPBwYgaDG/VuA
Date: Thu, 3 Nov 2016 10:26:30 +0000
Message-ID: <D440B443.74C6D%thomas.fossati@alcatel-lucent.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com>
In-Reply-To: <1478161262.24033.17.camel@bosch-si.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.39]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <B2642054782E6F40B6D9FCDC1DEB83CE@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/QY9r1IJ0BWBdOp-2c6ebqMcmEA8>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 10:26:43 -0000

Hi Kai,

On 03/11/2016 08:21, "core on behalf of Hudalla Kai (INST/ESY1)"
<core-bounces@ietf.org on behalf of
>>I think the hash should be truncated to avoid adding too much overhead on
>> the (possibly constrained) channel. Could you please elaborate a bit
>>more
>> on the security issue you are seeing here?  (I can see potential issues
>> with lookup collisions (i.e. functional) if the CID is chosen from a
>>small
>> space, but the security impact is not very clear to me.)
>>=20
>I agree that the "uniqueness" property of the hashes will probably be
>reduced
>very significantly and this will probably cause a much greater problem
>(from a
>functional perspective). Using only truncated hashes might, however, make
>the
>hash function itself less secure, i.e. it might be easier for an attacker
>to
>determine the next hash if he only needs to make sure that the first six
>bytes
>are correct. Again, I am not a security expert but I can imagine that the
>guarantees an HMAC function makes regarding distribution and
>irreversibility are
>somewhat dependent on the length as well ...

Assuming the attacker doesn't know the shared key, the worst that can
happen is that she is able to forge a valid CID which has not been used
yet.

However, given HMAC's properties (i.e., it is a PRF under the sole
assumption that its compression function is a PRF), this should only be
possible by luck -- with 2^(-n) chances, where n is the length of the
truncated HMAC.


I've not done any serious analysis, but it seems to me that CID forgery
would result in a failure decrypting the forged record and possibly a
de-synchronisation of the CID?  That seems less scary than a server having
to worry about collisions in its lookup table.

>>If there is interest (as it seems) we could try and draft it in a
>>slightly
>> less concise way :-)
>>=20
>> The original plan with Hannes was to also prototype it in his (1.3)
>> implementation (mbedtls).  If you have another TLS stack that would be
>> really great.
>>=20
>Yes, I would like to incorporate such a mechanism into the Californium
>Java CoAP
>stack.

Super!  I'll try and draft a proposal that can be implemented ASAP.

Cheers, t


From nobody Thu Nov  3 03:30:06 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D08C129550 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 03:30:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0MJLtc4qa4M for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 03:30:03 -0700 (PDT)
Received: from 10.mo3.mail-out.ovh.net (10.mo3.mail-out.ovh.net [87.98.165.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 475B1129849 for <core@ietf.org>; Thu,  3 Nov 2016 03:30:02 -0700 (PDT)
Received: from player772.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo3.mail-out.ovh.net (Postfix) with ESMTP id 5EA2258F49 for <core@ietf.org>; Thu,  3 Nov 2016 11:30:00 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player772.ha.ovh.net (Postfix) with ESMTPSA id 362E34C0096; Thu,  3 Nov 2016 11:29:59 +0100 (CET)
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, core@ietf.org
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu> <fcd2be95-5acf-00b4-64a1-d5cec67f27a2@gmx.net>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <8eb7103a-5ca2-f1d0-683a-d85a4985c7eb@simonbernard.eu>
Date: Thu, 3 Nov 2016 11:29:58 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <fcd2be95-5acf-00b4-64a1-d5cec67f27a2@gmx.net>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 1272266896140744871
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeeigddugecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Z194DYp5DxKPk8QFdUsnkh_i_NA>
Subject: Re: [core] Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 10:30:05 -0000

If this is really about linking independent TLS sessions. I think there 
is no problem here.

Because "Sessions define a set of cryptographic security parameters that 
can be shared among multiple connections." (RFC 5246)

So a connection is alway linked to only 1 sessions, So a CID is alway 
linked to 1 sessions.

This means CID can not be used to linked independent TLS sessions.

Le 02/11/2016 à 19:25, Hannes Tschofenig a écrit :
> Hi Simon,
>
> On 11/02/2016 05:08 PM, Simon Bernard wrote:
>> I would like to understand which privacy concern we would like to
>> achieve exactly ?
> The privacy concern is correlation by linking independent TLS sessions
> together (see RFC 6973).
>
>
> Ciao
> Hannes
>
>


From nobody Thu Nov  3 04:24:15 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA114129545 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 04:24:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sithchAHcpIP for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 04:24:11 -0700 (PDT)
Received: from 13.mo3.mail-out.ovh.net (13.mo3.mail-out.ovh.net [188.165.33.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C2EA127A90 for <core@ietf.org>; Thu,  3 Nov 2016 04:24:11 -0700 (PDT)
Received: from player772.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo3.mail-out.ovh.net (Postfix) with ESMTP id 7D304592AC for <core@ietf.org>; Thu,  3 Nov 2016 12:24:09 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player772.ha.ovh.net (Postfix) with ESMTPSA id AFD5F4C0086; Thu,  3 Nov 2016 12:24:04 +0100 (CET)
To: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>, "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <a33fdc58-1214-9e6f-d268-47427e94a114@simonbernard.eu>
Date: Thu, 3 Nov 2016 12:24:04 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <D440B443.74C6D%thomas.fossati@alcatel-lucent.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 2186779095603296423
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeejgddtlecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/QVWn6VzEZW0fmdeCsj3bLbf1KLc>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 11:24:14 -0000

Hi Fossati,

    I would like to insist again about this tracking concern. I see the 
point and I think this is a good point to try to achieve this purpose at 
long term in TLS. But we are going into an IPv6 world with fixed IP, so 
correlating packet will be easier. I know there is RFC to limit this 
kind of tracking issue on IPv6 (https://tools.ietf.org/html/rfc4941) and 
like session the default lifetime is 1day. So from my point of view all 
of this hash chain seems a bit overkill. CID will live as long as 
sessions live, so we limit correlation to 24h, as if we live in an IPv6 
world.

     FMPOV the short term issue is to be able to use DTLS 1.2 in a 
changing IP address environment, mainly the NAT issue. This is the 
problem we faced today. An extension to do that will be welcomed :). I 
hope this kind of hash chain will not be mandatory when using CIDs.

     Another concern, using hash chain will not allow load balancing 
based on CID which could be very usefull for cluster architecture.

     (Californium implementation currently aims DTLS 1.2)

Simon


Le 03/11/2016 à 11:26, Fossati, Thomas (Nokia - GB) a écrit :
> Hi Kai,
>
> On 03/11/2016 08:21, "core on behalf of Hudalla Kai (INST/ESY1)"
> <core-bounces@ietf.org on behalf of
>>> I think the hash should be truncated to avoid adding too much overhead on
>>> the (possibly constrained) channel. Could you please elaborate a bit
>>> more
>>> on the security issue you are seeing here?  (I can see potential issues
>>> with lookup collisions (i.e. functional) if the CID is chosen from a
>>> small
>>> space, but the security impact is not very clear to me.)
>>>
>> I agree that the "uniqueness" property of the hashes will probably be
>> reduced
>> very significantly and this will probably cause a much greater problem
>> (from a
>> functional perspective). Using only truncated hashes might, however, make
>> the
>> hash function itself less secure, i.e. it might be easier for an attacker
>> to
>> determine the next hash if he only needs to make sure that the first six
>> bytes
>> are correct. Again, I am not a security expert but I can imagine that the
>> guarantees an HMAC function makes regarding distribution and
>> irreversibility are
>> somewhat dependent on the length as well ...
> Assuming the attacker doesn't know the shared key, the worst that can
> happen is that she is able to forge a valid CID which has not been used
> yet.
>
> However, given HMAC's properties (i.e., it is a PRF under the sole
> assumption that its compression function is a PRF), this should only be
> possible by luck -- with 2^(-n) chances, where n is the length of the
> truncated HMAC.
>
>
> I've not done any serious analysis, but it seems to me that CID forgery
> would result in a failure decrypting the forged record and possibly a
> de-synchronisation of the CID?  That seems less scary than a server having
> to worry about collisions in its lookup table.
>
>>> If there is interest (as it seems) we could try and draft it in a
>>> slightly
>>> less concise way :-)
>>>
>>> The original plan with Hannes was to also prototype it in his (1.3)
>>> implementation (mbedtls).  If you have another TLS stack that would be
>>> really great.
>>>
>> Yes, I would like to incorporate such a mechanism into the Californium
>> Java CoAP
>> stack.
> Super!  I'll try and draft a proposal that can be implemented ASAP.
>
> Cheers, t
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Thu Nov  3 05:11:04 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A007A12946B for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 05:11:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jdQ3w68MH8bh for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 05:10:59 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84A84129476 for <core@ietf.org>; Thu,  3 Nov 2016 05:10:59 -0700 (PDT)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id 0EAE49A9A6BB8; Thu,  3 Nov 2016 12:10:55 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA3CAubs024507 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 3 Nov 2016 12:10:57 GMT
Received: from FR711WXCHHUB02.zeu.alcatel-lucent.com (fr711wxchhub02.zeu.alcatel-lucent.com [135.239.2.112]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uA3CAthe017846 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 3 Nov 2016 13:10:56 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB02.zeu.alcatel-lucent.com ([135.239.2.112]) with mapi id 14.03.0301.000; Thu, 3 Nov 2016 13:10:56 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: Simon Bernard <contact@simonbernard.eu>, "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>, "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNcTQAGS9FQwAzUanoeddcr18PKDHGliA
Date: Thu, 3 Nov 2016 12:10:55 +0000
Message-ID: <D440D928.74CCD%thomas.fossati@alcatel-lucent.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <a33fdc58-1214-9e6f-d268-47427e94a114@simonbernard.eu>
In-Reply-To: <a33fdc58-1214-9e6f-d268-47427e94a114@simonbernard.eu>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.38]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <B28E736F6D22634F9A2FE819C06431B8@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/a_cZN9nTkHoeETLXhBJAQWfYlp4>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 12:11:01 -0000

Hi Simon,

On 03/11/2016 11:24, "Simon Bernard" <contact@simonbernard.eu> wrote:
>Hi Fossati,
>
>    I would like to insist again about this tracking concern. I see the
>point and I think this is a good point to try to achieve this purpose at
>long term in TLS. But we are going into an IPv6 world with fixed IP, so
>correlating packet will be easier. I know there is RFC to limit this
>kind of tracking issue on IPv6 (https://tools.ietf.org/html/rfc4941) and
>like session the default lifetime is 1day. So from my point of view all
>of this hash chain seems a bit overkill. CID will live as long as
>sessions live, so we limit correlation to 24h, as if we live in an IPv6
>world.
>
>     FMPOV the short term issue is to be able to use DTLS 1.2 in a
>changing IP address environment, mainly the NAT issue. This is the
>problem we faced today. An extension to do that will be welcomed :). I
>hope this kind of hash chain will not be mandatory when using CIDs.

It is not mandatory.  Server can always say: L=3D1 to all clients that want
to negotiate the CID extension.

Cheers, t

>     Another concern, using hash chain will not allow load balancing
>based on CID which could be very usefull for cluster architecture.
>
>     (Californium implementation currently aims DTLS 1.2)
>
>Simon
>
>
>Le 03/11/2016 =E0 11:26, Fossati, Thomas (Nokia - GB) a =E9crit :
>> Hi Kai,
>>
>> On 03/11/2016 08:21, "core on behalf of Hudalla Kai (INST/ESY1)"
>> <core-bounces@ietf.org on behalf of
>>>> I think the hash should be truncated to avoid adding too much
>>>>overhead on
>>>> the (possibly constrained) channel. Could you please elaborate a bit
>>>> more
>>>> on the security issue you are seeing here?  (I can see potential
>>>>issues
>>>> with lookup collisions (i.e. functional) if the CID is chosen from a
>>>> small
>>>> space, but the security impact is not very clear to me.)
>>>>
>>> I agree that the "uniqueness" property of the hashes will probably be
>>> reduced
>>> very significantly and this will probably cause a much greater problem
>>> (from a
>>> functional perspective). Using only truncated hashes might, however,
>>>make
>>> the
>>> hash function itself less secure, i.e. it might be easier for an
>>>attacker
>>> to
>>> determine the next hash if he only needs to make sure that the first
>>>six
>>> bytes
>>> are correct. Again, I am not a security expert but I can imagine that
>>>the
>>> guarantees an HMAC function makes regarding distribution and
>>> irreversibility are
>>> somewhat dependent on the length as well ...
>> Assuming the attacker doesn't know the shared key, the worst that can
>> happen is that she is able to forge a valid CID which has not been used
>> yet.
>>
>> However, given HMAC's properties (i.e., it is a PRF under the sole
>> assumption that its compression function is a PRF), this should only be
>> possible by luck -- with 2^(-n) chances, where n is the length of the
>> truncated HMAC.
>>
>>
>> I've not done any serious analysis, but it seems to me that CID forgery
>> would result in a failure decrypting the forged record and possibly a
>> de-synchronisation of the CID?  That seems less scary than a server
>>having
>> to worry about collisions in its lookup table.
>>
>>>> If there is interest (as it seems) we could try and draft it in a
>>>> slightly
>>>> less concise way :-)
>>>>
>>>> The original plan with Hannes was to also prototype it in his (1.3)
>>>> implementation (mbedtls).  If you have another TLS stack that would be
>>>> really great.
>>>>
>>> Yes, I would like to incorporate such a mechanism into the Californium
>>> Java CoAP
>>> stack.
>> Super!  I'll try and draft a proposal that can be implemented ASAP.
>>
>> Cheers, t
>>
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
>
>



From nobody Thu Nov  3 07:20:56 2016
Return-Path: <Achim.Kraus@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13FB9129670 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 07:20:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gCvoibBJMX67 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 07:20:52 -0700 (PDT)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFD13129A5D for <core@ietf.org>; Thu,  3 Nov 2016 07:20:08 -0700 (PDT)
Received: from vsmta14.fe.internet.bosch.com (unknown [10.4.98.54]) by imta24.fe.bosch.de (Postfix) with ESMTP id 2130ED80233 for <core@ietf.org>; Thu,  3 Nov 2016 15:20:06 +0100 (CET)
Received: from IMBVW2EXC00.bosch-si.com (vsgw23.fe.internet.bosch.com [10.4.98.23]) by vsmta14.fe.internet.bosch.com (Postfix) with ESMTP id BA682A4094D for <core@ietf.org>; Thu,  3 Nov 2016 15:20:05 +0100 (CET)
Received: from IMBPW2EXD01.bosch-si.com ([fe80::d052:f355:928e:e5ba]) by IMBVW2EXC00 ([10.55.1.51]) with mapi id 14.03.0319.002; Thu, 3 Nov 2016 15:20:34 +0100
From: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNbzbqgNEatyAzE2oY3oTttgdOaDHDVMAgAANF4CAADE9MA==
Date: Thu, 3 Nov 2016 14:20:34 +0000
Message-ID: <BC36447FF5C62E46BEF3F124D3C1E8925E1F721A@imbpw2exd01.bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <a33fdc58-1214-9e6f-d268-47427e94a114@simonbernard.eu> <D440D928.74CCD%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D440D928.74CCD%thomas.fossati@alcatel-lucent.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.22.83.125]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22676.006
X-TMASE-MatchedRID: /kSPflIeIbGeiAVLh5/4Ahj42LMyJUg8tDSfcMR+7ZMFuAdnRp9R1zzA K7q1A+Iin6nCw/WwD3n1nLQBuifTp0JkEFfXnYP9U+OjsPhIWDhiRrrm7mTAJNTVzfvwECh5ViU w5w1aVIQv50wt3En5kJC6eq4PHfPjZAfHtrri3D5CvapcIkxJXzXjzUAsRHH7peBD/ncvsAQQwK YJpLUPlhf3zGZtJgCE0xuuLt9Aw9sxGuf08xLk2km30iQM6IGOh/wV7HEEIT3r0/oAezfSPbwaM RaJSfpgjzmNUut1YYZ1vxCvBHvi6Unt4mddEIiTgZTbeFUhryFAq6/y5AEOOiXR/ftQqB53Y2iR 7K8WcswJSrfVjJQqQ3W3cp6eOki6y5j7H7ClYgdjHWM8krL4PFAI6wCVrE3vh8BhJvgqWBl9J8q mo+S/BFBXHrYO0B222T9jSpSUmBQQnhzntItSfLxygpRxo469J6YseBRzuxlrMbakJN8OeZJuGM HqaHz5+KJDS6AIBtgrI1bnrGhNJNR3/qVjNcrSliwpJdZauwdcSMp/1+EppxI+jlzyGLPnyU7Xg Ts6W4IJN0/KzaqfKBnXKu8rGlRWUv4rCBFxg7+PQVakDkJU+W1qLi+eYRo931GU/N5W5BDCLItv 4B1yR/Gswfo+3OSUPjd+1EAfy9OfGHvjSOMWyqtWSWds/km2ekVdFZmnbv4SELL2EzMisNDvpyU uLSMVpSKUl6qzbckXq8j/dvpE9Fz6f/Q3GOrz2MZGQuKc8UgLitYSIrUiB5uSv4SfxhK3M7nDUI L90Gvi8zVgXoAltiKGYMig1X8zC24oEZ6SpSk+Mqg+CyrtwA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/IXYGFhzL5kMth18xuJb7mFcWby0>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 14:20:55 -0000

Hi,

> It is not mandatory.  Server can always say: L=3D1 to all clients that wa=
nt to negotiate the CID extension.

Wed, 2 Nov 2016 14:10:53 +0000:
> The idea is that the client has it's own "CID shift" policy (e.g., based
> on time, or number of packets exchanged, NAT rebinding awareness, etc.)
> and will decide unilaterally when to move to the next CID in chain, until
> the chain is exhausted.  The server will mirror the last CID received.  I=
n
> this scheme, packet loss has no impact as long as client keeps alive CIDs
> that have been shifted but not yet "acknowledged" by the server on the
> back channel.

With L :=3D 1,=20
What does "the chain is exhausted" mean?
What is the idea of "not yet "acknowledged" by the server on the back chann=
el?

Mit freundlichen Gr=FC=DFen / Best regards

Achim Kraus

Bosch Software Innovations GmbH
Communications (INST/ESY1)
Stuttgarter Stra=DFe 130
71332 Waiblingen
GERMANY
www.bosch-si.de
www.blog.bosch-si.com=20

Registered office: Berlin, Register court: Amtsgericht Charlottenburg, HRB =
148411 B
Executives: Dr.-Ing. Rainer Kallenbach; Michael Hahn



-----Urspr=FCngliche Nachricht-----
Von: core [mailto:core-bounces@ietf.org] Im Auftrag von Fossati, Thomas (No=
kia - GB)
Gesendet: Donnerstag, 3. November 2016 13:11
An: Simon Bernard <contact@simonbernard.eu>; Fossati, Thomas (Nokia - GB) <=
thomas.fossati@nokia.com>; Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.co=
m>; core@ietf.org
Betreff: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-=
optimizations-00

Hi Simon,

On 03/11/2016 11:24, "Simon Bernard" <contact@simonbernard.eu> wrote:
>Hi Fossati,
>
>    I would like to insist again about this tracking concern. I see the=20
>point and I think this is a good point to try to achieve this purpose=20
>at long term in TLS. But we are going into an IPv6 world with fixed IP,=20
>so correlating packet will be easier. I know there is RFC to limit this=20
>kind of tracking issue on IPv6 (https://tools.ietf.org/html/rfc4941)=20
>and like session the default lifetime is 1day. So from my point of view=20
>all of this hash chain seems a bit overkill. CID will live as long as=20
>sessions live, so we limit correlation to 24h, as if we live in an IPv6=20
>world.
>
>     FMPOV the short term issue is to be able to use DTLS 1.2 in a=20
>changing IP address environment, mainly the NAT issue. This is the=20
>problem we faced today. An extension to do that will be welcomed :). I=20
>hope this kind of hash chain will not be mandatory when using CIDs.

It is not mandatory.  Server can always say: L=3D1 to all clients that want=
 to negotiate the CID extension.

Cheers, t

>     Another concern, using hash chain will not allow load balancing=20
>based on CID which could be very usefull for cluster architecture.
>
>     (Californium implementation currently aims DTLS 1.2)
>
>Simon
>
>
>Le 03/11/2016 =E0 11:26, Fossati, Thomas (Nokia - GB) a =E9crit :
>> Hi Kai,
>>
>> On 03/11/2016 08:21, "core on behalf of Hudalla Kai (INST/ESY1)"
>> <core-bounces@ietf.org on behalf of
>>>> I think the hash should be truncated to avoid adding too much=20
>>>>overhead on  the (possibly constrained) channel. Could you please=20
>>>>elaborate a bit  more  on the security issue you are seeing here? =20
>>>>(I can see potential issues  with lookup collisions (i.e.=20
>>>>functional) if the CID is chosen from a  small  space, but the=20
>>>>security impact is not very clear to me.)
>>>>
>>> I agree that the "uniqueness" property of the hashes will probably=20
>>>be  reduced  very significantly and this will probably cause a much=20
>>>greater problem  (from a  functional perspective). Using only=20
>>>truncated hashes might, however, make  the  hash function itself less=20
>>>secure, i.e. it might be easier for an attacker  to  determine the=20
>>>next hash if he only needs to make sure that the first six  bytes =20
>>>are correct. Again, I am not a security expert but I can imagine that=20
>>>the  guarantees an HMAC function makes regarding distribution and =20
>>>irreversibility are  somewhat dependent on the length as well ...
>> Assuming the attacker doesn't know the shared key, the worst that can=20
>> happen is that she is able to forge a valid CID which has not been=20
>> used yet.
>>
>> However, given HMAC's properties (i.e., it is a PRF under the sole=20
>> assumption that its compression function is a PRF), this should only=20
>> be possible by luck -- with 2^(-n) chances, where n is the length of=20
>> the truncated HMAC.
>>
>>
>> I've not done any serious analysis, but it seems to me that CID=20
>>forgery  would result in a failure decrypting the forged record and=20
>>possibly a  de-synchronisation of the CID?  That seems less scary than=20
>>a server having  to worry about collisions in its lookup table.
>>
>>>> If there is interest (as it seems) we could try and draft it in a=20
>>>> slightly less concise way :-)
>>>>
>>>> The original plan with Hannes was to also prototype it in his (1.3)=20
>>>> implementation (mbedtls).  If you have another TLS stack that would=20
>>>> be really great.
>>>>
>>> Yes, I would like to incorporate such a mechanism into the=20
>>> Californium Java CoAP stack.
>> Super!  I'll try and draft a proposal that can be implemented ASAP.
>>
>> Cheers, t
>>
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
>
>


_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Thu Nov  3 07:44:14 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A264812943C for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 07:44:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IZAX4Tdj3TZt for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 07:44:10 -0700 (PDT)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5E5B129625 for <core@ietf.org>; Thu,  3 Nov 2016 07:43:53 -0700 (PDT)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id 4923434B56905; Thu,  3 Nov 2016 14:43:49 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA3EhpSi028265 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 3 Nov 2016 14:43:52 GMT
Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uA3EhmwQ024251 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 3 Nov 2016 15:43:50 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0301.000; Thu, 3 Nov 2016 15:43:48 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [ALU] Re: [core] [ALU] Re: [ALU] Re: Questionreg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNd2AHZyhxh6LIEGVPKo0FJzaIKDHRNyA
Date: Thu, 3 Nov 2016 14:43:48 +0000
Message-ID: <D440FBA1.74D16%thomas.fossati@alcatel-lucent.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <a33fdc58-1214-9e6f-d268-47427e94a114@simonbernard.eu> <D440D928.74CCD%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F721A@imbpw2exd01.bosch-si.com>
In-Reply-To: <BC36447FF5C62E46BEF3F124D3C1E8925E1F721A@imbpw2exd01.bosch-si.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.38]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <8CB0BCD47C8F04499F7ADEE4E5673513@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/dA2FiAl2-2qrIDhNttA5HkD5vtc>
Subject: Re: [core] [ALU] Re: [ALU] Re: [ALU] Re: Questionreg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 14:44:11 -0000

Hi Achim,

On 03/11/2016 14:20, "core on behalf of Kraus Achim (INST/ESY1)"
<core-bounces@ietf.org on behalf of Achim.Kraus@bosch-si.com> wrote:
>>It is not mandatory.  Server can always say: L=3D1 to all clients that
>>want to negotiate the CID extension.
>
>Wed, 2 Nov 2016 14:10:53 +0000:
>> The idea is that the client has it's own "CID shift" policy (e.g., based
>> on time, or number of packets exchanged, NAT rebinding awareness, etc.)
>> and will decide unilaterally when to move to the next CID in chain,
>>until
>> the chain is exhausted.  The server will mirror the last CID received.
>>In
>> this scheme, packet loss has no impact as long as client keeps alive
>>CIDs
>> that have been shifted but not yet "acknowledged" by the server on the
>> back channel.
>
>With L :=3D 1,=20
>What does "the chain is exhausted" mean?

The semantics should be the same as L:=3Dn when there have been already n-1
shifts: i.e., there are no more CIDs to try and you are stuck with this.

>What is the idea of "not yet "acknowledged" by the server on the back
>channel?

Since there is no forward shift possible the server acknowledgement is not
relevant because you can always assume that the other party is aligned --
independently of packet loss.

Cheers, t


From nobody Thu Nov  3 07:57:03 2016
Return-Path: <pthubert@cisco.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB25F129A7E for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 07:57:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.018
X-Spam-Level: 
X-Spam-Status: No, score=-16.018 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EDMHXG8My7zS for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 07:56:56 -0700 (PDT)
Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD74D129A79 for <core@ietf.org>; Thu,  3 Nov 2016 07:56:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3695; q=dns/txt; s=iport; t=1478185015; x=1479394615; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=5a+ZlktCt3ejNSIN9KC8dmKiIv5zko23ztio5Uuv/GE=; b=JkAZCDfecb1MtEGpfOerJuRhWIDYcsuxUPAaVjgXnib72Txg0RNwft2W FD95NolIF2W349b2QMXcKlPnJmeeHfQh4mhfby+8HnKypv/aW+RK08FSk K0Ri/3emxHyqziK+40RWhPZDMW/T5eALHqqWjwGwnFKbmbFWurnFL1URS U=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ATAQAsTxtY/5RdJa1VCRkBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYMwAQEBAQEfWHwHjTCXAJRHgggdC4V6AoIAPxQBAgEBAQEBAQF?= =?us-ascii?q?iKIRhAQEBBAEBAWsXBAIBCA4DBAEBAScHJwsUCQgCBAESCIhODrstAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBFwWGP4RVhCAEKjGFKAWPDIsUAZA1kBGNHYQDAR43a4M?= =?us-ascii?q?mHIFdcoVAgS6BDAEBAQ?=
X-IronPort-AV: E=Sophos;i="5.31,587,1473120000"; d="scan'208";a="341939663"
Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 03 Nov 2016 14:56:54 +0000
Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id uA3EusJZ003386 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 3 Nov 2016 14:56:54 GMT
Received: from xch-rcd-001.cisco.com (173.37.102.11) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 3 Nov 2016 09:56:53 -0500
Received: from xch-rcd-001.cisco.com ([173.37.102.11]) by XCH-RCD-001.cisco.com ([173.37.102.11]) with mapi id 15.00.1210.000; Thu, 3 Nov 2016 09:56:54 -0500
From: "Pascal Thubert (pthubert)" <pthubert@cisco.com>
To: Simon Bernard <contact@simonbernard.eu>, "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>, "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNSmQcF0hGms8YkGiHfvIj+IPxqDGRMMAgAEVBFA=
Date: Thu, 3 Nov 2016 14:56:30 +0000
Deferred-Delivery: Thu, 3 Nov 2016 14:55:30 +0000
Message-ID: <732a43ad983b4b5ca13ed790129d3047@XCH-RCD-001.cisco.com>
References: <D43F60A9.74AFB%thomas.fossati@alcatel-lucent.com> <BC36447FF5C62E46BEF3F124D3C1E8925E1F5F6B@imbpw2exd01.bosch-si.com> <607f8720-8e86-90f6-83fd-299939c298ae@simonbernard.eu> <D43FC498.74BA7%thomas.fossati@alcatel-lucent.com> <0505862c-8aba-0457-00f1-68a53019a136@simonbernard.eu>
In-Reply-To: <0505862c-8aba-0457-00f1-68a53019a136@simonbernard.eu>
Accept-Language: fr-FR, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.55.22.5]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/k7qfwX4f9_XbbzgMsO04R-iE2KE>
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 14:57:02 -0000

Super, Sebastien!

I'll help as much as I can. I have a conflict on Thursday but will try to s=
how up as much as I can.

Take care,

Pascal

-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of Simon Bernard
Sent: mercredi 2 novembre 2016 18:22
To: Fossati, Thomas (Nokia - GB) <thomas.fossati@nokia.com>; Kraus Achim (I=
NST/ESY1) <Achim.Kraus@bosch-si.com>; core@ietf.org
Subject: Re: [core] [ALU] Re: Question reg. draft-fossati-tls-iot-optimizat=
ions-00

With TLS 1.2 we currently don't have this tracking aspect consideration=20
? Identity is sent in clear, by sniffing the network you could know who=20
send to who. This seems to me like another issue/feature.

Currently TLS don't protect you from tracking or provide you any=20
anonymity : "The primary goal of the TLS protocol is to provide privacy=20
and data integrity between two communicating applications." (+=20
authentication)

As a wiseman tell to me : "one step at a time !".

(ConnectionID will have a lifetime less or equals than the session=20
lifetime, this means 24h maximum. This limit the tracking activity based=20
on connectionID to 24h)

Le 02/11/2016 =E0 17:52, Fossati, Thomas (Nokia - GB) a =E9crit :
> Hi Simon,
>
> On 02/11/2016 16:08, "core on behalf of Simon Bernard"
> <core-bounces@ietf.org on behalf of contact@simonbernard.eu> wrote:
>> Hi all,
>>
>>     I'm not sure to understand the point here.
>>     *   The "draft-fossati-tls-iot-optimizations-00" says "The privacy
>> issue associated with the use of a long-term identifier
>>     must be taken into consideration."
>>     *   Thomas says "I think privacy preservation should be a goal".
>>     I would like to understand which privacy concern we would like to
>> achieve exactly ? With TLS we have end to end encryption. You want to
>> add a kind of  anonymity ? or maybe protect ourself from connectionid
>> spoofing ?
> The issue is that something like CID will make tracking a device activity
> across different transports very easy.  (Personally, I think NAT rebindin=
g
> is a bit different because it usually happens without client awareness,
> and therefore already exposes correlation information to a possible
> tracker.)
>
> In any case, if we make this an extension of the general TLS protocol we
> need to make sure we design it in a way that a) is fit for the purpose
> from a functional and security perspective, and b) takes into
> consideration the tracking aspects for clients that want to have finer
> control on their privacy.
>
>
>>     From my point of view, the connection id is just a way to replace
>> the IP address by a connection identifier for use-cases where IP address
>> is not fixed. So we have the same security level with connection id than
>> fixed IP. We are maybe a bit more exposed to spoofing as connectionid
>> spoofing is probably more simple than UDP IP address spoofing, but not
>> so much. I mean connectionid is just another way to retrieve security
>> context needed to decrypt Application Data.
> ISTM that if CID has enough randomness and is integrity-protected, then
> spoofing is not an issue (or it is less an issue than security context
> lookup based on a fully tamperable 5-tuple).  But certainly this is a
> dimension to explore further (e.g. depending on the way CID is
> synchronised on the two sides, there might be opportunities for an
> attacker that can selectively drop packets from the network to do
> different things, I guess).
>
> Cheers, t
>

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Thu Nov  3 11:03:50 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63D86129695 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 11:03:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qIrZm0Isx329 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 11:03:47 -0700 (PDT)
Received: from 17.mo3.mail-out.ovh.net (17.mo3.mail-out.ovh.net [87.98.178.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F7F7129490 for <core@ietf.org>; Thu,  3 Nov 2016 11:03:46 -0700 (PDT)
Received: from player772.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo3.mail-out.ovh.net (Postfix) with ESMTP id 1085B5928D for <core@ietf.org>; Thu,  3 Nov 2016 19:03:44 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player772.ha.ovh.net (Postfix) with ESMTPSA id A51224C0073 for <core@ietf.org>; Thu,  3 Nov 2016 19:03:44 +0100 (CET)
To: "core@ietf.org" <core@ietf.org>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu>
Date: Thu, 3 Nov 2016 19:03:43 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Ovh-Tracer-Id: 8935141662914918567
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeejgdelvdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecu
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/0vwuEnq6IRHJc70l3BTggX6p9vs>
Subject: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 18:03:49 -0000

Hi list,

I have attended meeting of the T2T RG in Ludwigsburg, there is a 
discussion around CoAP observation in NATed environment using DTLS (1.2).

I would like to share my thought here about that:

     The problem :
Currently the CoAP spec say :
"All notifications resulting from a GET request with an Observe Option 
MUST be returned within the same epoch of the same connection as the 
request."
Currently, in TLS, a connection is identified by its IP/Port address.
So when your IP address changed because of the NAT expiration, you must 
create a new TLS connection and so create a new CoAP observation relation.

     Behind this practical problem, I understand there is 2 separated 
issue :
1) Define a long term identifier for CoAP instead of limited CoAP 
interaction to the same DTLS connection. At CoAP level users would like 
to know from which or to which they send data.
2) Be able to use DTLS with dynamic IP address (e.g. NAT) without the 
need to redo full handshake or resume handshake.

     Possible Solutions ?
1) Using the DTLS identity (PSK identity for PSK, public key for RPK, CN 
for certificate, ...) and only if there is no authentication the DTLS 
Session as constraint for CoAP exchange. (we remove the same epoch/same 
connection constraint)
2) Using the "connectionId" extension proposed in the 
draft-fossati-tls-iot-optimizations-00.

Does it make sense  ?

Simon


From nobody Thu Nov  3 11:59:10 2016
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD250129465 for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 11:59:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.798
X-Spam-Level: 
X-Spam-Status: No, score=-5.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lg3linVj_zGE for <core@ietfa.amsl.com>; Thu,  3 Nov 2016 11:59:06 -0700 (PDT)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14951128B44 for <core@ietf.org>; Thu,  3 Nov 2016 11:59:05 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id E6C81BE74; Thu,  3 Nov 2016 18:59:02 +0000 (GMT)
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id waEqk-L-5d6i; Thu,  3 Nov 2016 18:58:57 +0000 (GMT)
Received: from [10.87.48.210] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id F203BBE6F; Thu,  3 Nov 2016 18:58:56 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1478199537; bh=9QD6CNDbdyo1gAmX9YQybXih7hcWAo+pL8DIeeTGEdM=; h=Subject:To:References:From:Date:In-Reply-To:From; b=3YCF5jG2HE/3wOlyUU0BAYQBpB+pyK9RymPcTUhWJ11WFleawv0BXpTNCktgaDmTb Dmf1mameQ6bpIWhHKbw338isU49ZirUt5FZaY4ANvJgS+Dz2rK2jLyHjooq5V2mlKt D05ZcuRqJ2qbz8Woxx0tj6ADH4UtRBVZrgrX9Auw=
To: Simon Bernard <contact@simonbernard.eu>, "core@ietf.org" <core@ietf.org>
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url=
Message-ID: <3b706423-884d-407d-882f-0118b20761b6@cs.tcd.ie>
Date: Thu, 3 Nov 2016 18:58:57 +0000
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms080103070000000600080207"
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-bieYmgKo2AID-SMVVJB2WSEtj0>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Nov 2016 18:59:09 -0000

This is a cryptographically signed message in MIME format.

--------------ms080103070000000600080207
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Just on one snippet (and sorry, I've not fully followed the
recent threads on this) but...

On 03/11/16 18:03, Simon Bernard wrote:
> Define a long term identifier for CoAP

That's not an "issue," that's a design. And a potentially
very privacy unfriendly one too.

A sequence of identifiers that can be correlated by the
intended parties but nobody else is another solution.

There are probably more too.

Cheers,
S.


--------------ms080103070000000600080207
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms080103070000000600080207--


From nobody Fri Nov  4 01:17:16 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AB9B129496; Fri,  4 Nov 2016 01:17:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.22
X-Spam-Level: 
X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6LpNWqeZRLdO; Fri,  4 Nov 2016 01:17:11 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2433D129407; Fri,  4 Nov 2016 01:17:10 -0700 (PDT)
X-AuditID: c1b4fb3a-447ff700000070a2-76-581c4403a9d1
Received: from ESESSHC014.ericsson.se (Unknown_Domain [153.88.183.60]) by  (Symantec Mail Security) with SMTP id EF.B5.28834.3044C185; Fri,  4 Nov 2016 09:17:09 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC014.ericsson.se ([153.88.183.60]) with mapi id 14.03.0319.002; Fri, 4 Nov 2016 09:17:07 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Brian Raymor <Brian.Raymor@microsoft.com>
Thread-Topic: =?utf-8?B?8J+UlCBXR0xDIG9uIGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHM=?=
Thread-Index: AQHSLpW5Z9gSQdMCvkatjPcQsteaNaDEzpZggAOrIoA=
Date: Fri, 4 Nov 2016 08:17:06 +0000
Message-ID: <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com>
In-Reply-To: <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
Content-Type: multipart/signed; boundary="Apple-Mail-D54A3CDE-6DE5-4D6A-AB5E-7C5FF99EC122"; protocol="application/pkcs7-signature"; micalg=sha1
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrNIsWRmVeSWpSXmKPExsUyM2K7jS6ri0yEQcNxJYv78x4xWex7u57Z 4s/ExYwWN2ecYrLYNvkVkwOrx5p5axg9liz5yeTRuuMvu8e0RZkBLFFcNimpOZllqUX6dglc Ga9vXWMuONPJVLH560v2BsYtTUxdjBwcEgImEi9/mHUxcnEICaxjlDi7cDYbhLOYUWLX9ldA DicHm4CLxIOGR0wgtoiArkT/2xfMIEXMAj1MEq3vpjKCJIQFAiWOz5vHDFEUJPG89zk7hG0l sejNKrAaFgEViT+LvoMN4hWwl2jb/YYRYls3o8SEz71sICdxCsRK7H3PCVLDKCAm8f3UGrB6 ZgFxiVtP5oPZEgIiEg8vnmaDsEUlXj7+xwpRM5lRYt9iL4j5ghInZz5hmcAoPAtJ+ywkZbOQ lEHE4yVOr+tkhLDlJba/ncMMYWtK7O9eDlWjKDGl+yE7hK0h0fltIiumuLXEjF8H2SBsU4nX Rz8yIqtZwMizilG0OLW4ODfdyEgvtSgzubg4P08vL7VkEyMw2g9u+W21g/Hgc8dDjAIcjEo8 vB8CpCOEWBPLiitzDzGqAM15tGH1BUYplrz8vFQlEd49djIRQrwpiZVVqUX58UWlOanFhxil OViUxHnNVt4PFxJITyxJzU5NLUgtgskycXBKNTD6aO2Y0VMi0hfOLl4QzRbs53ab69NBJ7em eo1ZbqlqkpI3fM+6hvh9Cu3RyT0SU8zUIH2EMc713tswif22u7kF4xun5B9a+fYEI/vbhct3 zeo9vb7MVnl/w+tbkccXtz45ffrSykUFYg+jky8HSLpct+dwfLXM8sffu0ead0zXDBMtTH+U 8EeJpTgj0VCLuag4EQD9WXpJ/gIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/apxcHsXPRGvngt2jC8X1FHbotww>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, Klaus Hartke <hartke@tzi.org>, "core@ietf.org WG" <core@ietf.org>, "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 08:17:14 -0000

--Apple-Mail-D54A3CDE-6DE5-4D6A-AB5E-7C5FF99EC122
Content-Type: multipart/alternative;
	boundary=Apple-Mail-944E3E42-264A-4CC8-AAB6-2D0E50E963C0
Content-Transfer-Encoding: 7bit


--Apple-Mail-944E3E42-264A-4CC8-AAB6-2D0E50E963C0
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: base64
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--Apple-Mail-944E3E42-264A-4CC8-AAB6-2D0E50E963C0
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: base64
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--Apple-Mail-944E3E42-264A-4CC8-AAB6-2D0E50E963C0--

--Apple-Mail-D54A3CDE-6DE5-4D6A-AB5E-7C5FF99EC122
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--Apple-Mail-D54A3CDE-6DE5-4D6A-AB5E-7C5FF99EC122--


From nobody Fri Nov  4 01:20:29 2016
Return-Path: <Lauri.Piikivi@arm.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B135912941A for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:20:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aQI-7XDty91a for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:20:24 -0700 (PDT)
Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50064.outbound.protection.outlook.com [40.107.5.64]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F1CA127077 for <core@ietf.org>; Fri,  4 Nov 2016 01:20:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5Rcr9eYxnaqLjg2dxPEXs9X1U2jT5+CLo9zH9TvpHSA=; b=Yawau5KxVoOF+l/IwWoWWDl7gqjW36MYWieXPOoSOtRCT/zWav3NhhPANYmlZIrC0EmNcjFaAux0632N6f8Hj9ODdbCR8hRE/TAfM1sXLnGYHSAYSmirPQeuXNY3AClFJRBNQ01CpGYdJtFNa4iEK1qrvAlviIFuv05w+wxI0l4=
Received: from VI1PR0802MB2383.eurprd08.prod.outlook.com (10.172.14.135) by VI1PR0802MB2382.eurprd08.prod.outlook.com (10.172.14.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Fri, 4 Nov 2016 08:20:21 +0000
Received: from VI1PR0802MB2383.eurprd08.prod.outlook.com ([10.172.14.135]) by VI1PR0802MB2383.eurprd08.prod.outlook.com ([10.172.14.135]) with mapi id 15.01.0693.009; Fri, 4 Nov 2016 08:20:21 +0000
From: Lauri Piikivi <Lauri.Piikivi@arm.com>
To: Simon Bernard <contact@simonbernard.eu>
Thread-Topic: [core] CoAP observation in NATed environment using DTLS
Thread-Index: AQHSNfyk76+wNVHFqkuHuLzqhykyqqDIfJYA
Date: Fri, 4 Nov 2016 08:20:21 +0000
Message-ID: <249DA03B-E96F-4DA1-A023-C862F5B75D32@arm.com>
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu>
In-Reply-To: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Lauri.Piikivi@arm.com; 
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [217.140.96.140]
x-ms-office365-filtering-correlation-id: 1ad85589-c001-4a15-9581-08d4048b6b80
x-microsoft-exchange-diagnostics: 1; VI1PR0802MB2382; 7:eo+UdrHd4LafvpDD0cUoa//RenwzIHQOsdd7z0jR3zLHVBoBhK1DHA3j+KDhQNqDTzqiHTXEw45YBGdAA/nAeYtFm+yHGzzONzo1GNerHXCPSv1XyM71xndpQ+/ngseESulywMx4LSETfC37lHU/ZA5K0cgELynGoAh6dfNjtlK9TkC/1Nc8cdU5f/h3hGJ6m3GXnaWcFiFSXvWwEI9gfAMyKqsRJtcYVrYPkLmsnHTrUE0Di1xawN+ED3wJc0k5dZ2RfrTsW1x4dj8b0iN8jOibCf1htrUpxUKPhjCRN0O/JWDvsZBNGHfP8n/Dd0/e9ANxc0n0EjcbCcnC10h5eZVeeLJYJl014PzfVHDni4M=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:VI1PR0802MB2382;
x-microsoft-antispam-prvs: <VI1PR0802MB238225F1CE0E98D2BBEDE0EBEBA20@VI1PR0802MB2382.eurprd08.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(190756311086443)(192374486261705);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:VI1PR0802MB2382; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0802MB2382; 
x-forefront-prvs: 01165471DB
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(199003)(189002)(40434004)(24454002)(305945005)(66066001)(6916009)(2906002)(68736007)(82746002)(4326007)(122556002)(5660300001)(8676002)(2900100001)(2950100002)(86362001)(83716003)(3660700001)(87936001)(10400500002)(97736004)(5002640100001)(19580405001)(7736002)(189998001)(81156014)(81166006)(36756003)(3280700002)(8936002)(19580395003)(101416001)(106116001)(106356001)(102836003)(105586002)(77096005)(3846002)(11100500001)(6116002)(7846002)(586003)(15975445007)(76176999)(54356999)(33656002)(5890100001)(110136003)(92566002)(50986999)(557034004)(104396002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0802MB2382; H:VI1PR0802MB2383.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <2A1962406AEA0C42AF5EFA18DDE5B020@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2016 08:20:21.5395 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0802MB2382
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/LMHgMxRcRtBknDfgSd0cMd9b0uo>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 08:20:28 -0000
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From nobody Fri Nov  4 01:25:27 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53151129496 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:25:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AsrNXMTR_CnB for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:25:23 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82C93126CD8 for <core@ietf.org>; Fri,  4 Nov 2016 01:25:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA48PKtG008523; Fri, 4 Nov 2016 09:25:20 +0100 (CET)
Received: from nar-4.local.informatik.uni-bremen.de (robin.informatik.uni-bremen.de [134.102.218.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t9FJb6vR6z7xw9; Fri,  4 Nov 2016 09:25:19 +0100 (CET)
X-Mailer: emacs 26.0.50.1 (via feedmail 11-beta-1 I)
From: Carsten Bormann <cabo@tzi.org>
To: =?utf-8?Q?G=C3=B6ran?= Selander <goran.selander@ericsson.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com>
Date: Fri, 04 Nov 2016 09:25:17 +0100
In-Reply-To: <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> (=?utf-8?Q?=22G=C3=B6ran?= Selander"'s message of "Fri, 4 Nov 2016 08:17:06 +0000")
Message-ID: <m07f8jfy8i.fsf@nar-4.local>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (darwin)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/3pYO4c1TPHF8Ykgfpf05zX30Z_Y>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 08:25:25 -0000

G=C3=B6ran Selander <goran.selander@ericsson.com> writes:

> I believe we all agree that security must be mandatory to implement,

Yes.

> and on by default.

I don't know what that means.

Security is a process.  If people aren't doing the process, then
"switching on security" in a protocol implementation isn't giving you any.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Fri Nov  4 01:27:31 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FBED1294FD for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:27:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MN8u43IPDAlY for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:27:27 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F41BA126CD8 for <core@ietf.org>; Fri,  4 Nov 2016 01:27:26 -0700 (PDT)
Received: from [192.168.91.155] ([80.92.118.131]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0MbgKD-1cJHLa3mEv-00J1mb; Fri, 04 Nov 2016 09:27:16 +0100
To: Carsten Bormann <cabo@tzi.org>, =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <m07f8jfy8i.fsf@nar-4.local>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net>
Date: Fri, 4 Nov 2016 09:27:14 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <m07f8jfy8i.fsf@nar-4.local>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="rEmVoLwS9cOM6rGlA11moiR8pWH0TnJgE"
X-Provags-ID: V03:K0:RzPRqXox4naYld+/aaXdoPdSRLA7Fzcjdf0fdk6f8wHoihgwKj1 SvAkzrZBgAPz6Dk8WlSOMILGjqEkMvUEyO4RfxHiLnA7+tOCu25vXBJ7USzwdiOjVKkde3I RBV+BQn/vDMgx1wLc7RzKzmGqoTx+2U5V7ws/iMeNGMC2rs0PzgQF6o7uHhCy/9mqWkms7J 1MGASKVd9nFL/TdrI01ww==
X-UI-Out-Filterresults: notjunk:1;V01:K0:Mrg6OkzMHPA=:TtNQheKsT7Wggl+HT7J8NO /RBgrIXQe7YSsU+Jsl8wS7ehWFzCGF+o+z4961jWUYhK07Gv4z3sdkUzwf5k+81lSkgQj1gOZ O2JgEK3Nu/ySujfWwp4GdSd2G58dcRLd28JybX1n1GZT6Rnw/ZzvPVzXi5P5y4K150xuVCWCG lDNKM2u2OoJC7pQgljq3JYYVMlwuRgItdY1F6bAzfoX5R0RGHt1xT0qMW9CrBYgqcOqzQf0e9 lxnMP7bNHj2uyiFhf8h1foN6acQ+s+WfwBsVMDO983LZgf+7PuE8hpDiTfOZO+tGjeOTnfMVV E53dKvrFlXSaX+BbK7Ylb0AOBTRnBp3CQf6PAR5VeSIXwv/Xi76/iRVKD9BrvshIzcf2oh8kk HJGSkyTV+RvErO4LybzJAuIxAs2LZnTcn0W9YNnIIAhCAdTIPCclnl/5YONsePr6PKiWOW4ar Y0nbja1HB0bvcf8tU/RHLAon6zzbaxz+Wizy7LIUwUfm8d3iOyfsQ2SdKLl6YliftPhhwTkO8 JzVcxP9fkJ4Z0CyThsPzEXv3t1mVjm9scXVePZmDMzd3BE9qSc4BIm+gENNrp419M6lamMW53 7gFiWdltPvepiBNeb73m/PB1IXRZCWXaQZ+ftrbUrq85OnVXTmKfCjnvQW5+eGHU0sLn/iN0z 6AekrnJZ9iZzCIntnNSxeGZo4HowzQe+57abgwzXDl8GxK7ZWPL/lFSClcF2FRt3/fCJ97JD2 S1I0o0rHS+BtRvWz/MuC4TyqL878VEO7NC51qcs9Ob2vzvg7IVIg0juIg0Y=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/n_IiSKFLqRF8QU4i0rcrPKyaYrc>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 08:27:29 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--rEmVoLwS9cOM6rGlA11moiR8pWH0TnJgE
Content-Type: multipart/mixed; boundary="c5QA8kkwrmLTqChALJ8iQnhngGGgPdQhW";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: Carsten Bormann <cabo@tzi.org>,
 =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>
Cc: "core@ietf.org WG" <core@ietf.org>
Message-ID: <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net>
Subject: =?UTF-8?Q?Re:_[core]_=f0=9f=94=94_WGLC_on_draft-ietf-core-coap-tcp-?=
 =?UTF-8?Q?tls?=
References: <D434CFFC.6B35D%goran.selander@ericsson.com>
 <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com>
 <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com>
 <m07f8jfy8i.fsf@nar-4.local>
In-Reply-To: <m07f8jfy8i.fsf@nar-4.local>

--c5QA8kkwrmLTqChALJ8iQnhngGGgPdQhW
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

I think in this context it would be better to replace 'security' with
'TLS'.

It makes sense to mandate implementing TLS and to use it per default.

Ciao
Hannes

On 11/04/2016 09:25 AM, Carsten Bormann wrote:
> G=C3=B6ran Selander <goran.selander@ericsson.com> writes:
>=20
>> I believe we all agree that security must be mandatory to implement,
>=20
> Yes.
>=20
>> and on by default.
>=20
> I don't know what that means.
>=20
> Security is a process.  If people aren't doing the process, then
> "switching on security" in a protocol implementation isn't giving you a=
ny.
>=20
> Gr=C3=BC=C3=9Fe, Carsten
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>=20


--c5QA8kkwrmLTqChALJ8iQnhngGGgPdQhW--

--rEmVoLwS9cOM6rGlA11moiR8pWH0TnJgE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYHEZiAAoJEGhJURNOOiAt2uAH/0a2LLm8KaJqV7h3NTns+ivs
hHtE/21Tj5iu+ZAKhx8+DyYfxjEGI+1jbeXStfrMl2RbEJ696eaxw0RLAr2d5fYC
ydDSsTuKCBLOzyJAur+UZCVEvD/xgyHf9Fe85MHDhbs59wvSUeYoFao3s1w6Sc7g
71xe8FYQ7+JU1KJ8RJBScoXZoC34difVaqa+0GiqwkD9SpPHO+C3IHAOJ0+8lgka
qGbkyPsiN2UbcdkSm12Ah1D99iZNYFO+6bNWVu9svU39NigHxNO/tKWT0u+yi8I3
IhQcvEjHZs3qjlIquSvK1ptKtDu40ddqdKwaN0/C4JHaoScBdwVBHhmO7ahUgEk=
=R7Gb
-----END PGP SIGNATURE-----

--rEmVoLwS9cOM6rGlA11moiR8pWH0TnJgE--


From nobody Fri Nov  4 01:58:09 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80A7D1294A7 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:58:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ayvfvtFPOozX for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 01:58:02 -0700 (PDT)
Received: from lb3-smtp-cloud3.xs4all.net (lb3-smtp-cloud3.xs4all.net [194.109.24.30]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 442441294F1 for <core@ietf.org>; Fri,  4 Nov 2016 01:58:01 -0700 (PDT)
Received: from webmail.xs4all.nl ([194.109.20.205]) by smtp-cloud3.xs4all.net with ESMTP id 3kxx1u0024RV18J01kxxJt; Fri, 04 Nov 2016 09:57:59 +0100
Received: from 2001:983:a264:1:50b8:9733:c70:b8c6 by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Fri, 04 Nov 2016 09:57:57 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Date: Fri, 04 Nov 2016 09:57:57 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Carsten Bormann <cabo@tzi.org>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <etPan.5818bad3.78c6b580.9528@tzi.org>
References: <147775346922.30618.14590857285848221161.idtracker@ietfa.amsl.com> <e191cf557b00e7003048fac4e72ba59c@xs4all.nl> <etPan.5818b52f.a07279a.9528@AirmailxGenerated.am> <etPan.5818bad3.78c6b580.9528@tzi.org>
Message-ID: <5e9f1e40bac34f2a550dba2e72abd8cc@xs4all.nl>
X-Sender: stokcons@xs4all.nl (pv7K8KB6ZFQAKEFPfRfEyA1icDqdAqex)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/W-Zu3PbeClDgjuFtnOa4tY1ao6A>
Cc: Anima-bootstrap <anima-bootstrap@ietf.org>, Core <core@ietf.org>
Subject: Re: [core] [Anima-bootstrap] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 08:58:04 -0000

It all depends on the interest generated in this document and for what 
purpose:
- BRSKI only with limited EST support
- Or full EST

For the moment it is BRSKI without manual intervention. When things are 
missing in that context, we will certainly add them.

Peter

Carsten Bormann schreef op 2016-11-01 16:34:
> Sending around MIME messages between constrained devices doesnâ€™t
> strike me as the optimal way forward.
> Fortunately, we have COSE, which would be an easy way to combine a key
> wrap with some signing info.
> 
> GrÃ¼ÃŸe, Carsten
> On 1 November 2016 at 16:30:43, Michel Veillette
> (michel.veillette@trilliantinc.com) wrote:
> 
>> Hi Peter
>> 
>> In section 3 of "draft-vanderstok-core-coap-est-00",
>> "Server-generated key" is listed as supported.
>> This service returns two components, a PKCS8 containing the private
>> key material and a PKCS7 containing the device certificate chain.
>> In RFC7030, this information is returned using a Content-Type:
>> multipart/mixed.
>> How this is supported in "draft-vanderstok-core-coap-est-00"?
>> 
>> REQ: POST /.well-known/est/serverkeygen (Content-Format:
>> application/pkcs10)
>> <ASN.1 CertificationRequest> // Certificate request carry in a
>> PKCS10
>> 
>> RES: 2.05 Content (Content-Format: ???)
>> <ASN.1 ContentSet> // Private key material for this node carry in a
>> PKCS8
>> <ASN.1 ContentInfo> // Certificate and associated PKI for this node
>> carry in a PKCS7
>> 
>> Regards,
>> Michel
>> 
>> -----Original Message-----
>> From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der
>> Stok
>> Sent: Saturday, October 29, 2016 11:12 AM
>> To: Anima-bootstrap <anima-bootstrap@ietf.org>; Core <core@ietf.org>
>> 
>> Subject: [core] Fwd: New Version Notification for
>> draft-vanderstok-core-coap-est-00.txt
>> 
>> Dear all,
>> 
>> we have submitted a new draft Enrollment over Secure Transport (EST)
>> over coaps to make BRSKI over coap possible.
>> We expect (parts of) this draft to be integrated with coap-bootstrap
>> draft of pritikin and Kampanakis.
>> This draft removes EST functionality not absolutely needed within
>> the context we expect the BRSKI deployment for low-resource devices.
>> 
>> 
>> Greetings,
>> 
>> Peter
>> 
>> -------- Oorspronkelijke bericht --------
>> Onderwerp: New Version Notification for
>> draft-vanderstok-core-coap-est-00.txt
>> Datum: 2016-10-29 17:04
>> Afzender: internet-drafts@ietf.org
>> Ontvanger: "Peter van der Stok" <consultancy@vanderstok.org>, "Peter
>> Van der Stok" <consultancy@vanderstok.org>, "Sandeep Kumar"
>> <ietf@sandeep.de>, "Sandeep S. Kumar" <ietf@sandeep.de>
>> 
>> A new version of I-D, draft-vanderstok-core-coap-est-00.txt
>> has been successfully submitted by Peter van der Stok and posted to
>> the IETF repository.
>> 
>> Name: draft-vanderstok-core-coap-est
>> Revision: 00
>> Title: EST based on DTLS secured CoAP (EST-coaps)
>> Document date: 2016-10-29
>> Group: Individual Submission
>> Pages: 15
>> URL:
>> 
> https://www.ietf.org/internet-drafts/draft-vanderstok-core-coap-est-00.txt
>> 
>> Status:
>> https://datatracker.ietf.org/doc/draft-vanderstok-core-coap-est/
>> Htmlized:
>> https://tools.ietf.org/html/draft-vanderstok-core-coap-est-00
>> 
>> Abstract:
>> Low-resource devices in a Low-power and Lossy Network (LLN) can
>> operate in a mesh network using the IPv6 over Low-power Personal
>> Area
>> Networks (6LoWPAN) and IEEE 802.15.4 link-layer standards.
>> Provisioning these devices in a secure manner with keys (often
>> called
>> security bootstrapping) used to encrypt and authenticate messages is
>> 
>> the subject of Bootstrapping of Remote Secure Key Infrastructures
>> (BRSKI) [I-D.ietf-anima-bootstrapping-keyinfra]. Enrollment over
>> Secure Transport (EST) [RFC7030], based on TLS and HTTP, is used for
>> 
>> BRSKI. This document defines how low-resource devices are expected
>> to use EST over DTLS and CoAP. 6LoWPAN fragmentation management and
>> minor extensions to CoAP are needed to enable EST over DTLS-secured
>> CoAP (EST-coaps).
>> 
>> Please note that it may take a couple of minutes from the time of
>> submission until the htmlized version and diff are available at
>> tools.ietf.org.
>> 
>> The IETF Secretariat
>> 
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
>> 
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
> _______________________________________________
> Anima-bootstrap mailing list
> Anima-bootstrap@ietf.org
> https://www.ietf.org/mailman/listinfo/anima-bootstrap


From nobody Fri Nov  4 02:54:39 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA73D1296AE for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 02:54:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rg8xTsy1eJS7 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 02:54:32 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E93581296AC for <core@ietf.org>; Fri,  4 Nov 2016 02:54:31 -0700 (PDT)
X-AuditID: c1b4fb25-93fff70000001e3e-86-581c5ad55174
Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by  (Symantec Mail Security) with SMTP id 34.A6.07742.5DA5C185; Fri,  4 Nov 2016 10:54:30 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0319.002; Fri, 4 Nov 2016 10:54:28 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Carsten Bormann <cabo@tzi.org>
Thread-Topic: =?utf-8?B?8J+UlCBXR0xDIG9uIGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHM=?=
Thread-Index: AQHSNnT5Z9gSQdMCvkatjPcQsteaNaDIhS8A
Date: Fri, 4 Nov 2016 09:54:28 +0000
Message-ID: <9CC3B99D-DFF4-4F9C-9F4A-33210E50DE28@ericsson.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <m07f8jfy8i.fsf@nar-4.local>
In-Reply-To: <m07f8jfy8i.fsf@nar-4.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
Content-Type: multipart/signed; boundary="Apple-Mail-0CDEF8EC-B388-4B9C-A587-24AEA2C93C44"; protocol="application/pkcs7-signature"; micalg=sha1
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrMIsWRmVeSWpSXmKPExsUyM2K7ou61KJkIgyNt/BZHptxltdj3dj2z A5PHkiU/mTymLcoMYIrisklJzcksSy3St0vgypj54xVrwTPFisXLtzM1MN5T6GLk5JAQMJGY 8PovUxcjF4eQwDpGiaMz1rNCOIsZJd69eMIOUsUm4CLxoOERE4gtIqAkceHiGjYQm1lATeLR 0nMsILawQKDE8XnzmCFqgiSe9z5nh7CNJHZ/2MUIYrMIqEgc+vIObA6vgL3ElwttUMseMEos X7EbrIhTQFNi/a9WMJtRQEzi+6k1TBDLxCVuPZnPBHG2iMTDi6fZIGxRiZeP/4ENYhaYzCix duUbZogNghInZz5hmcAoPAtJ/yxkdbOQ1EEUaUrs714OZStKTOl+yA5hW0vM+HWQDcI2lXh9 9CMjspoFjByrGEWLU4uTctONjPVSizKTi4vz8/TyUks2MQKj6+CW36o7GC+/cTzEKMDBqMTD +yFAOkKINbGsuDL3EKMK0JxHG1ZfYJRiycvPS1US4c2LlIkQ4k1JrKxKLcqPLyrNSS0+xCjN waIkzmu28n64kEB6YklqdmpqQWoRTJaJg1OqgZHjVk0ab8GtxzKzt86wtov1Udw9qW2ny+GU yMxbG/Z2M0m/KXxZm3XER2Wux/WtpcqftuZdXj/hfFzftEWSVpuZNu739LxXpuzaWfZ71fIL SwVzE/dKxnh3st2deMBjouAHheuT51mkL5N7obyN80fDqZNPchZ9leYIWjyrcm6bMqeiVPjy cz5KLMUZiYZazEXFiQDnpfcStgIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/0n1CqrGFwjqvfApwHNLPYv2Zhbk>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 09:54:37 -0000

--Apple-Mail-0CDEF8EC-B388-4B9C-A587-24AEA2C93C44
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: base64

DQoNCj4gT24gNCBub3YuIDIwMTYsIGF0IDA5OjI1LCBDYXJzdGVuIEJvcm1hbm4gPGNhYm9AdHpp
Lm9yZz4gd3JvdGU6DQo+IA0KPiBHw7ZyYW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNz
c29uLmNvbT4gd3JpdGVzOg0KPiANCj4+IEkgYmVsaWV2ZSB3ZSBhbGwgYWdyZWUgdGhhdCBzZWN1
cml0eSBtdXN0IGJlIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQsDQo+IA0KPiBZZXMuDQo+IA0KPj4g
YW5kIG9uIGJ5IGRlZmF1bHQuDQo+IA0KPiBJIGRvbid0IGtub3cgd2hhdCB0aGF0IG1lYW5zLg0K
DQpNeSB1bmRlcnN0YW5kaW5nIGlzICJtdXN0IGJlIHVzZWQgdW5sZXNzIHRoZXJlIGlzIGEgZ29v
ZCByZWFzb24gbm90IHRvIi4gQnV0IHRvIG1ha2UgdGhhdCBkZWNpc2lvbiBvZiBjb3Vyc2UgcmVx
dWlyZXMgdGhlIHJpZ2h0IHByb2Nlc3NlcyBpbiBwbGFjZS4gDQoNCkfDtnJhbg0KDQo+IA0KPiBT
ZWN1cml0eSBpcyBhIHByb2Nlc3MuICBJZiBwZW9wbGUgYXJlbid0IGRvaW5nIHRoZSBwcm9jZXNz
LCB0aGVuDQo+ICJzd2l0Y2hpbmcgb24gc2VjdXJpdHkiIGluIGEgcHJvdG9jb2wgaW1wbGVtZW50
YXRpb24gaXNuJ3QgZ2l2aW5nIHlvdSBhbnkuDQo+IA0KPiBHcsO8w59lLCBDYXJzdGVuDQo=

--Apple-Mail-0CDEF8EC-B388-4B9C-A587-24AEA2C93C44
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--Apple-Mail-0CDEF8EC-B388-4B9C-A587-24AEA2C93C44--


From nobody Fri Nov  4 02:59:27 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10F61129B17 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 02:59:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WIOXIxLTaPrv for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 02:59:17 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AE08129ADF for <core@ietf.org>; Fri,  4 Nov 2016 02:59:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA49xCnT004676; Fri, 4 Nov 2016 10:59:12 +0100 (CET)
Received: from nar-4.local.informatik.uni-bremen.de (robin.informatik.uni-bremen.de [134.102.218.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t9HNw4J2fz7xyl; Fri,  4 Nov 2016 10:59:12 +0100 (CET)
X-Mailer: emacs 26.0.50.1 (via feedmail 11-beta-1 I)
From: Carsten Bormann <cabo@tzi.org>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <m07f8jfy8i.fsf@nar-4.local> <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net>
Date: Fri, 04 Nov 2016 10:59:09 +0100
In-Reply-To: <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net> (Hannes Tschofenig's message of "Fri, 4 Nov 2016 09:27:14 +0100")
Message-ID: <m0r36refbm.fsf@nar-4.local>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (darwin)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Jtmn1_5YpiRU-DDKXOFuhS3Sb-M>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 09:59:25 -0000

Hannes Tschofenig <hannes.tschofenig@gmx.net> writes:

> It makes sense to mandate implementing TLS and to use it per default.

That doesn't answer my question.  What does "use TLS" mean?

On a desktop or server, it means securely running processes like
regularly updating root cert lists and hundreds of megabytes of CRLs;
keeping accurate time in all situations; ...

What are the equivalent processes for "use TLS" on a constrained device?
Is there enough commonality here that a "by default" process can be defined?

I do not believe this question should be answered in the CoAP-over-TLS
draft; security processes for IoT are a subject of active research, not
something where we have enough solid knowledge for an MTI.

Obviously, we can leave the wishful statement "on by default" in; we are
in RFC 6919 land then unless this is read as a general statement of
direction as opposed to something specific that can be implemented
interoperably.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Fri Nov  4 03:01:00 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE83F129B1D for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 03:00:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YnYkHQJQ8nZn for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 03:00:57 -0700 (PDT)
Received: from 3.mo68.mail-out.ovh.net (3.mo68.mail-out.ovh.net [46.105.58.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D577D129ADF for <core@ietf.org>; Fri,  4 Nov 2016 03:00:56 -0700 (PDT)
Received: from player788.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo68.mail-out.ovh.net (Postfix) with ESMTP id C69B9AFD7 for <core@ietf.org>; Fri,  4 Nov 2016 11:00:54 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player788.ha.ovh.net (Postfix) with ESMTPSA id 53E981800A3; Fri,  4 Nov 2016 11:00:53 +0100 (CET)
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, "core@ietf.org" <core@ietf.org>
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu> <3b706423-884d-407d-882f-0118b20761b6@cs.tcd.ie>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <fa71dafe-bfdb-c27b-6072-4ea39b304666@simonbernard.eu>
Date: Fri, 4 Nov 2016 11:00:52 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <3b706423-884d-407d-882f-0118b20761b6@cs.tcd.ie>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 6653505501950982311
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeelgddutdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/JamqF6xvwbZm9EcU1IPSSqd55k8>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 10:00:59 -0000

I'm not sure to understand.
Please can you explain why the current constraint about same 
connection/same epoch is better in term of privacy than using DTLS identity.


Le 03/11/2016 Ã  19:58, Stephen Farrell a Ã©crit :
> Just on one snippet (and sorry, I've not fully followed the
> recent threads on this) but...
>
> On 03/11/16 18:03, Simon Bernard wrote:
>> Define a long term identifier for CoAP
> That's not an "issue," that's a design. And a potentially
> very privacy unfriendly one too.
>
> A sequence of identifiers that can be correlated by the
> intended parties but nobody else is another solution.
>
> There are probably more too.
>
> Cheers,
> S.
>


From nobody Fri Nov  4 03:39:19 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 435E71299A8 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 03:39:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nh9Va6tb0-0c for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 03:39:16 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02035129428 for <core@ietf.org>; Fri,  4 Nov 2016 03:39:15 -0700 (PDT)
Received: from [192.168.91.155] ([80.92.118.131]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0M8MyE-1cpe5S3HuM-00vt26; Fri, 04 Nov 2016 11:39:05 +0100
To: Carsten Bormann <cabo@tzi.org>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <m07f8jfy8i.fsf@nar-4.local> <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net> <m0r36refbm.fsf@nar-4.local>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <9e560610-d386-f3a1-9db3-e341bad7ad35@gmx.net>
Date: Fri, 4 Nov 2016 11:39:01 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <m0r36refbm.fsf@nar-4.local>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="5e1cGgsvoih5wieOIwnBKfhQL5IMk5G5I"
X-Provags-ID: V03:K0:7cbUFZIuCHS6MHavKdPANcQPaZ6F9IbRrdpKhFaWpDT8IoD8O4K OA9Y7VEArXppIU00KDqLOG7dHQp49IPQeWp8B4hDp/62Sw9wRBuQ0ihAbiEkjnc3ia2Q4TP T32pZUU4l87AKNmG+5YSKE7z/13rgBV1aOMcB7fI3mGIs2syX328h3h3+t5BKUpyM5lNKlU fTg7uG7iajuiFGpR3qTsA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:v4wsBT7zVbs=:uwcbuO8CPDLPYgXC6Qw3r2 qQyLQDL7zJUc3G0gErh9csXNfL+bcqHeHsG/Kfrx1AVsn2JIV9rFRYt2b2lTsXqBxy5A2y4M0 hsGWbc+xnTcVvO3uLYvUfYQJL8KeZKzF3mKy4opSNeKaa0QHhqVHnc8UqkPSFJAXZwSMvqA81 87leQnDxiXkjaMbFlaQ4O2xNroc0KlZJwS8wnN3nu3QAkzi7Fddm0g77eb+dUnmCELohEtEk5 ROE9BE5Kb4DrW0O5iXJvYvlmp9+GsEfUZrnyVaTfGs3egHPEmXy/pjalOwGCrC4b9nApiSgiL BBa8djDLE5dswkQr9QX5Jb2ZeuYLgnCHcmCf4wkjmDWNghMU3L02/jvOJQvyzQNQ+J+qklFHF 1rnEp0fxmZKULlAIZUP1+WUmAJnb7PRWg2/kMXA8wytIdnMHmnuYH66JWQA9YDJL7F/mTIEoe W0BUxNLz+RYb6B4+Dy8ym2Ug1frmum7Ow86PNFsg+JkRaQYZFLzdNCmfgH+W12Y0qlp9iC+L0 oiZa3Wkg2AktbbsEknLnLLvwoWI2p6hTxkQ6eTcLaAqygHDsEgjBncAz8VitE/6Zx3t9RFP21 HrpyuOXCp9ck4SWXGkCbY6dHlxgrT4zyRaRavHhwzCX1OeGQ4iXTYnFMkwZy74NU5xfhxTAxI 718l1xQVSVrrasZ1Bu/Vzg9AdGsBpBu3KphBkQTQet7DFNvBlWW746jfd4IodXvQvykWvZ3G1 vfGTahypFjJxzjFV0qGpyHYDUYoGOTXUiOKFqr8RLVImSJW7Lc0uaMqUFco=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/3tfFqttnFG4xEDC5iZELQ_0wvpw>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 10:39:18 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--5e1cGgsvoih5wieOIwnBKfhQL5IMk5G5I
Content-Type: multipart/mixed; boundary="KEs88kop6HhRMBvu9sNucWFg5vmgo78xG";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: Carsten Bormann <cabo@tzi.org>
Cc: =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>,
 "core@ietf.org WG" <core@ietf.org>
Message-ID: <9e560610-d386-f3a1-9db3-e341bad7ad35@gmx.net>
Subject: =?UTF-8?Q?Re:_[core]_=f0=9f=94=94_WGLC_on_draft-ietf-core-coap-tcp-?=
 =?UTF-8?Q?tls?=
References: <D434CFFC.6B35D%goran.selander@ericsson.com>
 <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com>
 <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com>
 <m07f8jfy8i.fsf@nar-4.local> <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net>
 <m0r36refbm.fsf@nar-4.local>
In-Reply-To: <m0r36refbm.fsf@nar-4.local>

--KEs88kop6HhRMBvu9sNucWFg5vmgo78xG
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Carsten,

of course, there is more needed to build a complete product. CoAP alone
will most likely not get you anywhere.

TLS assumes certain things to be present (and so does CoAP and other
protocols).

TLS requires the client to have a ciphersuite configured (which requires
certain credentials for the client). This does not necessarily require
you to replicate what is needed for a web browser since those are
implement the WebPKI model.

The information in RFC 7925 should be enough to pick the right
configuration.

I guess you are saying that CoAP itself is a building block and the way
how IoT is used today it does not really make any sense to talk about
randomly plugging things together.

Ciao
Hannes

On 11/04/2016 10:59 AM, Carsten Bormann wrote:
> Hannes Tschofenig <hannes.tschofenig@gmx.net> writes:
>=20
>> It makes sense to mandate implementing TLS and to use it per default.
>=20
> That doesn't answer my question.  What does "use TLS" mean?
>=20
> On a desktop or server, it means securely running processes like
> regularly updating root cert lists and hundreds of megabytes of CRLs;
> keeping accurate time in all situations; ...
>=20
> What are the equivalent processes for "use TLS" on a constrained device=
?
> Is there enough commonality here that a "by default" process can be def=
ined?
>=20
> I do not believe this question should be answered in the CoAP-over-TLS
> draft; security processes for IoT are a subject of active research, not=

> something where we have enough solid knowledge for an MTI.
>=20
> Obviously, we can leave the wishful statement "on by default" in; we ar=
e
> in RFC 6919 land then unless this is read as a general statement of
> direction as opposed to something specific that can be implemented
> interoperably.
>=20
> Gr=C3=BC=C3=9Fe, Carsten
>=20


--KEs88kop6HhRMBvu9sNucWFg5vmgo78xG--

--5e1cGgsvoih5wieOIwnBKfhQL5IMk5G5I
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYHGVGAAoJEGhJURNOOiAt940H/2dSPNMJvLcMDKSenrHy+TEF
ahFNUonYo3oCUGzkXoq8r5mQx0QZBU5dHJx7mACC4YGEFcIb+jQuM183iPNxiwDr
p1OpGli/GyLwTx8bYiw1DgBe2ySZ5DapwBc1cwZUNH6xnM92Af6JtqnHmEvSlE6v
te9f5kxm0kpeq2wvvyk347aYP/I2JSHiOqoPDD0CPbkRyLjqV4BUGIbED12n3dHd
TVl+qw3YkkTWh3W3XoVsNUtBbGfkHo1g8AjcWosEDbZv2SeCVXhLZhvvIR/L8pNE
rDVyetD2fC65Au8YcsDRk0jCsDEkpp9qHzSMdVmWHeFdaW0z1zcIrBOqsqrv1bc=
=TsfD
-----END PGP SIGNATURE-----

--5e1cGgsvoih5wieOIwnBKfhQL5IMk5G5I--


From nobody Fri Nov  4 03:46:11 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2EFE129C04 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 03:45:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iHwlMF1_8qoh for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 03:45:44 -0700 (PDT)
Received: from 8.mo68.mail-out.ovh.net (8.mo68.mail-out.ovh.net [46.105.74.219]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B582129C01 for <core@ietf.org>; Fri,  4 Nov 2016 03:45:35 -0700 (PDT)
Received: from player788.ha.ovh.net (b7.ovh.net [213.186.33.57]) by mo68.mail-out.ovh.net (Postfix) with ESMTP id 87BDBB11D for <core@ietf.org>; Fri,  4 Nov 2016 11:45:33 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player788.ha.ovh.net (Postfix) with ESMTPSA id 512311800B5; Fri,  4 Nov 2016 11:45:28 +0100 (CET)
To: Lauri Piikivi <Lauri.Piikivi@arm.com>
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu> <249DA03B-E96F-4DA1-A023-C862F5B75D32@arm.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <d8f29d59-19a8-6a37-e037-fd59e1215134@simonbernard.eu>
Date: Fri, 4 Nov 2016 11:45:28 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <249DA03B-E96F-4DA1-A023-C862F5B75D32@arm.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 7407576963099998375
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrkeelgddukecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/1q8EeaXIW6KhxOSvLHjdjQBzpPA>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 10:45:48 -0000

You're right both issue is not directly linked to observation.

1)About using host option, How does it works for DTLS session without 
authentication? I still prefer just adding the constraint "same DTLS 
identity or same session is there is no DTLS authentication" and let 
more flexibility to application on top of CoAP to handle this 
information. Each part of the stack have its own responsibility:
- DTLS provides authentication + encryption.
- CoAP ensure that request/response exchange are done for the same 
Identity. (when there is no authentication we just warranty exchange is 
done in the same session, this is the best we can do)
- Application layer authorize request based on this identity.

2) it's seems we head for a consensus about connectionID 
(draft-fossati-tls-iot-optimizations-00). The privacy concern could be 
handle by hash chain but would not be mandatory.
(https://mailarchive.ietf.org/arch/msg/core/a_cZN9nTkHoeETLXhBJAQWfYlp4)


Le 04/11/2016 Ã  09:20, Lauri Piikivi a Ã©crit :
> Hi,
>
> I have battled with these issue a while. I think there are 2 very separate issues: COAP identity and DTLS connection ID, neither of which is only an observation issue
>
> = COAP identity =
>> 1) Define a long term identifier for CoAP instead of limited CoAP interaction to the same DTLS connection. At CoAP level users would like to know from which or to which they send data.
> With the strong focus on security, COAP starts with  the DTLS certificate or raw public key  information
> â€œ9.1.3.3.  X.509 Certificates
> The discovery process used in the system
>     would build up the mapping between IP addresses of the given devices
>     and the subject for each device.â€
>
> COAP is based on URLs. And the URL must have a host part. Host can be IP address (with problems when IP changes) or a DNS name (that needs to be mapped and maintained in DNS registry) or some other long term identifier like certificate subject name.
> â€œ   6.1.  coap URI Scheme
>     If host is a registered name, then that name is considered an indirect identifier
>     and the endpoint might use a name resolution service, such as DNS, to
>     find the address of that host.  The host MUST NOT be emptyâ€
>
> So there is mechanisms to define a long lasting name or identifier for the host and the resources it publishes.
>
> I would suggest for the observation problem that the responses have the URI-Host option with the long lasting identifier of the device? The spec needs changing so that the DTLS session can change. If the DTLS session changes, but is accepted on DTLS layer, the application layer gets the new information that it maps using  itâ€™s own mechanism of URI-host. Additional checking can be done that the host id matches the certificate subject for example. Newest IP and port is then known
>
> Having the URI-host in responses supports the nosec mode, which is still mandatory in 7252.
>
> This is a minor issue for the draft https://tools.ietf.org/html/draft-ietf-core-resource-directory-09. For registry (publishing COAP URLs) there might be need to define more structure to the host part, is it a DNS resolvable name or is a mapping that is understood in the registry itself? How is a client of the registry to know? Should there be a service that maps the non-DNS identity to IP?
>
> = (D)TLS Connection ID =
>> 2) Be able to use DTLS with dynamic IP address (e.g. NAT) without the need to redo full handshake or resume handshake.
> This is not tied to observation, any long lasting session where there is very little data sent will fail due to NAT in the path. I think the problem is most in DTLS, since there the NAT's ip/port mapping timeout is more aggressive and the devices usually communicate only  seldomly. It is almost guaranteed that the DTLS connection will not stay alive in NAT.  RFC5382 for TCP talks of 2-hours, and RFC4787 for UDP NAT behaviour talks of 4-minutes
>
> So to map the sent DTLS records at receiver, even if a NAT mapping changes along the way, the record would need the connection ID so that the servers find the correct DTLS context for the record. Now the spec says the context is found with ip/port information.
>
> I understand the privacy concerns for IoP (internet of people), but could there be something easy for IoT â€” if privacy is not an issue? Mechanism that allows t meet both concerns.
>
> BR
> - Lauri
>
>
>
>> On 03 Nov 2016, at 20:03, Simon Bernard <contact@simonbernard.eu> wrote:
>>
>> Hi list,
>>
>> I have attended meeting of the T2T RG in Ludwigsburg, there is a discussion around CoAP observation in NATed environment using DTLS (1.2).
>>
>> I would like to share my thought here about that:
>>
>>     The problem :
>> Currently the CoAP spec say :
>> "All notifications resulting from a GET request with an Observe Option MUST be returned within the same epoch of the same connection as the request."
>> Currently, in TLS, a connection is identified by its IP/Port address.
>> So when your IP address changed because of the NAT expiration, you must create a new TLS connection and so create a new CoAP observation relation.
>>
>>     Behind this practical problem, I understand there is 2 separated issue :
>> 1) Define a long term identifier for CoAP instead of limited CoAP interaction to the same DTLS connection. At CoAP level users would like to know from which or to which they send data.
>> 2) Be able to use DTLS with dynamic IP address (e.g. NAT) without the need to redo full handshake or resume handshake.
>>
>>     Possible Solutions ?
>> 1) Using the DTLS identity (PSK identity for PSK, public key for RPK, CN for certificate, ...) and only if there is no authentication the DTLS Session as constraint for CoAP exchange. (we remove the same epoch/same connection constraint)
>> 2) Using the "connectionId" extension proposed in the draft-fossati-tls-iot-optimizations-00.
>>
>> Does it make sense  ?
>>
>> Simon
>>
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.


From nobody Fri Nov  4 04:42:07 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90682129542 for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 04:42:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kyKwBw368Wzi for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 04:42:05 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9F22129492 for <core@ietf.org>; Fri,  4 Nov 2016 04:42:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA4Bg0Ul029225; Fri, 4 Nov 2016 12:42:00 +0100 (CET)
Received: from eduroam-pool6-0272.wlan.uni-bremen.de.informatik.uni-bremen.de (robin.informatik.uni-bremen.de [134.102.218.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t9KgX3LTXz7y3k; Fri,  4 Nov 2016 12:42:00 +0100 (CET)
X-Mailer: emacs 26.0.50.1 (via feedmail 11-beta-1 I)
From: Carsten Bormann <cabo@tzi.org>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <9e560610-d386-f3a1-9db3-e341bad7ad35@gmx.net> (Hannes Tschofenig's message of "Fri, 4 Nov 2016 11:39:01 +0100")
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <m07f8jfy8i.fsf@nar-4.local> <aae467b2-bd94-3d34-e55d-bf27d5fa7a75@gmx.net> <m0r36refbm.fsf@nar-4.local> <9e560610-d386-f3a1-9db3-e341bad7ad35@gmx.net>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (darwin)
Date: Fri, 04 Nov 2016 12:41:58 +0100
Message-ID: <m07f8jeak9.fsf@tzi.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/g-aO2mBeiGHHg0Nip1oI22HI4rs>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 11:42:06 -0000

Hannes Tschofenig <hannes.tschofenig@gmx.net> writes:

> I guess you are saying that CoAP itself is a building block and the way
> how IoT is used today it does not really make any sense to talk about
> randomly plugging things together.

Indeed, and that means to me that "on by default", which would mean some
such random plugging, is not we what can seriously recommend.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Fri Nov  4 08:43:38 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CEE81295A2; Fri,  4 Nov 2016 08:43:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.021
X-Spam-Level: 
X-Spam-Status: No, score=-2.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vKhUFngE-JN3; Fri,  4 Nov 2016 08:43:33 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0139.outbound.protection.outlook.com [104.47.37.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9A4F129592; Fri,  4 Nov 2016 08:43:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=iyNQnCV0IkA0fvGaneayEzH+VtwDQ0oE4FwSws9kR5I=; b=HeWroevS9KwMIrQY6DnB+jJu0yzImw/JhdMEWGEeS/ApzEo83LNRZ9HtS08K0c0/c8ShrOeGjDNzanhLt2DMLaX0Ve6b3hN8qdbQXeompJk5B7KAkkITkjWcXrdKXGrOHBuzwqiip7tPSsDFMqgB8LPKdF3Z5S0m+H7IaxK9wXg=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2379.namprd03.prod.outlook.com (10.166.207.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Fri, 4 Nov 2016 15:43:31 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0693.016; Fri, 4 Nov 2016 15:43:30 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
Thread-Topic: =?utf-8?B?8J+UlCBXR0xDIG9uIGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHM=?=
Thread-Index: AQHSLpW5Z9gSQdMCvkatjPcQsteaNaDEzpZggAOrIoCAAIkSMA==
Date: Fri, 4 Nov 2016 15:43:30 +0000
Message-ID: <CY1PR03MB2380DED34965CC7541D1328383A20@CY1PR03MB2380.namprd03.prod.outlook.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com>
In-Reply-To: <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [174.61.159.182]
x-ms-office365-filtering-correlation-id: 185d6207-c94f-4698-5507-08d404c953b8
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2379; 7:h5k7G5anPxcWMsyHTdaXOGjPwxoTLnEQknB6eUfQ9IKrk9fNxA3q12jJdEbFd9e+xwQIesYv0/E3c9OQ/lap4h8QFLNP+YltYs2mpOIlZl0vfplUSj9Y24m8GGE7w3hRreBzHi9qlCYuzAd6OPoMctfS9IQHx8jkUFXp47427SB03INReMWusd5HxofGvPXtuqrr/0RvcgA39vlZkYrZMwMMKEePTYkkKkr7B7lo+iugJ7p3w9pDEv6IXYGl3PEbawRp4qho8IWNrj8PuFHOCubdRwlXLIOv7TtNPewEbUZradlkDYd7PPVBy9LQ72qIUaMUQwxG+VRg+QKfS/LkSl6ZFrZ1ZUUJ9kzHmc7tRN/vvX6pBbNOpuSko41SFzJH
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR03MB2379;
x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr
x-microsoft-antispam-prvs: <CY1PR03MB237990313DE6F50311F4C8A283A20@CY1PR03MB2379.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(37575265505322)(190756311086443)(180628864354917)(166708455590820)(192374486261705)(100405760836317)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040176)(6060226)(6045074)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(61426038)(61427038)(6061223)(6046074); SRVR:CY1PR03MB2379; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2379; 
x-forefront-prvs: 01165471DB
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(189002)(24454002)(377454003)(199003)(81166006)(50986999)(54356999)(101416001)(106116001)(122556002)(106356001)(229383001)(105586002)(99286002)(19617315012)(189998001)(2900100001)(76576001)(15975445007)(77096005)(81156014)(230783001)(76176999)(4326007)(2906002)(66066001)(19580395003)(6916009)(19580405001)(33656002)(19625215002)(5002640100001)(5005710100001)(97736004)(92566002)(8990500004)(10400500002)(2950100002)(10290500002)(19300405004)(561944003)(586003)(10090500001)(9686002)(7906003)(7736002)(19609705001)(6116002)(74316002)(110136003)(9326002)(7846002)(16236675004)(3280700002)(7696004)(87936001)(86612001)(68736007)(790700001)(102836003)(3660700001)(86362001)(3846002)(8936002)(5660300001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2379; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY1PR03MB2380DED34965CC7541D1328383A20CY1PR03MB2380namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2016 15:43:30.4068 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2379
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/iuSSZ-eELv6Ufc0xNrfKlu5Zp3g>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, Klaus Hartke <hartke@tzi.org>, "core@ietf.org WG" <core@ietf.org>, "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 15:43:37 -0000

--_000_CY1PR03MB2380DED34965CC7541D1328383A20CY1PR03MB2380namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_CY1PR03MB2380DED34965CC7541D1328383A20CY1PR03MB2380namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy
bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt
YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj
cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv
VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg
Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv
ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl
PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6
Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7
Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIg
NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYWxpYnJpIExpZ2h0IjsNCglwYW5vc2Ut
MToyIDE1IDMgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGli
cmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250
LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQpAZm9u
dC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJTZWdvZSBVSSBFbW9qaSI7DQoJcGFub3NlLTE6MiAxMSA1
IDIgNCAyIDQgMiAyIDM7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBs
aS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t
Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv
bWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlv
cml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2
aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5
OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21z
by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4t
cmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBp
bjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNl
cmlmO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xp
c3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0K
CW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVp
bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh
bWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1h
bDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tc3R5
bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0
OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJ
Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9
DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZh
bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1h
aWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5
OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1
bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpA
cGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEu
MGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7
fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMg
djpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lm
IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFw
IHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlm
XS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw
bGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkgTGln
aHQmcXVvdDssc2Fucy1zZXJpZiI+SGkNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx
LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpIExpZ2h0JnF1b3Q7LHNhbnMtc2VyaWYiPkfD
tnJhbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz
dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpIExpZ2h0JnF1
b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90
O0NhbGlicmkgTGlnaHQmcXVvdDssc2Fucy1zZXJpZiI+UmVnYXJkaW5nIC0g4oCcPC9zcGFuPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkgTGln
aHQmcXVvdDssc2Fucy1zZXJpZiI+SGVuY2UgdGhlIGNhc2Ugd2l0aCBtb3JlIHRoYW4gb25lIGNh
bmRpZGF0ZSBzZWN1cml0eSBwcm90b2NvbCB3aXRoIFRDUCB3YXMgb25seQ0KIHRoZW9yZXRpY2Fs
LCBtYXliZSBub3QgZXZlbiB1bmRlcnN0b29kLCBhbmQgSU1ITyBub3Qgc3VmZmljaWVudGx5IGNv
bnNpZGVyZWQgaW4gdGhhdCBkaXNjdXNzaW9uLuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt
aWx5OiZxdW90O0NhbGlicmkgTGlnaHQmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286
cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6
ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSBMaWdodCZxdW90OyxzYW5zLXNlcmlm
Ij5JIHJlY29tbWVuZCB0aGF0IHlvdSByZXZpZXcgdGhlIGF1ZGlvIGZyb20gSUVURiA5Ni4gT2Jq
ZWN0IHNlY3VyaXR5IGFzIGFuIGFsdGVybmF0aXZlIHdhcyByYWlzZWQgYW5kIGRpc2N1c3NlZCBh
dCB0aGUgbWVldGluZy4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7
Q2FsaWJyaSBMaWdodCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48
L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm
b250LWZhbWlseTomcXVvdDtDYWxpYnJpIExpZ2h0JnF1b3Q7LHNhbnMtc2VyaWYiPlRoYW5rcyw8
bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i
Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpIExpZ2h0JnF1b3Q7LHNh
bnMtc2VyaWYiPuKApkJyaWFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v
cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs
aWJyaSBMaWdodCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBuYW1lPSJfTWFpbEVuZENvbXBvc2UiPjxzcGFuIHN0
eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu
cy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9hPjwvcD4NCjxzcGFuIHN0eWxlPSJt
c28tYm9va21hcms6X01haWxFbmRDb21wb3NlIj48L3NwYW4+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i
Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQg
MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt
c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5G
cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6
JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gR8O2cmFuIFNlbGFuZGVyIFttYWlsdG86
Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tXQ0KPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwg
Tm92ZW1iZXIgNCwgMjAxNiAxOjE3IEFNPGJyPg0KPGI+VG86PC9iPiBCcmlhbiBSYXltb3IgJmx0
O0JyaWFuLlJheW1vckBtaWNyb3NvZnQuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gY29yZUBpZXRm
Lm9yZyBXRyAmbHQ7Y29yZUBpZXRmLm9yZyZndDs7IEtsYXVzIEhhcnRrZSAmbHQ7aGFydGtlQHR6
aS5vcmcmZ3Q7OyBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzQGlldGYub3JnOyBIYW5uZXMg
VHNjaG9mZW5pZyAmbHQ7SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbSZndDs7IEphaW1lIEppbcOp
bmV6ICZsdDtqYWltZS5qaW1lbmV6QGVyaWNzc29uLmNvbSZndDs8YnI+DQo8Yj5TdWJqZWN0Ojwv
Yj4gUmU6IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom
cXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4mIzEyODI3Njs8L3NwYW4+PHNw
YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90
OyxzYW5zLXNlcmlmIj4gV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzPG86cD48
L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv
OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5I
aSBCcmlhbiw8c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+
PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286
cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIG1heSBiZSB3cm9u
ZywgYnV0IGFzIEkgcmVhZCBSRkM3MjUyLCBpdCBzcGVjaWZpZXMgdGhlIGJpbmRpbmcgdG8gRFRM
UywgYW5kLCBnaXZlbiB0aGF0IGJpbmRpbmcsIHdoYXQgaXMgbWFuZGF0b3J5IHRvIGltcGxlbWVu
dCAoTm9TZWMgYW5kIFJQSyB3aXRoIGEgY2VydGFpbiBjaXBoZXJzdWl0ZSkuJm5ic3A7PG86cD48
L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw
OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBhbmFs
b2d5IHdvdWxkIGJlIHRoYXQgdGhpcyBkcmFmdCBzcGVjaWZpZXMgdGhlIGJpbmRpbmcgdG8gVExT
IGFuZCB3aGF0IGlzIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQgd2l0aCB0aGlzIGJpbmRpbmcuJm5i
c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PkkgYmVsaWV2ZSB3ZSBhbGwgYWdyZWUgdGhhdCBzZWN1cml0eSBtdXN0IGJlIG1hbmRhdG9yeSB0
byBpbXBsZW1lbnQsIGFuZCBvbiBieSBkZWZhdWx0LiBCdXQgc2luY2UgdGhlcmUgaXMgbm93IG1v
cmUgdGhhbiBvbmUgY2FuZGlkYXRlIHNlY3VyaXR5IHByb3RvY29sIGZvciBDb0FQIG92ZXIgVENQ
IChhbmQgZm9yIENvQVAgb3ZlciBVRFApIGl0IGRvZXNuJ3QgbWFrZSBzZW5zZSBmb3IgY29uc3Ry
YWluZWQgZGV2aWNlcw0KIHRvIG1hbmRhdGUgdGhlIGltcGxlbWVudGF0aW9uIG9mIG9uZSBzcGVj
aWZpYyBwcm90b2NvbC4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs
YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+Tm90ZSB0aGF0IE9TQ09BUCB3YXMgbm90IGFkb3B0ZWQgYXQgdGhl
IHRpbWUgd2hlbiB0aGUgZGlzY3Vzc2lvbiBvbiBUTFMgd2FzIGhlbGQuIEhlbmNlIHRoZSBjYXNl
IHdpdGggbW9yZSB0aGFuIG9uZSBjYW5kaWRhdGUgc2VjdXJpdHkgcHJvdG9jb2wgd2l0aCBUQ1Ag
d2FzIG9ubHkgdGhlb3JldGljYWwsIG1heWJlIG5vdCBldmVuIHVuZGVyc3Rvb2QsIGFuZCBJTUhP
IG5vdCBzdWZmaWNpZW50bHkgY29uc2lkZXJlZA0KIGluIHRoYXQgZGlzY3Vzc2lvbi4mbmJzcDs8
bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+
Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+R8O2
cmFuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+DQpPbiAyIG5vdi4gMjAx
NiwgYXQgMDE6MTYsIEJyaWFuIFJheW1vciAmbHQ7PGEgaHJlZj0ibWFpbHRvOkJyaWFuLlJheW1v
ckBtaWNyb3NvZnQuY29tIj5Ccmlhbi5SYXltb3JAbWljcm9zb2Z0LmNvbTwvYT4mZ3Q7IHdyb3Rl
OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1
LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1
b3Q7LHNhbnMtc2VyaWYiPkkgcmUtb3BlbmVkIC0NCjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNv
bS9jb3JlLXdnL2NvYXAtdGNwLXRscy9pc3N1ZXMvMTEiPmh0dHBzOi8vZ2l0aHViLmNvbS9jb3Jl
LXdnL2NvYXAtdGNwLXRscy9pc3N1ZXMvMTE8L2E+IC0gZm9yIHRyYWNraW5nIGR1cmluZyBXR0xD
IGFuZCByZXZpZXdlZCB0aGUgYXVkaW8gZm9yIHRoZSBkaXNjdXNzaW9uIGF0IElFVEYgOTYgLQ0K
PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXVkaW8vaWV0Zjk2L2lldGY5Ni1jaGFybG90
dGVuYnVyZ2lpLWlpaS0yMDE2MDcxOS0xMzU5XzUwLm1wMyI+DQpodHRwczovL3d3dy5pZXRmLm9y
Zy9hdWRpby9pZXRmOTYvaWV0Zjk2LWNoYXJsb3R0ZW5idXJnaWktaWlpLTIwMTYwNzE5LTEzNTlf
NTAubXAzPC9hPiAtIHN0YXJ0aW5nIGFyb3VuZCA0MzozNS48L3NwYW4+PG86cD48L286cD48L3A+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250
LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpw
PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6
MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+VGhlcmUg
d2FzIHN0cm9uZyBjb25zZW5zdXMgZm9yIFphY2ggU2hlbGJ54oCZcyBwcm9wb3NhbCDigJMgVExT
IFsmIzQzOyBSRkM3OTI1XSBpcyBtYW5kYXRvcnktdG8taW1wbGVtZW50IGFuZCBvbiBieSBkZWZh
dWx0IC0gYXMgdGhlIG1pbmltYWwgZ3VpZGFuY2UgZm9yIHRyYW5zcG9ydCBzZWN1cml0eSB3aGlj
aCBpcw0KIGNvbXBhdGlibGUgd2l0aCB0aGUgbWFuZGF0b3J5LXRvLWltcGxlbWVudCBsYW5ndWFn
ZSBmb3IgRFRMUyBpbiBSRkM3MjUyLiBCb3RoIFRDUCBhbmQgVExTIGFyZSBhbGxvd2VkLjwvc3Bh
bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250
LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+
Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g
c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz
YW5zLXNlcmlmIj7igKZCcmlhbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh
bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRp
dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBw
dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv
dDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu
MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEfDtnJhbiBT
ZWxhbmRlciBbPGEgaHJlZj0ibWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbSI+bWFp
bHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4g
VHVlc2RheSwgT2N0b2JlciAyNSwgMjAxNiAxOjAwIEFNPGJyPg0KPGI+VG86PC9iPiA8YSBocmVm
PSJtYWlsdG86Y29yZUBpZXRmLm9yZyI+Y29yZUBpZXRmLm9yZzwvYT4gV0cgJmx0OzxhIGhyZWY9
Im1haWx0bzpjb3JlQGlldGYub3JnIj5jb3JlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5DYzo8
L2I+IEtsYXVzIEhhcnRrZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmhhcnRrZUB0emkub3JnIj5oYXJ0
a2VAdHppLm9yZzwvYT4mZ3Q7OyA8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1jb3JlLWNvYXAt
dGNwLXRsc0BpZXRmLm9yZyI+DQpkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzQGlldGYub3Jn
PC9hPjsgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9m
ZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDs7IEphaW1lIEpp
bcOpbmV6ICZsdDs8YSBocmVmPSJtYWlsdG86amFpbWUuamltZW5lekBlcmljc3Nvbi5jb20iPmph
aW1lLmppbWVuZXpAZXJpY3Nzb24uY29tPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gPC9z
cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29l
IFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYiPiYjMTI4Mjc2Ozwvc3Bhbj48c3BhbiBzdHlsZT0i
Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy
aWYiPiBXR0xDIG9uIGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHM8L3NwYW4+PG86cD48L286
cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48
L286cD48L3A+DQo8ZGl2Pg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAw
MXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29s
b3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46
MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm
b250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5EZWFyIGFsbCw8L3NwYW4+PG86cD48L286
cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhl
aWdodDogMTRweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3Vy
aWVyO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0i
bWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6
OS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+SSdkIGxpa2UgdG8gcmV2aXNp
dCB0aGUgZGlzY3Vzc2lvbiBvbiB0aGUgc3RhdHVzIG9mIFRMUyBpbiBDb0FQIG92ZXIgVENQIGlt
cGxlbWVudGF0aW9ucy4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFy
Z2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhlaWdodDogMTRweCI+PHNwYW4gc3R5
bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4mbmJz
cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90
dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29u
c29sYXM7Y29sb3I6YmxhY2siPkluIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9u
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRv
bTouMDAwMXB0Ij48dT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNv
bnNvbGFzO2NvbG9yOiMwNDJFRUUiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt
bC9kcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzLTA0I3NlY3Rpb24tNyI+aHR0cHM6Ly90b29s
cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHMtMDQjc2VjdGlvbi03
PC9hPjwvc3Bhbj48L3U+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJn
aW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p
bHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPml0IGlzIHN0YXRlZDo8L3NwYW4+PG86cD48L286cD48
L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhlaWdo
dDogMTRweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVy
O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFy
Z2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w
cHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+JnF1b3Q7VExTIHZlcnNpb24gMS4y
IG9yIGhpZ2hlciBpcyBtYW5kYXRvcnktdG8taW1wbGVtZW50IGFuZCBNVVNUIGJlIGVuYWJsZWQg
YnkgZGVmYXVsdC4mcXVvdDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2lu
OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhlaWdodDogMTRweCI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj48YnI+DQo8
YnI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjtt
YXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m
YW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+SSB0aG91Z2h0IG9uZSBjb25jbHVzaW9uIGZyb20g
QmVybGluIHdhcyZuYnNwO3RoYXQgd2Ugc2hvdWxkIGFsaWduIHdpdGggUkZDNzI1Miwgd2hpY2gg
YWxsb3dzIFVEUCBvciBEVExTLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJn
aW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdDttaW4taGVpZ2h0OiAxNHB4Ij48c3BhbiBzdHls
ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJz
cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90
dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29u
c29sYXM7Y29sb3I6YmxhY2siPkNvbnNpZGVyaW5nIHRoYXQgQ29BUCBvdmVyIFRDUCBtYXkgYmUg
cHJvdGVjdGVkIG9uIG90aGVyIGxheWVycyB0aGFuIHRyYW5zcG9ydCBsYXllciwgZS5nLiBvbiBh
cHBsaWNhdGlvbiBsYXllciB1c2luZyBPU0NPQVAg4oCUIHdoeSBpcyBpdCBuZWNlc3NhcnkgdG8N
CiBtYW5kYXRlIHRoZSBpbXBsZW1lbnRhdGlvbiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N
CjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+b2YgVExT
PyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdp
bi1ib3R0b206LjAwMDFwdDttaW4taGVpZ2h0OiAxNHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl
OjkuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86
cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQi
PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6
YmxhY2siPkluIHNvbWUgdXNlIGNhc2VzIGNvbW11bmljYXRpb24gc2VjdXJpdHkgbWF5IGJlIHJl
cXVpcmVkIGF0IG11bHRpcGxlIGxheWVycy4gQnV0IGluIG90aGVyIGNhc2VzIHdoZXJlIFRMUyBp
cyBub3QgYWRlcXVhdGUvbmVjZXNzYXJ5IGFzIGEgc2Vjb25kIHByb3RvY29sDQogYW5kIGNvbnNp
ZGVyaW5nIGEgY29uc3RyYWluZWQgZGV2aWNlIG1heSBub3QgYmUgYWJsZSB0byBzdXBwb3J0IG11
bHRpcGxlIHNlY3VyaXR5IHByb3RvY29sIGltcGxlbWVudGF0aW9ucywgaXQgZG9lc24ndCBtYWtl
IHNlbnNlIHRvIGFsd2F5cyByZXF1aXJlIFRMUyBjb2RlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N
CjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdDttaW4taGVpZ2h0OiAx
NHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv
bG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2lu
OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7
Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPkkgcHJvcG9zZSB0aGUgcXVvdGVkIHNl
bnRlbmNlIGlzIHJlcGxhY2VkIHdpdGggYSBzdGF0ZW1lbnQgc2F5aW5nIHNvbWV0aGluZyBsaWtl
Jm5ic3A7Zm9yIENvQVAgb3ZlciBUQ1AgaXQgaXMgbWFuZGF0b3J5LXRvLWltcGxlbWVudCBhIHNl
Y3VyaXR5IHByb3RvY29sLCBhbmQNCiB0aGF0IHNlY3VyaXR5IG11c3QgYmUgZW5hYmxlZCBieSBk
ZWZhdWx0LiBSZWNvbW1lbmRlZCBwcm90b2NvbHMgY2FuIGJlIHByb3ZpZGVkLCBhbmQgbWFuZGF0
b3J5LXRvLWltcGxlbWVudCBjaXBoZXJzdWl0ZXMgZm9yIGEgZ2l2ZW4gcHJvdG9jb2wsIGxpa2Ug
Zm9yIERUTFMgaW4gUkZDNzI1Mi4gQnV0IGl0IHNob3VsZCBub3QgYmUgcmVzdHJpY3RlZCB0byBU
TFMuJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFy
Z2luLWJvdHRvbTouMDAwMXB0O21pbi1oZWlnaHQ6IDE0cHgiPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48
bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFw
dDttaW4taGVpZ2h0OiAxNHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt
aWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8
cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJm
b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPlJlZ2FyZHMs
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRv
bTouMDAwMXB0Oy13ZWJraXQtdGV4dC1zdHJva2UtY29sb3I6IHJnYigwLCAwLCAwKTstd2Via2l0
LXRleHQtc3Ryb2tlLXdpZHRoOiBpbml0aWFsIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w
cHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPkfDtnJhbjwvc3Bhbj48bzpwPjwv
bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s
b3I6YmxhY2siPjxicj4NCjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2
Pg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Oy13ZWJraXQtdGV4
dC1zdHJva2UtY29sb3I6IHJnYigwLCAwLCAwKTstd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiBp
bml0aWFsIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q291cmll
cjtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1h
cmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Oy13ZWJraXQtdGV4dC1zdHJva2UtY29sb3I6
IHJnYigwLCAwLCAwKTstd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiBpbml0aWFsIj4NCjxzcGFu
IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+
Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6
bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu
IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx
LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Ymxh
Y2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt
ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+Y29yZSAm
bHQ7PGEgaHJlZj0ibWFpbHRvOmNvcmUtYm91bmNlc0BpZXRmLm9yZyI+Y29yZS1ib3VuY2VzQGll
dGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mIEphaW1lIEppbcOpbmV6ICZsdDs8YSBocmVmPSJt
YWlsdG86amFpbWUuamltZW5lekBlcmljc3Nvbi5jb20iPmphaW1lLmppbWVuZXpAZXJpY3Nzb24u
Y29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSAxOCBPY3RvYmVyIDIwMTYgYXQg
MTE6MjI8YnI+DQo8Yj5UbzogPC9iPiZxdW90OzxhIGhyZWY9Im1haWx0bzpjb3JlQGlldGYub3Jn
Ij5jb3JlQGlldGYub3JnPC9hPiBXRyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvcmVAaWV0
Zi5vcmciPmNvcmVAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPkNjOiA8L2I+S2xhdXMgSGFydGtl
ICZsdDs8YSBocmVmPSJtYWlsdG86aGFydGtlQHR6aS5vcmciPmhhcnRrZUB0emkub3JnPC9hPiZn
dDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzQGll
dGYub3JnIj5kcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzQGlldGYub3JnPC9hPiZxdW90OyAm
bHQ7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5vcmci
PmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5vcmc8L2E+Jmd0OywNCiBIYW5uZXMg
VHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20i
Pkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5b
Y29yZV0gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx
dW90O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiYjMTI4Mjc2
Ozwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD
YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiBXR0xDIG9uIGRyYWZ0LWlldGYt
Y29yZS1jb2FwLXRjcC10bHM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh
bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwv
c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm
cXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+RGVhciBDb1JFIFdHLDwvc3Bhbj48bzpwPjwv
bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl
PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z
ZXJpZjtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7
Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5U
aGUgY29yZS1jb2FwLXRjcC10bHMgZHJhZnQgaGFzIGdvdHRlbiB0byBhIHN0YXRlIHRoYXQgdGhl
IGF1dGhvcnMgZmVlbCBpcyBpbiBnb29kIHNoYXBlIGZvciBXR0xDLiZuYnNwOzwvc3Bhbj48bzpw
PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0
eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu
cy1zZXJpZjtjb2xvcjpibGFjayI+V2Ugd291bGQgbGlrZSB0byBhc2sgdGhlIGdyb3VwIHRvIHN0
YXJ0IGNoZWNraW5nIHRoaXMgbGFzdCB2ZXJzaW9uIGFuZCB0aGUgaXNzdWVzIG9uIHRoZSBHaXRo
dWIgcmVwb3NpdG9yeS4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250
LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNw
Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli
cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5p
ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHMtMDUiPmh0dHBzOi8vdG9v
bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzLTA1PC9hPiZuYnNw
OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN
c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90
O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+
PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5
bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z
LXNlcmlmO2NvbG9yOmJsYWNrIj5UaGVyZSBpcyBhdCB0aGUgbW9tZW50IG9uZSBvcGVuIGlzc3Vl
IGxlZnQgaW4gdGhlIHRyYWNrZXIgKCZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9j
b3JlLXdnL2NvYXAtdGNwLXRscy9pc3N1ZXMvMzEiPmh0dHBzOi8vZ2l0aHViLmNvbS9jb3JlLXdn
L2NvYXAtdGNwLXRscy9pc3N1ZXMvMzE8L2E+Jm5ic3A7Jm5ic3A7KQ0KIHdoaWNoIGlzIG1vc3Rs
eSBlZGl0b3JpYWwuIFRoZSBpc3N1ZXMgcmFpc2VkIGR1cmluZyBsYXN0IElFVEYgLSBhYm91dCBP
YnNlcnZlIG92ZXIgcmVsaWFibGUgdHJhbnNwb3J0cyAtICZuYnNwO2hhdmUgYmVlbiBjbG9zZWQg
YW5kIG5ldyB0ZXh0IGhhcyBiZWVuIGFkZGVkIHRvIHRoZSBhcHBlbmRpeDombmJzcDs8YSBocmVm
PSJodHRwczovL2dpdGh1Yi5jb20vY29yZS13Zy9jb2FwLXRjcC10bHMvaXNzdWVzLzUiPmh0dHBz
Oi8vZ2l0aHViLmNvbS9jb3JlLXdnL2NvYXAtdGNwLXRscy9pc3N1ZXMvNTwvYT4mbmJzcDs8L3Nw
YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1
b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N
CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv
cjpibGFjayI+QmVzdCBSZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv
bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+LSAt
IEphaW1lIEppbcOpbmV6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90
ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVwdDtwYWRk
aW5nOjBpbiAwaW4gMGluIDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tdG9wOjUuMHB0
O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtm
b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZu
YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv
Y2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+
DQo=

--_000_CY1PR03MB2380DED34965CC7541D1328383A20CY1PR03MB2380namp_--


From nobody Fri Nov  4 09:34:12 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 102501295C0; Fri,  4 Nov 2016 09:34:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.22
X-Spam-Level: 
X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GAE83PHcPxwl; Fri,  4 Nov 2016 09:34:06 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94FFA1295C2; Fri,  4 Nov 2016 09:34:04 -0700 (PDT)
X-AuditID: c1b4fb25-d35ee98000001e3e-5b-581cb87a7fb9
Received: from ESESSHC011.ericsson.se (Unknown_Domain [153.88.183.51]) by  (Symantec Mail Security) with SMTP id 65.96.07742.A78BC185; Fri,  4 Nov 2016 17:34:02 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC011.ericsson.se ([153.88.183.51]) with mapi id 14.03.0319.002; Fri, 4 Nov 2016 17:34:01 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Brian Raymor <Brian.Raymor@microsoft.com>
Thread-Topic: =?utf-8?B?8J+UlCBXR0xDIG9uIGRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHM=?=
Thread-Index: AQHSLpW5Z9gSQdMCvkatjPcQsteaNaDEzpZggAOrIoCAAIkSMIAAAcQA
Date: Fri, 4 Nov 2016 16:34:00 +0000
Message-ID: <F77996D3-083E-4F9A-8E57-0788006C990F@ericsson.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <CY1PR03MB2380DED34965CC7541D1328383A20@CY1PR03MB2380.namprd03.prod.outlook.com>
In-Reply-To: <CY1PR03MB2380DED34965CC7541D1328383A20@CY1PR03MB2380.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
Content-Type: multipart/signed; boundary="Apple-Mail-4F3D854C-7C84-4E59-A12C-EBBB21DBB6D3"; protocol="application/pkcs7-signature"; micalg=sha1
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrLIsWRmVeSWpSXmKPExsUyM2K7sW7VDpkIg6evzC3uz3vEZLHv7Xpm iz8TFzNa3Jxxisli2+RXTA6sHmvmrWH0WLLkJ5NH646/7B7TFmUGsERx2aSk5mSWpRbp2yVw ZUy6vpOtYM0OpooJXyYyNzD+WM/UxcjJISFgIvFgVxd7FyMXh5DAOkaJzwvPMkE4ixklllx/ wwZSxSbgIvGg4RFYh4iArkT/2xfMIEXMAj1MEq3vpjKCJIQFAiWOz5vHDFEUJPG89zk7hO0m cX3mNLA4i4CKxOLudawgNq+AvcT6R++gVk9hkljyYwLYNk6BWIk912eCbWMUEJP4fmoNmM0s IC5x68l8qLtFJB5ePM0GYYtKvHz8jxWiZjKjRFN/GsQCQYmTM5+wTGAUnoWkfRaSsllIyiDi 8RK3L19kh7DlJba/ncMMYWtK7O9eDlWjKDGl+yFUjYZE57eJrJji1hIzfh1kg7BNJV4f/ciI rGYBI88qRtHi1OKk3HQjY73Uoszk4uL8PL281JJNjMCIP7jlt+oOxstvHA8xCnAwKvHwFiyS iRBiTSwrrsw9xKgCNOfRhtUXGKVY8vLzUpVEeDW3AKV5UxIrq1KL8uOLSnNSiw8xSnOwKInz mq28Hy4kkJ5YkpqdmlqQWgSTZeLglGpglKg9clKf3UP+SPFhfa1HW5nFLKWMfT7PrldvVj/B ZflpSveKFyn+q7au9/FKWc1ZGTj1d16lcrKwLvdho0K++pQnGueWaf2c1HxD9sKR5PtLpjae aevTX5x03uHu7J/NYlyh1vP9lgevbv/J9fD/9JtzS70kDKWNrJ9kv8//LxFiOunOvtUSSizF GYmGWsxFxYkAJpZbOwADAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/BAFepmK2w7a_3X0vabkwp-8kPxc>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>, Klaus Hartke <hartke@tzi.org>, "core@ietf.org WG" <core@ietf.org>, "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 16:34:09 -0000

--Apple-Mail-4F3D854C-7C84-4E59-A12C-EBBB21DBB6D3
Content-Type: multipart/alternative;
	boundary=Apple-Mail-7EDE3318-A947-4B2C-92D0-23CBCEE3792D
Content-Transfer-Encoding: 7bit


--Apple-Mail-7EDE3318-A947-4B2C-92D0-23CBCEE3792D
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: base64
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--Apple-Mail-7EDE3318-A947-4B2C-92D0-23CBCEE3792D
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: base64

PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iY29udGVudC10eXBlIiBjb250ZW50PSJ0ZXh0
L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPjwvaGVhZD48Ym9keSBkaXI9ImF1dG8iPjxkaXY+PC9kaXY+
PGRpdj5IaSBCcmlhbiw8L2Rpdj48ZGl2Pjxicj5PbiA0IG5vdi4gMjAxNiwgYXQgMTY6NDMsIEJy
aWFuIFJheW1vciAmbHQ7PGEgaHJlZj0ibWFpbHRvOkJyaWFuLlJheW1vckBtaWNyb3NvZnQuY29t
Ij5Ccmlhbi5SYXltb3JAbWljcm9zb2Z0LmNvbTwvYT4mZ3Q7IHdyb3RlOjxicj48YnI+PC9kaXY+
PGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUi
IGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0
b3IiIGNvbnRlbnQ9Ik1pY3Jvc29mdCBXb3JkIDE1IChmaWx0ZXJlZCBtZWRpdW0pIj4NCjxzdHls
ZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5
OkNvdXJpZXI7DQoJcGFub3NlLTE6MiA3IDQgOSAyIDIgNSAyIDQgNDt9DQpAZm9udC1mYWNlDQoJ
e2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAy
IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FsaWJyaSBMaWdodCI7DQoJcGFub3Nl
LTE6MiAxNSAzIDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxp
YnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9u
dC1mYW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KQGZv
bnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkgRW1vamkiOw0KCXBhbm9zZS0xOjIgMTEg
NSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwg
bGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRv
bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS
b21hbiIsc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp
b3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6
dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6
OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcA0KCXtt
c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2lu
LXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDow
aW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixz
ZXJpZjt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29M
aXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsN
CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41
aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1m
YW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3Jt
YWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLXN0
eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdo
dDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0K
CWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7
fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1m
YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVt
YWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls
eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZh
dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K
QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx
LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x
O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz
IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp
ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h
cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp
Zl0tLT4NCg0KDQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy
aSBMaWdodCZxdW90OyxzYW5zLXNlcmlmIj5IaQ0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp
emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkgTGlnaHQmcXVvdDssc2Fucy1zZXJp
ZiI+R8O2cmFuLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkgTGln
aHQmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6
JnF1b3Q7Q2FsaWJyaSBMaWdodCZxdW90OyxzYW5zLXNlcmlmIj5SZWdhcmRpbmcgLSDigJw8L3Nw
YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy
aSBMaWdodCZxdW90OyxzYW5zLXNlcmlmIj5IZW5jZSB0aGUgY2FzZSB3aXRoIG1vcmUgdGhhbiBv
bmUgY2FuZGlkYXRlIHNlY3VyaXR5IHByb3RvY29sIHdpdGggVENQIHdhcyBvbmx5DQogdGhlb3Jl
dGljYWwsIG1heWJlIG5vdCBldmVuIHVuZGVyc3Rvb2QsIGFuZCBJTUhPIG5vdCBzdWZmaWNpZW50
bHkgY29uc2lkZXJlZCBpbiB0aGF0IGRpc2N1c3Npb24u4oCdPG86cD48L286cD48L3NwYW4+PC9w
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u
dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSBMaWdodCZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNw
OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u
dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpIExpZ2h0JnF1b3Q7LHNhbnMt
c2VyaWYiPkkgcmVjb21tZW5kIHRoYXQgeW91IHJldmlldyB0aGUgYXVkaW8gZnJvbSBJRVRGIDk2
LiBPYmplY3Qgc2VjdXJpdHkgYXMgYW4gYWx0ZXJuYXRpdmUgd2FzIHJhaXNlZCBhbmQgZGlzY3Vz
c2VkIGF0IHRoZSBtZWV0aW5nLiAmbmJzcDs8L3NwYW4+PC9wPjwvZGl2PjwvYmxvY2txdW90ZT48
ZGl2Pjxicj48L2Rpdj5JIGFscmVhZHkgZGlkLCBhbmQsIHllcywgaXQgd2FzIHJhaXNlZCBhbmQg
ZGlzY3Vzc2VkLCBidXQgd2l0aG91dCBnb2luZyBpbnRvIG5hbWVzIHlvdSBjYW4gYWxzbyBoZWFy
IHRoYXQgc29tZSB2b2ljZXMgYXJndWUgdGhhdCBUTFMgc2hvdWxkIGJlIG1hbmRhdG9yeSBiZWNh
dXNlIHNlY3VyaXR5IHNob3VsZCBiZS4gU28gZXZlbiBpZiBhcHBsaWNhdG9uIGxheWVyIHNlY3Vy
aXR5IHdhcyBtZW50aW9uZWQgSSBkb24ndCB0aGluayB0aGF0IGFsdGVybmF0aXZlIHdhcyB3ZWxs
IHVuZGVyc3Rvb2QgKG9yIGNvbnNpZGVyZWQpIGJ5IGFsbCB0aGF0IGV4cHJlc3NlZCB0aGVpciBv
cGluaW9uLiZuYnNwOzxkaXY+PGRpdj48ZGl2PjxkaXY+PGRpdj48ZGl2Pjxicj48L2Rpdj48ZGl2
PkfDtnJhbjwvZGl2PjxkaXY+PGRpdj48YnI+PC9kaXY+PGJyPjxibG9ja3F1b3RlIHR5cGU9ImNp
dGUiPjxkaXY+PGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkg
TGlnaHQmcXVvdDssc2Fucy1zZXJpZiI+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt
aWx5OiZxdW90O0NhbGlicmkgTGlnaHQmcXVvdDssc2Fucy1zZXJpZiI+4oCmQnJpYW48bzpwPjwv
bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpIExpZ2h0JnF1b3Q7LHNhbnMtc2Vy
aWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxh
IG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u
dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpw
Pjwvc3Bhbj48L2E+PC9wPg0KPHNwYW4gc3R5bGU9Im1zby1ib29rbWFyazpfTWFpbEVuZENvbXBv
c2UiPjwvc3Bhbj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv
bGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom
cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHls
ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt
c2VyaWYiPiBHw7ZyYW4gU2VsYW5kZXIgWzxhIGhyZWY9Im1haWx0bzpnb3Jhbi5zZWxhbmRlckBl
cmljc3Nvbi5jb20iPm1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb208L2E+XQ0KPGJy
Pg0KPGI+U2VudDo8L2I+IEZyaWRheSwgTm92ZW1iZXIgNCwgMjAxNiAxOjE3IEFNPGJyPg0KPGI+
VG86PC9iPiBCcmlhbiBSYXltb3IgJmx0OzxhIGhyZWY9Im1haWx0bzpCcmlhbi5SYXltb3JAbWlj
cm9zb2Z0LmNvbSI+QnJpYW4uUmF5bW9yQG1pY3Jvc29mdC5jb208L2E+Jmd0Ozxicj4NCjxiPkNj
OjwvYj4gPGEgaHJlZj0ibWFpbHRvOmNvcmVAaWV0Zi5vcmciPmNvcmVAaWV0Zi5vcmc8L2E+IFdH
ICZsdDs8YSBocmVmPSJtYWlsdG86Y29yZUBpZXRmLm9yZyI+Y29yZUBpZXRmLm9yZzwvYT4mZ3Q7
OyBLbGF1cyBIYXJ0a2UgJmx0OzxhIGhyZWY9Im1haWx0bzpoYXJ0a2VAdHppLm9yZyI+aGFydGtl
QHR6aS5vcmc8L2E+Jmd0OzsgPGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY29yZS1jb2FwLXRj
cC10bHNAaWV0Zi5vcmciPmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5vcmc8L2E+
OyBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2Zlbmln
QGFybS5jb20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0OzsgSmFpbWUgSmltw6lu
ZXogJmx0OzxhIGhyZWY9Im1haWx0bzpqYWltZS5qaW1lbmV6QGVyaWNzc29uLmNvbSI+amFpbWUu
amltZW5lekBlcmljc3Nvbi5jb208L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogPC9z
cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29l
IFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYiPvCflJQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt
c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4g
V0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzPG86cD48L286cD48L3NwYW4+PC9w
Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+
PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBCcmlhbiw8c3BhbiBz
dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIG1heSBiZSB3cm9uZywgYnV0IGFzIEkgcmVh
ZCBSRkM3MjUyLCBpdCBzcGVjaWZpZXMgdGhlIGJpbmRpbmcgdG8gRFRMUywgYW5kLCBnaXZlbiB0
aGF0IGJpbmRpbmcsIHdoYXQgaXMgbWFuZGF0b3J5IHRvIGltcGxlbWVudCAoTm9TZWMgYW5kIFJQ
SyB3aXRoIGEgY2VydGFpbiBjaXBoZXJzdWl0ZSkuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp
dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv
ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBhbmFsb2d5IHdvdWxkIGJlIHRo
YXQgdGhpcyBkcmFmdCBzcGVjaWZpZXMgdGhlIGJpbmRpbmcgdG8gVExTIGFuZCB3aGF0IGlzIG1h
bmRhdG9yeSB0byBpbXBsZW1lbnQgd2l0aCB0aGlzIGJpbmRpbmcuJm5ic3A7PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw
PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYmVsaWV2ZSB3ZSBh
bGwgYWdyZWUgdGhhdCBzZWN1cml0eSBtdXN0IGJlIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQsIGFu
ZCBvbiBieSBkZWZhdWx0LiBCdXQgc2luY2UgdGhlcmUgaXMgbm93IG1vcmUgdGhhbiBvbmUgY2Fu
ZGlkYXRlIHNlY3VyaXR5IHByb3RvY29sIGZvciBDb0FQIG92ZXIgVENQIChhbmQgZm9yIENvQVAg
b3ZlciBVRFApIGl0IGRvZXNuJ3QgbWFrZSBzZW5zZSBmb3IgY29uc3RyYWluZWQgZGV2aWNlcw0K
IHRvIG1hbmRhdGUgdGhlIGltcGxlbWVudGF0aW9uIG9mIG9uZSBzcGVjaWZpYyBwcm90b2NvbC4m
bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h
bCI+Tm90ZSB0aGF0IE9TQ09BUCB3YXMgbm90IGFkb3B0ZWQgYXQgdGhlIHRpbWUgd2hlbiB0aGUg
ZGlzY3Vzc2lvbiBvbiBUTFMgd2FzIGhlbGQuIEhlbmNlIHRoZSBjYXNlIHdpdGggbW9yZSB0aGFu
IG9uZSBjYW5kaWRhdGUgc2VjdXJpdHkgcHJvdG9jb2wgd2l0aCBUQ1Agd2FzIG9ubHkgdGhlb3Jl
dGljYWwsIG1heWJlIG5vdCBldmVuIHVuZGVyc3Rvb2QsIGFuZCBJTUhPIG5vdCBzdWZmaWNpZW50
bHkgY29uc2lkZXJlZA0KIGluIHRoYXQgZGlzY3Vzc2lvbi4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N
CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w
Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+R8O2cmFuPG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i
c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9
Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+DQpPbiAyIG5vdi4gMjAxNiwgYXQgMDE6MTYsIEJy
aWFuIFJheW1vciAmbHQ7PGEgaHJlZj0ibWFpbHRvOkJyaWFuLlJheW1vckBtaWNyb3NvZnQuY29t
Ij5Ccmlhbi5SYXltb3JAbWljcm9zb2Z0LmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9w
Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90
dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u
dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi
PkkgcmUtb3BlbmVkIC0NCjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9jb3JlLXdnL2NvYXAt
dGNwLXRscy9pc3N1ZXMvMTEiPmh0dHBzOi8vZ2l0aHViLmNvbS9jb3JlLXdnL2NvYXAtdGNwLXRs
cy9pc3N1ZXMvMTE8L2E+IC0gZm9yIHRyYWNraW5nIGR1cmluZyBXR0xDIGFuZCByZXZpZXdlZCB0
aGUgYXVkaW8gZm9yIHRoZSBkaXNjdXNzaW9uIGF0IElFVEYgOTYgLQ0KPGEgaHJlZj0iaHR0cHM6
Ly93d3cuaWV0Zi5vcmcvYXVkaW8vaWV0Zjk2L2lldGY5Ni1jaGFybG90dGVuYnVyZ2lpLWlpaS0y
MDE2MDcxOS0xMzU5XzUwLm1wMyI+DQpodHRwczovL3d3dy5pZXRmLm9yZy9hdWRpby9pZXRmOTYv
aWV0Zjk2LWNoYXJsb3R0ZW5idXJnaWktaWlpLTIwMTYwNzE5LTEzNTlfNTAubXAzPC9hPiAtIHN0
YXJ0aW5nIGFyb3VuZCA0MzozNS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD
YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw
IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt
aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+VGhlcmUgd2FzIHN0cm9uZyBjb25z
ZW5zdXMgZm9yIFphY2ggU2hlbGJ54oCZcyBwcm9wb3NhbCDigJMgVExTIFsrIFJGQzc5MjVdIGlz
IG1hbmRhdG9yeS10by1pbXBsZW1lbnQgYW5kIG9uIGJ5IGRlZmF1bHQgLSBhcyB0aGUgbWluaW1h
bCBndWlkYW5jZSBmb3IgdHJhbnNwb3J0IHNlY3VyaXR5IHdoaWNoIGlzDQogY29tcGF0aWJsZSB3
aXRoIHRoZSBtYW5kYXRvcnktdG8taW1wbGVtZW50IGxhbmd1YWdlIGZvciBEVExTIGluIFJGQzcy
NTIuIEJvdGggVENQIGFuZCBUTFMgYXJlIGFsbG93ZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m
YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48
L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx
LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPuKApkJyaWFu
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl
cmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9y
ZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGlu
IDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6
ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9t
Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1
b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gR8O2cmFuIFNlbGFuZGVyIFs8YSBocmVmPSJt
YWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tIj5tYWlsdG86Z29yYW4uc2VsYW5kZXJA
ZXJpY3Nzb24uY29tPC9hPl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBPY3RvYmVyIDI1
LCAyMDE2IDE6MDAgQU08YnI+DQo8Yj5Ubzo8L2I+IDxhIGhyZWY9Im1haWx0bzpjb3JlQGlldGYu
b3JnIj5jb3JlQGlldGYub3JnPC9hPiBXRyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvcmVAaWV0Zi5v
cmciPmNvcmVAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gS2xhdXMgSGFydGtlICZs
dDs8YSBocmVmPSJtYWlsdG86aGFydGtlQHR6aS5vcmciPmhhcnRrZUB0emkub3JnPC9hPiZndDs7
IDxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzQGlldGYub3JnIj4N
CmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5vcmc8L2E+OyBIYW5uZXMgVHNjaG9m
ZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhhbm5l
cy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0OzsgSmFpbWUgSmltw6luZXogJmx0OzxhIGhyZWY9
Im1haWx0bzpqYWltZS5qaW1lbmV6QGVyaWNzc29uLmNvbSI+amFpbWUuamltZW5lekBlcmljc3Nv
bi5jb208L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiA8L3NwYW4+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fu
cy1zZXJpZiI+8J+UlDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh
bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBXR0xDIG9uIGRyYWZ0LWlldGYt
Y29yZS1jb2FwLXRjcC10bHM8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgc3R5
bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1z
aXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48
bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFw
dCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9y
OmJsYWNrIj5EZWFyIGFsbCw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2lu
OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhlaWdodDogMTRweCI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4mbmJzcDs8
L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9t
Oi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q291cmll
cjtjb2xvcjpibGFjayI+SSdkIGxpa2UgdG8gcmV2aXNpdCB0aGUgZGlzY3Vzc2lvbiBvbiB0aGUg
c3RhdHVzIG9mIFRMUyBpbiBDb0FQIG92ZXIgVENQIGltcGxlbWVudGF0aW9ucy4mbmJzcDs8L3Nw
YW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4w
MDAxcHQ7bWluLWhlaWdodDogMTRweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250
LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+
DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxl
PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPkluIHRo
ZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K
PHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48dT48c3BhbiBzdHls
ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwNDJFRUUiPjxh
IGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtY29hcC10
Y3AtdGxzLTA0I3NlY3Rpb24tNyI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll
dGYtY29yZS1jb2FwLXRjcC10bHMtMDQjc2VjdGlvbi03PC9hPjwvc3Bhbj48L3U+PG86cD48L286
cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFu
IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2si
Pml0IGlzIHN0YXRlZDo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBp
bjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhlaWdodDogMTRweCI+PHNwYW4gc3R5bGU9ImZv
bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3Nw
YW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4w
MDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtj
b2xvcjpibGFjayI+IlRMUyB2ZXJzaW9uIDEuMiBvciBoaWdoZXIgaXMgbWFuZGF0b3J5LXRvLWlt
cGxlbWVudCBhbmQgTVVTVCBiZSBlbmFibGVkIGJ5IGRlZmF1bHQuIjwvc3Bhbj48bzpwPjwvbzpw
PjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdDttaW4taGVp
Z2h0OiAxNHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvdXJp
ZXI7Y29sb3I6YmxhY2siPjxicj4NCjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N
CjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5JIHRob3Vn
aHQgb25lIGNvbmNsdXNpb24gZnJvbSBCZXJsaW4gd2FzJm5ic3A7dGhhdCB3ZSBzaG91bGQgYWxp
Z24gd2l0aCBSRkM3MjUyLCB3aGljaCBhbGxvd3MgVURQIG9yIERUTFMuPC9zcGFuPjxvOnA+PC9v
OnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0O21pbi1o
ZWlnaHQ6IDE0cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29u
c29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxl
PSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6
ZTo5LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+Q29uc2lkZXJpbmcgdGhh
dCBDb0FQIG92ZXIgVENQIG1heSBiZSBwcm90ZWN0ZWQgb24gb3RoZXIgbGF5ZXJzIHRoYW4gdHJh
bnNwb3J0IGxheWVyLCBlLmcuIG9uIGFwcGxpY2F0aW9uIGxheWVyIHVzaW5nIE9TQ09BUCDigJQg
d2h5IGlzIGl0IG5lY2Vzc2FyeSB0bw0KIG1hbmRhdGUgdGhlIGltcGxlbWVudGF0aW9uJm5ic3A7
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRv
bTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvbnNv
bGFzO2NvbG9yOmJsYWNrIj5vZiBUTFM/Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg
c3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0O21pbi1oZWlnaHQ6IDE0cHgi
PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6
YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGlu
O21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250
LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+SW4gc29tZSB1c2UgY2FzZXMgY29tbXVuaWNh
dGlvbiBzZWN1cml0eSBtYXkgYmUgcmVxdWlyZWQgYXQgbXVsdGlwbGUgbGF5ZXJzLiBCdXQgaW4g
b3RoZXIgY2FzZXMgd2hlcmUgVExTIGlzIG5vdCBhZGVxdWF0ZS9uZWNlc3NhcnkgYXMgYSBzZWNv
bmQgcHJvdG9jb2wNCiBhbmQgY29uc2lkZXJpbmcgYSBjb25zdHJhaW5lZCBkZXZpY2UgbWF5IG5v
dCBiZSBhYmxlIHRvIHN1cHBvcnQgbXVsdGlwbGUgc2VjdXJpdHkgcHJvdG9jb2wgaW1wbGVtZW50
YXRpb25zLCBpdCBkb2Vzbid0IG1ha2Ugc2Vuc2UgdG8gYWx3YXlzIHJlcXVpcmUgVExTIGNvZGUu
PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRv
bTouMDAwMXB0O21pbi1oZWlnaHQ6IDE0cHgiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7
Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw
PjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4g
c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+
SSBwcm9wb3NlIHRoZSBxdW90ZWQgc2VudGVuY2UgaXMgcmVwbGFjZWQgd2l0aCBhIHN0YXRlbWVu
dCBzYXlpbmcgc29tZXRoaW5nIGxpa2UmbmJzcDtmb3IgQ29BUCBvdmVyIFRDUCBpdCBpcyBtYW5k
YXRvcnktdG8taW1wbGVtZW50IGEgc2VjdXJpdHkgcHJvdG9jb2wsIGFuZA0KIHRoYXQgc2VjdXJp
dHkgbXVzdCBiZSBlbmFibGVkIGJ5IGRlZmF1bHQuIFJlY29tbWVuZGVkIHByb3RvY29scyBjYW4g
YmUgcHJvdmlkZWQsIGFuZCBtYW5kYXRvcnktdG8taW1wbGVtZW50IGNpcGhlcnN1aXRlcyBmb3Ig
YSBnaXZlbiBwcm90b2NvbCwgbGlrZSBmb3IgRFRMUyBpbiBSRkM3MjUyLiBCdXQgaXQgc2hvdWxk
IG5vdCBiZSByZXN0cmljdGVkIHRvIFRMUy4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8
cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7bWluLWhlaWdodDogMTRw
eCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xv
cjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbjow
aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0O21pbi1oZWlnaHQ6IDE0cHgiPjxzcGFuIHN0eWxlPSJm
b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOzwv
c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206
LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb25zb2xh
cztjb2xvcjpibGFjayI+UmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0i
bWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7LXdlYmtpdC10ZXh0LXN0cm9rZS1jb2xv
cjogcmdiKDAsIDAsIDApOy13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IGluaXRpYWwiPg0KPHNw
YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFj
ayI+R8O2cmFuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli
cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PGJyPg0KPGJyPg0KPGJyPg0KPC9zcGFu
PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90
dG9tOi4wMDAxcHQ7LXdlYmtpdC10ZXh0LXN0cm9rZS1jb2xvcjogcmdiKDAsIDAsIDApOy13ZWJr
aXQtdGV4dC1zdHJva2Utd2lkdGg6IGluaXRpYWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5
LjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48
L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7LXdl
YmtpdC10ZXh0LXN0cm9rZS1jb2xvcjogcmdiKDAsIDAsIDApOy13ZWJraXQtdGV4dC1zdHJva2Ut
d2lkdGg6IGluaXRpYWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls
eTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp
dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBw
dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz
cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv
dDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9
ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl
cmlmO2NvbG9yOmJsYWNrIj5jb3JlICZsdDs8YSBocmVmPSJtYWlsdG86Y29yZS1ib3VuY2VzQGll
dGYub3JnIj5jb3JlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBvbiBiZWhhbGYgb2YgSmFpbWUg
Smltw6luZXogJmx0OzxhIGhyZWY9Im1haWx0bzpqYWltZS5qaW1lbmV6QGVyaWNzc29uLmNvbSI+
amFpbWUuamltZW5lekBlcmljc3Nvbi5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVz
ZGF5IDE4IE9jdG9iZXIgMjAxNiBhdCAxMToyMjxicj4NCjxiPlRvOiA8L2I+IjxhIGhyZWY9Im1h
aWx0bzpjb3JlQGlldGYub3JnIj5jb3JlQGlldGYub3JnPC9hPiBXRyIgJmx0OzxhIGhyZWY9Im1h
aWx0bzpjb3JlQGlldGYub3JnIj5jb3JlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5DYzogPC9i
PktsYXVzIEhhcnRrZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmhhcnRrZUB0emkub3JnIj5oYXJ0a2VA
dHppLm9yZzwvYT4mZ3Q7LCAiPGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY29yZS1jb2FwLXRj
cC10bHNAaWV0Zi5vcmciPmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5vcmc8L2E+
IiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5v
cmciPmRyYWZ0LWlldGYtY29yZS1jb2FwLXRjcC10bHNAaWV0Zi5vcmc8L2E+Jmd0OywNCiBIYW5u
ZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5j
b20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwv
Yj5bY29yZV0gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5
OiZxdW90O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPvCflJQ8
L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs
aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4gV0dMQyBvbiBkcmFmdC1pZXRmLWNv
cmUtY29hcC10Y3AtdGxzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1p
bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3Nw
YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1
b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkRlYXIgQ29SRSBXRyw8L3NwYW4+PG86cD48L286
cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i
Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy
aWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv
bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+VGhl
IGNvcmUtY29hcC10Y3AtdGxzIGRyYWZ0IGhhcyBnb3R0ZW4gdG8gYSBzdGF0ZSB0aGF0IHRoZSBh
dXRob3JzIGZlZWwgaXMgaW4gZ29vZCBzaGFwZSBmb3IgV0dMQy4mbmJzcDs8L3NwYW4+PG86cD48
L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls
ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt
c2VyaWY7Y29sb3I6YmxhY2siPldlIHdvdWxkIGxpa2UgdG8gYXNrIHRoZSBncm91cCB0byBzdGFy
dCBjaGVja2luZyB0aGlzIGxhc3QgdmVyc2lvbiBhbmQgdGhlIGlzc3VlcyBvbiB0aGUgR2l0aHVi
IHJlcG9zaXRvcnkuJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K
PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m
YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mbmJzcDs8
L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp
JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0
Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtY29hcC10Y3AtdGxzLTA1Ij5odHRwczovL3Rvb2xz
LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWNvYXAtdGNwLXRscy0wNTwvYT4mbmJzcDsm
bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtD
YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwv
bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl
PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z
ZXJpZjtjb2xvcjpibGFjayI+VGhlcmUgaXMgYXQgdGhlIG1vbWVudCBvbmUgb3BlbiBpc3N1ZSBs
ZWZ0IGluIHRoZSB0cmFja2VyICgmbmJzcDs8YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vY29y
ZS13Zy9jb2FwLXRjcC10bHMvaXNzdWVzLzMxIj5odHRwczovL2dpdGh1Yi5jb20vY29yZS13Zy9j
b2FwLXRjcC10bHMvaXNzdWVzLzMxPC9hPiZuYnNwOyZuYnNwOykNCiB3aGljaCBpcyBtb3N0bHkg
ZWRpdG9yaWFsLiBUaGUgaXNzdWVzIHJhaXNlZCBkdXJpbmcgbGFzdCBJRVRGIC0gYWJvdXQgT2Jz
ZXJ2ZSBvdmVyIHJlbGlhYmxlIHRyYW5zcG9ydHMgLSAmbmJzcDtoYXZlIGJlZW4gY2xvc2VkIGFu
ZCBuZXcgdGV4dCBoYXMgYmVlbiBhZGRlZCB0byB0aGUgYXBwZW5kaXg6Jm5ic3A7PGEgaHJlZj0i
aHR0cHM6Ly9naXRodWIuY29tL2NvcmUtd2cvY29hcC10Y3AtdGxzL2lzc3Vlcy81Ij5odHRwczov
L2dpdGh1Yi5jb20vY29yZS13Zy9jb2FwLXRjcC10bHMvaXNzdWVzLzU8L2E+Jm5ic3A7PC9zcGFu
PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw
YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90
OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8
L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl
OjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6
YmxhY2siPkJlc3QgUmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250
LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPi0gLSBK
YWltZSBKaW3DqW5lejwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUg
c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNCNUM0REYgNC41cHQ7cGFkZGlu
ZzowaW4gMGluIDBpbiA0LjBwdDttYXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXRvcDo1LjBwdDtt
YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u
dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj4mbmJz
cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr
cXVvdGU+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KDQoNCjwvZGl2PjwvYmxvY2tx
dW90ZT48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48L2JvZHk+PC9odG1sPg==

--Apple-Mail-7EDE3318-A947-4B2C-92D0-23CBCEE3792D--

--Apple-Mail-4F3D854C-7C84-4E59-A12C-EBBB21DBB6D3
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--Apple-Mail-4F3D854C-7C84-4E59-A12C-EBBB21DBB6D3--


From nobody Fri Nov  4 10:54:31 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C84FD1295ED for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 10:54:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZPs0uLrLfPOX for <core@ietfa.amsl.com>; Fri,  4 Nov 2016 10:54:28 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF37F129497 for <core@ietf.org>; Fri,  4 Nov 2016 10:54:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA4HsNe1007353; Fri, 4 Nov 2016 18:54:23 +0100 (CET)
Received: from nar-4.local.informatik.uni-bremen.de (robin.informatik.uni-bremen.de [134.102.218.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3t9TxC3jGTz7yD3; Fri,  4 Nov 2016 18:54:23 +0100 (CET)
X-Mailer: emacs 26.0.50.1 (via feedmail 11-beta-1 I)
From: Carsten Bormann <cabo@tzi.org>
To: =?utf-8?Q?G=C3=B6ran?= Selander <goran.selander@ericsson.com>
References: <D434CFFC.6B35D%goran.selander@ericsson.com> <CY1PR03MB23808242C1857DA8F3B2FE4983A00@CY1PR03MB2380.namprd03.prod.outlook.com> <35CCD988-A6A7-4056-87B5-2460F9A18B6F@ericsson.com> <CY1PR03MB2380DED34965CC7541D1328383A20@CY1PR03MB2380.namprd03.prod.outlook.com> <F77996D3-083E-4F9A-8E57-0788006C990F@ericsson.com>
Date: Fri, 04 Nov 2016 18:54:20 +0100
In-Reply-To: <F77996D3-083E-4F9A-8E57-0788006C990F@ericsson.com> (=?utf-8?Q?=22G=C3=B6ran?= Selander"'s message of "Fri, 4 Nov 2016 16:34:00 +0000")
Message-ID: <m0twbnb06r.fsf@nar-4.local>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (darwin)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/efEkiYbuQavp8xYcAz5LHoJHlvI>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Nov 2016 17:54:30 -0000

G=C3=B6ran Selander <goran.selander@ericsson.com> writes:

> I already did, and, yes, it was raised and discussed, but without
> going into names you can also hear that some voices argue that TLS
> should be mandatory because security should be. So even if applicaton
> layer security was mentioned I don't think that
> alternative was well understood (or considered) by all that expressed the=
ir opinion.

I think the place where the discussion went beyond this was where people
opined that you want to stack TLS on top of Object Security so you can
privacy-protect (on the current proxy-to-proxy-hop) the secured objects
that you are lugging around.

To me, this sounds like a reasonable thing to do in some applications,
but it is not nearly as much of a requirement than having security in
the first place.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Mon Nov  7 01:06:02 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7640129AC1 for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 01:06:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lQ2uA7g5K_ot for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 01:05:59 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E26A129A28 for <core@ietf.org>; Mon,  7 Nov 2016 01:05:59 -0800 (PST)
Received: from vsmta11.fe.internet.bosch.com (unknown [10.4.98.51]) by imta23.fe.bosch.de (Postfix) with ESMTP id 15D591580233; Mon,  7 Nov 2016 10:05:57 +0100 (CET)
Received: from be6vw2exc00.bosch-si.com (vsgw24.fe.internet.bosch.com [10.4.98.24]) by vsmta11.fe.internet.bosch.com (Postfix) with ESMTP id B7E5B2380D8A; Mon,  7 Nov 2016 10:05:56 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc00.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Mon, 7 Nov 2016 10:06:25 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>, "thomas.fossati@nokia.com" <thomas.fossati@nokia.com>
Thread-Topic: [ALU] Re: [core] [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNbzZeQ+A9RErCkiNupwnpSi4qKDNMAwA
Date: Mon, 7 Nov 2016 09:06:25 +0000
Message-ID: <1478509554.7771.1.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D440B443.74C6D%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <E5FFE5038B019C4A9C1596749D3803EC@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22682.006
X-TMASE-MatchedRID: Jm7Yxmmj9OmwtrD/qG0ruia1MaKuob8Pt3aeg7g/usCe9toQ6h6LE4uC G4jmsYKXBejLzA7z2kJBGwXX3mH+mo4fe2Jm7VBSjNvYZHpO13cs9laqcwsZUlc/Cedjlcvk2FL hFRTcEh4drrr/8xe31goYzZXYPvMcEt6QBmPLVa2GwT67eecJ8Mtcv4yLqGWeh8BhJvgqWBnJTt eBOzpbggk3T8rNqp8oGdcq7ysaVFZS/isIEXGDv49BVqQOQlT5bWouL55hGj3fUZT83lbkEMIsi 2/gHXJH8azB+j7c5JQ+N37UQB/L058Ye+NI4xbKq1ZJZ2z+SbZUiWnfOQltVSz403zpOoK7enlv 5xHoC23iYBcSqrOxR8ibb83pfBOIZndN15Svp2/r/EBmiNuXt+8lj2kHOCDU0mrr/YUV0CTGEfo tTZgUJZQa4e/1vPEH++rtajCGW0qrmmW6xY+ZmEhEDfw/93BuQa2sDHLkQ05rEoFtNYg0Cyhxhw 92JrHfR/qZmi5S4mSG184Y5LIraUL9tcyTZdAsgxsfzkNRlfKx5amWK2anSPoLR4+zsDTtAqYBE 3k9Mpw=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/ITB1X3urknyDtRQa30tDtQ2K2Yc>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Nov 2016 09:06:01 -0000
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From nobody Mon Nov  7 02:37:02 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FF31129A8E for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 02:37:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xH15DreeZ2Cb for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 02:36:59 -0800 (PST)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1A60129A66 for <core@ietf.org>; Mon,  7 Nov 2016 02:36:59 -0800 (PST)
Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id 06256609DC857; Mon,  7 Nov 2016 10:36:56 +0000 (GMT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA7Aav3r025516 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 7 Nov 2016 10:36:57 GMT
Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id uA7Aaudh002155 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 7 Nov 2016 11:36:57 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.03.0301.000; Mon, 7 Nov 2016 11:36:56 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>, "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
Thread-Topic: [ALU] Re: [core] [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNatFmLdXIp2xaES3xWUzPBwYgaDG/VuAgAYy+YCAABlBAA==
Date: Mon, 7 Nov 2016 10:36:56 +0000
Message-ID: <D446013A.750C0%thomas.fossati@alcatel-lucent.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com>
In-Reply-To: <1478509554.7771.1.camel@bosch-si.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.40]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <8750FEE01882B840A5BCBEACE9D665D5@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/iDb_bYWxihCYDvJWraz6QqNvUII>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Nov 2016 10:37:01 -0000

Hi Kai,

On 07/11/2016 09:06, "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
wrote:
>>I've not done any serious analysis, but it seems to me that CID forgery
>> would result in a failure decrypting the forged record and possibly a
>> de-synchronisation of the CID?  That seems less scary than a server
>>having
>> to worry about collisions in its lookup table.
>>=20
>I agree that a forged CID in conjunction with an unknown master secret
>should not
>be a problem. However, the same reasoning applies to the probabilty of a
>CID
>collision in the server's "hash table". Do you know anyone who has more
>insight
>into an HMAC's properties regarding these issues and who could shed some
>light on
>it?

HMAC behaves like a PRF, therefore the birthday paradox applies.  I have
crunched some numbers below about the probability to get a collision with
n-bit CID and varying number of concurrent sessions.  The takeaway is that
choosing an appropriate CID size is not going to be trivial, and that a
32-bit CID might be too small for a lot of practical use cases...

Cheers, t

Using 32-bits CID
#sessions | collision probability
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
10        |  1.16415320717e-08, or about 1 in 85,899,347
100       |  1.16415254059e-06, or about 1 in 858,994
1000      |  0.000116408545826, or about 1 in 8,590
10000     |  0.011574031737, or about 1 in 86
100000    |  0.687813095694, or about 1 in 1
1000000   |  1.0, or about 1 in 1

Using 40-bits CID
#sessions | collision probability
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
10        |  4.54747350886e-11, or about 1 in 21,990,232,556
100       |  4.54747350886e-09, or about 1 in 219,902,326
1000      |  4.54747247525e-07, or about 1 in 2,199,024
10000     |  4.54737011285e-05, or about 1 in 21,991
100000    |  0.00453714940666, or about 1 in 220
1000000   |  0.365391719084, or about 1 in 3

Using 48-bits CID
#sessions | collision probability
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
10        |  1.7763568394e-13, or about 1 in 5,629,499,534,213
100       |  1.7763568394e-11, or about 1 in 56,294,995,342
1000      |  1.7763568394e-09, or about 1 in 562,949,953
10000     |  1.77635668175e-07, or about 1 in 5,629,500
100000    |  1.77634106228e-05, or about 1 in 56,295
1000000   |  0.00177478005137, or about 1 in 563

Using 56-bits CID
#sessions | collision probability
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
10        |  6.66133814775e-16, or about 1 in 1,501,199,875,790,165
100       |  6.93889390391e-14, or about 1 in 14,411,518,807,586
1000      |  6.93889390391e-12, or about 1 in 144,115,188,076
10000     |  6.93889390391e-10, or about 1 in 1,441,151,881
100000    |  6.93889365966e-08, or about 1 in 14,411,519
1000000   |  6.93886982983e-06, or about 1 in 144,116

Using 64-bits CID
#sessions | collision probability
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
10        |  so small that python choked :-)
100       |  2.22044604925e-16, or about 1 in 4,503,599,627,370,496
1000      |  2.70894418009e-14, or about 1 in 36,914,751,044,020
10000     |  2.71049849232e-12, or about 1 in 368,935,825,950
100000    |  2.71050515366e-10, or about 1 in 3,689,349,193
1000000   |  2.71050539791e-08, or about 1 in 36,893,489


From nobody Mon Nov  7 09:10:54 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85F92129648 for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 09:10:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kEylWqqFBryr for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 09:10:50 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0A3412967B for <core@ietf.org>; Mon,  7 Nov 2016 09:10:49 -0800 (PST)
Received: from vsmta14.fe.internet.bosch.com (unknown [10.4.98.54]) by imta24.fe.bosch.de (Postfix) with ESMTP id BE74BD8021F; Mon,  7 Nov 2016 18:10:47 +0100 (CET)
Received: from be6vw2exc00.bosch-si.com (vsgw23.fe.internet.bosch.com [10.4.98.23]) by vsmta14.fe.internet.bosch.com (Postfix) with ESMTP id 732CCA40339; Mon,  7 Nov 2016 18:10:47 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc00.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Mon, 7 Nov 2016 18:11:15 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>, "thomas.fossati@nokia.com" <thomas.fossati@nokia.com>
Thread-Topic: [ALU] Re: [core] [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNbzZeQ+A9RErCkiNupwnpSi4qKDNMAwAgAAZbwCAAG4HAA==
Date: Mon, 7 Nov 2016 17:11:15 +0000
Message-ID: <1478538644.7771.9.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com>
In-Reply-To: <D446013A.750C0%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <3CB62BC40AD76941962A32B733E4332A@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22684.006
X-TMASE-MatchedRID: oTBA/+sdKaY4HKI/yaqRmy97pb4g5HCtBenhzFwRzTPSYAzZ6KmqWp6Q VnlXMIygfbguDgyvxLfm2Wc8lfuG1B1YpEPWJiyz6Zzj+kMRBrZ+S5m2/8VLml6AkmKlDIzQp56 Ajxnx9+zwLx34aly34ZnDDY4p6VUCDkb9vppIZHwdxBAG5/hkW5PWrYhEvfadgrAXgr/AjP0I+7 sHVPDnXsZE4UT8xKaLYASlu1An0J70xzdgDJnArp4CIKY/Hg3AwWulRtvvYxTUHQeTVDUrItRnE QCUU+jzjoczmuoPCq0UoZfxljVtP7/mfOoNoYONNKaycpFY+3l3ApLsaYRZz5v168ZfKaSZQwym txuJ6y0=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/zmM6aVVRTHgL4K9brxxFfIuQoo0>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Nov 2016 17:10:52 -0000
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==


From nobody Mon Nov  7 11:12:37 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A003B129558 for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 11:12:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8ZNRdCA3EQlX for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 11:12:35 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEE551294EA for <core@ietf.org>; Mon,  7 Nov 2016 11:12:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA7JCUFm027284; Mon, 7 Nov 2016 20:12:30 +0100 (CET)
Received: from [192.168.217.113] (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tCMWx6tzTz7xgZ; Mon,  7 Nov 2016 20:12:29 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <1478538644.7771.9.camel@bosch-si.com>
Date: Mon, 7 Nov 2016 20:12:29 +0100
X-Mao-Original-Outgoing-Id: 500238749.168399-5be94426be0b0ead5a6a9456d718cd88
Content-Transfer-Encoding: quoted-printable
Message-Id: <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com>
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/460HZRWnbrzWnFa-mVC-_xB_uaM>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Nov 2016 19:12:36 -0000

The current discussion confuses me a lot.
Apparently, I=E2=80=99m missing some context.
So I=E2=80=99ll try to state what I have understood so far.

Current state:

When a node receives a DTLS packet, it uses the four-tuple (2x transport =
address, each consisting of IP address and port number) to find the =
security association (=E2=80=9Cconnection=E2=80=9D) inside which the =
packet is to be interpreted.

Problem:

The four-tuple changes.

Solution:

When that is the case, the receiver could simply try all security =
assocations it has until one matches (i.e., the MAC works out).

Problem:

This is expensive if the receiver has many security associations.
(The expense also leads to an easy DOS attack, so it MUST be avoided.)

Solution:

Add a hint to the packet, so the number of security associations to be =
searched by a receiver is reduced to a trivial amount.

As with classical (computer science) hash tables, a collision is not a =
problem; it just slightly reduces the efficiency.

If the hint is reasonably probabilistically well-distributed, something =
like 16 (or maybe 24) bits should suffice except for the really large =
servers with more than several million active security associations.

What am I missing?

(Once we have agreement or clarification on what I have said, we can go =
back to discussion unsinkable progressions of these hints.)

Gr=C3=BC=C3=9Fe, Carsten


From nobody Mon Nov  7 23:32:05 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03845129515 for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 23:32:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EWAo9z2X9KRy for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 23:32:01 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D6E71293E4 for <core@ietf.org>; Mon,  7 Nov 2016 23:32:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA87Vvse025930 for <core@ietf.org>; Tue, 8 Nov 2016 08:31:57 +0100 (CET)
Received: from [192.168.217.102] (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tCgx964Rtz7xp1; Tue,  8 Nov 2016 08:31:57 +0100 (CET)
From: Carsten Bormann <cabo@tzi.org>
Content-Type: multipart/alternative; boundary="Apple-Mail=_6DE2759D-991D-4BA3-9340-CCE2A5E0C353"
X-Mao-Original-Outgoing-Id: 500283117.158557-0ef5c854a8fe8e1d81975aa51ff3bf54
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
Date: Tue, 8 Nov 2016 08:31:57 +0100
Message-Id: <9FFFDD95-22FF-469C-9490-F8CD78789769@tzi.org>
References: <20161108042305.GA21439@iab.org>
To: core <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/oWXOyrGnaiNZnX70UKkhEXD0_jk>
Subject: [core] Fwd: IAB Statement on IPv6
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 07:32:04 -0000

--Apple-Mail=_6DE2759D-991D-4BA3-9340-CCE2A5E0C353
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Below is the IAB statement on IPv6 that was referred to here earlier.

In the CoRE WG, I think we are good with these recommendations =E2=80=94 =
we actually have been practicing them from the outset.
But it is useful to have them available written down, so please do have =
a look.

I do not think any of this stops us addressing requirements that come =
from deployments that are at least partially stuck on IPv4.  E.g., the =
work on CoAP over TCP is partially motivated by such requirements.

Gr=C3=BC=C3=9Fe, Carsten


> Begin forwarded message:
>=20
> From: IAB Chair <iab-chair@iab.org <mailto:iab-chair@iab.org>>
> Subject: IAB Statement on IPv6
> Date: 8 November 2016 at 05:23:08 +0100
>=20
> Dear colleagues,
>=20
> The IAB has posted a statement to its website about IPv6
> (https://www.iab.org/2016/11/07/iab-statement-on-ipv6/ =
<https://www.iab.org/2016/11/07/iab-statement-on-ipv6/>).  It is
> reproduced in full below:
>=20
> The Internet Architecture Board (IAB), following discussions in the
> Internet Engineering Task Force (IETF), advises its partner Standards
> Development Organizations (SDOs) and organizations that the pool of
> unassigned IPv4 addresses has been exhausted, and as a result we are
> seeing an increase in both dual-stack (that is, both IPv4 and IPv6)
> and IPv6-only deployments, a trend that will only
> accelerate. Therefore, networking standards need to fully support
> IPv6. The IETF as well as other SDOs need to ensure that their
> standards do not assume IPv4.
>=20
> The IAB expects that the IETF will stop requiring IPv4 compatibility
> in new or extended protocols. Future IETF protocol work will then
> optimize for and depend on IPv6.
>=20
> Preparation for this transition requires ensuring that many different
> environments are capable of operating completely on IPv6 without being
> dependent on IPv4 [see RFC 6540].  We recommend that all networking
> standards assume the use of IPv6, and be written so they do not
> require IPv4. We recommend that existing standards be reviewed to
> ensure they will work with IPv6, and use IPv6 examples. Backward
> connectivity to IPv4, via dual-stack or a transition technology, will
> be needed for some time. The key issue for SDOs is to remove any
> obstacles in their standards which prevent or slow down the transition
> in different environments.
>=20
> In addition, the IETF has found it useful to add IPv6 to its external
> resources (e.g., Web, mail) and to also run IPv6 on its conference
> network since this helps our participants and contributors and also
> sends the message that we are serious about IPv6. That approach might
> be applicable to other SDOs.
>=20
> We encourage the industry to develop strategies for IPv6-only
> operation. We welcome reports of where gaps in standards remain,
> requiring further developments in IPv6 or other protocols. We are also
> ready to provide support or assistance in bridging those gaps.
>=20
> Best regards,
>=20
> Andrew Sullivan
> for the IAB
>=20
> --=20
> IAB Chair (Andrew Sullivan)
> iab-chair@iab.org <mailto:iab-chair@iab.org>
>=20
>=20


--Apple-Mail=_6DE2759D-991D-4BA3-9340-CCE2A5E0C353
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dutf-8"><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D"">Below is the IAB statement on IPv6 that was referred to here =
earlier.<div class=3D""><br class=3D""></div><div class=3D"">In the CoRE =
WG, I think we are good with these recommendations =E2=80=94 we actually =
have been practicing them from the outset.</div><div class=3D"">But it =
is useful to have them available written down, so please do have a =
look.</div><div class=3D""><br class=3D""></div><div class=3D"">I do not =
think any of this stops us addressing requirements that come from =
deployments that are at least partially stuck on IPv4. &nbsp;E.g., the =
work on CoAP over TCP is partially motivated by such =
requirements.</div><div class=3D""><br class=3D""></div><div =
class=3D""><div class=3D"">Gr=C3=BC=C3=9Fe, Carsten</div></div><div =
class=3D""><div class=3D""><br class=3D""><div><br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D"">Begin forwarded =
message:</div><br class=3D"Apple-interchange-newline"><div =
style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; =
margin-left: 0px;" class=3D""><span style=3D"font-family: =
-webkit-system-font, Helvetica Neue, Helvetica, sans-serif; =
color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">From: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D"">IAB Chair &lt;<a =
href=3D"mailto:iab-chair@iab.org" class=3D"">iab-chair@iab.org</a>&gt;<br =
class=3D""></span></div><div style=3D"margin-top: 0px; margin-right: =
0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><span =
style=3D"font-family: -webkit-system-font, Helvetica Neue, Helvetica, =
sans-serif; color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">Subject: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D""><b class=3D"">IAB Statement on =
IPv6</b><br class=3D""></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><span=
 style=3D"font-family: -webkit-system-font, Helvetica Neue, Helvetica, =
sans-serif; color:rgba(0, 0, 0, 1.0);" class=3D""><b class=3D"">Date: =
</b></span><span style=3D"font-family: -webkit-system-font, Helvetica =
Neue, Helvetica, sans-serif;" class=3D"">8 November 2016 at 05:23:08 =
+0100<br class=3D""></span></div><div style=3D"margin-top: 0px; =
margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=3D""><br =
class=3D""></div><div class=3D""><div class=3D"">Dear colleagues,<br =
class=3D""><br class=3D"">The IAB has posted a statement to its website =
about IPv6<br class=3D"">(<a =
href=3D"https://www.iab.org/2016/11/07/iab-statement-on-ipv6/" =
class=3D"">https://www.iab.org/2016/11/07/iab-statement-on-ipv6/</a>). =
&nbsp;It is<br class=3D"">reproduced in full below:<br class=3D""><br =
class=3D"">The Internet Architecture Board (IAB), following discussions =
in the<br class=3D"">Internet Engineering Task Force (IETF), advises its =
partner Standards<br class=3D"">Development Organizations (SDOs) and =
organizations that the pool of<br class=3D"">unassigned IPv4 addresses =
has been exhausted, and as a result we are<br class=3D"">seeing an =
increase in both dual-stack (that is, both IPv4 and IPv6)<br =
class=3D"">and IPv6-only deployments, a trend that will only<br =
class=3D"">accelerate. Therefore, networking standards need to fully =
support<br class=3D"">IPv6. The IETF as well as other SDOs need to =
ensure that their<br class=3D"">standards do not assume IPv4.<br =
class=3D""><br class=3D"">The IAB expects that the IETF will stop =
requiring IPv4 compatibility<br class=3D"">in new or extended protocols. =
Future IETF protocol work will then<br class=3D"">optimize for and =
depend on IPv6.<br class=3D""><br class=3D"">Preparation for this =
transition requires ensuring that many different<br =
class=3D"">environments are capable of operating completely on IPv6 =
without being<br class=3D"">dependent on IPv4 [see RFC 6540]. &nbsp;We =
recommend that all networking<br class=3D"">standards assume the use of =
IPv6, and be written so they do not<br class=3D"">require IPv4. We =
recommend that existing standards be reviewed to<br class=3D"">ensure =
they will work with IPv6, and use IPv6 examples. Backward<br =
class=3D"">connectivity to IPv4, via dual-stack or a transition =
technology, will<br class=3D"">be needed for some time. The key issue =
for SDOs is to remove any<br class=3D"">obstacles in their standards =
which prevent or slow down the transition<br class=3D"">in different =
environments.<br class=3D""><br class=3D"">In addition, the IETF has =
found it useful to add IPv6 to its external<br class=3D"">resources =
(e.g., Web, mail) and to also run IPv6 on its conference<br =
class=3D"">network since this helps our participants and contributors =
and also<br class=3D"">sends the message that we are serious about IPv6. =
That approach might<br class=3D"">be applicable to other SDOs.<br =
class=3D""><br class=3D"">We encourage the industry to develop =
strategies for IPv6-only<br class=3D"">operation. We welcome reports of =
where gaps in standards remain,<br class=3D"">requiring further =
developments in IPv6 or other protocols. We are also<br class=3D"">ready =
to provide support or assistance in bridging those gaps.<br class=3D""><br=
 class=3D"">Best regards,<br class=3D""><br class=3D"">Andrew =
Sullivan<br class=3D"">for the IAB<br class=3D""><br class=3D"">-- <br =
class=3D"">IAB Chair (Andrew Sullivan)<br class=3D""><a =
href=3D"mailto:iab-chair@iab.org" class=3D"">iab-chair@iab.org</a><br =
class=3D""><br class=3D""><br =
class=3D""></div></div></blockquote></div><br =
class=3D""></div></div></body></html>=

--Apple-Mail=_6DE2759D-991D-4BA3-9340-CCE2A5E0C353--


From nobody Mon Nov  7 23:47:15 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59F6812956D for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 23:47:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IDhYwbdVRn85 for <core@ietfa.amsl.com>; Mon,  7 Nov 2016 23:47:09 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6342129537 for <core@ietf.org>; Mon,  7 Nov 2016 23:47:08 -0800 (PST)
Received: from vsmta13.fe.internet.bosch.com (unknown [10.4.98.53]) by imta23.fe.bosch.de (Postfix) with ESMTP id BD4591580221; Tue,  8 Nov 2016 08:47:06 +0100 (CET)
Received: from be6vw2exc00.bosch-si.com (vsgw22.fe.internet.bosch.com [10.4.98.11]) by vsmta13.fe.internet.bosch.com (Postfix) with ESMTP id 5F2D22E4089B; Tue,  8 Nov 2016 08:47:06 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc00.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 08:47:37 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "cabo@tzi.org" <cabo@tzi.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSOSr2PyyDrzSxY0qf47Pm2t9wyaDOpXwA
Date: Tue, 8 Nov 2016 07:47:36 +0000
Message-ID: <1478591222.7439.1.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
In-Reply-To: <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <A3DF596B0F66EC4AA2932AF53914FC49@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22684.006
X-TMASE-MatchedRID: QfHZjzml1E87dGKnBfve7Ca1MaKuob8PC/ExpXrHizwo1ddo8EhOtTzW aLWbt415EznCfOYumVeo6cr2RNmMzI4fe2Jm7VBS0XO+Yq6CqgLSL+EVfOJR023D6f6IpbLIgx0 sFCXnAdrgSjkDtw8G2EBYtv9ZXBYHMHhZRa5qo3xc/msUC5wFQUaPSPRBtZ57MBVcbaPpizDPm3 r3pLBx/Oq+7yMb07WXB6fdv57kU486k8DwKL1tBH4f9De+CyQCukAkwrs34lWnMeCXWQVgVaPFj JEFr+olFUew0Fl/1pEBi3kqJOK62QtuKBGekqUpI/NGWt0UYPAoA3b2LlD+7C1QCCJZN87p7h7E sOAcLvZNM1MF9/RaxjZkpfQZUdh4
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/FfRjpopAhctqVZLx9OeRy9dP9Ig>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 07:47:13 -0000
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From nobody Tue Nov  8 00:07:01 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF7BC1293D8 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:06:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iW_vOXvTJN5M for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:06:58 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4537129468 for <core@ietf.org>; Tue,  8 Nov 2016 00:06:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA886raa011164; Tue, 8 Nov 2016 09:06:53 +0100 (CET)
Received: from [192.168.217.102] (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tChjT08Wnz7xqN; Tue,  8 Nov 2016 09:06:52 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <1478591222.7439.1.camel@bosch-si.com>
Date: Tue, 8 Nov 2016 09:06:52 +0100
X-Mao-Original-Outgoing-Id: 500285212.375509-98f097b18bde07893af5eb882aca5291
Content-Transfer-Encoding: quoted-printable
Message-Id: <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org> <1478591222.7439.1.camel@bosch-si.com>
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/mcFNedsodbspwV4h1q-S3sPdknI>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 08:07:00 -0000

Good morning, Kai,

> On 8 Nov 2016, at 08:47, Hudalla Kai (INST/ESY1) =
<Kai.Hudalla@bosch-si.com> wrote:
>=20
> I guess the intersting problem would be how to reduce the =
"trial-and-error"
> approach to only those cases where the four-tupel has actually changed =
and being
> able to do a "direct" lookup in most of the cases (maybe including the =
four-tupel=20
> information).

I would expect implementations to do exactly that: Use the four-tuple as =
the first hint (and maybe check any other hint included in the packet).  =
Only if that fails to bring up a security association, try to find one =
using the other, address-independent but less precise hint only.

The way of handling a failure in the first case is interesting: Given =
that the other hint has collisions, there is an unlikely case that =
everything matches (because the four-tuple has been in use by another =
security association before =E2=80=94 yes, there are collisions on the =
four-tuple, too =E2=80=94 and the other hint happens to match because of =
a collision) and the MAC still fails.  So we probably should recommend =
making a secondary lookup based on the other hint even in this case of =
failing to MAC.  (The DOS potential does not increase appreciably, I =
think.)

So the algorithm would be: Try all security associations that match the =
other hint, but try those (depending on how you discard address hints, =
there could even be multiple!) that match the addresses first.  If the =
MAC goes through and there is no replay, adjust the address hint*).

Gr=C3=BC=C3=9Fe, Carsten

*) I haven=E2=80=99t entirely thought through the security implications =
of that recommendation, but given that the address is only a weak hint =
now, this should be limited to enabling an attacker to cause additional =
work.


From nobody Tue Nov  8 00:23:26 2016
Return-Path: <Achim.Kraus@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2283E129534 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:23:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xaenyeGEuHpL for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:23:24 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D7641294B9 for <core@ietf.org>; Tue,  8 Nov 2016 00:23:24 -0800 (PST)
Received: from vsmta13.fe.internet.bosch.com (unknown [10.4.98.53]) by imta24.fe.bosch.de (Postfix) with ESMTP id 48A0ED8023A for <core@ietf.org>; Tue,  8 Nov 2016 09:23:22 +0100 (CET)
Received: from IMBVW2EXC00.bosch-si.com (vsgw24.fe.internet.bosch.com [10.4.98.24]) by vsmta13.fe.internet.bosch.com (Postfix) with ESMTP id E4A572E408A5 for <core@ietf.org>; Tue,  8 Nov 2016 09:23:21 +0100 (CET)
Received: from IMBPW2EXD01.bosch-si.com ([fe80::d052:f355:928e:e5ba]) by IMBVW2EXC00 ([10.55.1.51]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 09:23:52 +0100
From: "Kraus Achim (INST/ESY1)" <Achim.Kraus@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSNbzbqgNEatyAzE2oY3oTttgdOaDNMDGAgAAZSgCAAG4sgIAAId+AgADp8SA=
Date: Tue, 8 Nov 2016 08:23:51 +0000
Message-ID: <BC36447FF5C62E46BEF3F124D3C1E8925E1F7912@imbpw2exd01.bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
In-Reply-To: <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.22.83.125]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22684.006
X-TMASE-MatchedRID: hjWTAijtsfuUaGyArUv5H9cjCbPZgQnFyZnHhh2CJcHlbPAzatNoQpFs ZWMDHAh7sMSLRTPBLMtSfaDNVJL5SqjggKwIgtdp0XO+Yq6CqgIPaWzG/2S2hn3hz57t9YhwrcD juD2DbVzSLjVT6XgkiE+pP/HNsYl9ZMWKXMYF1HGomy3eaWZ2rhiUT+SOigqjsneuamRRT5NZTg 9VrFkRY/5xNiNzfSItLzdGy3gtQH6Y2uUAhAbuv9s0NZCx5R5lo6Q/QIRMk+cTC06OkQCf3Lxe1 NYbxSb2ktlaPObHyZ8J3l6ariPirKuaZbrFj5mYqRV+eC/H/cUrHkgIan9a0YfAYSb4KlgZ5sZT wYHfBM4MkNSwGaVAqtOyD42kfp9o+eaHMI2nG6pc/msUC5wFQUaPSPRBtZ57MBVcbaPpizDPm3r 3pLBx/A5UJNrmZ44D0k6TYBtoT8VaO6R30r3/0qm4PbloS2C39pLnYtQ99xLnU40jhQv76qPFjJ EFr+olFUew0Fl/1pE9wJeM2pSaRbxAi7jPoeEQftwZ3X11IV0=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/UfPAc96NvVysRNFLUzCnXbIJsZw>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 08:23:26 -0000
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From nobody Tue Nov  8 00:26:19 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08978129625 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:26:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9zOYkGIVgzJS for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:26:17 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4317129586 for <core@ietf.org>; Tue,  8 Nov 2016 00:26:16 -0800 (PST)
Received: from vsmta14.fe.internet.bosch.com (unknown [10.4.98.54]) by imta24.fe.bosch.de (Postfix) with ESMTP id 0E6AED80221; Tue,  8 Nov 2016 09:26:15 +0100 (CET)
Received: from be6vw2exc01.bosch-si.com (vsgw23.fe.internet.bosch.com [10.4.98.23]) by vsmta14.fe.internet.bosch.com (Postfix) with ESMTP id 7DC1FA408ED; Tue,  8 Nov 2016 09:26:14 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc01.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 09:26:44 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSOSr2PyyDrzSxY0qf47Pm2t9wyaDOpXwAgAAFigCAAAVlAA==
Date: Tue, 8 Nov 2016 08:26:44 +0000
Message-ID: <1478593570.7439.12.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org> <1478591222.7439.1.camel@bosch-si.com> <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org>
In-Reply-To: <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <97D3A2624ADB0940BD699DDD17806684@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22684.006
X-TMASE-MatchedRID: hls5oAVArl8OwH4pD14DsPHkpkyUphL9fjJOgArMOCblbPAzatNoQoMf QrjS7ys/jHsHgF6+WTeloCYfBDnps7M5yFdOCNfRSHCU59h5KrHAuWcdTSiQDYHuGmLOqhMnd91 HBZ7FfSvPPfo9zpax1aMvYxGZnq5/noelh955P6ZIRA38P/dwbriksjoyg8G4InzOyTDR1uuCJn FbzNSABFzzix4xdtUO3MME4ZHptU6GTkvFJ0QckaTfLKfi4+0t45oDENe4eevkMnUVL5d0Ez4hX W7B+PPhozKN+iPz6vWJIG0pP8yLBkL9tcyTZdAsgxsfzkNRlfKx5amWK2anSPoLR4+zsDTtD12T 7q2dIUsCc+xMCRWzmM8Rrbc8xqjYUM2r/uY5TS+mOP2+Oe+moA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Zzo4nuA8UAmzSLh80TjJNS0Q9Co>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 08:26:18 -0000

SGkgQ2Fyc3RlbiwNCg0KT24gVHVlLCAyMDE2LTExLTA4IGF0IDA5OjA2ICswMTAwLCBDYXJzdGVu
IEJvcm1hbm4gd3JvdGU6DQo+IEdvb2QgbW9ybmluZywgS2FpLA0KPiANCj4gPiBPbiA4IE5vdiAy
MDE2LCBhdCAwODo0NywgSHVkYWxsYSBLYWkgKElOU1QvRVNZMSkgPEthaS5IdWRhbGxhQGJvc2No
LXNpLmNvbT4NCj4gPiB3cm90ZToNCj4gPiANCj4gPiBJIGd1ZXNzIHRoZSBpbnRlcnN0aW5nIHBy
b2JsZW0gd291bGQgYmUgaG93IHRvIHJlZHVjZSB0aGUgInRyaWFsLWFuZC1lcnJvciINCj4gPiBh
cHByb2FjaCB0byBvbmx5IHRob3NlIGNhc2VzIHdoZXJlIHRoZSBmb3VyLXR1cGVsIGhhcyBhY3R1
YWxseSBjaGFuZ2VkIGFuZA0KPiA+IGJlaW5nDQo+ID4gYWJsZSB0byBkbyBhICJkaXJlY3QiIGxv
b2t1cCBpbiBtb3N0IG9mIHRoZSBjYXNlcyAobWF5YmUgaW5jbHVkaW5nIHRoZSBmb3VyLQ0KPiA+
IHR1cGVswqANCj4gPiBpbmZvcm1hdGlvbikuDQo+IA0KPiBJIHdvdWxkIGV4cGVjdCBpbXBsZW1l
bnRhdGlvbnMgdG8gZG8gZXhhY3RseSB0aGF0OiBVc2UgdGhlIGZvdXItdHVwbGUgYXMgdGhlDQo+
IGZpcnN0IGhpbnQgKGFuZCBtYXliZSBjaGVjayBhbnkgb3RoZXIgaGludCBpbmNsdWRlZCBpbiB0
aGUgcGFja2V0KS7CoMKgT25seSBpZg0KPiB0aGF0IGZhaWxzIHRvIGJyaW5nIHVwIGEgc2VjdXJp
dHkgYXNzb2NpYXRpb24sIHRyeSB0byBmaW5kIG9uZSB1c2luZyB0aGUgb3RoZXIsDQo+IGFkZHJl
c3MtaW5kZXBlbmRlbnQgYnV0IGxlc3MgcHJlY2lzZSBoaW50IG9ubHkuDQo+IA0KWWVzLCBJIGNh
bWUgdXAgd2l0aCB0aGUgc2FtZSBhcHByb2FjaC4NCg0KPiBUaGUgd2F5IG9mIGhhbmRsaW5nIGEg
ZmFpbHVyZSBpbiB0aGUgZmlyc3QgY2FzZSBpcyBpbnRlcmVzdGluZzogR2l2ZW4gdGhhdCB0aGUN
Cj4gb3RoZXIgaGludCBoYXMgY29sbGlzaW9ucywgdGhlcmUgaXMgYW4gdW5saWtlbHkgY2FzZSB0
aGF0IGV2ZXJ5dGhpbmcgbWF0Y2hlcw0KPiAoYmVjYXVzZSB0aGUgZm91ci10dXBsZSBoYXMgYmVl
biBpbiB1c2UgYnkgYW5vdGhlciBzZWN1cml0eSBhc3NvY2lhdGlvbiBiZWZvcmUNCj4g4oCUIHll
cywgdGhlcmUgYXJlIGNvbGxpc2lvbnMgb24gdGhlIGZvdXItdHVwbGUsIHRvbyDigJQgYW5kIHRo
ZSBvdGhlciBoaW50IGhhcHBlbnMNCj4gdG8gbWF0Y2ggYmVjYXVzZSBvZiBhIGNvbGxpc2lvbikg
YW5kIHRoZSBNQUMgc3RpbGwgZmFpbHMuwqDCoFNvIHdlIHByb2JhYmx5DQo+IHNob3VsZCByZWNv
bW1lbmQgbWFraW5nIGEgc2Vjb25kYXJ5IGxvb2t1cCBiYXNlZCBvbiB0aGUgb3RoZXIgaGludCBl
dmVuIGluIHRoaXMNCj4gY2FzZSBvZiBmYWlsaW5nIHRvIE1BQy7CoMKgKFRoZSBET1MgcG90ZW50
aWFsIGRvZXMgbm90IGluY3JlYXNlIGFwcHJlY2lhYmx5LCBJDQo+IHRoaW5rLikNCj4gDQo+IFNv
IHRoZSBhbGdvcml0aG0gd291bGQgYmU6IFRyeSBhbGwgc2VjdXJpdHkgYXNzb2NpYXRpb25zIHRo
YXQgbWF0Y2ggdGhlIG90aGVyDQo+IGhpbnQsIGJ1dCB0cnkgdGhvc2UgKGRlcGVuZGluZyBvbiBo
b3cgeW91IGRpc2NhcmQgYWRkcmVzcyBoaW50cywgdGhlcmUgY291bGQNCj4gZXZlbiBiZSBtdWx0
aXBsZSEpIHRoYXQgbWF0Y2ggdGhlIGFkZHJlc3NlcyBmaXJzdC7CoMKgSWYgdGhlIE1BQyBnb2Vz
IHRocm91Z2ggYW5kDQo+IHRoZXJlIGlzIG5vIHJlcGxheSwgYWRqdXN0IHRoZSBhZGRyZXNzIGhp
bnQqKS4NCj4gDQpTb3VuZHMgbGlrZSBhIGdvb2QgIndvcmtpbmcgdGhlc2lzIi4gSSBhbSBhIGxp
dHRsZSBjb25jZXJuZWQsIHRob3VnaCwgdGhhdCB0aGlzDQp3aWxsIGhhdmUgYSBtYWpvciBpbXBh
Y3Qgb24gdGhlIHdheSBDYWxpZm9ybml1bSdzIERUTFMgc3RhY2sgaSBpbXBsZW1lbnRlZCB0b2Rh
eQ0KOi0oDQoNCkBUaG9tYXM6IFdEWVQ/IElzIHRoaXMgd29ydGggZmluZGluZyBpdHMgd2F5IGlu
dG8gdGhlICJuZXh0IGxldmVsIiBkcmFmdD8=


From nobody Tue Nov  8 00:43:01 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A7CD129418 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:43:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KH-iUnvdp3YO for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 00:42:59 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A467129B8C for <core@ietf.org>; Tue,  8 Nov 2016 00:42:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uA88goXZ001830 for <core@ietf.org>; Tue, 8 Nov 2016 09:42:50 +0100 (CET)
Received: from [192.168.217.102] (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tCjVy2Scmz7xvZ; Tue,  8 Nov 2016 09:42:50 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com>
Date: Tue, 8 Nov 2016 09:42:49 +0100
X-Mao-Original-Outgoing-Id: 500287369.745548-fbd51c2c2493017da37b3690d348a042
Content-Transfer-Encoding: quoted-printable
Message-Id: <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com>
To: "core@ietf.org WG" <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/oiSUrnFA7RnmTwFAIeYh3SwFXaA>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 08:43:00 -0000

So far, we have had one comment on the incompleteness of the TCP/UDP =
proxy example (Brian intends to remove this text) and a good discussion =
on how the objective of MTI (and =E2=80=9Cdefault-enabled=E2=80=9D) =
security can be achieved (which hasn=E2=80=99t quite completed yet, I =
think).

What we don=E2=80=99t have is in-depth reviews.  The chairs believe we =
need at least a few of those before we (Jaime, that is) can declare this =
draft passed WGLC.

So please do keep those reviews coming.

We really want to use the f2f time we have a week from now to resolve =
any outstanding issues, so please make sure we have had a chance to =
digest your review before that meeting.

Gr=C3=BC=C3=9Fe, Carsten

PS.: Yes, I=E2=80=99m in for one of those reviews, too.  Sorry for not =
delivering in time.


> On 18 Oct 2016, at 11:22, Jaime Jim=C3=A9nez =
<jaime.jimenez@ericsson.com> wrote:
>=20
> Dear CoRE WG,
>=20
> The core-coap-tcp-tls draft has gotten to a state that the authors =
feel is in good shape for WGLC.=20
> We would like to ask the group to start checking this last version and =
the issues on the Github repository.=20
>=20
> https://tools.ietf.org/html/draft-ietf-core-coap-tcp-tls-05 =20
>=20
> There is at the moment one open issue left in the tracker ( =
https://github.com/core-wg/coap-tcp-tls/issues/31  ) which is mostly =
editorial. The issues raised during last IETF - about Observe over =
reliable transports -  have been closed and new text has been added to =
the appendix: https://github.com/core-wg/coap-tcp-tls/issues/5=20
>=20
> Best Regards,
> - - Jaime Jim=C3=A9nez
>=20


From nobody Tue Nov  8 01:26:11 2016
Return-Path: <Lauri.Piikivi@arm.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA7561294CA for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 01:26:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.922
X-Spam-Level: 
X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i4eSg5T5GXIM for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 01:26:07 -0800 (PST)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0069.outbound.protection.outlook.com [104.47.1.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16175129698 for <core@ietf.org>; Tue,  8 Nov 2016 01:26:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Ng/jgMRNHld+sALUbvb6XRcS8LeYUp1nMo6q677gLO0=; b=EUsEVcpTWO0qPJy8440Q2vCjeiwOZ1uDqXlhoKWrl3Myg3WDYIoH7xv/U28Llt3Jh6Te8EX+wD3kL6XT/XFrPAR4fQYRVnUu8SylFmdWnZqjo+BX9wKjoco33/J21soru04pkT0L6H8t5mathgihWRzM7GPXqR3VIj+pfa/a/YA=
Received: from VI1PR0802MB2383.eurprd08.prod.outlook.com (10.172.14.135) by VI1PR0802MB2382.eurprd08.prod.outlook.com (10.172.14.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.693.12; Tue, 8 Nov 2016 09:26:04 +0000
Received: from VI1PR0802MB2383.eurprd08.prod.outlook.com ([10.172.14.135]) by VI1PR0802MB2383.eurprd08.prod.outlook.com ([10.172.14.135]) with mapi id 15.01.0693.016; Tue, 8 Nov 2016 09:26:04 +0000
From: Lauri Piikivi <Lauri.Piikivi@arm.com>
To: Simon Bernard <contact@simonbernard.eu>
Thread-Topic: [core] CoAP observation in NATed environment using DTLS
Thread-Index: AQHSNfyk76+wNVHFqkuHuLzqhykyqqDIfJYAgAAojQCABjMjgA==
Date: Tue, 8 Nov 2016 09:26:04 +0000
Message-ID: <CF7A3A40-8D15-4B40-850D-0BAA1BC1674D@arm.com>
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu> <249DA03B-E96F-4DA1-A023-C862F5B75D32@arm.com> <d8f29d59-19a8-6a37-e037-fd59e1215134@simonbernard.eu>
In-Reply-To: <d8f29d59-19a8-6a37-e037-fd59e1215134@simonbernard.eu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Lauri.Piikivi@arm.com; 
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [217.140.96.140]
x-ms-office365-filtering-correlation-id: 7be61ae9-3429-43e8-a397-08d407b94344
x-microsoft-exchange-diagnostics: 1; VI1PR0802MB2382; 7:E5mYFwXxzMLk0ioFHYrgv7cBZ8BBmTsXZEvb3mFnhSGj+UhPErkN3RPoRu+ncWT0KScxIHdqCn5i5Ezo2f19sf3MswlAxw1CVh9obxk4MtXsbtHTRf8wcgZ7xo3JdgkXzMirNRVYB9oCt+QUnkseqDirJc8o81uald7ns9baYfLOC4fWt1AtCfwb/1UNFg6yfnkbfXnTO1VSDz2nWqaZ1NUE1IyTjYrFUIeRSH3Y2KABPa4DvuTgThWfbIgkMbPbN/Ou79mHsfklpGd6oR26gcIXaYtHD4aAkFBWYobR1bWOqo1ZPB9MpXP0KaXYATHrO1gQ6a2UMoYub8NKm+OiobyJTzbxNeDf9wDDMztVKHQ=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:VI1PR0802MB2382;
x-microsoft-antispam-prvs: <VI1PR0802MB2382C08E51A83FA924B75821EBA60@VI1PR0802MB2382.eurprd08.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(190756311086443)(158342451672863)(192374486261705)(100405760836317); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:VI1PR0802MB2382; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0802MB2382; 
x-forefront-prvs: 01208B1E18
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(199003)(40434004)(189002)(24454002)(586003)(66066001)(305945005)(122556002)(2906002)(2900100001)(6916009)(68736007)(2950100002)(5660300001)(106356001)(86362001)(8676002)(83716003)(4326007)(3660700001)(97736004)(87936001)(82746002)(81166006)(7736002)(189998001)(3280700002)(81156014)(36756003)(101416001)(3846002)(77096005)(106116001)(6116002)(110136003)(76176999)(102836003)(54356999)(33656002)(5890100001)(105586002)(7846002)(8936002)(50986999)(92566002)(557034004)(104396002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0802MB2382; H:VI1PR0802MB2383.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <E2461EF7BF04694F9DB4868FF87134E3@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2016 09:26:04.2766 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0802MB2382
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/PAfxDqcfH2LW5cXC1MoYj5HrNE0>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 09:26:11 -0000
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==


From nobody Tue Nov  8 02:04:51 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C7C1294AF for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 02:04:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H20cApnO7JuS for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 02:04:48 -0800 (PST)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7615128E18 for <core@ietf.org>; Tue,  8 Nov 2016 02:04:48 -0800 (PST)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id 37DF24C57F729; Tue,  8 Nov 2016 10:04:45 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uA8A4k36032585 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 8 Nov 2016 10:04:46 GMT
Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uA8A3YUS017712 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 8 Nov 2016 11:04:46 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.52]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0301.000; Tue, 8 Nov 2016 11:04:37 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: Carsten Bormann <cabo@tzi.org>, "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSOSrrQT/tLiXNCEayu3r2+JGjzKDOy+WA
Date: Tue, 8 Nov 2016 10:04:37 +0000
Message-ID: <D4469635.75246%thomas.fossati@alcatel-lucent.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
In-Reply-To: <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.40]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <A0D290F77EC9F940BBEB7A951FB894DC@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/mI5F-dh5UN1U9QY_rR4DRrLH0lA>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 10:04:51 -0000

Hi Carsten,

On 07/11/2016 19:12, "Carsten Bormann" <cabo@tzi.org> wrote:
>The current discussion confuses me a lot.
>Apparently, I=B9m missing some context.
>So I=B9ll try to state what I have understood so far.
>
>Current state:
>
>When a node receives a DTLS packet, it uses the four-tuple (2x transport
>address, each consisting of IP address and port number) to find the
>security association (=B3connection=B2) inside which the packet is to be
>interpreted.
>
>Problem:
>
>The four-tuple changes.
>
>Solution:
>
>When that is the case, the receiver could simply try all security
>assocations it has until one matches (i.e., the MAC works out).
>
>Problem:
>
>This is expensive if the receiver has many security associations.
>(The expense also leads to an easy DOS attack, so it MUST be avoided.)
>
>Solution:
>
>Add a hint to the packet, so the number of security associations to be
>searched by a receiver is reduced to a trivial amount.
>
>As with classical (computer science) hash tables, a collision is not a
>problem; it just slightly reduces the efficiency.
>
>If the hint is reasonably probabilistically well-distributed, something
>like 16 (or maybe 24) bits should suffice except for the really large
>servers with more than several million active security associations.
>
>What am I missing?

I think accepting the possibility of collisions might have tricky edge
cases.  One that comes to my mind is you have 2 (or more) security
associations with same CID.  One of them goes through NAT rebind and
afterwards sends a packet.  The packet is corrupted (either at the source
because of an implementation error, or in the network -- maliciously or
not).  The lookup strategy that you describe would go through the matching
sessions and fail decryption for all of them.  It must then send an alert
indicating the failure and terminate the session.  Which one will it
choose?

In any case, this is an issue only for the privacy preserving CID.  If we
also allow a server chosen CID as in our WIP proposal [1], than the
problem simply doesn't exist.

Cheers, t

[1]=20
https://raw.githubusercontent.com/thomas-fossati/ietf/master/dtls-iot-ext/d
raft-fossati-tls-iot-extensions.txt

>
>(Once we have agreement or clarification on what I have said, we can go
>back to discussion unsinkable progressions of these hints.)
>
>Gr=FC=DFe, Carsten
>
>



From nobody Tue Nov  8 02:23:55 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4CE4129698 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 02:23:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lz1QP11otJ6c for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 02:23:51 -0800 (PST)
Received: from 16.mo6.mail-out.ovh.net (16.mo6.mail-out.ovh.net [87.98.139.208]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE14C129670 for <core@ietf.org>; Tue,  8 Nov 2016 02:23:50 -0800 (PST)
Received: from player761.ha.ovh.net (b9.ovh.net [213.186.33.59]) by mo6.mail-out.ovh.net (Postfix) with ESMTP id DEC415583E for <core@ietf.org>; Tue,  8 Nov 2016 11:23:47 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player761.ha.ovh.net (Postfix) with ESMTPSA id 6A0E64800A4; Tue,  8 Nov 2016 11:23:46 +0100 (CET)
To: Lauri Piikivi <Lauri.Piikivi@arm.com>
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu> <249DA03B-E96F-4DA1-A023-C862F5B75D32@arm.com> <d8f29d59-19a8-6a37-e037-fd59e1215134@simonbernard.eu> <CF7A3A40-8D15-4B40-850D-0BAA1BC1674D@arm.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <df58825c-296a-ad2c-2a42-c6c2f0262c13@simonbernard.eu>
Date: Tue, 8 Nov 2016 11:23:46 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <CF7A3A40-8D15-4B40-850D-0BAA1BC1674D@arm.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 12084002226015713447
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrleeigddugecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Wy9mCXDH0RH9maLW1yoNDpw9vlE>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 10:23:54 -0000

Maybe we don't target exactly the same thing.

Currently there is this constraint for Observation:
"All notifications resulting from a GET request with an Observe Option 
MUST be returned within the same epoch of the same connection as the 
request."[1]
and more generally for all request/response :
"This means the response to a DTLS secured request MUST always be DTLS 
secured using the same security session and epoch."[2]

I just want to relax it to be able to make it works on unstable IP 
address use-cases (like NAT environment). As I said before I let 
authorization to the application layer.

If we relax this constraint, I suppose we will be able to add this kind 
of authorization token at application layer level.

[1]https://tools.ietf.org/html/rfc7641#section-7
[2]https://tools.ietf.org/html/rfc7252#section-9.1.2


Le 08/11/2016 Ã  10:26, Lauri Piikivi a Ã©crit :
> Hi,
>
> In the approach you describe â€œsame DTLS identity or same sessionâ€ I see the problem that this ends at the front end server (of a web service) or at a proxy. Modern web services are distributed, and I think we would need a way to add device identity information to coap messages propagating deeper in a system. So even when DTLS is sued to verify the endpoint, we need mechanism to carry that information in the message itself.
>
> I am sure you know JWT (https://tools.ietf.org/html/rfc7519) which is in good use at front ends, to add trusted authentication and authorisation tokens to the HTTP requests. It is used for front end server tokens that end servers can verify and trust, and also used for client authentication by giving it in the user authentication and adding to all subsequent method calls to a service. Should we define something similar?
>
> Host for unauthenticated DTLS (or no sec) is sufficient to me, in addition to a good token, as described in the coap spec. If the risk analysis is such that this is acceptable in that system. But as stated above, I think might need a better option as well.
>
> - Lauri
>
>
>
>> On 04 Nov 2016, at 12:45, Simon Bernard <contact@simonbernard.eu> wrote:
>>
>> You're right both issue is not directly linked to observation.
>>
>> 1)About using host option, How does it works for DTLS session without authentication? I still prefer just adding the constraint "same DTLS identity or same session is there is no DTLS authentication" and let more flexibility to application on top of CoAP to handle this information. Each part of the stack have its own responsibility:
>> - DTLS provides authentication + encryption.
>> - CoAP ensure that request/response exchange are done for the same Identity. (when there is no authentication we just warranty exchange is done in the same session, this is the best we can do)
>> - Application layer authorize request based on this identity.
>>
>> 2) it's seems we head for a consensus about connectionID (draft-fossati-tls-iot-optimizations-00). The privacy concern could be handle by hash chain but would not be mandatory.
>> (https://mailarchive.ietf.org/arch/msg/core/a_cZN9nTkHoeETLXhBJAQWfYlp4)
>>
>>
>> Le 04/11/2016 Ã  09:20, Lauri Piikivi a Ã©crit :
>>> Hi,
>>>
>>> I have battled with these issue a while. I think there are 2 very separate issues: COAP identity and DTLS connection ID, neither of which is only an observation issue
>>>
>>> = COAP identity =
>>>> 1) Define a long term identifier for CoAP instead of limited CoAP interaction to the same DTLS connection. At CoAP level users would like to know from which or to which they send data.
>>> With the strong focus on security, COAP starts with  the DTLS certificate or raw public key  information
>>> â€œ9.1.3.3.  X.509 Certificates
>>> The discovery process used in the system
>>>     would build up the mapping between IP addresses of the given devices
>>>     and the subject for each device.â€
>>>
>>> COAP is based on URLs. And the URL must have a host part. Host can be IP address (with problems when IP changes) or a DNS name (that needs to be mapped and maintained in DNS registry) or some other long term identifier like certificate subject name.
>>> â€œ   6.1.  coap URI Scheme
>>>     If host is a registered name, then that name is considered an indirect identifier
>>>     and the endpoint might use a name resolution service, such as DNS, to
>>>     find the address of that host.  The host MUST NOT be emptyâ€
>>>
>>> So there is mechanisms to define a long lasting name or identifier for the host and the resources it publishes.
>>>
>>> I would suggest for the observation problem that the responses have the URI-Host option with the long lasting identifier of the device? The spec needs changing so that the DTLS session can change. If the DTLS session changes, but is accepted on DTLS layer, the application layer gets the new information that it maps using  itâ€™s own mechanism of URI-host. Additional checking can be done that the host id matches the certificate subject for example. Newest IP and port is then known
>>>
>>> Having the URI-host in responses supports the nosec mode, which is still mandatory in 7252.
>>>
>>> This is a minor issue for the draft https://tools.ietf.org/html/draft-ietf-core-resource-directory-09. For registry (publishing COAP URLs) there might be need to define more structure to the host part, is it a DNS resolvable name or is a mapping that is understood in the registry itself? How is a client of the registry to know? Should there be a service that maps the non-DNS identity to IP?
>>>
>>> = (D)TLS Connection ID =
>>>> 2) Be able to use DTLS with dynamic IP address (e.g. NAT) without the need to redo full handshake or resume handshake.
>>> This is not tied to observation, any long lasting session where there is very little data sent will fail due to NAT in the path. I think the problem is most in DTLS, since there the NAT's ip/port mapping timeout is more aggressive and the devices usually communicate only  seldomly. It is almost guaranteed that the DTLS connection will not stay alive in NAT.  RFC5382 for TCP talks of 2-hours, and RFC4787 for UDP NAT behaviour talks of 4-minutes
>>>
>>> So to map the sent DTLS records at receiver, even if a NAT mapping changes along the way, the record would need the connection ID so that the servers find the correct DTLS context for the record. Now the spec says the context is found with ip/port information.
>>>
>>> I understand the privacy concerns for IoP (internet of people), but could there be something easy for IoT â€” if privacy is not an issue? Mechanism that allows t meet both concerns.
>>>
>>> BR
>>> - Lauri
>>>
>>>
>>>
>>>> On 03 Nov 2016, at 20:03, Simon Bernard <contact@simonbernard.eu> wrote:
>>>>
>>>> Hi list,
>>>>
>>>> I have attended meeting of the T2T RG in Ludwigsburg, there is a discussion around CoAP observation in NATed environment using DTLS (1.2).
>>>>
>>>> I would like to share my thought here about that:
>>>>
>>>>     The problem :
>>>> Currently the CoAP spec say :
>>>> "All notifications resulting from a GET request with an Observe Option MUST be returned within the same epoch of the same connection as the request."
>>>> Currently, in TLS, a connection is identified by its IP/Port address.
>>>> So when your IP address changed because of the NAT expiration, you must create a new TLS connection and so create a new CoAP observation relation.
>>>>
>>>>     Behind this practical problem, I understand there is 2 separated issue :
>>>> 1) Define a long term identifier for CoAP instead of limited CoAP interaction to the same DTLS connection. At CoAP level users would like to know from which or to which they send data.
>>>> 2) Be able to use DTLS with dynamic IP address (e.g. NAT) without the need to redo full handshake or resume handshake.
>>>>
>>>>     Possible Solutions ?
>>>> 1) Using the DTLS identity (PSK identity for PSK, public key for RPK, CN for certificate, ...) and only if there is no authentication the DTLS Session as constraint for CoAP exchange. (we remove the same epoch/same connection constraint)
>>>> 2) Using the "connectionId" extension proposed in the draft-fossati-tls-iot-optimizations-00.
>>>>
>>>> Does it make sense  ?
>>>>
>>>> Simon
>>>>
>>>> _______________________________________________
>>>> core mailing list
>>>> core@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/core
>>> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.


From nobody Tue Nov  8 02:44:39 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8500D1297CA for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 02:44:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l7WFpIVK3-Qd for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 02:44:35 -0800 (PST)
Received: from 3.mo6.mail-out.ovh.net (3.mo6.mail-out.ovh.net [178.33.253.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A70A012956A for <core@ietf.org>; Tue,  8 Nov 2016 02:44:34 -0800 (PST)
Received: from player761.ha.ovh.net (b9.ovh.net [213.186.33.59]) by mo6.mail-out.ovh.net (Postfix) with ESMTP id 263D75AB30 for <core@ietf.org>; Tue,  8 Nov 2016 11:44:32 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player761.ha.ovh.net (Postfix) with ESMTPSA id 26B4A480084; Tue,  8 Nov 2016 11:44:30 +0100 (CET)
To: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>, "core@ietf.org" <core@ietf.org>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org> <1478591222.7439.1.camel@bosch-si.com> <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org> <1478593570.7439.12.camel@bosch-si.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <5551760a-7290-47e4-2400-d43cadfd9e9d@simonbernard.eu>
Date: Tue, 8 Nov 2016 11:44:29 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <1478593570.7439.12.camel@bosch-si.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 12434438574461827239
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: -100
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrleeigddujecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/di_1twAsQ5IhfBE-1lKW2d8-j0c>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 10:44:37 -0000

Kai, I think in Californium we should start without hash chain for CID. 
We will avoid this kind of problem as Thomas said in this last mail.

I think we should not go in massive refactoring just to implement hash 
chain, knowning that without this we have the same privacy that when we 
use IPv6. (see 
https://mailarchive.ietf.org/arch/msg/core/QVWn6VzEZW0fmdeCsj3bLbf1KLc )


Le 08/11/2016 Ã  09:26, Hudalla Kai (INST/ESY1) a Ã©crit :
> Hi Carsten,
>
> On Tue, 2016-11-08 at 09:06 +0100, Carsten Bormann wrote:
>> Good morning, Kai,
>>
>>> On 8 Nov 2016, at 08:47, Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.com>
>>> wrote:
>>>
>>> I guess the intersting problem would be how to reduce the "trial-and-error"
>>> approach to only those cases where the four-tupel has actually changed and
>>> being
>>> able to do a "direct" lookup in most of the cases (maybe including the four-
>>> tupel
>>> information).
>> I would expect implementations to do exactly that: Use the four-tuple as the
>> first hint (and maybe check any other hint included in the packet).  Only if
>> that fails to bring up a security association, try to find one using the other,
>> address-independent but less precise hint only.
>>
> Yes, I came up with the same approach.
>
>> The way of handling a failure in the first case is interesting: Given that the
>> other hint has collisions, there is an unlikely case that everything matches
>> (because the four-tuple has been in use by another security association before
>> â€” yes, there are collisions on the four-tuple, too â€” and the other hint happens
>> to match because of a collision) and the MAC still fails.  So we probably
>> should recommend making a secondary lookup based on the other hint even in this
>> case of failing to MAC.  (The DOS potential does not increase appreciably, I
>> think.)
>>
>> So the algorithm would be: Try all security associations that match the other
>> hint, but try those (depending on how you discard address hints, there could
>> even be multiple!) that match the addresses first.  If the MAC goes through and
>> there is no replay, adjust the address hint*).
>>
> Sounds like a good "working thesis". I am a little concerned, though, that this
> will have a major impact on the way Californium's DTLS stack i implemented today
> :-(
>
> @Thomas: WDYT? Is this worth finding its way into the "next level" draft?
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Tue Nov  8 04:01:16 2016
Return-Path: <ludwig@sics.se>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C21A8129659 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 04:01:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level: 
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HtwLQflgTuR5 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 04:01:12 -0800 (PST)
Received: from mail-lf0-x22a.google.com (mail-lf0-x22a.google.com [IPv6:2a00:1450:4010:c07::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F9031294B7 for <core@ietf.org>; Tue,  8 Nov 2016 04:01:12 -0800 (PST)
Received: by mail-lf0-x22a.google.com with SMTP id t196so137781853lff.3 for <core@ietf.org>; Tue, 08 Nov 2016 04:01:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics.se; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=FrWBfFRz2yqw+RSUa7EU51WaFdYqSsOrwprLJW1JocE=; b=VOOGgpxuuH9kIteKYErTgZD1bI2IS/fQTRFXzVrCgOAzf/V5AduytGoWq+1bejGmtq LTFmairSjdQ4A5LbhjcT2KQuAQ2BwiE2QSB5f9pXEaWEihNwPY8YXHU1VNt8RqsdKpN1 Z4GHHLRzs6dYeEdG5aUbdyXU/e5Jw/lRvs0o+dRilfl7UeXRs5Ixf/HTyuZ1wwUOyHhG emfN8ST+ZN5uaEX9p49LO3oaU0tS0U0VInrBMc/VjYC+km5Ahrcg1rLXy2Ih1+MRwY5y YLDoqV3xy///zAJIb5yHYUb1xKsjmF7sX5cnfvcLhh2OilCkMG1k/9MEmWxLyCXF8OLU gROw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=FrWBfFRz2yqw+RSUa7EU51WaFdYqSsOrwprLJW1JocE=; b=YIOKX9oPTfQbMX3GN8OoT/oox5ZQVA9oGeFgsfPTz7G11hJ87C79iQDTS+37XZCbjr r85HZ2izS6MtgddhhXl3oRAY9UXaUb3Lcb8SeZSMQILC1HF5HrgpXGUh3F2DcB18Ktl3 j2yja34wqvv7gdrdQmPeAqSdQ9kgJS04rbPef6m/NPdMY+qagtnI4mSmpbjii7C1EtsN K9JyggMthLZNLRnfSjXV+giHcPwjzSZlQ+jb6MMkFJCSjMKFk0VtkV9QGgB6iAgi4ZNO VYlJm1KZt3OoD6YysQNv2DKJbsfkM1CiB4/sLoSAZ6bWZ9avTAO88HTqQN33MlR6ziZ2 DbTQ==
X-Gm-Message-State: ABUngvfXKaK6H6CLKsz0N4HjX0UK4oonkQdSrZJRgJFaG9vA3bQ6k2DHY8KM8xiV6QdPTxad
X-Received: by 10.25.210.1 with SMTP id j1mr3807424lfg.14.1478606470070; Tue, 08 Nov 2016 04:01:10 -0800 (PST)
Received: from [192.168.0.166] ([85.235.12.155]) by smtp.gmail.com with ESMTPSA id 204sm6034397ljj.47.2016.11.08.04.01.09 for <core@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 08 Nov 2016 04:01:09 -0800 (PST)
To: core@ietf.org
References: <ef7b578b-0882-bcc9-b95d-57fc5a7d3d65@simonbernard.eu> <249DA03B-E96F-4DA1-A023-C862F5B75D32@arm.com> <d8f29d59-19a8-6a37-e037-fd59e1215134@simonbernard.eu> <CF7A3A40-8D15-4B40-850D-0BAA1BC1674D@arm.com>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <36d09086-3156-855c-8488-db80c0afc6c6@sics.se>
Date: Tue, 8 Nov 2016 13:01:09 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <CF7A3A40-8D15-4B40-850D-0BAA1BC1674D@arm.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050709050806090504080801"
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/7iJ73MMajBNhP8MgXio-708uXgc>
Subject: Re: [core] CoAP observation in NATed environment using DTLS
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 12:01:15 -0000

This is a cryptographically signed message in MIME format.

--------------ms050709050806090504080801
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-11-08 10:26, Lauri Piikivi wrote:
>
> Hi,
>
[...]
>
> I am sure you know JWT (https://tools.ietf.org/html/rfc7519) which is
> in good use at front ends, to add trusted authentication and
> authorisation tokens to the HTTP requests. It is used for front end
> server tokens that end servers can verify and trust, and also used
> for client authentication by giving it in the user authentication and
> adding to all subsequent method calls to a service. Should we define
> something similar?
>
[...]

Note that there is some ongoing work on adapting OAuth and JWT for use=20
with CoAP in the ACE WG.

For example check out CWT=20
(https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token) and the=20
OAuth framework for CoRE=20
(https://tools.ietf.org/html/draft-ietf-ace-oauth-authz)

/Ludwig


--=20
Ludwig Seitz, PhD   SICS Swedish ICT AB
Ideon Science Park, Building Beta 2
Scheelev=C3=A4gen 17, SE-223 70 Lund
Phone +46(0)70-349 92 51

The RISE institutes SP, Swedish ICT and Innventia are merging in order
to create a unified institute sector and become a stronger innovation
partner for businesses and society. At the end of the year we will
change our name to RISE. Read more at www.ri.se/en/about-rise


--------------ms050709050806090504080801
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms050709050806090504080801--


From nobody Tue Nov  8 06:08:28 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51B0F129674 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 06:08:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F6rvRXTvUF8r for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 06:08:22 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84AEC1293DC for <core@ietf.org>; Tue,  8 Nov 2016 06:08:22 -0800 (PST)
Received: from vsmta14.fe.internet.bosch.com (unknown [10.4.98.54]) by imta24.fe.bosch.de (Postfix) with ESMTP id 7C803D80220 for <core@ietf.org>; Tue,  8 Nov 2016 15:08:19 +0100 (CET)
Received: from be6vw2exc01.bosch-si.com (vsgw24.fe.internet.bosch.com [10.4.98.24]) by vsmta14.fe.internet.bosch.com (Postfix) with ESMTP id E82A4A40F7C for <core@ietf.org>; Tue,  8 Nov 2016 15:08:18 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc01.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 15:08:49 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSOSr2PyyDrzSxY0qf47Pm2t9wyaDOpXwAgAAFigCAAAVlAIAAJqWAgAA47QA=
Date: Tue, 8 Nov 2016 14:08:48 +0000
Message-ID: <1478614094.9222.1.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org> <1478591222.7439.1.camel@bosch-si.com> <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org> <1478593570.7439.12.camel@bosch-si.com> <5551760a-7290-47e4-2400-d43cadfd9e9d@simonbernard.eu>
In-Reply-To: <5551760a-7290-47e4-2400-d43cadfd9e9d@simonbernard.eu>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <8669C4290CCB79469E9734B1515D0013@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22686.005
X-TMASE-MatchedRID: byfwvk+IcRkOwH4pD14DsPHkpkyUphL9cbniFtnyrsjkOOZ1bT6psRn6 1/JmBe6HtZgeVo93h6jzYdcOI4OyY6Q4hjf3OSHYSrrFmZ1Ea4YsleOknNBI0xHfiujuTbeddkY dh5x7qiW12pV6n68cHgBRm1VOkh98wQh6YUqfT5LiHyvyXeXh5gRryDXHx6oXHF5gWd5iOUluPs HmAY858JLqiCNidnIeD8B+/SG9L2aajZkb8TuLc+wSNio74PJoQKuv8uQBDjp2tmRAtFk5V6mw5 s23nMRbj0h+wGnmcXhsoOObVorcjealgramUYf4O9+ygK4Bw/63T5Xt6SBGmEa+7cKvw60WoCyy 4pUARDdi2TjCETXr91VcDsCkswDqkVF44oU3/QhCvapcIkxJX3WT6A/Vdqa0myiLZetSf8n5kvm j69FXvEl4W8WVUOR/joczmuoPCq2UTGVAhB5EbQ==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/4nojwPdVhJ29LCkSzEwCbdqpbMA>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 14:08:26 -0000
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From nobody Tue Nov  8 06:18:03 2016
Return-Path: <contact@simonbernard.eu>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E39891295FF for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 06:17:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JkGmZpy8lXVV for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 06:17:57 -0800 (PST)
Received: from 15.mo6.mail-out.ovh.net (15.mo6.mail-out.ovh.net [188.165.39.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72CA0129454 for <core@ietf.org>; Tue,  8 Nov 2016 06:17:54 -0800 (PST)
Received: from player761.ha.ovh.net (b9.ovh.net [213.186.33.59]) by mo6.mail-out.ovh.net (Postfix) with ESMTP id C69D15A8BC for <core@ietf.org>; Tue,  8 Nov 2016 15:17:51 +0100 (CET)
Received: from [10.41.51.97] (130.163-14-84.ripe.coltfrance.com [84.14.163.130]) (Authenticated sender: contact@simonbernard.eu) by player761.ha.ovh.net (Postfix) with ESMTPSA id 6C59348007E for <core@ietf.org>; Tue,  8 Nov 2016 15:17:51 +0100 (CET)
To: core@ietf.org
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org> <1478591222.7439.1.camel@bosch-si.com> <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org> <1478593570.7439.12.camel@bosch-si.com> <5551760a-7290-47e4-2400-d43cadfd9e9d@simonbernard.eu> <1478614094.9222.1.camel@bosch-si.com>
From: Simon Bernard <contact@simonbernard.eu>
Message-ID: <3b9bb12c-f9d2-212c-4a74-1a6acb41616e@simonbernard.eu>
Date: Tue, 8 Nov 2016 15:17:51 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Icedove/45.4.0
MIME-Version: 1.0
In-Reply-To: <1478614094.9222.1.camel@bosch-si.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Ovh-Tracer-Id: 16037036801768437927
X-VR-SPAMSTATE: OK
X-VR-SPAMSCORE: 0
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeelvddrleeigdeiudcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqggfjpdevjffgvefmvefgnecuuegrihhlohhuthemuceftddtnecu
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/BvYgQVLHRtFIbQYvHp6Im4z_aFw>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 14:18:01 -0000

Always ? I don't know.

At short term, yes that's what I proposed. The way you said it looks 
like a HACK but if I well understand Thomas using hashchain for "strong" 
privacy is an option.


Le 08/11/2016 Ã  15:08, Hudalla Kai (INST/ESY1) a Ã©crit :
> On Tue, 2016-11-08 at 11:44 +0100, Simon Bernard wrote:
>> Kai, I think in Californium we should start without hash chain for CID.
>> We will avoid this kind of problem as Thomas said in this last mail.
>>
> Are you proposing to always use L=1 in Californium, i.e. use a "degenerated" hash
> chain of length 1?
>
>> I think we should not go in massive refactoring just to implement hash
>> chain, knowning that without this we have the same privacy that when we
>> use IPv6. (see
>> https://mailarchive.ietf.org/arch/msg/core/QVWn6VzEZW0fmdeCsj3bLbf1KLc )
>>
>>
>> Le 08/11/2016 Ã  09:26, Hudalla Kai (INST/ESY1) a Ã©crit :
>>> Hi Carsten,
>>>
>>> On Tue, 2016-11-08 at 09:06 +0100, Carsten Bormann wrote:
>>>> Good morning, Kai,
>>>>
>>>>> On 8 Nov 2016, at 08:47, Hudalla Kai (INST/ESY1) <Kai.Hudalla@bosch-si.co
>>>>> m>
>>>>> wrote:
>>>>>
>>>>> I guess the intersting problem would be how to reduce the "trial-and-
>>>>> error"
>>>>> approach to only those cases where the four-tupel has actually changed
>>>>> and
>>>>> being
>>>>> able to do a "direct" lookup in most of the cases (maybe including the
>>>>> four-
>>>>> tupel
>>>>> information).
>>>> I would expect implementations to do exactly that: Use the four-tuple as
>>>> the
>>>> first hint (and maybe check any other hint included in the packet).  Only
>>>> if
>>>> that fails to bring up a security association, try to find one using the
>>>> other,
>>>> address-independent but less precise hint only.
>>>>
>>> Yes, I came up with the same approach.
>>>
>>>> The way of handling a failure in the first case is interesting: Given that
>>>> the
>>>> other hint has collisions, there is an unlikely case that everything
>>>> matches
>>>> (because the four-tuple has been in use by another security association
>>>> before
>>>> â€” yes, there are collisions on the four-tuple, too â€” and the other hint
>>>> happens
>>>> to match because of a collision) and the MAC still fails.  So we probably
>>>> should recommend making a secondary lookup based on the other hint even in
>>>> this
>>>> case of failing to MAC.  (The DOS potential does not increase appreciably,
>>>> I
>>>> think.)
>>>>
>>>> So the algorithm would be: Try all security associations that match the
>>>> other
>>>> hint, but try those (depending on how you discard address hints, there
>>>> could
>>>> even be multiple!) that match the addresses first.  If the MAC goes through
>>>> and
>>>> there is no replay, adjust the address hint*).
>>>>
>>> Sounds like a good "working thesis". I am a little concerned, though, that
>>> this
>>> will have a major impact on the way Californium's DTLS stack i implemented
>>> today
>>> :-(
>>>
>>> @Thomas: WDYT? Is this worth finding its way into the "next level" draft?
>>> _______________________________________________
>>> core mailing list
>>> core@ietf.org
>>> https://www.ietf.org/mailman/listinfo/core
>>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Tue Nov  8 08:53:38 2016
Return-Path: <Kai.Hudalla@bosch-si.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB1F6129420 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 08:53:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level: 
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XIrtYM_4ql7c for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 08:53:34 -0800 (PST)
Received: from smtp6-v.fe.bosch.de (smtp6-v.fe.bosch.de [IPv6:2a03:cc00:ff0:100::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61DF812941C for <core@ietf.org>; Tue,  8 Nov 2016 08:53:34 -0800 (PST)
Received: from vsmta13.fe.internet.bosch.com (unknown [10.4.98.53]) by imta23.fe.bosch.de (Postfix) with ESMTP id 595E9158016B for <core@ietf.org>; Tue,  8 Nov 2016 17:53:32 +0100 (CET)
Received: from be6vw2exc00.bosch-si.com (vsgw24.fe.internet.bosch.com [10.4.98.24]) by vsmta13.fe.internet.bosch.com (Postfix) with ESMTP id 2940D2E403D8 for <core@ietf.org>; Tue,  8 Nov 2016 17:53:32 +0100 (CET)
Received: from BE6PW2EXD00.bosch-si.com ([fe80::4027:bf9e:f016:559a]) by be6vw2exc00.bosch-si.com ([::1]) with mapi id 14.03.0319.002; Tue, 8 Nov 2016 17:54:02 +0100
From: "Hudalla Kai (INST/ESY1)" <Kai.Hudalla@bosch-si.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
Thread-Index: AQHSOSr2PyyDrzSxY0qf47Pm2t9wyaDOpXwAgAAFigCAAAVlAIAAJqWAgAA47QCAAAKwgIAAK3sA
Date: Tue, 8 Nov 2016 16:54:01 +0000
Message-ID: <1478624008.20299.1.camel@bosch-si.com>
References: <D43F9ABE.74B48%thomas.fossati@alcatel-lucent.com> <1478101730.3603.9.camel@bosch-si.com> <D43FCAE6.74BCD%thomas.fossati@alcatel-lucent.com> <1478161262.24033.17.camel@bosch-si.com> <D440B443.74C6D%thomas.fossati@alcatel-lucent.com> <1478509554.7771.1.camel@bosch-si.com> <D446013A.750C0%thomas.fossati@alcatel-lucent.com> <1478538644.7771.9.camel@bosch-si.com> <E056A4D7-6DD3-4E08-992E-4D6914C5F538@tzi.org> <1478591222.7439.1.camel@bosch-si.com> <3B36B877-3ABA-444F-B370-AA9110B716A3@tzi.org> <1478593570.7439.12.camel@bosch-si.com> <5551760a-7290-47e4-2400-d43cadfd9e9d@simonbernard.eu> <1478614094.9222.1.camel@bosch-si.com> <3b9bb12c-f9d2-212c-4a74-1a6acb41616e@simonbernard.eu>
In-Reply-To: <3b9bb12c-f9d2-212c-4a74-1a6acb41616e@simonbernard.eu>
Accept-Language: en-US, de-DE
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.56.65.50]
Content-Type: text/plain; charset="utf-8"
Content-ID: <2C451B875A23C64AA759E2515748EDCC@bosch-si.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-TM-AS-MML: disable
X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-22686.005
X-TMASE-MatchedRID: 9d2LtCNB3NIOwH4pD14DsPHkpkyUphL9uCESrx7wlnJElaZ44wdr5E1N FcqApEywHbHnRRvK0GyccoXOgq5iStw6ZBw9OLRP04Rmz/agfdxivu0w2st0dcI9dI7bfY/vKl/ RUlmGXE+WcZktlINp7IMK3c1VJlsAWY4dPt9TpLazI1v7J4hECr4kZYg1dp8s7ToFpTW6Qdc6SI YaJ07sj9stI8m2QMasAFGbVU6SH3zBCHphSp9PkuIfK/Jd5eHmBGvINcfHqhccXmBZ3mI5SW4+w eYBjznwkuqII2J2ch4PwH79Ib0vZpqNmRvxO4tz7BI2Kjvg8mhAq6/y5AEOOna2ZEC0WTlXqbDm zbecxFuPSH7AaeZxeGyg45tWityN5qWCtqZRh/g737KArgHD/rdPle3pIEaYRr7twq/DrRagLLL ilQBEN2LZOMIRNev3VVwOwKSzAOqRUXjihTf9CEK9qlwiTElfdZPoD9V2prSbKItl61J/yfmS+a Pr0Ve8SlnU38LCY8vpaGIM46J67JBlLa6MK1y4
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/qYmbcMlaJyX-7K8GqJtJTSBaW2Q>
Subject: Re: [core] [ALU] Re: [ALU] Re: Question reg.draft-fossati-tls-iot-optimizations-00
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 16:53:37 -0000
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=


From nobody Tue Nov  8 11:41:18 2016
Return-Path: <Christian.Groves@nteczone.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D1B1129DCB for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 11:41:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.79
X-Spam-Level: 
X-Spam-Status: No, score=-1.79 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=nteczone.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B5ZUGvQqYYt7 for <core@ietfa.amsl.com>; Tue,  8 Nov 2016 11:41:14 -0800 (PST)
Received: from msh03.myshophosting.com (msh03.myshophosting.com [101.0.109.158]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5189612996B for <core@ietf.org>; Tue,  8 Nov 2016 11:41:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=nteczone.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:References:To:Subject:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=X/y4ULygdh9YE2O5fTghdweL/4QwN7ZaKZbik62PZw4=; b=S1nA8m1eSwT2exzT1sRJ80qM7L OL/ey3yFEKbGuXSAMHfbd0m8iprcr823+tVyNQvt42mXnHXjXT4a73/5JFoecFAj0ihkQRW3Pyu3A 4Eig2BUGqUNbIbhRL1D5jUoIuhnA+FYoa9N3Q3QiA3BlnUTId56FQdox0KKFrCvkmghrWk+droJvM 7WarHjx+/q9x5hVPCBnqDajAdK13txxvR/g4xK5GpyHjil5dxrThIH02jJY/rtmszQE7/epAsxD4c Lwf93i2nUhvk2GECACyls1YOgzCxnp0NvCVbhP4/QDiNOvV1eP5WujPQ93pQXySYtTRrT9YZrxB1+ 1WZf3h1w==;
Received: from ip-90-186-217-215.web.vodafone.de ([90.186.217.215]:58909 helo=[192.168.8.100]) by msh03.myshophosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from <Christian.Groves@nteczone.com>) id 1c4CGc-002NLC-7j for core@ietf.org; Wed, 09 Nov 2016 06:41:11 +1100
To: core@ietf.org
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org>
From: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <d3b9811b-91a4-612f-9032-5155a2c18bcc@nteczone.com>
Date: Wed, 9 Nov 2016 06:41:05 +1100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - msh03.myshophosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nteczone.com
X-Get-Message-Sender-Via: msh03.myshophosting.com: authenticated_id: christian.groves@nteczone.com
X-Authenticated-Sender: msh03.myshophosting.com: christian.groves@nteczone.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Ltj0C9xVSEvohP8xTycnSqT0YUk>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Nov 2016 19:41:16 -0000

Hello all,

Here are my WGLC comments.

General - It's not clear "how" mandatory the use of the CSM is. Clause 
2.3 on TCP/TLS indicates that the CSM message must be sent at the start 
of the connection. Clause 3.1 on Websockets makes no mention of CSM 
messages. Clause 4.3 indicates that the CSM MUST be sent at the start of 
the connection also and makes no distinction between TCP/TLS and 
Websockets. Clause 2.3 also indicates that the connection must be 
aborted if the CSM is missing or invalid as the first message on the 
connection. Given the discussion about address changes does more 
information need to be provided what start of connection means?

Cl.3 para 1: "The WebSocket connection can be used for any number of 
requests." There's no such comment for TCP/TLS. Is there something 
behind this that this needs to be stated for WebSocket or not TCP/TLS?

Cl.4.2: Should we say here (or in 8.2) that the allocation of option 
numbers follows the conventions of 5.4.6/[RFC7252]?

Cl.4.3: "Both capability and settings options are cumulative. ... An 
option that is sent might override a previous value for the same 
option.  The option defines how to handle this case if needed." The 
options in 4.3.1, 4.3.2 and 4.3.3 don't say if this is possible.

Cl.4.3.1: "(Section 5.10 of [RFC7252]." Missing closing ")".

Cl.4.3.1: For TLS and Websocket I take the comments to mean that the 
Server-Name setting option shouldn't be used, or?

Cl.4.5: "A release message will normally be replied to by the peer by 
closing the TCP/TLS connection." Could "TCP/TLS" be replaced with 
"transport" in order to make the text more generic?

Cl.4.5: Bad-Server-Name - can this be used even in response to 
Server-Name-Option not provided by a CSM?

Cl.4.5/4.6: "; the details are in the options" AND "...can indicate one 
or more..." does this mean that at least one option MUST be included?

Cl.4.5/4.6: The text mentions a "diagnostic payload", is some standard 
envisaged for this or is it implementation dependent?

Cl.6.2: This indicates ABNF is used for the definitions. However clause 
6.1.1 and 6.1.2 make no mention of the ABNF syntax or reference to 
RFC3986. The descriptions of the definitions of the URI schemes in 6.2, 
6.1.1 and 6.1.2 should be harmonised.

Cl.8.2: "IANA is requested to create a sub-registry for signaling options
    similar to the CoAP Option Numbers Registry (Section 12.2 of
    [RFC7252]), with the single change that a fourth column is added to
    the sub-registry that is one of the codes in the Signaling Codes
    subregistry (Section 8.1)." The table 2 below isn't correct as it 
includes names not the signal codes from Table 1

Cl. 8.2: The text of 12.2/RFC7252 indicates a number of criteria that 
must be included for registration. The options in the tcp draft don't 
address all the points. Some criteria aren't relevant but if 12.2 is 
referenced then they need to be discussed.

Cl.8.2: I wonder if the first column in Table 3 should be "Applies to"? 
It seems more natural to look up the Signal Code to find the option, 
instead of the options which could have the same number.

Cl.8.5: I think it would be easier for IANA if the coaps+tcp and 
coap+tcp URI schemes were described like the websockets ones in 8.5.1 
and 8.5.2.

Cl.8.5: The section references both [RFC7595] and [RFC4395]. RFC7595 
obsoletes RFC4395.

Appendix B: This could be deleted. Its covers much of the same text as 
bullet 2 / clause 2.4. Or at least the they could be merged into one.

Appendix C: Depending on the outcome of the earlier general comment, a 
CSM message may need to be added between step 2 and 3.

Regards, Christian


On 8/11/2016 7:42 PM, Carsten Bormann wrote:
> So far, we have had one comment on the incompleteness of the TCP/UDP proxy example (Brian intends to remove this text) and a good discussion on how the objective of MTI (and â€œdefault-enabledâ€) security can be achieved (which hasnâ€™t quite completed yet, I think).
>
> What we donâ€™t have is in-depth reviews.  The chairs believe we need at least a few of those before we (Jaime, that is) can declare this draft passed WGLC.
>
> So please do keep those reviews coming.
>
> We really want to use the f2f time we have a week from now to resolve any outstanding issues, so please make sure we have had a chance to digest your review before that meeting.
>
> GrÃ¼ÃŸe, Carsten
>
> PS.: Yes, Iâ€™m in for one of those reviews, too.  Sorry for not delivering in time.
>
>
>> On 18 Oct 2016, at 11:22, Jaime JimÃ©nez <jaime.jimenez@ericsson.com> wrote:
>>
>> Dear CoRE WG,
>>
>> The core-coap-tcp-tls draft has gotten to a state that the authors feel is in good shape for WGLC.
>> We would like to ask the group to start checking this last version and the issues on the Github repository.
>>
>> https://tools.ietf.org/html/draft-ietf-core-coap-tcp-tls-05
>>
>> There is at the moment one open issue left in the tracker ( https://github.com/core-wg/coap-tcp-tls/issues/31  ) which is mostly editorial. The issues raised during last IETF - about Observe over reliable transports -  have been closed and new text has been added to the appendix: https://github.com/core-wg/coap-tcp-tls/issues/5
>>
>> Best Regards,
>> - - Jaime JimÃ©nez
>>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Thu Nov 10 06:47:04 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95BF01295B3 for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 06:47:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b3ZbKR9s5EJ7 for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 06:47:01 -0800 (PST)
Received: from prometheus.amsuess.com (alt.prometheus.amsuess.com [IPv6:2a01:4f8:190:3064::3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D7B71294A8 for <core@ietf.org>; Thu, 10 Nov 2016 06:47:00 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (unknown [IPv6:2a02:b18:c13b:8001:a800:ff:fede:b1bd]) by prometheus.amsuess.com (Postfix) with ESMTPS id 57D3E401E0; Thu, 10 Nov 2016 15:46:58 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 5762D6B; Thu, 10 Nov 2016 15:46:57 +0100 (CET)
Received: from hephaistos.amsuess.com (hermes.amsuess.com [10.13.13.254]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 299233D1; Thu, 10 Nov 2016 15:46:57 +0100 (CET)
Received: (nullmailer pid 27599 invoked by uid 1000); Thu, 10 Nov 2016 14:46:55 -0000
Date: Thu, 10 Nov 2016 15:46:55 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <20161110144655.7bpfbd5btuvnfzaa@hephaistos.amsuess.com>
References: <147669671885.4619.17683716724186582695.idtracker@ietfa.amsl.com> <29f46b0d-5791-46f2-9c52-881a9bd9f1a5@nteczone.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="rrmsx6caw66zze5i"
Content-Disposition: inline
In-Reply-To: <29f46b0d-5791-46f2-9c52-881a9bd9f1a5@nteczone.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/aGy26gdVUkAR4YHG4LgUTxQ0Jog>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-coap-webrtcdc-01.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Nov 2016 14:47:03 -0000

--rrmsx6caw66zze5i
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Christian,

On Wed, Oct 19, 2016 at 10:23:03AM +0200, Christian Groves wrote:
> FYI, I've submitted a revision to the CoAP over WebRTC draft. The changes
> are mainly based on feedback that it should align with the packet format =
in
> draft-ietf-core-coap-tcp-tls.

I've read through the CoAP over WebRTC draft in preparation of a pending
review of draft-silverajan-core-coap-protocol-negotiation-04, and
stumbled upon two points that to me need clarification:


3.6 Figure 3 shows the TCP-TLS message format in its 8-bit extended
length form (first len=3D13, followed by 8 bit after TKL). As webrtcdc-01
mandates length to be set to 0 (btw, why "shall" and not "SHALL"?), a
package would never look as in the figure. I'd suggest that the figure
show the layout as mandated for this use, or be more generic by dropping
the "=3D13" and and "(8-bit)" parts.


3.6 on WebRTC strings seems to indicate to me that for a UTF-8 payload,
sending the whole CoAP package (ie. header + options + payload) in a
single WebRTC sting. What is to happen with token and options, which in
general are not valid UTF-8? Are WebRTC components required to support
processing arbitrary octet sequences in string messages, and if yes, how
do they wind up in applications? Or are the octets of the token and
options areas supposed to be unicode codepoints from 0 to 255 that are
encoded in utf-8, which is odd in my opinion, and would furthermore
negate the advantages of not having to do encoding conversion.

(If there are no good reasons for it, I'd suggest to drop it entirely
and limit CoAP over WebRTC to "WebRTC Binary" messages, among other
things because mixing Unicode strings with BERT is bound to create
broken implementations that count unicode characters instead of yet
again accessing the encoded data and reading its length in bytes).


3.7: I think that Uri-Host and Uri-Port are very relevant, at least in
the case when one of the RTC endpoints is acting as a CoAP proxy.

As for determining the host by using the host portion of the stream: How
does there come a host portion from WebRTC? In the Websocket port, the
"Host" HTTP header provides a default for the Uri-Host CoAP header, but
Websockets have a defined server, and WebRTC is client to client. Do the
clients exchange host names at all, and is it made sure that they agree
on what the host name for the connection is?


Best regards
Christian

--=20
Christian Ams=FCss                      | Energy Harvesting Solutions GmbH
founder, system architect             | headquarter:
mailto:c.amsuess@energyharvesting.at  | Arbeitergasse 15, A-4400 Steyr
tel:+43-664-97-90-6-39                | http://www.energyharvesting.at/
                                      | ATU68476614

--rrmsx6caw66zze5i
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=HH0F
-----END PGP SIGNATURE-----

--rrmsx6caw66zze5i--


From nobody Thu Nov 10 08:05:12 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E008F12943B for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 08:05:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JYUSZ-lm-7R9 for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 08:05:04 -0800 (PST)
Received: from prometheus.amsuess.com (alt.prometheus.amsuess.com [IPv6:2a01:4f8:190:3064::3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DBDB12973A for <core@ietf.org>; Thu, 10 Nov 2016 08:05:03 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (unknown [IPv6:2a02:b18:c13b:8001:a800:ff:fede:b1bd]) by prometheus.amsuess.com (Postfix) with ESMTPS id B73FC401E0; Thu, 10 Nov 2016 17:04:59 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 52AA31BB; Thu, 10 Nov 2016 17:04:53 +0100 (CET)
Received: from hephaistos.amsuess.com (hermes.amsuess.com [10.13.13.254]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 760823D1; Thu, 10 Nov 2016 17:04:52 +0100 (CET)
Received: (nullmailer pid 32319 invoked by uid 1000); Thu, 10 Nov 2016 16:04:51 -0000
Date: Thu, 10 Nov 2016 17:04:51 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <20161110160451.5k3lqxfxonwj7nne@hephaistos.amsuess.com>
References: <147669921707.4489.15070761418407896856.idtracker@ietfa.amsl.com> <7a174518-1ab8-103a-ca19-100d523ef706@nteczone.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="p4ok6a6j3vvmresm"
Content-Disposition: inline
In-Reply-To: <7a174518-1ab8-103a-ca19-100d523ef706@nteczone.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/7Nl4d47gPiUA37gM7Z69KpIbvqI>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-core-rfc6690up-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Nov 2016 16:05:11 -0000

--p4ok6a6j3vvmresm
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

> [The prefix] MUST be followed by a ".".

the "core" prefix claimed in RFC6690 already violates that rule. Should
it be mentioned explicitly as an exception? Should the IETF "hand back"
all "core[^.]" to IANA?

Best regards
Christian

--=20
Christian Ams=FCss                      | Energy Harvesting Solutions GmbH
founder, system architect             | headquarter:
mailto:c.amsuess@energyharvesting.at  | Arbeitergasse 15, A-4400 Steyr
tel:+43-664-97-90-6-39                | http://www.energyharvesting.at/
                                      | ATU68476614

--p4ok6a6j3vvmresm
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=NYj1
-----END PGP SIGNATURE-----

--p4ok6a6j3vvmresm--


From nobody Thu Nov 10 08:21:06 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E42E412988A for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 08:21:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HOUVVkNkvO3T for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 08:21:00 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97D0A12978B for <core@ietf.org>; Thu, 10 Nov 2016 08:21:00 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id 9AEA0401E0; Thu, 10 Nov 2016 17:20:58 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id C62B91BB; Thu, 10 Nov 2016 17:20:50 +0100 (CET)
Received: from hephaistos.amsuess.com (hermes.amsuess.com [10.13.13.254]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id DD6183D1; Thu, 10 Nov 2016 17:20:49 +0100 (CET)
Received: (nullmailer pid 775 invoked by uid 1000); Thu, 10 Nov 2016 16:20:48 -0000
Date: Thu, 10 Nov 2016 17:20:48 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Carsten Bormann <cabo@tzi.org>
Message-ID: <20161110162048.wbihgkh4i72epwgw@hephaistos.amsuess.com>
References: <etPan.580e1079.260e4824.ff73@tzi.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="qaowmuuosvbxofgq"
Content-Disposition: inline
In-Reply-To: <etPan.580e1079.260e4824.ff73@tzi.org>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/LCbSYsqckb7Atlrsa3_-pbYxmKo>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] CoRE @ IETF97
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Nov 2016 16:21:04 -0000

--qaowmuuosvbxofgq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Carsten,

On Mon, Oct 24, 2016 at 03:45:29PM +0200, Carsten Bormann wrote:
> The chairs have set up an initial agenda draft for our meetings at IETF97=
 in:
>=20
> https://github.com/core-wg/ietf97/wiki

could you explain the "interactions [...] with the BB work" part on
links-json? I'm following links-json, but I could not resolve that
abbreviation.

Thanks
Christian

--=20
There's always a bigger fish.
  -- Qui-Gon Jinn

--qaowmuuosvbxofgq
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=uv8X
-----END PGP SIGNATURE-----

--qaowmuuosvbxofgq--


From nobody Thu Nov 10 10:17:31 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD13A1295D9 for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 10:17:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mi3GcXh6w6ts for <core@ietfa.amsl.com>; Thu, 10 Nov 2016 10:17:26 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1BD5129547 for <core@ietf.org>; Thu, 10 Nov 2016 10:17:26 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (unknown [IPv6:2a02:b18:c13b:8001:a800:ff:fede:b1bd]) by prometheus.amsuess.com (Postfix) with ESMTPS id 8D2D7402FA for <core@ietf.org>; Thu, 10 Nov 2016 19:17:24 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id CB8296B for <core@ietf.org>; Thu, 10 Nov 2016 19:17:22 +0100 (CET)
Received: from hephaistos.amsuess.com (hermes.amsuess.com [10.13.13.254]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 65CF83D1 for <core@ietf.org>; Thu, 10 Nov 2016 19:17:22 +0100 (CET)
Received: (nullmailer pid 8678 invoked by uid 1000); Thu, 10 Nov 2016 18:17:21 -0000
Date: Thu, 10 Nov 2016 19:17:21 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: "core@ietf.org" <core@ietf.org>
Message-ID: <20161110181721.wbbegintsshz7ugv@hephaistos.amsuess.com>
References: <147372053832.3711.14886788365598645137.idtracker@ietfa.amsl.com> <CY1PR03MB2265024F98CF464AACD241A2A3FF0@CY1PR03MB2265.namprd03.prod.outlook.com> <57D794D2.7060303@tzi.org> <CY1PR03MB2265ACF39893532F3750FCEBA3FE0@CY1PR03MB2265.namprd03.prod.outlook.com> <57D86108.8060101@tzi.org> <CY1PR03MB2265510622B439F986643040A3F00@CY1PR03MB2265.namprd03.prod.outlook.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="baoyhl2pcv2mtjtp"
Content-Disposition: inline
In-Reply-To: <CY1PR03MB2265510622B439F986643040A3F00@CY1PR03MB2265.namprd03.prod.outlook.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/OvuhHJOt9G2ky5KFHou9h5pmqjw>
Subject: Re: [core] FW: New Version Notification for draft-thaler-core-redirect-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Nov 2016 18:17:29 -0000

--baoyhl2pcv2mtjtp
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Dave,

(To: dropped due to very strict Microsoft mail servers -- hope you
notice this reply anyway)

On Thu, Sep 15, 2016 at 01:43:28AM +0000, Dave Thaler wrote:
> Redirects allow the following optimized behavior...
> New clients do (multicast) GET /oic/res (or /oic/res?rt=3Dbar), and the r=
esponses would be:
>
> a) legacy servers, and any new servers that are not configured to be priv=
acy-sensitive, respond with actual content,
>       thus keeping latency and messages to a minimum
>
> b) new privacy-sensitive server would instead respond with a redirect to =
a coaps://<ipaddr>:<port>/oic/res
>       A subsequent coaps GET /oic/res to that endpoint returns actual dat=
a (just as unicast coaps always did before).

Does the (legacy) client's request have an "Accept" header of
application/link-format or absent? (The ?rt=3D seems to indicate that).

If yes, I think that the appropriate response in the b) situation would
be

<coaps://my-address/oic/res>;ct=3D"40"

(preferably with whatever if=3D data that would lead to discovery of
/oic/res if it wasn't a hardcoded URI anyway; why not just .wk/c?).

Additional information according to a future version of
draft-silverajan-core-coap-protocol-negotiation-04 could be provided as
well, but the above is IMO sufficient to make the OCF use case work, and
seem not to incur much overhead compared to the Location-Scheme response
(I didn't do the exact byte counting on "://" vs. option number).

Would that work for you?

Best regards
Christian

--=20
Christian Ams=FCss                      | Energy Harvesting Solutions GmbH
founder, system architect             | headquarter:
mailto:c.amsuess@energyharvesting.at  | Arbeitergasse 15, A-4400 Steyr
tel:+43-664-97-90-6-39                | http://www.energyharvesting.at/
                                      | ATU68476614

--baoyhl2pcv2mtjtp
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=W/xT
-----END PGP SIGNATURE-----

--baoyhl2pcv2mtjtp--


From nobody Fri Nov 11 02:11:50 2016
Return-Path: <bilhanan.silverajan@tut.fi>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30D371295C1 for <core@ietfa.amsl.com>; Fri, 11 Nov 2016 02:11:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.697
X-Spam-Level: 
X-Spam-Status: No, score=-5.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NyH9I7onb3k7 for <core@ietfa.amsl.com>; Fri, 11 Nov 2016 02:11:47 -0800 (PST)
Received: from mail-gw-out2.cc.tut.fi (mail-gw-out2.cc.tut.fi [130.230.160.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A808D129A96 for <core@ietf.org>; Fri, 11 Nov 2016 02:11:27 -0800 (PST)
X-AuditID: 82e6a021-ecbff7000000094f-05-5825993489cb
Received: from mail1.tut.fi (mail1.tut.fi [130.230.162.19]) by mail-gw-out2.cc.tut.fi (Symantec Messaging Gateway) with SMTP id B3.74.02383.43995285; Fri, 11 Nov 2016 12:11:01 +0200 (EET)
Received: from dyn-154-102.public.tut.fi (dyn-154-102.public.tut.fi [130.230.154.102]) by mail1.tut.fi (Postfix) with ESMTPSA id C7AC840D3B for <core@ietf.org>; Fri, 11 Nov 2016 12:10:59 +0200 (EET)
References: <147794779162.23193.6769793631552741634.idtracker@ietfa.amsl.com>
From: Bill Silverajan <bilhanan.silverajan@tut.fi>
To: core@ietf.org
X-Forwarded-Message-Id: <147794779162.23193.6769793631552741634.idtracker@ietfa.amsl.com>
Message-ID: <7c2d4c7c-526a-7fd3-b1c4-c58f141a5720@tut.fi>
Date: Fri, 11 Nov 2016 12:10:58 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <147794779162.23193.6769793631552741634.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrPIsWRmVeSWpSXmKPExsXS9GyRsK7pTNUIg4PfrS32vV3P7MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujJsrvjMXrBar+N7QxNLAeF+oi5GTQ0LAROL7rK9MXYxcHEIC exklHixuZYNwTjFKrFqxlQmkSlggWWLKpi8sILaQgK/EmzfnmUFsNgEjiQPfNoHFRQQEJXbd 3c4EMTVS4tzxiWA2r4ClxNuJU9lBbBYBVYm9c/rB6kUF0iRWPvoFVSMocXLmE7A4p4CfxJbm e2DzmQXMJOZtfghly0tsfzuHeQIj/ywkLbOQlM1CUraAkXkVo1huYmaObnq5bn5piZFecrJe SWmJXlrmJkZwuC1Q3MF4aob+IUYBDkYlHt5FDKoRQqyJZcWVuYcYJTmYlER5WQuBQnxJ+SmV GYnFGfFFpTmpxYcYJTiYlUR4FWqAcrwpiZVVqUX5MClpDhYlcd5Sf80QIYH0xJLU7NTUgtQi mKwMB4eSBK9eAVCjYFFqempFWmZOCUKaiYMTZDgP0PAgkMW8xQWJucWZ6RD5U4yKUuK8bCAJ AZBERmkeXC8kHcxKe8UoDvSKMO/lOqAqHmAqget+BTSYCWjwjDgVkMEliQgpqQZGf8U5s78c ONl8bpXm7P5FHKva+r1+7/kxgfvFT5bo2z8Oxr5T3+xz8DSP4rNg1//Oa3znnP1RrCweny+u 2H3mbbvHlxUfVR/8/2PzstEq7f6t+xk89zitL9S5B/lv0uqL/z/l6MRUxv6nQTb7vQSfuimK a/EWeH+ezFVnNI3tQL2dy/188SOKSizFGYmGWsxFxYkAixpLWOICAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/_NfR9GU8QCKdetSZ-TFMGUJx6wo>
Subject: [core] Fwd: New Version Notification for draft-silverajan-core-coap-protocol-negotiation-04.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Nov 2016 10:11:49 -0000

Dear All,

We submitted a new version of our draft, "CoAP Protocol Negotiation" 
recently.

After the Berlin meeting, we took onboard several suggestions and 
recommendations and as a consequence, the draft has been reshaped quite 
significantly. So in this version, we introduce the CoRE Resource 
Directory as a central component in an architecture to which CoAP origin 
servers can register multiple available transports. This then allows 
clients to perform lookups in order to discover these transports on the 
endpoints.

Several sections of draft-ietf-core-coap-tcp-tls discuss client-server 
exchange and/or negotiation of reliable transport features in-band, such 
as TLS ALPN, WebSocket subprotocol selection or Capability and Settings 
Messages. The mechanisms in this draft for allowing clients and servers 
to use various CoAP transports do not affect or interfere with those.

We're working on a strawman proposal allowing CoAP origin servers and 
clients to directly interact and discover available alternative 
transports, in situations where using a CoRE Resource Directory may seem 
unfeasible. That'll be addressed in future versions of our draft.

Looking forward to your comments,
Bill

-------- Forwarded Message --------
Subject: New Version Notification for 
draft-silverajan-core-coap-protocol-negotiation-04.txt
Date: Mon, 31 Oct 2016 14:03:11 -0700
From: internet-drafts@ietf.org
To: Bill Silverajan <Bilhanan.Silverajan@tut.fi>, Mert Ocak 
<mert.ocak@ericsson.com>


A new version of I-D, draft-silverajan-core-coap-protocol-negotiation-04.txt
has been successfully submitted by Bilhanan Silverajan and posted to the
IETF repository.

Name:		draft-silverajan-core-coap-protocol-negotiation
Revision:	04
Title:		CoAP Protocol Negotiation
Document date:	2016-10-31
Group:		Individual Submission
Pages:		11
URL: 
https://www.ietf.org/internet-drafts/draft-silverajan-core-coap-protocol-negotiation-04.txt
Status: 
https://datatracker.ietf.org/doc/draft-silverajan-core-coap-protocol-negotiation/
Htmlized: 
https://tools.ietf.org/html/draft-silverajan-core-coap-protocol-negotiation-04
Diff: 
https://www.ietf.org/rfcdiff?url2=draft-silverajan-core-coap-protocol-negotiation-04

Abstract:
    CoAP has been standardised as an application-level REST-based
    protocol.  When multiple transport protocols exist for exchanging
    CoAP resource representations, this document introduces a way forward
    for CoAP endpoints as well as intermediaries to agree upon alternate
    transport and protocol configurations as well as URIs for CoAP
    messaging, using the CoRE Resource Directory.

 


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


From nobody Fri Nov 11 18:25:06 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79024129507 for <core@ietfa.amsl.com>; Fri, 11 Nov 2016 18:25:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aW8iaztCBc0J for <core@ietfa.amsl.com>; Fri, 11 Nov 2016 18:25:03 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7636129443 for <core@ietf.org>; Fri, 11 Nov 2016 18:25:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAC2OxhJ021111 for <core@ietf.org>; Sat, 12 Nov 2016 03:24:59 +0100 (CET)
Received: from t2001067c037001446d08b96e3f082e47.hotel-wired.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:144:6d08:b96e:3f08:2e47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tG0x66YSxz7yFS; Sat, 12 Nov 2016 03:24:58 +0100 (CET)
From: Carsten Bormann <cabo@tzi.org>
Content-Type: text/plain; charset=utf-8
X-Mao-Original-Outgoing-Id: 500610280.360625-541028f28a6786d41c046f63d55ab286
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
Date: Sat, 12 Nov 2016 11:24:40 +0900
Message-Id: <62A7EDAB-3902-47C1-941C-5BC09A979E98@tzi.org>
To: "core@ietf.org WG" <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/bYqgJEmzJh-MhOTFeYwnLCUEcDk>
Subject: [core] WG Wiki Move
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2016 02:25:04 -0000

Few of you may be aware of the CoRE WG Wiki (which used to be maintained =
more often than it has been recently).  That has now moved to:

https://trac.ietf.org/trac/core/

The chairs will update that page more frequently soon.  For now, I have =
just added the links to the WG SVN repositories, which have vanished =
from the tools page CoRE dashboard in the Wiki move.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Fri Nov 11 18:55:12 2016
Return-Path: <mcr@sandelman.ca>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86A35129443; Fri, 11 Nov 2016 18:55:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4_9RFi51w4Z5; Fri, 11 Nov 2016 18:55:07 -0800 (PST)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE062129536; Fri, 11 Nov 2016 18:55:06 -0800 (PST)
Received: from dooku.sandelman.ca (unknown [182.172.168.109]) by relay.sandelman.ca (Postfix) with ESMTPS id 482271F906; Sat, 12 Nov 2016 02:55:05 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 83CEA3412; Fri, 11 Nov 2016 21:54:42 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Anima-bootstrap <anima-bootstrap@ietf.org>, Core <core@ietf.org>
In-reply-to: <5e9f1e40bac34f2a550dba2e72abd8cc@xs4all.nl>
References: <147775346922.30618.14590857285848221161.idtracker@ietfa.amsl.com> <e191cf557b00e7003048fac4e72ba59c@xs4all.nl> <etPan.5818b52f.a07279a.9528@AirmailxGenerated.am> <etPan.5818bad3.78c6b580.9528@tzi.org> <5e9f1e40bac34f2a550dba2e72abd8cc@xs4all.nl>
Comments: In-reply-to peter van der Stok <stokcons@xs4all.nl> message dated "Fri, 04 Nov 2016 09:57:57 +0100."
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1
X-Attribution: mcr
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature"
Date: Sat, 12 Nov 2016 11:54:42 +0900
Message-ID: <9276.1478919282@dooku.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/XEbpgp_moFjydhdqoYUnernW988>
Subject: Re: [core] [Anima-bootstrap] Fwd: New Version Notification for draft-vanderstok-core-coap-est-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2016 02:55:08 -0000

--=-=-=
Content-Type: text/plain


peter van der Stok <stokcons@xs4all.nl> wrote:
    > It all depends on the interest generated in this document and for what
    > purpose: - BRSKI only with limited EST support - Or full EST

    > For the moment it is BRSKI without manual intervention. When things are
    > missing in that context, we will certainly add them.

Yeah, it seems to me that we could easily do what Carsten suggested, and find
a new way to combine the two reply into a single component.  It seems like a
simple application of CBOR and COSE.




--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJYJoRyAAoJEJVM4Vb9/EKQuxUH/Rr1YRRmQEzzu2uP0c+wI04W
SJrN3OxqFdEU60fHBNT+iVzhqsN4XvI9yDzB4H/SKVLnksXDTvRiQjtqg7pqnC1f
Mvmh/VUKhGOifZ0b175cAjJYCustCibUwmr76zfLHOTX7fwXX7WwG8giYYX4FDhO
EUQcrI/zh/sQT/K7N6hbXJ8F9k7++C/tP5JZzQdue7N0XfxzJfrcrAJySTjtUbd9
Lh8RUqDePqqCU0hLb2d0H2sAY5S7Tq1e8Knm0uVZ1nuCXZyBP2lbqnOVANMsovHe
AtMYI45Uh59jLQcDdUiiwXxEZv0450ujo4TcYCcS8s25ygYpApof2qivNewrbjA=
=s6O+
-----END PGP SIGNATURE-----
--=-=-=--


From nobody Sat Nov 12 01:48:56 2016
Return-Path: <Christian.Groves@nteczone.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1280129A53 for <core@ietfa.amsl.com>; Sat, 12 Nov 2016 01:48:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.79
X-Spam-Level: 
X-Spam-Status: No, score=-1.79 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=nteczone.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ufk18lZ99e8j for <core@ietfa.amsl.com>; Sat, 12 Nov 2016 01:48:53 -0800 (PST)
Received: from msh03.myshophosting.com (msh03.myshophosting.com [101.0.109.158]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D00C129A06 for <core@ietf.org>; Sat, 12 Nov 2016 01:48:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=nteczone.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:Cc:References:To:Subject:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=NLUHmErY32hxyuDtp05oiciSBkJFjTvYgCQSAQdYXlQ=; b=FrxpRIrB9t4Fc4qfcAKEKlZJf7 9z6myfGf8ih+PrRGlrHakXV/XO/fIQ5NS21YOg8WrmeFeDqI3i9HTd+XKaULdRvWMUkDkGHjy2KZP QXPwt7tOo0ReGtggTx+ZZ2S/ml02P6YYec0Icdlt4RJR5QJ/cFz931/pGglfchuGebvmkaL1zK/kM gmGbIqIkhLJn0pd7VRVYrylZZmXnKaqQkN2yT8/i3kjCKPq1JgaXV9+ch0Re6AVIABPNvgGcwXTl5 Qrl0GIMboJO4PNPbmZIhCm/y6WBn6jGwBJtrk6kZjL+oxknvopNdFXQDwrjuo4qIeFbENUBBU8eek YRM6SHJQ==;
Received: from [58.120.104.2] (port=43184 helo=[192.168.101.221]) by msh03.myshophosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from <Christian.Groves@nteczone.com>) id 1c5UvV-000lJF-KB; Sat, 12 Nov 2016 20:48:45 +1100
To: =?UTF-8?Q?Christian_Ams=c3=bcss?= <c.amsuess@energyharvesting.at>
References: <147669921707.4489.15070761418407896856.idtracker@ietfa.amsl.com> <7a174518-1ab8-103a-ca19-100d523ef706@nteczone.com> <20161110160451.5k3lqxfxonwj7nne@hephaistos.amsuess.com>
From: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <992f4fca-0881-e3d2-5cb3-29eac3586670@nteczone.com>
Date: Sat, 12 Nov 2016 18:48:34 +0900
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <20161110160451.5k3lqxfxonwj7nne@hephaistos.amsuess.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - msh03.myshophosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nteczone.com
X-Get-Message-Sender-Via: msh03.myshophosting.com: authenticated_id: christian.groves@nteczone.com
X-Authenticated-Sender: msh03.myshophosting.com: christian.groves@nteczone.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/zpYRGE5eB04sLSbjy7xC-YgqgaA>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-core-rfc6690up-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2016 09:48:55 -0000

Hello Christian,

I'm not sure why RFC6690 violates the rule? RFC6690 indicates that "the 
value starts with a lowercase alphabetic character, followed by a 
sequence of lowercase alphabetic, numeric, ".",...". It then further 
recommends "that the period "." character be used for dividing name 
segments.

The only core value registered with IANA is core.gp so it follows the 
recommendation in the draft. If the MUST is a problem then I'm happy to 
fall back to the "it is recommended" text.

Regards, Christian


On 11/11/2016 1:04 AM, Christian Amsüss wrote:
> Hello,
>
>> [The prefix] MUST be followed by a ".".
> the "core" prefix claimed in RFC6690 already violates that rule. Should
> it be mentioned explicitly as an exception? Should the IETF "hand back"
> all "core[^.]" to IANA?
>
> Best regards
> Christian
>


From nobody Sat Nov 12 02:54:12 2016
Return-Path: <Christian.Groves@nteczone.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44C1F129A7B for <core@ietfa.amsl.com>; Sat, 12 Nov 2016 02:54:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.79
X-Spam-Level: 
X-Spam-Status: No, score=-1.79 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=nteczone.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TmtM2x_Z_vKw for <core@ietfa.amsl.com>; Sat, 12 Nov 2016 02:54:09 -0800 (PST)
Received: from msh03.myshophosting.com (msh03.myshophosting.com [101.0.109.158]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53885129A79 for <core@ietf.org>; Sat, 12 Nov 2016 02:54:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=nteczone.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:Cc:References:To:Subject:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=6kO4jyx8ysBlkqh60Ib7V5AUNtK9o18tVDUwcj5V3ko=; b=q7VPTSXzq2aKRzYyLPaw/GGbWO sHKgeXWJr0zqKpV0m97IU3AazvLKsUvEspXv/eDgRI4zMb2DOiI0voTLK5xRpDWzF8ziSz2tYhFnh QEmt8sqKIHr4qwiZSmIsAtbg6yN3Vfyf6wyJ4zYdaHrWzhtL7f2KZsM6eO8uqhL9kYypXdmYe+hYz 0U8Vs8/p9Q1/KbHmzjqRu60U8/dUgA4ke6yo8yNi2e64E9JwXsDj4vLI0YGYvsD+hC2m325tppGuG zEJgpvK0DXOLH2EweIfpT5ZRZtg1hv6MeEt2HA4X1EaH7m0qPFlL8vnnGF2XpdLynaSwlV4jGyOL6 I6j2999A==;
Received: from [58.120.104.2] (port=50548 helo=[192.168.101.221]) by msh03.myshophosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from <Christian.Groves@nteczone.com>) id 1c5Vwh-000pvH-Kf; Sat, 12 Nov 2016 21:54:04 +1100
To: =?UTF-8?Q?Christian_Ams=c3=bcss?= <c.amsuess@energyharvesting.at>
References: <147669671885.4619.17683716724186582695.idtracker@ietfa.amsl.com> <29f46b0d-5791-46f2-9c52-881a9bd9f1a5@nteczone.com> <20161110144655.7bpfbd5btuvnfzaa@hephaistos.amsuess.com>
From: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <d90e27e3-12f3-c84d-8d6b-793dab94d134@nteczone.com>
Date: Sat, 12 Nov 2016 19:53:54 +0900
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <20161110144655.7bpfbd5btuvnfzaa@hephaistos.amsuess.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - msh03.myshophosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nteczone.com
X-Get-Message-Sender-Via: msh03.myshophosting.com: authenticated_id: christian.groves@nteczone.com
X-Authenticated-Sender: msh03.myshophosting.com: christian.groves@nteczone.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-8K96FEyctsHDiInsB8_btt5T1c>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-coap-webrtcdc-01.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2016 10:54:10 -0000

Hello Christian,

Thanks for reviewing the draft and providing comments. Please see my 
replies below.

Regards, Christian


On 10/11/2016 11:46 PM, Christian Amsüss wrote:
> Hello Christian,
>
> On Wed, Oct 19, 2016 at 10:23:03AM +0200, Christian Groves wrote:
>> FYI, I've submitted a revision to the CoAP over WebRTC draft. The changes
>> are mainly based on feedback that it should align with the packet format in
>> draft-ietf-core-coap-tcp-tls.
> I've read through the CoAP over WebRTC draft in preparation of a pending
> review of draft-silverajan-core-coap-protocol-negotiation-04, and
> stumbled upon two points that to me need clarification:
>
>
> 3.6 Figure 3 shows the TCP-TLS message format in its 8-bit extended
> length form (first len=13, followed by 8 bit after TKL). As webrtcdc-01
> mandates length to be set to 0 (btw, why "shall" and not "SHALL"?), a
> package would never look as in the figure. I'd suggest that the figure
> show the layout as mandated for this use, or be more generic by dropping
> the "=13" and and "(8-bit)" parts.
[CNG] Yes I agree. I thought the same when preparing the slides for the 
meeting. I'll fix it in the next version.
>
>
> 3.6 on WebRTC strings seems to indicate to me that for a UTF-8 payload,
> sending the whole CoAP package (ie. header + options + payload) in a
> single WebRTC sting. What is to happen with token and options, which in
> general are not valid UTF-8? Are WebRTC components required to support
> processing arbitrary octet sequences in string messages, and if yes, how
> do they wind up in applications? Or are the octets of the token and
> options areas supposed to be unicode codepoints from 0 to 255 that are
> encoded in utf-8, which is odd in my opinion, and would furthermore
> negate the advantages of not having to do encoding conversion.
[CNG] My understanding is that the WebRTC API 
(https://www.w3.org/TR/webrtc/ see the send method) largely copies the 
Websockets API (e.g. 
https://www.w3.org/TR/websockets/#dom-websocket-send) with regards to 
sending data and the intention would be to convert to unicode characters.
>
> (If there are no good reasons for it, I'd suggest to drop it entirely
> and limit CoAP over WebRTC to "WebRTC Binary" messages, among other
> things because mixing Unicode strings with BERT is bound to create
> broken implementations that count unicode characters instead of yet
> again accessing the encoded data and reading its length in bytes).
[CNG] I'm happy to minimise "options". If people are happy to go with 
binary then we could recommend it. It might be worth also making this 
recommendation in draft-ietf-core-coap-tcp-tls with regards to the use 
of websockets.

>
>
> 3.7: I think that Uri-Host and Uri-Port are very relevant, at least in
> the case when one of the RTC endpoints is acting as a CoAP proxy.
>
> As for determining the host by using the host portion of the stream: How
> does there come a host portion from WebRTC? In the Websocket port, the
> "Host" HTTP header provides a default for the Uri-Host CoAP header, but
> Websockets have a defined server, and WebRTC is client to client. Do the
> clients exchange host names at all, and is it made sure that they agree
> on what the host name for the connection is?
[CNG] WebRTC first uses an application protocol between the peers to 
establish a session, e.g. SIP/SDP. This establishment makes use of ICE 
to determine the media transport addresses between the peers. The "host" 
could be derived from this process. That's what triggered my author's 
note. As you've mentioned I also think the Uri-host and Uri-post are 
relevant that's why I said that there's no impact. It makes sense to 
de-couple the CoAP and WebRTC protocol "machinery".
>
>
> Best regards
> Christian
>


From nobody Sun Nov 13 11:53:18 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 298F9129618 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 11:53:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FuGj1h0hTHa0 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 11:53:16 -0800 (PST)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51FC712941A for <core@ietf.org>; Sun, 13 Nov 2016 11:53:16 -0800 (PST)
Received: from fr712umx4.dmz.alcatel-lucent.com (unknown [135.245.210.45]) by Websense Email Security Gateway with ESMTPS id 02FB0502E376C for <core@ietf.org>; Sun, 13 Nov 2016 19:53:11 +0000 (GMT)
Received: from fr712usmtp2.zeu.alcatel-lucent.com (fr712usmtp2.zeu.alcatel-lucent.com [135.239.2.42]) by fr712umx4.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uADJrDBa032495 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <core@ietf.org>; Sun, 13 Nov 2016 19:53:14 GMT
Received: from FR711WXCHHUB01.zeu.alcatel-lucent.com (fr711wxchhub01.zeu.alcatel-lucent.com [135.239.2.111]) by fr712usmtp2.zeu.alcatel-lucent.com (GMO) with ESMTP id uADJrD9K004758 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <core@ietf.org>; Sun, 13 Nov 2016 20:53:13 +0100
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.241]) by FR711WXCHHUB01.zeu.alcatel-lucent.com ([135.239.2.111]) with mapi id 14.03.0301.000; Sun, 13 Nov 2016 20:53:13 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: New Version Notification for draft-mavrogiannopoulos-tls-cid-00.txt
Thread-Index: AQHSPd4EA73jk4H3tEWl1r+57fxypqDXQpuA
Date: Sun, 13 Nov 2016 19:53:12 +0000
Message-ID: <D44E7497.75BBE%thomas.fossati@alcatel-lucent.com>
References: <147906268395.5639.12602843444386783169.idtracker@ietfa.amsl.com>
In-Reply-To: <147906268395.5639.12602843444386783169.idtracker@ietfa.amsl.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [135.239.27.40]
Content-Type: text/plain; charset="us-ascii"
Content-ID: <A23F8C39CA542B4CB4AFA187380CE48F@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/7ibyfVSsMpS5jwarqKbKkp_aEP0>
Subject: [core] FW: New Version Notification for draft-mavrogiannopoulos-tls-cid-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 13 Nov 2016 19:53:18 -0000

FYI

Cheers, t

On 13/11/2016 18:44, "internet-drafts@ietf.org" <internet-drafts@ietf.org>
wrote:
>
>A new version of I-D, draft-mavrogiannopoulos-tls-cid-00.txt
>has been successfully submitted by Thomas Fossati and posted to the
>IETF repository.
>
>Name:		draft-mavrogiannopoulos-tls-cid
>Revision:	00
>Title:		Datagram Transport Transport Layer Security (DTLS)
>Transport-Agnostic Security Association Extension
>Document date:	2016-11-13
>Group:		Individual Submission
>Pages:		9
>URL:           =20
>https://www.ietf.org/internet-drafts/draft-mavrogiannopoulos-tls-cid-00.tx
>t
>Status:        =20
>https://datatracker.ietf.org/doc/draft-mavrogiannopoulos-tls-cid/
>Htmlized:      =20
>https://tools.ietf.org/html/draft-mavrogiannopoulos-tls-cid-00
>
>
>Abstract:
>   This memo proposes a new Datagram Transport Transport Layer Security
>   (DTLS) extension that provides the ability to negotiate, during
>   handshake, a transport independent identifier that is unique per
>   security association.  This identifier effectively decouples the DTLS
>   session from the underlying transport protocol, allowing the same
>   security association to be migrated across different instances of the
>   same transport, or to a completely different transport.


From nobody Sun Nov 13 15:50:32 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FB721294B5 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 15:50:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JDT-g-OlOBtU for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 15:50:28 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B3D1129412 for <core@ietf.org>; Sun, 13 Nov 2016 15:50:28 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id BF191404A2; Mon, 14 Nov 2016 00:50:26 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id B3A521E0; Mon, 14 Nov 2016 00:50:25 +0100 (CET)
Received: from hephaistos.amsuess.com (hephaistos.amsuess.com [10.13.13.129]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 75DE03EE;  Mon, 14 Nov 2016 00:50:25 +0100 (CET)
Received: (nullmailer pid 17921 invoked by uid 1000); Sun, 13 Nov 2016 23:50:23 -0000
Date: Mon, 14 Nov 2016 00:50:23 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <20161113235023.afbm2mgtyhnytcnp@hephaistos.amsuess.com>
References: <147669921707.4489.15070761418407896856.idtracker@ietfa.amsl.com> <7a174518-1ab8-103a-ca19-100d523ef706@nteczone.com> <20161110160451.5k3lqxfxonwj7nne@hephaistos.amsuess.com> <992f4fca-0881-e3d2-5cb3-29eac3586670@nteczone.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="kwiljta6u2l6e7i2"
Content-Disposition: inline
In-Reply-To: <992f4fca-0881-e3d2-5cb3-29eac3586670@nteczone.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/H3O6AJ2sfZ0uIM_35SV5Eav0hLk>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-core-rfc6690up-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 13 Nov 2016 23:50:30 -0000

--kwiljta6u2l6e7i2
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Christian,

On Sat, Nov 12, 2016 at 06:48:34PM +0900, Christian Groves wrote:
> > > [The prefix] MUST be followed by a ".".
> > the "core" prefix claimed in RFC6690 already violates that rule. Should
> > it be mentioned explicitly as an exception? Should the IETF "hand back"
> > all "core[^.]" to IANA?
>
> I'm not sure why RFC6690 violates the rule? RFC6690 indicates that "the
> value starts with a lowercase alphabetic character, followed by a sequence
> of lowercase alphabetic, numeric, ".",...". It then further recommends "t=
hat
> the period "." character be used for dividing name segments.
>=20
> The only core value registered with IANA is core.gp so it follows the
> recommendation in the draft. If the MUST is a problem then I'm happy to f=
all
> back to the "it is recommended" text.

"violates" was maybe too strong a word; it's just that if we limited the
reserved names from "core*" to "core.*", "core" wouldn't need to be an
exception any more (as it is now) but could be just one organisation
prefix.

On second thought, making 'core.' an organisation prefix would make the
CoRE WG responsible for publishing (or at least managing) a part of the
namespace we just handed off to IANA, so maybe it does need to stay an
exception.

On "third thought": I didn't find that it says anything ruling out still
registering parameters with IANA inside a registered organisation
prefix. Can a (general, but of course I'm thinking of "core." here)
organisation prefix registrant submit a specification that says that
paremeters need to be registered as individual parameters in the CoRE
parameters registry (after all, that's still possible), provided it's
within what IANA will do? (A different working group could then, for
example, claim a "homenet." organization prefix, set the "RFC required"
policy or maybe name their own expert without opening up a IANA new
registry that would receive a delegation from the CoRE parameters).

Is this, in general, something that the draft allows or forbids, and it
is allowed, is it the way to go with "core."? Or do you think it's a
non-issue anyway?

Best regards
Christian

--=20
I shouldn't have written all those tank programs.
  -- Kevin Flynn

--kwiljta6u2l6e7i2
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=r75K
-----END PGP SIGNATURE-----

--kwiljta6u2l6e7i2--


From nobody Sun Nov 13 16:13:15 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D81A12953D for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 16:13:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.602
X-Spam-Level: 
X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WbUVEXfcbvZR for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 16:13:11 -0800 (PST)
Received: from lb3-smtp-cloud6.xs4all.net (lb3-smtp-cloud6.xs4all.net [194.109.24.31]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 579201295E4 for <core@ietf.org>; Sun, 13 Nov 2016 16:12:57 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.213]) by smtp-cloud6.xs4all.net with ESMTP id 7cCv1u0054bqPqS01cCvA3; Mon, 14 Nov 2016 01:12:55 +0100
Received: from dhcp-9216.meeting.ietf.org ([31.133.146.22]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 14 Nov 2016 01:12:55 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 14 Nov 2016 01:12:55 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Core <core@ietf.org>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
Message-ID: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
X-Sender: stokcons@xs4all.nl (5RyXOYlVViNl/UTKnvTwHzmecxNLnDou)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/YBGj6kD75fMtXLCQsOhQ7rmXG2I>
Subject: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 00:13:13 -0000

Dear YANG-SID authors,

I want to propose a change to the allocation of SIDs.
Currently, the SIDs are divided in ranges and prospective users can 
register a range with IANA.
When the range is already assigned, they need to select a new not 
allocated range.
I think that this will discourage many future SDOs who may want to use 
YANG + COMI. Many of these SDOs like to figure out the best number 
structure for their uses, and will be very disappointed when they cannot 
acquire the range. Actually, I believe, they will abandon the use of 
YANG + COMI.

My proposal is to assign numbers to modules, and let IANA handle the 
module number registration as proposed for the SIDs. The assignment of 
SIDs to YANG identifiers, as proposed in the draft remains, the same. 
The difference is the complete freedom to choose the SIDs in any given 
module. The advantage is that all modules can pick their values from the 
small number range.

The change is in the discovery and the structure of the resource path. 
In COMI I want to define another resource type called YANG module with 
name core.c.module. The discovery will return the path: 
/prefix/module-number-in-binary64. For example, with an empty prefix and 
for module 32, discovery will return /g. To retrieve a specific YANG 
instance with numeric identifier sid in module 32, the statement GET 
coap/example.com/g/sid will do. With two characters, modules with 
numbers < 4096 are covered; probably 3 characters will cover all 
modules.  Given that the SIDs are small, the total URI size will not 
increase due to this modification.

When the full datastore is accessed, the path /c is currently used. We 
can reserve c, meaning module number 28 is already assigned. Another 
method is returning a long path name, such as /whole_store. The size of 
the related URI is not important in this case. However, the proposed 
module allocation necessitates a small modification to the CBOR 
representation of the contents of the full datastore. This is attained 
by representing the full datastore as a CBOR map containing (key, value) 
pairs, where key is the module number and value is the content of the 
module as specified in yang-cbor document.

For the PATCH and the FETCH methods, this representation will also work, 
given the content-formats that are currently looked at.

I hope you like my proposal. The advantage is a simpler IANA 
administration, SID allocation freedom within a module, and shorter 
SIDs. The disadvantage is a slight complexity increase in the CBOR 
representation of the full datastore.

Hope this helps,

Peter


-- 
Peter van der Stok
vanderstok consultancy
mailto: consultancy@vanderstok.org
www: www.vanderstok.org
tel NL: +31(0)492474673     F: +33(0)966015248


From nobody Sun Nov 13 16:17:39 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5A881295E4 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 16:17:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CRm4332mm6Cc for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 16:17:30 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01F34129467 for <core@ietf.org>; Sun, 13 Nov 2016 16:17:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAE0HQ6m002009; Mon, 14 Nov 2016 01:17:26 +0100 (CET)
Received: from t2001067c037001448876c46dedea2357.hotel-wired.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:144:8876:c46d:edea:2357]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHB111rPxz7ygl; Mon, 14 Nov 2016 01:17:24 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
Date: Mon, 14 Nov 2016 09:17:17 +0900
X-Mao-Original-Outgoing-Id: 500775437.495689-21cea11f8f546125c297bf6a8eaa697f
Content-Transfer-Encoding: quoted-printable
Message-Id: <3E49FBCC-9835-43F8-8EFB-A1F47982DA80@tzi.org>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
To: peter van der Stok <consultancy@vanderstok.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/V43hJV4IEC9THMGt3rXbg2X-e5w>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 00:17:37 -0000

> On 14 Nov 2016, at 09:12, peter van der Stok <stokcons@xs4all.nl> =
wrote:
>=20
> Dear YANG-SID authors,
>=20
> I want to propose a change to the allocation of SIDs.
> Currently, the SIDs are divided in ranges and prospective users can =
register a range with IANA.
> When the range is already assigned, they need to select a new not =
allocated range.
> I think that this will discourage many future SDOs who may want to use =
YANG + COMI. Many of these SDOs like to figure out the best number =
structure for their uses, and will be very disappointed when they cannot =
acquire the range. Actually, I believe, they will abandon the use of =
YANG + COMI.

Well, the idea was that an SDO that is in the business of writing YANG =
modules gets a large amount of SID space they then can administer in any =
way they like.  So they are never in a position to have to go to IANA =
again to allocate specific parts of that SID space.

> My proposal is to assign numbers to modules, and let IANA handle the =
module number registration as proposed for the SIDs. The assignment of =
SIDs to YANG identifiers, as proposed in the draft remains, the same. =
The difference is the complete freedom to choose the SIDs in any given =
module. The advantage is that all modules can pick their values from the =
small number range.

Again, there is this complete freedom in the existing SID proposal, too, =
as long as the organization remembered to get a SID space in the first =
place.  (We=E2=80=99ll have to coax^w educate them to do this.)

Still, the idea of separating module numbers and intra-module IDs is =
worth exploring.

Gr=C3=BC=C3=9Fe, Carsten

> The change is in the discovery and the structure of the resource path. =
In COMI I want to define another resource type called YANG module with =
name core.c.module. The discovery will return the path: =
/prefix/module-number-in-binary64. For example, with an empty prefix and =
for module 32, discovery will return /g. To retrieve a specific YANG =
instance with numeric identifier sid in module 32, the statement GET =
coap/example.com/g/sid will do. With two characters, modules with =
numbers < 4096 are covered; probably 3 characters will cover all =
modules.  Given that the SIDs are small, the total URI size will not =
increase due to this modification.
>=20
> When the full datastore is accessed, the path /c is currently used. We =
can reserve c, meaning module number 28 is already assigned. Another =
method is returning a long path name, such as /whole_store. The size of =
the related URI is not important in this case. However, the proposed =
module allocation necessitates a small modification to the CBOR =
representation of the contents of the full datastore. This is attained =
by representing the full datastore as a CBOR map containing (key, value) =
pairs, where key is the module number and value is the content of the =
module as specified in yang-cbor document.
>=20
> For the PATCH and the FETCH methods, this representation will also =
work, given the content-formats that are currently looked at.
>=20
> I hope you like my proposal. The advantage is a simpler IANA =
administration, SID allocation freedom within a module, and shorter =
SIDs. The disadvantage is a slight complexity increase in the CBOR =
representation of the full datastore.
>=20
> Hope this helps,
>=20
> Peter
>=20
>=20
> --=20
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>=20


From nobody Sun Nov 13 16:53:27 2016
Return-Path: <Christian.Groves@nteczone.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D78D129566 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 16:53:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.79
X-Spam-Level: 
X-Spam-Status: No, score=-1.79 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=neutral reason="invalid (public key: not available)" header.d=nteczone.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B6CRRNbmGKHs for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 16:53:24 -0800 (PST)
Received: from msh03.myshophosting.com (msh03.myshophosting.com [101.0.109.158]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 537A21293FC for <core@ietf.org>; Sun, 13 Nov 2016 16:53:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=nteczone.com; s=default; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:MIME-Version:Date:Message-ID:From:Cc:References:To:Subject:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=cNb73Lt7av+qimoMHUwtadV716Nj+WHuqZkkNSgd5EY=; b=ScPWtOJEspMp1fn49c0/g4/Cr4 af3U+s36g/IndbwwNL71WFxofstNza+F04xQPARk6eIp3g0hSoeMv0zSBWgqP0alyBESIaR+E5kO3 0sYqkpq8Z6XPTfPRhPnOtVPcQlGtgDv7Aqwqp8EILGBuCLuEHmxgJQwBIX3adFOXVVg7AlBIOUI/l dbMKNoEyplI4Ex4S0cYnP7PDA4OnLhwLCrxY2F/x3DkkdceZzXHNMzFZsKrdWyMJrqJtNxyiY22hK LrzC1Zu9wRw8+XpiBltFwsmQ1HsZmqa8ZS4/HOWRxbF1CR468VXkn2ZD9MZp8lTVuUnD7LsV7GvgG DjYBe7fg==;
Received: from dhcp-8edb.meeting.ietf.org ([31.133.142.219]:61780) by msh03.myshophosting.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.87) (envelope-from <Christian.Groves@nteczone.com>) id 1c65WO-003f1n-7y; Mon, 14 Nov 2016 11:53:16 +1100
To: =?UTF-8?Q?Christian_Ams=c3=bcss?= <c.amsuess@energyharvesting.at>
References: <147669921707.4489.15070761418407896856.idtracker@ietfa.amsl.com> <7a174518-1ab8-103a-ca19-100d523ef706@nteczone.com> <20161110160451.5k3lqxfxonwj7nne@hephaistos.amsuess.com> <992f4fca-0881-e3d2-5cb3-29eac3586670@nteczone.com> <20161113235023.afbm2mgtyhnytcnp@hephaistos.amsuess.com>
From: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <559948f7-c92a-38d8-1b01-8a5bc10be572@nteczone.com>
Date: Mon, 14 Nov 2016 09:53:12 +0900
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <20161113235023.afbm2mgtyhnytcnp@hephaistos.amsuess.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - msh03.myshophosting.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nteczone.com
X-Get-Message-Sender-Via: msh03.myshophosting.com: authenticated_id: christian.groves@nteczone.com
X-Authenticated-Sender: msh03.myshophosting.com: christian.groves@nteczone.com
X-Source: 
X-Source-Args: 
X-Source-Dir: 
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/r5lDCUUUkKdtkUBLfCFTo1KQM_I>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-core-rfc6690up-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 00:53:26 -0000

Hello Christian,

I think its largely a non-issue. "core.*" falls under the "core" 
exception that says the CoreWG (IETF review) is responsible for 
allocating IDs in the range "core*". IANA pretty much just implements 
what the WG requests. I can add some text around the explicit 
registration of "core.*" under "core*".

Regards, Christian


On 14/11/2016 8:50 AM, Christian Amsüss wrote:
> Hello Christian,
>
> On Sat, Nov 12, 2016 at 06:48:34PM +0900, Christian Groves wrote:
>>>> [The prefix] MUST be followed by a ".".
>>> the "core" prefix claimed in RFC6690 already violates that rule. Should
>>> it be mentioned explicitly as an exception? Should the IETF "hand back"
>>> all "core[^.]" to IANA?
>> I'm not sure why RFC6690 violates the rule? RFC6690 indicates that "the
>> value starts with a lowercase alphabetic character, followed by a sequence
>> of lowercase alphabetic, numeric, ".",...". It then further recommends "that
>> the period "." character be used for dividing name segments.
>>
>> The only core value registered with IANA is core.gp so it follows the
>> recommendation in the draft. If the MUST is a problem then I'm happy to fall
>> back to the "it is recommended" text.
> "violates" was maybe too strong a word; it's just that if we limited the
> reserved names from "core*" to "core.*", "core" wouldn't need to be an
> exception any more (as it is now) but could be just one organisation
> prefix.
>
> On second thought, making 'core.' an organisation prefix would make the
> CoRE WG responsible for publishing (or at least managing) a part of the
> namespace we just handed off to IANA, so maybe it does need to stay an
> exception.
>
> On "third thought": I didn't find that it says anything ruling out still
> registering parameters with IANA inside a registered organisation
> prefix. Can a (general, but of course I'm thinking of "core." here)
> organisation prefix registrant submit a specification that says that
> paremeters need to be registered as individual parameters in the CoRE
> parameters registry (after all, that's still possible), provided it's
> within what IANA will do? (A different working group could then, for
> example, claim a "homenet." organization prefix, set the "RFC required"
> policy or maybe name their own expert without opening up a IANA new
> registry that would receive a delegation from the CoRE parameters).
>
> Is this, in general, something that the draft allows or forbids, and it
> is allowed, is it the way to go with "core."? Or do you think it's a
> non-issue anyway?
>
> Best regards
> Christian
>


From nobody Sun Nov 13 16:56:55 2016
Return-Path: <internet-drafts@ietf.org>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 505EC12966E; Sun, 13 Nov 2016 16:56:53 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.37.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <147908501332.5631.14477129242631391423.idtracker@ietfa.amsl.com>
Date: Sun, 13 Nov 2016 16:56:53 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/O3RKuk-XNk8d2jLqmgD3JILFqn8>
Cc: core@ietf.org
Subject: [core] I-D Action: draft-ietf-core-etch-04.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 00:56:54 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Constrained RESTful Environments of the IETF.

        Title           : Patch and Fetch Methods for Constrained Application Protocol (CoAP)
        Authors         : Peter van der Stok
                          Carsten Bormann
                          Anuj Sehgal
	Filename        : draft-ietf-core-etch-04.txt
	Pages           : 20
	Date            : 2016-11-13

Abstract:
   The methods defined in RFC 7252 for the Constrained Application
   Protocol (CoAP) only allow access to a complete resource, not to
   parts of a resource.  In case of resources with larger or complex
   data, or in situations where a resource continuity is required,
   replacing or requesting the whole resource is undesirable.  Several
   applications using CoAP will need to perform partial resource
   accesses.

   This specification defines the new CoAP methods, FETCH, PATCH and
   iPATCH, which are used to access and update parts of a resource.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-core-etch/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-core-etch-04

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-core-etch-04


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Sun Nov 13 17:03:25 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4C4A1296AC; Sun, 13 Nov 2016 17:03:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5oR03_FA91Hf; Sun, 13 Nov 2016 17:03:21 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A53C21296BE; Sun, 13 Nov 2016 17:03:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAE135F7016496; Mon, 14 Nov 2016 02:03:05 +0100 (CET)
Received: from t2001067c03700128adabc759d66ffeb9.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:adab:c759:d66f:feb9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHC1g2YH1z7ygx; Mon, 14 Nov 2016 02:03:03 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <147635245787.2894.1907116527239429628.idtracker@ietfa.amsl.com>
Date: Mon, 14 Nov 2016 10:02:56 +0900
X-Mao-Original-Outgoing-Id: 500778175.999969-0234a8160880e8c5a8771c393990a331
Content-Transfer-Encoding: quoted-printable
Message-Id: <36EE4592-4B66-40AE-9FFB-54973B019BCC@tzi.org>
References: <147635245787.2894.1907116527239429628.idtracker@ietfa.amsl.com>
To: Mirja Kuehlewind <ietf@kuehlewind.net>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-duWaem5uUeILLzlEdCVha6sSGQ>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, The IESG <iesg@ietf.org>, core@ietf.org
Subject: Re: [core] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-i?= =?utf-8?q?etf-core-etch-03=3A_=28with_COMMENT=29?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:03:23 -0000

> On 13 Oct 2016, at 18:54, Mirja Kuehlewind <ietf@kuehlewind.net> =
wrote:
>=20
> Mirja K=C3=BChlewind has entered the following ballot position for
> draft-ietf-core-etch-03: No Objection
>=20
> When responding, please keep the subject line intact and reply to all
> email addresses included in the To and CC lines. (Feel free to cut =
this
> introductory paragraph, however.)
>=20
>=20
> Please refer to =
https://www.ietf.org/iesg/statement/discuss-criteria.html
> for more information about IESG DISCUSS and COMMENT positions.
>=20
>=20
> The document, along with other ballot positions, can be found here:
> https://datatracker.ietf.org/doc/draft-ietf-core-etch/
>=20
>=20
>=20
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>=20
> Does this doc update RFC7252? Maybe not; just asking=E2=80=A6

Hi Mirja,

good question.  I believe the answer is no:
It uses a defined extension point of RFC 7252, the CoAP Method Codes =
sub-registry (RFC 7252 Section 12.1.1), and registers three new entries =
there.

With all the discussion of what labels like =E2=80=9Cupdates=E2=80=9D =
mean, I=E2=80=99m not entirely sure of this classification.
But I think in the long run we don=E2=80=99t want every RFC YYY marked =
as =E2=80=9CUpdates RFC XXX=E2=80=9D just because it registers something =
in RFC XXX=E2=80=99s registry.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Sun Nov 13 17:10:48 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 311E91294A3; Sun, 13 Nov 2016 17:10:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AeZsgXAPEC0z; Sun, 13 Nov 2016 17:10:45 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C3471295F0; Sun, 13 Nov 2016 17:10:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAE1AgBA004489; Mon, 14 Nov 2016 02:10:42 +0100 (CET)
Received: from t2001067c03700128adabc759d66ffeb9.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:adab:c759:d66f:feb9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHCBT18r3z7yh0; Mon, 14 Nov 2016 02:10:40 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <147908501332.5631.14477129242631391423.idtracker@ietfa.amsl.com>
Date: Mon, 14 Nov 2016 10:10:35 +0900
X-Mao-Original-Outgoing-Id: 500778635.460358-e5dff2623a70459a89e6424113710116
Content-Transfer-Encoding: quoted-printable
Message-Id: <2504E03E-6F12-4B55-8A19-7DC80C123431@tzi.org>
References: <147908501332.5631.14477129242631391423.idtracker@ietfa.amsl.com>
To: internet-drafts@ietf.org
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/yQeoaDQ83Uq7LJZgycX94yIQmSg>
Cc: core@ietf.org, i-d-announce@ietf.org
Subject: Re: [core] I-D Action: draft-ietf-core-etch-04.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:10:47 -0000

This update tries to address all remaining IESG comments.
There is no technical change intended, but I=E2=80=99ll ask the WG to =
watch out for the new sentences that contain the word =E2=80=9CRECOMMENDED=
=E2=80=9D:

   [=E2=80=A6FETCH=E2=80=A6].  It is
   RECOMMENDED that any discovery method that allows a client to find
   out that the server supports FETCH also provides information what
   FETCH payload media types are applicable.

and

   It is RECOMMENDED that any discovery method that allows a client to
   find out that the server supports one of PATCH and iPATCH also
   provides information what patch payload media types are applicable
   and which of the two methods are implemented by the server for each
   of these media types.

   Servers that do not rely on the idempotency of iPATCH can easily
   support both PATCH and iPATCH, and it is RECOMMENDED they do so.
   This is inexpensive to do, as, for iPATCH, there is no requirement on
   the server to check that the client's intention that the request be
   idempotent is fulfilled (although there is diagnostic value in that
   check, so a less-constrained implementation may want to perform it).

Please check that you are comfortable with the direction taken there.
(And, once you have done that, please check out all other changes =
below.)

Gr=C3=BC=C3=9Fe, Carsten

> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-core-etch-04



From nobody Sun Nov 13 17:17:43 2016
Return-Path: <andy@yumaworks.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CEAFB1296B6 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 17:17:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZObQPwRwSb8i for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 17:17:39 -0800 (PST)
Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 164541295E5 for <core@ietf.org>; Sun, 13 Nov 2016 17:17:24 -0800 (PST)
Received: by mail-vk0-x22e.google.com with SMTP id p9so52937957vkd.3 for <core@ietf.org>; Sun, 13 Nov 2016 17:17:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=CMEFvQKehcGkGGAwBcTWORdZ6hV2ih1AqdPaJHvpOTI=; b=G228VW5JIpkQAuGLbIQ2B2pFEFjberDH8eSJb+3t0tb7Na9M5vqNqcPbZg7bo+2I15 8tMHRktKlQLI6LZnfMQzul5WfQQ98v5DUVa+eSMji7q1h/8/6zacF2Icgn5FKGodrmBx bntBUHullgiiyL7tf6z8n8Rt+qAqTtoFi3dvyEXbylOEiKKSpeeaMRVWZpEzWbxakY5P X3apLPrPDdGSFzv69DmSk6bksDGPTko0GgKcWYicUesIBAleqdb4Rf0NPY/t1cZUnQWT +ngYVIo6v1OW67Q+LpfVVif5iJSjqRYUQEJoI4iQNvqmSx9rV8Ww0HC9Ysx862VgKCMv TevQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=CMEFvQKehcGkGGAwBcTWORdZ6hV2ih1AqdPaJHvpOTI=; b=eIM8gH9w+8tSY0SsND+5ycS5VMEoKrewIuSsFJQyMG3fa2BAIIBHyO2PDCF8mcTPoF 1X3hIBSgmSHd+yliuOUYrXb9pZmIkqQ45Bp/sLtBYWCMayu0uw331FbTT+obwZG/8Hcu Cx9z7NJ/AzvIeDS244AtDzGMYUt5RLOknN9dhXHScAfd3xFzalmfXsE313noiRdQVO4S nat9HVhL6LIc9kVtJWDxW1/AVsMuM6xPEYw6/nLpNlFBmdiLEn0l+Gd9gYr/2NOln/t/ 6fQIEeNdxrTM+RML8GkkDZrMLgFC+fs1cLDXmeBd6gDnWEk8N/UIilMqXaNSL32NeSUT RtEg==
X-Gm-Message-State: ABUngveyi3a3clCZiUIMOe6Vlr/oJ9Zq7Vf37nxgJfSNblQazBl4HI7UnCiavjUqOpvb+nlac2TIrrwrXTbFww==
X-Received: by 10.31.207.199 with SMTP id f190mr7023608vkg.32.1479086243116; Sun, 13 Nov 2016 17:17:23 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.64.129 with HTTP; Sun, 13 Nov 2016 17:17:22 -0800 (PST)
In-Reply-To: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
From: Andy Bierman <andy@yumaworks.com>
Date: Sun, 13 Nov 2016 17:17:22 -0800
Message-ID: <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>
Content-Type: multipart/alternative; boundary=001a114f1de81d0e040541389a47
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/4KN3-LDwB4yl_5wiCtd3h7NlcdI>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:17:42 -0000

--001a114f1de81d0e040541389a47
Content-Type: text/plain; charset=UTF-8

Hi,


One question to ask:  How many modules do we expect to have?
How many objects do we expect to have?  In 30 years of writing MIB modules
we have never even come close to a million objects. (Maybe 100,000?)

A million modules, each with a million objects, would still be less than 40
bits.
So why to we need complex range assignments and non-contiguous numbering
within a module?  Presumably to preserve numbers and not waste them.
But since the SID encoding is based on deltas, and the full SID is only used
once per transaction, this does not seem to be a real concern.


Andy


On Sun, Nov 13, 2016 at 4:12 PM, peter van der Stok <stokcons@xs4all.nl>
wrote:

> Dear YANG-SID authors,
>
> I want to propose a change to the allocation of SIDs.
> Currently, the SIDs are divided in ranges and prospective users can
> register a range with IANA.
> When the range is already assigned, they need to select a new not
> allocated range.
> I think that this will discourage many future SDOs who may want to use
> YANG + COMI. Many of these SDOs like to figure out the best number
> structure for their uses, and will be very disappointed when they cannot
> acquire the range. Actually, I believe, they will abandon the use of YANG +
> COMI.
>
> My proposal is to assign numbers to modules, and let IANA handle the
> module number registration as proposed for the SIDs. The assignment of SIDs
> to YANG identifiers, as proposed in the draft remains, the same. The
> difference is the complete freedom to choose the SIDs in any given module.
> The advantage is that all modules can pick their values from the small
> number range.
>
> The change is in the discovery and the structure of the resource path. In
> COMI I want to define another resource type called YANG module with name
> core.c.module. The discovery will return the path:
> /prefix/module-number-in-binary64. For example, with an empty prefix and
> for module 32, discovery will return /g. To retrieve a specific YANG
> instance with numeric identifier sid in module 32, the statement GET coap/
> example.com/g/sid will do. With two characters, modules with numbers <
> 4096 are covered; probably 3 characters will cover all modules.  Given that
> the SIDs are small, the total URI size will not increase due to this
> modification.
>
> When the full datastore is accessed, the path /c is currently used. We can
> reserve c, meaning module number 28 is already assigned. Another method is
> returning a long path name, such as /whole_store. The size of the related
> URI is not important in this case. However, the proposed module allocation
> necessitates a small modification to the CBOR representation of the
> contents of the full datastore. This is attained by representing the full
> datastore as a CBOR map containing (key, value) pairs, where key is the
> module number and value is the content of the module as specified in
> yang-cbor document.
>
> For the PATCH and the FETCH methods, this representation will also work,
> given the content-formats that are currently looked at.
>
> I hope you like my proposal. The advantage is a simpler IANA
> administration, SID allocation freedom within a module, and shorter SIDs.
> The disadvantage is a slight complexity increase in the CBOR representation
> of the full datastore.
>
> Hope this helps,
>
> Peter
>
>
> --
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>

--001a114f1de81d0e040541389a47
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div><br></div><div>One question to ask:=
 =C2=A0How many modules do we expect to have?</div><div>How many objects do=
 we expect to have?=C2=A0 In 30 years of writing MIB modules</div><div>we h=
ave never even come close to a million objects. (Maybe 100,000?)</div><div>=
<br></div><div>A million modules, each with a million objects, would still =
be less than 40 bits.</div><div>So why to we need complex range assignments=
 and non-contiguous numbering</div><div>within a module?=C2=A0 Presumably t=
o preserve numbers and not waste them.</div><div>But since the SID encoding=
 is based on deltas, and the full SID is only used</div><div>once per trans=
action, this does not seem to be a real concern.</div><div><br></div><div><=
br></div><div>Andy</div><div><br></div></div><div class=3D"gmail_extra"><br=
><div class=3D"gmail_quote">On Sun, Nov 13, 2016 at 4:12 PM, peter van der =
Stok <span dir=3D"ltr">&lt;<a href=3D"mailto:stokcons@xs4all.nl" target=3D"=
_blank">stokcons@xs4all.nl</a>&gt;</span> wrote:<br><blockquote class=3D"gm=
ail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-le=
ft:1ex">Dear YANG-SID authors,<br>
<br>
I want to propose a change to the allocation of SIDs.<br>
Currently, the SIDs are divided in ranges and prospective users can registe=
r a range with IANA.<br>
When the range is already assigned, they need to select a new not allocated=
 range.<br>
I think that this will discourage many future SDOs who may want to use YANG=
 + COMI. Many of these SDOs like to figure out the best number structure fo=
r their uses, and will be very disappointed when they cannot acquire the ra=
nge. Actually, I believe, they will abandon the use of YANG + COMI.<br>
<br>
My proposal is to assign numbers to modules, and let IANA handle the module=
 number registration as proposed for the SIDs. The assignment of SIDs to YA=
NG identifiers, as proposed in the draft remains, the same. The difference =
is the complete freedom to choose the SIDs in any given module. The advanta=
ge is that all modules can pick their values from the small number range.<b=
r>
<br>
The change is in the discovery and the structure of the resource path. In C=
OMI I want to define another resource type called YANG module with name cor=
e.c.module. The discovery will return the path: /prefix/module-number-in-bi=
nar<wbr>y64. For example, with an empty prefix and for module 32, discovery=
 will return /g. To retrieve a specific YANG instance with numeric identifi=
er sid in module 32, the statement GET coap/<a href=3D"http://example.com/g=
/sid" rel=3D"noreferrer" target=3D"_blank">example.com/g/sid</a> will do. W=
ith two characters, modules with numbers &lt; 4096 are covered; probably 3 =
characters will cover all modules.=C2=A0 Given that the SIDs are small, the=
 total URI size will not increase due to this modification.<br>
<br>
When the full datastore is accessed, the path /c is currently used. We can =
reserve c, meaning module number 28 is already assigned. Another method is =
returning a long path name, such as /whole_store. The size of the related U=
RI is not important in this case. However, the proposed module allocation n=
ecessitates a small modification to the CBOR representation of the contents=
 of the full datastore. This is attained by representing the full datastore=
 as a CBOR map containing (key, value) pairs, where key is the module numbe=
r and value is the content of the module as specified in yang-cbor document=
.<br>
<br>
For the PATCH and the FETCH methods, this representation will also work, gi=
ven the content-formats that are currently looked at.<br>
<br>
I hope you like my proposal. The advantage is a simpler IANA administration=
, SID allocation freedom within a module, and shorter SIDs. The disadvantag=
e is a slight complexity increase in the CBOR representation of the full da=
tastore.<br>
<br>
Hope this helps,<br>
<br>
Peter<span class=3D"HOEnZb"><font color=3D"#888888"><br>
<br>
<br>
-- <br>
Peter van der Stok<br>
vanderstok consultancy<br>
mailto: <a href=3D"mailto:consultancy@vanderstok.org" target=3D"_blank">con=
sultancy@vanderstok.org</a><br>
www: <a href=3D"http://www.vanderstok.org" rel=3D"noreferrer" target=3D"_bl=
ank">www.vanderstok.org</a><br>
tel NL: +31(0)492474673=C2=A0 =C2=A0 =C2=A0F: +33(0)966015248<br>
<br>
______________________________<wbr>_________________<br>
core mailing list<br>
<a href=3D"mailto:core@ietf.org" target=3D"_blank">core@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/core" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/core</a><br>
</font></span></blockquote></div><br></div>

--001a114f1de81d0e040541389a47--


From nobody Sun Nov 13 17:23:42 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B84B212956F; Sun, 13 Nov 2016 17:23:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M_SyV8owtXmv; Sun, 13 Nov 2016 17:23:39 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B077C129472; Sun, 13 Nov 2016 17:23:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAE1NXN6003037; Mon, 14 Nov 2016 02:23:33 +0100 (CET)
Received: from t2001067c03700128adabc759d66ffeb9.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:adab:c759:d66f:feb9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHCTH2SSPz7yh4; Mon, 14 Nov 2016 02:23:31 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <CAHbuEH6Oj6ardD-Smx4=4YGt1RbcO_hK5Dfdz_iVJG1CE3KT+Q@mail.gmail.com>
Date: Mon, 14 Nov 2016 10:23:24 +0900
X-Mao-Original-Outgoing-Id: 500779404.204647-3054009cccf01fa3eae7a30c50037421
Content-Transfer-Encoding: quoted-printable
Message-Id: <FE31A588-BA82-48C6-A394-2F84FACACF12@tzi.org>
References: <147629362183.6297.18321888937912730256.idtracker@ietfa.amsl.com> <57FF3EC8.8080605@tzi.org> <CAHbuEH6Oj6ardD-Smx4=4YGt1RbcO_hK5Dfdz_iVJG1CE3KT+Q@mail.gmail.com>
To: Kathleen Moriarty <Kathleen.Moriarty.ietf@gmail.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/5Ci7ty2uJHRrDePIZYrNT_vj-5I>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, The IESG <iesg@ietf.org>, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Kathleen Moriarty's Discuss on draft-ietf-core-etch-03: (with DISCUSS)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:23:41 -0000

Hi Kathleen,

as you can see from =
https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-core-etch-04 we took this =
as an opportunity to clean up the security considerations section, and I =
think it is indeed better now.
I hope the added detail answers your call for more specific information =
and that you can clear the DISCUSS.

One point that we maybe can take home from this discussion is that the =
word PATCH means different things to different people =E2=80=94 this =
specific draft has no specific relationship to software updates, and it =
is actually less likely that a PATCH method with be used to deliver a =
software update =E2=80=9Cpatch=E2=80=9D than PUT (as in the LWM2M =
firmware update mechanism) or POST.  The name PATCH is therefore =
probably unfortunate, but we want to stick to it as it is also used for =
the equivalent method on the HTTP side of REST.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Sun Nov 13 17:29:32 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FC57129593; Sun, 13 Nov 2016 17:29:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id daNKm2u-gUhb; Sun, 13 Nov 2016 17:29:26 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E500312960A; Sun, 13 Nov 2016 17:29:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAE1TH34014940; Mon, 14 Nov 2016 02:29:17 +0100 (CET)
Received: from t2001067c03700128adabc759d66ffeb9.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:adab:c759:d66f:feb9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHCbt4kSNz7yh5; Mon, 14 Nov 2016 02:29:14 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <2DCF36F2-0821-4B02-A97F-2B8D238B3C67@cooperw.in>
Date: Mon, 14 Nov 2016 10:29:09 +0900
X-Mao-Original-Outgoing-Id: 500779748.946906-83efff379e19afe11342d3ca37785569
Content-Transfer-Encoding: quoted-printable
Message-Id: <8C4F164D-DB72-4927-9BB7-81EB6B69980B@tzi.org>
References: <147612868715.31457.7459381389963542114.idtracker@ietfa.amsl.com> <57FCDC80.3000004@tzi.org> <2DCF36F2-0821-4B02-A97F-2B8D238B3C67@cooperw.in>
To: Alissa Cooper <alissa@cooperw.in>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/9IAI1g4fJbEH5v3uVcfeUYZ0jn4>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, IESG <iesg@ietf.org>, core@ietf.org
Subject: Re: [core] Alissa Cooper's Discuss on draft-ietf-core-etch-03: (with DISCUSS and COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:29:31 -0000

Hi Alissa,


> On 13 Oct 2016, at 01:27, Alissa Cooper <alissa@cooperw.in> wrote:
>=20
> Carsten,
>=20
> Thanks for your response. Inline ...
>=20
>> On Oct 11, 2016, at 8:35 AM, Carsten Bormann <cabo@tzi.org> wrote:
>>=20
>> Hi Alissa,
>>=20
>> thank you for these comments.
>>=20
>> Alissa Cooper wrote:
>>> Alissa Cooper has entered the following ballot position for
>>> draft-ietf-core-etch-03: Discuss
>>>=20
>>> When responding, please keep the subject line intact and reply to =
all
>>> email addresses included in the To and CC lines. (Feel free to cut =
this
>>> introductory paragraph, however.)
>>>=20
>>>=20
>>> Please refer to =
https://www.ietf.org/iesg/statement/discuss-criteria.html
>>> for more information about IESG DISCUSS and COMMENT positions.
>>>=20
>>>=20
>>> The document, along with other ballot positions, can be found here:
>>> https://datatracker.ietf.org/doc/draft-ietf-core-etch/
>>>=20
>>>=20
>>>=20
>>> =
----------------------------------------------------------------------
>>> DISCUSS:
>>> =
----------------------------------------------------------------------
>>>=20
>>> I agree with the comment made by the ops-dir reviewer, and I don't =
think
>>> the parenthetical in 2.2.1 addresses the problem. It seems that =
FETCH is
>>> not a useful operation unless the server is capable of understanding =
what
>>> it is supposed to fetch. So it's not true that "any" media type can =
be
>>> used, but rather only those media types for which a definition =
exists for
>>> what the fetch parameters indicate and which part of the resource =
they
>>> are intended to delineate. Shouldn't the use of FETCH be constrained =
to
>>> such media types?
>>=20
>> This seems to chime in with a comment that Alexey made, which =
prompted
>> us to write a new section 2.2:
>>=20
>> https://core-wg.github.io/etch/#rfc.section.2.2
>>=20
>> In particular, we talk about unsupported payloads:
>>=20
>> Unsupported FETCH payload:
>> In case a client sends payload that is inappropriate for the resource
>> identified by the Request-URI, the server can return a 4.15 =
(Unsupported
>> Content-Format) CoAP error. The server can determine if the payload =
is
>> supported by checking the CoAP Content-Format specified with the =
request.
>>=20
>> Even the existing text already talks about "admissible media types".
>> We could expand this treatment a bit.
>=20
> Yes, I think characterization of this just needs to be consistent =
throughout the document.

We went ahead and put in a recommendation that relates to where the info =
should come from (last sentence is new):

   [=E2=80=A6] in such a FETCH request; it is outside the scope of this =
document how
   information about media types admissible for the specific resource is
   obtained by the client (although we can hint that form relations
   ([I-D.hartke-core-apps]) might be a preferred way).  It is
   RECOMMENDED that any discovery method that allows a client to find
   out that the server supports FETCH also provides information what
   FETCH payload media types are applicable.

I think that together with the other editorial improvements that should =
be enough to address the concern and clear the DISCUSS.

>=20
>>=20
>> For now, I have added a qualification to the "of any media type"
>> sentence such that it reads:
>>=20
>> With the
>> FETCH method, implementations may submit a request body of any media
>> type that is
>> defined with the semantics of selecting information from
>> a resource in such a FETCH request; it is outside the scope of this
>> document how
>> information about media types admissible for the specific resource is
>> obtained by the client
>>=20
>> (I'm not entirely happy yet, as it may be the resource that is the =
one
>> that defines how the media type is to be interpreted as a selector; =
say,
>> there may be resources that allow searching by text/plain -- maybe =
this
>> is hard to read from the previous sentence.)
>=20
> I agree that the sentence does not convey your last point above. =
Peter=E2=80=99s suggestion is more clear but also does not capture this =
point I don=E2=80=99t think.
>=20
> Thanks,
> Alissa
>=20
>>=20
>>> =
----------------------------------------------------------------------
>>> COMMENT:
>>> =
----------------------------------------------------------------------
>>>=20
>>> =3D Section 2 =3D
>>>=20
>>> "(However, while processing a search request, a server can be =
expected
>>>  to allocate computing and memory resources or even create =
additional
>>>  server resources through which the response to the search can be
>>>  retrieved.)"
>>>=20
>>> s/search/fetch/ would be clearer I think
>>=20
>> Done in editor's draft.
>>=20
>>> =3D Section 3 =3D
>>>=20
>>> "If the Request-URI does not point to an existing
>>>  resource, the server MAY create a new resource with that URI,
>>>  depending on the patch document type (whether it can logically =
modify
>>>  a null resource) and permissions, etc."
>>>=20
>>> I know this is the same text as in RFC 5789, but it's vague. What =
else
>>> might create the basis for the server's decision besides the =
document
>>> type and permissions?
>>=20
>> The server can run into all kinds of errors, e.g., creating a =
resource
>> in this way might cause a 4.09 Conflict. This is already discussed in
>> Section 3.4, which we can link to.
>>=20
>> Replaced "etc.", "as well as other conditions (see also Section =
3.4)".
>>=20
>>> =3D Section 5 =3D
>>>=20
>>> It seems that FETCH does introduce a new security consideration, in =
that
>>> any observer of FETCH requests can potentially glean information =
about
>>> the specific portions of a resource of interest to the requester. =
This
>>> might factor into decisions about whether to use DTLS to secure a
>>> particular request so may be worth mentioning.
>>=20
>> Good point.  Added:
>>=20
>> The FETCH method is subject to the same general security
>> considerations as all CoAP methods as described in {{-coap}}.
>> The payload of a FETCH request may reveal more detailed information
>> about the specific portions of a resource of interest to the
>> requester than a GET request for the entire resource would; this may
>> mean that confidentiality protection of the request by DTLS or other
>> means is needed for FETCH where it wouldn't be needed for GET.
>>=20
>> Gr=C3=BC=C3=9Fe, Carsten


From nobody Sun Nov 13 17:38:24 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB8E9129474; Sun, 13 Nov 2016 17:38:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YHOgJtKnsdUa; Sun, 13 Nov 2016 17:38:14 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D24512948D; Sun, 13 Nov 2016 17:38:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAE1c7rK005057; Mon, 14 Nov 2016 02:38:08 +0100 (CET)
Received: from t2001067c03700128adabc759d66ffeb9.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:adab:c759:d66f:feb9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHCp46qslz7yhH; Mon, 14 Nov 2016 02:38:04 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <CAKKJt-eMDwfZLpmqHnBb=7ftjj2d5VEVRhuA27UQeq57JsJfpw@mail.gmail.com>
Date: Mon, 14 Nov 2016 10:37:57 +0900
X-Mao-Original-Outgoing-Id: 500780277.807542-9b1ad87db2217e0cb109e2e5bbf91deb
Content-Transfer-Encoding: quoted-printable
Message-Id: <568C7E9F-0443-456C-BCA9-981DB9758741@tzi.org>
References: <147628802464.6377.2774521252462284021.idtracker@ietfa.amsl.com> <3ad76e63e6f6b955b5373a5521bcca98@xs4all.nl> <1476356714.1601674.754646289.1E106782@webmail.messagingengine.com> <CAKKJt-eMDwfZLpmqHnBb=7ftjj2d5VEVRhuA27UQeq57JsJfpw@mail.gmail.com>
To: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/W5lBpa29RC9DeehK-j0Jdeg3m9g>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, iesg@ietf.org, core@ietf.org, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [core] Spencer Dawkins' Discuss on draft-ietf-core-etch-03: (with DISCUSS and COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:38:17 -0000

Hi Spencer,

please see my comment to Alissa, as well as the new text

   It is RECOMMENDED that any discovery method that allows a client to
   find out that the server supports one of PATCH and iPATCH also
   provides information what patch payload media types are applicable
   and which of the two methods are implemented by the server for each
   of these media types.

   Servers that do not rely on the idempotency of iPATCH can easily
   support both PATCH and iPATCH, and it is RECOMMENDED they do so.
   This is inexpensive to do, as, for iPATCH, there is no requirement on
   the server to check that the client's intention that the request be
   idempotent is fulfilled (although there is diagnostic value in that
   check, so a less-constrained implementation may want to perform it).

I think that this should give the guidance that is needed here.  Do you =
agree?

Gr=C3=BC=C3=9Fe, Carsten


> On 13 Oct 2016, at 20:15, Spencer Dawkins at IETF =
<spencerdawkins.ietf@gmail.com> wrote:
>=20
> Hi, Peter,
>=20
> On Oct 13, 2016 06:05, "Alexey Melnikov" <aamelnikov@fastmail.fm> =
wrote:
> >
> > Hi Peter,
> >
> > On Thu, Oct 13, 2016, at 11:43 AM, peter van der Stok wrote:
> > > Hi Spencer,
> > >
> > > Thanks for your DISCUSS; I will try to respond to it.
> > >
> > > There have been discussions in the WG about the utility of PATCH =
next to
> > > iPATCH.
> > > Good reasons were put forward to maintain both.
> > > Also the wish was expressed to only allow idem-potent requests and =
be
> > > able to implement iPATCH without the PATCH counterpart.
>=20
> This all makes sense to me, and I'm not challenging it.
>=20
> > > Sending a PATCH request to an iPATCH only server will result in a =
CoAP
> > > error 4.05 method not allowed
> > >
> > > If I understand correctly, your concern is a non-idempotent =
request sent
> > > to an iPATCH server.
> > >
> > > In section 3.4 there is text about server reactions to =
inappropriate
> > > payloads.
> > > In particular the response code: Unprocessable request applies:
> > > when processing the request makes the resource invalid.
> > > We might add (e.g. non idem-potent request to iPATCH)
> > >
> > > Does this answer your concern?
> >
> > Does this mean that a client that wants doesn't care about =
idempotency
> > of its request might need to try PATCH, then discover that it is not
> > supported and then retry iPATCH?
>=20
> What Alexey said, plus "and because we expect some servers will only =
support iPATCH, if a client doesn't retry with iPATCH, the client may =
fail to modify a resource that can be modified, but only using iPATCH".
>=20
> Is that clearer?
>=20
> Spencer
>=20
> > > Greetings,
> > >
> > > peter
> > >
> > >
> > > Spencer Dawkins schreef op 2016-10-12 18:00:
> > > > Spencer Dawkins has entered the following ballot position for
> > > > draft-ietf-core-etch-03: Discuss
> > > >
> > > > When responding, please keep the subject line intact and reply =
to all
> > > > email addresses included in the To and CC lines. (Feel free to =
cut this
> > > > introductory paragraph, however.)
> > > >
> > > >
> > > > Please refer to
> > > > https://www.ietf.org/iesg/statement/discuss-criteria.html
> > > > for more information about IESG DISCUSS and COMMENT positions.
> > > >
> > > >
> > > > The document, along with other ballot positions, can be found =
here:
> > > > https://datatracker.ietf.org/doc/draft-ietf-core-etch/
> > > >
> > > >
> > > >
> > > > =
----------------------------------------------------------------------
> > > > DISCUSS:
> > > > =
----------------------------------------------------------------------
> > > >
> > > > I'm following most of your reasoning behind having the twin =
methods
> > > > PATCH
> > > > and iPATCH, but I'm struggling a bit that there's nothing that I =
saw
> > > > that
> > > > prevents a problem when the client implements only PATCH and the =
server
> > > > implements only iPATCH.
> > > >
> > > > The only text I saw that provides guidance about which method to
> > > > implement is
> > > >
> > > >    A client can mark a request as idempotent by using the iPATCH =
method
> > > >    instead of the PATCH method.  This is the only difference =
between
> > > > the
> > > >    two.  The indication of idempotence may enable the server to =
keep
> > > >    less state about the interaction; some constrained servers =
may only
> > > >    implement the iPATCH variant for this reason.
> > > >
> > > > Maybe I missed something?
> > > >
> > > > If not, I saw
> > > >
> > > >    There is no guarantee that a resource can be modified with =
PATCH or
> > > >    iPATCH.
> > > >
> > > > so, maybe that mismatch isn't going to be a problem in practice, =
but it
> > > > seems sad that you might have a patchable resource, that can't =
be
> > > > patched
> > > > because of that mismatch.
> > > >
> > > > I'm not asking for "clients MUST implement iPATCH if you =
implement
> > > > PATCH"
> > > > (which would accommodate servers that only implement iPATCH), =
but I
> > > > wonder if the working group talked about a way to avoid this =
mismatch?
> > > >
> > > >
> > > > =
----------------------------------------------------------------------
> > > > COMMENT:
> > > > =
----------------------------------------------------------------------
> > > >
> > > > I was a bit uneasy with the "nearly" in
> > > >
> > > >    The security considerations for PATCH or iPATCH are nearly =
identical
> > > >    to the security considerations for PUT ([RFC7252]).
> > > >
> > > > with no explanation of any differences, but I'll leave that for =
the SEC
> > > > ADs to pick up on if it matters.
> > > >
> > > >
> > > > _______________________________________________
> > > > core mailing list
> > > > core@ietf.org
> > > > https://www.ietf.org/mailman/listinfo/core
> > >
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Sun Nov 13 17:39:07 2016
Return-Path: <michaeljohnkoster@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D074129474; Sun, 13 Nov 2016 17:39:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level: 
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o8IYEshOw8Ic; Sun, 13 Nov 2016 17:39:04 -0800 (PST)
Received: from mail-pg0-x244.google.com (mail-pg0-x244.google.com [IPv6:2607:f8b0:400e:c05::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 853B112948D; Sun, 13 Nov 2016 17:39:04 -0800 (PST)
Received: by mail-pg0-x244.google.com with SMTP id p66so7550778pga.2; Sun, 13 Nov 2016 17:39:04 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=NrHXJdspdTLcLmeIzaFvLXz1L05r0t2sE1DqZtXcCpA=; b=q+qJ/sUlDjLqBzNAuLWesCELeLq9XKWlsElUWZl9bNQM8mmOYxobvGtJf6nVVcuBBy rPucMfHo0yF7EuXIIj/1y3LAaH0FJESfZTYu4EC/QX+zjDJW43aj0bV/SC1QSHRBNFYY 2jmNLRtlQng/jZ2sapJKqmc1AgapagcTbPNpJQolDDhQD6lqTHSd03gBth8w8M8skFh3 n2eSddXAle8E8nypTclq3LWI8QKS50eB8e6ur+e1FWvIUD+JMJ3xH8FJ0uflmXjiu7X4 YVCvsbK3Wdy4q6mpL7af1wBRIRIZDuhPJ/FkfVj7cNe/Y7kZ0mUMrHpn96mOqMOtdshT uf8g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=NrHXJdspdTLcLmeIzaFvLXz1L05r0t2sE1DqZtXcCpA=; b=L+5tbKq9HI28c8/nvCIhfmRw7odKanVdLqFoosN70dtyempRvldWeHp9CbVJQX9V4C 4YFYl3IP/nmBeoRol0q4u/4znplZ8Kp7WNwa29zjZslx+hnHoH/EE83l9XUgsWP1154e GNu3Ynj4S7jufB1aTkwABlRzPWWTUhbExOluP1qbmfiv79y95LiuMmLOwQHwaKTpStbh I904/yNVui7XIAc6UEsP6InCwL6BfnDE7zZLHoJIFSTiVLxBUj21RyzXB9QAiUVyU9jv nLnDbDGWBk1w/6Jg5RVhpc28sctIlm3ap8iD58le09xBYATeydg9GGu5aZ6dkv+Rg9FK UjCQ==
X-Gm-Message-State: ABUngvdro3IaItley5uoGVr8yAxEyoIqbEXDP3Ygv8/bmSIOCtk5iVwomkrwiQWcfdX4/Q==
X-Received: by 10.98.138.72 with SMTP id y69mr30966510pfd.52.1479087544120; Sun, 13 Nov 2016 17:39:04 -0800 (PST)
Received: from [172.20.3.22] ([183.102.9.2]) by smtp.gmail.com with ESMTPSA id n2sm30527929pfa.75.2016.11.13.17.39.02 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 13 Nov 2016 17:39:03 -0800 (PST)
Content-Type: multipart/alternative; boundary="Apple-Mail=_29E19B2A-7E82-4179-9ACE-6340C530D61E"
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Michael Koster <michaeljohnkoster@gmail.com>
In-Reply-To: <7a8be541c4221523f0f6606d2b06164f@xs4all.nl>
Date: Mon, 14 Nov 2016 10:38:59 +0900
Message-Id: <DE0833C6-456A-480C-98C7-3633605E684B@gmail.com>
References: <CDE6F224-7A6A-4F89-9E5C-E46AC9FACA35@ericsson.com> <7a8be541c4221523f0f6606d2b06164f@xs4all.nl>
To: consultancy@vanderstok.org
X-Mailer: Apple Mail (2.2104)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/o5t5tNq9xbSwQXYQcmuZMQa0x7g>
Cc: draft-koster-core-coap-pubsub@ietf.org, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_Working_Group_Adoption_of_draft-kos?= =?utf-8?q?ter-core-coap-pubsub?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:39:06 -0000

--Apple-Mail=_29E19B2A-7E82-4179-9ACE-6340C530D61E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Hi Peter,

Sorry I apparently missed this email from months ago.=20

Replies in line.

> On Aug 30, 2016, at 7:34 PM, peter van der Stok <stokcons@xs4all.nl> =
wrote:
>=20
> Hi Michael,
>=20
> I do support the draft, but have some questions after a first reading.
>=20
> section 4 before 4.1; the operations are the functions?

We intended to remove all of the "function set" references. This one =
will be removed as well.=20
>=20
> In the discover section 4.1 the base location /ps is nowhere returned, =
only in the example this becomes clear.
> Is this base /ps compulsory?
> In the resource directory the base location is returned and the value =
/rd is recommended.
> Would it not be better to recommend the value /ps here as well?

Yes, as per the above statement

> Does the resource type core.ps need to be declared to IANA?
>=20
         ps :=3D   pubsub Function Set path (optional).  The path of the
         pubsub Function Set, as obtained from discovery, used to
         discover topics.
Apparently this is not clear.=20

It is meant to work exactly the same as in RD.=20

I will rewrite this and make it read like the equivalent section in RD.

Also:
9.  IANA Considerations

   This document registers one attribute value in the Resource Type
   (rt=3D) registry established with [RFC6690] and appends to the
   definition of one CoAP Response Code in the CoRE Parameters Registry.

9.1.  Resource Type value 'core.ps'

   o  Attribute Value: core.ps

   o  Description: Section 4 of [[This document]]

   o  Reference: [[This document]]

   o  Notes: None
It's there in the draft...

> The concept of "link to it's pubsub function set" is a bit complex for =
me; why not write /.well-known/core and /ps
> Otherwise I recommend to introduce the "link to the pubsub function =
set" in section 2.
>=20

It's the same as RD. I guess the "function set" thing is whats =
confusing? we will remove it.

Thanks for pointing this out

> In section 4.2 Create.
> If I understand correctly, "CREATE" <topic> creates a resource at the =
broker with path name /ps/topic
> Why not describe it like that?
>=20
OK, we can be more clear about topics being resources.
=20
> I do have problems with understanding what the value of the created =
resource is.
> Is that a list of messages, or is that a set of named values described =
in the messages.
> That is important to understand the most recent published value of a =
topic.
> The content format of a the messages belonging to a topic is =
specified, but its contents is free.
>=20
> Suppose a topic uses content formats application/json and =
application/merge-patch+json
>=20
> Suppose two messages arrive at the broker
> First message: application/json with {"name" : "topic1", "value" : 10}
> Second message: application/merge-patch+json with {"name" : "topic2"}
>=20
>=20
> The content of the  last message to subscribers is clear; but what =
does the READ return; Should that be {"name" : "topic2", "value" : 10}
> or {"name" : "topic2"}, or both messages?
>=20
> The answer is important with respect to section 6.
>=20
> My personal preference is that the value of a pubsub resource is a set =
of messages.
>=20
Thanks for asking this; it's a key clarification point!

The client MUST indicate the
   desired content format for publishes to the topic by using the ct
   (Content Format) link attribute in the link-format payload.

This should be clarified. How about this:

- A topic may support more than one content format. The statement above =
needs to allow repeating the "ct" link attribute for multiple values.

- The content of a topic resource on a pubsub broker is a list of =
payloads and their published content formats.=20

- The outgoing message is formatted according to the subscription =
request, which is an CoAP Observe.=20

- A client may subscribe using fetch, and may use query parameters to =
filter notifications by content format.

- The subscription request (CoAP Observe) may indicate which content =
format it will accept, and the broker (CoAP Server) is expected to =
comply.

- If a client wishes to receive more than one content format, it must =
indicate this in the accept header.

- Payloads using a content format not accepted by the client must not be =
sent to the client.

Thanks for pointing these out, and sorry again for the missed response =
the first time.

Best regards,

Michael




--Apple-Mail=_29E19B2A-7E82-4179-9ACE-6340C530D61E
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=us-ascii

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D"">Hi Peter,<div class=3D""><br class=3D""></div><div =
class=3D"">Sorry I apparently missed this email from months =
ago.&nbsp;</div><div class=3D""><br class=3D""></div><div =
class=3D"">Replies in line.</div><div class=3D""><br class=3D""></div><div=
 class=3D""><div><blockquote type=3D"cite" class=3D""><div class=3D"">On =
Aug 30, 2016, at 7:34 PM, peter van der Stok &lt;<a =
href=3D"mailto:stokcons@xs4all.nl" class=3D"">stokcons@xs4all.nl</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D"">Hi =
Michael,<br class=3D""><br class=3D"">I do support the draft, but have =
some questions after a first reading.<br class=3D""><br class=3D"">section=
 4 before 4.1; the operations are the functions?<br =
class=3D""></div></blockquote><div><br class=3D""></div>We intended to =
remove all of the "function set" references. This one will be removed as =
well.&nbsp;<br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D""><br class=3D"">In the discover section 4.1 the base location =
/ps is nowhere returned, only in the example this becomes clear.<br =
class=3D"">Is this base /ps compulsory?<br class=3D"">In the resource =
directory the base location is returned and the value /rd is =
recommended.<br class=3D"">Would it not be better to recommend the value =
/ps here as well?<br class=3D""></div></blockquote><div><br =
class=3D""></div>Yes, as per the above statement</div><div><br =
class=3D""><blockquote type=3D"cite" class=3D""><div class=3D"">Does the =
resource type core.ps need to be declared to IANA?<br class=3D""><br =
class=3D""></div></blockquote><pre style=3D"box-sizing: border-box; =
overflow: auto; font-family: 'PT Mono', Monaco, monospace; font-size: =
14px; padding: 10px; margin-top: 0px; margin-bottom: 10.5px; =
line-height: 1.214; word-break: break-all; word-wrap: break-word; =
background-color: rgb(255, 253, 245); border: 1px solid rgb(204, 204, =
204); border-top-left-radius: 4px; border-top-right-radius: 4px; =
border-bottom-right-radius: 4px; border-bottom-left-radius: 4px; =
orphans: 2; widows: 2;" class=3D"">         ps :=3D   pubsub Function =
Set path (optional).  The path of the
         pubsub Function Set, as obtained from discovery, used to
         discover topics.
</pre><div class=3D"">Apparently this is not clear.&nbsp;</div><div =
class=3D""><br class=3D""></div><div class=3D"">It is meant to work =
exactly the same as in RD.&nbsp;</div><div class=3D""><br =
class=3D""></div><div class=3D"">I will rewrite this and make it read =
like the equivalent section in RD.</div><div class=3D""><br =
class=3D""></div><div class=3D"">Also:</div><div class=3D""><pre =
style=3D"box-sizing: border-box; overflow: auto; font-family: 'PT Mono', =
Monaco, monospace; font-size: 14px; padding: 10px; margin-top: 0px; =
margin-bottom: 10.5px; line-height: 1.214; word-break: break-all; =
word-wrap: break-word; background-color: rgb(255, 253, 245); border: 1px =
solid rgb(204, 204, 204); border-top-left-radius: 4px; =
border-top-right-radius: 4px; border-bottom-right-radius: 4px; =
border-bottom-left-radius: 4px; orphans: 2; widows: 2;" class=3D""><span =
class=3D"m_h" style=3D"box-sizing: border-box;">9.  IANA =
Considerations</span>

   This document registers one attribute value in the Resource Type
   (rt=3D) registry established with [RFC6690] and appends to the
   definition of one CoAP Response Code in the CoRE Parameters Registry.

<span class=3D"m_h" style=3D"box-sizing: border-box;">9.1.  Resource =
Type value 'core.ps'</span>

   o  Attribute Value: core.ps

   o  Description: Section 4 of [[This document]]

   o  Reference: [[This document]]

   o  Notes: None
</pre></div><div class=3D"">It's there in the draft...</div><div =
class=3D""><br class=3D""></div><blockquote type=3D"cite" class=3D""><div =
class=3D"">The concept of "link to it's pubsub function set" is a bit =
complex for me; why not write /.well-known/core and /ps<br =
class=3D"">Otherwise I recommend to introduce the "link to the pubsub =
function set" in section 2.<br class=3D""><br =
class=3D""></div></blockquote><div><br class=3D""></div>It's the same as =
RD. I guess the "function set" thing is whats confusing? we will remove =
it.</div><div><br class=3D""></div><div>Thanks for pointing this =
out</div><div><br class=3D""><blockquote type=3D"cite" class=3D""><div =
class=3D"">In section 4.2 Create.<br class=3D"">If I understand =
correctly, "CREATE" &lt;topic&gt; creates a resource at the broker with =
path name /ps/topic<br class=3D"">Why not describe it like that?<br =
class=3D""><br class=3D""></div></blockquote>OK, we can be more clear =
about topics being resources.</div><div>&nbsp;<br class=3D""><blockquote =
type=3D"cite" class=3D""><div class=3D"">I do have problems with =
understanding what the value of the created resource is.<br class=3D"">Is =
that a list of messages, or is that a set of named values described in =
the messages.<br class=3D"">That is important to understand the most =
recent published value of a topic.<br class=3D"">The content format of a =
the messages belonging to a topic is specified, but its contents is =
free.<br class=3D""><br class=3D"">Suppose a topic uses content formats =
application/json and application/merge-patch+json<br class=3D""><br =
class=3D"">Suppose two messages arrive at the broker<br class=3D"">First =
message: application/json with {"name" : "topic1", "value" : 10}<br =
class=3D"">Second message: application/merge-patch+json with {"name" : =
"topic2"}<br class=3D""><br class=3D""><br class=3D"">The content of the =
&nbsp;last message to subscribers is clear; but what does the READ =
return; Should that be {"name" : "topic2", "value" : 10}<br class=3D"">or =
{"name" : "topic2"}, or both messages?<br class=3D""><br class=3D"">The =
answer is important with respect to section 6.<br class=3D""><br =
class=3D"">My personal preference is that the value of a pubsub resource =
is a set of messages.<br class=3D""><br =
class=3D""></div></blockquote>Thanks for asking this; it's a key =
clarification point!</div><div><br class=3D""></div><div><pre =
style=3D"box-sizing: border-box; overflow: auto; font-family: 'PT Mono', =
Monaco, monospace; font-size: 14px; padding: 10px; margin-top: 0px; =
margin-bottom: 10.5px; line-height: 1.214; word-break: break-all; =
word-wrap: break-word; background-color: rgb(255, 253, 245); border: 1px =
solid rgb(204, 204, 204); border-top-left-radius: 4px; =
border-top-right-radius: 4px; border-bottom-right-radius: 4px; =
border-bottom-left-radius: 4px; orphans: 2; widows: 2;" class=3D"">The =
client MUST indicate the
   desired content format for publishes to the topic by using the ct
   (Content Format) link attribute in the link-format payload.</pre><div =
class=3D""><br class=3D""></div><div class=3D"">This should be =
clarified. How about this:</div><div class=3D""><br class=3D""></div><div =
class=3D"">- A topic may support more than one content format. The =
statement above needs to allow repeating the "ct" link attribute for =
multiple values.</div><div class=3D""><br class=3D""></div><div =
class=3D""><div class=3D""><div>- The content of a topic resource on a =
pubsub broker is a list of payloads and their published content =
formats.&nbsp;</div></div></div><div class=3D""><br =
class=3D""></div></div><div>- The outgoing message is formatted =
according to the subscription request, which is an CoAP =
Observe.&nbsp;</div><div><br class=3D""></div><div>- A client may =
subscribe using fetch, and may use query parameters to filter =
notifications by content format.</div><div><br class=3D""></div><div>- =
The subscription request (CoAP Observe) may indicate which content =
format it will accept, and the broker (CoAP Server) is expected to =
comply.</div><div><br class=3D""></div><div>- If a client wishes to =
receive more than one content format, it must indicate this in the =
accept header.</div><div><br class=3D""></div><div>- Payloads using a =
content format not accepted by the client must not be sent to the =
client.</div><div><br class=3D""></div><div>Thanks for pointing these =
out, and sorry again for the missed response the first =
time.</div><div><br class=3D""></div><div>Best regards,</div><div><br =
class=3D""></div><div>Michael</div><div><br class=3D""></div><div><br =
class=3D""></div><br class=3D""></div></body></html>=

--Apple-Mail=_29E19B2A-7E82-4179-9ACE-6340C530D61E--


From nobody Sun Nov 13 17:45:13 2016
Return-Path: <a@ackl.io>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8891C129426 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 17:45:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.619
X-Spam-Level: 
X-Spam-Status: No, score=-2.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MwbapfILz1XM for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 17:45:08 -0800 (PST)
Received: from relay4-d.mail.gandi.net (relay4-d.mail.gandi.net [217.70.183.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B07E31293EE for <core@ietf.org>; Sun, 13 Nov 2016 17:45:07 -0800 (PST)
Received: from t2001067c037001284d4f9d282a37a2bd.v6.meeting.ietf.org (t2001067c037001284d4f9d282a37a2bd.v6.meeting.ietf.org [IPv6:2001:67c:370:128:4d4f:9d28:2a37:a2bd]) (Authenticated sender: alex@ackl.io) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id 64669172095; Mon, 14 Nov 2016 02:45:03 +0100 (CET)
From: Alexander Pelov <a@ackl.io>
Message-Id: <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io>
Content-Type: multipart/alternative; boundary="Apple-Mail=_317DE321-4318-4436-B23E-C45D223A7902"
Mime-Version: 1.0 (Mac OS X Mail 10.0 \(3226\))
Date: Mon, 14 Nov 2016 10:45:02 +0900
In-Reply-To: <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com>
To: Andy Bierman <andy@yumaworks.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com>
X-Mailer: Apple Mail (2.3226)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/g2tS4diLvJO0JVp_OYN1qeYpmXE>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:45:11 -0000

--Apple-Mail=_317DE321-4318-4436-B23E-C45D223A7902
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

Dear Peter, Andy,

Excellent points, thanks for bringing this up!

A major difference between SIDs and MIBs is that we cannot allocate =
prefixes in SIDs (as is the case with MIB-OID). The system works =
perfectly well - it is just NOT feasible for IANA to allocate ranges to =
individual modules on a global scale. It=E2=80=99s also not feasible for =
developers/companies to ask IANA for individual allocations per module =
(and anything else boils down to what we=E2=80=99re currently doing).

The SID draft functions under a Two-tier registration system. IANA -> =
SDOs/Registrars -> Modules. IANA allocates chunks of IDs to other =
SDOs/registrars. A module is then registered by these third parties and =
the particular SIDs get assigned to the individual modules.

Note, that IANA can also register SIDs for individual modules, e.g. for =
all YANG modules published by the IETF. I would suppose the same policy =
could apply to other SDOs.

Hope that this clarifies the question.

Best,
Alexander



> Le 14 nov. 2016 =C3=A0 10:17, Andy Bierman <andy@yumaworks.com> a =
=C3=A9crit :
>=20
> Hi,
>=20
>=20
> One question to ask:  How many modules do we expect to have?
> How many objects do we expect to have?  In 30 years of writing MIB =
modules
> we have never even come close to a million objects. (Maybe 100,000?)
>=20
> A million modules, each with a million objects, would still be less =
than 40 bits.
> So why to we need complex range assignments and non-contiguous =
numbering
> within a module?  Presumably to preserve numbers and not waste them.
> But since the SID encoding is based on deltas, and the full SID is =
only used
> once per transaction, this does not seem to be a real concern.
>=20
>=20
> Andy
>=20
>=20
> On Sun, Nov 13, 2016 at 4:12 PM, peter van der Stok =
<stokcons@xs4all.nl <mailto:stokcons@xs4all.nl>> wrote:
> Dear YANG-SID authors,
>=20
> I want to propose a change to the allocation of SIDs.
> Currently, the SIDs are divided in ranges and prospective users can =
register a range with IANA.
> When the range is already assigned, they need to select a new not =
allocated range.
> I think that this will discourage many future SDOs who may want to use =
YANG + COMI. Many of these SDOs like to figure out the best number =
structure for their uses, and will be very disappointed when they cannot =
acquire the range. Actually, I believe, they will abandon the use of =
YANG + COMI.
>=20
> My proposal is to assign numbers to modules, and let IANA handle the =
module number registration as proposed for the SIDs. The assignment of =
SIDs to YANG identifiers, as proposed in the draft remains, the same. =
The difference is the complete freedom to choose the SIDs in any given =
module. The advantage is that all modules can pick their values from the =
small number range.
>=20
> The change is in the discovery and the structure of the resource path. =
In COMI I want to define another resource type called YANG module with =
name core.c.module. The discovery will return the path: =
/prefix/module-number-in-binary64. For example, with an empty prefix and =
for module 32, discovery will return /g. To retrieve a specific YANG =
instance with numeric identifier sid in module 32, the statement GET =
coap/example.com/g/sid <http://example.com/g/sid> will do. With two =
characters, modules with numbers < 4096 are covered; probably 3 =
characters will cover all modules.  Given that the SIDs are small, the =
total URI size will not increase due to this modification.
>=20
> When the full datastore is accessed, the path /c is currently used. We =
can reserve c, meaning module number 28 is already assigned. Another =
method is returning a long path name, such as /whole_store. The size of =
the related URI is not important in this case. However, the proposed =
module allocation necessitates a small modification to the CBOR =
representation of the contents of the full datastore. This is attained =
by representing the full datastore as a CBOR map containing (key, value) =
pairs, where key is the module number and value is the content of the =
module as specified in yang-cbor document.
>=20
> For the PATCH and the FETCH methods, this representation will also =
work, given the content-formats that are currently looked at.
>=20
> I hope you like my proposal. The advantage is a simpler IANA =
administration, SID allocation freedom within a module, and shorter =
SIDs. The disadvantage is a slight complexity increase in the CBOR =
representation of the full datastore.
>=20
> Hope this helps,
>=20
> Peter
>=20
>=20
> --=20
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org <mailto:consultancy@vanderstok.org>
> www: www.vanderstok.org <http://www.vanderstok.org/>
> tel NL: +31(0)492474673     F: +33(0)966015248
>=20
> _______________________________________________
> core mailing list
> core@ietf.org <mailto:core@ietf.org>
> https://www.ietf.org/mailman/listinfo/core =
<https://www.ietf.org/mailman/listinfo/core>
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


--Apple-Mail=_317DE321-4318-4436-B23E-C45D223A7902
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D"">Dear Peter, Andy,<div class=3D""><br class=3D""></div><div =
class=3D"">Excellent points, thanks for bringing this up!</div><div =
class=3D""><br class=3D""></div><div class=3D"">A major difference =
between SIDs and MIBs is that we cannot allocate prefixes in SIDs (as is =
the case with MIB-OID). The system works perfectly well - it is just NOT =
feasible for IANA to allocate ranges to individual modules on a global =
scale. It=E2=80=99s also not feasible for developers/companies to ask =
IANA for individual allocations per module (and anything else boils down =
to what we=E2=80=99re currently doing).</div><div class=3D""><br =
class=3D""></div><div class=3D"">The SID draft functions under a =
Two-tier registration system. IANA -&gt; SDOs/Registrars -&gt; Modules. =
IANA allocates chunks of IDs to other SDOs/registrars. A module is then =
registered by these third parties and the particular SIDs get assigned =
to the individual modules.</div><div class=3D""><br class=3D""></div><div =
class=3D"">Note, that IANA can also register SIDs for individual =
modules, e.g. for all YANG modules published by the IETF. I would =
suppose the same policy could apply to other SDOs.</div><div =
class=3D""><br class=3D""></div><div class=3D"">Hope that this clarifies =
the question.</div><div class=3D""><br class=3D""></div><div =
class=3D"">Best,</div><div class=3D"">Alexander</div><div class=3D""><br =
class=3D""></div><div class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""><div><blockquote type=3D"cite" class=3D""><div class=3D"">Le =
14 nov. 2016 =C3=A0 10:17, Andy Bierman &lt;<a =
href=3D"mailto:andy@yumaworks.com" class=3D"">andy@yumaworks.com</a>&gt; =
a =C3=A9crit :</div><br class=3D"Apple-interchange-newline"><div =
class=3D""><div dir=3D"ltr" class=3D"">Hi,<div class=3D""><br =
class=3D""></div><div class=3D""><br class=3D""></div><div class=3D"">One =
question to ask: &nbsp;How many modules do we expect to have?</div><div =
class=3D"">How many objects do we expect to have?&nbsp; In 30 years of =
writing MIB modules</div><div class=3D"">we have never even come close =
to a million objects. (Maybe 100,000?)</div><div class=3D""><br =
class=3D""></div><div class=3D"">A million modules, each with a million =
objects, would still be less than 40 bits.</div><div class=3D"">So why =
to we need complex range assignments and non-contiguous =
numbering</div><div class=3D"">within a module?&nbsp; Presumably to =
preserve numbers and not waste them.</div><div class=3D"">But since the =
SID encoding is based on deltas, and the full SID is only used</div><div =
class=3D"">once per transaction, this does not seem to be a real =
concern.</div><div class=3D""><br class=3D""></div><div class=3D""><br =
class=3D""></div><div class=3D"">Andy</div><div class=3D""><br =
class=3D""></div></div><div class=3D"gmail_extra"><br class=3D""><div =
class=3D"gmail_quote">On Sun, Nov 13, 2016 at 4:12 PM, peter van der =
Stok <span dir=3D"ltr" class=3D"">&lt;<a =
href=3D"mailto:stokcons@xs4all.nl" target=3D"_blank" =
class=3D"">stokcons@xs4all.nl</a>&gt;</span> wrote:<br =
class=3D""><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex">Dear YANG-SID =
authors,<br class=3D"">
<br class=3D"">
I want to propose a change to the allocation of SIDs.<br class=3D"">
Currently, the SIDs are divided in ranges and prospective users can =
register a range with IANA.<br class=3D"">
When the range is already assigned, they need to select a new not =
allocated range.<br class=3D"">
I think that this will discourage many future SDOs who may want to use =
YANG + COMI. Many of these SDOs like to figure out the best number =
structure for their uses, and will be very disappointed when they cannot =
acquire the range. Actually, I believe, they will abandon the use of =
YANG + COMI.<br class=3D"">
<br class=3D"">
My proposal is to assign numbers to modules, and let IANA handle the =
module number registration as proposed for the SIDs. The assignment of =
SIDs to YANG identifiers, as proposed in the draft remains, the same. =
The difference is the complete freedom to choose the SIDs in any given =
module. The advantage is that all modules can pick their values from the =
small number range.<br class=3D"">
<br class=3D"">
The change is in the discovery and the structure of the resource path. =
In COMI I want to define another resource type called YANG module with =
name core.c.module. The discovery will return the path: =
/prefix/module-number-in-binar<wbr class=3D"">y64. For example, with an =
empty prefix and for module 32, discovery will return /g. To retrieve a =
specific YANG instance with numeric identifier sid in module 32, the =
statement GET coap/<a href=3D"http://example.com/g/sid" rel=3D"noreferrer"=
 target=3D"_blank" class=3D"">example.com/g/sid</a> will do. With two =
characters, modules with numbers &lt; 4096 are covered; probably 3 =
characters will cover all modules.&nbsp; Given that the SIDs are small, =
the total URI size will not increase due to this modification.<br =
class=3D"">
<br class=3D"">
When the full datastore is accessed, the path /c is currently used. We =
can reserve c, meaning module number 28 is already assigned. Another =
method is returning a long path name, such as /whole_store. The size of =
the related URI is not important in this case. However, the proposed =
module allocation necessitates a small modification to the CBOR =
representation of the contents of the full datastore. This is attained =
by representing the full datastore as a CBOR map containing (key, value) =
pairs, where key is the module number and value is the content of the =
module as specified in yang-cbor document.<br class=3D"">
<br class=3D"">
For the PATCH and the FETCH methods, this representation will also work, =
given the content-formats that are currently looked at.<br class=3D"">
<br class=3D"">
I hope you like my proposal. The advantage is a simpler IANA =
administration, SID allocation freedom within a module, and shorter =
SIDs. The disadvantage is a slight complexity increase in the CBOR =
representation of the full datastore.<br class=3D"">
<br class=3D"">
Hope this helps,<br class=3D"">
<br class=3D"">
Peter<span class=3D"HOEnZb"><font color=3D"#888888" class=3D""><br =
class=3D"">
<br class=3D"">
<br class=3D"">
-- <br class=3D"">
Peter van der Stok<br class=3D"">
vanderstok consultancy<br class=3D"">
mailto: <a href=3D"mailto:consultancy@vanderstok.org" target=3D"_blank" =
class=3D"">consultancy@vanderstok.org</a><br class=3D"">
www: <a href=3D"http://www.vanderstok.org/" rel=3D"noreferrer" =
target=3D"_blank" class=3D"">www.vanderstok.org</a><br class=3D"">
tel NL: +31(0)492474673&nbsp; &nbsp; &nbsp;F: +33(0)966015248<br =
class=3D"">
<br class=3D"">
______________________________<wbr class=3D"">_________________<br =
class=3D"">
core mailing list<br class=3D"">
<a href=3D"mailto:core@ietf.org" target=3D"_blank" =
class=3D"">core@ietf.org</a><br class=3D"">
<a href=3D"https://www.ietf.org/mailman/listinfo/core" rel=3D"noreferrer" =
target=3D"_blank" class=3D"">https://www.ietf.org/mailman/l<wbr =
class=3D"">istinfo/core</a><br class=3D"">
</font></span></blockquote></div><br class=3D""></div>
_______________________________________________<br class=3D"">core =
mailing list<br class=3D""><a href=3D"mailto:core@ietf.org" =
class=3D"">core@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/core<br =
class=3D""></div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_317DE321-4318-4436-B23E-C45D223A7902--


From nobody Sun Nov 13 17:58:42 2016
Return-Path: <andy@yumaworks.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA0C71295F0 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 17:58:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c6fhCIe5ZSN7 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 17:58:39 -0800 (PST)
Received: from mail-ua0-x22e.google.com (mail-ua0-x22e.google.com [IPv6:2607:f8b0:400c:c08::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F116129474 for <core@ietf.org>; Sun, 13 Nov 2016 17:58:39 -0800 (PST)
Received: by mail-ua0-x22e.google.com with SMTP id 20so52863564uak.0 for <core@ietf.org>; Sun, 13 Nov 2016 17:58:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=9kZAGaZ6eok7Nfy89btK/KzV/n4rgXj5Cj0Q/+Jafr4=; b=1Us3GRLgHVU2hBkFVeHuwoh/L4vUI2elU+NvGnBphcQt3t4/b1ujkIpg3Ps3RpSh+U 9HZrpH91ljbajUsiYavbXDXWA0pZSFVrv1rh3LRcQCY/3fZw3iyqOLADEuofyOJAVqcP Yhf6OynJ/49WtreK5IXK7aCufq92fz/3vSmHL4GZuXSPQxpMkW5rADxNx+8Bg2yQAII0 +GUWyCv1rhMAauupOqzyN/GPTMFrUqDRNEOw27sFoosgkNAkASYpWJ6c6tvI0hA/9RCY oMuU/lee3Gr3eAyqIoThWKGzQ7ief8De2akWYC3CXDFmv2umT0uT5ywoEy6N827RnGrc BpQw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=9kZAGaZ6eok7Nfy89btK/KzV/n4rgXj5Cj0Q/+Jafr4=; b=emetgJ8jyzgx2HrOQ/2apdO6CcEt5HX6fltbkQ0VZxCSmOVRtXAKeYAKF8NN/0lF0l aZ//Mf2CC6ebzecuOYJMfrmQRLSUSjD6Bq/fWKXlnP10JW/PUuxJQteJ0wVeRKClT5G+ aZJawFc7IeMUMlnY9hRWF1VGzkvLrMAg/es450TLPHSvSb5dd+BtxuR2vVd4roRKrPqX 9NuKdcvyVkWybYJy1cIaNpEmE8MLs3FZFp6k/egv7bLAp5bHuyfn0DlusEY61GzXIaEw 3dPtNCLiy0zTD7WLVKAHphjK4YhZ9bgiG7U/rh0ARxZ8JZwzq5pq1/GhnbfwudeIMFVJ AzvA==
X-Gm-Message-State: ABUngvcb4QDwDL7H+VVtmwC2M7jvZqUjdSESU/vyrqm7DiJ3/BnMkOSTEhtytNLeu1AbSZ/puo9NSS1P1otFEg==
X-Received: by 10.159.49.75 with SMTP id n11mr8329263uab.133.1479088718338; Sun, 13 Nov 2016 17:58:38 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.64.129 with HTTP; Sun, 13 Nov 2016 17:58:37 -0800 (PST)
In-Reply-To: <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com> <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io>
From: Andy Bierman <andy@yumaworks.com>
Date: Sun, 13 Nov 2016 17:58:37 -0800
Message-ID: <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com>
To: Alexander Pelov <a@ackl.io>
Content-Type: multipart/alternative; boundary=f403045e2458a5f3be0541392db3
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/C-rP_iLCWQY9dh1i7LB4u13QcPM>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 01:58:42 -0000

--f403045e2458a5f3be0541392db3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Sun, Nov 13, 2016 at 5:45 PM, Alexander Pelov <a@ackl.io> wrote:

> Dear Peter, Andy,
>
> Excellent points, thanks for bringing this up!
>
> A major difference between SIDs and MIBs is that we cannot allocate
> prefixes in SIDs (as is the case with MIB-OID). The system works perfectl=
y
> well - it is just NOT feasible for IANA to allocate ranges to individual
> modules on a global scale. It=E2=80=99s also not feasible for developers/=
companies
> to ask IANA for individual allocations per module (and anything else boil=
s
> down to what we=E2=80=99re currently doing).
>


You want to manually manage ranges.  Why?

Why not allocate module-ids with a fixed range of objects within a module?

e.g.,32 bits for modules,  20 bits for objects --> module ID 1 has objects
0x100000 to 0x1fffff.

What evidence do you have that we need more than 4 billion modules,
each with up to 1 million objects?

There is no operational experience with SIDs but there is plenty with
managed objects
in general.

Andy



>
> The SID draft functions under a Two-tier registration system. IANA ->
> SDOs/Registrars -> Modules. IANA allocates chunks of IDs to other
> SDOs/registrars. A module is then registered by these third parties and t=
he
> particular SIDs get assigned to the individual modules.
>
> Note, that IANA can also register SIDs for individual modules, e.g. for
> all YANG modules published by the IETF. I would suppose the same policy
> could apply to other SDOs.
>
> Hope that this clarifies the question.
>
> Best,
> Alexander
>
>
>
> Le 14 nov. 2016 =C3=A0 10:17, Andy Bierman <andy@yumaworks.com> a =C3=A9c=
rit :
>
> Hi,
>
>
> One question to ask:  How many modules do we expect to have?
> How many objects do we expect to have?  In 30 years of writing MIB module=
s
> we have never even come close to a million objects. (Maybe 100,000?)
>
> A million modules, each with a million objects, would still be less than
> 40 bits.
> So why to we need complex range assignments and non-contiguous numbering
> within a module?  Presumably to preserve numbers and not waste them.
> But since the SID encoding is based on deltas, and the full SID is only
> used
> once per transaction, this does not seem to be a real concern.
>
>
> Andy
>
>
> On Sun, Nov 13, 2016 at 4:12 PM, peter van der Stok <stokcons@xs4all.nl>
> wrote:
>
>> Dear YANG-SID authors,
>>
>> I want to propose a change to the allocation of SIDs.
>> Currently, the SIDs are divided in ranges and prospective users can
>> register a range with IANA.
>> When the range is already assigned, they need to select a new not
>> allocated range.
>> I think that this will discourage many future SDOs who may want to use
>> YANG + COMI. Many of these SDOs like to figure out the best number
>> structure for their uses, and will be very disappointed when they cannot
>> acquire the range. Actually, I believe, they will abandon the use of YAN=
G +
>> COMI.
>>
>> My proposal is to assign numbers to modules, and let IANA handle the
>> module number registration as proposed for the SIDs. The assignment of S=
IDs
>> to YANG identifiers, as proposed in the draft remains, the same. The
>> difference is the complete freedom to choose the SIDs in any given modul=
e.
>> The advantage is that all modules can pick their values from the small
>> number range.
>>
>> The change is in the discovery and the structure of the resource path. I=
n
>> COMI I want to define another resource type called YANG module with name
>> core.c.module. The discovery will return the path:
>> /prefix/module-number-in-binary64. For example, with an empty prefix and
>> for module 32, discovery will return /g. To retrieve a specific YANG
>> instance with numeric identifier sid in module 32, the statement GET coa=
p/
>> example.com/g/sid will do. With two characters, modules with numbers <
>> 4096 are covered; probably 3 characters will cover all modules.  Given t=
hat
>> the SIDs are small, the total URI size will not increase due to this
>> modification.
>>
>> When the full datastore is accessed, the path /c is currently used. We
>> can reserve c, meaning module number 28 is already assigned. Another met=
hod
>> is returning a long path name, such as /whole_store. The size of the
>> related URI is not important in this case. However, the proposed module
>> allocation necessitates a small modification to the CBOR representation =
of
>> the contents of the full datastore. This is attained by representing the
>> full datastore as a CBOR map containing (key, value) pairs, where key is
>> the module number and value is the content of the module as specified in
>> yang-cbor document.
>>
>> For the PATCH and the FETCH methods, this representation will also work,
>> given the content-formats that are currently looked at.
>>
>> I hope you like my proposal. The advantage is a simpler IANA
>> administration, SID allocation freedom within a module, and shorter SIDs=
.
>> The disadvantage is a slight complexity increase in the CBOR representat=
ion
>> of the full datastore.
>>
>> Hope this helps,
>>
>> Peter
>>
>>
>> --
>> Peter van der Stok
>> vanderstok consultancy
>> mailto: consultancy@vanderstok.org
>> www: www.vanderstok.org
>> tel NL: +31(0)492474673     F: +33(0)966015248
>>
>> _______________________________________________
>> core mailing list
>> core@ietf.org
>> https://www.ietf.org/mailman/listinfo/core
>>
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>
>
>

--f403045e2458a5f3be0541392db3
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Sun, Nov 13, 2016 at 5:45 PM, Alexander Pelov <span dir=3D"ltr">&lt;=
<a href=3D"mailto:a@ackl.io" target=3D"_blank">a@ackl.io</a>&gt;</span> wro=
te:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-=
left:1px #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word">D=
ear Peter, Andy,<div><br></div><div>Excellent points, thanks for bringing t=
his up!</div><div><br></div><div>A major difference between SIDs and MIBs i=
s that we cannot allocate prefixes in SIDs (as is the case with MIB-OID). T=
he system works perfectly well - it is just NOT feasible for IANA to alloca=
te ranges to individual modules on a global scale. It=E2=80=99s also not fe=
asible for developers/companies to ask IANA for individual allocations per =
module (and anything else boils down to what we=E2=80=99re currently doing)=
.</div></div></blockquote><div><br></div><div><br></div><div>You want to ma=
nually manage ranges.=C2=A0 Why?</div><div><br></div><div>Why not allocate =
module-ids with a fixed range of objects within a module?</div><div><br></d=
iv><div>e.g.,32 bits for modules, =C2=A020 bits for objects --&gt; module I=
D 1 has objects 0x100000 to 0x1fffff.</div><div><br></div><div>What evidenc=
e do you have that we need more than 4 billion modules,</div><div>each with=
 up to 1 million objects?</div><div><br></div><div>There is no operational =
experience with SIDs but there is plenty with managed objects</div><div>in =
general. =C2=A0</div><div><br></div><div>Andy</div><div><br></div><div>=C2=
=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;borde=
r-left:1px #ccc solid;padding-left:1ex"><div style=3D"word-wrap:break-word"=
><div><br></div><div>The SID draft functions under a Two-tier registration =
system. IANA -&gt; SDOs/Registrars -&gt; Modules. IANA allocates chunks of =
IDs to other SDOs/registrars. A module is then registered by these third pa=
rties and the particular SIDs get assigned to the individual modules.</div>=
<div><br></div><div>Note, that IANA can also register SIDs for individual m=
odules, e.g. for all YANG modules published by the IETF. I would suppose th=
e same policy could apply to other SDOs.</div><div><br></div><div>Hope that=
 this clarifies the question.</div><div><br></div><div>Best,</div><div>Alex=
ander</div><div><br></div><div><br></div><div><br><div><blockquote type=3D"=
cite"><div>Le 14 nov. 2016 =C3=A0 10:17, Andy Bierman &lt;<a href=3D"mailto=
:andy@yumaworks.com" target=3D"_blank">andy@yumaworks.com</a>&gt; a =C3=A9c=
rit :</div><br class=3D"m_-7982879849704364424Apple-interchange-newline"><d=
iv><div dir=3D"ltr">Hi,<div><br></div><div><br></div><div>One question to a=
sk: =C2=A0How many modules do we expect to have?</div><div>How many objects=
 do we expect to have?=C2=A0 In 30 years of writing MIB modules</div><div>w=
e have never even come close to a million objects. (Maybe 100,000?)</div><d=
iv><br></div><div>A million modules, each with a million objects, would sti=
ll be less than 40 bits.</div><div>So why to we need complex range assignme=
nts and non-contiguous numbering</div><div>within a module?=C2=A0 Presumabl=
y to preserve numbers and not waste them.</div><div>But since the SID encod=
ing is based on deltas, and the full SID is only used</div><div>once per tr=
ansaction, this does not seem to be a real concern.</div><div><br></div><di=
v><br></div><div>Andy</div><div><br></div></div><div class=3D"gmail_extra">=
<br><div class=3D"gmail_quote">On Sun, Nov 13, 2016 at 4:12 PM, peter van d=
er Stok <span dir=3D"ltr">&lt;<a href=3D"mailto:stokcons@xs4all.nl" target=
=3D"_blank">stokcons@xs4all.nl</a>&gt;</span> wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">Dear YANG-SID authors,<br>
<br>
I want to propose a change to the allocation of SIDs.<br>
Currently, the SIDs are divided in ranges and prospective users can registe=
r a range with IANA.<br>
When the range is already assigned, they need to select a new not allocated=
 range.<br>
I think that this will discourage many future SDOs who may want to use YANG=
 + COMI. Many of these SDOs like to figure out the best number structure fo=
r their uses, and will be very disappointed when they cannot acquire the ra=
nge. Actually, I believe, they will abandon the use of YANG + COMI.<br>
<br>
My proposal is to assign numbers to modules, and let IANA handle the module=
 number registration as proposed for the SIDs. The assignment of SIDs to YA=
NG identifiers, as proposed in the draft remains, the same. The difference =
is the complete freedom to choose the SIDs in any given module. The advanta=
ge is that all modules can pick their values from the small number range.<b=
r>
<br>
The change is in the discovery and the structure of the resource path. In C=
OMI I want to define another resource type called YANG module with name cor=
e.c.module. The discovery will return the path: /prefix/module-number-in-bi=
nar<wbr>y64. For example, with an empty prefix and for module 32, discovery=
 will return /g. To retrieve a specific YANG instance with numeric identifi=
er sid in module 32, the statement GET coap/<a href=3D"http://example.com/g=
/sid" rel=3D"noreferrer" target=3D"_blank">example.com/g/sid</a> will do. W=
ith two characters, modules with numbers &lt; 4096 are covered; probably 3 =
characters will cover all modules.=C2=A0 Given that the SIDs are small, the=
 total URI size will not increase due to this modification.<br>
<br>
When the full datastore is accessed, the path /c is currently used. We can =
reserve c, meaning module number 28 is already assigned. Another method is =
returning a long path name, such as /whole_store. The size of the related U=
RI is not important in this case. However, the proposed module allocation n=
ecessitates a small modification to the CBOR representation of the contents=
 of the full datastore. This is attained by representing the full datastore=
 as a CBOR map containing (key, value) pairs, where key is the module numbe=
r and value is the content of the module as specified in yang-cbor document=
.<br>
<br>
For the PATCH and the FETCH methods, this representation will also work, gi=
ven the content-formats that are currently looked at.<br>
<br>
I hope you like my proposal. The advantage is a simpler IANA administration=
, SID allocation freedom within a module, and shorter SIDs. The disadvantag=
e is a slight complexity increase in the CBOR representation of the full da=
tastore.<br>
<br>
Hope this helps,<br>
<br>
Peter<span class=3D"m_-7982879849704364424HOEnZb"><font color=3D"#888888"><=
br>
<br>
<br>
-- <br>
Peter van der Stok<br>
vanderstok consultancy<br>
mailto: <a href=3D"mailto:consultancy@vanderstok.org" target=3D"_blank">con=
sultancy@vanderstok.org</a><br>
www: <a href=3D"http://www.vanderstok.org/" rel=3D"noreferrer" target=3D"_b=
lank">www.vanderstok.org</a><br>
tel NL: +31(0)492474673=C2=A0 =C2=A0 =C2=A0F: +33(0)966015248<br>
<br>
______________________________<wbr>_________________<br>
core mailing list<br>
<a href=3D"mailto:core@ietf.org" target=3D"_blank">core@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/core" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/l<wbr>istinfo/core</a><br>
</font></span></blockquote></div><br></div>
______________________________<wbr>_________________<br>core mailing list<b=
r><a href=3D"mailto:core@ietf.org" target=3D"_blank">core@ietf.org</a><br><=
a href=3D"https://www.ietf.org/mailman/listinfo/core" target=3D"_blank">htt=
ps://www.ietf.org/mailman/<wbr>listinfo/core</a><br></div></blockquote></di=
v><br></div></div></blockquote></div><br></div></div>

--f403045e2458a5f3be0541392db3--


From nobody Sun Nov 13 18:01:24 2016
Return-Path: <zhencao.ietf@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E00D01295F0 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 18:01:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id faSQOGxNINhy for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 18:01:21 -0800 (PST)
Received: from mail-vk0-x235.google.com (mail-vk0-x235.google.com [IPv6:2607:f8b0:400c:c05::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31BB6127058 for <core@ietf.org>; Sun, 13 Nov 2016 18:01:21 -0800 (PST)
Received: by mail-vk0-x235.google.com with SMTP id 137so53633861vkl.0 for <core@ietf.org>; Sun, 13 Nov 2016 18:01:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to;  bh=Jv0OyasMkaB8buLTYO4aLKMaPf9J/YlE8jDfEerPMqU=; b=UrR0DwWlUIq9XbHMAb/EYa9CyRvscCExjpiWMFBsZ6IJfoojDILKTFSvrxM1CkKhQP Xw8J7p0D8FgHLuDAWq3OeaoAFN/01tHFf/X6qXNHBdDqoRFCfaHJ7ebRwR0eCOrMOmrv aNZE2kaMBV6hlrxJPM6X7K5O45aHdu77pNZ2A4beVSd/D1x2zK2JcqTvdz0AG9LrGGD3 pDFHZTMl5+tS1lQwFXDdvX3wZTyeh1ZqR6AHvOt4e5gKKILIHUmCk3N68ZuGv8dWDBTW zueGAms6I/LOVKlD56YaMhkh2g0zIqpnlGMRShMr8wnbCTNVh/tvAsUieX6bNZMtN2EO BwGA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=Jv0OyasMkaB8buLTYO4aLKMaPf9J/YlE8jDfEerPMqU=; b=Svc0TBwxRw8/L3jgoqrOu1q5OdAkUJbyxlsKlHKm+sldGq70OIw97W/DXRdD5oDTQP Q8bMOJXoUz5aFMw0O6QaYpVa/YIun2SQfm5iePrfjKqAz/WimFGqC/cChgiZdASdtCTD ARZwz6E/P/pbtOuDSxgBCzvdMI6MNQWktICiEM/Wjy9tLVWR0OwMFQaGpCxCaJHt1oOB 0DwSJ/mWugii/2rrm4MFxrA3RWg0+t8czPIpJWjWDn9s9ZJg2ibO4YaF/U4yzfE+xmbX /U+m2ba7qrm8EYDHBH3CQgqLltJmiBo+z/CnioGkq7DDEj1tOEzogIqjqui++wQIZ2Vn 05NQ==
X-Gm-Message-State: ABUngvcMfJJveBpHWv6V3lTZ8W5SpmmGqb5m4DuGtLpQ+joV1X67j6hOU0Rm2W8nctuWf0s1D/bk7ZpPEZsDvQ==
X-Received: by 10.31.200.71 with SMTP id y68mr8747633vkf.115.1479088880060; Sun, 13 Nov 2016 18:01:20 -0800 (PST)
MIME-Version: 1.0
Received: by 10.176.81.252 with HTTP; Sun, 13 Nov 2016 18:01:19 -0800 (PST)
In-Reply-To: <147755820733.19004.16975897284050743537.idtracker@ietfa.amsl.com>
References: <147755820733.19004.16975897284050743537.idtracker@ietfa.amsl.com>
From: Zhen Cao <zhencao.ietf@gmail.com>
Date: Mon, 14 Nov 2016 10:01:19 +0800
Message-ID: <CAFxP68z844+ra1ZrHAzPYqOBA0ugqZJKHuhumzfg9NqY=MXQmg@mail.gmail.com>
To: "core@ietf.org WG" <core@ietf.org>
Content-Type: text/plain; charset=UTF-8
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-emsRTJmyyFHlrNwbJkqGfXQaYw>
Subject: [core] Fwd: New Version Notification for draft-cao-core-delegated-observe-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 02:01:23 -0000

Comments welcome.


---------- Forwarded message ----------
From:  <internet-drafts@ietf.org>
Date: Thu, Oct 27, 2016 at 4:50 PM
Subject: New Version Notification for draft-cao-core-delegated-observe-00.txt
To: Zhen Cao <zhencao.ietf@gmail.com>, Rahul Arvind Jadhav
<rahul.jadhav@huawei.com>



A new version of I-D, draft-cao-core-delegated-observe-00.txt
has been successfully submitted by Zhen Cao and posted to the
IETF repository.

Name:           draft-cao-core-delegated-observe
Revision:       00
Title:          CoAP Delegated Observe
Document date:  2016-10-27
Group:          Individual Submission
Pages:          8
URL:
https://www.ietf.org/internet-drafts/draft-cao-core-delegated-observe-00.txt
Status:
https://datatracker.ietf.org/doc/draft-cao-core-delegated-observe/
Htmlized:       https://tools.ietf.org/html/draft-cao-core-delegated-observe-00


Abstract:
   This document discusses the scenarios for "delegated observe", in
   which a subscriber needs to register some resources on behalf of some
   other entities.   This document also presents a CoAP protocol
   extension for the delegated observe operation.





Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


From nobody Sun Nov 13 18:12:16 2016
Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB64912956E; Sun, 13 Nov 2016 18:12:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TZWUoMx6ESCV; Sun, 13 Nov 2016 18:12:13 -0800 (PST)
Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D5531293EE; Sun, 13 Nov 2016 18:12:13 -0800 (PST)
Received: by mail-vk0-x233.google.com with SMTP id w194so53710215vkw.2; Sun, 13 Nov 2016 18:12:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1eeAYA1YAKYXuBbrcSLyALHi65oCLReAjltWsNTW1Zs=; b=nVUqFOjy3Bvmghmag6JBMRlEYZ+1o6GYULT7xOOiTWwH+67LWShCwrg1wF+0SXrLGK jFC0yRBjRc4gHgaIxFQRbGfuJdJvfpcXRFQ95a71FSIdZG00yoas2icq2zTFNYNlkUfU fqYS5ztZVgfXB4DLSknwTfzqtqUE/L1x0b716/vE0MLToML90quSgD1jH1M5LBfRyhc4 yKIUBzbWO5adT+ip+x6XAa16DZsDdKe95XPuNApbjtOf5JNI+GPijsQQTnJ6A5aLGPos wCrnAdj+ugUERweyE6HLy/o9MpacgRObbIavKMcCnWRqsk1AcWeuYov6GYiQ5m8GhpZr 7j4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1eeAYA1YAKYXuBbrcSLyALHi65oCLReAjltWsNTW1Zs=; b=CrlYLrbesebAJzPGiTqC46+Nn27FLhtaKv78Ssk7kwIZp62nKgwgvR0grAmNUf3yxE hEc7j2Schp3zgH3DZ6yfik1tv+i9FhyzHs9TyBq2FxjutaefJoy0eyJWlxehNN3q0da9 Ex9Ux8ODnrRLEh506klZtzqPu8JG5RbEdCrf+In4b8c563m0uCh7yNh1GTRtwtTKoClV KTfG/4t2Ujq4JzT4IUQFkp+bM+1/4QFZPQRH+6zqja0UiEmS/7bBE8k28FUIF2wlz93t F+R2NuuP6MxJkWNO7AMYazzGd0G6uZsSpJreGf+Bs7GXXCePM00E4/9wLFtKLqfsfpNM K9Aw==
X-Gm-Message-State: ABUngvfaOXqHCg+H7/lAVm3rawJwl3hLnbOPvMRf/+RIebns41Avs6bzUx1XkSvFqNPjuBkGy/zIJrY/sahmEQ==
X-Received: by 10.31.200.71 with SMTP id y68mr8764698vkf.115.1479089532652; Sun, 13 Nov 2016 18:12:12 -0800 (PST)
MIME-Version: 1.0
Received: by 10.176.82.143 with HTTP; Sun, 13 Nov 2016 18:12:12 -0800 (PST)
In-Reply-To: <FE31A588-BA82-48C6-A394-2F84FACACF12@tzi.org>
References: <147629362183.6297.18321888937912730256.idtracker@ietfa.amsl.com> <57FF3EC8.8080605@tzi.org> <CAHbuEH6Oj6ardD-Smx4=4YGt1RbcO_hK5Dfdz_iVJG1CE3KT+Q@mail.gmail.com> <FE31A588-BA82-48C6-A394-2F84FACACF12@tzi.org>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Sun, 13 Nov 2016 21:12:12 -0500
Message-ID: <CAHbuEH6TVj9TM702=LMMC7wn4hxQEyy5z0EF8i9i+eQxGq-ZqA@mail.gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Content-Type: multipart/alternative; boundary=001a114dc6582f52c00541395ec9
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/6j8PNRV2jH6SFV-UqDh1vf05kGQ>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, The IESG <iesg@ietf.org>, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Kathleen Moriarty's Discuss on draft-ietf-core-etch-03: (with DISCUSS)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 02:12:15 -0000

--001a114dc6582f52c00541395ec9
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi Carsten,

Thanks the text is better and I'll clear.  It doesn't cover the case of
data being altered on the patch where it is stored, but covers other
considerations now.

Thanks,
Kathleen

On Sun, Nov 13, 2016 at 8:23 PM, Carsten Bormann <cabo@tzi.org> wrote:

> Hi Kathleen,
>
> as you can see from https://www.ietf.org/rfcdiff?
> url2=3Ddraft-ietf-core-etch-04 we took this as an opportunity to clean up
> the security considerations section, and I think it is indeed better now.
> I hope the added detail answers your call for more specific information
> and that you can clear the DISCUSS.
>
> One point that we maybe can take home from this discussion is that the
> word PATCH means different things to different people =E2=80=94 this spec=
ific draft
> has no specific relationship to software updates, and it is actually less
> likely that a PATCH method with be used to deliver a software update
> =E2=80=9Cpatch=E2=80=9D than PUT (as in the LWM2M firmware update mechani=
sm) or POST.  The
> name PATCH is therefore probably unfortunate, but we want to stick to it =
as
> it is also used for the equivalent method on the HTTP side of REST.
>
> Gr=C3=BC=C3=9Fe, Carsten
>
>


--=20

Best regards,
Kathleen

--001a114dc6582f52c00541395ec9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Carsten,<div><br></div><div>Thanks the text is better a=
nd I&#39;ll clear.=C2=A0 It doesn&#39;t cover the case of data being altere=
d on the patch where it is stored, but covers other considerations now.</di=
v><div><br></div><div>Thanks,</div><div>Kathleen</div></div><div class=3D"g=
mail_extra"><br><div class=3D"gmail_quote">On Sun, Nov 13, 2016 at 8:23 PM,=
 Carsten Bormann <span dir=3D"ltr">&lt;<a href=3D"mailto:cabo@tzi.org" targ=
et=3D"_blank">cabo@tzi.org</a>&gt;</span> wrote:<br><blockquote class=3D"gm=
ail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-le=
ft:1ex">Hi Kathleen,<br>
<br>
as you can see from <a href=3D"https://www.ietf.org/rfcdiff?url2=3Ddraft-ie=
tf-core-etch-04" rel=3D"noreferrer" target=3D"_blank">https://www.ietf.org/=
rfcdiff?<wbr>url2=3Ddraft-ietf-core-etch-04</a> we took this as an opportun=
ity to clean up the security considerations section, and I think it is inde=
ed better now.<br>
I hope the added detail answers your call for more specific information and=
 that you can clear the DISCUSS.<br>
<br>
One point that we maybe can take home from this discussion is that the word=
 PATCH means different things to different people =E2=80=94 this specific d=
raft has no specific relationship to software updates, and it is actually l=
ess likely that a PATCH method with be used to deliver a software update =
=E2=80=9Cpatch=E2=80=9D than PUT (as in the LWM2M firmware update mechanism=
) or POST.=C2=A0 The name PATCH is therefore probably unfortunate, but we w=
ant to stick to it as it is also used for the equivalent method on the HTTP=
 side of REST.<br>
<br>
Gr=C3=BC=C3=9Fe, Carsten<br>
<br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div class=
=3D"gmail_signature" data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><b=
r><div>Best regards,</div><div>Kathleen</div></div></div>
</div>

--001a114dc6582f52c00541395ec9--


From nobody Sun Nov 13 18:15:41 2016
Return-Path: <Kathleen.Moriarty.ietf@gmail.com>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 31F2E129441; Sun, 13 Nov 2016 18:15:39 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "Kathleen Moriarty" <Kathleen.Moriarty.ietf@gmail.com>
To: "The IESG" <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.37.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <147908973919.5558.15042216043712075910.idtracker@ietfa.amsl.com>
Date: Sun, 13 Nov 2016 18:15:39 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/aFQUuQPpRkAqchRrgPVYNg3T8e4>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, core@ietf.org
Subject: [core] Kathleen Moriarty's No Objection on draft-ietf-core-etch-04: (with COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 02:15:40 -0000

Kathleen Moriarty has entered the following ballot position for
draft-ietf-core-etch-04: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-core-etch/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for the added text.  It doesn't exactly cover my discuss and the
attack mentioned, but I'll clear as the text is improved and gets closer
to what I think is needed.  If a patch is corrupted or maliciously
altered, there is no way to detect this and it can happen when stored (no
hash or signature validation is performed).  This is not explicitly
stated in the revised draft, although similar considerations are now
included.



From nobody Sun Nov 13 18:17:14 2016
Return-Path: <michael.koster@smartthings.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CCD3129658 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 18:17:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.821
X-Spam-Level: 
X-Spam-Status: No, score=-1.821 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=smartthings-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DVuvc2Gs35Pg for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 18:17:11 -0800 (PST)
Received: from mail-pf0-x22c.google.com (mail-pf0-x22c.google.com [IPv6:2607:f8b0:400e:c00::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2969E1295F6 for <core@ietf.org>; Sun, 13 Nov 2016 18:17:11 -0800 (PST)
Received: by mail-pf0-x22c.google.com with SMTP id d2so26122862pfd.0 for <core@ietf.org>; Sun, 13 Nov 2016 18:17:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smartthings-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=xqlAK+eU+SJ0W4LyOujL9AxBauHjEOaCDH0DH9uU9CY=; b=jhqBRQeXGK/Z/KlP7xQWQ5Q3lAiqDuzFIyHGBzmKG8BId6merUqEeup1ToQ0tdd1QM C8KwN2QM7oWCb4oSMLtc4GfJKsL8V0b05GZK4rgwNl2kPUwUrqyq+cE4AK8tlHlUyOK8 XONsXxXL0l1HNM25ox5ES3Xih6eEo0xuKijBWQ6e5sKb1bT3Ewf52nHbnw0HM9S/6W2m 5v1MSoFgo1e2C9ubsR1XDindtpgq8XCFDR8zizogLy4Uq6YQ0LcUmZfAqnHUV3rK6FWS 6yTT2OTiN7El7dJDPfHI0HzeZ68jlhsjtYtGoYOADb3xvpR+LdLjbep4/VHAww9Fey6a VrlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=xqlAK+eU+SJ0W4LyOujL9AxBauHjEOaCDH0DH9uU9CY=; b=VbYQMK73AlxXHFQVDJIEBjCLEBx8HYnwtX7IXt9IA75MNBecMBB3w0GNPSpW3WUsmy ApFVo8zkLXscCWyoDcCdNLMYpJdoui/cEht2FT8Z7UICqQF8ktKKXtFHbSN2UrPaqOkf qP4bZdrx8WwzvpHHjjbB8DcaQvaWnUhAbmA+uW4FwAof5TUxGe9uoI20+vXuLDmyJm6e +LL84aa19pAws0cgyXc2qXOLV4bQpfLeuWRiZUnvUmHsv661nJioiQf1lG56cPImcw7l OnVZ7vM4NWS6G8V/vNMiW39GVHVkNQ4ujWcMQlXa91tSHazZv4rswLlHJudAVsl3v8tv 2KKA==
X-Gm-Message-State: ABUngvemtBsWUY1BqgyOjZUenTPYcT70CqLspB8mn8seHTY900PQ0xaL420iWibhLPNbX9aq
X-Received: by 10.98.48.69 with SMTP id w66mr31782096pfw.0.1479089830614; Sun, 13 Nov 2016 18:17:10 -0800 (PST)
Received: from [172.20.3.22] ([183.102.9.2]) by smtp.gmail.com with ESMTPSA id f23sm30666407pff.59.2016.11.13.18.17.08 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 13 Nov 2016 18:17:10 -0800 (PST)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Michael Koster <michael.koster@smartthings.com>
In-Reply-To: <04fe01d1ee01$35bf9120$a13eb360$@augustcellars.com>
Date: Mon, 14 Nov 2016 11:17:07 +0900
Content-Transfer-Encoding: quoted-printable
Message-Id: <A55CB116-3E88-4C7D-B837-7992C82EC4B1@smartthings.com>
References: <04fe01d1ee01$35bf9120$a13eb360$@augustcellars.com>
To: Jim Schaad <ietf@augustcellars.com>
X-Mailer: Apple Mail (2.2104)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Df5aoa6CBfhOdgtUEqDJ8K_mYeA>
Cc: draft-koster-core-coap-pubsub@ietf.org, core@ietf.org
Subject: Re: [core] Review of draft-koster-core-coap-pubsub-05
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 02:17:13 -0000

Hi Jim,

replies inline

> On Aug 4, 2016, at 12:35 PM, Jim Schaad <ietf@augustcellars.com> =
wrote:
>=20
> I have a hard time saying that this is ready to be published, but that =
is in
> part because I think that the security aspects that are not being =
addressed
> in the document are important.
>=20
>=20
> Section 3.2 - The phrase "and potentially buffer messages" is causing =
me
> problems.  By definition it must buffer the last data value that it
> includes.  It would be good at this point to explain exactly why it is
> buffering messages here.  I assume that you are talking about the flow
> control issues that are discussed later but I don't know this.

Each client should be sent all notifications that its subscriptions =
require, even if they are published faster than they notified.=20

What is actually buffered needs to include payloads and content formats, =
not necessarily entire messages.

>=20
> Section 4.2 - What is the behavior of Max-Age for sub-topics?  Is the =
topic
> deleted only if it has no current sub-topics?  Publish rates of the =
topic
> and sub-topic may not be the same.
>=20
Yes, good point. publication on a topic needs to reset the lifetime =
counters of all topics in its path.
=20
> Section 4.2 - How does a topic creator control who can a) publish to =
the
> topic, b) create sub-topics, c) subscribe to the topic.  Based on how =
things
> are laid out I make the assumption that the broker is the entity that =
would
> enforce these rules.
>=20
The access control would use the same mechanisms as resource access =
control, so it would be ACLs most likely. We wil add this to the =
security considerations!

> Section 4.3 - As we go forward into the world of having secure items, =
the
> rule on only publishing a fixed content type means that there will be =
no way
> for a broker to create other content types without losing the =
authentication
> source of a signature by the publisher on the content.  It would be =
nice if
> it were possible to publish multiple content types at one point.   I =
guess
> one method might be to look at a content type that would be list of =
contents
> w/ different content types but then the discovery method becomes odd.  =
Also
> create would need to be modified to deal with the situation as well.

Yes, please see the email response to Peter van der Stok I sent out =
earlier.
>=20
> Section 4.7 - The following language is driving me crazy.  "A CoAP =
pubsub
> Client wishing to remove a topic MAY use the CoAP Delete operation".   =
If
> you are going to say that it may do X, then you need to also say that =
what
> other things it could do to remove it.  I think you should just remove =
the
> MAY here (and in similar places) and just say "to remove a topic uses =
the
> CoAP Delete operation".
>=20
Thanks, yes, Sorry for the attack on your sanity ;-)

> Section 7 - Should there be advice on how to distinguish between a new
> publish and a re-publish because a response was not received?
>=20
Hmm yes based on the CoAP MID I suppose. Good catch.

> Section 8 - DTLS will not provide authentication if there is a proxy =
in the
> way between the client and the broker that terminates the DTLS =
session.
> (The whole hop authentication vs end-to-end.)
>=20
yes a pubsub broker is a DTLS endpoint.

> Section 8 - the last paragraph is giving me a problem.  It appears to =
say
> that if the broker is not trusted hen it would have a problem doing =
the
> correct forwarding to subscribers since it would be unable to read the =
CoAP
> headers.  Is that correct?
>=20
It's meant to say that the CoAP header (e.g. content-type option) is =
needed to correctly notify subscribers.

> Confirmation of messages.  The system seems to be very light on =
telling one
> when confirmation of messages should be used and when it should not be =
used.
> For example, if notifications are being sent out from a broker - =
should all
> messages get confirmations before continuing, should only some messges =
get
> confirmations based either on the message published or on the =
notification
> that is being sent to the client.  I.e. do you treat a removal from a
> subscription differently if it is deleted vs if the authorization for =
the
> subscriber expires?  In one case doing the get will show that it no =
longer
> exists but in the other case the client will have missed messages when =
it
> was not subscribed.
>=20
Yes, we removed the guidance to use/not use confirmable because it is a =
transport layer function.

I see we may want to make it explicit that notify behavior is the same =
as resource state notification.=20

If a broker uses CON to notify, then it must follow the state machine =
behavior for CON.

It is not required to use CON to notify if publish uses CON. this is =
where pubsub differes from a message store-and-forward.

Subscription uses CoAP Observe, so whatever mechanism is implemented to =
remove observers that no longer have a security relationship applies =
here.

We wil be updating the draft again this week. Please let us know any =
further questions and suggestions.

Thanks!

Best regards,

MIchael

>=20
>=20


From nobody Sun Nov 13 18:35:32 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F99D127058 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 18:35:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PNtyh7uGd_Dm for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 18:35:25 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 207C41293F3 for <core@ietf.org>; Sun, 13 Nov 2016 18:35:25 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id 455C6404A2; Mon, 14 Nov 2016 03:35:23 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 741CF1E0; Mon, 14 Nov 2016 03:35:22 +0100 (CET)
Received: from hephaistos.amsuess.com (hephaistos.amsuess.com [10.13.13.129]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 364CE3EE;  Mon, 14 Nov 2016 03:35:22 +0100 (CET)
Received: (nullmailer pid 28105 invoked by uid 1000); Mon, 14 Nov 2016 02:35:20 -0000
Date: Mon, 14 Nov 2016 03:35:20 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Christian Groves <Christian.Groves@nteczone.com>
Message-ID: <20161114023520.mrvyuzpufcivm25m@hephaistos.amsuess.com>
References: <147669671885.4619.17683716724186582695.idtracker@ietfa.amsl.com> <29f46b0d-5791-46f2-9c52-881a9bd9f1a5@nteczone.com> <20161110144655.7bpfbd5btuvnfzaa@hephaistos.amsuess.com> <d90e27e3-12f3-c84d-8d6b-793dab94d134@nteczone.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="i462jnfa3xekl7oo"
Content-Disposition: inline
In-Reply-To: <d90e27e3-12f3-c84d-8d6b-793dab94d134@nteczone.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/agzqAhjWcFuKnkCBlL35iwLyzNs>
Cc: core <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-groves-coap-webrtcdc-01.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 02:35:29 -0000

--i462jnfa3xekl7oo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Nov 12, 2016 at 07:53:54PM +0900, Christian Groves wrote:
> > 3.6 on WebRTC strings seems to indicate to me that for a UTF-8 payload,
> > [...]
>
> [CNG] My understanding is that the WebRTC API (https://www.w3.org/TR/webr=
tc/
> see the send method) largely copies the Websockets API (e.g.
> https://www.w3.org/TR/websockets/#dom-websocket-send) with regards to
> sending data and the intention would be to convert to unicode characters.

I'm not so much worried about what the browser does with the data but
more about how a CoAP library arrives at the data that would be sent in
a WebRTC string, and whether it parses it correctly (eg. when receiving
blockwise messages with a single unicode character split among them).

> [CNG] I'm happy to minimise "options". If people are happy to go with bin=
ary
> then we could recommend it. It might be worth also making this
> recommendation in draft-ietf-core-coap-tcp-tls with regards to the use of
> websockets.

draft-ietf-core-coap-tcp-tls-05 already only mentions binary frames.

> [CNG] WebRTC first uses an application protocol between the peers to
> establish a session, e.g. SIP/SDP. This establishment makes use of ICE to
> determine the media transport addresses between the peers. The "host" cou=
ld
> be derived from this process.

=46rom cursory reading I only found the concept of "host candidates" in
there (which are more like CoAP endpoints than like unresolved names);
but if the derived host makes it to default Uri-Host, it would get a
reference to where the host info comes from anyway.

> As you've mentioned I also think the Uri-host and Uri-post are
> relevant that's why I said that there's no impact.

Thanks, that clarifies it.

Best regards
Christian

--=20
Yesterday is history, tomorrow is a mystery, and today is a gift. That
is why it is called the present.
  -- ancient saying

--i462jnfa3xekl7oo
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEECM1tElX6OodcH7CWOY0REtOkveEFAlgpIuUACgkQOY0REtOk
veGGQg/7B59Agq7SWd2ObMddrjT8n6af81h1YaoZX2tykv9E6v9ZMMhKfveMLRti
Ai9nvG0CAdglboDAupjZgtRbPs3sovg/3r2ItZZZm1rhcYFeWvpQkSl3vypudy+h
UBv0C8ch+jIgoMe1C6B9pR2xRIhLOez7KksrC4l7z6fsHGnehqwdUbCMTR57QNwg
gQs7payFYWOL0ISHIyO1IfNL2BJvUh2wIWtVlsSOVRr6aRJCt5aqtdovWWxKYtw2
GCkshQk0Mf0AuW37930IVeh0x90aPSThHr8nFzrmXll+rWCrVhvVuP88UuwqS16m
Ma3d+I0hDDR4r1VQ2fbiwhg0nUQqVGXI59OF6LaKoUz4J2Oy9JodsmX2BXecKDJO
qtNgTwZQ5ipL+n8sOimu2Y+xjbw+ZP8vZLSSvd0483XwzndaSx3dnPjM6LCmLE99
93zeVZuA0IDtrX3NvuJlYiMtcPG/0ud9XWnVz99lAfrM5mKlC6Joz0kopnfUieNj
u0eutYMomYz+WvLgMmvDjhDKf/kfivVDXj76dyYkEXN6+SsgNEUFjhUqMPsio6D3
5RmaN9NUlGLSsGAS/dGxcuN+antbCahPxEhWWSh96gFYu2xLGixSIT5uNHTypVCA
TCzIPHpKRQk6SFgyk7V355AUdLZ6GntYUBaNYO8bCHFTXKMnswU=
=OlvS
-----END PGP SIGNATURE-----

--i462jnfa3xekl7oo--


From nobody Sun Nov 13 19:09:13 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB11512979D for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 19:09:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XPHtqBsKbkT4 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 19:09:10 -0800 (PST)
Received: from prometheus.amsuess.com (alt.prometheus.amsuess.com [IPv6:2a01:4f8:190:3064::3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B9451296E9 for <core@ietf.org>; Sun, 13 Nov 2016 19:09:03 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id 06B62404A2; Mon, 14 Nov 2016 04:09:01 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 0F68A1E0; Mon, 14 Nov 2016 04:09:00 +0100 (CET)
Received: from hephaistos.amsuess.com (hephaistos.amsuess.com [10.13.13.129]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id B9953569;  Mon, 14 Nov 2016 04:08:59 +0100 (CET)
Received: (nullmailer pid 30004 invoked by uid 1000); Mon, 14 Nov 2016 03:08:59 -0000
Date: Mon, 14 Nov 2016 04:08:59 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Zhen Cao <zhencao.ietf@gmail.com>
Message-ID: <20161114030859.hx563ikemh3i5m2v@hephaistos.amsuess.com>
References: <147755820733.19004.16975897284050743537.idtracker@ietfa.amsl.com> <CAFxP68z844+ra1ZrHAzPYqOBA0ugqZJKHuhumzfg9NqY=MXQmg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="lx2ai6n6347ziq3b"
Content-Disposition: inline
In-Reply-To: <CAFxP68z844+ra1ZrHAzPYqOBA0ugqZJKHuhumzfg9NqY=MXQmg@mail.gmail.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/GqZu3jnERNqRUDWFe8zB6hj-Jj4>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-cao-core-delegated-observe-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 03:09:12 -0000

--lx2ai6n6347ziq3b
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Zhen,

thank you for submitting a draft.

I've read through your delegated-observe draft, and have several
questions / suggestions regarding it:

* Regarding the cloud use case: Using an unspecified protocol to
  negotiate this setup (where for example a token would need to be
  exchanged that the in-home dev would then use) strikes me as
  relatively complex for the given task. Have you considered that the
  in-home dev could simply implement a proxy and open a coap-over-tcp
  connection to the cloud server?

  If the cloud server implements a proxy itself, the dev off-home could
  send the same observe request as it locally would, just to the cloud
  server as a forward proxy (which then again uses a second forward
  proxy), and neither a delegate observation nor an additional
  observation negotiation protocol is needed.

* Multicast: Have you considered the applicability of
  draft-ietf-core-dynlink-01 or draft-ietf-core-coap-pubsub-00?

* Multicast: Some protocol would be required for the bulbs to coordinate
  too, because Bulb_2 and Bulb_3 need to agree on a token to identify
  the incoming observation responses.

* Terminology: I find the "delegate" and "delegated" node terms
  confusing (and if it's only because a search for "delegate" also
  matches "delegated"). Maybe "Initiating node" / "Notified node" or any
  other more distinct term could replace at least one of the
  delegate{,d} names.

* Do I understand the graphs correctly that no response is sent to the
  delegate node unless it is itself in the delegated multicast group?

  If so, how is reliable transmission ensured?

Best regards
Christian

--=20
Christian Ams=FCss                      | Energy Harvesting Solutions GmbH
founder, system architect             | headquarter:
mailto:c.amsuess@energyharvesting.at  | Arbeitergasse 15, A-4400 Steyr
tel:+43-664-97-90-6-39                | http://www.energyharvesting.at/
                                      | ATU68476614

--lx2ai6n6347ziq3b
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=QNiq
-----END PGP SIGNATURE-----

--lx2ai6n6347ziq3b--


From nobody Sun Nov 13 20:23:01 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 482A7129461 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 20:22:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.602
X-Spam-Level: 
X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LX-dTLOMMk7G for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 20:22:57 -0800 (PST)
Received: from lb1-smtp-cloud6.xs4all.net (lb1-smtp-cloud6.xs4all.net [194.109.24.24]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 662D3129487 for <core@ietf.org>; Sun, 13 Nov 2016 20:22:57 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.215]) by smtp-cloud6.xs4all.net with ESMTP id 7gNu1u00F4eRkWy01gNulD; Mon, 14 Nov 2016 05:22:54 +0100
Received: from dhcp-9216.meeting.ietf.org ([31.133.146.22]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 14 Nov 2016 05:22:54 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 14 Nov 2016 05:22:54 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Michael Koster <michaeljohnkoster@gmail.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <DE0833C6-456A-480C-98C7-3633605E684B@gmail.com>
References: <CDE6F224-7A6A-4F89-9E5C-E46AC9FACA35@ericsson.com> <7a8be541c4221523f0f6606d2b06164f@xs4all.nl> <DE0833C6-456A-480C-98C7-3633605E684B@gmail.com>
Message-ID: <70f9ce0575dd5ab5392e37976be4c83c@xs4all.nl>
X-Sender: stokcons@xs4all.nl (3oniZC8jPYzmhMokaDCPCmF+x2VRKQxK)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/P-36eVI8ANnCapiJuPsPyKpN4cI>
Cc: draft-koster-core-coap-pubsub@ietf.org, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_Working_Group_Adoption_of_draft-kos?= =?utf-8?q?ter-core-coap-pubsub?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 04:22:59 -0000

Hi Michael,

I don't have questions any more, and I think we can update the sleepy 
node draft with use of pubsub.

thanks,

Greetings,

Peter
> 
> This should be clarified. How about this:
> 
> - A topic may support more than one content format. The statement
> above needs to allow repeating the "ct" link attribute for multiple
> values.
> 
> - The content of a topic resource on a pubsub broker is a list of
> payloads and their published content formats.
> 
> - The outgoing message is formatted according to the subscription
> request, which is an CoAP Observe.
> 
> - A client may subscribe using fetch, and may use query parameters to
> filter notifications by content format.
> 
> - The subscription request (CoAP Observe) may indicate which content
> format it will accept, and the broker (CoAP Server) is expected to
> comply.
> 
> - If a client wishes to receive more than one content format, it must
> indicate this in the accept header.
> 
> - Payloads using a content format not accepted by the client must not
> be sent to the client.
> 
> Thanks for pointing these out, and sorry again for the missed response
> the first time.
> 
> Best regards,
> 
> Michael


From nobody Sun Nov 13 21:11:13 2016
Return-Path: <ietf@kuehlewind.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E555129543 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 21:11:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.399
X-Spam-Level: 
X-Spam-Status: No, score=-3.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E-4N8neWK5zP for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 21:11:05 -0800 (PST)
Received: from kuehlewind.net (kuehlewind.net [83.169.45.111]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFA9A1295FF for <core@ietf.org>; Sun, 13 Nov 2016 21:11:04 -0800 (PST)
Received: (qmail 19653 invoked from network); 14 Nov 2016 06:03:38 +0100
Received: from dhcp-88d9.meeting.ietf.org (31.133.136.217) by kuehlewind.net with ESMTPSA (DHE-RSA-AES256-SHA encrypted, authenticated);  14 Nov 2016 06:03:37 +0100
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: "Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net>
In-Reply-To: <36EE4592-4B66-40AE-9FFB-54973B019BCC@tzi.org>
Date: Mon, 14 Nov 2016 14:03:32 +0900
Content-Transfer-Encoding: quoted-printable
Message-Id: <A7EAF470-7FAE-4BF0-839E-AF3D5B0D818D@kuehlewind.net>
References: <147635245787.2894.1907116527239429628.idtracker@ietfa.amsl.com> <36EE4592-4B66-40AE-9FFB-54973B019BCC@tzi.org>
To: Carsten Bormann <cabo@tzi.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/NunJlYMYXEdJSH2_8m9LO5qM2cU>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, The IESG <iesg@ietf.org>, core@ietf.org
Subject: Re: [core] =?utf-8?q?Mirja_K=C3=BChlewind=27s_No_Objection_on_draft-i?= =?utf-8?q?etf-core-etch-03=3A_=28with_COMMENT=29?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 05:11:07 -0000

Agreed.

> Am 14.11.2016 um 10:02 schrieb Carsten Bormann <cabo@tzi.org>:
>=20
>=20
>> On 13 Oct 2016, at 18:54, Mirja Kuehlewind <ietf@kuehlewind.net> =
wrote:
>>=20
>> Mirja K=C3=BChlewind has entered the following ballot position for
>> draft-ietf-core-etch-03: No Objection
>>=20
>> When responding, please keep the subject line intact and reply to all
>> email addresses included in the To and CC lines. (Feel free to cut =
this
>> introductory paragraph, however.)
>>=20
>>=20
>> Please refer to =
https://www.ietf.org/iesg/statement/discuss-criteria.html
>> for more information about IESG DISCUSS and COMMENT positions.
>>=20
>>=20
>> The document, along with other ballot positions, can be found here:
>> https://datatracker.ietf.org/doc/draft-ietf-core-etch/
>>=20
>>=20
>>=20
>> =
----------------------------------------------------------------------
>> COMMENT:
>> =
----------------------------------------------------------------------
>>=20
>> Does this doc update RFC7252? Maybe not; just asking=E2=80=A6
>=20
> Hi Mirja,
>=20
> good question.  I believe the answer is no:
> It uses a defined extension point of RFC 7252, the CoAP Method Codes =
sub-registry (RFC 7252 Section 12.1.1), and registers three new entries =
there.
>=20
> With all the discussion of what labels like =E2=80=9Cupdates=E2=80=9D =
mean, I=E2=80=99m not entirely sure of this classification.
> But I think in the long run we don=E2=80=99t want every RFC YYY marked =
as =E2=80=9CUpdates RFC XXX=E2=80=9D just because it registers something =
in RFC XXX=E2=80=99s registry.
>=20
> Gr=C3=BC=C3=9Fe, Carsten
>=20


From nobody Sun Nov 13 21:46:55 2016
Return-Path: <zhencao.ietf@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A523129674 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 21:46:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NCY6J51GWBe6 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 21:46:52 -0800 (PST)
Received: from mail-vk0-x22c.google.com (mail-vk0-x22c.google.com [IPv6:2607:f8b0:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 690C8129664 for <core@ietf.org>; Sun, 13 Nov 2016 21:46:52 -0800 (PST)
Received: by mail-vk0-x22c.google.com with SMTP id w194so56068728vkw.2 for <core@ietf.org>; Sun, 13 Nov 2016 21:46:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=JCbZZXXYjWwupFkgg23KZyttAGohJDakYvcJa8Ar33U=; b=fWGLww6X1Dt7q90Cudv/qoiWzzlk+F9fRYP+z0sysiXjHaP8TkPuGXtVisFK2Z7A7n 5aFmarrpvlF6cndqi3GoMKDt66fTzJ/Pe6Y54J0Vgj53fHrjEgwqu24nAPpKCAHZJfU2 1+lyS5bqIM6UBoQgMmkz0A88Ryxz56iyiclACLTZevzax8Etmiv90MjXJJxkPcaACaWs n6eeDC6SHcqmtvBToX5WAtDeL+6+HPB+ehgr1IAliheFSbH/siBDVFyi0zSmes2zwLHf XZp9p0I7z/99BNy6wQAfFCbIb/54uXziE8k/su8slqIBQjHmN1laJDQ4gVrffIFGJYP+ uv5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=JCbZZXXYjWwupFkgg23KZyttAGohJDakYvcJa8Ar33U=; b=nIPJvlaIxNYpw/o6DETOS4d4/03OPQ/DqmAT+K6bOv0niVXz94i2aom1Mhh98nIvh+ SWdEg36+HrYSa8J+v0Lwk4PYH6cBbhytoIDVCpl0TKTvw2QvEGBJFcQ6wca6/9R78Wyq jIc353mYlDrpJcqwUNQZhhXzF2/LOeSgsVyHesxVKBCg6PHn/LfdY79irxisbapLHFeQ FNMro4MEwX89v4G7IkdOmsFxkFgVu9LvyTwNcWfhHzvkH5FbpkaErB9HpCMxSsJYac7P tWiTenuOO8jT65VACJtYBE7hF41QX8+OzIjHifpQRE2q9+7BmRVS8aLpE3c/N6UqJWzX VrGg==
X-Gm-Message-State: ABUngveDdLxRnA55AGJX7muTbrWISONCtQOd/RSmdLqIxoGPTyLS/NdVH66yGJaJamfJlic+VavaeRIfbG0gsQ==
X-Received: by 10.31.173.144 with SMTP id w138mr2307343vke.153.1479102411493;  Sun, 13 Nov 2016 21:46:51 -0800 (PST)
MIME-Version: 1.0
Received: by 10.176.81.252 with HTTP; Sun, 13 Nov 2016 21:46:50 -0800 (PST)
In-Reply-To: <20161114030859.hx563ikemh3i5m2v@hephaistos.amsuess.com>
References: <147755820733.19004.16975897284050743537.idtracker@ietfa.amsl.com> <CAFxP68z844+ra1ZrHAzPYqOBA0ugqZJKHuhumzfg9NqY=MXQmg@mail.gmail.com> <20161114030859.hx563ikemh3i5m2v@hephaistos.amsuess.com>
From: Zhen Cao <zhencao.ietf@gmail.com>
Date: Mon, 14 Nov 2016 13:46:50 +0800
Message-ID: <CAFxP68wTCgbCjSY336YkBWuDmDWHSPoCpROhQWMv3cV2qEr3Cw@mail.gmail.com>
To: =?UTF-8?Q?Christian_Ams=C3=BCss?= <c.amsuess@energyharvesting.at>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/zkdYul5XyODfd7l0-b_XKTW-8c8>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-cao-core-delegated-observe-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 05:46:54 -0000

Hi Christian,

Thanks for the review and comments.  See inline response.

BR,
Zhen

On Mon, Nov 14, 2016 at 11:08 AM, Christian Ams=C3=BCss
<c.amsuess@energyharvesting.at> wrote:
> Hello Zhen,
>
> thank you for submitting a draft.
>
> I've read through your delegated-observe draft, and have several
> questions / suggestions regarding it:
>
> * Regarding the cloud use case: Using an unspecified protocol to
>   negotiate this setup (where for example a token would need to be
>   exchanged that the in-home dev would then use) strikes me as
>   relatively complex for the given task. Have you considered that the
>   in-home dev could simply implement a proxy and open a coap-over-tcp
>   connection to the cloud server?

The in-home dev is nomadic, and it initiates the observe while at
home, so that it can fetch the information when it is off.  So,
opening a coap-o-tcp connection is not appropriate solution.

>
>   If the cloud server implements a proxy itself, the dev off-home could
>   send the same observe request as it locally would, just to the cloud
>   server as a forward proxy (which then again uses a second forward
>   proxy), and neither a delegate observation nor an additional
>   observation negotiation protocol is needed.
>
> * Multicast: Have you considered the applicability of
>   draft-ietf-core-dynlink-01 or draft-ietf-core-coap-pubsub-00?

Delegated observation or subscription could be used to the  dynlink or
pubsub. I just read through the pubsub-00 draft, and I do not think it
supports multicast pubsub as per the current text.

>
> * Multicast: Some protocol would be required for the bulbs to coordinate
>   too, because Bulb_2 and Bulb_3 need to agree on a token to identify
>   the incoming observation responses.

I agree. But sometimes, the token is optional for simple use cases.

>
> * Terminology: I find the "delegate" and "delegated" node terms
>   confusing (and if it's only because a search for "delegate" also
>   matches "delegated"). Maybe "Initiating node" / "Notified node" or any
>   other more distinct term could replace at least one of the
>   delegate{,d} names.

Thank you.  I am glad to change it in the next version and my presentation.

>
> * Do I understand the graphs correctly that no response is sent to the
>   delegate node unless it is itself in the delegated multicast group?
>
>   If so, how is reliable transmission ensured?

Good point, not considering this yet.  The difficulty is that how the
Source node tell if the Initiate node is included in the Notified
Group or not.
Simplest solution could be have the delegated observation request
being a confirmable message, solicit an  ACK for the request.

>
> Best regards
> Christian
>
> --
> Christian Ams=C3=BCss                      | Energy Harvesting Solutions =
GmbH
> founder, system architect             | headquarter:
> mailto:c.amsuess@energyharvesting.at  | Arbeitergasse 15, A-4400 Steyr
> tel:+43-664-97-90-6-39                | http://www.energyharvesting.at/
>                                       | ATU68476614


From nobody Sun Nov 13 22:05:30 2016
Return-Path: <michaeljohnkoster@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4033D1296A7 for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 22:05:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DlS2AVgsxged for <core@ietfa.amsl.com>; Sun, 13 Nov 2016 22:05:12 -0800 (PST)
Received: from mail-pf0-x22b.google.com (mail-pf0-x22b.google.com [IPv6:2607:f8b0:400e:c00::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 362571296A9 for <core@ietf.org>; Sun, 13 Nov 2016 22:05:12 -0800 (PST)
Received: by mail-pf0-x22b.google.com with SMTP id 189so27542158pfz.3 for <core@ietf.org>; Sun, 13 Nov 2016 22:05:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=JJ1U1K8yycktMky3rCZLDk7ymeWoYxiPKoLfV9mtb1k=; b=vXqYXlZRZ4h5x7CBsg8uqMufaXIt67c5s2rx6Tme9h7LJ8km2WEgcCmXu8CrxB0lPS S1YjksQPKJHqNej4Sf66oQo0zjLznAA9tXR6wvyFMVs3UbXrOcYUNtVlpLdPwN+Ha3+g EU1uVuB22SIUgM5ZRe78C9r37PAks81iwSTQfETqxkW+i39DNMiT+TvFu+xyd+yTfD44 ICx14T5PHTwZgb2ge1aGM/7EL3xu4zR3LMZQEXhWUEhohDKoReFqklkvQiMl7V+CeaKH F2cvX45++M5VSCd1oSWImi6Y7AMcNmf+ptBbdoWLamWGOwX9Qg3ukSQlEgx+ypAaeokj 9ICw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=JJ1U1K8yycktMky3rCZLDk7ymeWoYxiPKoLfV9mtb1k=; b=U667VQgFnJSUuUq3MH6YhgcChnuD9Z0hBucxGdNM1CDhgr+nCKh23QAs6ZrBwVwYia 7wfi8o5mNo2lqvkIkNzKXGW6GtbnohE61b6ElkV0dNwSO3ThJ2rW0Aczmx7Iap2M4TWz AMMz3Ps/WwduwbhURq9N8liUSDq6x5P7bt3A2iyQ5cKmQO3AgmDF2f3lL5crHfIlvCC3 GirXtYZDULDoQA6LW+aM+X0V7dhm30aMAE9VreMyDTXTDAqeniumtF4f02C8DQlZ8ybF B0o61SA7Y2L6WoZoYsjnWuNv6M/F14/3rUAfR6+Qx2bZiSfyu8OAg7GUBQW6D6MxY5lu ltsw==
X-Gm-Message-State: ABUngvdlwaeklAXghLCMi5tb34nerSMgS1hV7KAeozmYnI40BNSjnMQDaWUuh/TRgGg1Zg==
X-Received: by 10.99.134.72 with SMTP id x69mr26283478pgd.140.1479103511798; Sun, 13 Nov 2016 22:05:11 -0800 (PST)
Received: from t2001067c03700128515661c9abc6cc58.v6.meeting.ietf.org ([2001:67c:370:128:5156:61c9:abc6:cc58]) by smtp.gmail.com with ESMTPSA id c2sm31899629pfl.66.2016.11.13.22.05.10 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 13 Nov 2016 22:05:11 -0800 (PST)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
From: Michael Koster <michaeljohnkoster@gmail.com>
In-Reply-To: <860d61a8-4b1e-5a62-929f-af3ea6808081@gmx.net>
Date: Mon, 14 Nov 2016 15:05:05 +0900
Content-Transfer-Encoding: quoted-printable
Message-Id: <C62709A7-66C1-4E2F-B08A-1AE4BDD4FA10@gmail.com>
References: <860d61a8-4b1e-5a62-929f-af3ea6808081@gmx.net>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
X-Mailer: Apple Mail (2.2104)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/LZW0kG_lhRotKfm1ClHziORIwhg>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] My notes about draft-koster-core-coap-pubsub-05
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 06:05:28 -0000

Hi Hannes,

The main difference between CoAP Pubsub and LWM2M queue mode is as =
follows:

In LWM2M Queue mode, the device operates in server role and must expose =
itself through the firewall. It does this by taking advantage of the =
Resource Directory registration update (refresh) function, or an ongoing =
observe relationship with notifications. Both of these will be sent from =
the device behind the firewall to the service layer on the northbound =
side of the firewall. The service layer must then "promptly" issue any =
requests to the device while the reverse tunnel is open, following =
quickly behind the response to the RD refresh or notification, before =
the firewall tunnel closes. There is also a mechanism for the device to =
limit the amount of interaction the service layer is allowed to do =
before the tunnel closes again,or before the device goes back to sleep.=20=


One issue with LWM2M queue mode is that there is not a deterministic =
window of communication nor handshake that guarantees the service layer =
requests to the device will succeed. It depends a lot on well =
characterized behavior of the firewall timing and/or the device staying =
awake to receive requests. The queueing of requests to the device is =
defined in that the service layer will retain these requests until the =
device performs the registration refresh or notification.

In CoAP Pubsub the device works in client mode, in which the client mode =
device is responsible for initiating all communication with the broker. =
This is very convenient for sleepy devices and devices behind firewalls =
that are not generally reachable from the northbound side of the =
firewall. If the device is a sensor, it can simply publish whenever it =
wants, similar to notifications in LWM2M queueu mode. If the pubsub =
device is an actuator, it needs to subscribe to the broker for actuator =
updates. If the device is a sleepy actuator, it must issue periodic =
polls to the broker to retrive the state updates.

I can see these 2 modes being optimized for different use cases.=20

Do you think we should add a section in the draft to describe this =
comparison, like other approaches? Would this help people understand =
CoAP pubsub?

The brokerless scenario is really about integrating the broker endpoint =
onto a peer node, so peer to peer pubsub may be a better description, =
though there may still be asymmetry that allows one of the devices to =
sleep while the other listens.

Best regards,

Michael

> On Aug 3, 2016, at 4:46 PM, Hannes Tschofenig =
<hannes.tschofenig@gmx.net> wrote:
>=20
> Hi all,
>=20
> I read through draft-koster-core-coap-pubsub-05 and have a few =
questions.
>=20
> The document makes sense to me. I do, however, wonder whether you =
could
> compare the described functionality with the LWM2M queue mode. There
> appear to be lots of similarities but the "caching" concept in LWM2M =
is
> better worked out.
>=20
> I am not sure whether the brokerless scenario makes sense given the
> described usage environment with sleepy nodes.
>=20
> Ciao
> Hannes
>=20
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Mon Nov 14 03:26:42 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A7611294C3 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 03:26:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id af79sMvWsQwl for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 03:26:39 -0800 (PST)
Received: from prometheus.amsuess.com (alt.prometheus.amsuess.com [IPv6:2a01:4f8:190:3064::3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0162D126B6D for <core@ietf.org>; Mon, 14 Nov 2016 03:26:38 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id C6D97404A8; Mon, 14 Nov 2016 12:26:36 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id C258A1EA; Mon, 14 Nov 2016 12:26:34 +0100 (CET)
Received: from hephaistos.amsuess.com (hephaistos.amsuess.com [10.13.13.129]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 80D83533;  Mon, 14 Nov 2016 12:26:34 +0100 (CET)
Received: (nullmailer pid 23467 invoked by uid 1000); Mon, 14 Nov 2016 11:26:31 -0000
Date: Mon, 14 Nov 2016 12:26:30 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Zhen Cao <zhencao.ietf@gmail.com>
Message-ID: <20161114112630.4qta6yz4cs3lcc3e@hephaistos.amsuess.com>
References: <147755820733.19004.16975897284050743537.idtracker@ietfa.amsl.com> <CAFxP68z844+ra1ZrHAzPYqOBA0ugqZJKHuhumzfg9NqY=MXQmg@mail.gmail.com> <20161114030859.hx563ikemh3i5m2v@hephaistos.amsuess.com> <CAFxP68wTCgbCjSY336YkBWuDmDWHSPoCpROhQWMv3cV2qEr3Cw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ynfw52bhsv34uxvi"
Content-Disposition: inline
In-Reply-To: <CAFxP68wTCgbCjSY336YkBWuDmDWHSPoCpROhQWMv3cV2qEr3Cw@mail.gmail.com>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/sSRxmiXgfHrnDbrKRyvnQ5QIJCo>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Fwd: New Version Notification for draft-cao-core-delegated-observe-00.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 11:26:41 -0000

--ynfw52bhsv34uxvi
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Zhen,

On Mon, Nov 14, 2016 at 01:46:50PM +0800, Zhen Cao wrote:
> > * [...]the in-home dev could simply implement a proxy and open a
> >   coap-over-tcp connection to the cloud server?
>=20
> The in-home dev is nomadic, and it initiates the observe while at
> home, so that it can fetch the information when it is off.  So,
> opening a coap-o-tcp connection is not appropriate solution.

I see -- it says so in the text, but I misinterpreted the diagram. This
is how I would draw it:

               dev            Cloud            dev
Sensor       in-home          Server         off-home
  |              |              |               =20
  |   Delegated  |              |               =20
  |<--Observe  --|              |               =20
  |              |              |               =20
  |--------Notification-------->|                =20
  |              |              |               =20
  |               \ dev gets moved out of home \
  |                             |               |
  |                             |<-- GET--------|
  |                             |----- ACK----->|

                     Figure 1: Delegation to Cloud

This setup seems very brittle to me because it can't be restablished
once the observation breaks for any reason (eg. on an intermittent
connection outage), so I'd like to explore possible alternatives that
are less ephemeral:

* resource directory with the dev in-home as commissioning tool: Use
  case 3.1 of draft-ietf-core-resource-directory-09 describes how the
  sensor could register itself with the cloud server (and not only a
  single observation, but it can of course limit the cloud server's
  access). The UDP "connection" in which it registers doubles as a
  channel through which the cloud server can send requests (including
  observations) to the sensor.

  I'm not sure whether the RD draft already contains a way for
  dev-in-home to actively instruct sensor to furtheron register with a
  particular RD (commissioning tools as described there talk to the RD
  directly, thereby breaking the UDP connection; my best guess would be
  that dev-in-home announces <coap://cloud.server/rd>;rt=3D"core.rd"), but
  I'm sure that can be clarified.

  This is broader than delegate observation, but it uses patterns that
  already in active use.

* push dynlinks: Instead of negotiating a token with the cloud server,
  the dev-in-home negotiates a URL there (say /~user/temp).

  It then does a POST to coap:////sensor/bnd/ with
  <coap://cloud.server/~user/temp>;rel=3D"boundto";anchor=3D"/temp";bind=3D=
"push"
  , and the sensor can start sending a PUT with the value whenever a new
  value is available.

  When the dev is in-home again, it can check whether the dynlink is
  still present or modify it by manipulating the /bnd/ (or wherever the
  device has an if=3Dcore.bnd) resource again.


Some more notes:

* The examples in A.1 show the 2.05 responses with 'Header: GET'. The
  hex numbers afterward resemble those in the rfc7641 examples, but
  there the number is the full encoded header (eg. 0x4101 =3D (ver =3D 1) <<
  22, (type non =3D 0 << 20), (tkl =3D 1) << 16, (code GET =3D 1) << 0).

  When interpreted as message IDs, the initial notification to the
  target node has no reason to share the message ID with the original
  GET (those are scoped to endpoints).

* The cloud server would not only need to agree on a token with the
  dev at in-home time, but the complete request headers. That
  information is needed for the cloud server to re-register its interest
  in the resource or to cancel the observation.

* The d-o option is used in responses as a sequence number. What is the
  advantage of using the delegated option here over the observe option?

Best regards
Christian

--=20
To use raw power is to make yourself infinitely vulnerable to greater power=
s.
  -- Bene Gesserit axiom

--ynfw52bhsv34uxvi
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=lXVY
-----END PGP SIGNATURE-----

--ynfw52bhsv34uxvi--


From nobody Mon Nov 14 03:35:17 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECE6D1295E6 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 03:35:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32cdEV1x2ooY for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 03:35:14 -0800 (PST)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0093.outbound.protection.outlook.com [104.47.37.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4942A129454 for <core@ietf.org>; Mon, 14 Nov 2016 03:35:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=h+wu5LWe+bOtTAs4aiDCcT45vFcMEZ3kUEQKiwaP2Mw=; b=UjLvGhRF5gQx5CGBZwpgRQR1T/lWcCh8wajl+8WLk+3k2EMH7vw2Jaki8fxEKageddlrWCzzJHUfRGjmj/uw+9Oe1Q02k6LEuBiBU1wZxfr0q1wCEWbMgOcOt9k/OkLtNGA0erO4kziwcLvaRKTeiWT9pH7yqZdBaa9Rs1F+95Y=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.6; Mon, 14 Nov 2016 11:35:10 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0707.015; Mon, 14 Nov 2016 11:35:10 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: Christian Groves <Christian.Groves@nteczone.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: =?utf-8?B?W2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3At?= =?utf-8?Q?tls?=
Thread-Index: AQHSKSEe9Mm6L+w6z0q3zoc7AJliLaDO5emAgAC364CACBZUUA==
Date: Mon, 14 Nov 2016 11:35:09 +0000
Message-ID: <CY1PR03MB2380BD6CF1CC21088830537D83BC0@CY1PR03MB2380.namprd03.prod.outlook.com>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org> <d3b9811b-91a4-612f-9032-5155a2c18bcc@nteczone.com>
In-Reply-To: <d3b9811b-91a4-612f-9032-5155a2c18bcc@nteczone.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [2001:67c:370:144:5912:79cd:92c6:2025]
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2380; 7:jeKQ98oxCF8auW4CRYn3MTLy0Ff8mFEagP6BeVlrXaN/cZ2MbHciR+kPywn3/P+PfcIm3+dZ5HBZjuF3+01Z48zLbUrD1BDG20jwQUUqyLe5uGhl1B5FJdoWT1501LbDomJvWYKdvz6TRhT29ELDfJu18pnj8hNEFOmvCCF7tyoJ9NDSTPgai+titDqrsT6vkFUina7DHz840JUEMR7u8Dtq4tM7WFqj77wa6JSKX5UtXnBNWfZyulGE+h/WZuHa23nEtMUG9uk51kSStlybkoFfeqUrfjdGKD0E9I9bNfo1zG7tkHUGXPWjFBzlAUK4uvQ9h29qlZwJjbGli7OcsE+QNZot4w+D0yCFdFZvqZMp6rhzhe2CQlMsxuUchTQT
x-ms-office365-filtering-correlation-id: 921e1184-f8ee-4277-4196-08d40c824a89
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CY1PR03MB2380;
x-microsoft-antispam-prvs: <CY1PR03MB238007D5E687146E1B8C6D9B83BC0@CY1PR03MB2380.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(166708455590820)(192374486261705); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6045074)(6060326)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026)(61426038)(61427038)(6061321)(6046074); SRVR:CY1PR03MB2380; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2380; 
x-forefront-prvs: 0126A32F74
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(336003)(54094003)(199003)(189002)(33656002)(107886002)(5001770100001)(9686002)(305945005)(102836003)(586003)(6116002)(76176999)(50986999)(189998001)(5005710100001)(230783001)(54356999)(2501003)(97736004)(10090500001)(101416001)(76576001)(10290500002)(2906002)(8990500004)(99286002)(122556002)(106356001)(77096005)(92566002)(229383001)(105586002)(7696004)(2900100001)(106116001)(2950100002)(5660300001)(81156014)(3280700002)(86612001)(81166006)(229853002)(87936001)(7846002)(7736002)(74316002)(68736007)(86362001)(3660700001)(8936002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2380; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2016 11:35:09.9271 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2380
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/BNh-hWX-CkMCrTwO_9kBzXI2dhg>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 11:35:16 -0000
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From nobody Mon Nov 14 07:50:46 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DA3C129801 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 07:50:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PHkLDS-RQAqG for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 07:50:44 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DED64129670 for <core@ietf.org>; Mon, 14 Nov 2016 07:50:43 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id CF568404A8; Mon, 14 Nov 2016 16:50:39 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id CD9BA1EA; Mon, 14 Nov 2016 16:50:35 +0100 (CET)
Received: from hephaistos.amsuess.com (hephaistos.amsuess.com [10.13.13.129]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 69B623EE;  Mon, 14 Nov 2016 16:50:35 +0100 (CET)
Received: (nullmailer pid 7471 invoked by uid 1000); Mon, 14 Nov 2016 15:50:34 -0000
Date: Mon, 14 Nov 2016 16:50:34 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Bill Silverajan <bilhanan.silverajan@tut.fi>
Message-ID: <20161114155034.stnigqulniww7nji@hephaistos.amsuess.com>
References: <147794779162.23193.6769793631552741634.idtracker@ietfa.amsl.com> <7c2d4c7c-526a-7fd3-b1c4-c58f141a5720@tut.fi>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mgudrijf5si2utn4"
Content-Disposition: inline
In-Reply-To: <7c2d4c7c-526a-7fd3-b1c4-c58f141a5720@tut.fi>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/VrHmh0t8POlyiSmnk2LhQemvOf0>
Cc: core@ietf.org
Subject: Re: [core] Fwd: New Version Notification for draft-silverajan-core-coap-protocol-negotiation-04.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 15:50:45 -0000

--mgudrijf5si2utn4
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Bill,

On Fri, Nov 11, 2016 at 12:10:58PM +0200, Bill Silverajan wrote:
> After the Berlin meeting, we took onboard several suggestions and
> recommendations and as a consequence, the draft has been reshaped quite
> significantly.

I had started writing a review back on the -03 version and the notes for
-04 from the slides, but most of the points have been obsoleted in -04.

> We're working on a strawman proposal allowing CoAP origin servers and
> clients to directly interact and discover available alternative transport=
s,
> in situations where using a CoRE Resource Directory may seem unfeasible.
> That'll be addressed in future versions of our draft.

I'm looking forward to seeing that.

My notes / questions to -04:

* at parameter / con parameter: It seems that the at=3D list arguments are
  roughly equivalent to the con=3D context parameter that defaults to the
  protocol and address of the originating submission.

  Does that mean that the endpoint registers using TCP instead of UDP,
  the equivalent to the 4.1 example would be

  POST coap+tcp://rd.example.com/rd?ep=3Dnode1&1&at=3D\
          coap://server.example.com,\
          coap+ws://server.example.com:5683/ws/

  ? This means that registration is only possible using a protocol where
  no path component is used in the at parameter, but that's probably
  fine because those protocols are rather not used to start a
  connection. (Aren't the? It'd be something like a server accessed via
  websockets registering itself as an endpoint at an RD runnign inside
  the browser. If you don't want to rule out registration over those,
  updating allowing a path into con=3D might be an option.)

  If at is intended to be a list of more con=3D parameters, I suggest this
  be made more explicit (eg. "The list does not need to contain the
  location that is implied by the source address of the registering
  connection or explicitly set in the con=3D parameter." after 4.1 par1).

* at=3D parameter list: The comma-separation precludes all URIs that
  contain the comma character. This is unlikely to occur (maybe
  `coap+ws://.../ws,v=3D1.1/` like in RFC3986) but legal in a URI.

* tt=3D parameter: To which of the four defined lookup types is this
  applicable? (My assumption would be ep and res, where the res would
  return the composed ). Can the parameter
  repeated to indicate a set of supported transports? Does it have a
  default value? (I'd assume '*').

Best regards
Christian

--=20
The detailed semantics of CoAP methods are "almost, but not entirely
unlike" [HHGTTG] those of HTTP methods.
[HHGTTG]: Adams, D., "The Hitchhiker's Guide to the Galaxy", October 1979.
  -- Shelby, et al., Internet-Draft Constrained Application Protocol (CoAP)

--mgudrijf5si2utn4
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=EekK
-----END PGP SIGNATURE-----

--mgudrijf5si2utn4--


From nobody Mon Nov 14 07:56:50 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1B7512941E; Mon, 14 Nov 2016 07:56:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vtb6Qbg88_bE; Mon, 14 Nov 2016 07:56:47 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E795F129859; Mon, 14 Nov 2016 07:56:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAEFugpD006100; Mon, 14 Nov 2016 16:56:42 +0100 (CET)
Received: from [10.6.0.72] (unknown [95.211.174.168]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHZrm4R0Zz7xXh; Mon, 14 Nov 2016 16:56:40 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com>
Date: Tue, 15 Nov 2016 00:56:35 +0900
X-Mao-Original-Outgoing-Id: 500831794.929072-637853b8f3d977a451e465508f24dc87
Content-Transfer-Encoding: quoted-printable
Message-Id: <AD989A31-30F7-4723-AE34-BAD94EB41FAF@tzi.org>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com>
To: "core@ietf.org WG" <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-jH3mr_VIcBA4jEcvGVRmAFLeXk>
Cc: "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 15:56:49 -0000

Below is my (somewhat belated) review of =
draft-ietf-core-coap-tcp-tls-05.

Everything that is indented by 8 or more spaces is original text, =
everything that is not indented is comment, and there is a little text =
that is indented by 3 spaces that is either proposed new text or foreign =
text.  I hope this survives the E-Mail somewhat.  In case it doesn=E2=80=99=
t, I have also put the file up at:

=
https://svn.tools.ietf.org/svn/wg/core/draft-ietf-core-coap-tcp-tls-05-cab=
o.txt

Gr=C3=BC=C3=9Fe, Carsten

        1.  Introduction

           [...] Although HTTP/2
           could also potentially address these requirements, there =
would be
           additional costs and delays introduced by such a transition.
           Currently, there are also fewer HTTP/2 implementations =
available for
           constrained devices in comparison to CoAP.

These sentences are lame; I still don't understand why they are needed.
The main point here is that HTTP/2 is a complexity fest compared to =
CoAP.
Also, HTTP/2 has not yet been extended by important concepts such as
Observe.

           [...]
           In addition, some corporate networks only allow Internet =
access via a
           HTTP proxy.  In this case, the best transport for CoAP would =
be the
           WebSocket Protocol [RFC6455].  The WebSocket protocol =
provides two-

Well, an HTTP proxy won't necessarily allow WebSockets through.

        1.1.  Terminology

           [...]
           This document assumes that readers are familiar with the =
terms and
           concepts that are used in [RFC6455], [RFC7252], and =
[RFC7641].

and RFC 7959.

           The term "reliable transport" only refers to stream-based =
transport
           protocols such as TCP.

s/only refers/is used only to refer/

(We could say more explicitly: sequenced/order-preserving, reliable...
Stream might be byte stream or message stream.)

        2.1.  Messaging Model

           Conceptually, CoAP over TCP replaces most of the CoAP over =
UDP
           message layer with a framing mechanism on top of the byte =
stream
           provided by TCP/TLS, conveying the length information for =
each
           message that on datagram transports is provided by the =
UDP/DTLS
           datagram layer.

s/CoAP over UDP message layer/message layer of CoAP over UDP/

              Figure 2: Comparison between CoAP over unreliable and =
reliable
                                        transport.

Captions are not sentences and therefore don't end in periods (see
Figure 1). (Comment not repeated further down.)

        2.3.  Opening Handshake

           [...]
           Clients and servers MUST treat a missing or invalid CSM as a
           connection error and abort the connection (see Section 4.6).

This is probably the right thing to do, but it does mean that we are now
incompatible again with the OCF 1.0 version of CoAP over TCP.
We could define an OCF 1.0 compatibility mode.

        2.4.  Message Format

           [...]

           o  In a stream oriented transport protocol such as TCP, a =
form of

s/stream/byte stream/
(We probably should review the entire terminology about "reliable",
sequence-preserving, byte/message streams once more.)


            0                   1                   2                   =
3
            0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 =
0 1
           =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
           |Len=3D13 |  TKL  |Extended Length|      Code     | TKL bytes =
...
           =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
           |  Options (if any) ...
           =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
           |1 1 1 1 1 1 1 1|    Payload (if any) ...
           =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                  Figure 4: CoAP frame with 8-bit Extended Length field.

This (and neither does the text) does not make clear that the payload
marker is sent only if there is a non-zero-length payload.  (Same for
other below.)

Please cf. text from Section 3 of RFC 7252:

   Following the header, token, and options, if any, comes the optional
   payload.  If present and of non-zero length, it is prefixed by a
   fixed, one-byte Payload Marker (0xFF), which indicates the end of
   options and the start of the payload.  The payload data extends from
   after the marker to the end of the UDP datagram, i.e., the Payload
   Length is calculated from the datagram size.  The absence of the
   Payload Marker denotes a zero-length payload.  The presence of a
   marker followed by a zero-length payload MUST be processed as a
   message format error.



        3.  CoAP over WebSockets

           [...]

Hmm, why is the following done here for WS and not above for TCP?
Seems redundant with 6.2?  Oh, the point here is to derive the ws[s]
URI used for setting up the WS?

           Section 6.2 defines a new "coap+ws" URI scheme that =
identifies both a
           WebSocket endpoint and a resource within that endpoint as =
follows:

                     coap+ws://example.org/sensors/temperature?u=3DCel
                          \______  ______/\___________  ___________/
                                 \/                   \/
                                                    Uri-Path: "sensors"
               ws://example.org/.well-known/coap    Uri-Path: =
"temperature"
                                                    Uri-Query: "u=3DCel"

                            Figure 10: The "coap+ws" URI Scheme

The following now seems unrelated:

           Another possible configuration is to set up a CoAP forward =
proxy at
           the WebSocket endpoint.  Depending on what transports are =
available
           [...]

              Figure 12: CoAP Client (UDP client) accesses sleepy CoAP =
Server
             (WebSocket client) via a CoAP proxy (UDP server/WebSocket =
server)

s/sleepy//
(There is no mention of sleepiness here.)

           [...]

           CoAP over WebSockets is intentionally very similar to CoAP =
over UDP.
           Therefore, instead of presenting CoAP over WebSockets as a =
new
           protocol, this document specifies it as a series of deltas =
from
           [RFC7252].

Probably best to delete that paragraph -- it is true not only for WS,
but also for TCP.  So why only here?

        3.1.  Opening Handshake

Hmm, the title is confusing.  WS also uses the same opening handshake as =
2.3.
The parts that relate to both TCP/TLS and WS/S need to be factored out.


        3.2.  Message Format

           [...]

           The message format shown in Figure 14 is the same as the CoAP =
over
           TCP message format (see Section 2.4) with one restriction.  =
The
           Length (Len) field MUST be set to zero because the WebSockets =
frame
already
           contains the length.

s/restriction/change/.

           [...]

               0                   1                   2                 =
  3
              0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 =
9 0 1
             =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
             |   Len |  TKL  |      Code     |    Token (TKL bytes) ...
             =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
             |   Options (if any) ...
             =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
             |1 1 1 1 1 1 1 1|    Payload (if any) ...
             =
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

                      Figure 14: CoAP Message Format over WebSockets

Maybe show 0, not Len here.
(This also does not make clear that the payload marker is sent only if
there is a non-zero-length payload.)

           The CoAP over TCP message format eliminates the Version field =
defined
           in CoAP over UDP.  If CoAP version negotiation is required in =
the
           future, CoAP over WebSockets can address the requirement by =
the
           definition of a new subprotocol identifier that is negotiated =
during
           the opening handshake.

This paragraph is a bit weird.  Maybe:

   As with CoAP over TCP, the message format for CoAP over Websockets
   eliminates the Version field defined in CoAP over UDP.  If CoAP [...]

           [...]

           Empty messages (Code 0.00) MUST be ignored by the recipient =
(see also
           Section 4.4).

Why are we saying this here and not in Section 2?
Factor out.

        3.3.  Message Transmission

           [...]

Similar as with CoAP over TCP,
           Retransmission and deduplication of messages is provided by =
the
           WebSocket protocol.  CoAP over WebSockets therefore does not =
make a
           distinction between Confirmable or Non-Confirmable messages, =
and does
           not provide Acknowledgement or Reset messages.

        3.4.  Connection Health

           [...]
           There is no way to retransmit a request without creating a =
new one.
           Re-registering interest in a resource is permitted, but =
entirely
           unnecessary.

(See the discussion we already had.)

        4.  Signaling

           Signaling messages are introduced to allow peers to:

           o  Share characteristics such as maximum message size for the
              connection

s/Share/Relate/
(the nodes do not "share these characteristics")

           o  Shutdown the connection in an ordered fashion

Shut down
s/Ordered/Orderly/

           o  Terminate the connection in response to a serious error =
condition

Provide diagnostic information when terminating a connection in ...

           [...]

        4.3.  Capability and Settings Messages (CSM)

Hmm, should this be "Capabilities and Settings Messages"?
(Need to change throughout.)

           Capability and Settings messages (CSM) are used for two =
purposes:

           o  Each capability option advertises one capability of the =
sender to
              the recipient.

           o  Setting options indicate a setting that will be applied by =
the
              sender.

s/A/One/
s/Capability and Settings message/CSM/
           A Capability and Settings message MUST be sent by both =
endpoints at
           the start of the connection and MAY be sent at any other time =
by
s/and/. Further CSM/
           either endpoint over the lifetime of the connection.

           Both capability and settings options are cumulative.  A =
Capability
s/settings/setting/
           and Settings message does not invalidate a previously sent =
capability
           indication or setting even if it is not repeated.  A =
capability
           message without any option is a no-operation (and can be used =
as
           such).  An option that is sent might override a previous =
value for

           [...]

        4.3.1.  Server-Name Setting Option

           [...]
           For TLS, the initial value for the Server-Name Option is =
given by the
           SNI value.

s/initial/base/???

           [...]

        4.3.2.  Max-Message-Size Capability Option

           [...]

           As per Section 4.6 of [RFC7252], the base value (and the =
value used
           when this option is not implemented) is 1152.  A peer that =
relies on



        Bormann, et al.          Expires April 14, 2017                =
[Page 17]
        =0C
        Internet-Draft   TCP/TLS/WebSockets Transports for CoAP     =
October 2016


           this option being indicated with a certain minimum value will =
enjoy
           limited interoperability.

(above 1152?)

        6.  CoAP URIs

           CoAP over UDP [RFC7252] defines the "coap" and "coaps" URI =
schemes
           for identifying CoAP resources and providing a means of =
locating the
           resource.

In this section, the terms "client" and "server" are used WRT the TCP
connection, not WRT CoAP, and that may be very confusing.  Maybe use
different terms here (initiator/responder)?


        6.1.  CoAP over TCP and TLS URIs

           [...]

           [RFC7252], Section 8 (Multicast CoAP) is not applicable to =
these
           schemes.

Not sure this belongs here, but it also should apply to 6.2, so maybe
move it up to 6.

           Resources made available via one of the "coap+tcp" or =
"coaps+tcp"
           schemes have no shared identity with the other scheme or with =
the
           "coap" or "coaps" scheme, even if their resource identifiers =
indicate
           the same authority (the same host listening to the same =
port).  The
           schemes constitute distinct namespaces and, in combination =
with the
           authority, are considered to be distinct origin servers.

Ditto.

           [...]

        6.2.  CoAP over WebSockets URIs

           For the first configuration discussed in Section 3, this =
document
           defines two new URIs schemes that can be used for identifying =
CoAP
           resources and providing a means of locating these resources:
           "coap+ws" and "coap+wss".

coap+wss is the only coaps scheme that doesn't have coaps in the name.
I continue to believe that this is a mistake.
s/coap+wss/coaps+ws/g.

           Similar to the "coap" and "coaps" schemes, the "coap+ws" and
           "coap+wss" schemes organize resources hierarchically under a =
CoAP
           origin server.  The key difference is that the server is =
potentially
           reachable on a WebSocket endpoint instead of a UDP endpoint.

s/potentially reachable/intended to be reached/

           The WebSocket endpoint is identified by a "ws" or "wss" URI =
that is
           composed of the authority part of the "coap+ws" or "coap+wss" =
URI,
           respectively, and the well-known path "/.well-known/coap" =
[RFC5785].
           The path and query parts of a "coap+ws" or "coap+wss" URI =
identify a
           resource within the specified endpoint which can be operated =
on by
           the methods defined by CoAP.

The following paragraph applies to 6.1.1, 6.1.2, and this subsection.
(Move up to 6.)

           The syntax of the "coap+ws" and "coap+wss" URI schemes is =
specified
           below in Augmented Backus-Naur Form (ABNF) [RFC5234].  The
           definitions of "host", "port", "path-abempty" and "query" are =
the
           same as in [RFC3986].

             coap-ws-URI =3D
                "coap+ws:" "//" host [ ":" port ] path-abempty [ "?" =
query ]

             coap-wss-URI =3D
                "coap+wss:" "//" host [ ":" port ] path-abempty [ "?" =
query ]

           The port component is OPTIONAL; the default for "coap+ws" is =
port 80,
           while the default for "coap+wss" is port 443.

           Fragment identifiers are not part of the request URI and thus =
MUST
           NOT be transmitted in a WebSocket handshake or in the URI =
options of
           a CoAP request.

(They can't be in a CoAP request; not sure what the MUST NOT means.
But again, this also applies to the TCP/TLS case.)

        6.2.1.  Decomposing and Composing URIs

           [...]

           o  A Uri-Host Option MUST only be included in a request when =
the
              <host> component does not equal the uri-host component in =
the Host
              header field in the WebSocket handshake.

Wrong use of MUST.  (MUST it be included or is this a MUST NOT if =
equal?)

           o  A Uri-Port Option MUST only be included in a request if =
|port|
              does not equal the port component in the Host header field =
in the
              WebSocket handshake.

Ditto.

           The steps to construct a URI from a request's options are =
changed
           accordingly.

        7.  Security Considerations

           The security considerations of [RFC7252] apply.

We SHOULD NOT be using RFC 2119 language in the security
considerations.  If there are mandates, they SHOULD be in the sections
defining the protocol.  Possible security considerations arising from
those mandates then are discussed here.

           TLS version 1.2 or higher is mandatory-to-implement and MUST =
be
           enabled by default.  An endpoint MAY immediately abort a CoAP =
over
           TLS connection that does not meet this requirement (see =
Section 4.6)
           and SHOULD include a diagnostic payload.

           The TLS usage guidance in [RFC7925] SHOULD be followed.

There are several MUSTs in that document.  Do we want to turn them
into SHOULDs?  No. ->

   The TLS usage guidance in [RFC7925] applies.

           [...]


        8.1.  Signaling Codes

           Each entry in the sub-registry must include the Signaling =
Code in the
           range 7.01-7.31, its name, and a reference to its =
documentation.

Is 7.00 reserved?


        8.2.  CoAP Signaling Option Numbers Registry

           IANA is requested to create a sub-registry for signaling =
options
           similar to the CoAP Option Numbers Registry (Section 12.2 of
           [RFC7252]), with the single change that a fourth column is =
added to
           the sub-registry that is one of the codes in the Signaling =
Codes
           subregistry (Section 8.1).

s/one/one or more/


        8.5.  URI Scheme Registration

This section needs to get symmetric between the four URI schemes =
defined.

           [...]

           IANA is requested to add these new URI schemes to the =
registry
           established with [RFC7595].

We need to fill in the template.  See above comment.


        8.5.1.  coap+ws

           [...]

           URI scheme syntax.
              Defined in Section N of [RFCthis]

s/N/6.2/

           URI scheme semantics.
              The "coap+ws" URI scheme provides a way to identify =
resources that
              are potentially accessible over the Constrained =
Application
              Protocol (CoAP) using the WebSocket protocol.

s/are potentially accessible/are intended to be accessible/

           [...]

           Security Considerations.
              See Section N of [RFCthis]

s/N/7/


        8.5.2.  coap+wss

           [...]

           URI scheme syntax.
              Defined in Section N of [RFCthis]
s/N/6.2/

           URI scheme semantics.
              The "coap+ws" URI scheme provides a way to identify =
resources that
              are potentially accessible over the Constrained =
Application
              Protocol (CoAP) using the WebSocket protocol secured with
              Transport Layer Security (TLS).

s/coap+ws/coaps+ws/

           [...]

           Security Considerations.
              See Section N of [RFCthis]

s/N/7/


        Appendix A.  Updates to RFC7641 Observing Resources in the =
Constrained
                     Application Protocol (CoAP)

This needs to be referenced from the main body in some form.

        Appendix B.  Negotiating Protocol Versions

           [...]

           In contrast to the message layer for UDP and DTLS, the CoAP =
over TCP
           message format does not include a version number.  If version
           negotiation needs to be addressed in the future, then =
Capability and
           Settings have been specifically designed to enable such a =
potential
           feature.

s/Capability and Settings/Capabilities and Settings Messages (CSM)/


From nobody Mon Nov 14 08:27:27 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C2B5128E19 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 08:27:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.922
X-Spam-Level: 
X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kGBeN7xI2c3T for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 08:27:23 -0800 (PST)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0110.outbound.protection.outlook.com [104.47.32.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A33BC12986D for <core@ietf.org>; Mon, 14 Nov 2016 08:27:23 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=i/puAQkFIgh1wLU3zxFgAxxRQERhQmUydcck88Ea/ds=; b=toZia59DbUSt6/TxSpfvzaWIGS5VJp/SITsvQsVpR/MV12N2kdTXFKnJdV+ASB76nqf818/FmO6zMAVExF9oA5PNejR5vEyJs8xbDUf47IYrojZca811Lyo4YtwU8tHe2GdfgaKuBpcjkESLTG7jPC4tFfi27yYVQmoSNYkagpE=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2305.namprd06.prod.outlook.com (10.173.19.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Mon, 14 Nov 2016 16:27:20 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0721.010; Mon, 14 Nov 2016 16:27:20 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>, Core <core@ietf.org>
Thread-Topic: [core] draft-ietf-core-sid-00, SID allocation
Thread-Index: AQHSPgvqKuwFK38feES63NsOWHStz6DYp/Pw
Date: Mon, 14 Nov 2016 16:27:20 +0000
Message-ID: <BN6PR06MB230804ACCD67ABD30F9D966FFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
In-Reply-To: <c39b5765e0554a4832f59395fb481a34@xs4all.nl>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2305; 7:Tryt5iCrG1UD2b2Fc18Qs7pCj6492WjAkw+dbGz/mzmJcbfruEkS7f1c/9PoTH0+bDI8gi9T08lnIHQBkwX7Wa3J0GP0GWGQml/NskhY/KCJPsiOotdsSYGqR9NfCPQEFESyBq8F5X1pP6yS49ivWM4HO+aPRqBw1JdzG1KFPsRlLZZecQGuYf0LClWx10FBQYUA4kcfaYtfDHd2hjWRkVph1n7eTiwIVo4Liwp+Ebrs0Kdt9BC4Y1kCoJ72hlETLQrgW6L9EQ2Szq9FBOmu2zgKc2sanE5fpVdwrqPtFOa1/Tgxph/eJj/VHB0FZEwjaq+Hxa19jfAQGg31Fu4ue9jQrnvzMxIhG+j8uRSGyCc=
x-ms-office365-filtering-correlation-id: fdd3a3ca-19f4-48aa-f0fc-08d40cab1b4a
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2305;
x-microsoft-antispam-prvs: <BN6PR06MB2305CE3A2A256B43AA917F00FEBC0@BN6PR06MB2305.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(35073007944872);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6061321); SRVR:BN6PR06MB2305; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2305; 
x-forefront-prvs: 0126A32F74
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(336003)(13464003)(129404003)(189002)(199003)(51444003)(377454003)(15974865002)(76576001)(76176999)(54356999)(561944003)(33656002)(50986999)(7696004)(230783001)(81166006)(2950100002)(229853002)(99286002)(81156014)(122556002)(68736007)(3280700002)(5660300001)(105586002)(305945005)(9686002)(66066001)(106356001)(106116001)(3846002)(7736002)(86362001)(6116002)(7846002)(586003)(2900100001)(102836003)(74316002)(107886002)(8936002)(101416001)(189998001)(3660700001)(8676002)(97736004)(2906002)(87936001)(2501003)(92566002)(77096005)(5001770100001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2305; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2016 16:27:20.0907 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2305
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/1_lrJMIn0w4Tnsd9B0A2JifkYGo>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 16:27:26 -0000

Hi Peter.

The allocation by range have been introduced to simplify the life of SDOs, =
not to make their life more difficult.
With your proposal, the SDO must interact with IANA for each module created=
.
With the allocation by ranges, the allocated range can be large enough to a=
llow the SDO to be autonomous for multiple years of development, for dozen =
of modules.

Updating the different drafts to identify YANG items using (module ID, modu=
le item ID) is possible, but not with some impacts on message size and comp=
lexity.

Regards,
Michel

-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der Stok
Sent: Sunday, November 13, 2016 7:13 PM
To: Core <core@ietf.org>
Subject: [core] draft-ietf-core-sid-00, SID allocation

Dear YANG-SID authors,

I want to propose a change to the allocation of SIDs.
Currently, the SIDs are divided in ranges and prospective users can registe=
r a range with IANA.
When the range is already assigned, they need to select a new not allocated=
 range.
I think that this will discourage many future SDOs who may want to use YANG=
 + COMI. Many of these SDOs like to figure out the best number structure fo=
r their uses, and will be very disappointed when they cannot acquire the ra=
nge. Actually, I believe, they will abandon the use of YANG + COMI.

My proposal is to assign numbers to modules, and let IANA handle the module=
 number registration as proposed for the SIDs. The assignment of SIDs to YA=
NG identifiers, as proposed in the draft remains, the same.=20
The difference is the complete freedom to choose the SIDs in any given modu=
le. The advantage is that all modules can pick their values from the small =
number range.

The change is in the discovery and the structure of the resource path.=20
In COMI I want to define another resource type called YANG module with name=
 core.c.module. The discovery will return the path:=20
/prefix/module-number-in-binary64. For example, with an empty prefix and fo=
r module 32, discovery will return /g. To retrieve a specific YANG instance=
 with numeric identifier sid in module 32, the statement GET coap/example.c=
om/g/sid will do. With two characters, modules with numbers < 4096 are cove=
red; probably 3 characters will cover all modules.  Given that the SIDs are=
 small, the total URI size will not increase due to this modification.

When the full datastore is accessed, the path /c is currently used. We can =
reserve c, meaning module number 28 is already assigned. Another method is =
returning a long path name, such as /whole_store. The size of the related U=
RI is not important in this case. However, the proposed module allocation n=
ecessitates a small modification to the CBOR representation of the contents=
 of the full datastore. This is attained by representing the full datastore=
 as a CBOR map containing (key, value) pairs, where key is the module numbe=
r and value is the content of the module as specified in yang-cbor document=
.

For the PATCH and the FETCH methods, this representation will also work, gi=
ven the content-formats that are currently looked at.

I hope you like my proposal. The advantage is a simpler IANA administration=
, SID allocation freedom within a module, and shorter SIDs. The disadvantag=
e is a slight complexity increase in the CBOR representation of the full da=
tastore.

Hope this helps,

Peter


--
Peter van der Stok
vanderstok consultancy
mailto: consultancy@vanderstok.org
www: www.vanderstok.org
tel NL: +31(0)492474673     F: +33(0)966015248

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Mon Nov 14 09:12:07 2016
Return-Path: <andy@yumaworks.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 044FF129891 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 09:12:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p5jwTt6E-arP for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 09:12:04 -0800 (PST)
Received: from mail-ua0-x234.google.com (mail-ua0-x234.google.com [IPv6:2607:f8b0:400c:c08::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04C33129546 for <core@ietf.org>; Mon, 14 Nov 2016 09:12:04 -0800 (PST)
Received: by mail-ua0-x234.google.com with SMTP id 51so67607584uai.1 for <core@ietf.org>; Mon, 14 Nov 2016 09:12:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=P62R/9T8zOUjqd7uy5WKFGqoAzhEt10fPx3VTS5481g=; b=zSpNGsSJ7voBTqsnqijaG8FXbekynWaFOw5KO6CtCZcyfuUQOPqc5IcVVekrIBKcX+ eswcVsUV1PLATS1WjGUPP1ZUqufwFgEr6HVPAmb+Oc6lsTfaLPDEBziy5IDgNCA0aIlA Va5/Eabi/w1E9p+eC1/MjHD2Z9+EfGD6Hr8US6oVA6qLtY39Lugv+FDi7dHvzAf3UjRX atH85EfFeIyWFwnmI00rt8D7rMhQ9FR+jwjYGEZ3nLsUzXItuT7+z6/iTs2ei97eE04l yQN8uB4uj6zMhdoAHQdFYk7PDbc+IrCXS7w6jlwfNKQvjuNtVF8XJRAwYIIhArrhTtxS K8Jw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=P62R/9T8zOUjqd7uy5WKFGqoAzhEt10fPx3VTS5481g=; b=Y6r+O+7ebGASFg9FvavTxWlEdtRKb8r8mLBS76OSVPB3EXn5saQx8uLbD+W877S8zC uxukTLrl1tytIOR/ZSjEAbTjlP3TDrnc8RP/ozB5ktkn9OwuSvi6muUmcjVKUCMphFDl ztRoYr7H6SOsMzqxN6NXJ8sBQ3b1eXKl2wHzdxQDuarPrwlkumgNpIKHYdI22o4p47XP hOqL3PEPUjHuyPLZauQb/fluDI517TJDjTXCkFnxcJ6rpWT2rMEfFWED1AjX48GHgUwZ a6w03F0MuX0S3X1fbio43tlpzENqSTrVEYklr76PSs1v4BxRicGM7WlKko81YH5uv1/w Snlw==
X-Gm-Message-State: ABUngveWNlY4tZ30qa17eHxygDPyhj+mYiafoCUKz36wnILMgGEXvtqAXi7rdqduxDd6gprBWbwafJgjp5u0Sg==
X-Received: by 10.159.39.7 with SMTP id a7mr8872274uaa.95.1479143523054; Mon, 14 Nov 2016 09:12:03 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.64.129 with HTTP; Mon, 14 Nov 2016 09:12:02 -0800 (PST)
In-Reply-To: <BN6PR06MB230804ACCD67ABD30F9D966FFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <BN6PR06MB230804ACCD67ABD30F9D966FFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Mon, 14 Nov 2016 09:12:02 -0800
Message-ID: <CABCOCHTDr=hNRhZ4KeZzsv0VsRTpSgCzXVFdWsc5BXQ0FVx+yA@mail.gmail.com>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Content-Type: multipart/alternative; boundary=94eb2c1244f6438ae2054145f04f
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/IOfAA2YYMqk6yfH2-kEvEDYuj2M>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 17:12:06 -0000

--94eb2c1244f6438ae2054145f04f
Content-Type: text/plain; charset=UTF-8

On Mon, Nov 14, 2016 at 8:27 AM, Michel Veillette <
Michel.Veillette@trilliantinc.com> wrote:

> Hi Peter.
>
> The allocation by range have been introduced to simplify the life of SDOs,
> not to make their life more difficult.
> With your proposal, the SDO must interact with IANA for each module
> created.
> With the allocation by ranges, the allocated range can be large enough to
> allow the SDO to be autonomous for multiple years of development, for dozen
> of modules.
>
>
The interpretation of the number is completely independent of the
allocation of the number.  One could allocate a block of module IDs
just as easily as a block of object IDs.

The disconnect here is the number of available IDs vs. the number of
IDs needed.  You seem to think this is a precious resource.  I do not.


Andy


> Updating the different drafts to identify YANG items using (module ID,
> module item ID) is possible, but not with some impacts on message size and
> complexity.
>
> Regards,
> Michel
>
> -----Original Message-----
> From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der Stok
> Sent: Sunday, November 13, 2016 7:13 PM
> To: Core <core@ietf.org>
> Subject: [core] draft-ietf-core-sid-00, SID allocation
>
> Dear YANG-SID authors,
>
> I want to propose a change to the allocation of SIDs.
> Currently, the SIDs are divided in ranges and prospective users can
> register a range with IANA.
> When the range is already assigned, they need to select a new not
> allocated range.
> I think that this will discourage many future SDOs who may want to use
> YANG + COMI. Many of these SDOs like to figure out the best number
> structure for their uses, and will be very disappointed when they cannot
> acquire the range. Actually, I believe, they will abandon the use of YANG +
> COMI.
>
> My proposal is to assign numbers to modules, and let IANA handle the
> module number registration as proposed for the SIDs. The assignment of SIDs
> to YANG identifiers, as proposed in the draft remains, the same.
> The difference is the complete freedom to choose the SIDs in any given
> module. The advantage is that all modules can pick their values from the
> small number range.
>
> The change is in the discovery and the structure of the resource path.
> In COMI I want to define another resource type called YANG module with
> name core.c.module. The discovery will return the path:
> /prefix/module-number-in-binary64. For example, with an empty prefix and
> for module 32, discovery will return /g. To retrieve a specific YANG
> instance with numeric identifier sid in module 32, the statement GET coap/
> example.com/g/sid will do. With two characters, modules with numbers <
> 4096 are covered; probably 3 characters will cover all modules.  Given that
> the SIDs are small, the total URI size will not increase due to this
> modification.
>
> When the full datastore is accessed, the path /c is currently used. We can
> reserve c, meaning module number 28 is already assigned. Another method is
> returning a long path name, such as /whole_store. The size of the related
> URI is not important in this case. However, the proposed module allocation
> necessitates a small modification to the CBOR representation of the
> contents of the full datastore. This is attained by representing the full
> datastore as a CBOR map containing (key, value) pairs, where key is the
> module number and value is the content of the module as specified in
> yang-cbor document.
>
> For the PATCH and the FETCH methods, this representation will also work,
> given the content-formats that are currently looked at.
>
> I hope you like my proposal. The advantage is a simpler IANA
> administration, SID allocation freedom within a module, and shorter SIDs.
> The disadvantage is a slight complexity increase in the CBOR representation
> of the full datastore.
>
> Hope this helps,
>
> Peter
>
>
> --
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>

--94eb2c1244f6438ae2054145f04f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Mon, Nov 14, 2016 at 8:27 AM, Michel Veillette <span dir=3D"ltr">&lt=
;<a href=3D"mailto:Michel.Veillette@trilliantinc.com" target=3D"_blank">Mic=
hel.Veillette@trilliantinc.com</a>&gt;</span> wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">Hi Peter.<br>
<br>
The allocation by range have been introduced to simplify the life of SDOs, =
not to make their life more difficult.<br>
With your proposal, the SDO must interact with IANA for each module created=
.<br>
With the allocation by ranges, the allocated range can be large enough to a=
llow the SDO to be autonomous for multiple years of development, for dozen =
of modules.<br>
<br></blockquote><div><br></div><div>The interpretation of the number is co=
mpletely independent of the</div><div>allocation of the number.=C2=A0 One c=
ould allocate a block of module IDs</div><div>just as easily as a block of =
object IDs.</div><div><br></div><div>The disconnect here is the number of a=
vailable IDs vs. the number of</div><div>IDs needed.=C2=A0 You seem to thin=
k this is a precious resource.=C2=A0 I do not.</div><div><br></div><div><br=
></div><div>Andy</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Updating the different drafts to identify YANG items using (module ID, modu=
le item ID) is possible, but not with some impacts on message size and comp=
lexity.<br>
<br>
Regards,<br>
Michel<br>
<br>
-----Original Message-----<br>
From: core [mailto:<a href=3D"mailto:core-bounces@ietf.org">core-bounces@ie=
tf.org</a>] On Behalf Of peter van der Stok<br>
Sent: Sunday, November 13, 2016 7:13 PM<br>
To: Core &lt;<a href=3D"mailto:core@ietf.org">core@ietf.org</a>&gt;<br>
Subject: [core] draft-ietf-core-sid-00, SID allocation<br>
<br>
Dear YANG-SID authors,<br>
<br>
I want to propose a change to the allocation of SIDs.<br>
Currently, the SIDs are divided in ranges and prospective users can registe=
r a range with IANA.<br>
When the range is already assigned, they need to select a new not allocated=
 range.<br>
I think that this will discourage many future SDOs who may want to use YANG=
 + COMI. Many of these SDOs like to figure out the best number structure fo=
r their uses, and will be very disappointed when they cannot acquire the ra=
nge. Actually, I believe, they will abandon the use of YANG + COMI.<br>
<br>
My proposal is to assign numbers to modules, and let IANA handle the module=
 number registration as proposed for the SIDs. The assignment of SIDs to YA=
NG identifiers, as proposed in the draft remains, the same.<br>
The difference is the complete freedom to choose the SIDs in any given modu=
le. The advantage is that all modules can pick their values from the small =
number range.<br>
<br>
The change is in the discovery and the structure of the resource path.<br>
In COMI I want to define another resource type called YANG module with name=
 core.c.module. The discovery will return the path:<br>
/prefix/module-number-in-<wbr>binary64. For example, with an empty prefix a=
nd for module 32, discovery will return /g. To retrieve a specific YANG ins=
tance with numeric identifier sid in module 32, the statement GET coap/<a h=
ref=3D"http://example.com/g/sid" rel=3D"noreferrer" target=3D"_blank">examp=
le.com/g/sid</a> will do. With two characters, modules with numbers &lt; 40=
96 are covered; probably 3 characters will cover all modules.=C2=A0 Given t=
hat the SIDs are small, the total URI size will not increase due to this mo=
dification.<br>
<br>
When the full datastore is accessed, the path /c is currently used. We can =
reserve c, meaning module number 28 is already assigned. Another method is =
returning a long path name, such as /whole_store. The size of the related U=
RI is not important in this case. However, the proposed module allocation n=
ecessitates a small modification to the CBOR representation of the contents=
 of the full datastore. This is attained by representing the full datastore=
 as a CBOR map containing (key, value) pairs, where key is the module numbe=
r and value is the content of the module as specified in yang-cbor document=
.<br>
<br>
For the PATCH and the FETCH methods, this representation will also work, gi=
ven the content-formats that are currently looked at.<br>
<br>
I hope you like my proposal. The advantage is a simpler IANA administration=
, SID allocation freedom within a module, and shorter SIDs. The disadvantag=
e is a slight complexity increase in the CBOR representation of the full da=
tastore.<br>
<br>
Hope this helps,<br>
<br>
Peter<br>
<br>
<br>
--<br>
Peter van der Stok<br>
vanderstok consultancy<br>
mailto: <a href=3D"mailto:consultancy@vanderstok.org">consultancy@vandersto=
k.org</a><br>
www: <a href=3D"http://www.vanderstok.org" rel=3D"noreferrer" target=3D"_bl=
ank">www.vanderstok.org</a><br>
tel NL: +31(0)492474673=C2=A0 =C2=A0 =C2=A0F: +33(0)966015248<br>
<br>
______________________________<wbr>_________________<br>
core mailing list<br>
<a href=3D"mailto:core@ietf.org">core@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/core" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/core</a><br>
<br>
______________________________<wbr>_________________<br>
core mailing list<br>
<a href=3D"mailto:core@ietf.org">core@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/core" rel=3D"noreferrer" t=
arget=3D"_blank">https://www.ietf.org/mailman/<wbr>listinfo/core</a><br>
</blockquote></div><br></div></div>

--94eb2c1244f6438ae2054145f04f--


From nobody Mon Nov 14 12:47:19 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 398EF129618 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 12:47:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.921
X-Spam-Level: 
X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8VaYIbAFnzZD for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 12:47:14 -0800 (PST)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0103.outbound.protection.outlook.com [104.47.34.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49073129606 for <core@ietf.org>; Mon, 14 Nov 2016 12:47:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=IJ5Ev47b+g7nEJ8VJ45DjgVdxU7EZ9u4r1E9MTvG73w=; b=ZDQ32NpEtdpD6GWZqNI12HuNLqkriWRx37eWHPpcKmuvFCoN/Cl9aduHDuqRjZIScL42RsKz9NDBm6IEErIXVySa3W7NcsmJWmDy59yCfLifTw8qv1wl8pywrbQGT24HkgJ9qsTPx/Aq0svG4zhVa9zfnpADEhn6DpcIifkZySw=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Mon, 14 Nov 2016 20:47:09 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0721.010; Mon, 14 Nov 2016 20:47:09 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: Andy Bierman <andy@yumaworks.com>, Alexander Pelov <a@ackl.io>
Thread-Topic: [core] draft-ietf-core-sid-00, SID allocation
Thread-Index: AQHSPgvqKuwFK38feES63NsOWHStz6DXrZsAgAAHuwCAAAPMgIAA+fdA
Date: Mon, 14 Nov 2016 20:47:09 +0000
Message-ID: <BN6PR06MB2308A16ECB9F361854D15631FEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com> <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io> <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com>
In-Reply-To: <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2308; 7:g9tS1AAYJSxXQ65xX/Cg3f/AfX/4Alx2WHljiKAZpYSoQ4L0+OKBAIJyRTuzsktfSBnNXNgkxfVqF8Gou3fz0Zaz2MMDCl1+XNqVQ9yq+7crzRS2RPSp3NJCXuhnwaSuofRsFS6+DMGxdiw+2G6ZGCqWpQ//yXltK5TNeek7yuTJ77KIqVHpbl1y5QbibKQO2w13VS5RbYp1qCb5sTu3c8oCXwNYN65pax4ZkG4z03r9y7m4NsIpf3OFCH94GcKmDmkRY+U6PN+TjNOJsy0fnIybZG7Ir8OSMWNpU35u4C1Q13RoN0nLuhOsNrQfJKHoTkdLKp3lglHTbP5uD7qlJZSVsWjwf1s3E1OAVrtr8Ds=
x-ms-office365-filtering-correlation-id: 5c81c17e-b40b-4e54-f20c-08d40ccf676a
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2308;
x-microsoft-antispam-prvs: <BN6PR06MB2308787CA52D0FDDD53CB6DCFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6061324); SRVR:BN6PR06MB2308; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2308; 
x-forefront-prvs: 0126A32F74
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(189002)(24454002)(129404003)(199003)(51444003)(377454003)(7736002)(2900100001)(7906003)(7696004)(7846002)(229853002)(93886004)(105586002)(66066001)(3660700001)(99286002)(92566002)(2906002)(4326007)(81166006)(5660300001)(122556002)(68736007)(86362001)(81156014)(106356001)(106116001)(8936002)(19273905006)(74316002)(6116002)(2950100002)(3846002)(76576001)(790700001)(87936001)(77096005)(102836003)(3280700002)(76176999)(9686002)(33656002)(101416001)(561944003)(8676002)(19609705001)(54356999)(551934003)(5001770100001)(97736004)(230783001)(50986999)(15395725005)(189998001)(781001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2308; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR06MB2308A16ECB9F361854D15631FEBC0BN6PR06MB2308namp_"
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2016 20:47:09.7266 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2308
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/fP5nWvtFCbTei44W7JWmAVBRHPQ>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 20:47:17 -0000

--_000_BN6PR06MB2308A16ECB9F361854D15631FEBC0BN6PR06MB2308namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_BN6PR06MB2308A16ECB9F361854D15631FEBC0BN6PR06MB2308namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy
bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt
YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj
cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv
VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg
Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv
ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl
PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6
IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m
YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy
IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws
IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ
Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9
DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj
b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu
Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw
dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z
b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt
c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t
Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K
CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4ubS03OTgyODc5ODQ5
NzA0MzY0NDI0aG9lbnpiDQoJe21zby1zdHlsZS1uYW1lOm1fLTc5ODI4Nzk4NDk3MDQzNjQ0MjRo
b2VuemI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJ
Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpz
cGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv
bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z
b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw
LjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu
OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk
U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl
ZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0t
LT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4N
CjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1s
PjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZs
aW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUNBIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh
bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkhpIEFuZHk8bzpwPjwvbzpwPjwv
c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9
ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl
cmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1
b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj49PT0gQWJvdXQgdGhlIHNpemUgb2YgdGhlIFNJ
RCByYW5nZSBhbGxvY2F0ZWQgdG8gZWFjaCBZQU5HIG1vZHVsZTxvOnA+PC9vOnA+PC9zcGFuPjwv
cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUNBIiBzdHlsZT0iZm9udC1z
aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxv
OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh
bmc9IkVOLUNBIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp
YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRoZSAyMCBiaXRzIHJhbmdlIHByb3Bvc2VkIGlzIG5vdCBp
bmNvbXBhdGlibGUgd2l0aCAnZHJhZnQtaWV0Zi1jb3JlLXNpZCcuPG86cD48L286cD48L3NwYW4+
PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tQ0EiIHN0eWxlPSJmb250
LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+
RWFjaCBlbnRpdHkgYWxsb2NhdGluZyBTSURzIChlLmcuIFNET3MsIEVuZCB1c2VycykgaXMgZnJl
ZSB0byBkZWZpbmUgdGhlIHNpemUgb2YgdGhlIFNJRCByYW5nZSBhbGxvY2F0ZWQgdG8gZWFjaCBZ
QU5HIG1vZHVsZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1
b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQtc2l6
ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5EbyB5
b3UgcHJvcG9zZSB0byBtYW5kYXRlIGEgZml4ZWQgcmFuZ2Ugc2l6ZSAoZS5nLiAyMCBiaXRzIC8g
MTA0ODU3NiBJRHMpID88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij48c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6
JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48
L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQt
c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4n
ZHJhZnQtYmllcm1hbi1jb3JlLXlpZCcgKDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv
aHRtbC9kcmFmdC1iaWVybWFuLWNvcmUteWlkLTAwI3NlY3Rpb24tMi4xIj5odHRwczovL3Rvb2xz
LmlldGYub3JnL2h0bWwvZHJhZnQtYmllcm1hbi1jb3JlLXlpZC0wMCNzZWN0aW9uLTIuMTwvYT4p
PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i
RU4tQ0EiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm
cXVvdDssc2Fucy1zZXJpZiI+c3VwcG9ydHMgdGhpcyBjb25jZXB0IG9mIGZsZXhpYmxlIHJhbmdl
IHNpemUgKGZpZWxkICdsb2NhbC1iaXRzJyksPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tQ0EiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0
O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+d2hhdCB3aWxsIGJl
IHRoZSBhZHZhbnRhZ2UgdG8gcmV2ZXJ0IHRvIGEgZml4ZWQgcmFnZSBzaXplPzxvOnA+PC9vOnA+
PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUNBIiBzdHls
ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt
c2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PjxzcGFuIGxhbmc9IkVOLUNBIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom
cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPj09IEFib3V0IHRoZSBjYXBhYmlsaXR5IHRv
IGFkZCBhbiBleHRyYSBTSUQgcmFuZ2UgdG8gYSBZQU5HIG1vZHVsZTxvOnA+PC9vOnA+PC9zcGFu
PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUNBIiBzdHlsZT0iZm9u
dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi
PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu
IGxhbmc9IkVOLUNBIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD
YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRoZSBzb2x1dGlvbiBjYW4ndCBpbXBvc2UgYSBoYXJk
IGxpbWl0IG9uIHRoZSBudW1iZXIgb2YgWUFORyBpdGVtcyB3aXRoaW4gYSBZQU5HIG1vZHVsZS48
bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF
Ti1DQSIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx
dW90OyxzYW5zLXNlcmlmIj5UaGUgYWJpbGl0eSBvZiBhZGRpbmcgYW4gZXh0cmEgU0lEIHJhbmdl
IHJlbW92ZXMgdGhpcyBoYXJkIGxpbWl0IGFuZCByZW1vdmUgYW55IHJhbmdlIGFueGlldHkuPG86
cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t
Q0EiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv
dDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tQ0EiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt
ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+UmVnYXJkcyw8bzpwPjwvbzpw
Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1DQSIgc3R5
bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z
LXNlcmlmIj5NaWNoZWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs
Ij48c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6
JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48
L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1DQSIgc3R5bGU9ImZvbnQt
c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48
bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3Bh
biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7
LHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw
dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBjb3JlIFttYWls
dG86Y29yZS1ib3VuY2VzQGlldGYub3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5BbmR5IEJpZXJt
YW48YnI+DQo8Yj5TZW50OjwvYj4gU3VuZGF5LCBOb3ZlbWJlciAxMywgMjAxNiA4OjU5IFBNPGJy
Pg0KPGI+VG86PC9iPiBBbGV4YW5kZXIgUGVsb3YgJmx0O2FAYWNrbC5pbyZndDs8YnI+DQo8Yj5D
Yzo8L2I+IENvcmUgJmx0O2NvcmVAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJl
OiBbY29yZV0gZHJhZnQtaWV0Zi1jb3JlLXNpZC0wMCwgU0lEIGFsbG9jYXRpb248bzpwPjwvbzpw
Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj5PbiBTdW4sIE5vdiAxMywgMjAxNiBhdCA1OjQ1IFBNLCBBbGV4YW5k
ZXIgUGVsb3YgJmx0OzxhIGhyZWY9Im1haWx0bzphQGFja2wuaW8iIHRhcmdldD0iX2JsYW5rIj5h
QGFja2wuaW88L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxl
PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGlu
IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t
cmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt
YWwiPkRlYXIgUGV0ZXIsIEFuZHksPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj5FeGNlbGxlbnQgcG9pbnRzLCB0aGFua3MgZm9yIGJyaW5naW5nIHRoaXMgdXAh
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw
PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkEg
bWFqb3IgZGlmZmVyZW5jZSBiZXR3ZWVuIFNJRHMgYW5kIE1JQnMgaXMgdGhhdCB3ZSBjYW5ub3Qg
YWxsb2NhdGUgcHJlZml4ZXMgaW4gU0lEcyAoYXMgaXMgdGhlIGNhc2Ugd2l0aCBNSUItT0lEKS4g
VGhlIHN5c3RlbSB3b3JrcyBwZXJmZWN0bHkgd2VsbCAtIGl0IGlzIGp1c3QgTk9UIGZlYXNpYmxl
IGZvciBJQU5BIHRvIGFsbG9jYXRlIHJhbmdlcyB0byBpbmRpdmlkdWFsIG1vZHVsZXMgb24gYSBn
bG9iYWwNCiBzY2FsZS4gSXTigJlzIGFsc28gbm90IGZlYXNpYmxlIGZvciBkZXZlbG9wZXJzL2Nv
bXBhbmllcyB0byBhc2sgSUFOQSBmb3IgaW5kaXZpZHVhbCBhbGxvY2F0aW9ucyBwZXIgbW9kdWxl
IChhbmQgYW55dGhpbmcgZWxzZSBib2lscyBkb3duIHRvIHdoYXQgd2XigJlyZSBjdXJyZW50bHkg
ZG9pbmcpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K
PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WW91IHdhbnQgdG8gbWFudWFsbHkgbWFuYWdl
IHJhbmdlcy4mbmJzcDsgV2h5PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh
c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj5XaHkgbm90IGFsbG9jYXRlIG1vZHVsZS1pZHMgd2l0aCBhIGZpeGVk
IHJhbmdlIG9mIG9iamVjdHMgd2l0aGluIGEgbW9kdWxlPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp
dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5lLmcuLDMyIGJpdHMgZm9yIG1vZHVsZXMs
ICZuYnNwOzIwIGJpdHMgZm9yIG9iamVjdHMgLS0mZ3Q7IG1vZHVsZSBJRCAxIGhhcyBvYmplY3Rz
IDB4MTAwMDAwIHRvIDB4MWZmZmZmLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8
cCBjbGFzcz0iTXNvTm9ybWFsIj5XaGF0IGV2aWRlbmNlIGRvIHlvdSBoYXZlIHRoYXQgd2UgbmVl
ZCBtb3JlIHRoYW4gNCBiaWxsaW9uIG1vZHVsZXMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk
aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5lYWNoIHdpdGggdXAgdG8gMSBtaWxsaW9uIG9iamVj
dHM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48
bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi
PlRoZXJlIGlzIG5vIG9wZXJhdGlvbmFsIGV4cGVyaWVuY2Ugd2l0aCBTSURzIGJ1dCB0aGVyZSBp
cyBwbGVudHkgd2l0aCBtYW5hZ2VkIG9iamVjdHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp
dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPmluIGdlbmVyYWwuICZuYnNwOzxvOnA+PC9vOnA+PC9w
Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BbmR5PG86cD48L286cD48
L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw
PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v
OnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl
ZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1s
ZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t
OjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8
L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgU0lEIGRy
YWZ0IGZ1bmN0aW9ucyB1bmRlciBhIFR3by10aWVyIHJlZ2lzdHJhdGlvbiBzeXN0ZW0uIElBTkEg
LSZndDsgU0RPcy9SZWdpc3RyYXJzIC0mZ3Q7IE1vZHVsZXMuIElBTkEgYWxsb2NhdGVzIGNodW5r
cyBvZiBJRHMgdG8gb3RoZXIgU0RPcy9yZWdpc3RyYXJzLiBBIG1vZHVsZSBpcyB0aGVuIHJlZ2lz
dGVyZWQgYnkgdGhlc2UgdGhpcmQgcGFydGllcyBhbmQgdGhlIHBhcnRpY3VsYXIgU0lEcyBnZXQg
YXNzaWduZWQNCiB0byB0aGUgaW5kaXZpZHVhbCBtb2R1bGVzLjxvOnA+PC9vOnA+PC9wPg0KPC9k
aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8
L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ob3RlLCB0aGF0IElBTkEgY2FuIGFs
c28gcmVnaXN0ZXIgU0lEcyBmb3IgaW5kaXZpZHVhbCBtb2R1bGVzLCBlLmcuIGZvciBhbGwgWUFO
RyBtb2R1bGVzIHB1Ymxpc2hlZCBieSB0aGUgSUVURi4gSSB3b3VsZCBzdXBwb3NlIHRoZSBzYW1l
IHBvbGljeSBjb3VsZCBhcHBseSB0byBvdGhlciBTRE9zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+
DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp
dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ib3BlIHRoYXQgdGhpcyBjbGFyaWZpZXMg
dGhlIHF1ZXN0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUi1DQSI+QmVzdCw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+
DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUi1DQSI+
QWxleGFuZGVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRlItQ0EiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv
cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSLUNB
Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUi1DQSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w
Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0
b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkZSLUNB
Ij5MZSAxNCBub3YuIDIwMTYgw6AgMTA6MTcsIEFuZHkgQmllcm1hbiAmbHQ7PC9zcGFuPjxhIGhy
ZWY9Im1haWx0bzphbmR5QHl1bWF3b3Jrcy5jb20iIHRhcmdldD0iX2JsYW5rIj48c3BhbiBsYW5n
PSJGUi1DQSI+YW5keUB5dW1hd29ya3MuY29tPC9zcGFuPjwvYT48c3BhbiBsYW5nPSJGUi1DQSI+
Jmd0OyBhIMOpY3JpdCA6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJGUi1DQSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w
Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSw8bzpwPjwvbzpwPjwvcD4N
CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2
Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k
aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T25lIHF1ZXN0aW9uIHRvIGFzazogJm5i
c3A7SG93IG1hbnkgbW9kdWxlcyBkbyB3ZSBleHBlY3QgdG8gaGF2ZT88bzpwPjwvbzpwPjwvcD4N
CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhvdyBtYW55IG9iamVjdHMgZG8g
d2UgZXhwZWN0IHRvIGhhdmU/Jm5ic3A7IEluIDMwIHllYXJzIG9mIHdyaXRpbmcgTUlCIG1vZHVs
ZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPndl
IGhhdmUgbmV2ZXIgZXZlbiBjb21lIGNsb3NlIHRvIGEgbWlsbGlvbiBvYmplY3RzLiAoTWF5YmUg
MTAwLDAwMD8pPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y
bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O
b3JtYWwiPkEgbWlsbGlvbiBtb2R1bGVzLCBlYWNoIHdpdGggYSBtaWxsaW9uIG9iamVjdHMsIHdv
dWxkIHN0aWxsIGJlIGxlc3MgdGhhbiA0MCBiaXRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8
ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U28gd2h5IHRvIHdlIG5lZWQgY29tcGxleCByYW5n
ZSBhc3NpZ25tZW50cyBhbmQgbm9uLWNvbnRpZ3VvdXMgbnVtYmVyaW5nPG86cD48L286cD48L3A+
DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj53aXRoaW4gYSBtb2R1bGU/Jm5i
c3A7IFByZXN1bWFibHkgdG8gcHJlc2VydmUgbnVtYmVycyBhbmQgbm90IHdhc3RlIHRoZW0uPG86
cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CdXQgc2lu
Y2UgdGhlIFNJRCBlbmNvZGluZyBpcyBiYXNlZCBvbiBkZWx0YXMsIGFuZCB0aGUgZnVsbCBTSUQg
aXMgb25seSB1c2VkPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv
Tm9ybWFsIj5vbmNlIHBlciB0cmFuc2FjdGlvbiwgdGhpcyBkb2VzIG5vdCBzZWVtIHRvIGJlIGEg
cmVhbCBjb25jZXJuLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z
b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i
TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiPkFuZHk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz
PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+
DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj
bGFzcz0iTXNvTm9ybWFsIj5PbiBTdW4sIE5vdiAxMywgMjAxNiBhdCA0OjEyIFBNLCBwZXRlciB2
YW4gZGVyIFN0b2sgJmx0OzxhIGhyZWY9Im1haWx0bzpzdG9rY29uc0B4czRhbGwubmwiIHRhcmdl
dD0iX2JsYW5rIj5zdG9rY29uc0B4czRhbGwubmw8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwv
cD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0ND
Q0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy
Z2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAg
Y2xhc3M9Ik1zb05vcm1hbCI+RGVhciBZQU5HLVNJRCBhdXRob3JzLDxicj4NCjxicj4NCkkgd2Fu
dCB0byBwcm9wb3NlIGEgY2hhbmdlIHRvIHRoZSBhbGxvY2F0aW9uIG9mIFNJRHMuPGJyPg0KQ3Vy
cmVudGx5LCB0aGUgU0lEcyBhcmUgZGl2aWRlZCBpbiByYW5nZXMgYW5kIHByb3NwZWN0aXZlIHVz
ZXJzIGNhbiByZWdpc3RlciBhIHJhbmdlIHdpdGggSUFOQS48YnI+DQpXaGVuIHRoZSByYW5nZSBp
cyBhbHJlYWR5IGFzc2lnbmVkLCB0aGV5IG5lZWQgdG8gc2VsZWN0IGEgbmV3IG5vdCBhbGxvY2F0
ZWQgcmFuZ2UuPGJyPg0KSSB0aGluayB0aGF0IHRoaXMgd2lsbCBkaXNjb3VyYWdlIG1hbnkgZnV0
dXJlIFNET3Mgd2hvIG1heSB3YW50IHRvIHVzZSBZQU5HICYjNDM7IENPTUkuIE1hbnkgb2YgdGhl
c2UgU0RPcyBsaWtlIHRvIGZpZ3VyZSBvdXQgdGhlIGJlc3QgbnVtYmVyIHN0cnVjdHVyZSBmb3Ig
dGhlaXIgdXNlcywgYW5kIHdpbGwgYmUgdmVyeSBkaXNhcHBvaW50ZWQgd2hlbiB0aGV5IGNhbm5v
dCBhY3F1aXJlIHRoZSByYW5nZS4gQWN0dWFsbHksIEkgYmVsaWV2ZSwgdGhleSB3aWxsDQogYWJh
bmRvbiB0aGUgdXNlIG9mIFlBTkcgJiM0MzsgQ09NSS48YnI+DQo8YnI+DQpNeSBwcm9wb3NhbCBp
cyB0byBhc3NpZ24gbnVtYmVycyB0byBtb2R1bGVzLCBhbmQgbGV0IElBTkEgaGFuZGxlIHRoZSBt
b2R1bGUgbnVtYmVyIHJlZ2lzdHJhdGlvbiBhcyBwcm9wb3NlZCBmb3IgdGhlIFNJRHMuIFRoZSBh
c3NpZ25tZW50IG9mIFNJRHMgdG8gWUFORyBpZGVudGlmaWVycywgYXMgcHJvcG9zZWQgaW4gdGhl
IGRyYWZ0IHJlbWFpbnMsIHRoZSBzYW1lLiBUaGUgZGlmZmVyZW5jZSBpcyB0aGUgY29tcGxldGUg
ZnJlZWRvbSB0byBjaG9vc2UNCiB0aGUgU0lEcyBpbiBhbnkgZ2l2ZW4gbW9kdWxlLiBUaGUgYWR2
YW50YWdlIGlzIHRoYXQgYWxsIG1vZHVsZXMgY2FuIHBpY2sgdGhlaXIgdmFsdWVzIGZyb20gdGhl
IHNtYWxsIG51bWJlciByYW5nZS48YnI+DQo8YnI+DQpUaGUgY2hhbmdlIGlzIGluIHRoZSBkaXNj
b3ZlcnkgYW5kIHRoZSBzdHJ1Y3R1cmUgb2YgdGhlIHJlc291cmNlIHBhdGguIEluIENPTUkgSSB3
YW50IHRvIGRlZmluZSBhbm90aGVyIHJlc291cmNlIHR5cGUgY2FsbGVkIFlBTkcgbW9kdWxlIHdp
dGggbmFtZSBjb3JlLmMubW9kdWxlLiBUaGUgZGlzY292ZXJ5IHdpbGwgcmV0dXJuIHRoZSBwYXRo
OiAvcHJlZml4L21vZHVsZS1udW1iZXItaW4tYmluYXJ5NjQuIEZvciBleGFtcGxlLCB3aXRoIGFu
IGVtcHR5DQogcHJlZml4IGFuZCBmb3IgbW9kdWxlIDMyLCBkaXNjb3Zlcnkgd2lsbCByZXR1cm4g
L2cuIFRvIHJldHJpZXZlIGEgc3BlY2lmaWMgWUFORyBpbnN0YW5jZSB3aXRoIG51bWVyaWMgaWRl
bnRpZmllciBzaWQgaW4gbW9kdWxlIDMyLCB0aGUgc3RhdGVtZW50IEdFVCBjb2FwLzxhIGhyZWY9
Imh0dHA6Ly9leGFtcGxlLmNvbS9nL3NpZCIgdGFyZ2V0PSJfYmxhbmsiPmV4YW1wbGUuY29tL2cv
c2lkPC9hPiB3aWxsIGRvLiBXaXRoIHR3byBjaGFyYWN0ZXJzLA0KIG1vZHVsZXMgd2l0aCBudW1i
ZXJzICZsdDsgNDA5NiBhcmUgY292ZXJlZDsgcHJvYmFibHkgMyBjaGFyYWN0ZXJzIHdpbGwgY292
ZXIgYWxsIG1vZHVsZXMuJm5ic3A7IEdpdmVuIHRoYXQgdGhlIFNJRHMgYXJlIHNtYWxsLCB0aGUg
dG90YWwgVVJJIHNpemUgd2lsbCBub3QgaW5jcmVhc2UgZHVlIHRvIHRoaXMgbW9kaWZpY2F0aW9u
Ljxicj4NCjxicj4NCldoZW4gdGhlIGZ1bGwgZGF0YXN0b3JlIGlzIGFjY2Vzc2VkLCB0aGUgcGF0
aCAvYyBpcyBjdXJyZW50bHkgdXNlZC4gV2UgY2FuIHJlc2VydmUgYywgbWVhbmluZyBtb2R1bGUg
bnVtYmVyIDI4IGlzIGFscmVhZHkgYXNzaWduZWQuIEFub3RoZXIgbWV0aG9kIGlzIHJldHVybmlu
ZyBhIGxvbmcgcGF0aCBuYW1lLCBzdWNoIGFzIC93aG9sZV9zdG9yZS4gVGhlIHNpemUgb2YgdGhl
IHJlbGF0ZWQgVVJJIGlzIG5vdCBpbXBvcnRhbnQgaW4gdGhpcyBjYXNlLg0KIEhvd2V2ZXIsIHRo
ZSBwcm9wb3NlZCBtb2R1bGUgYWxsb2NhdGlvbiBuZWNlc3NpdGF0ZXMgYSBzbWFsbCBtb2RpZmlj
YXRpb24gdG8gdGhlIENCT1IgcmVwcmVzZW50YXRpb24gb2YgdGhlIGNvbnRlbnRzIG9mIHRoZSBm
dWxsIGRhdGFzdG9yZS4gVGhpcyBpcyBhdHRhaW5lZCBieSByZXByZXNlbnRpbmcgdGhlIGZ1bGwg
ZGF0YXN0b3JlIGFzIGEgQ0JPUiBtYXAgY29udGFpbmluZyAoa2V5LCB2YWx1ZSkgcGFpcnMsIHdo
ZXJlIGtleSBpcyB0aGUgbW9kdWxlDQogbnVtYmVyIGFuZCB2YWx1ZSBpcyB0aGUgY29udGVudCBv
ZiB0aGUgbW9kdWxlIGFzIHNwZWNpZmllZCBpbiB5YW5nLWNib3IgZG9jdW1lbnQuPGJyPg0KPGJy
Pg0KRm9yIHRoZSBQQVRDSCBhbmQgdGhlIEZFVENIIG1ldGhvZHMsIHRoaXMgcmVwcmVzZW50YXRp
b24gd2lsbCBhbHNvIHdvcmssIGdpdmVuIHRoZSBjb250ZW50LWZvcm1hdHMgdGhhdCBhcmUgY3Vy
cmVudGx5IGxvb2tlZCBhdC48YnI+DQo8YnI+DQpJIGhvcGUgeW91IGxpa2UgbXkgcHJvcG9zYWwu
IFRoZSBhZHZhbnRhZ2UgaXMgYSBzaW1wbGVyIElBTkEgYWRtaW5pc3RyYXRpb24sIFNJRCBhbGxv
Y2F0aW9uIGZyZWVkb20gd2l0aGluIGEgbW9kdWxlLCBhbmQgc2hvcnRlciBTSURzLiBUaGUgZGlz
YWR2YW50YWdlIGlzIGEgc2xpZ2h0IGNvbXBsZXhpdHkgaW5jcmVhc2UgaW4gdGhlIENCT1IgcmVw
cmVzZW50YXRpb24gb2YgdGhlIGZ1bGwgZGF0YXN0b3JlLjxicj4NCjxicj4NCkhvcGUgdGhpcyBo
ZWxwcyw8YnI+DQo8YnI+DQpQZXRlcjxzcGFuIHN0eWxlPSJjb2xvcjojODg4ODg4Ij48YnI+DQo8
YnI+DQo8YnI+DQo8c3BhbiBjbGFzcz0ibS03OTgyODc5ODQ5NzA0MzY0NDI0aG9lbnpiIj4tLSA8
L3NwYW4+PGJyPg0KPHNwYW4gY2xhc3M9Im0tNzk4Mjg3OTg0OTcwNDM2NDQyNGhvZW56YiI+UGV0
ZXIgdmFuIGRlciBTdG9rPC9zcGFuPjxicj4NCjxzcGFuIGNsYXNzPSJtLTc5ODI4Nzk4NDk3MDQz
NjQ0MjRob2VuemIiPnZhbmRlcnN0b2sgY29uc3VsdGFuY3k8L3NwYW4+PGJyPg0KPHNwYW4gY2xh
c3M9Im0tNzk4Mjg3OTg0OTcwNDM2NDQyNGhvZW56YiI+bWFpbHRvOiA8L3NwYW4+PC9zcGFuPjxh
IGhyZWY9Im1haWx0bzpjb25zdWx0YW5jeUB2YW5kZXJzdG9rLm9yZyIgdGFyZ2V0PSJfYmxhbmsi
PmNvbnN1bHRhbmN5QHZhbmRlcnN0b2sub3JnPC9hPjxzcGFuIHN0eWxlPSJjb2xvcjojODg4ODg4
Ij48YnI+DQo8c3BhbiBjbGFzcz0ibS03OTgyODc5ODQ5NzA0MzY0NDI0aG9lbnpiIj53d3c6IDwv
c3Bhbj48L3NwYW4+PGEgaHJlZj0iaHR0cDovL3d3dy52YW5kZXJzdG9rLm9yZy8iIHRhcmdldD0i
X2JsYW5rIj53d3cudmFuZGVyc3Rvay5vcmc8L2E+PHNwYW4gc3R5bGU9ImNvbG9yOiM4ODg4ODgi
Pjxicj4NCjxzcGFuIGNsYXNzPSJtLTc5ODI4Nzk4NDk3MDQzNjQ0MjRob2VuemIiPnRlbCBOTDog
JiM0MzszMSgwKTQ5MjQ3NDY3MyZuYnNwOyAmbmJzcDsgJm5ic3A7RjogJiM0MzszMygwKTk2NjAx
NTI0ODwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBjbGFzcz0ibS03OTgyODc5ODQ5NzA0MzY0NDI0
aG9lbnpiIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzwv
c3Bhbj48YnI+DQo8c3BhbiBjbGFzcz0ibS03OTgyODc5ODQ5NzA0MzY0NDI0aG9lbnpiIj5jb3Jl
IG1haWxpbmcgbGlzdDwvc3Bhbj48YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmNvcmVAaWV0
Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5jb3JlQGlldGYub3JnPC9hPjxzcGFuIHN0eWxlPSJjb2xv
cjojODg4ODg4Ij48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp
bG1hbi9saXN0aW5mby9jb3JlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv
bWFpbG1hbi9saXN0aW5mby9jb3JlPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0K
PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2
Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX188YnI+DQpjb3JlIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0
bzpjb3JlQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Y29yZUBpZXRmLm9yZzwvYT48YnI+DQo8
YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NvcmUiIHRhcmdl
dD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2NvcmU8L2E+
PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9
Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9j
a3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv
cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg==

--_000_BN6PR06MB2308A16ECB9F361854D15631FEBC0BN6PR06MB2308namp_--


From nobody Mon Nov 14 13:28:34 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D2AB12946C for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 13:28:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LwD36dRMt2Ms for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 13:28:30 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A6551294E2 for <core@ietf.org>; Mon, 14 Nov 2016 13:28:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAELSQ4S013202 for <core@ietf.org>; Mon, 14 Nov 2016 22:28:26 +0100 (CET)
Received: from [10.6.0.72] (unknown [95.211.174.168]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHkCX3wYVz7xfq; Mon, 14 Nov 2016 22:28:24 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <etPan.58174215.459cb227.650d@tzi.org>
Date: Tue, 15 Nov 2016 06:28:19 +0900
X-Mao-Original-Outgoing-Id: 500851699.568817-f7c31335fd1a4a3f3c65ac5bd07ecc2c
Content-Transfer-Encoding: quoted-printable
Message-Id: <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org>
References: <etPan.58174215.459cb227.650d@tzi.org>
To: "core@ietf.org WG" <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/eS9eNaOKcvnOW2HWJAE0QzB-uHU>
Subject: Re: [core] Updated agenda for CoRE @ IETF97
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 21:28:32 -0000

We just pushed another update:
We now have a room for the Thursday 13:30..15:00 informal non-WG =
meeting: Park Ballroom 3
(thank you, Alexey!)

Please have a look at:

https://datatracker.ietf.org/doc/agenda-97-core/

(The link I previously gave points to a specific, now old, version.)

Gr=C3=BC=C3=9Fe, Carsten



> On 31 Oct 2016, at 22:07, Carsten Bormann <cabo@tzi.org> wrote:
>=20
> The chairs have uploaded a new version of the draft agenda:
>=20
> https://www.ietf.org/proceedings/97/agenda/agenda-97-core-00
>=20
> Because we are severely out of time, we are thinking about adding an =
informal discussion on Thursday, 1330 to 1500.
> (We don=E2=80=99t have a room for that, yet.)  The plan is for that =
not to be a formal WG meeting, but just to add some time for extended =
discussion.
>=20
> Please comment on this and keep the updates and change requests =
coming...
>=20
> Gr=C3=BC=C3=9Fe, Carsten
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Mon Nov 14 13:37:58 2016
Return-Path: <andy@yumaworks.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 372DF1293FF for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 13:37:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 36bSBule2iOK for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 13:37:52 -0800 (PST)
Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CEE31295F9 for <core@ietf.org>; Mon, 14 Nov 2016 13:31:03 -0800 (PST)
Received: by mail-vk0-x233.google.com with SMTP id x186so74186957vkd.1 for <core@ietf.org>; Mon, 14 Nov 2016 13:31:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=RmIcULu7+3L3XO2/sHBJ5ciwx0AhAMM5Bmqs/FDoAc8=; b=rYShzpo/mQBpjdFNd/hoX78NDWW4rdyCQNmiMmKqfC2h9Six3qTLHshUWrQoC3J4aa O+ssnaTabgQ2G2FbhwYaF8qmZZzVZG3tydEe60kwJ1vsgYZYXt1XSNCY7Ep/0uDYthS7 IDmhsbW/8Hg7zOKflShdZFVeBUZEJAsFe2678TEaZ15LUi9Rv9tC0fdN8ZIJBkhEYsdf bW6Zm9zvFfEmSI5gJrwsDbfuJdtLleEQCjNBo2XR3zmMaelj6fd7mMzT8BlIwhBFL0Ai aJjCG89E0RjmA39h/CtKUM9Kwu68enqM0lzpH97chmk6IIsbWbBSyfHhHdaj9loVG8Nu jn8A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=RmIcULu7+3L3XO2/sHBJ5ciwx0AhAMM5Bmqs/FDoAc8=; b=NzSwofhAOYfVaOx5wu4Ui8TZ/aFos58xaZT3Ncfb8eKfTfGM5NDAErVHhmDpCObpwL VRSx0nuFwPAbteM6UO3XUN0aJNgFrd3WIkPuynT82nSX7pwksPtuBMdc8hKemLyKq7cV bnC29UB82suIPgCYcYJDu1o6rYAkIEAqJGwkieaqINQVkAJLeHXG7lQ+O8sY/e9fmrS6 G/K+JEAxoWC9RN+IxtA1KqBRbsltVhMJDARqEj6nmu0VtUNmtdsaaugl4uaXZXUImCHx PFVsMFSkjfkRhE1xPPHqMptkoHt8ZiJHU4JiV2/lMEhngEsrNwFELdrRA4xN3xNPieqo juiw==
X-Gm-Message-State: ABUngvdg2r9O70AfjCAEkge/7n35QpmFeZqVET07wmhNod/2DIfkWgzPX6LUU0aWHLBhG9ByvrsolMMSqrSRIQ==
X-Received: by 10.31.60.129 with SMTP id j123mr9413054vka.30.1479159062515; Mon, 14 Nov 2016 13:31:02 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.64.129 with HTTP; Mon, 14 Nov 2016 13:31:01 -0800 (PST)
In-Reply-To: <BN6PR06MB2308A16ECB9F361854D15631FEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com> <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io> <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com> <BN6PR06MB2308A16ECB9F361854D15631FEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
From: Andy Bierman <andy@yumaworks.com>
Date: Mon, 14 Nov 2016 13:31:01 -0800
Message-ID: <CABCOCHQkWRPHr4sc=M9448x4N+hALf4-Lk69Vnxv3dO_+x+wCQ@mail.gmail.com>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Content-Type: multipart/alternative; boundary=001a114381fc7cf3ae0541498e23
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/ImKs9_D590_N4rHp4bLeRzxtiWw>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 21:37:55 -0000

--001a114381fc7cf3ae0541498e23
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Mon, Nov 14, 2016 at 12:47 PM, Michel Veillette <
Michel.Veillette@trilliantinc.com> wrote:

> Hi Andy
>
>
>
> =3D=3D=3D About the size of the SID range allocated to each YANG module
>
>
>
> The 20 bits range proposed is not incompatible with 'draft-ietf-core-sid'=
.
>
> Each entity allocating SIDs (e.g. SDOs, End users) is free to define the
> size of the SID range allocated to each YANG module.
>
>
>
> Do you propose to mandate a fixed range size (e.g. 20 bits / 1048576 IDs)=
 ?
>


I prefer 1 range per module, not N



>
>
> 'draft-bierman-core-yid' (https://tools.ietf.org/html/
> draft-bierman-core-yid-00#section-2.1)
>
> supports this concept of flexible range size (field 'local-bits'),
>
> what will be the advantage to revert to a fixed rage size?
>
>
>
> =3D=3D About the capability to add an extra SID range to a YANG module
>
>
>
> The solution can't impose a hard limit on the number of YANG items within
> a YANG module.
>
> The ability of adding an extra SID range removes this hard limit and
> remove any range anxiety.
>

Your previous solution allocated 10 bits for schema nodes within a module.
We already have modules with more than 1024 objects. Most modules
have less than 300 nodes, so a limit of 1M nodes will never  be a real
restriction.

The real issue is multiple ranges per module.
If this is removed the rest of the details cancel each other out.


>
> Regards,
>
> Michel
>
>
>

Andy


>
>
> *From:* core [mailto:core-bounces@ietf.org] *On Behalf Of *Andy Bierman
> *Sent:* Sunday, November 13, 2016 8:59 PM
> *To:* Alexander Pelov <a@ackl.io>
> *Cc:* Core <core@ietf.org>
> *Subject:* Re: [core] draft-ietf-core-sid-00, SID allocation
>
>
>
>
>
>
>
> On Sun, Nov 13, 2016 at 5:45 PM, Alexander Pelov <a@ackl.io> wrote:
>
> Dear Peter, Andy,
>
>
>
> Excellent points, thanks for bringing this up!
>
>
>
> A major difference between SIDs and MIBs is that we cannot allocate
> prefixes in SIDs (as is the case with MIB-OID). The system works perfectl=
y
> well - it is just NOT feasible for IANA to allocate ranges to individual
> modules on a global scale. It=E2=80=99s also not feasible for developers/=
companies
> to ask IANA for individual allocations per module (and anything else boil=
s
> down to what we=E2=80=99re currently doing).
>
>
>
>
>
> You want to manually manage ranges.  Why?
>
>
>
> Why not allocate module-ids with a fixed range of objects within a module=
?
>
>
>
> e.g.,32 bits for modules,  20 bits for objects --> module ID 1 has object=
s
> 0x100000 to 0x1fffff.
>
>
>
> What evidence do you have that we need more than 4 billion modules,
>
> each with up to 1 million objects?
>
>
>
> There is no operational experience with SIDs but there is plenty with
> managed objects
>
> in general.
>
>
>
> Andy
>
>
>
>
>
>
>
> The SID draft functions under a Two-tier registration system. IANA ->
> SDOs/Registrars -> Modules. IANA allocates chunks of IDs to other
> SDOs/registrars. A module is then registered by these third parties and t=
he
> particular SIDs get assigned to the individual modules.
>
>
>
> Note, that IANA can also register SIDs for individual modules, e.g. for
> all YANG modules published by the IETF. I would suppose the same policy
> could apply to other SDOs.
>
>
>
> Hope that this clarifies the question.
>
>
>
> Best,
>
> Alexander
>
>
>
>
>
>
>
> Le 14 nov. 2016 =C3=A0 10:17, Andy Bierman <andy@yumaworks.com> a =C3=A9c=
rit :
>
>
>
> Hi,
>
>
>
>
>
> One question to ask:  How many modules do we expect to have?
>
> How many objects do we expect to have?  In 30 years of writing MIB module=
s
>
> we have never even come close to a million objects. (Maybe 100,000?)
>
>
>
> A million modules, each with a million objects, would still be less than
> 40 bits.
>
> So why to we need complex range assignments and non-contiguous numbering
>
> within a module?  Presumably to preserve numbers and not waste them.
>
> But since the SID encoding is based on deltas, and the full SID is only
> used
>
> once per transaction, this does not seem to be a real concern.
>
>
>
>
>
> Andy
>
>
>
>
>
> On Sun, Nov 13, 2016 at 4:12 PM, peter van der Stok <stokcons@xs4all.nl>
> wrote:
>
> Dear YANG-SID authors,
>
> I want to propose a change to the allocation of SIDs.
> Currently, the SIDs are divided in ranges and prospective users can
> register a range with IANA.
> When the range is already assigned, they need to select a new not
> allocated range.
> I think that this will discourage many future SDOs who may want to use
> YANG + COMI. Many of these SDOs like to figure out the best number
> structure for their uses, and will be very disappointed when they cannot
> acquire the range. Actually, I believe, they will abandon the use of YANG=
 +
> COMI.
>
> My proposal is to assign numbers to modules, and let IANA handle the
> module number registration as proposed for the SIDs. The assignment of SI=
Ds
> to YANG identifiers, as proposed in the draft remains, the same. The
> difference is the complete freedom to choose the SIDs in any given module=
.
> The advantage is that all modules can pick their values from the small
> number range.
>
> The change is in the discovery and the structure of the resource path. In
> COMI I want to define another resource type called YANG module with name
> core.c.module. The discovery will return the path: /prefix/module-number-=
in-binary64.
> For example, with an empty prefix and for module 32, discovery will retur=
n
> /g. To retrieve a specific YANG instance with numeric identifier sid in
> module 32, the statement GET coap/example.com/g/sid will do. With two
> characters, modules with numbers < 4096 are covered; probably 3 character=
s
> will cover all modules.  Given that the SIDs are small, the total URI siz=
e
> will not increase due to this modification.
>
> When the full datastore is accessed, the path /c is currently used. We ca=
n
> reserve c, meaning module number 28 is already assigned. Another method i=
s
> returning a long path name, such as /whole_store. The size of the related
> URI is not important in this case. However, the proposed module allocatio=
n
> necessitates a small modification to the CBOR representation of the
> contents of the full datastore. This is attained by representing the full
> datastore as a CBOR map containing (key, value) pairs, where key is the
> module number and value is the content of the module as specified in
> yang-cbor document.
>
> For the PATCH and the FETCH methods, this representation will also work,
> given the content-formats that are currently looked at.
>
> I hope you like my proposal. The advantage is a simpler IANA
> administration, SID allocation freedom within a module, and shorter SIDs.
> The disadvantage is a slight complexity increase in the CBOR representati=
on
> of the full datastore.
>
> Hope this helps,
>
> Peter
>
>
> --
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>
>
>
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>
>
>
>
>

--001a114381fc7cf3ae0541498e23
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Mon, Nov 14, 2016 at 12:47 PM, Michel Veillette <span dir=3D"ltr">&l=
t;<a href=3D"mailto:Michel.Veillette@trilliantinc.com" target=3D"_blank">Mi=
chel.Veillette@trilliantinc.com</a>&gt;</span> wrote:<br><blockquote class=
=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=
ing-left:1ex">





<div lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"m_5730277861718561389WordSection1">
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">Hi Andy<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">=3D=3D=3D About the size of the SID =
range allocated to each YANG module<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">The 20 bits range proposed is not in=
compatible with &#39;draft-ietf-core-sid&#39;.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">Each entity allocating SIDs (e.g. SD=
Os, End users) is free to define the size of the SID range allocated to eac=
h YANG module.<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">Do you propose to mandate a fixed ra=
nge size (e.g. 20 bits / 1048576 IDs) ?</span></p></div></div></blockquote>=
<div><br></div><div><br></div><div>I prefer 1 range per module, not N</div>=
<div><br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"=
margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,20=
4,204);border-left-style:solid;padding-left:1ex"><div lang=3D"EN-US" link=
=3D"blue" vlink=3D"purple"><div class=3D"m_5730277861718561389WordSection1"=
><p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font=
-family:&quot;Calibri&quot;,sans-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">&#39;draft-bierman-core-yid&#39; (<a=
 href=3D"https://tools.ietf.org/html/draft-bierman-core-yid-00#section-2.1"=
 target=3D"_blank">https://tools.ietf.org/html/<wbr>draft-bierman-core-yid-=
00#<wbr>section-2.1</a>)<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">supports this concept of flexible ra=
nge size (field &#39;local-bits&#39;),<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">what will be the advantage to revert=
 to a fixed rage size?<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">=3D=3D About the capability to add a=
n extra SID range to a YANG module<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">The solution can&#39;t impose a hard=
 limit on the number of YANG items within a YANG module.<u></u><u></u></spa=
n></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">The ability of adding an extra SID r=
ange removes this hard limit and remove any range anxiety.</span></p></div>=
</div></blockquote><div><br></div><div>Your previous solution allocated 10 =
bits for schema nodes within a module.</div><div>We already have modules wi=
th more than 1024 objects. Most modules</div><div>have less than 300 nodes,=
 so a limit of 1M nodes will never =C2=A0be a real restriction.</div><div><=
br></div><div>The real issue is multiple ranges per module.</div><div>If th=
is is removed the rest of the details cancel each other out.</div><div><br>=
</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-l=
eft:1px #ccc solid;padding-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlin=
k=3D"purple"><div class=3D"m_5730277861718561389WordSection1"><p class=3D"M=
soNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-family:&quot;=
Calibri&quot;,sans-serif"><u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">Regards,<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif">Michel<u></u><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0</span></p></div></div>=
</blockquote><div><br></div><div>Andy</div><div>=C2=A0</div><blockquote cla=
ss=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pa=
dding-left:1ex"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div cla=
ss=3D"m_5730277861718561389WordSection1"><p class=3D"MsoNormal"><span lang=
=3D"EN-CA" style=3D"font-size:11.0pt;font-family:&quot;Calibri&quot;,sans-s=
erif"><u></u></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-CA" style=3D"font-size:11.0pt;font-=
family:&quot;Calibri&quot;,sans-serif"><u></u>=C2=A0<u></u></span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> core [mailto:<a href=3D"mailto=
:core-bounces@ietf.org" target=3D"_blank">core-bounces@ietf.org</a>]
<b>On Behalf Of </b>Andy Bierman<br>
<b>Sent:</b> Sunday, November 13, 2016 8:59 PM<br>
<b>To:</b> Alexander Pelov &lt;<a href=3D"mailto:a@ackl.io" target=3D"_blan=
k">a@ackl.io</a>&gt;<br>
<b>Cc:</b> Core &lt;<a href=3D"mailto:core@ietf.org" target=3D"_blank">core=
@ietf.org</a>&gt;<br>
<b>Subject:</b> Re: [core] draft-ietf-core-sid-00, SID allocation<u></u><u>=
</u></span></p>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal">On Sun, Nov 13, 2016 at 5:45 PM, Alexander Pelov &lt=
;<a href=3D"mailto:a@ackl.io" target=3D"_blank">a@ackl.io</a>&gt; wrote:<u>=
</u><u></u></p>
<blockquote style=3D"border:none;border-left:solid #cccccc 1.0pt;padding:0i=
n 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-=
bottom:5.0pt">
<div>
<p class=3D"MsoNormal">Dear Peter, Andy,<u></u><u></u></p>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Excellent points, thanks for bringing this up!<u></u=
><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">A major difference between SIDs and MIBs is that we =
cannot allocate prefixes in SIDs (as is the case with MIB-OID). The system =
works perfectly well - it is just NOT feasible for IANA to allocate ranges =
to individual modules on a global
 scale. It=E2=80=99s also not feasible for developers/companies to ask IANA=
 for individual allocations per module (and anything else boils down to wha=
t we=E2=80=99re currently doing).<u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">You want to manually manage ranges.=C2=A0 Why?<u></u=
><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Why not allocate module-ids with a fixed range of ob=
jects within a module?<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">e.g.,32 bits for modules, =C2=A020 bits for objects =
--&gt; module ID 1 has objects 0x100000 to 0x1fffff.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">What evidence do you have that we need more than 4 b=
illion modules,<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">each with up to 1 million objects?<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">There is no operational experience with SIDs but the=
re is plenty with managed objects<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">in general. =C2=A0<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Andy<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">=C2=A0<u></u><u></u></p>
</div>
<blockquote style=3D"border:none;border-left:solid #cccccc 1.0pt;padding:0i=
n 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-=
bottom:5.0pt">
<div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">The SID draft functions under a Two-tier registratio=
n system. IANA -&gt; SDOs/Registrars -&gt; Modules. IANA allocates chunks o=
f IDs to other SDOs/registrars. A module is then registered by these third =
parties and the particular SIDs get assigned
 to the individual modules.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Note, that IANA can also register SIDs for individua=
l modules, e.g. for all YANG modules published by the IETF. I would suppose=
 the same policy could apply to other SDOs.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Hope that this clarifies the question.<u></u><u></u>=
</p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA">Best,<u></u><u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA">Alexander<u></u><u></u></span><=
/p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA"><u></u>=C2=A0<u></u></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA"><u></u>=C2=A0<u></u></span></p>
<div>
<blockquote style=3D"margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA">Le 14 nov. 2016 =C3=A0 10:17, A=
ndy Bierman &lt;</span><a href=3D"mailto:andy@yumaworks.com" target=3D"_bla=
nk"><span lang=3D"FR-CA">andy@yumaworks.com</span></a><span lang=3D"FR-CA">=
&gt; a =C3=A9crit :<u></u><u></u></span></p>
</div>
<p class=3D"MsoNormal"><span lang=3D"FR-CA"><u></u>=C2=A0<u></u></span></p>
<div>
<div>
<p class=3D"MsoNormal">Hi,<u></u><u></u></p>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">One question to ask: =C2=A0How many modules do we ex=
pect to have?<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">How many objects do we expect to have?=C2=A0 In 30 y=
ears of writing MIB modules<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">we have never even come close to a million objects. =
(Maybe 100,000?)<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">A million modules, each with a million objects, woul=
d still be less than 40 bits.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">So why to we need complex range assignments and non-=
contiguous numbering<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">within a module?=C2=A0 Presumably to preserve number=
s and not waste them.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">But since the SID encoding is based on deltas, and t=
he full SID is only used<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal">once per transaction, this does not seem to be a rea=
l concern.<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<div>
<p class=3D"MsoNormal">Andy<u></u><u></u></p>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
</div>
<div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
<div>
<p class=3D"MsoNormal">On Sun, Nov 13, 2016 at 4:12 PM, peter van der Stok =
&lt;<a href=3D"mailto:stokcons@xs4all.nl" target=3D"_blank">stokcons@xs4all=
.nl</a>&gt; wrote:<u></u><u></u></p>
<blockquote style=3D"border:none;border-left:solid #cccccc 1.0pt;padding:0i=
n 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-=
bottom:5.0pt">
<p class=3D"MsoNormal">Dear YANG-SID authors,<br>
<br>
I want to propose a change to the allocation of SIDs.<br>
Currently, the SIDs are divided in ranges and prospective users can registe=
r a range with IANA.<br>
When the range is already assigned, they need to select a new not allocated=
 range.<br>
I think that this will discourage many future SDOs who may want to use YANG=
 + COMI. Many of these SDOs like to figure out the best number structure fo=
r their uses, and will be very disappointed when they cannot acquire the ra=
nge. Actually, I believe, they will
 abandon the use of YANG + COMI.<br>
<br>
My proposal is to assign numbers to modules, and let IANA handle the module=
 number registration as proposed for the SIDs. The assignment of SIDs to YA=
NG identifiers, as proposed in the draft remains, the same. The difference =
is the complete freedom to choose
 the SIDs in any given module. The advantage is that all modules can pick t=
heir values from the small number range.<br>
<br>
The change is in the discovery and the structure of the resource path. In C=
OMI I want to define another resource type called YANG module with name cor=
e.c.module. The discovery will return the path: /prefix/module-number-in-<w=
br>binary64. For example, with an empty
 prefix and for module 32, discovery will return /g. To retrieve a specific=
 YANG instance with numeric identifier sid in module 32, the statement GET =
coap/<a href=3D"http://example.com/g/sid" target=3D"_blank">example.com/g/s=
id</a> will do. With two characters,
 modules with numbers &lt; 4096 are covered; probably 3 characters will cov=
er all modules.=C2=A0 Given that the SIDs are small, the total URI size wil=
l not increase due to this modification.<br>
<br>
When the full datastore is accessed, the path /c is currently used. We can =
reserve c, meaning module number 28 is already assigned. Another method is =
returning a long path name, such as /whole_store. The size of the related U=
RI is not important in this case.
 However, the proposed module allocation necessitates a small modification =
to the CBOR representation of the contents of the full datastore. This is a=
ttained by representing the full datastore as a CBOR map containing (key, v=
alue) pairs, where key is the module
 number and value is the content of the module as specified in yang-cbor do=
cument.<br>
<br>
For the PATCH and the FETCH methods, this representation will also work, gi=
ven the content-formats that are currently looked at.<br>
<br>
I hope you like my proposal. The advantage is a simpler IANA administration=
, SID allocation freedom within a module, and shorter SIDs. The disadvantag=
e is a slight complexity increase in the CBOR representation of the full da=
tastore.<br>
<br>
Hope this helps,<br>
<br>
Peter<span style=3D"color:#888888"><br>
<br>
<br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">-- </span>=
<br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">Peter van =
der Stok</span><br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">vanderstok=
 consultancy</span><br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">mailto: </=
span></span><a href=3D"mailto:consultancy@vanderstok.org" target=3D"_blank"=
>consultancy@vanderstok.org</a><span style=3D"color:#888888"><br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">www: </spa=
n></span><a href=3D"http://www.vanderstok.org/" target=3D"_blank">www.vande=
rstok.org</a><span style=3D"color:#888888"><br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">tel NL: +3=
1(0)492474673=C2=A0 =C2=A0 =C2=A0F: +33(0)966015248</span><br>
<br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">__________=
____________________<wbr>_________________</span><br>
<span class=3D"m_5730277861718561389m-7982879849704364424hoenzb">core maili=
ng list</span><br>
</span><a href=3D"mailto:core@ietf.org" target=3D"_blank">core@ietf.org</a>=
<span style=3D"color:#888888"><br>
</span><a href=3D"https://www.ietf.org/mailman/listinfo/core" target=3D"_bl=
ank">https://www.ietf.org/mailman/<wbr>listinfo/core</a><u></u><u></u></p>
</blockquote>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
<p class=3D"MsoNormal">______________________________<wbr>_________________=
<br>
core mailing list<br>
<a href=3D"mailto:core@ietf.org" target=3D"_blank">core@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/core" target=3D"_blank">ht=
tps://www.ietf.org/mailman/<wbr>listinfo/core</a><u></u><u></u></p>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
</div>
</blockquote>
</div>
<p class=3D"MsoNormal"><u></u>=C2=A0<u></u></p>
</div>
</div>
</div>
</div>

</blockquote></div><br></div></div>

--001a114381fc7cf3ae0541498e23--


From nobody Mon Nov 14 13:45:01 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B1091295CE for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 13:45:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T9cRC-3XHXk8 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 13:44:59 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 186111294A1 for <core@ietf.org>; Mon, 14 Nov 2016 13:44:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAELiuND019702; Mon, 14 Nov 2016 22:44:56 +0100 (CET)
Received: from [10.6.0.72] (unknown [95.211.174.168]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHkZX6fBjz7xg2; Mon, 14 Nov 2016 22:44:52 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <CABCOCHQkWRPHr4sc=M9448x4N+hALf4-Lk69Vnxv3dO_+x+wCQ@mail.gmail.com>
Date: Tue, 15 Nov 2016 06:44:47 +0900
X-Mao-Original-Outgoing-Id: 500852687.223248-c9f1af3926986aff5fc6afa5819326ef
Content-Transfer-Encoding: quoted-printable
Message-Id: <DC26B8F5-C726-4DF0-8271-0922738EC059@tzi.org>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com> <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io> <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com> <BN6PR06MB2308A16ECB9F361854D15631FEBC0@BN6PR06MB2308.namprd06.prod.outlook.com> <CABCOCHQkWRPHr4sc=M9448x4N+hALf4-Lk69Vnxv3dO_+x+wCQ@mail.gmail.com>
To: Andy Bierman <andy@yumaworks.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/sT04GWkg7YrtLe0HZT6cqsC5qo0>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 21:45:00 -0000

I would think we can go for a standard size such as 2000 (2048?), with a =
larger size possible if the need for that can possibly occur.
That would leave multiple ranges only as an emergency for initial =
allocations that turned out way too small.
Is that a reasonable solution?

Gr=C3=BC=C3=9Fe, Carsten


> On 15 Nov 2016, at 06:31, Andy Bierman <andy@yumaworks.com> wrote:
>=20
> The real issue is multiple ranges per module.
>=20


From nobody Mon Nov 14 14:02:49 2016
Return-Path: <andy@yumaworks.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D568D1295B7 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 14:02:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=yumaworks-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ddjM-9Ha2n4b for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 14:02:45 -0800 (PST)
Received: from mail-ua0-x22f.google.com (mail-ua0-x22f.google.com [IPv6:2607:f8b0:400c:c08::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B52D912941A for <core@ietf.org>; Mon, 14 Nov 2016 14:02:45 -0800 (PST)
Received: by mail-ua0-x22f.google.com with SMTP id 51so73837653uai.1 for <core@ietf.org>; Mon, 14 Nov 2016 14:02:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yumaworks-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=eEMccF+NVkPVVZxivf5l7p/Ow23/qkpBKYyExINpzBw=; b=S9nuhibJB3t9dtw9HLOP+xDAP6nEGNQ8t5V5Zc3u/J/ZhPBakyBrSL2O49QIj6traS LrmCfuVt2PLbk3H5isONVL4atnbhqpXMa2C1vkA59gjSPXYwbQ2H9LHSCZgW0QnSeiYr QUI0OCJHcbB/jg0Jd46Z6GAQRjVSBICm+J+CIaadKmMzNlA84vVCEKlIt+gL/Z9HEEy1 r+aJj5rIp4WuQaCjBnK8Bf+mPWCdSwrHckbAa2wLQ5e7alqQUqpaci5q28r+K2kY3juq 6v1WjuUmN/oODcjz5thK+cvsox/u3W7wOURhDLekw7FHGlOVKB+cw8/Fv0rZwkLjYkUX 3Hzw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=eEMccF+NVkPVVZxivf5l7p/Ow23/qkpBKYyExINpzBw=; b=OKo7DFNb3o72ACubGEAQ62xlaGCHTdXLHpGH7snixVc7L3HZRqZztA9JHF4pnH/QIN KP0p8IRs2Og/Cz0TvwRLreav1HjV2pRjDzVQ6qhEP8UxN/tDAhJc7AbWQmu7DsmcRZbd pRK4Q7yQGyzb6I6o+aWKTh5w3M3IC0YG6nFFW455tHVaZA/evORkcQBt7gICxOgldG6p iuHo3TAPZrWJLVzNROHWoH/KIk/2HFyG30rIAt2PlCqXJRNQGEcL5B7oykVl7Uh0co8F wTEuXCW3uXa5mvD/yWODIKVX0z3iJXrm8r3mIzkRIN6We5J19eh1C1YYrI8TubCaXbaj fgRw==
X-Gm-Message-State: ABUngvdMjh1qVPHZhPu2le8RwfLJg8V1EulTWpC8b0THYnyeh8nMW5impXk2YFFx2Batvbd25QTrbPBpXWDiRw==
X-Received: by 10.176.83.100 with SMTP id y33mr11249766uay.130.1479160964870;  Mon, 14 Nov 2016 14:02:44 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.64.129 with HTTP; Mon, 14 Nov 2016 14:02:44 -0800 (PST)
In-Reply-To: <DC26B8F5-C726-4DF0-8271-0922738EC059@tzi.org>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com> <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io> <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com> <BN6PR06MB2308A16ECB9F361854D15631FEBC0@BN6PR06MB2308.namprd06.prod.outlook.com> <CABCOCHQkWRPHr4sc=M9448x4N+hALf4-Lk69Vnxv3dO_+x+wCQ@mail.gmail.com> <DC26B8F5-C726-4DF0-8271-0922738EC059@tzi.org>
From: Andy Bierman <andy@yumaworks.com>
Date: Mon, 14 Nov 2016 14:02:44 -0800
Message-ID: <CABCOCHTo7C38JJSuAzpNDFUhYToZSJrshn3vD-VBeisJxaSgJA@mail.gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Content-Type: multipart/alternative; boundary=94eb2c192480e0843f054149ffd9
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/R9ZeEYCKzTD0I-vrEkO5TF4vQag>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 22:02:48 -0000

--94eb2c192480e0843f054149ffd9
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Mon, Nov 14, 2016 at 1:44 PM, Carsten Bormann <cabo@tzi.org> wrote:

> I would think we can go for a standard size such as 2000 (2048?), with a
> larger size possible if the need for that can possibly occur.
> That would leave multiple ranges only as an emergency for initial
> allocations that turned out way too small.
> Is that a reasonable solution?
>
>
I don't think that reduces any complexity if all tools still need to deal
with
multiple ranges per module.

If it took 30 years to get to 500K MIB objects, how long will it take to
get to 4 billion?  64 billion? Maybe never.

The cost of the larger id (e.g., 18 - 20 bits per module) seems to only
impact
the 1 anchor ID needed per exchange. I think the deltas work out the same.



> Gr=C3=BC=C3=9Fe, Carsten
>

Andy


>
>
> > On 15 Nov 2016, at 06:31, Andy Bierman <andy@yumaworks.com> wrote:
> >
> > The real issue is multiple ranges per module.
> >
>
>

--94eb2c192480e0843f054149ffd9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Mon, Nov 14, 2016 at 1:44 PM, Carsten Bormann <span dir=3D"ltr">&lt;=
<a href=3D"mailto:cabo@tzi.org" target=3D"_blank">cabo@tzi.org</a>&gt;</spa=
n> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex">I would think we can go for a s=
tandard size such as 2000 (2048?), with a larger size possible if the need =
for that can possibly occur.<br>
That would leave multiple ranges only as an emergency for initial allocatio=
ns that turned out way too small.<br>
Is that a reasonable solution?<br>
<br></blockquote><div><br></div><div>I don&#39;t think that reduces any com=
plexity if all tools still need to deal with</div><div>multiple ranges per =
module.</div><div><br></div><div>If it took 30 years to get to 500K MIB obj=
ects, how long will it take to</div><div>get to 4 billion? =C2=A064 billion=
? Maybe never.</div><div><br></div><div>The cost of the larger id (e.g., 18=
 - 20 bits per module) seems to only impact</div><div>the 1 anchor ID neede=
d per exchange. I think the deltas work out the same.</div><div><br></div><=
div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex">
Gr=C3=BC=C3=9Fe, Carsten<br></blockquote><div><br></div><div>Andy</div><div=
>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;b=
order-left:1px #ccc solid;padding-left:1ex">
<br>
<br>
&gt; On 15 Nov 2016, at 06:31, Andy Bierman &lt;<a href=3D"mailto:andy@yuma=
works.com">andy@yumaworks.com</a>&gt; wrote:<br>
&gt;<br>
&gt; The real issue is multiple ranges per module.<br>
&gt;<br>
<br>
</blockquote></div><br></div></div>

--94eb2c192480e0843f054149ffd9--


From nobody Mon Nov 14 14:49:33 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C535F1293D6 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 14:49:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level: 
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O6t4O4I9Ni02 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 14:49:29 -0800 (PST)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-cys01nam02on0134.outbound.protection.outlook.com [104.47.37.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B858127076 for <core@ietf.org>; Mon, 14 Nov 2016 14:49:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ooVWxauzF8ISXkNd0kpMNSGSevjmw7+zTc7g/Op2Y5E=; b=eOFXcK0Oxfy2GfRKCwlukGwWW2Ds9xBRDhYHkWL+s4Lu44dVjcp6h6sCzgcqbCX07rNFZrrVC1uvFgoU4ZfxLwEY73BXz/wPZCv1Qw0yrmvQ5B5UPyvGDf0qN2wHvoR/2Av6JFuXfrJ5UD3VG3yj/iqrTYlfIJoM4w4LCwFhJb0=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2305.namprd06.prod.outlook.com (10.173.19.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Mon, 14 Nov 2016 22:49:26 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0721.010; Mon, 14 Nov 2016 22:49:26 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: Andy Bierman <andy@yumaworks.com>, Carsten Bormann <cabo@tzi.org>
Thread-Topic: [core] draft-ietf-core-sid-00, SID allocation
Thread-Index: AQHSPgvqKuwFK38feES63NsOWHStz6DXrZsAgAAHuwCAAAPMgIAA+fdAgABNmYCAAAPZgIAABQQAgAAIRHA=
Date: Mon, 14 Nov 2016 22:49:25 +0000
Message-ID: <BN6PR06MB2308D44EFDE6C3B51DA70A5DFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <CABCOCHQKSi452RYKUhMu8ncR+WxGmMMLDGp7oJi9R9RmEnN6VQ@mail.gmail.com> <06C875DF-54BE-49AD-AAAA-FD7C9E80361A@ackl.io> <CABCOCHR7v-OrHYJL+67aQ2Ndwew6p7H_4tt0_fvg5Xo3yok9xg@mail.gmail.com> <BN6PR06MB2308A16ECB9F361854D15631FEBC0@BN6PR06MB2308.namprd06.prod.outlook.com> <CABCOCHQkWRPHr4sc=M9448x4N+hALf4-Lk69Vnxv3dO_+x+wCQ@mail.gmail.com> <DC26B8F5-C726-4DF0-8271-0922738EC059@tzi.org> <CABCOCHTo7C38JJSuAzpNDFUhYToZSJrshn3vD-VBeisJxaSgJA@mail.gmail.com>
In-Reply-To: <CABCOCHTo7C38JJSuAzpNDFUhYToZSJrshn3vD-VBeisJxaSgJA@mail.gmail.com>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2305; 7:P/HFg+uWacZhxBSdYLWy4lCriL1+1VvGS+ZgjZXMxCdFsZQvR+dCvqOYVZA5sDq3PTReXDJxVaRwciPMA2JlEGB7GSCbH7MZmHVl37XhLyM4eUs8ZfJovhKgKtviROB7xltr6gXm5Wf0jxfZ17JPe6pNCWBT/Nb10+WZKdA3gdOVWUQMqTwHjw9ybaQY3cf14YdMWgXIwpnl9gz6BQ1tuvsOGcT3ewymZxcLS+P0SyBbzPmLo6hnwpB1xxckCKSWzU0sqT/HJrAMuvSG8SHaQbYX8d9yoNmVPvmDZa5b2AxfxeUbcm096pF8XaEgZuRHT2AgkdRGfQslXDyuEaRKxBrlXStwYHCmZQzrbWcUmMg=
x-ms-office365-filtering-correlation-id: 9e7c9550-1537-4480-e5de-08d40ce07c2f
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2305;
x-microsoft-antispam-prvs: <BN6PR06MB23057B97F6C18343FB6DE774FEBC0@BN6PR06MB2305.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(166708455590820)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6061324); SRVR:BN6PR06MB2305; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2305; 
x-forefront-prvs: 0126A32F74
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(24454002)(377454003)(189002)(199003)(19609705001)(74316002)(102836003)(2900100001)(790700001)(7736002)(6116002)(7846002)(86362001)(8936002)(3846002)(5001770100001)(92566002)(77096005)(189998001)(101416001)(87936001)(2906002)(4326007)(97736004)(3660700001)(8676002)(7696004)(76576001)(93886004)(33656002)(50986999)(76176999)(54356999)(66066001)(106356001)(7906003)(9686002)(105586002)(2950100002)(230783001)(81156014)(68736007)(81166006)(5660300001)(229853002)(99286002)(3280700002)(122556002)(106116001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2305; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR06MB2308D44EFDE6C3B51DA70A5DFEBC0BN6PR06MB2308namp_"
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2016 22:49:25.8761 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2305
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/7kblSaHKG1yUNxI6h4YnTZ7p4C4>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 22:49:32 -0000

--_000_BN6PR06MB2308D44EFDE6C3B51DA70A5DFEBC0BN6PR06MB2308namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_BN6PR06MB2308D44EFDE6C3B51DA70A5DFEBC0BN6PR06MB2308namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_BN6PR06MB2308D44EFDE6C3B51DA70A5DFEBC0BN6PR06MB2308namp_--


From nobody Mon Nov 14 14:51:13 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13FCE1295CE for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 14:51:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BRZ75gVaf-5x for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 14:51:10 -0800 (PST)
Received: from lb2-smtp-cloud6.xs4all.net (lb2-smtp-cloud6.xs4all.net [194.109.24.28]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1289127076 for <core@ietf.org>; Mon, 14 Nov 2016 14:51:09 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.216]) by smtp-cloud6.xs4all.net with ESMTP id 7yr51u0024fjQrE01yr5UY; Mon, 14 Nov 2016 23:51:08 +0100
Received: from dhcp-9216.meeting.ietf.org ([31.133.146.22]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 14 Nov 2016 23:51:05 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 14 Nov 2016 23:51:05 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <BN6PR06MB230804ACCD67ABD30F9D966FFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <c39b5765e0554a4832f59395fb481a34@xs4all.nl> <BN6PR06MB230804ACCD67ABD30F9D966FFEBC0@BN6PR06MB2308.namprd06.prod.outlook.com>
Message-ID: <18f465ea6175fdae589a369aba0cf5a3@xs4all.nl>
X-Sender: stokcons@xs4all.nl (o3zTy1g8mZ/A2qAVwPS3EIlZMHvQVxzV)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/8gbA_JbKSM3v0hGkK5wTDZCrZ34>
Cc: Core <core@ietf.org>
Subject: Re: [core] draft-ietf-core-sid-00, SID allocation
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 22:51:12 -0000

Hi Michel,

One module per SDO, may be 5?
They can structure the module with submodules to their liking.

My point is about freedom to choose SID values.
For example, SDOs have a history to assign numbers to attribute types, 
device types, etc..
These numbers have a meaning in the group.
Using the same numbers for the SID values when appropriate may be 
welcome indeed.

Peter

Michel Veillette schreef op 2016-11-14 17:27:
> Hi Peter.
> 
> The allocation by range have been introduced to simplify the life of
> SDOs, not to make their life more difficult.
> With your proposal, the SDO must interact with IANA for each module 
> created.
> With the allocation by ranges, the allocated range can be large enough
> to allow the SDO to be autonomous for multiple years of development,
> for dozen of modules.
> 
> Updating the different drafts to identify YANG items using (module ID,
> module item ID) is possible, but not with some impacts on message size
> and complexity.
> 
> Regards,
> Michel
> 
> -----Original Message-----
> From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der 
> Stok
> Sent: Sunday, November 13, 2016 7:13 PM
> To: Core <core@ietf.org>
> Subject: [core] draft-ietf-core-sid-00, SID allocation
> 
> Dear YANG-SID authors,
> 
> I want to propose a change to the allocation of SIDs.
> Currently, the SIDs are divided in ranges and prospective users can
> register a range with IANA.
> When the range is already assigned, they need to select a new not
> allocated range.
> I think that this will discourage many future SDOs who may want to use
> YANG + COMI. Many of these SDOs like to figure out the best number
> structure for their uses, and will be very disappointed when they
> cannot acquire the range. Actually, I believe, they will abandon the
> use of YANG + COMI.
> 
> My proposal is to assign numbers to modules, and let IANA handle the
> module number registration as proposed for the SIDs. The assignment of
> SIDs to YANG identifiers, as proposed in the draft remains, the same.
> The difference is the complete freedom to choose the SIDs in any given
> module. The advantage is that all modules can pick their values from
> the small number range.
> 
> The change is in the discovery and the structure of the resource path.
> In COMI I want to define another resource type called YANG module with
> name core.c.module. The discovery will return the path:
> /prefix/module-number-in-binary64. For example, with an empty prefix
> and for module 32, discovery will return /g. To retrieve a specific
> YANG instance with numeric identifier sid in module 32, the statement
> GET coap/example.com/g/sid will do. With two characters, modules with
> numbers < 4096 are covered; probably 3 characters will cover all
> modules.  Given that the SIDs are small, the total URI size will not
> increase due to this modification.
> 
> When the full datastore is accessed, the path /c is currently used. We
> can reserve c, meaning module number 28 is already assigned. Another
> method is returning a long path name, such as /whole_store. The size
> of the related URI is not important in this case. However, the
> proposed module allocation necessitates a small modification to the
> CBOR representation of the contents of the full datastore. This is
> attained by representing the full datastore as a CBOR map containing
> (key, value) pairs, where key is the module number and value is the
> content of the module as specified in yang-cbor document.
> 
> For the PATCH and the FETCH methods, this representation will also
> work, given the content-formats that are currently looked at.
> 
> I hope you like my proposal. The advantage is a simpler IANA
> administration, SID allocation freedom within a module, and shorter
> SIDs. The disadvantage is a slight complexity increase in the CBOR
> representation of the full datastore.
> 
> Hope this helps,
> 
> Peter
> 
> 
> --
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
> 
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Mon Nov 14 19:52:46 2016
Return-Path: <spencerdawkins.ietf@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E7251293F3; Mon, 14 Nov 2016 19:52:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xVBDZycqPuSR; Mon, 14 Nov 2016 19:52:38 -0800 (PST)
Received: from mail-yw0-x22d.google.com (mail-yw0-x22d.google.com [IPv6:2607:f8b0:4002:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77AD7129A05; Mon, 14 Nov 2016 19:52:37 -0800 (PST)
Received: by mail-yw0-x22d.google.com with SMTP id t125so83905557ywc.1; Mon, 14 Nov 2016 19:52:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=7cUu/nVf5CcboTYmTFiIgkesGV5wNP5V5QG/nASkv0c=; b=XlKmISAGx81WMjrmM1mq3+qVeL9HHwiPIMsGji+gU5X3ZSURz8Nm7FX5VtyaNscU06 Bgp7si94hYByqrdKuYE25ohvmg6yoFtTWPwcWwu68u5PK1JP1XuOB6eTHmB4B2C+MiyA jSyejJIBh7zrT/SFu3pbTqn2AuZ0cLb0zxu+6ZJUii5xGVY+P+Sos4AxjxVSvHrZvTh2 zchWpbYybo3xO3+p10+41p0CRZBLd1eV0yG2NZdncRiajqwIsPtYtzOLWBwgUD0+/S3a z+GN4zJDcHeF8q/WDKXcbo0xVrW+/A0ecPly49N2z5GrBM83jrHOlFpeEFm1Fzf4CwHw IMVw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=7cUu/nVf5CcboTYmTFiIgkesGV5wNP5V5QG/nASkv0c=; b=M2D5POw7zzIJlpIeE/TKXWjPZBD4eQC1V9aZuQPj4tiZ3BRoppL8HI7RSPgW4EWYlQ vRJTrRfOkbB9jKxSZ9rmlzCLQZIRYkCFUuNg61ZRWL6JDpn3T4jjPcjPtXOrJABpEP82 zHq4p78TIdyXFjARYbILE1f7jCY5Ylhiyu8c44Wy0wXVbAPsQEUjVCSGuaAjBvjNEqAr Jk2dCEzXaSUKITr2jvvKZ7EYD5LG9McOhAel3JahN4wmARM578QAEeDgr2fBoP+3vvwU PE+B9K6W26JJOv/Ewa3BdXiPrIjsbJDvgeyx7f0XiskMemQR+JDqj6NKAJmJkFMnoI3E nReQ==
X-Gm-Message-State: ABUngvcwBUAUb4G+bhSm04YhDo0udbpb1fjIAQ2ejF808kEnpfOCotbeik+RHhISZDpaHibSVjLfzW9U3yVIbg==
X-Received: by 10.129.125.215 with SMTP id y206mr16998099ywc.234.1479181956753;  Mon, 14 Nov 2016 19:52:36 -0800 (PST)
MIME-Version: 1.0
Received: by 10.37.170.79 with HTTP; Mon, 14 Nov 2016 19:52:36 -0800 (PST)
In-Reply-To: <568C7E9F-0443-456C-BCA9-981DB9758741@tzi.org>
References: <147628802464.6377.2774521252462284021.idtracker@ietfa.amsl.com> <3ad76e63e6f6b955b5373a5521bcca98@xs4all.nl> <1476356714.1601674.754646289.1E106782@webmail.messagingengine.com> <CAKKJt-eMDwfZLpmqHnBb=7ftjj2d5VEVRhuA27UQeq57JsJfpw@mail.gmail.com> <568C7E9F-0443-456C-BCA9-981DB9758741@tzi.org>
From: Spencer Dawkins at IETF <spencerdawkins.ietf@gmail.com>
Date: Tue, 15 Nov 2016 12:52:36 +0900
Message-ID: <CAKKJt-d4QJswdqd5xcbaY-zr6U83FGt0iXADYz8dtXoYp5Rj9A@mail.gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Content-Type: multipart/alternative; boundary=001a11492dfa17305205414ee35c
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Hi2n7H2kvaOsaTM-JqP-kP4zyso>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, "iesg@ietf.org" <iesg@ietf.org>, "core@ietf.org" <core@ietf.org>, Alexey Melnikov <aamelnikov@fastmail.fm>
Subject: Re: [core] Spencer Dawkins' Discuss on draft-ietf-core-etch-03: (with DISCUSS and COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 03:52:39 -0000

--001a11492dfa17305205414ee35c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Carsten,

On Mon, Nov 14, 2016 at 10:37 AM, Carsten Bormann <cabo@tzi.org> wrote:

> Hi Spencer,
>
> please see my comment to Alissa, as well as the new text
>
>    It is RECOMMENDED that any discovery method that allows a client to
>    find out that the server supports one of PATCH and iPATCH also
>    provides information what patch payload media types are applicable
>    and which of the two methods are implemented by the server for each
>    of these media types.
>
>    Servers that do not rely on the idempotency of iPATCH can easily
>    support both PATCH and iPATCH, and it is RECOMMENDED they do so.
>    This is inexpensive to do, as, for iPATCH, there is no requirement on
>    the server to check that the client's intention that the request be
>    idempotent is fulfilled (although there is diagnostic value in that
>    check, so a less-constrained implementation may want to perform it).
>
> I think that this should give the guidance that is needed here.  Do you
> agree?
>
> Gr=C3=BC=C3=9Fe, Carsten


I do, and I'll clear.

Spencer

--001a11492dfa17305205414ee35c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Carsten,<div class=3D"gmail_extra"><br><div class=3D"gmail=
_quote">On Mon, Nov 14, 2016 at 10:37 AM, Carsten Bormann <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:cabo@tzi.org" target=3D"_blank">cabo@tzi.org</a>&gt;=
</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Spencer,<br>
<br>
please see my comment to Alissa, as well as the new text<br>
<br>
=C2=A0 =C2=A0It is RECOMMENDED that any discovery method that allows a clie=
nt to<br>
=C2=A0 =C2=A0find out that the server supports one of PATCH and iPATCH also=
<br>
=C2=A0 =C2=A0provides information what patch payload media types are applic=
able<br>
=C2=A0 =C2=A0and which of the two methods are implemented by the server for=
 each<br>
=C2=A0 =C2=A0of these media types.<br>
<br>
=C2=A0 =C2=A0Servers that do not rely on the idempotency of iPATCH can easi=
ly<br>
=C2=A0 =C2=A0support both PATCH and iPATCH, and it is RECOMMENDED they do s=
o.<br>
=C2=A0 =C2=A0This is inexpensive to do, as, for iPATCH, there is no require=
ment on<br>
=C2=A0 =C2=A0the server to check that the client&#39;s intention that the r=
equest be<br>
=C2=A0 =C2=A0idempotent is fulfilled (although there is diagnostic value in=
 that<br>
=C2=A0 =C2=A0check, so a less-constrained implementation may want to perfor=
m it).<br>
<br>
I think that this should give the guidance that is needed here.=C2=A0 Do yo=
u agree?<br>
<br>
Gr=C3=BC=C3=9Fe, Carsten</blockquote><div><br></div><div>I do, and I&#39;ll=
 clear.</div><div><br></div><div>Spencer=C2=A0</div></div></div></div>

--001a11492dfa17305205414ee35c--


From nobody Mon Nov 14 19:55:10 2016
Return-Path: <spencerdawkins.ietf@gmail.com>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 397851296B6; Mon, 14 Nov 2016 19:55:08 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "Spencer Dawkins" <spencerdawkins.ietf@gmail.com>
To: "The IESG" <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.37.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <147918210822.2404.9517118006950137625.idtracker@ietfa.amsl.com>
Date: Mon, 14 Nov 2016 19:55:08 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/6XU_V9k6QpJd430KTP9UaknCr-w>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, core@ietf.org
Subject: [core] Spencer Dawkins' No Objection on draft-ietf-core-etch-04: (with COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 03:55:08 -0000

Spencer Dawkins has entered the following ballot position for
draft-ietf-core-etch-04: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-core-etch/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for working with me (and Alexey) to resolve my Discuss, which
was:

I'm following most of your reasoning behind having the twin methods PATCH
and iPATCH, but I'm struggling a bit that there's nothing that I saw that
prevents a problem when the client implements only PATCH and the server
implements only iPATCH. 

The only text I saw that provides guidance about which method to
implement is

   A client can mark a request as idempotent by using the iPATCH method
   instead of the PATCH method.  This is the only difference between the
   two.  The indication of idempotence may enable the server to keep
   less state about the interaction; some constrained servers may only
   implement the iPATCH variant for this reason.
   
Maybe I missed something? 

If not, I saw

   There is no guarantee that a resource can be modified with PATCH or
   iPATCH.
   
so, maybe that mismatch isn't going to be a problem in practice, but it
seems sad that you might have a patchable resource, that can't be patched
because of that mismatch.

I'm not asking for "clients MUST implement iPATCH if you implement PATCH"
(which would accommodate servers that only implement iPATCH), but I
wonder if the working group talked about a way to avoid this mismatch?

(My previous comment was)

I was a bit uneasy with the "nearly" in 

   The security considerations for PATCH or iPATCH are nearly identical
   to the security considerations for PUT ([RFC7252]).  
   
with no explanation of any differences, but I'll leave that for the SEC
ADs to pick up on if it matters.



From nobody Mon Nov 14 23:08:50 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91DAC12961C for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 23:08:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PWqYg93QvjF for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 23:08:47 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0C27129A35 for <core@ietf.org>; Mon, 14 Nov 2016 23:08:41 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id 4A4A54004B; Tue, 15 Nov 2016 08:08:38 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 97B4459; Tue, 15 Nov 2016 08:08:36 +0100 (CET)
Received: from hephaistos.amsuess.com (hephaistos.amsuess.com [10.13.13.129]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 404BA512;  Tue, 15 Nov 2016 08:08:36 +0100 (CET)
Received: (nullmailer pid 26153 invoked by uid 1000); Tue, 15 Nov 2016 07:08:35 -0000
Date: Tue, 15 Nov 2016 08:08:35 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Carsten Bormann <cabo@tzi.org>
Message-ID: <20161115070835.cagzd2x6mhmqac7h@hephaistos.amsuess.com>
References: <etPan.58174215.459cb227.650d@tzi.org> <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="zl7m2fzrsh4tcbpu"
Content-Disposition: inline
In-Reply-To: <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/KDqvbBLHOwWTaGTg5R0X54_YnRo>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Updated agenda for CoRE @ IETF97
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 07:08:49 -0000

--zl7m2fzrsh4tcbpu
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Carsten,

On Tue, Nov 15, 2016 at 06:28:19AM +0900, Carsten Bormann wrote:
> We just pushed another update:
> We now have a room for the Thursday 13:30..15:00 informal non-WG meeting:=
 Park Ballroom 3
> (thank you, Alexey!)

I'd like to join the session via remote participation. Park Ballroom 3,
judging from the other sessions hosted there, is not wired up, but AFAIR
you had your tablet set up for streaming in Berlin -- could I view/watch
via that?

I'm not fully up to date with latest available services, if you have no
preferred one, https://appr.tc/r/core97 seems usable.

Liebe Gr=FC=DFe
Christian

--=20
We are dreamers, shapers, singers, and makers.
  -- Elric

--zl7m2fzrsh4tcbpu
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=ULkj
-----END PGP SIGNATURE-----

--zl7m2fzrsh4tcbpu--


From nobody Mon Nov 14 23:15:21 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67E8C129A14 for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 23:15:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8CEgxk3COlDH for <core@ietfa.amsl.com>; Mon, 14 Nov 2016 23:15:16 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4ED2F1295DD for <core@ietf.org>; Mon, 14 Nov 2016 23:15:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAF7F7mQ005753; Tue, 15 Nov 2016 08:15:07 +0100 (CET)
Received: from t2001067c0370012878f75521cab39a02.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:78f7:5521:cab3:9a02]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tHzDV0SYWz7xlx; Tue, 15 Nov 2016 08:15:05 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <20161115070835.cagzd2x6mhmqac7h@hephaistos.amsuess.com>
Date: Tue, 15 Nov 2016 16:14:59 +0900
X-Mao-Original-Outgoing-Id: 500886899.098977-214744fd3321ecda9bb2cdd1f6ead635
Content-Transfer-Encoding: quoted-printable
Message-Id: <FDD3A6DA-FB89-4329-BDF6-FA323D55BAFD@tzi.org>
References: <etPan.58174215.459cb227.650d@tzi.org> <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org> <20161115070835.cagzd2x6mhmqac7h@hephaistos.amsuess.com>
To: =?utf-8?Q?Christian_Ams=C3=BCss?= <c.amsuess@energyharvesting.at>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/QOUxUATfAKgFFxDjM9njMSbhQWo>
Cc: "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] Updated agenda for CoRE @ IETF97
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 07:15:18 -0000

> I'd like to join the session via remote participation. Park Ballroom =
3,
> judging from the other sessions hosted there, is not wired up, but =
AFAIR
> you had your tablet set up for streaming in Berlin -- could I =
view/watch
> via that?

I could try to set this up.
The room is quite large (but set up in a large U configuration, so we =
have only 50 seats =E2=80=94 hint, hint, come early), so the acoustics =
may not be great.

> I'm not fully up to date with latest available services, if you have =
no
> preferred one, https://appr.tc/r/core97 seems usable.

In T2TRG, we have been using Google hangouts with quite some success, so =
we=E2=80=99ll probably try to repeat that here.
A hangout link will be published to the Jabber =
xmpp:core@jabber.ietf.org?join right at the start of the meeting.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Tue Nov 15 00:40:01 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 717841296DB; Tue, 15 Nov 2016 00:40:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nxVuEZSfiLrl; Tue, 15 Nov 2016 00:39:58 -0800 (PST)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DFE2129450; Tue, 15 Nov 2016 00:39:58 -0800 (PST)
X-AuditID: c1b4fb30-dc07098000007ca6-3e-582ac9dc0392
Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.183.24]) by  (Symantec Mail Security) with SMTP id FD.56.31910.CD9CA285; Tue, 15 Nov 2016 09:39:56 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC002.ericsson.se ([153.88.183.24]) with mapi id 14.03.0319.002; Tue, 15 Nov 2016 09:37:31 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Carsten Bormann <cabo@tzi.org>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: =?utf-8?B?W2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3At?= =?utf-8?Q?tls?=
Thread-Index: AQHSOZwjOukMEy0GdkmsbLEn6ehEbKDZw8eA
Date: Tue, 15 Nov 2016 08:37:30 +0000
Message-ID: <D4508662.6C99C%goran.selander@ericsson.com>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org>
In-Reply-To: <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.150]
Content-Type: text/plain; charset="utf-8"
Content-ID: <10D354F86DA59545BF72E574C899B8ED@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprLIsWRmVeSWpSXmKPExsUyM2K7hO6dk1oRBtPmaFkcmXKX1WLf2/XM Fn8mLmZ0YPZYsuQnk8e0RZkBTFFcNimpOZllqUX6dglcGdeuxhXMYK/4fkuggbGBvYuRk0NC wERi0ueJTCC2kMA6RomnHWVdjFxA9hJGiWc/vrGCJNgEXCQeNDwCKxIRcJNo3DYLrJlZIFTi yYxpjCC2sEC6xMONr9ggajIkFrUfZIWwjSReXLsG1ssioCrxr2keWD2vgIVEY/d2ZojFBRI7 urvA4pwC1hJHH98A62UUEJP4fmoNE8QucYlbT+YzQRwtILFkz3lmCFtU4uXjf0D1HByiAnoS a+6HQYSVJFZsv8QIEmYW0JRYv0sfwrSWOPgwB2KgosSU7ofsEMcISpyc+YRlAqP4LCS7ZiE0 z0JonoWkeRaS5gWMrKsYRYtTi5Ny042M9FKLMpOLi/Pz9PJSSzYxAiPt4JbfBjsYXz53PMQo wMGoxMNbcFEzQog1say4MvcQowQHs5II78fjWhFCvCmJlVWpRfnxRaU5qcWHGKU5WJTEec1W 3g8XEkhPLEnNTk0tSC2CyTJxcEo1MIp8+vmQe17hikamVTNOSqktPKu2ve2A3u3/O7cUqJm0 fnFVkJis57g8seUz595Xed805H7NkDJiNtu0Zsde4cvSGxfKnlyns9GUb01M4+aHJ6yf394f +THaent//3ZVPWMHY/WIk1ptnE1HRNi0C/OUfJrEP+QdY993wWxibU/d71NWzNveWyuxFGck GmoxFxUnAgBLExevsAIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/SODr3AxBopcYhzgzjlJOb7TCkY0>
Cc: "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 08:40:00 -0000

DQoNCk9uIDIwMTYtMTEtMDggMDk6NDIsICJjb3JlIG9uIGJlaGFsZiBvZiBDYXJzdGVuIEJvcm1h
bm4iDQo8Y29yZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBjYWJvQHR6aS5vcmc+IHdy
b3RlOg0KDQo+U28gZmFyLCB3ZSBoYXZlIGhhZCBvbmUgY29tbWVudCBvbiB0aGUgaW5jb21wbGV0
ZW5lc3Mgb2YgdGhlIFRDUC9VRFANCj5wcm94eSBleGFtcGxlIChCcmlhbiBpbnRlbmRzIHRvIHJl
bW92ZSB0aGlzIHRleHQpIGFuZCBhIGdvb2QgZGlzY3Vzc2lvbg0KPm9uIGhvdyB0aGUgb2JqZWN0
aXZlIG9mIE1USSAoYW5kIOKAnGRlZmF1bHQtZW5hYmxlZOKAnSkgc2VjdXJpdHkgY2FuIGJlDQo+
YWNoaWV2ZWQgKHdoaWNoIGhhc27igJl0IHF1aXRlIGNvbXBsZXRlZCB5ZXQsIEkgdGhpbmspLg0K
DQoNCkkgY29uZGVuc2VkIHNvbWUgb2YgdGhlIGNvbW1lbnRzIGluIHRoZSByZWNlbnQgbWFpbCBk
aXNjdXNzaW9uIGluIHRoZQ0KcmUtb3BlbmVkIGlzc3VlOg0KaHR0cHM6Ly9naXRodWIuY29tL2Nv
cmUtd2cvY29hcC10Y3AtdGxzL2lzc3Vlcy8xMQ0KDQpJIGhvcGUgSSBjYXB0dXJlZCB0aG9zZSBz
dGF0ZW1lbnRzIGFjY3VyYXRlbHksIHBsZWFzZSBjaGVjayB0aGUgbWFpbA0KdGhyZWFkcyBmb3Ig
dGhlIGNvbXBsZXRlIGNvbnZlcnNhdGlvbi4NCg0KDQpHw7ZyYW4NCg0KDQo=


From nobody Tue Nov 15 00:55:59 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 408C5129A4A; Tue, 15 Nov 2016 00:55:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5o8ZJ0e7LpCB; Tue, 15 Nov 2016 00:55:52 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DB55129A6B; Tue, 15 Nov 2016 00:55:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAF8tVQ9019288; Tue, 15 Nov 2016 09:55:31 +0100 (CET)
Received: from t2001067c0370012878f75521cab39a02.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:78f7:5521:cab3:9a02]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tJ1SK3mjjz7xpC; Tue, 15 Nov 2016 09:55:29 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <D4508662.6C99C%goran.selander@ericsson.com>
Date: Tue, 15 Nov 2016 17:55:22 +0900
X-Mao-Original-Outgoing-Id: 500892922.17506-f1787ef217362c2a37642db35cbb079a
Content-Transfer-Encoding: quoted-printable
Message-Id: <5B8F7BE1-53AF-46E8-AF26-997FE49AB52F@tzi.org>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org> <D4508662.6C99C%goran.selander@ericsson.com>
To: =?utf-8?Q?G=C3=B6ran_Selander?= <goran.selander@ericsson.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/XZFa8pUjw11Oxd5mwiKixD_FOdk>
Cc: "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 08:55:57 -0000

On 15 Nov 2016, at 17:37, G=C3=B6ran Selander =
<goran.selander@ericsson.com> wrote:
>=20
> I condensed some of the comments in the recent mail discussion in the
> re-opened issue:
> https://github.com/core-wg/coap-tcp-tls/issues/11

Thank you for the summary.

Brian: Do you want the submitters of the other reviews to turn these =
into github issues or do you plan to do that?

Gr=C3=BC=C3=9Fe, Carsten


From nobody Tue Nov 15 01:41:50 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2223129609; Tue, 15 Nov 2016 01:41:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.022
X-Spam-Level: 
X-Spam-Status: No, score=-2.022 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LWjmQoKCmsUM; Tue, 15 Nov 2016 01:41:45 -0800 (PST)
Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0111.outbound.protection.outlook.com [104.47.38.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B79A4129450; Tue, 15 Nov 2016 01:41:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XNZ+aFdeGDQNCJ6uZ250gubUttWXjSgpfqt8PNTON5o=; b=I4GABxPBBL7+gMvz64ml602pAvU4NpSrVF5mVgd/Df2TWNVYwsiESWfShP/9BlMURf/sgIXb14yKElj7NDhdUFl6J2ZF8/Tl12gYRW9fjAMbyPJjJHcb+eqbxWk5CfGRwqdyUiDAIQCmVStdZlOlLhBCpdTmU8BuKojmBToOKBU=
Received: from BN3PR03MB2369.namprd03.prod.outlook.com (10.166.74.152) by BN3PR03MB2372.namprd03.prod.outlook.com (10.166.75.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Tue, 15 Nov 2016 09:41:42 +0000
Received: from BN3PR03MB2369.namprd03.prod.outlook.com ([10.166.74.152]) by BN3PR03MB2369.namprd03.prod.outlook.com ([10.166.74.152]) with mapi id 15.01.0721.015; Tue, 15 Nov 2016 09:41:42 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: Carsten Bormann <cabo@tzi.org>, =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
Thread-Topic: =?utf-8?B?W2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3At?= =?utf-8?Q?tls?=
Thread-Index: AQHSKSEe9Mm6L+w6z0q3zoc7AJliLaDO5emAgAr+1QCAAAT+AIAACtug
Date: Tue, 15 Nov 2016 09:41:41 +0000
Message-ID: <BN3PR03MB23696B7999ED55F13B27270883BF0@BN3PR03MB2369.namprd03.prod.outlook.com>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org> <D4508662.6C99C%goran.selander@ericsson.com> <5B8F7BE1-53AF-46E8-AF26-997FE49AB52F@tzi.org>
In-Reply-To: <5B8F7BE1-53AF-46E8-AF26-997FE49AB52F@tzi.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [31.133.156.122]
x-microsoft-exchange-diagnostics: 1; BN3PR03MB2372; 7:cRmR+u8W2ycY3dS5M8Xho9EeXE4TeR/eC5vNeD17ykRXB7LOIQu4zMvK3nn3OU+il9bkWpY2dFyGjsuwrEwXO4djFVG9rMzEV0NTFJTfn7nW1+5UVAjHf5vx+rui+1eKEbzhXY6cmD4MaWrwkk17Q4FWeZOr9EnULOTW+PeYR69DjYxzqsyvAlN77jSkSDxM5Cu1jJwarkyE6KGW7kiGskDvNi5Q8n8KGKmMHEbgJj9tmu4SKx+GCcN/07bji4Y/MjTvJaUBGO7ja4/riK4nvoZgZQ7HMtjBtpo70HcSuU9bvn5jEDCTMxEGGfa3cBfMmf4bHx/fsUe73NwzTLbfkCkm2kyEC5LfNnc3RXNjtlCJ6CN2HKfavgKsIxydGd9m
x-ms-office365-filtering-correlation-id: 805e16ce-91d3-4748-8f0a-08d40d3b9b01
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN3PR03MB2372;
x-microsoft-antispam-prvs: <BN3PR03MB2372488800C955D06C74E4F683BF0@BN3PR03MB2372.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(166708455590820);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6045074)(6060326)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038)(6046074)(6061324); SRVR:BN3PR03MB2372; BCL:0; PCL:0; RULEID:; SRVR:BN3PR03MB2372; 
x-forefront-prvs: 012792EC17
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(199003)(5005710100001)(92566002)(5660300001)(50986999)(101416001)(54356999)(189998001)(76176999)(81156014)(33656002)(7736002)(2900100001)(77096005)(7846002)(8990500004)(74316002)(305945005)(5001770100001)(2950100002)(76576001)(229853002)(68736007)(97736004)(102836003)(2906002)(3280700002)(8936002)(10090500001)(10290500002)(81166006)(6116002)(106356001)(3660700001)(99286002)(3846002)(105586002)(229383001)(106116001)(4326007)(122556002)(93886004)(86612001)(87936001)(230783001)(9686002)(7696004)(86362001)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR03MB2372; H:BN3PR03MB2369.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2016 09:41:41.9543 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR03MB2372
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/8dVGxEIpaOiBOmQvKYMZsoN8IRc>
Cc: "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 09:41:48 -0000
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From nobody Tue Nov 15 08:28:09 2016
Return-Path: <bilhanan.silverajan@tut.fi>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7032A12947D for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 08:28:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.697
X-Spam-Level: 
X-Spam-Status: No, score=-5.697 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qC7bCrKgZNQl for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 08:28:06 -0800 (PST)
Received: from mail-gw-out1.cc.tut.fi (mail-gw-out1.cc.tut.fi [130.230.160.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 130B6128B37 for <core@ietf.org>; Tue, 15 Nov 2016 08:28:05 -0800 (PST)
X-AuditID: 82e6a020-0c3ff70000000917-d5-582b374f1f09
Received: from mail1.tut.fi (mail1.tut.fi [130.230.162.19]) by mail-gw-out1.cc.tut.fi (Symantec Messaging Gateway) with SMTP id 86.A7.02327.F473B285; Tue, 15 Nov 2016 18:26:56 +0200 (EET)
Received: from Bilhanans-MBP.P-661HNU-F1 (a88-114-40-90.elisa-laajakaista.fi [88.114.40.90]) by mail1.tut.fi (Postfix) with ESMTPSA id 2F08340336; Tue, 15 Nov 2016 18:26:55 +0200 (EET)
To: =?UTF-8?Q?Christian_Ams=c3=bcss?= <c.amsuess@energyharvesting.at>
References: <147794779162.23193.6769793631552741634.idtracker@ietfa.amsl.com> <7c2d4c7c-526a-7fd3-b1c4-c58f141a5720@tut.fi> <20161114155034.stnigqulniww7nji@hephaistos.amsuess.com>
From: Bill Silverajan <bilhanan.silverajan@tut.fi>
Message-ID: <d6d672aa-a972-9a8c-6f0e-dcd4ca24b758@tut.fi>
Date: Tue, 15 Nov 2016 18:26:54 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <20161114155034.stnigqulniww7nji@hephaistos.amsuess.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrJIsWRmVeSWpSXmKPExsXS9GyRsG6guXaEweK17BbLLzxnsdj3dj2z A5PH1v13mTyWLPnJFMAUxWWTkpqTWZZapG+XwJVx/eNktoKv2hUfmjeyNDCeV+pi5OSQEDCR +DJrJ2MXIxeHkMBeRom7OxqhnD2MEq3r5zOBVAkL5Elc6O5gAbFFBFwlPl/8wg5RtINR4tfb ZlaQBLOAoMSRm3uZQWw2ASOJA982gTXwClhKvLw4GcxmEVCV6LzxkBHEFhVIk1j56BcTRI2g xMmZT4BqODg4gRZc2VQOMdJW4s7c3cwQtrxE89bZzBMY+Wch6ZiFpGwWkrIFjMyrGMVyEzNz dNPLdfNLSwz1kpP1SkpL9NIyNzGCQ3CBwg7Gl9P0DzEKcDAq8fAuUNeOEGJNLCuuzD3EKMnB pCTKO1cHKMSXlJ9SmZFYnBFfVJqTWnyIUYKDWUmEd5E+UI43JbGyKrUoHyYlzcGiJM5b6q8Z IiSQnliSmp2aWpBaBJOV4eBQkuBlMwBqFCxKTU+tSMvMKUFIM3FwggznARr+B2x4cUFibnFm OkT+FKOilDgvqwZQQgAkkVGaB9cLShERRRpRrxjFgV4R5n0O0s4DTC9w3a+ABjMBDd5lrgEy uCQRISXVwDhzdmf51v+ht6b4spTH+x/Z7zD10YFpb/fyezTc/rZf0Vdrl0/UMlkdGwkrFpu3 kSrB803zJvHVixtqngnesMv0oYPmru2KAjYiU4TPTA82yma2Pt54LnyCqe+UyfeSZpxS9lxZ PEP89pfoCY9DzueuW1CflyFjyhZyZ0a/dt6LBLfdT5/PZVJiKc5INNRiLipOBACZSrFP7AIA AA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/K41POA2T1ZxaUz6O1HYmgLUsfeQ>
Cc: core@ietf.org
Subject: Re: [core] Fwd: New Version Notification for draft-silverajan-core-coap-protocol-negotiation-04.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Nov 2016 16:28:08 -0000

Hi Christian,

Thanks for the interesting comments and suggestions. I'll reply inline 
to them:

Christian Amsüss wrote:

> My notes / questions to -04:
>
> * at parameter / con parameter: It seems that the at= list arguments are
>   roughly equivalent to the con= context parameter that defaults to the
>   protocol and address of the originating submission.
>

After looking at "con", we took an active decision to introduce "at", 
for a couple of reasons. The first is to avoid overloading the semantics 
of "con" when the EP registers with the RD:

When using "con": This is my *one and only* context URI to describe the 
endpoint location. *Always* use it instead of the endpoint address (and 
protocol configurations) I'm registering my links with.

When using "at": You can reach me at the endpoint address (and protocol 
configuration) I registered my link with. Optionally, I'm also available 
to serve my CoAP resources at these other locations over alternative 
transports.

The second reason is that you may need to use "con" together with "at" 
for a reason you mention below (if you do a goto alt+con a little way down)


>   Does that mean that the endpoint registers using TCP instead of UDP,
>   the equivalent to the 4.1 example would be
>
>   POST coap+tcp://rd.example.com/rd?ep=node1&1&at=\
>           coap://server.example.com,\
>           coap+ws://server.example.com:5683/ws/
>

To me this makes complete sense, if the primary endpoint transport is 
seen to be TCP, and the server also wishes to indicate it's available 
over UDP and WebSockets. But, to see my next point on using alt and con,

>   ? This means that registration is only possible using a protocol where
>   no path component is used in the at parameter, but that's probably
>   fine because those protocols are rather not used to start a
>   connection. (Aren't the? It'd be something like a server accessed via
>   websockets registering itself as an endpoint at an RD runnign inside
>   the browser. If you don't want to rule out registration over those,
>   updating allowing a path into con= might be an option.)
>

alt+con:

I think this is a very interesting point when it comes to using CoAP 
over reliable transports such as TCP and WebSockets with the RD. While 
UDP sockets allow reuse and peer-to-peer communication, the same cannot 
be said for the others. i.e. if you're registering with a reliable 
transport protocol, I assume you must use "con", since the endpoint 
would use a different location (or a system generated client random port 
number in userspace) than the CoAP server endpoint.

I'm not sure whether our draft, coap-tcp-tls or core-resource-directory 
is a better place to highlight this, but we'll capture this into our 
draft if it isn't mentioned in the others.


>   If at is intended to be a list of more con= parameters, I suggest this
>   be made more explicit (eg. "The list does not need to contain the
>   location that is implied by the source address of the registering
>   connection or explicitly set in the con= parameter." after 4.1 par1).

Thanks for the suggestion. It's good to explicitly clarify the 
relationship to "con" as well as the endpoint location during the 
registration, so we'll add that text in.

>
> * at= parameter list: The comma-separation precludes all URIs that
>   contain the comma character. This is unlikely to occur (maybe
>   `coap+ws://.../ws,v=1.1/` like in RFC3986) but legal in a URI.
>

The comma is a valid (default) separator for query expansion (see 
section 3.2 in RFC 6570) but as you say, it's also legal in a URI. 
However, section 2.2 of RFCC 3986 describes the comma as a reserved 
character and has this to say about its use:

"If data for a URI component would conflict with a reserved character's 
purpose as a delimiter, then the conflicting data must be 
percent-encoded before the URI is formed."

We could mention this in the draft text too.

One thing: The CoAP URI for (secure) WebSockets as defined in 
core-tcp-tls does not specify a path component for the Websocket 
endpoint. It was too tricky to do location/identification by separating 
the path components for the websoocket endpoint away from the CoAP 
resource. However, this problem is addressed in this draft.

> * tt= parameter: To which of the four defined lookup types is this
>   applicable? (My assumption would be ep and res, where the res would
>   return the composed ).

"tt" extends the URI Template in the RD Lookup Function Set as follows:

URI Template:  /{+rd-lookup-base}/{lookup-
       type}{?d,ep,gp,et,rt,page,count,resource-param,tt}

So technically all four lookup types (including d and gp)

>Can the parameter
>   repeated to indicate a set of supported transports? Does it have a
>   default value? (I'd assume '*').
>

"tt" can be used to look up a specific transport type (or * for all). 
I'm not sure if it needs a default value? The use cases we had here were 
a client querying the RD for endpoints supporting a specific tranport, 
or a client querying the RD for an endpoint's currently available and 
active transports. This would also return the secure URIs if registered.

There's a tradeoff between making several queries to check for specific 
kinds of transports (so you get success or notfound responses), or 
extending "tt" to support a query list that can be returned in one 
operation (but may or may not contain all the transports you asked for).

Regards,
Bill



> Best regards
> Christian
>


From nobody Tue Nov 15 17:59:23 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BF361293FC for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 17:59:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vNoazwuS1YOK for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 17:59:18 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0750129405 for <core@ietf.org>; Tue, 15 Nov 2016 17:59:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAG1xEeT008451 for <core@ietf.org>; Wed, 16 Nov 2016 02:59:14 +0100 (CET)
Received: from t2001067c03700128ddb09ba30d3ecefd.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:ddb0:9ba3:d3e:cefd]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tJS9Y0M1Fz7yK5; Wed, 16 Nov 2016 02:59:12 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <etPan.580e1079.260e4824.ff73@tzi.org>
Date: Wed, 16 Nov 2016 10:59:08 +0900
X-Mao-Original-Outgoing-Id: 500954348.189112-abe55244c1ba046b079f768c31f5dc12
Content-Transfer-Encoding: quoted-printable
Message-Id: <968196C0-F487-432F-B8B7-B47798CD7F72@tzi.org>
References: <etPan.580e1079.260e4824.ff73@tzi.org>
To: "core@ietf.org WG" <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/PCqZAgJ9yWDe2Ev2Z9muvJrf0gw>
Subject: Re: [core] CoRE @ IETF97: slides
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 01:59:19 -0000

We now have an initial slide set:

https://datatracker.ietf.org/doc/slides-97-core-consolidated-slides/

Presenters: Please check I got everything in correctly.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Tue Nov 15 18:13:56 2016
Return-Path: <Akbar.Rahman@InterDigital.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7514312958D for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 18:13:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.107
X-Spam-Level: 
X-Spam-Status: No, score=-1.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RDNS_NONE=0.793] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CJo3xCqJ1ecy for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 18:13:44 -0800 (PST)
Received: from smtp-in1.interdigital.com (unknown [68.168.94.174]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51ECB1295C9 for <core@ietf.org>; Tue, 15 Nov 2016 18:13:42 -0800 (PST)
X-ASG-Debug-ID: 1479262420-06daaa078172d50001-aa7cYp
Received: from NISSONITE.InterDigital.com (nissonite.interdigital.com [10.2.64.252]) by smtp-in1.interdigital.com with ESMTP id gdNiDypOwfB12hbS (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO) for <core@ietf.org>; Tue, 15 Nov 2016 21:13:40 -0500 (EST)
X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com
Received: from NABESITE.InterDigital.com ([fe80::4d8a:a889:67c2:f009]) by NISSONITE.InterDigital.com ([::1]) with mapi id 14.03.0319.002; Tue, 15 Nov 2016 21:13:39 -0500
From: "Rahman, Akbar" <Akbar.Rahman@InterDigital.com>
To: "core@ietf.org WG" <core@ietf.org>
Thread-Topic: [core] CoRE @ IETF97: slides
X-ASG-Orig-Subj: RE: [core] CoRE @ IETF97: slides
Thread-Index: AQHSP60QcSOh+tlIOkm8gY2qFME6KKDa3K+g
Date: Wed, 16 Nov 2016 02:13:38 +0000
Message-ID: <36F5869FE31AB24485E5E3222C288E1F6DC9B660@NABESITE.InterDigital.com>
References: <etPan.580e1079.260e4824.ff73@tzi.org> <968196C0-F487-432F-B8B7-B47798CD7F72@tzi.org>
In-Reply-To: <968196C0-F487-432F-B8B7-B47798CD7F72@tzi.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.3.247.7]
x-exclaimer-md-config: bb79a19d-f711-475c-a0f9-4d93b71c94dd
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Barracuda-Connect: nissonite.interdigital.com[10.2.64.252]
X-Barracuda-Start-Time: 1479262420
X-Barracuda-Encrypted: ECDHE-RSA-AES256-SHA
X-Barracuda-URL: https://10.1.245.3:443/cgi-mod/mark.cgi
X-Barracuda-Scan-Msg-Size: 902
X-Virus-Scanned: by bsmtpd at interdigital.com
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.34511 Rule breakdown below pts rule name              description ---- ---------------------- --------------------------------------------------
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/uZ9r5V4yX5-6jGcHWAZGzIPPMsc>
Subject: Re: [core] CoRE @ IETF97: slides
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 02:13:45 -0000

Hi Carsten,


For the Open Discuss on HTTP-to-CoAP draft regarding the Informational Stat=
us (slide 10).  The discussion out of the IESG was leaning in the direction=
 that it should be Proposed Standard (PS) instead.  We should discuss if th=
e chairs and the WG agree with this as the authors were okay with changing =
it to PS.


Best Regards,


Akbar



-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of Carsten Bormann
Sent: Tuesday, November 15, 2016 8:59 PM
To: core@ietf.org WG <core@ietf.org>
Subject: Re: [core] CoRE @ IETF97: slides

We now have an initial slide set:

https://datatracker.ietf.org/doc/slides-97-core-consolidated-slides/

Presenters: Please check I got everything in correctly.

Gr=FC=DFe, Carsten

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Tue Nov 15 21:50:09 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA3C612968C for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 21:50:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J4rhQjoZMhX2 for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 21:50:00 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D988D129690 for <core@ietf.org>; Tue, 15 Nov 2016 21:49:56 -0800 (PST)
Received: from [192.168.91.156] ([31.133.133.129]) by mail.gmx.com (mrgmx102 [212.227.17.168]) with ESMTPSA (Nemesis) id 0LtUHA-1cpkTq19z2-010xhT for <core@ietf.org>; Wed, 16 Nov 2016 06:49:54 +0100
To: "core@ietf.org WG" <core@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net>
Date: Wed, 16 Nov 2016 06:49:45 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="QKwbKdsc5m9P0g6AQGbKmxOH429hFbVfp"
X-Provags-ID: V03:K0:9oXJ6oELPKBZoDwISCu68A9HIWkhCaLSztogAphfy1CVvWoi0xm Caiffp7rb+wbnZalGuOhb0S6GNWFkW4zVPpp9FxfuPHM9qYdtKnA8TPllnjW0b7xl3K8TBl 6TGBFVJ9CY1z0YuFja7SWVYwsBsCqTn1mRyQwdpxBE4E4+LPFehzGE/R1Z6e0W0fU6PAUeZ tTsiE5OJkX3+WyZ0GE9og==
X-UI-Out-Filterresults: notjunk:1;V01:K0:P/I9R2t+oLI=:xmV4UKzE4oykqWFtrseSAS cc9iXtwwgxpyBYoVWcSZZz97GytYbeitbj2n0z/zwGLxpTMYMVYZo88VEmes34Ikhz5DhiSGZ TzbF6pleOEpmq9fLwu0EZXVgmUDCZspMFICCpKUl2/mrMH01EywKNPzw0aWb54fF7QKCzbJ8x pGVNROOOCjbk+ArcrwO8DqImhSXvB5MmJQggxRvhXTmC2rBa6wc+GotXZML2DTMw/RR/lmLYz peH+nmAZwAuBkjl1A90Ly+P6Bx4tBo5NI2515AE4d4I8ALNVQ7DCmSTP+g8tCu6IS0zORSVjk 5dv6ji59nS4nj9vVFmt7nzdIppEFcnNCajXNY/k9LppLF/V30MPQPOD01ixJczQwHHDnnp/wU tvEfEfCi/6bVwAHnQ/e/JWibwVFo0HL60q8kht+gQ7OaKUaitEfyGk8KKT8xOxY5R2WdBtFGK ulFxeshGiB6C84sMgPMH1k3b2UzfhRnacRzKE1pc4sfve9bEXxkR06t3xqQuXz/Jg9Y73pW0+ xEczSsxjQYOABD+cZsn7b8Zs/Ej3Lso96NrFlPN3thdrLl9d0U3axDeXTkWvWcMiu4Hnnhyi7 RijzwiOy2NBawKkmNE0JM1tfktBqFlrL1J0+B8RCqjn9D3lRJZuVQMtO03lViMbZy3AjFGvDd UgTmscdXKtulyhzmonb82U8MMkxVo3EuDB6/xA1U7xvFrbQr3kWvD98LNPGGhypo2Y4fRmd23 Kxg2buRZrmgCnKuaCqY20hdc5swJPY68vR4xtgSTfWpC4Iqm4h4xKQABv/w=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/QbaXRGes7uw8vxbtHjLao8qPcLI>
Subject: [core] DTLS over CoAP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 05:50:02 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--QKwbKdsc5m9P0g6AQGbKmxOH429hFbVfp
Content-Type: multipart/mixed; boundary="oLVKuOLpGwasfXHHFTFMU9A1OHa2GfgG2";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: "core@ietf.org WG" <core@ietf.org>
Message-ID: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net>
Subject: DTLS over CoAP

--oLVKuOLpGwasfXHHFTFMU9A1OHa2GfgG2
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Since we discussed it in the CORE meeting today, here is the link to the
document Carsten mentioned:
https://tools.ietf.org/html/draft-schmertmann-dice-codtls-01


--oLVKuOLpGwasfXHHFTFMU9A1OHa2GfgG2--

--QKwbKdsc5m9P0g6AQGbKmxOH429hFbVfp
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYK/N6AAoJEGhJURNOOiAtJw8H/05j1E1yUcFVbhdYyXf3vPve
HqG7rpXSv3JJv7PpzZSB3RqPEMZvjq4OYOn+ZxC5QCj6u1tQSxUAUfSM4FGTUXao
XRUP9YJPfr76EOSl1sGfCq/4DQ/4dJ6NATUgVDyWu9sges9n6rrn0dlahpmpo4Wa
ChaEpvaLuRNvYb75nuu4SJXnMs/yTklXArjXID4F0A+gRWY1haoh1v/GWA2+Pyr0
FLrwrkLD8ahkGxBIjihozB/j+Hg+8TaPF5LbxcUIHzaUR6LEg8/3fpGLIsgRgowT
w5xIlaITCcxGLwe7lFxcrBnXxi8FOJrAnwkCoCBLo1kGTgNNeNzIRfeD5Qmtcf0=
=7TRd
-----END PGP SIGNATURE-----

--QKwbKdsc5m9P0g6AQGbKmxOH429hFbVfp--


From nobody Tue Nov 15 22:35:28 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B78F1294C7 for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 22:35:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BShXxeBWSzR5 for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 22:35:24 -0800 (PST)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52379129498 for <core@ietf.org>; Tue, 15 Nov 2016 22:35:23 -0800 (PST)
X-AuditID: c1b4fb2d-5b107980000009f7-3d-582bfe2a304f
Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by  (Symantec Mail Security) with SMTP id 87.A5.02551.A2EFB285; Wed, 16 Nov 2016 07:35:22 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0319.002; Wed, 16 Nov 2016 07:32:06 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: [core] DTLS over CoAP
Thread-Index: AQHSP81RhnR9W2OvLESbBIj+QGIetaDbJq8A
Date: Wed, 16 Nov 2016 06:32:06 +0000
Message-ID: <D451B9B7.6CB6D%goran.selander@ericsson.com>
References: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net>
In-Reply-To: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.148]
Content-Type: text/plain; charset="utf-8"
Content-ID: <AD438689F60EDE4C89B9B68C1DEB47BE@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprIIsWRmVeSWpSXmKPExsUyM2K7t67WP+0Ig4/N0hb73q5ntli68x6r A5PH4k372TyWLPnJFMAUxWWTkpqTWZZapG+XwJWxZcdH1oJN7BXTH+1mbGCcwd7FyMkhIWAi sWnGU9YuRi4OIYF1jBJTDq+FcpYwSmxr28EEUsUm4CLxoOERmC0iEC5x7fksVhBbWEBJYuL5 fVBxZYl3j6YxQthGEi1vO9lAbBYBVYlX164B1XBw8ApYSBz47wISFhKwknj15B1YCaeAtcTT lRBjGAXEJL6fWgNmMwuIS9x6Mp8J4lABiSV7zjND2KISLx//YwUZKSqgJ7HmfhhEWEmicckT sDCzgKbE+l36EFOsJa7Oa2eHsBUlpnQ/BLN5BQQlTs58wjKBUWwWkmWzELpnIemehaR7FpLu BYysqxhFi1OLi3PTjYz1Uosyk4uL8/P08lJLNjECI+rglt+6OxhXv3Y8xCjAwajEw2sQrR0h xJpYVlyZe4hRgoNZSYT3/AegEG9KYmVValF+fFFpTmrxIUZpDhYlcV6zlffDhQTSE0tSs1NT C1KLYLJMHJxSDYxJcv8q2b6f1PzhEnZsWZlM1IaCbe9S618fVmPTP7DIsdJRX+LVjBKTa7U5 B2Y0hm2MVQp7HxL+VDHALiAsXNyv/1nRxpLWTwEnZQS6d2z8FTzbeDl368ddJXNEtJ6IdZsr relOUxJRe1og/FI09Blj9kGV2kdiAWvvBPhan7qZ5unkuijGVomlOCPRUIu5qDgRAIvC9X2k AgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/_bFMJSYOX7ztBX3oRG8IyNzabec>
Subject: Re: [core] DTLS over CoAP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 06:35:26 -0000
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From nobody Tue Nov 15 23:21:08 2016
Return-Path: <weigengyu@bupt.edu.cn>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D372129565 for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 23:21:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.959
X-Spam-Level: 
X-Spam-Status: No, score=-2.959 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001, STOX_REPLY_TYPE=0.439] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iDvstRSV_toh for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 23:21:03 -0800 (PST)
Received: from mx1.bupt.edu.cn (mx1.bupt.edu.cn [211.68.68.2]) by ietfa.amsl.com (Postfix) with ESMTP id 85206129543 for <core@ietf.org>; Tue, 15 Nov 2016 23:21:03 -0800 (PST)
Received: from WeiGengyuPC (unknown [221.219.59.147]) by mx1.bupt.edu.cn (AnyMacro(G7)) with ESMTPA id 5DEC419F3DD; Wed, 16 Nov 2016 15:21:02 +0800 (HKT)
Message-ID: <D8D94104B39943488598F79C6AD1C829@WeiGengyuPC>
From: "weigengyu" <weigengyu@bupt.edu.cn>
To: =?utf-8?Q?G=C3=B6ran_Selander?= <goran.selander@ericsson.com>, "Hannes Tschofenig" <hannes.tschofenig@gmx.net>, <core@ietf.org>
References: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net> <D451B9B7.6CB6D%goran.selander@ericsson.com>
In-Reply-To: <D451B9B7.6CB6D%goran.selander@ericsson.com>
Date: Wed, 16 Nov 2016 15:21:02 +0800
Organization: BUPT
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="utf-8"; reply-type=original
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
Importance: Normal
X-Mailer: Microsoft Windows Live Mail 16.4.3528.331
X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/oz2ubSmsx5Q0p1QABkmPrUKQdi8>
Subject: Re: [core] DTLS over CoAP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 07:21:06 -0000

Hi,

It is interesting.
We are implementing CoAP/DTLS/SMS and CoAP/DTLS/UDP/SMS by extending Cf. 
CoAP.
And the software has been shifted to test on MI Android.

It needs to point out that DTLS would work better on some reliable datagram 
transport facilities.
So, "DTLS over CoAP" is much like that.
But, we also think that DTLS needs optimizing its handshake efficiencies, 
retransmission mechanism, and ets.

Regards,

Gengyu WEI
Network Technology Center
School of Computer
Beijing University of Posts and Telecommunications
-----åŽŸå§‹é‚®ä»¶----- 
From: GÃ¶ran Selander
Sent: Wednesday, November 16, 2016 2:32 PM
To: Hannes Tschofenig ; core@ietf.org WG
Subject: Re: [core] DTLS over CoAP

This is interesting and, as Carsten pointed out in the meeting, may be
used to establish keys for OSCOAP.

But I didnâ€™t understand how this changes the issue that if you mandate
implementation and use of transport layer security, with the use of this,
there would still be double security protocols which may not be applicable
in constrained environments.


GÃ¶ran



On 2016-11-16 06:49, "core on behalf of Hannes Tschofenig"
<core-bounces@ietf.org on behalf of hannes.tschofenig@gmx.net> wrote:

>Since we discussed it in the CORE meeting today, here is the link to the
>document Carsten mentioned:
>https://tools.ietf.org/html/draft-schmertmann-dice-codtls-01
>

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core 


From nobody Tue Nov 15 23:34:09 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFE9D1294D4 for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 23:34:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rz3kmGOJzwj4 for <core@ietfa.amsl.com>; Tue, 15 Nov 2016 23:34:05 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D11941294C6 for <core@ietf.org>; Tue, 15 Nov 2016 23:34:04 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id 1B5464004B; Wed, 16 Nov 2016 08:34:02 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 4E43859; Wed, 16 Nov 2016 08:34:01 +0100 (CET)
Received: from hephaistos.amsuess.com (hermes.amsuess.com [10.13.13.254]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id E22163D6; Wed, 16 Nov 2016 08:34:00 +0100 (CET)
Received: (nullmailer pid 14984 invoked by uid 1000); Wed, 16 Nov 2016 07:33:56 -0000
Date: Wed, 16 Nov 2016 08:33:56 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: Bill Silverajan <bilhanan.silverajan@tut.fi>
Message-ID: <20161116073355.o5xfjljktofcjhe4@hephaistos.amsuess.com>
References: <147794779162.23193.6769793631552741634.idtracker@ietfa.amsl.com> <7c2d4c7c-526a-7fd3-b1c4-c58f141a5720@tut.fi> <20161114155034.stnigqulniww7nji@hephaistos.amsuess.com> <d6d672aa-a972-9a8c-6f0e-dcd4ca24b758@tut.fi>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="adtdpo7cyc3dpolx"
Content-Disposition: inline
In-Reply-To: <d6d672aa-a972-9a8c-6f0e-dcd4ca24b758@tut.fi>
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/xJ8jPWo3_HGdlduysTuN9GUQxQI>
Cc: core@ietf.org
Subject: Re: [core] Fwd: New Version Notification for draft-silverajan-core-coap-protocol-negotiation-04.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 07:34:07 -0000

--adtdpo7cyc3dpolx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Bill,

thanks for your response.

On Tue, Nov 15, 2016 at 06:26:54PM +0200, Bill Silverajan wrote:
> I think this is a very interesting point when it comes to using CoAP over
> reliable transports such as TCP and WebSockets with the RD. While UDP
> sockets allow reuse and peer-to-peer communication, the same cannot be sa=
id
> for the others. i.e. if you're registering with a reliable transport
> protocol, I assume you must use "con", since the endpoint would use a
> different location (or a system generated client random port number in
> userspace) than the CoAP server endpoint.

You are right about the port number, I didn't think of that. I'll go
through the RD and TCP drafts again to check whether this needs further
notes.

> One thing: The CoAP URI for (secure) WebSockets as defined in core-tcp-tls
> does not specify a path component for the Websocket endpoint. It was too
> tricky to do location/identification by separating the path components for
> the websoocket endpoint away from the CoAP resource. However, this problem
> is addressed in this draft.

Indeed; then the example in 4.2 needs updating to drop the /ws/, doesn't
it? (I suppose that it is neither to mean that clients should connect
their web-sockets to ws://.../ws/ instead of .well-known/core, nor that
they should prefix /sensors/temp into /ws/sensors/temp when sending a
request to the WS).

> So technically all four lookup types (including d and gp)

I'm looking forward to seeing the gp applications you mentioned in the
presentations.

> "tt" can be used to look up a specific transport type (or * for all). I'm
> not sure if it needs a default value?

The default value would describe what protocol-negotiation-unaware
clients would receive, I think this does deserve mention.

Best regards
Christian

--=20
To use raw power is to make yourself infinitely vulnerable to greater power=
s.
  -- Bene Gesserit axiom

--adtdpo7cyc3dpolx
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEECM1tElX6OodcH7CWOY0REtOkveEFAlgsC9AACgkQOY0REtOk
veF50BAAsJnQDzwZ+NNU9ch7bnWc2TzH8bDzrfSLRY616lvHeS89MBhf3+TvEf4h
ZacNymtxVfcOyqzLtAKXvOSyDXH1E91hV6SAmMJfSQr9KOBvr2Fp3jh2Ei9P/GhT
fPUolk1DDOqf3xX0J00aZX5LSymsR2WEHa1ZGPCQwRWxGsCowiWKzrx0RWj+EVp7
NTLiAaSXTjbxuiAlVBeoGxkwSiB045j5dIMXWmMUM2VgHsNuc5T4DaQ9tXWDgWmm
mkvTzC1Sw3B1VPnl0+17zdyE6JirBwDZp/VxptqgLM6LcScY44vTviY9VYuyWljM
w682CFXuQ5KbHRT72QJ3Mh/OvfbXaEKIKrgigcPYMVbn89VMuCOQDx9Gesa7SAWb
g0SSAbAVwY9FA2WIpIeps1Gc272H/373mnGpZcJaPZZxgZZxbU6VthnyMhITXe0I
qbpdNqx8+5eKethzXbt2so7VYbp7DaaE2MI3Mn9LdUHyXJRhRwDoa69apm8EtwEp
W/GeFcVkRu7FzDhi/vWILawGiA9upYbKAf78MPX8HQvrIE+RWKnWSVAuU5y3yLRE
dYCy8CzHQZpw5H2L9tv8INIiz45+cSH3cxG2Xq5ax0SqNC8TyocHaPGo3V+7pSuz
FXngFIgb0e5fosfUTVnZUOug1QHrUwUR80vc5mRW4IlFrkHKWns=
=4edW
-----END PGP SIGNATURE-----

--adtdpo7cyc3dpolx--


From nobody Wed Nov 16 00:06:57 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 598AF12965E; Wed, 16 Nov 2016 00:06:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MkW3vPZ50io5; Wed, 16 Nov 2016 00:06:53 -0800 (PST)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 935DE12964E; Wed, 16 Nov 2016 00:06:52 -0800 (PST)
X-AuditID: c1b4fb30-dc07098000007ca6-82-582c139ac984
Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.183.24]) by  (Symantec Mail Security) with SMTP id 40.40.31910.A931C285; Wed, 16 Nov 2016 09:06:50 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC002.ericsson.se ([153.88.183.24]) with mapi id 14.03.0319.002; Wed, 16 Nov 2016 09:05:42 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: "core@ietf.org WG" <core@ietf.org>
Thread-Topic: =?utf-8?B?W2NvcmVdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNvcmUtY29hcC10Y3At?= =?utf-8?Q?tls?=
Thread-Index: AQHSOZwjOukMEy0GdkmsbLEn6ehEbKDZw8eA///0PACAAZU1AA==
Date: Wed, 16 Nov 2016 08:05:41 +0000
Message-ID: <D451C8B9.6CC0D%goran.selander@ericsson.com>
References: <82DE92F9-01EE-41C1-9DC2-7733EEF9A861@ericsson.com> <A09A11C0-DF7A-466C-B903-7F611866EE40@tzi.org> <D4508662.6C99C%goran.selander@ericsson.com> <5B8F7BE1-53AF-46E8-AF26-997FE49AB52F@tzi.org>
In-Reply-To: <5B8F7BE1-53AF-46E8-AF26-997FE49AB52F@tzi.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.154]
Content-Type: text/plain; charset="utf-8"
Content-ID: <FD4ABE48A810B443963F69F2473933F2@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprOIsWRmVeSWpSXmKPExsUyM2K7hO4sYZ0Ig397bSz2vV3PbPFn4mJG ByaPJUt+MgUwRnHZpKTmZJalFunbJXBlzGjfxlSwg6tiTt8l5gbGKVxdjJwcEgImEpOe3GHv YuTiEBJYxyhxaP1zJpCEkMASRonOhUYgNpuAi8SDhkdgcREBNYnWSa/YQGxmgVCJJzOmMYLY wgLpEg83QsRFBDIkFrUfZIWwnSS+tD4Fi7MIqEps2T6FBcTmFbCQmPftCtTiC4wSXy/OZwZJ cApYS8yb3QJmMwqISXw/tYYJYpm4xK0n85kgrhaQWLLnPDOELSrx8vE/oGUcHKICehJr7odB hJUkFt3+zAQSZhbQlFi/Sx/CtJa4uCIaYqCixJTuh+wQ1whKnJz5hGUCo/gsJLtmITTPQmie haR5FpLmBYysqxhFi1OLk3LTjYz0Uosyk4uL8/P08lJLNjECo+vglt8GOxhfPnc8xCjAwajE w2sQrR0hxJpYVlyZe4hRgoNZSYT3uqBOhBBvSmJlVWpRfnxRaU5q8SFGaQ4WJXFes5X3w4UE 0hNLUrNTUwtSi2CyTBycUg2MGSa7ayfK678zV2gN97fa8Nv1ctRKp7kbDgcd+9JatZNjreLV opVm8h3KLx98NHZNurN7oaBW/06W1kcbhaV+e/6I9+Ba51fv9WS1Rvml/5pfBWODYiTr5Vq9 dPnu7NE21q3Vu2grNYl50vULG4uy8ud/3lzpeXfCJsdy87LE6PzO7rnTLc8psRRnJBpqMRcV JwIAe2K7+qoCAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/LBZ1ZNRoh2-PaqsafqKaR9gFhYw>
Cc: "draft-ietf-core-coap-tcp-tls@ietf.org" <draft-ietf-core-coap-tcp-tls@ietf.org>
Subject: Re: [core] =?utf-8?q?=F0=9F=94=94_WGLC_on_draft-ietf-core-coap-tcp-tl?= =?utf-8?q?s?=
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 08:06:55 -0000

DQoNCk9uIDIwMTYtMTEtMTUgMDk6NTUsICJDYXJzdGVuIEJvcm1hbm4iIDxjYWJvQHR6aS5vcmc+
IHdyb3RlOg0KDQo+T24gMTUgTm92IDIwMTYsIGF0IDE3OjM3LCBHw7ZyYW4gU2VsYW5kZXIgPGdv
cmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbT4NCj53cm90ZToNCj4+IA0KPj4gSSBjb25kZW5zZWQg
c29tZSBvZiB0aGUgY29tbWVudHMgaW4gdGhlIHJlY2VudCBtYWlsIGRpc2N1c3Npb24gaW4gdGhl
DQo+PiByZS1vcGVuZWQgaXNzdWU6DQo+PiBodHRwczovL2dpdGh1Yi5jb20vY29yZS13Zy9jb2Fw
LXRjcC10bHMvaXNzdWVzLzExDQo+DQo+VGhhbmsgeW91IGZvciB0aGUgc3VtbWFyeS4NCj4NCg0K
U2luY2UgdGhlIGlzc3VlIHdhc27igJl0IGNsb3NlZCBpbiB0aGUgV0cgbWVldGluZywgaGVyZSBh
cmUgdHdvIG1vcmUgcG9pbnRzDQpJIHRoaW5rIHdhc27igJl0IGhpZ2hsaWdodGVkOg0KDQoxLiBU
aGlzIGlzIG5vdCBhIGJhdHRsZSBiZXR3ZWVuIHRyYW5zcG9ydCB2cy4gYXBwbGljYXRpb24gbGF5
ZXIgc2VjdXJpdHkuDQpUaGUgYXJlIG90aGVyIGxheWVycyBhbmQgc2VjdXJpdHkgcHJvdG9jb2xz
IGFzIHdlbGwuIEFuZCB3ZSBuZWVkIHRoaXMNCmZsZXhpYmlsaXR5IGJlY2F1c2UgZGlmZmVyZW50
IHNlY3VyaXR5IHByb3RvY29scyBoYXZlIGRpZmZlcmVudA0KcHJvcGVydGllcywgbWVldGluZyBv
dGhlciByZXF1aXJlbWVudHMuDQoNCg0KMi4gVGhpcyBpcyBub3QgYWJvdXQgZGlzY291cmFnaW5n
IHRoZSBpbXBsZW1lbnRhdGlvbiBvZiBUTFMsIGJ1dCBhbGxvd2luZw0KYXBwbGljYXRpb25zIHRo
YXQgaGFzIG90aGVyIHNlY3VyaXR5IG1lY2hhbmlzbXMgYXZhaWxhYmxlIHRvIGltcGxlbWVudCBh
bmQNCnVzZSBzb21ldGhpbmcgZWxzZS4gVGhpcyBjYW4gZS5nLiBiZSBmb3JtdWxhdGVkIGFzICJU
TFMgaXMgbWFuZGF0b3J5IHRvDQppbXBsZW1lbnQgdW5sZXNzIC4gLiAu4oCdDQoNCg0KDQpHw7Zy
YW4NCg0K


From nobody Wed Nov 16 00:21:44 2016
Return-Path: <c.amsuess@energyharvesting.at>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 358C7129693 for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 00:21:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5JToKNthU66u for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 00:21:41 -0800 (PST)
Received: from prometheus.amsuess.com (alt.prometheus.amsuess.com [IPv6:2a01:4f8:190:3064::3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A518D12954D for <core@ietf.org>; Wed, 16 Nov 2016 00:21:41 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (unknown [IPv6:2a02:b18:c13b:8001:a800:ff:fede:b1bd]) by prometheus.amsuess.com (Postfix) with ESMTPS id D0B174004B for <core@ietf.org>; Wed, 16 Nov 2016 09:21:39 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [10.13.13.231]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 8CA0759 for <core@ietf.org>; Wed, 16 Nov 2016 09:21:37 +0100 (CET)
Received: from hephaistos.amsuess.com (hermes.amsuess.com [10.13.13.254]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 62A273D6 for <core@ietf.org>; Wed, 16 Nov 2016 09:21:37 +0100 (CET)
Received: (nullmailer pid 21207 invoked by uid 1000); Wed, 16 Nov 2016 08:21:36 -0000
Date: Wed, 16 Nov 2016 09:21:36 +0100
From: Christian =?iso-8859-1?Q?Ams=FCss?= <c.amsuess@energyharvesting.at>
To: core@ietf.org
Message-ID: <20161116082135.xhijeey5fyfblnx3@hephaistos.amsuess.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="pf5df62p3w3bet4n"
Content-Disposition: inline
User-Agent: NeoMutt/20161104 (1.7.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/YixixQT2zKqThDkVyU_djVR_3L4>
Subject: [core] resource-directory: Considerations for TCP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 08:21:43 -0000

--pf5df62p3w3bet4n
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello RD authors,

out of a protocol-negotiation discussion[1] with Bill there came points
I'd like to bring up with RD related to the new protocols introduced in
tcp-tls regarding the `con` parameter.

* For TCP connections with usually random source ports, the `con`
  parameter will be practically required. I'd suggest to add a note
  there, a la "(This parameter is compulsory when the directory is
  filled by a third party such as a commissioning tool), and practically
  required for protcols like TCP where outgoing and incoming
  communication use different addresses.

* For alternative transports in protocol-negotiation, path components
  are allowed in the `at` paramter, even though the currently
  in-progress protocols do not allow a path to be part of the base
  address. This leads to asymmetries with con.

  I'm not sure whether there can be protocols that have a path component
  in their base address (resolving a `/sensor/temp` reference would be
  really awkward in such a situation), but allowing for the context
  parameter to be a full URI (which would not necessarily allow it for
  the existing protocols) would keep the door open if someone figures
  out something very (or dangerously?) clever later.

  No matter whether or not paths are allowed, the same reasoning should
  be applicable to both `con` and `at`, so if there has been discussion on
  this earlier, I think it'd be helpful to point it out because it's
  probably applicable to `at` as well.

Best regards
Christian

[1]: https://mailarchive.ietf.org/arch/msg/core/K41POA2T1ZxaUz6O1HYmgLUsfeQ

--=20
Christian Ams=FCss                      | Energy Harvesting Solutions GmbH
founder, system architect             | headquarter:
mailto:c.amsuess@energyharvesting.at  | Arbeitergasse 15, A-4400 Steyr
tel:+43-664-97-90-6-39                | http://www.energyharvesting.at/
                                      | ATU68476614

--pf5df62p3w3bet4n
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEECM1tElX6OodcH7CWOY0REtOkveEFAlgsFwwACgkQOY0REtOk
veGL/w/9FBFWXnD7tr5VRZwIV1Z8I6W+TXpGUgXOb12d2r8iUqKN9rNZuANkE4g8
UE2zKlp/mARjnVFifRmr1MAaICT7QlQDBKiUPWNockmrdWyD9R92PGdPzWII6uXt
7Jq1sq6cLc9vV44+L6BGfvZdCWZNi/hyjUFgnyEO+Bheg/6WsjG0DV3XxfqaHZ1E
mLIV0Ko2pbhtJb3OR9ejtsOg3izsqRIYdlq7hFkUyIDz/As8VXT4vMFYE7WW2oSF
uylSBF88ssrc+aeQs0k6DGreUA0W2RxlVUPT3JNS/vwDsq7BgeycfQBf2gOOWXWw
ie7kqAg1glr1BksR9JT5HyGURvtMA2Ea5xE38g2yrC9i/qDhfcfoJ0Mc8lZLI/Cl
f7jMEGFxhRpkcdou1q7B37jFoIXzFzJI67qIHqyzPbP7jQXzh72c2Daz1ChzGw9+
L0kP2nyHN6TOLoCw68Vk0aM1GJyS1/pRzbJBA0rcJ5JYgcmJ3+tnQt/reqGhflBF
Ov3FxOqinr8kc4bUIg7QTLkJ3WZu34e6n0pMqDJTXlKsBoVTx28IBEonwd1nCqa2
yTi2o2PxBvE3/C68+41XremVt739B3cv2g4rTBr1leW3mgCltY6HPdMFwg7X1sUw
jKncbXNi4H8R9Ea3P/Mmh3Tr5Cx0RJt4CnJolk7PoQL+ZbpQQyg=
=rSyn
-----END PGP SIGNATURE-----

--pf5df62p3w3bet4n--


From nobody Wed Nov 16 00:27:03 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DC6712969D for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 00:27:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RL_l09j4K_AF for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 00:26:56 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B8DA1296BA for <core@ietf.org>; Wed, 16 Nov 2016 00:26:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAG8Qe3J010108; Wed, 16 Nov 2016 09:26:40 +0100 (CET)
Received: from dhcp-85e0.meeting.ietf.org (dhcp-85e0.meeting.ietf.org [31.133.133.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tJcmZ58jdz7yQ5; Wed, 16 Nov 2016 09:26:38 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
X-Priority: 3
In-Reply-To: <D8D94104B39943488598F79C6AD1C829@WeiGengyuPC>
Date: Wed, 16 Nov 2016 17:26:34 +0900
X-Mao-Original-Outgoing-Id: 500977593.938641-46ead5a511d5f3b2806a457e0a97ad68
Content-Transfer-Encoding: quoted-printable
Message-Id: <EE120603-17BE-4709-94DA-3B878232BEDE@tzi.org>
References: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net> <D451B9B7.6CB6D%goran.selander@ericsson.com> <D8D94104B39943488598F79C6AD1C829@WeiGengyuPC>
To: weigengyu <weigengyu@bupt.edu.cn>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/BKIYqgdGMHp3QOZzsHYngNrKJJQ>
Cc: core@ietf.org
Subject: Re: [core] DTLS over CoAP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 08:27:00 -0000

On 16 Nov 2016, at 16:21, weigengyu <weigengyu@bupt.edu.cn> wrote:
>=20
> It needs to point out that DTLS would work better on some reliable =
datagram transport facilities.
> So, "DTLS over CoAP" is much like that.
> But, we also think that DTLS needs optimizing its handshake =
efficiencies, retransmission mechanism, and ets.

Indeed =E2=80=94 that was the original motivation =E2=80=94 getting rid =
of DTLS retransmissions by using the much better behaved CoAP =
retransmissions instead.
Only then did we notice that this makes a nice end-to-end key agreement =
protocol if there is a cipher suite that matches your security =
requirements.

G=C3=B6ran: I mentioned this as a reaction to Hannes=E2=80=99 idea that =
we should use TLS at the application layer.  We still need OSCOAP to =
actually replace the record layer (and provide semantics appropriate to =
end-to-end security).  And no, I still don=E2=80=99t want to be forced =
to add transport layer security when application layer security is what =
my security objectives actually require.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Wed Nov 16 05:37:52 2016
Return-Path: <prvs=1213f1483=abhijan.bhattacharyya@tcs.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17BAC12942F; Wed, 16 Nov 2016 05:37:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.797
X-Spam-Level: 
X-Spam-Status: No, score=-5.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=tcs.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQMoY5J5qc7i; Wed, 16 Nov 2016 05:37:49 -0800 (PST)
Received: from inkolg01.tcs.com (inkolg01.tcs.com [121.241.215.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 777691297A8; Wed, 16 Nov 2016 05:37:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tcs.com; i=@tcs.com; q=dns/txt; s=default; t=1479303468; x=1510839468; h=in-reply-to:references:to:cc:subject:message-id:from: date:content-transfer-encoding; bh=XOKsjoODTPddZThUMdUe3sDPNPQS03L5VNB3RiAU2kc=; b=D70KwV1H5Do20Qi9AC3AAshKXUbLu3Z7CTOqExMSs87+OxeAh8ls2OcD ht3cRyNGDQpARelyVWkLljbzHDMddaSY5J2fVmXbb/EzLCmHgk9cJADA9 vuxJWvJM38+80mOd4dMAlWidWBJvtij1QGHZPbPxV5EgOSXcu00iXAx4p c=;
IronPort-PHdr: =?us-ascii?q?9a23=3AglrgmRAcdGCivyq4IPIcUyQJP3N1i/DPJgcQr6Af?= =?us-ascii?q?oPdwSPX9p8bcNUDSrc9gkEXOFd2CrakV0KyP7+u8BiQp2tWoiDg6aptCVhsI24?= =?us-ascii?q?09vjcLJ4q7M3D9N+PgdCcgHc5PBxdP9nC/NlVJSo6lPwWB6nK94iQPFRrhKAF7?= =?us-ascii?q?Ovr6GpLIj8Swyuu+54Dfbx9GiTe5b75+Ngi6oAreusQZg4ZpN7o8xAbOrnZUYe?= =?us-ascii?q?pd2HlmJUiUnxby58ew+IBs/iFNsP8/9MBOTLv3cb0gQbNXEDopPWY15Nb2tRbY?= =?us-ascii?q?VguA+mEcUmQNnRVWBQXO8Qz3UY3wsiv+sep9xTWaMMjrRr06RTiu86FmQwLzhS?= =?us-ascii?q?wZKzA27n3Yis1ojKJavh2hoQB/w5XJa42RLfZyY7/Rcc8fSWdHQ81fVTFOApmk?= =?us-ascii?q?YoQNAeoPI+lXoZT6qVUNrRWwCxWjCfj1xTNUnHL7x7c33/g8HQzAwQcuH8gOsH?= =?us-ascii?q?PRrNjtKKodSuC1zKjKzTrZafNdxCrw6IjSfRA9vfGDR65/ccrLxkk1FwLEjk+f?= =?us-ascii?q?opHiMjyPzesNs2mb7+h6WuKpkWIosAFxrSKzxscwkIbGmoIVxUre9SR5wIc6P8?= =?us-ascii?q?a1SFJnbt6/CpdfqyaaN45vT84kXmpmtiE6yrgctp66eigH0JUnyADDa/yJaYSI?= =?us-ascii?q?5QjjVOmJLTdkmH1lY6iziAq18UilzOD3S8q60E5SoyZYkNTAqGoB2wHQ58SdVP?= =?us-ascii?q?dw8F2t1DmJ2gvO8O9LO1o0mrDeK5M5x74wkYccvlrbEy/tnUX2kLeWdkI5+ui0?= =?us-ascii?q?8+jnYqvpppubN4JsiQ/wKqEglNW5D+olLgUAWWaV9+Km2rPk40P0XKhGguU3kq?= =?us-ascii?q?nfrp/aOdwWqrO7DgNLyIov9hWyAy243NkWh3UKI0pJeBedgIjoP1HOLur4DfC6?= =?us-ascii?q?g1m0ijhk3PDGPrzjAprXKHjPiqzufbZn5E5A1Ao818xQ55JOBbEbIPPyWlX+uc?= =?us-ascii?q?fEDhAlKAy42froCNJ41o8GQ2KAHreZML/OsV+P/u8gP+6MZJULtzrkMPcl4OPu?= =?us-ascii?q?jXklllADZqmkxpoXZ26kHvRoOUmZZmDsgtgZG2cQogU+VPDqiEGFUTNLe3myWL?= =?us-ascii?q?g86S8gBYKnE4jDWo6tjKaG3CehEZ1cfnpGBUyUEXf0a4WEXO8BZz6ILcB6lTwJ?= =?us-ascii?q?TqShSo4g1R20sw/60bVnfaLo/XgzvIj4yNVzr8fUjxQ78zo8W8+U2WalU3N12G?= =?us-ascii?q?QSSGll8rp4pBlUwFeC06F+y9ZYHMBP7vhJWx0rJJeUm+VwC9HwUwSHdNeAVEqv?= =?us-ascii?q?SdWvGyAgR/otyMRIaEF4TYbxxivf1janVudG34eAA4Y5p+eFhyD8?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2BPAQDOXixY/wQXEqxeGgEBAQECAQEBA?= =?us-ascii?q?QgBAQEBFQEBAQECAQEBAQgBAQEBgwwBAQEBAXeBAI0+lw6UYoIHHQEKhXkCglE?= =?us-ascii?q?UAQEBAQEBAQEBAQGBCYIzGgGCEwEBAQQBAQFrCxALBAMGAQMDAQIoBycfCQgGC?= =?us-ascii?q?wgbiF+xPAEBAYMOi2IBAQEBAQEBAQEBAQEBAQEBAQEBHoURaIUdhGmCLGEEgjA?= =?us-ascii?q?Fjx4+imaBcIROjBqEdogSgSuNTYQKHoFahSVqh2oBAQE?=
X-IPAS-Result: =?us-ascii?q?A2BPAQDOXixY/wQXEqxeGgEBAQECAQEBAQgBAQEBFQEBAQE?= =?us-ascii?q?CAQEBAQgBAQEBgwwBAQEBAXeBAI0+lw6UYoIHHQEKhXkCglEUAQEBAQEBAQEBA?= =?us-ascii?q?QGBCYIzGgGCEwEBAQQBAQFrCxALBAMGAQMDAQIoBycfCQgGCwgbiF+xPAEBAYM?= =?us-ascii?q?Oi2IBAQEBAQEBAQEBAQEBAQEBAQEBHoURaIUdhGmCLGEEgjAFjx4+imaBcIROj?= =?us-ascii?q?BqEdogSgSuNTYQKHoFahSVqh2oBAQE?=
X-IronPort-AV: E=Sophos;i="5.31,500,1473100200"; d="scan'208";a="146786435"
In-Reply-To: <968196C0-F487-432F-B8B7-B47798CD7F72@tzi.org>
References: <etPan.580e1079.260e4824.ff73@tzi.org> <968196C0-F487-432F-B8B7-B47798CD7F72@tzi.org>
To: Carsten Bormann <cabo@tzi.org>
MIME-Version: 1.0
X-KeepSent: 5ABE9A26:D781FE2B-6525806D:004A3D5F; type=4; name=$KeepSent
X-Mailer: IBM Notes Release 9.0 March 08, 2013
Message-ID: <OF5ABE9A26.D781FE2B-ON6525806D.004A3D5F-6525806D.004ADAA7@tcs.com>
From: Abhijan Bhattacharyya <abhijan.bhattacharyya@tcs.com>
Date: Wed, 16 Nov 2016 19:07:39 +0530
X-MIMETrack: Serialize by Router on InKolM02/TCS(Release 9.0.1FP6HF144 | June 24, 2016) at 11/16/2016 19:07:42, Serialize complete at 11/16/2016 19:07:42
Content-Type: multipart/alternative; boundary="=_alternative 004ADA9E6525806D_="
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/pVEdtcPpv1hwpbors-jsTwpIZTg>
Cc: core <core-bounces@ietf.org>, "core@ietf.org WG" <core@ietf.org>
Subject: Re: [core] CoRE @ IETF97: slides
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Nov 2016 13:37:51 -0000

This is a multipart message in MIME format.
--=_alternative 004ADA9E6525806D_=
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Carsten,
Unfortunately I am not able to attend IETF this time. I just had a chance =

to look at the slides now. One small comment. In between Berlin and Seoul, =

the No-Response draft  (CoAP option number 258) got converted into an RFC =

(#7967), though as an Informational one through the Individual track. =

Probably a mention on the same in the consolidated slides would have been =

good? :) =

Regards
Abhijan Bhattacharyya
Associate Consultant
Scientist, Innovation Lab, Kolkata, India
Tata Consultancy Services
Mailto: abhijan.bhattacharyya@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.   IT Services
                        Business Solutions
                        Consulting
____________________________________________




From:   Carsten Bormann <cabo@tzi.org>
To:     "core@ietf.org WG" <core@ietf.org>
Date:   11/16/2016 07:29 AM
Subject:        Re: [core] CoRE @ IETF97: slides
Sent by:        "core" <core-bounces@ietf.org>



We now have an initial slide set:

https://datatracker.ietf.org/doc/slides-97-core-consolidated-slides/

Presenters: Please check I got everything in correctly.

Gr=FC=DFe, Carsten

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core

=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D
Notice: The information contained in this e-mail
message and/or attachments to it may contain =

confidential or privileged information. If you are =

not the intended recipient, any dissemination, use, =

review, distribution, printing or copying of the =

information contained in this e-mail message =

and/or attachments to it are strictly prohibited. If =

you have received this communication in error, =

please notify us by reply e-mail or telephone and =

immediately and permanently delete the message =

and any attachments. Thank you



--=_alternative 004ADA9E6525806D_=
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<font size=3D2 face=3D"sans-serif">Hi Carsten,</font>
<br><font size=3D2 face=3D"sans-serif">Unfortunately I am not able to attend
IETF this time. I just had a chance to look at the slides now. One small
comment. In between Berlin and Seoul, the No-Response draft &nbsp;(CoAP
option number 258) got converted into an RFC (#7967), though as an Informat=
ional
one through the Individual track. Probably a mention on the same in the
consolidated slides would have been good? :) &nbsp; </font>
<br><font size=3D2 face=3D"sans-serif">Regards<br>
Abhijan Bhattacharyya<br>
Associate Consultant<br>
Scientist, Innovation Lab, Kolkata, India<br>
Tata Consultancy Services<br>
Mailto: abhijan.bhattacharyya@tcs.com<br>
Website: </font><a href=3Dhttp://www.tcs.com/><font size=3D2 face=3D"sans-s=
erif">http://www.tcs.com</font></a><font size=3D2 face=3D"sans-serif"><br>
____________________________________________<br>
Experience certainty. &nbsp; &nbsp; &nbsp; &nbsp;IT Services<br>
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp;Business Solutions<br>
 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp;Consulting<br>
____________________________________________<br>
</font>
<br>
<br>
<br>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">From: &nbsp; &nbsp; =
&nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Carsten Bormann &lt;cabo@tz=
i.org&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">To: &nbsp; &nbsp; &n=
bsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">&quot;core@ietf.org
WG&quot; &lt;core@ietf.org&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Date: &nbsp; &nbsp; =
&nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">11/16/2016 07:29 AM</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Subject: &nbsp; &nbs=
p;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">Re: [core] CoRE
@ IETF97: slides</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Sent by: &nbsp; &nbs=
p;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">&quot;core&quot;
&lt;core-bounces@ietf.org&gt;</font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=3D2>We now have an initial slide set:<br>
<br>
</font></tt><a href=3D"https://datatracker.ietf.org/doc/slides-97-core-cons=
olidated-slides/"><tt><font size=3D2>https://datatracker.ietf.org/doc/slide=
s-97-core-consolidated-slides/</font></tt></a><tt><font size=3D2><br>
<br>
Presenters: Please check I got everything in correctly.<br>
<br>
Gr=FC=DFe, Carsten<br>
<br>
_______________________________________________<br>
core mailing list<br>
core@ietf.org<br>
</font></tt><a href=3Dhttps://www.ietf.org/mailman/listinfo/core><tt><font =
size=3D2>https://www.ietf.org/mailman/listinfo/core</font></tt></a><tt><fon=
t size=3D2><br>
</font></tt>
<br><p>=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D<br>
Notice: The information contained in this e-mail<br>
message and/or attachments to it may contain <br>
confidential or privileged information. If you are <br>
not the intended recipient, any dissemination, use, <br>
review, distribution, printing or copying of the <br>
information contained in this e-mail message <br>
and/or attachments to it are strictly prohibited. If <br>
you have received this communication in error, <br>
please notify us by reply e-mail or telephone and <br>
immediately and permanently delete the message <br>
and any attachments. Thank you</p>

<p></p>
--=_alternative 004ADA9E6525806D_=--


From nobody Wed Nov 16 18:24:11 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4E651294B5 for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 18:24:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p2GZQla7mqcW for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 18:24:08 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9FA401293D6 for <core@ietf.org>; Wed, 16 Nov 2016 18:24:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAH2O5R7004189 for <core@ietf.org>; Thu, 17 Nov 2016 03:24:05 +0100 (CET)
Received: from t2001067c03700128f476fa6000ccf47f.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:128:f476:fa60:cc:f47f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tK4gm0p6Fz81Nf; Thu, 17 Nov 2016 03:24:03 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org>
Date: Thu, 17 Nov 2016 11:23:55 +0900
X-Mao-Original-Outgoing-Id: 501042235.740973-578ad95a1751c487e75bdb6f714585c3
Content-Transfer-Encoding: quoted-printable
Message-Id: <9202E7CB-7C5D-4542-9013-793A7A8DD706@tzi.org>
References: <etPan.58174215.459cb227.650d@tzi.org> <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org>
To: "core@ietf.org WG" <core@ietf.org>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/JxAPyqu9Rr0Ecn_WrnVLaKglYjg>
Subject: Re: [core] Updated agenda for CoRE @ IETF97
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 02:24:10 -0000

Just a reminder that we will meet informally in Park Ballroom 3 in a =
little more than two hours.
Looking forward to a good discussion!

(As meet echo doesn=E2=80=99t serve the informal meeting, a Google =
hangouts link to my iPad will be published to the Jabber at the start of =
the meeting.  I hope that this works reasonably well.)

Gr=C3=BC=C3=9Fe, Carsten


> On 15 Nov 2016, at 06:28, Carsten Bormann <cabo@tzi.org> wrote:
>=20
> We just pushed another update:
> We now have a room for the Thursday 13:30..15:00 informal non-WG =
meeting: Park Ballroom 3
> (thank you, Alexey!)
>=20
> Please have a look at:
>=20
> https://datatracker.ietf.org/doc/agenda-97-core/



From nobody Wed Nov 16 20:28:47 2016
Return-Path: <ari.keranen@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A2EC12948D for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 20:28:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kjjZUruthRQO for <core@ietfa.amsl.com>; Wed, 16 Nov 2016 20:28:44 -0800 (PST)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 999B8129484 for <core@ietf.org>; Wed, 16 Nov 2016 20:28:43 -0800 (PST)
X-AuditID: c1b4fb3a-233ff70000005ff3-44-582d31f86b6b
Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by  (Symantec Mail Security) with SMTP id 0E.94.24563.8F13D285; Thu, 17 Nov 2016 05:28:41 +0100 (CET)
Received: from ESESSMB205.ericsson.se ([169.254.5.51]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0319.002; Thu, 17 Nov 2016 05:28:40 +0100
From: =?utf-8?B?QXJpIEtlcsOkbmVu?= <ari.keranen@ericsson.com>
To: core <core@ietf.org>
Thread-Topic: [core] Updated agenda for CoRE @ IETF97
Thread-Index: AQHSM3fFfZPZgs217kOOUTaciFO3tqDZBFaAgAN3QICAACLVgA==
Date: Thu, 17 Nov 2016 04:28:39 +0000
Message-ID: <98783129-5CD8-49E2-8936-D1F896ACD025@ericsson.com>
References: <etPan.58174215.459cb227.650d@tzi.org> <628A64E9-DD1B-4C5B-A657-1CBA561F6153@tzi.org> <9202E7CB-7C5D-4542-9013-793A7A8DD706@tzi.org>
In-Reply-To: <9202E7CB-7C5D-4542-9013-793A7A8DD706@tzi.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [153.88.183.149]
Content-Type: text/plain; charset="utf-8"
Content-ID: <FEE90C4FCF735C44A4CF107F0957F13F@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrFLMWRmVeSWpSXmKPExsUyM2K7ou5PQ90Ig09LTSz2vV3P7MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujIONTawFP7gq/q0/z9jAeIWri5GTQ0LARGLDjXXsILaQwDpG iVdXVboYuYDsxYwSr2+vZwJJsAnYSjxp3ccKYosISEh0ft0P1iAM1Hz062l2iLipxIHb09kg bCeJv2ffsYDYLAKqEkueLwaL8wrYS2y9e5wVYsEURom3LReBEhwcnALWEk9fKoHUMAqISXw/ tQZsL7OAuMStJ/OZIA4VkFiy5zwzhC0q8fLxP1YIW0li7eHtLCBjmAU0Jdbv0ocwrSV6l9lB TFGUmNL9kB3iAkGJkzOfsExgFJ2FZMEshOZZCM2zkDTPQtK8gJF1FaNocWpxcW66kZFealFm cnFxfp5eXmrJJkZgjBzc8ttqB+PB546HGAU4GJV4eAtKdCKEWBPLiitzDzFKcDArifBm6uhG CPGmJFZWpRblxxeV5qQWH2KU5mBREuc1W3k/XEggPbEkNTs1tSC1CCbLxMEp1cAobj+7Wjo+ PM7i/oMaj+bg/ln3dQ9I3mtn1PKZHXDv1cHzvOysuRILvFdZXXMTUo+QbuL+PNGz+N8sPjN9 y7PWjEZT+C3uCFdvFM3/rFK++mI/ZzXH3PnnP0of/3/8mNmKjUZBG6od2LXCHFgnneOfVvnw fIPQxq9rVVn07hVbmHAUs2uaJimxFGckGmoxFxUnAgB+oI2hjQIAAA==
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/mDF5SNow4MDpKM_7z-M0BiRGtmw>
Subject: Re: [core] Updated agenda for CoRE @ IETF97
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 04:28:46 -0000
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From nobody Thu Nov 17 00:55:46 2016
Return-Path: <ari.keranen@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA75A1294F0 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 00:55:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qB9op2NsxgRx for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 00:55:42 -0800 (PST)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FE7E1294C6 for <core@ietf.org>; Thu, 17 Nov 2016 00:55:41 -0800 (PST)
X-AuditID: c1b4fb3a-233ff70000005ff3-cd-582d708afc29
Received: from ESESSHC017.ericsson.se (Unknown_Domain [153.88.183.69]) by  (Symantec Mail Security) with SMTP id 66.16.24563.A807D285; Thu, 17 Nov 2016 09:55:39 +0100 (CET)
Received: from ESESSMB205.ericsson.se ([169.254.5.51]) by ESESSHC017.ericsson.se ([153.88.183.69]) with mapi id 14.03.0319.002; Thu, 17 Nov 2016 09:55:38 +0100
From: =?iso-8859-1?Q?Ari_Ker=E4nen?= <ari.keranen@ericsson.com>
To: core <core@ietf.org>
Thread-Topic: URI fragment use for SenML
Thread-Index: AQHSQLBdnzT578qCkEaZ8vnS2QAUSA==
Date: Thu, 17 Nov 2016 08:55:36 +0000
Message-ID: <BF1EE1A8-4526-49BE-9AEA-6CDB5B02B67F@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [153.88.183.19]
Content-Type: text/plain; charset="iso-8859-1"
Content-ID: <7C5F08E9A065BF40916961517C6C1585@ericsson.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrDLMWRmVeSWpSXmKPExsUyM2K7q253gW6Eweo/mhb73q5ntpg4ZwW7 A5PHkiU/mTy+XP7MFsAUxWWTkpqTWZZapG+XwJWx6fEetoJ5nBV7trezNTDuZO9i5OSQEDCR WH16LZDNxSEksI5R4t6GR4wQzmJGieb13awgVWwC9hKT13xkBLFFBCQkOr/uB+tmFgiWWH98 M3MXIweHsICyxJt79hAlGhIrH/5hhbD1JP6e6GQBsVkEVCXe33jNDGLzAo2cMGkuE4jNKCAm 8f3UGiaIkeISt57MZ4I4TkBiyZ7zzBC2qMTLx/9YIWxFifanDYwQ9XoSN6ZOYYOwrSWev1kI ZWtLLFsIs0tQ4uTMJywTGEVmIVkxC0n7LCTts5C0z0LSvoCRdRWjaHFqcXFuupGRXmpRZnJx cX6eXl5qySZGYJwc3PLbagfjweeOhxgFOBiVeHgLSnQihFgTy4orcw8xSnAwK4nwtmXqRgjx piRWVqUW5ccXleakFh9ilOZgURLnNVt5P1xIID2xJDU7NbUgtQgmy8TBKdXAaK115CT3k9ZV X9qMJZRsds7+PO/ym3VrautP1RwXauZc1bAzdFNAcITt1u0dny4aPThQPGFvr81N9QRfI4Xz 9wWfSVr1mXI9d9pt43h5z5T0Dedf8PzYm2dqU3lzHS9zQ5p2r6hwJOfrNdwmPTd+Tqoo/eT3 6r3Ymedn6yJfGc5wO6u/UHmWjBJLcUaioRZzUXEiAJx0atyPAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/GKB9SAdbrPNEmwPreIkOQIYtm04>
Cc: "draft-ietf-core-senml@tools.ietf.org" <draft-ietf-core-senml@tools.ietf.org>
Subject: [core] URI fragment use for SenML
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 08:55:44 -0000

Hi all,

When updating the T2TRG RESTful design draft we discussed role of URI fragm=
ents in IoT scenarios and realized that this could be useful for SenML too =
for addressing parts of a SenML pack.

It's good to note that URI fragments are for client side processing only an=
d never sent on the wire. So the server would still send a full representat=
ion, but a fragment identifier allows applications on the client to refer t=
o specific parts of SenML packs.

A potential way to implement this is to use the RFC 7111 ("URI Fragment Ide=
ntifiers for the text/csv Media Type") row-part style (https://tools.ietf.o=
rg/html/rfc7111#section-2.1). For example, on a SenML pack from "sensors/te=
mp", one could address:

3rd record: sensors/temp#rec=3D3
Records 4 to 7: sensors/temp#rec=3D4-7
Records from 4 to last: sensors/temp#rec=3D4-*

To handle base values, we could specify something along the lines of "Fragm=
ent MUST resolve (i.e., fill base values) to the same values as the given r=
ange in the whole pack would".

Is this something you would consider useful? Should it be added to the SenM=
L spec media type definitions?


Cheers,
Ari=


From nobody Thu Nov 17 02:06:35 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 438FB1296E8 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 02:06:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.602
X-Spam-Level: 
X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HN13JSTbiOv5 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 02:06:32 -0800 (PST)
Received: from lb1-smtp-cloud6.xs4all.net (lb1-smtp-cloud6.xs4all.net [194.109.24.24]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 481BE129418 for <core@ietf.org>; Thu, 17 Nov 2016 02:06:32 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.214]) by smtp-cloud6.xs4all.net with ESMTP id 8y6W1u00A4d84Ai01y6WYx; Thu, 17 Nov 2016 11:06:30 +0100
Received: from dhcp-9216.meeting.ietf.org ([31.133.146.22]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Thu, 17 Nov 2016 11:06:30 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Date: Thu, 17 Nov 2016 11:06:30 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Core <core@ietf.org>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
Message-ID: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl>
X-Sender: stokcons@xs4all.nl (5kWxhtiE10EFM9kw6Pcpdx5Fn88dM6uH)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/ok9IbDkRgCvztIW1VoB4aJIL1gE>
Subject: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 10:06:34 -0000

Hi ief-yang-cbor authors,

Reading this document I see that it is very necessary. Thanks for doing 
this work.

I did find some unclear parts, that I indicate below
Hope this helps,

peter
_____________________________________________________
Ietf-yang-cbor review.

Page 4: delta; not only difference with the parent but also difference 
with predecessor in a CBOR array.
Page 5 is this â€œ#â€ a pound sign?
Page 6, line 8, s/key type/key types/
Page 6, line 12 s/RESFCONF/RESTCONF/
Page 6. Line 14 s/mapping avoid/mapping avoids/
Page 6, line 15 used solely for union?; there are 4 tags defined.
Pag 6 the last paragraph of section 3 can be removed, does not clarify 
anything for me.
Page 6 last line add: "according to the instance type."
Example page 8; the leaf hostname is missing in the diagnostic CBOR and 
CBOR (twice for names and SIDs)
Section 4.3, why is the search identifier missing in the example?
Page 10: s/encoding a/encoding of/
Page 10, line 9, s/enties/entries/
Page 10 â€œit is importantâ€¦..encoded dataâ€ appears twice.
Page 12 and 13, what happened to the server identifier in the example?
Page 14-15; It is not clear to me how you can specify SIDs for the 
contents of anydata and anyxml. Anything may happen, including new 
identifiers, and they change dynamically. I can understand that the 
anyxml, anydata node has a SID, but I should like to see how the nodes 
inside the anyxml or Anydata instance are labelled with SIDs by the 
server.
Examples of section 5. Do the examples not need an identifier (CBOR 
key)? We now are faced with values which do not belong anywhere. Also 
the SID value needs to be specified.
For example section 5.1 can be written as follows:
The leaf mtu is assumed to have value 1280
The sid of mtu is 1350
The CBOR diagnostic notation of the pair is 1350: 1280, which results in
Page 15 /signed integer/negative integer/
Section 5.10.1; it is unclear where the value 1180 comes from.
Page 23 below -3: s/identify/identifies/
Section 5.13 is very unclear. There are many examples but it is not 
clear where all these values come from; what is the SID value, what was 
the leaf instance value, is one large puzzle. One example (instead of 
3), but with more explanations would help. In my opinion the text in 
belongs in the FETCH content format document that still needs to be 
written.


-- 
Peter van der Stok


From nobody Thu Nov 17 10:17:17 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1A721299CC for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 10:17:15 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.922
X-Spam-Level: 
X-Spam-Status: No, score=-1.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DbhWe-9whwME for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 10:17:13 -0800 (PST)
Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0100.outbound.protection.outlook.com [104.47.36.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 20FB91299CF for <core@ietf.org>; Thu, 17 Nov 2016 10:17:13 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=nb1f/fNhx2MORQDEsSlGet2W0CfKqYSQqeRSMOSTKrs=; b=jKmM7pK5sxkM1beU4oN/lUiSAfsQj7A02uOyea0ZPWCDERZDx2QK1ZxVaXL9+7oBlNL65bl+ZY7XDwbrk/GLuIaYE9W7i3gBIGWHRFTatH7H1xzSZ1TQhcZgXlNC7KfDdT0yDVqsIE4HHB0+kwWnsaQmvUkvHb5ihQr0xe3ZJEk=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2305.namprd06.prod.outlook.com (10.173.19.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.721.10; Thu, 17 Nov 2016 18:17:09 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0721.010; Thu, 17 Nov 2016 18:17:09 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>, Core <core@ietf.org>
Thread-Topic: [core] yang cbor comments
Thread-Index: AQHSQLpL47EAr//15UCwVCri7zu5mqDdWvVA
Date: Thu, 17 Nov 2016 18:17:09 +0000
Message-ID: <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl>
In-Reply-To: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2305; 7:ErBv2f8PYeZu9nyBHghKjIWs8NqQ4nt7sEnnvco+F0aKcAj07fazyvaIshj2bKoywVZF+cD7eAbOPEhFGwem0UrQ2FwoiVfEZn5Bh2hkrX0mA+jow2hv+OvmSJBZUJxHyKeiaPg1noObd3SbSRPCSw+HXX/IS8uzohlYmBHTNDj2LKFA7hk2/WgyUgldm8QPAQCdWUVIuNHZphDdRbXIXQiee0cAdVZKdYzAJOtu/uMDFpdL1rFFWM9Cihd8UtdhSaNb+Tt0mypBNTEdS7sYeYDG0Ue3lPI0C7MCzyY9ql0AuEwX2CKzBEm4WEYFSXyjcxxLSLiusI8CNfJu5p4ciGOcobQ9Lb+kk6P/Cx1OhqQ=
x-ms-office365-filtering-correlation-id: f4def22c-e5c5-4545-4807-08d40f15f202
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2305;
x-microsoft-antispam-prvs: <BN6PR06MB23052B0B8EE9151D12ED62C2FEB10@BN6PR06MB2305.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(166708455590820)(150554046322364)(17755550239193); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(6040281)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6041223)(6061324); SRVR:BN6PR06MB2305; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2305; 
x-forefront-prvs: 01294F875B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(13464003)(129404003)(199003)(189002)(377454003)(33656002)(8676002)(76176999)(76576001)(106116001)(3280700002)(81166006)(66066001)(122556002)(2950100002)(68736007)(5660300001)(305945005)(9686002)(106356001)(6506003)(229853002)(50986999)(7736002)(6116002)(7846002)(7696004)(86362001)(105586002)(99286002)(74316002)(81156014)(102836003)(54356999)(107886002)(3660700001)(97736004)(2906002)(101416001)(2501003)(77096005)(8936002)(5001770100001)(189998001)(2900100001)(92566002)(3846002)(87936001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2305; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Nov 2016 18:17:09.3266 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2305
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/N0VX9WtjppSJVL5RfwBUXAQTO_M>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 18:17:16 -0000
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From nobody Thu Nov 17 12:54:07 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EEDE1294C6 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 12:54:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LMErKsSzoPAC for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 12:54:05 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E347E128E19 for <core@ietf.org>; Thu, 17 Nov 2016 12:54:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAHKs1ds022505; Thu, 17 Nov 2016 21:54:01 +0100 (CET)
Received: from t2001067c0370014469f39e802b69355c.hotel-wired.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:144:69f3:9e80:2b69:355c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tKYJR4QG5z7xbN; Thu, 17 Nov 2016 21:53:59 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com>
Date: Fri, 18 Nov 2016 05:53:52 +0900
X-Mao-Original-Outgoing-Id: 501108832.239646-28efd9e1aa9cbffcfac59154c45d8941
Content-Transfer-Encoding: quoted-printable
Message-Id: <79A729D4-75E6-4DAC-BE05-CE7CF3F2C907@tzi.org>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/d7uiFvkyyCgath6bXWTVV_urYKk>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 20:54:06 -0000

> On 18 Nov 2016, at 03:17, Michel Veillette =
<Michel.Veillette@trilliantinc.com> wrote:
>=20
> Is there a new standardized way to add comments to CBOR diagnostic =
notation we can use?

Standardized: no; RFC 7049 follows JSON and does not have comments.

But draft-greevenbosch-appsawg-cbor-cddl-09.txt Appendix G.5 proposes =
using =E2=80=9C/=E2=80=9C as both start and end of comments (we have =
found that comments are often best used inline).  This is used in a =
number of documents already, e.g. the COSE specification =
draft-ietf-cose-msg that has almost completed IESG processing now.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Thu Nov 17 12:57:00 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ADCA129491 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 12:56:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d5vuwd1zO0lG for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 12:56:57 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02363129659 for <core@ietf.org>; Thu, 17 Nov 2016 12:56:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAHKus2R029069; Thu, 17 Nov 2016 21:56:54 +0100 (CET)
Received: from t2001067c0370014469f39e802b69355c.hotel-wired.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:144:69f3:9e80:2b69:355c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tKYMm5yLtz7xbS; Thu, 17 Nov 2016 21:56:52 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <79A729D4-75E6-4DAC-BE05-CE7CF3F2C907@tzi.org>
Date: Fri, 18 Nov 2016 05:56:47 +0900
X-Mao-Original-Outgoing-Id: 501109006.977871-cc684d5296bd43a02dd4c0e6197ec1eb
Content-Transfer-Encoding: quoted-printable
Message-Id: <4F62E1C7-C519-4A23-B037-8A8376D1F7FB@tzi.org>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <79A729D4-75E6-4DAC-BE05-CE7CF3F2C907@tzi.org>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/uL9N1UuUzFYGXCw5-QoynXQkafM>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 20:56:58 -0000

On 18 Nov 2016, at 05:53, Carsten Bormann <cabo@tzi.org> wrote:
>=20
> draft-greevenbosch-appsawg-cbor-cddl-09.txt Appendix G.5=20

(Forgot to add convenience link:)

=
https://tools.ietf.org/html/draft-greevenbosch-appsawg-cbor-cddl-09#append=
ix-G.5

Gr=C3=BC=C3=9Fe, Carsten


From nobody Thu Nov 17 13:22:32 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD51A1296B8 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 13:22:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wvKg4KgK16IQ for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 13:22:28 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1AD6129599 for <core@ietf.org>; Thu, 17 Nov 2016 13:22:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAHLMPNc024070; Thu, 17 Nov 2016 22:22:25 +0100 (CET)
Received: from t2001067c0370014469f39e802b69355c.hotel-wired.v6.meeting.ietf.org (unknown [IPv6:2001:67c:370:144:69f3:9e80:2b69:355c]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tKYxC70BDz7xby; Thu, 17 Nov 2016 22:22:23 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <4F62E1C7-C519-4A23-B037-8A8376D1F7FB@tzi.org>
Date: Fri, 18 Nov 2016 06:22:17 +0900
X-Mao-Original-Outgoing-Id: 501110537.0078-e7f20451ff24ed0abd2c36275e42c69a
Content-Transfer-Encoding: quoted-printable
Message-Id: <C6E3B285-A8B3-4B22-800C-B4819F1FD5B1@tzi.org>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <79A729D4-75E6-4DAC-BE05-CE7CF3F2C907@tzi.org> <4F62E1C7-C519-4A23-B037-8A8376D1F7FB@tzi.org>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/eJq5c3-58hkt3uSXpRbMzvtEQMo>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 21:22:30 -0000

In a hallway discussion yesterday, we discussed two invariants that I =
think we all had in our minds but probably should be made very explicit =
in the document.

1) SID delta processing when generating or consuming YANG-CBOR instances =
is pure arithmetic.  There is never a need to consult a YANG module or =
other table when performing the delta processing.

2) SID generation results in a SID file that is preserved for a version =
of a YANG module.  The generation of SIDs for the next version uses this =
SID file as an input.  So it never can happen that the SID file for the =
next version becomes incompatible with the previous version: All SIDs =
that were assigned previously still are valid in the next version (of =
course they may not mean that much anymore if the thing identified by =
the SID is being removed).

Now, the remaining question mark I have about 2 is what happens when one =
implementer starts generating SIDs for version 2 of a module, then for =
version 4; but another one already has SIDs for version 1 and then =
version 3.  That should be explained, too.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Thu Nov 17 14:34:09 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46DAE1294F2 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 14:34:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MNFD5TE3ine7 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 14:34:01 -0800 (PST)
Received: from lb1-smtp-cloud2.xs4all.net (lb1-smtp-cloud2.xs4all.net [194.109.24.21]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D2231294C3 for <core@ietf.org>; Thu, 17 Nov 2016 14:34:01 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.212]) by smtp-cloud2.xs4all.net with ESMTP id 9AZy1u0054aYjWA01AZyjD; Thu, 17 Nov 2016 23:33:59 +0100
Received: from dhcp-9216.meeting.ietf.org ([31.133.146.22]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Thu, 17 Nov 2016 23:33:58 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Date: Thu, 17 Nov 2016 23:33:58 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Carsten Bormann <cabo@tzi.org>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <C6E3B285-A8B3-4B22-800C-B4819F1FD5B1@tzi.org>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <79A729D4-75E6-4DAC-BE05-CE7CF3F2C907@tzi.org> <4F62E1C7-C519-4A23-B037-8A8376D1F7FB@tzi.org> <C6E3B285-A8B3-4B22-800C-B4819F1FD5B1@tzi.org>
Message-ID: <99913ed6ceae35d89fa0703185362542@xs4all.nl>
X-Sender: stokcons@xs4all.nl (vLzS47D2jfx6Wn98aI8+pDtLJc3C8huP)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/JRgZVFsiL9FWswq3v3sHAJwOBeI>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Nov 2016 22:34:07 -0000

Yes, but for the SID document.

Peter

Carsten Bormann schreef op 2016-11-17 22:22:
> In a hallway discussion yesterday, we discussed two invariants that I
> think we all had in our minds but probably should be made very
> explicit in the document.
> 
> 1) SID delta processing when generating or consuming YANG-CBOR
> instances is pure arithmetic.  There is never a need to consult a YANG
> module or other table when performing the delta processing.
> 
> 2) SID generation results in a SID file that is preserved for a
> version of a YANG module.  The generation of SIDs for the next version
> uses this SID file as an input.  So it never can happen that the SID
> file for the next version becomes incompatible with the previous
> version: All SIDs that were assigned previously still are valid in the
> next version (of course they may not mean that much anymore if the
> thing identified by the SID is being removed).
> 
> Now, the remaining question mark I have about 2 is what happens when
> one implementer starts generating SIDs for version 2 of a module, then
> for version 4; but another one already has SIDs for version 1 and then
> version 3.  That should be explained, too.
> 
> GrÃ¼ÃŸe, Carsten
> 
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Thu Nov 17 16:15:28 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A84C71296BD for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 16:15:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UOm1OnOPNVS9 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 16:15:24 -0800 (PST)
Received: from lb2-smtp-cloud2.xs4all.net (lb2-smtp-cloud2.xs4all.net [194.109.24.25]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B45E1295A5 for <core@ietf.org>; Thu, 17 Nov 2016 16:15:24 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.212]) by smtp-cloud2.xs4all.net with ESMTP id 9CFN1u0064aYjWA01CFN2n; Fri, 18 Nov 2016 01:15:22 +0100
Received: from dhcp-9216.meeting.ietf.org ([31.133.146.22]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Fri, 18 Nov 2016 01:15:22 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Date: Fri, 18 Nov 2016 01:15:22 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com>
Message-ID: <fac7eafba28cb9bd1098074d0542cd49@xs4all.nl>
X-Sender: stokcons@xs4all.nl (rcdOhNz2kJTojZQgBR9ZMwkzdDhCPlGd)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/LMJy3ng_0mbn3WlYXegFRCNWGuQ>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 00:15:26 -0000

See inline
> 
> ====> Page 4: delta; not only difference with the parent but also
> difference with predecessor in a CBOR array.
> 
> [I-D.core-yang-cbor] only make use of parent delta, sibling delta is
> used by the root collection of some CoMI methods.
> Should we have a common definition of delta for both documents or
> should we tailor the definition for each one?
> Which approach will be the less confusing?

I expect the CoMI document to use the definition of YANG-CBOR doc.
> 
> ====> Page 5 is this â€œ#â€ a pound sign?
> 
> '#' is the comment delimiter currently used by [I-D.core-yang-cbor].
> Is there a new standardized way to add comments to CBOR diagnostic
> notation we can use?
"#" is OK, it is called differently: e.g. sharp but not pound.

> 
> ====> Page 6, line 15 used solely for union?; there are 4 tags defined.
> 
> Not sure what is the issue here.
> The sentence start by "CBOR tags" plural to account for the fact we
> support multiple tags.
> However, I'm adding anyxml which also require the use of tags.
> "For instance, CBOR tags are used solely in the case of anyxml data
> nodes and the union datatype to distinguish ..."

It is the word "solely"; I was afraid it remained from earlier versions.
> 

> ====> Example page 8; the leaf hostname is missing in the diagnostic
> CBOR and CBOR (twice for names and SIDs) Section 4.3, why is the
> search identifier missing in the example?
> 
> Removing hostname form the definition.
> The ietf-system, hostname is in a completely different part of the 
> module.
> See
> https://github.com/core-wg/yang-cbor/blob/master/registry/ietf-system%402014-08-06.tree

Can this be adapted, It is confusing to know what belongs to example and 
what not

> ====> Page 12 and 13, what happened to the server identifier in the 
> example?
> 
> None of the YANG Data Node Instances defined in section 4 (leaf,
> container, leaf-list, list, anydata, anyxml) is encoded with its
> identifier.
> Such identifiers are part of the instance-identifier carry in the
> request URI or within the payload.

Again, I find it confusing; Some text is needed to parse the examples. 
Say that only the value of the pair is shown.
> 

> ====> Examples of section 5. Do the examples not need an identifier
> (CBOR key)? We now are faced with values which do not belong anywhere.
> Also the SID value needs to be specified. For example section 5.1 can
> be written as follows:
> The leaf mtu is assumed to have value 1280 The sid of mtu is 1350 The
> CBOR diagnostic notation of the pair is 1350: 1280, which results in
> Page 15 /signed integer/negative integer/
> 
> Same answer as above.
> None of the YANG Data Node Instances defined in section 4 (leaf,
> container, leaf-list, list, anydata, anyxml) is encoded with its
> identifier.
> Such identifiers are part of the instance-identifier carry in the
> request URI or within the payload.
> This is the job of CoMI
> 
>  ====>Section 5.10.1; it is unclear where the value 1180 comes from.

I seem to express myself badly.
It is only needed to say that mtu is assumed to have value 1280  and 
that the CBOR encoding of 1280 is:

At this moment the scope of the example CBOR code is unclear.


> ====> Section 5.13 is very unclear. There are many examples but it is
> not clear where all these values come from; what is the SID value,
> what was the leaf instance value, is one large puzzle. One example
> (instead of 3), but with more explanations would help. In my opinion
> the text in belongs in the FETCH content format document that still
> needs to be written.
> 
> The multiple examples have been requested by different peoples
> including Carsten.
> These examples show completely different use cases, single instance
> data node, list and list instance and are all useful.
> For the question, "what is the SID value", this will be resolved by
> the implementation of the registrars sharing a common database
> (blockchain) of .sid files.

please see my responses above.
Not the examples are questioned but an explanation is needed that says 
that the CBOR code for the value is shown and not the whole leaf.
> 
> --
> Peter van der Stok
> 
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Thu Nov 17 20:04:14 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60335129417 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 20:04:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U-oF3S1Xomep for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 20:04:11 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DCA21293D6 for <core@ietf.org>; Thu, 17 Nov 2016 20:04:10 -0800 (PST)
Received: from [192.168.91.156] ([36.226.192.69]) by mail.gmx.com (mrgmx101 [212.227.17.168]) with ESMTPSA (Nemesis) id 0LkTSx-1ceRFl2Ggl-00cOHm for <core@ietf.org>; Fri, 18 Nov 2016 05:04:08 +0100
To: "core@ietf.org WG" <core@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net>
Date: Fri, 18 Nov 2016 05:03:56 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="86unnxErSkLQSXq3VNN9WONLULUmQrE05"
X-Provags-ID: V03:K0:ktlHyYNPpPR61wPdSj8rkuZlLJCSosAy7dmj0ZCwGb78UMN9V33 lduA851ihim/v9+7yMIVmFxZ/6dJNrUZTey7mn93JB2OFFSeRWPHIY5an1ylCgYzHGDhhlv CSE3JtlPPHCQqRaKowfAMJc9TKRjwkBCNkAR18dQrOm1mlC8GuOjJD8Kag5eUHt6zGXBTcF 5e9oiuK0XvBSXyHfrnCEw==
X-UI-Out-Filterresults: notjunk:1;V01:K0:rasWXFKcJ+U=:dB56cBpiraHbzk2Ies+isw 8cJra+vLmfOMc4nntTuWUxvsUkzvNMd0DLcax36DSFlHY/zV/FWyf7p28+6LttZ9DmuTN0+uc LS8NuvokzC+AXsk9wgqqY/KJZaebgm8SjR7GbikIuDexKY1YFd0nGF0VECyrUgPQM7FuTCkTf 016oVXOt569zVJ8zuJjGXl6cd+cPB2OJ0/vOd9PK7gkLAzgsFhA2k5s+YFVh8yPMLc2e9woo+ zKWp+kSCbLm0E+79o6hePOWmOf4ohWASWprDfMY4gxCfweLiE5QgQJ4wxbuYA1m8DrzFYK5RJ EeCbomC24vS9AMMoUxXQLwMiBiRFErgCnVmwQ2tcV6DPB2Jtlv37O+aIPczctbc9o6kplHcml MQGBre7bZIDmkwezOuHV1jtl2QLtphi3wd+Id4J9Moril7RotgRuWfVRtEiD/BcCPvRP09CJW muU41KlMKxlUI5mfXLGl2D/ydhGA4lkwXMxEcll4Th4Wk4CUzDibbpzhW87NP5eoOEgOGLnNa LOfnIc0o8tf5n7oC2mF30Vsk+UUxn2UTpdopWB0N+r3wIYZ+wfHKkXGtTALbwBNsL6u3ETFAO 7gQcSZEzwSCWxRwlpa00QBcpDBrA4BfhVukztgpepv5wykqRiQ0B3jJkjA7knel2+SpiWHVoe BPYKYW6xLKkhRxq4WTe6DTfMkOx9Q5zusziU7y5ByIx06WlPfXVbhZV3Jdo2M2QunjQKQUIQp xzF+8Wiq52T2rj2iL6SCQWGz6RDLIZ9uazGkhL18ka0SrNMlASoY/m8eqy8=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Mev_zr5S6-pGUxZvSQKJf1lnNSc>
Subject: [core] Security aspects in CoAP over TCP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 04:04:12 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--86unnxErSkLQSXq3VNN9WONLULUmQrE05
Content-Type: multipart/mixed; boundary="bWI5EiSQq7LIDNC5w0dJdElAdwJ4QC1Km";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: "core@ietf.org WG" <core@ietf.org>
Message-ID: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net>
Subject: Security aspects in CoAP over TCP

--bWI5EiSQq7LIDNC5w0dJdElAdwJ4QC1Km
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi all,

we had a somewhat inconclusive discussion in the CORE working group this
week about the security aspects of CoAP over TCP.

I thought I should write down my thoughts about this topic again in the
hope that we can find a solution relatively quickly.

When we started the CoAP over TCP work we were under the impression that
we can get it done fast since it related to a deployment artifact when
using CoAP in enterprise environments where UDP traffic gets blocked.

We have an implementation already and so does Microsoft.
We both use TLS to secure the communication.

Our intention was to document what we were doing already and to get
moving forward.

With the work in the group we had to make a compromise and had to add
stuff that does not necessarily have anything to do with what we are
implementing and deploying today. An example of that functionality is
Websocket.

We lost that battle and as a consequence the document is more verbose
than we had initially envisioned and took much longer to finalize.

CoAP over TCP/TLS is, however, not necessarily the long-term goal.
Instead of adding various features to CoAP in a step-by-step fashion we
could as well in the long run go to HTTP/2, for example, instead. Hence,
I see it as an intermediate approach to deal with deployment challenges,
get it done as quickly as possible, and then to move on.

The discussion about application layer security for CoAP goes into a
direction that I am not necessarily comfortable with. In our deployment
model the interaction of the IoT device with the server-side
infrastructure is currently CoAP over DTLS/TLS. Then, we use HTTPS to
connect with other application-based services.

Funny enough, we can neither re-use the work on
draft-ietf-core-http-mapping nor can we use the OSCOAP work in our
current deployment. I hope there are deployments out there that are very
different from what we are doing. It could, however, well be that there
is a lack of deployment experience and we do the "sounds good"-type of
standardization instead. In the CORE-HTTP-MAPPING case, for example, we
are not just relaying CoAP (or HTTP) requests but the server-side is
actually providing some functionality that changes the nature of the
protocol interaction on the HTTP side. The experience with HTTP signing
in OAuth also shows me that there are lots of problems when securing
RESTful API interactions in general. I expect to see the same problems
with the OSCOAP work in practice. I would go as far as saying that
RESTful APIs are very difficult (if not impossible) to secure end-to-end
in any practical multi-protocol environment.

In a nutshell, I prefer a solution for CoAP over TCP that allows us
 * to move the document forward as soon as possible, and
 * to document what we are doing today.

On the question about what credentials are being used with TLS I believe
the discussion at the meeting was a bit misleading since the arguments
on why some people prefer to use pre-shared secrets was actually not
related to TLS. Maybe it is possible to leave this issue open and
instead refer to RFC 7925.

Ciao
Hannes


--bWI5EiSQq7LIDNC5w0dJdElAdwJ4QC1Km--

--86unnxErSkLQSXq3VNN9WONLULUmQrE05
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYLn2sAAoJEGhJURNOOiAtEVYH/R4t6IzKiJgXMLmWNoeepQEY
yqqV/mQqZ0Eqc20Gdw5QQR6G0qQPkJZoCOguonXxE1YbLMXcAMU+88dbBZdEACog
B3RcM3cxWE6w/mmiKyU+pirogVwgsu2AZI6RmlcTxZwMeHzEZhHewOEmtWFNgYWM
gIi5TuNPEQ9F0DF8R7w8C4cKaHWsyQN4ge6BXgh7X9yCeSZOSLixT4xhXU3o172+
chZVpyxkszMVpqMH/YlJxeAbpWUsVJ09mvkw2QeSbwsVAqp7KYYmmXU7rhfm6bzN
+GDflKSQWuMFlikttbcyTzlNPZizH9LJSuU8Xu1b5cnK/53m+dhwoUsL87/+h1Y=
=GcSy
-----END PGP SIGNATURE-----

--86unnxErSkLQSXq3VNN9WONLULUmQrE05--


From nobody Thu Nov 17 22:52:26 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68A2212964B for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 22:52:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3nghoJg416VT for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 22:52:23 -0800 (PST)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1D68129457 for <core@ietf.org>; Thu, 17 Nov 2016 22:52:22 -0800 (PST)
X-AuditID: c1b4fb2d-0bbff70000000994-12-582ea524757d
Received: from ESESSHC001.ericsson.se (Unknown_Domain [153.88.183.21]) by  (Symantec Mail Security) with SMTP id BF.3C.02452.425AE285; Fri, 18 Nov 2016 07:52:20 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.133]) by ESESSHC001.ericsson.se ([153.88.183.21]) with mapi id 14.03.0319.002; Fri, 18 Nov 2016 07:52:20 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: [core] Security aspects in CoAP over TCP
Thread-Index: AQHSQVDVKXAjH/oMEkW4JprTES+sPKDeTfkA
Date: Fri, 18 Nov 2016 06:52:20 +0000
Message-ID: <D4544983.6CF40%goran.selander@ericsson.com>
References: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net>
In-Reply-To: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.149]
Content-Type: text/plain; charset="utf-8"
Content-ID: <0280FC2A8043034F92C646AC69685884@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprIIsWRmVeSWpSXmKPExsUyM2K7qK7KUr0Ig2m3dSz2vV3PbLF05z1W ByaPxZv2s3ksWfKTKYApissmJTUnsyy1SN8ugStj+rXpzAXPLCvOnl7H1sC4wqKLkZNDQsBE YvfyTYxdjFwcQgLrGCUuvmtlg3CWMEq0991jBaliE3CReNDwiAnEFhEIl7j2fBZYXFjAVOLw r90sXYwcQHEziYkvLSFKjCQ+PD4OVs4ioCqxZv1zNhCbV8BC4sOJy2CtQgJWEud2ngKLcwpY S/R1vwWrZxQQk/h+ag2YzSwgLnHryXwmiEMFJJbsOc8MYYtKvHz8jxVkraiAnsSa+2EQYSWJ tYe3g13DLKApsX6XPsQUa4kFW5YwQ9iKElO6H7JDXCMocXLmE5YJjGKzkCybhdA9C0n3LCTd s5B0L2BkXcUoWpxaXJybbmSsl1qUmVxcnJ+nl5dasokRGFEHt/zW3cG4+rXjIUYBDkYlHl6D f7oRQqyJZcWVuYcYJTiYlUR4Zy/QixDiTUmsrEotyo8vKs1JLT7EKM3BoiTOa7byfriQQHpi SWp2ampBahFMlomDU6qBUbch/++fpb+69ZsW8Qfv8vrSbzZ7MVf37/Zyq7ViK0+J7+p943fR 5P5VpqjVy/xeLLQs/HNKlMlG8/6hotO7e1zXlXOukVkgcffLZ8F/jnctE+aLTWCSW7Xg39Kq vy+3LRJ/MCfRu7zcSlt5P6O5PlsZ16061rMiK5iPKCy/vrRI5oVf2amGP0osxRmJhlrMRcWJ APM0WXGkAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/oisT-b7g1tesEapKOi0XBAQaLfw>
Subject: Re: [core] Security aspects in CoAP over TCP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 06:52:25 -0000

SGkgSGFubmVzIGFuZCBhbGwsDQoNCkkgZmluZCB0aGUgQ29BUCBvdmVyIFRDUCB3b3JrIHZlcnkg
dmFsdWFibGUgYWxzbyBvdXRzaWRlIHRoZSB1c2UgY2FzZSB5b3UNCnByZXNlbnQuIEFsdGhvdWdo
IHRoaXMgZHJhZnQgbWF5IGJlIGFuIGludGVybWVkaWF0ZSBzb2x1dGlvbiBpbiB0aGF0IHVzZQ0K
Y2FzZSwgSSBiZWxpZXZlIGl0IHdpbGwgYmUgdXNlZnVsIGluIG1hbnkgb3RoZXIgY29udGV4dHMu
IEZvciB0aGlzIHJlYXNvbg0Kd2Ugc2hvdWxkIGJlIGNhcmVmdWwgdG8gYXZvaWQgdW5uZWNlc3Nh
cnkgbGltaXRpbmcgdGhlIHNlY3VyaXR5IHByb3RvY29scw0KdGhhdCBtYXkgYmUgdXNlZCB3aXRo
IGl0Lg0KDQpJIGRvbuKAmXQgc2VlIGFueSByZWFzb24gdG8gc3RhbGwgdGhlIHByb2dyZXNzIG9m
IHRoaXMgZHJhZnQsIHdoYXQgaXMNCnJlcXVlc3RlZCBpcyBub3RoaW5nIG1vcmUgdGhhbiB3aGF0
IGlzIGluIFJGQzcyNTIuIEkgZGlkbuKAmXQgcGFydGljaXBhdGUgaW4NCnRoZSBUaHVyc2RheSBi
cmVha2Zhc3QgbWVldGluZyBvbiB0aGUgdG9waWMgYnV0IEkga25vdyB0aGVyZSBpcyBzb21lDQpw
cm9wb3NlZCBhbHRlcm5hdGl2ZSB0ZXh0IHNuaXBwZXQgYmVpbmcgZHJhZnRlZCBmb3IgZGlzY3Vz
c2lvbiBvbiB0aGUgbGlzdC4NCg0KDQpBcyBmb3IgZGVwbG95bWVudCBvZiBPU0NPQVAsIHRoZSBk
cmFmdCBoYXMganVzdCByZWNlbnRseSBiZWNvbWUgc3RhYmxlIGFuZA0Kc28gb25seSBhIGZldyBh
cHBsaWNhdGlvbnMgYXJlIGNvbnNpZGVyZWQgc28gZmFyLCBmb3IgZXhhbXBsZToNCmh0dHBzOi8v
dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC12dWNpbmljLTZ0aXNjaC1taW5pbWFsLXNlY3VyaXR5
LTAwDQoNCkFsdGhvdWdoIE9TQ09BUCB3YXMgZGVzaWduZWQgZm9yIHRoZSBtb3N0IGNvbnN0cmFp
bmVkIHNldHRpbmdzIHdoZXJlIFVEUA0KaXMgYSBuYXR1cmFsIHRyYW5zcG9ydCBwcm90b2NvbCwg
YnkgYmVpbmcgYW4gaW4tbGF5ZXIgcHJvdG9jb2wsIGkuZS4gb25seQ0KcmVseWluZyBvbiBDb0FQ
LCBpdCB3b3JrcyBlcXVhbGx5IHdlbGwgb3ZlciBUQ1AuIFNvIHdoZXJlYXMgd2UgYXQgdGhpcw0K
bW9tZW50IGNhbuKAmXQgZGVtb25zdHJhdGUgYW55IGNvbmNyZXRlIGFwcGxpY2F0aW9ucyBvZiBP
U0NPQVAgb3ZlciBUQ1AsIEkNCmhvcGUgaXQgaXMgcG9zc2libGUgdG8gc2VlIHRoZSB2YWx1ZSBv
ZiBiZWluZyBhYmxlIHRvIGRvIGVuZC10by1lbmQNCnNlY3VyaXR5IG9mIGEgQ29BUCBleGNoYW5n
ZSBmcm9tIGEgY2xpZW50IG1ha2luZyBhIFRDUCByZXF1ZXN0IHRocm91Z2ggb25lDQpvciBtb3Jl
IHByb3hpZXMgdG8gYSBzZXJ2ZXIgb25seSBydW5uaW5nIFVEUCAob3Igbm8gdHJhbnNwb3J0IHBy
b3RvY29sIGF0DQphbGwgc3VjaCBhcyB3aXRoIA0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s
L2RyYWZ0LWJvcm1hbm4tNmxvLWNvYXAtODAyLTE1LWllLTAwKS4NCg0KDQpBcyBmb3IgeW91ciBz
Y2VwdGljaXNtIG9mIE9TQ09BUCwgaXQgd291bGQgYmUgdmVyeSBoZWxwZnVsIGlmIHlvdSBvcg0K
c29tZW9uZSBlbHNlIGZhbWlsaWFyIHdpdGggdGhlIGlzc3VlcyBvZiBIVFRQIHNpZ25pbmcgY291
bGQgcmV2aWV3IHRoZQ0KZHJhZnQgYW5kIHByb3ZpZGUgc29tZSBjb21tZW50cyBvbiBjb25jcmV0
ZSBpc3N1ZXMgcmF0aGVyIHRoYW4gbWFraW5nDQpzd2VlcGluZyByZW1hcmtzLiBBbHNvLCB3ZSBy
ZXF1ZXN0ZWQgaW4gdGhlIFdHIGZvciBhIENvQVAvUkVTVCBleHBlcnQgdG8NCmRvIGEgcmV2aWV3
IHRvIGFkZHJlc3MgcG9zc2libGUgc2ltaWxhciBjb25jZXJucyAoZG9u4oCZdCB3b3JyeSBLbGF1
cywgbm8NCm9uZSBpcyBsb29raW5nIGF0IHlvdSBKKS4NCg0KQnV0LCBhZ2FpbiwgdGhlIGRpc2N1
c3Npb24gaGVyZSBzaG91bGQgbm90IGJlIGFib3V0IE9TQ09BUCwgaXQgaXMgYWJvdXQNCmFsbG93
aW5nIG90aGVyIHNlY3VyaXR5IHByb3RvY29scyBmb3IgQ29BUCBpbiB0aGUgc2FtZSB3YXkgYXMg
UkZDNzI1MiBkb2VzLg0KDQpHw7ZyYW4NCg0KDQoNCg0KT24gMjAxNi0xMS0xOCAwNTowMywgImNv
cmUgb24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2ZlbmlnIg0KPGNvcmUtYm91bmNlc0BpZXRmLm9y
ZyBvbiBiZWhhbGYgb2YgaGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4gd3JvdGU6DQoNCj5IaSBh
bGwsDQo+DQo+d2UgaGFkIGEgc29tZXdoYXQgaW5jb25jbHVzaXZlIGRpc2N1c3Npb24gaW4gdGhl
IENPUkUgd29ya2luZyBncm91cCB0aGlzDQo+d2VlayBhYm91dCB0aGUgc2VjdXJpdHkgYXNwZWN0
cyBvZiBDb0FQIG92ZXIgVENQLg0KPg0KPkkgdGhvdWdodCBJIHNob3VsZCB3cml0ZSBkb3duIG15
IHRob3VnaHRzIGFib3V0IHRoaXMgdG9waWMgYWdhaW4gaW4gdGhlDQo+aG9wZSB0aGF0IHdlIGNh
biBmaW5kIGEgc29sdXRpb24gcmVsYXRpdmVseSBxdWlja2x5Lg0KPg0KPldoZW4gd2Ugc3RhcnRl
ZCB0aGUgQ29BUCBvdmVyIFRDUCB3b3JrIHdlIHdlcmUgdW5kZXIgdGhlIGltcHJlc3Npb24gdGhh
dA0KPndlIGNhbiBnZXQgaXQgZG9uZSBmYXN0IHNpbmNlIGl0IHJlbGF0ZWQgdG8gYSBkZXBsb3lt
ZW50IGFydGlmYWN0IHdoZW4NCj51c2luZyBDb0FQIGluIGVudGVycHJpc2UgZW52aXJvbm1lbnRz
IHdoZXJlIFVEUCB0cmFmZmljIGdldHMgYmxvY2tlZC4NCj4NCj5XZSBoYXZlIGFuIGltcGxlbWVu
dGF0aW9uIGFscmVhZHkgYW5kIHNvIGRvZXMgTWljcm9zb2Z0Lg0KPldlIGJvdGggdXNlIFRMUyB0
byBzZWN1cmUgdGhlIGNvbW11bmljYXRpb24uDQo+DQo+T3VyIGludGVudGlvbiB3YXMgdG8gZG9j
dW1lbnQgd2hhdCB3ZSB3ZXJlIGRvaW5nIGFscmVhZHkgYW5kIHRvIGdldA0KPm1vdmluZyBmb3J3
YXJkLg0KPg0KPldpdGggdGhlIHdvcmsgaW4gdGhlIGdyb3VwIHdlIGhhZCB0byBtYWtlIGEgY29t
cHJvbWlzZSBhbmQgaGFkIHRvIGFkZA0KPnN0dWZmIHRoYXQgZG9lcyBub3QgbmVjZXNzYXJpbHkg
aGF2ZSBhbnl0aGluZyB0byBkbyB3aXRoIHdoYXQgd2UgYXJlDQo+aW1wbGVtZW50aW5nIGFuZCBk
ZXBsb3lpbmcgdG9kYXkuIEFuIGV4YW1wbGUgb2YgdGhhdCBmdW5jdGlvbmFsaXR5IGlzDQo+V2Vi
c29ja2V0Lg0KPg0KPldlIGxvc3QgdGhhdCBiYXR0bGUgYW5kIGFzIGEgY29uc2VxdWVuY2UgdGhl
IGRvY3VtZW50IGlzIG1vcmUgdmVyYm9zZQ0KPnRoYW4gd2UgaGFkIGluaXRpYWxseSBlbnZpc2lv
bmVkIGFuZCB0b29rIG11Y2ggbG9uZ2VyIHRvIGZpbmFsaXplLg0KPg0KPkNvQVAgb3ZlciBUQ1Av
VExTIGlzLCBob3dldmVyLCBub3QgbmVjZXNzYXJpbHkgdGhlIGxvbmctdGVybSBnb2FsLg0KPklu
c3RlYWQgb2YgYWRkaW5nIHZhcmlvdXMgZmVhdHVyZXMgdG8gQ29BUCBpbiBhIHN0ZXAtYnktc3Rl
cCBmYXNoaW9uIHdlDQo+Y291bGQgYXMgd2VsbCBpbiB0aGUgbG9uZyBydW4gZ28gdG8gSFRUUC8y
LCBmb3IgZXhhbXBsZSwgaW5zdGVhZC4gSGVuY2UsDQo+SSBzZWUgaXQgYXMgYW4gaW50ZXJtZWRp
YXRlIGFwcHJvYWNoIHRvIGRlYWwgd2l0aCBkZXBsb3ltZW50IGNoYWxsZW5nZXMsDQo+Z2V0IGl0
IGRvbmUgYXMgcXVpY2tseSBhcyBwb3NzaWJsZSwgYW5kIHRoZW4gdG8gbW92ZSBvbi4NCj4NCj5U
aGUgZGlzY3Vzc2lvbiBhYm91dCBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0eSBmb3IgQ29BUCBn
b2VzIGludG8gYQ0KPmRpcmVjdGlvbiB0aGF0IEkgYW0gbm90IG5lY2Vzc2FyaWx5IGNvbWZvcnRh
YmxlIHdpdGguIEluIG91ciBkZXBsb3ltZW50DQo+bW9kZWwgdGhlIGludGVyYWN0aW9uIG9mIHRo
ZSBJb1QgZGV2aWNlIHdpdGggdGhlIHNlcnZlci1zaWRlDQo+aW5mcmFzdHJ1Y3R1cmUgaXMgY3Vy
cmVudGx5IENvQVAgb3ZlciBEVExTL1RMUy4gVGhlbiwgd2UgdXNlIEhUVFBTIHRvDQo+Y29ubmVj
dCB3aXRoIG90aGVyIGFwcGxpY2F0aW9uLWJhc2VkIHNlcnZpY2VzLg0KPg0KPkZ1bm55IGVub3Vn
aCwgd2UgY2FuIG5laXRoZXIgcmUtdXNlIHRoZSB3b3JrIG9uDQo+ZHJhZnQtaWV0Zi1jb3JlLWh0
dHAtbWFwcGluZyBub3IgY2FuIHdlIHVzZSB0aGUgT1NDT0FQIHdvcmsgaW4gb3VyDQo+Y3VycmVu
dCBkZXBsb3ltZW50LiBJIGhvcGUgdGhlcmUgYXJlIGRlcGxveW1lbnRzIG91dCB0aGVyZSB0aGF0
IGFyZSB2ZXJ5DQo+ZGlmZmVyZW50IGZyb20gd2hhdCB3ZSBhcmUgZG9pbmcuIEl0IGNvdWxkLCBo
b3dldmVyLCB3ZWxsIGJlIHRoYXQgdGhlcmUNCj5pcyBhIGxhY2sgb2YgZGVwbG95bWVudCBleHBl
cmllbmNlIGFuZCB3ZSBkbyB0aGUgInNvdW5kcyBnb29kIi10eXBlIG9mDQo+c3RhbmRhcmRpemF0
aW9uIGluc3RlYWQuIEluIHRoZSBDT1JFLUhUVFAtTUFQUElORyBjYXNlLCBmb3IgZXhhbXBsZSwg
d2UNCj5hcmUgbm90IGp1c3QgcmVsYXlpbmcgQ29BUCAob3IgSFRUUCkgcmVxdWVzdHMgYnV0IHRo
ZSBzZXJ2ZXItc2lkZSBpcw0KPmFjdHVhbGx5IHByb3ZpZGluZyBzb21lIGZ1bmN0aW9uYWxpdHkg
dGhhdCBjaGFuZ2VzIHRoZSBuYXR1cmUgb2YgdGhlDQo+cHJvdG9jb2wgaW50ZXJhY3Rpb24gb24g
dGhlIEhUVFAgc2lkZS4gVGhlIGV4cGVyaWVuY2Ugd2l0aCBIVFRQIHNpZ25pbmcNCj5pbiBPQXV0
aCBhbHNvIHNob3dzIG1lIHRoYXQgdGhlcmUgYXJlIGxvdHMgb2YgcHJvYmxlbXMgd2hlbiBzZWN1
cmluZw0KPlJFU1RmdWwgQVBJIGludGVyYWN0aW9ucyBpbiBnZW5lcmFsLiBJIGV4cGVjdCB0byBz
ZWUgdGhlIHNhbWUgcHJvYmxlbXMNCj53aXRoIHRoZSBPU0NPQVAgd29yayBpbiBwcmFjdGljZS4g
SSB3b3VsZCBnbyBhcyBmYXIgYXMgc2F5aW5nIHRoYXQNCj5SRVNUZnVsIEFQSXMgYXJlIHZlcnkg
ZGlmZmljdWx0IChpZiBub3QgaW1wb3NzaWJsZSkgdG8gc2VjdXJlIGVuZC10by1lbmQNCj5pbiBh
bnkgcHJhY3RpY2FsIG11bHRpLXByb3RvY29sIGVudmlyb25tZW50Lg0KPg0KPkluIGEgbnV0c2hl
bGwsIEkgcHJlZmVyIGEgc29sdXRpb24gZm9yIENvQVAgb3ZlciBUQ1AgdGhhdCBhbGxvd3MgdXMN
Cj4gKiB0byBtb3ZlIHRoZSBkb2N1bWVudCBmb3J3YXJkIGFzIHNvb24gYXMgcG9zc2libGUsIGFu
ZA0KPiAqIHRvIGRvY3VtZW50IHdoYXQgd2UgYXJlIGRvaW5nIHRvZGF5Lg0KPg0KPk9uIHRoZSBx
dWVzdGlvbiBhYm91dCB3aGF0IGNyZWRlbnRpYWxzIGFyZSBiZWluZyB1c2VkIHdpdGggVExTIEkg
YmVsaWV2ZQ0KPnRoZSBkaXNjdXNzaW9uIGF0IHRoZSBtZWV0aW5nIHdhcyBhIGJpdCBtaXNsZWFk
aW5nIHNpbmNlIHRoZSBhcmd1bWVudHMNCj5vbiB3aHkgc29tZSBwZW9wbGUgcHJlZmVyIHRvIHVz
ZSBwcmUtc2hhcmVkIHNlY3JldHMgd2FzIGFjdHVhbGx5IG5vdA0KPnJlbGF0ZWQgdG8gVExTLiBN
YXliZSBpdCBpcyBwb3NzaWJsZSB0byBsZWF2ZSB0aGlzIGlzc3VlIG9wZW4gYW5kDQo+aW5zdGVh
ZCByZWZlciB0byBSRkMgNzkyNS4NCj4NCj5DaWFvDQo+SGFubmVzDQo+DQoNCg==


From nobody Thu Nov 17 23:07:04 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B94912959C for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:07:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.002
X-Spam-Level: 
X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nGVes9GvUzHj for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:07:01 -0800 (PST)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0113.outbound.protection.outlook.com [104.47.34.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF9DA12961A for <core@ietf.org>; Thu, 17 Nov 2016 23:07:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=BwxKx0hUNfW9lWhs/tQxmcDXsDYzBVYJ5E+WO0d/K8c=; b=ZPqMNIDdaVFHmEW2jF1Xy+rT84Wl3CKf5pg1NZtBL0Hu7uG2to0vm1NG3QnUFUvYFZwOK/M276On7WwuWbBPmCPBhicK3+RiN4L5FcT5gOQ2vy8uuZz/YL+DW+IiQTwKTLQUULyp24WTywBwa/1z7gWdd58+ZLkaOr0BUIHKrN0=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2378.namprd03.prod.outlook.com (10.166.207.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Fri, 18 Nov 2016 07:06:59 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0734.007; Fri, 18 Nov 2016 07:06:59 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: "core@ietf.org WG" <core@ietf.org>
Thread-Topic: Next steps for coap-tcp-tls
Thread-Index: AdJBZy/pRagtkvg4Sdm9GOeDdbeLvQ==
Date: Fri, 18 Nov 2016 07:06:59 +0000
Message-ID: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [58.123.138.206]
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2378; 7:Sj0w1mTbmOeRNBkZ0GEaEAkP8K5aYifQxVeXP4cTxWcG/vQQp7JIn3JB9gKzeBN259YPC0AYnuxm4EhClyd2UF2QDCN8H5Es6bjYxYljXMiG8w+jU0khKcWzSSV54VaWpRdsxTavuuSaxkcb9Bb5tGqWMlffFFnVM6GZ4X0AccKfD72Zf3/hxLLH2Z7TZYsye3rs7V9dq7OP13JXLhuSfmgZgCRQ86/2wH7dLDM5n6ZYchbrRsc3NBV6J0SNhlrWlfnQydk06hZR6jTTR0+XLpveykW4VSyEsXZBDoV2xhPAr5EogttKkyQdOW4ZFCLIa2lgdQYLZwtkoySmop+EuOwWeWpbhDYRL9lCxWer/K7KvTijdrWlEHfbPqpzJVmT
x-ms-office365-filtering-correlation-id: eea21528-3d93-44be-24c2-08d40f817d3d
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CY1PR03MB2378;
x-microsoft-antispam-prvs: <CY1PR03MB2378791DF31EC502DB011E2B83B00@CY1PR03MB2378.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(21748063052155); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6060326)(6045074)(6040281)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026)(61426038)(61427038)(6061324)(6041223)(6046074)(6042181)(6072148)(6047074); SRVR:CY1PR03MB2378; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2378; 
x-forefront-prvs: 01304918F3
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(7916002)(52024003)(199003)(189002)(101416001)(107886002)(110136003)(2906002)(86362001)(50986999)(54356999)(86612001)(105586002)(76576001)(106356001)(450100001)(6916009)(3280700002)(189998001)(99286002)(3660700001)(92566002)(2900100001)(7846002)(230783001)(7736002)(77096005)(74316002)(606004)(8990500004)(66066001)(33656002)(6506003)(122556002)(10290500002)(3846002)(81156014)(5005710100001)(87936001)(68736007)(7906003)(10090500001)(8936002)(81166006)(8676002)(97736004)(6116002)(9686002)(5660300001)(7696004)(102836003)(790700001)(38730400001)(12290500005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2378; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_CY1PR03MB2380309CAFC2D3E9A485122883B00CY1PR03MB2380namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2016 07:06:59.0597 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2378
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/sN-JON3ZfYekibVY432c46yKtM8>
Subject: [core] Next steps for coap-tcp-tls
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 07:07:03 -0000

--_000_CY1PR03MB2380309CAFC2D3E9A485122883B00CY1PR03MB2380namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



As editor, my aspiration is to publish coap-tcp-tls-06 for a second WGLC be=
tween December 16-19th. I have editorial issues to address and a few minor =
normative issues that I'll raise on the mailing list. The main blocking poi=
nt is https://github.com/core-wg/coap-tcp-tls/issues/11. We need to find a =
way to quickly move forward and reach rough consensus.



Here is my plan that I've reviewed with Jaime and others:



Following the CoRE WG meeting on Wednesday, I've had several conversations =
with people who needed to consult with their organizations before sharing p=
ositions on this issue. Please share details about your concrete positions =
and deployment plans/models (if possible) on the mailing list as soon as po=
ssible. Remember that many people did not hear the microphone discussions o=
n Wednesday - so this is an opportunity to educate the WG. (I appreciate th=
at we're travelling and then there is a holiday week for the US participant=
s. Do the best you can.)



My perception was that some of the discussion on Wednesday was not focused =
on CoAP+TCP and its scenarios. Please ensure that you're addressing this sp=
ecific case rather than constrained devices in general or CoAP+UDP. Also, r=
emember that we all share the same goals even if we're proposing different =
solutions - to ensure that CoAP+TCP addresses these guidelines (which are t=
he best we have now):



Security Challenges For the Internet Of  Things<https://www.iab.org/wp-cont=
ent/IAB-uploads/2011/03/Turner.pdf> (2011):

It is essential that IoT protocol suites specify a mandatory to implement b=
ut optional to use security solution. This will ensure security is availabl=
e in all implementations, but configurable to use when not necessary (e.g.,=
 in closed environment).



I'll use your information and RFC7252 as a starting point for a pull reques=
t. I plan to schedule a conference call with Hannes, Juan Perez, and G=F6ra=
n Selander (or Francesca Palombini) late in the week of December 5th based =
on availability. We'll iterate on the pull request and then present to the =
broader working group for review during the week of December 12th.



Thanks,

...Brian


--_000_CY1PR03MB2380309CAFC2D3E9A485122883B00CY1PR03MB2380namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{mso-style-priority:99;
	mso-style-link:"Plain Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
span.PlainTextChar
	{mso-style-name:"Plain Text Char";
	mso-style-priority:99;
	mso-style-link:"Plain Text";
	font-family:"Calibri",sans-serif;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText">As editor, my aspiration is to publish coap-tcp-t=
ls-06 for a second WGLC between December 16-19th. I have editorial issues t=
o address and a few minor normative issues that I&#8217;ll raise on the mai=
ling list. The main blocking point is
<a href=3D"https://github.com/core-wg/coap-tcp-tls/issues/11">https://githu=
b.com/core-wg/coap-tcp-tls/issues/11</a>. We need to find a way to quickly =
move forward and reach rough consensus.<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText">Here is my plan that I've reviewed with Jaime and=
 others:<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText">Following the CoRE WG meeting on Wednesday, I've =
had several conversations with people who needed to consult with their orga=
nizations before sharing positions on this issue. Please share details abou=
t your concrete positions and deployment
 plans/models (if possible) on the mailing list as soon as possible. Rememb=
er that many people did not hear the microphone discussions on Wednesday - =
so this is an opportunity to educate the WG. (I appreciate that we're trave=
lling and then there is a holiday
 week for the US participants. Do the best you can.)<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText">My perception was that some of the discussion on =
Wednesday was not focused on CoAP&#43;TCP and its scenarios. Please ensure =
that you&#8217;re addressing this specific case rather than constrained dev=
ices in general or CoAP&#43;UDP. Also, remember
 that we all share the same goals even if we&#8217;re proposing different s=
olutions &#8211; to ensure that CoAP&#43;TCP addresses these guidelines (wh=
ich are the best we have now):<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:.5in"><a href=3D"https://www=
.iab.org/wp-content/IAB-uploads/2011/03/Turner.pdf">Security Challenges For=
 the Internet Of&nbsp; Things</a> (2011):<o:p></o:p></p>
<p class=3D"MsoPlainText" style=3D"margin-left:.5in"><i>It is essential tha=
t IoT protocol suites specify a
<b>mandatory to implement but optional to use security solution</b>. This w=
ill ensure security is available in all implementations, but configurable t=
o use when not necessary (e.g., in closed environment).</i><o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText">I'll use your information and RFC7252 as a starti=
ng point for a pull request. I plan to schedule a conference call with Hann=
es, Juan Perez, and G=F6ran Selander (or Francesca Palombini) late in the w=
eek of December 5th based on availability.
 We&#8217;ll iterate on the pull request and then present to the broader wo=
rking group for review during the week of December 12th.<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p>&nbsp;</o:p></p>
<p class=3D"MsoPlainText">Thanks,<o:p></o:p></p>
<p class=3D"MsoPlainText">&#8230;Brian<o:p></o:p></p>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>

--_000_CY1PR03MB2380309CAFC2D3E9A485122883B00CY1PR03MB2380namp_--


From nobody Thu Nov 17 23:10:41 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28D57129646 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:10:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GjVcAIiSr535 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:10:38 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D180A12959C for <core@ietf.org>; Thu, 17 Nov 2016 23:10:37 -0800 (PST)
Received: from [192.168.91.156] ([36.226.192.69]) by mail.gmx.com (mrgmx101 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MDE6y-1bzubz2Z36-00GXKr; Fri, 18 Nov 2016 08:10:33 +0100
To: Brian Raymor <Brian.Raymor@microsoft.com>, "core@ietf.org WG" <core@ietf.org>
References: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <e377d431-6f8f-b3af-6433-70f31e5f8c85@gmx.net>
Date: Fri, 18 Nov 2016 08:10:27 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="v3fN7RL2mXlTbFxcQLNC7LIKJMhvux08k"
X-Provags-ID: V03:K0:ZUfolv8j8UW+lSlvKA4uiFoNDViViqdkNHq05HBCuJFV1Ze04L7 MQzzrfp2HzI8cBbhAzX0oBinpamQqejF2Y56JrOT/PDV5ogrbOeqFpYiz6e5hJHB2SzJjMa 44F0s2IBHd1jlUss65/Kq8e7jGHGsvKClX0uQFVynVtn7y0QlhmS2nZBwuavjfq9+ygJNDf 3SeEp3O4ErZRffYlJtVlw==
X-UI-Out-Filterresults: notjunk:1;V01:K0:2DyRsncThoI=:qjfcTe4D0DPwCELm5hXL6E Nnx201twPMqTc0ewOoAU84kiZzE0Jd4FVbjeJWYW8GAR0qZFvn39gk56QAnBXfC1c2/aH31/i Z863AY1OiONS7TmqAd1OlJn0XVKvtXO7OwFqLwt+NtPkSESaP8uqBH2//QXUiOKDqnCh/uHLo hm3iTC2g9h0D+dbKOU/D833CMS734V2OA8L1/qB3nRtd9pA8DLoPKvRC+jofjdi5/7a1YnnrP w9F/IBo7GiGg62o8y4LrO+WUEFe2zvy3qaxLT0PWWHNX0H2ZQVy5AmK748IFr+zF5Nd4C6yKU Wh6BUJ3s5Gdzuzfp17bYxfR5izAtXKTMhQ3w8d1KEwnOjxJY1VwN9aEZZczmDVrT4GySTncYA Euc1ma/i8VrUhG6ynb9oKMT8C6pZ+Xvq+gJkOGRdhntVh8Q9PdhvKrl/4ng3yc+PqBWrM8wgA eWXmZGC+TdDuc1SLX2gi4/szWyuXJs6Wq7b9efazbrTLiIQU3zs45fQLy8jD7Pv0gS18nhMhN m0XGzQP9OIC9LbyZtdSmX6F6ZQb00hbeZoMgFQLv1nI3sMaBJjzKz5fjHNxm/MhU1vUmI1qH6 MiHtSokmwVhag3MavcHynR9KYSum3tnt9wRaM3ZCzlKgopIQLw20QIC6xpqGuFb5uRttaucud 5L4SPu1TJZUN4RwaXyymVhucKlK4m7sAyZZIEEbJHavhU46BVKBscgHRgY2qCuGmvhhe8Laa2 RZm+oQKe9p02JlWfgYRV0k8zO3hKIIQoJPu56ZEr3qjphCzoUMqOfxEwWGM=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/mHXZ4KuA7FbxnobeKxDT8Vkvq9g>
Subject: Re: [core] Next steps for coap-tcp-tls
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 07:10:40 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--v3fN7RL2mXlTbFxcQLNC7LIKJMhvux08k
Content-Type: multipart/mixed; boundary="8DBc7cPkUc49xvSdTiiBVi2OXed647qAo";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: Brian Raymor <Brian.Raymor@microsoft.com>,
 "core@ietf.org WG" <core@ietf.org>
Message-ID: <e377d431-6f8f-b3af-6433-70f31e5f8c85@gmx.net>
Subject: Re: [core] Next steps for coap-tcp-tls
References: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com>
In-Reply-To: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com>

--8DBc7cPkUc49xvSdTiiBVi2OXed647qAo
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Hi Brian,

your proposal to start with RFC7252 as a starting point but I am
wondering why there is a need for a second WGLC. Normally, we just take
the feedback from the WGLC, incorporate it into the document and then
send it to the IESG (if the WGLC comments are not dramatic).

Ciao
Hannes


On 11/18/2016 08:06 AM, Brian Raymor wrote:
> =20
>=20
> As editor, my aspiration is to publish coap-tcp-tls-06 for a second WGL=
C
> between December 16-19th. I have editorial issues to address and a few
> minor normative issues that I=92ll raise on the mailing list. The main
> blocking point is https://github.com/core-wg/coap-tcp-tls/issues/11. We=

> need to find a way to quickly move forward and reach rough consensus.
>=20
> =20
>=20
> Here is my plan that I've reviewed with Jaime and others:
>=20
> =20
>=20
> Following the CoRE WG meeting on Wednesday, I've had several
> conversations with people who needed to consult with their organization=
s
> before sharing positions on this issue. Please share details about your=

> concrete positions and deployment plans/models (if possible) on the
> mailing list as soon as possible. Remember that many people did not hea=
r
> the microphone discussions on Wednesday - so this is an opportunity to
> educate the WG. (I appreciate that we're travelling and then there is a=

> holiday week for the US participants. Do the best you can.)
>=20
> =20
>=20
> My perception was that some of the discussion on Wednesday was not
> focused on CoAP+TCP and its scenarios. Please ensure that you=92re
> addressing this specific case rather than constrained devices in genera=
l
> or CoAP+UDP. Also, remember that we all share the same goals even if
> we=92re proposing different solutions =96 to ensure that CoAP+TCP addre=
sses
> these guidelines (which are the best we have now):
>=20
> =20
>=20
> Security Challenges For the Internet Of  Things
> <https://www.iab.org/wp-content/IAB-uploads/2011/03/Turner.pdf> (2011):=

>=20
> /It is essential that IoT protocol suites specify a *mandatory to
> implement but optional to use security solution*. This will ensure
> security is available in all implementations, but configurable to use
> when not necessary (e.g., in closed environment)./
>=20
> =20
>=20
> I'll use your information and RFC7252 as a starting point for a pull
> request. I plan to schedule a conference call with Hannes, Juan Perez,
> and G=F6ran Selander (or Francesca Palombini) late in the week of Decem=
ber
> 5th based on availability. We=92ll iterate on the pull request and then=

> present to the broader working group for review during the week of
> December 12th.
>=20
> =20
>=20
> Thanks,
>=20
> =85Brian
>=20
> =20
>=20
>=20
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>=20


--8DBc7cPkUc49xvSdTiiBVi2OXed647qAo--

--v3fN7RL2mXlTbFxcQLNC7LIKJMhvux08k
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYLqlkAAoJEGhJURNOOiAtKhEH/A/0CIyIB6H0R91829eY+LNs
4ZQE2KkZkt2iom0Efnhj3EK5xppYUa+b0IP7Zv+vT6PUjSefKS9hmvHOpLppryYC
jnnRTvP5ytN9/XMHRJWLn0b3SjuNe+Nwq7dRrzxPqhSoodUDhm1bF8pHfIeK62/M
3AhYusTie4izlqDskCxl4HvEutjjzOwOC8TlI7X/NUy9nQmjjGmcebW66PBrZu8a
CwJRxm+6IVU1/ilXQlV98No4RV2pxF0h8lvRvxo4wuEEZA3W+wB6JFeN96LP7qTt
1CtjLOQk7gbrSOq6Af/HMECcFysM9HdsSZhW54fYrA13b+VMBtTmoFj59HqQ9rI=
=vzXs
-----END PGP SIGNATURE-----

--v3fN7RL2mXlTbFxcQLNC7LIKJMhvux08k--


From nobody Thu Nov 17 23:18:06 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F40F0129646 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:18:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4hwq8taM4KBL for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:18:03 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B3C712959C for <core@ietf.org>; Thu, 17 Nov 2016 23:18:03 -0800 (PST)
Received: from [192.168.91.156] ([36.226.192.69]) by mail.gmx.com (mrgmx103 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MfVzj-1cREWS2muR-00P6Yl; Fri, 18 Nov 2016 08:18:00 +0100
To: =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>, "core@ietf.org WG" <core@ietf.org>
References: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net> <D4544983.6CF40%goran.selander@ericsson.com>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <8694cf86-d694-adc4-3d95-b69ad01648b4@gmx.net>
Date: Fri, 18 Nov 2016 08:17:56 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <D4544983.6CF40%goran.selander@ericsson.com>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="kALQv8KmsqGr6wSaOls7a9QudU6uXDQnW"
X-Provags-ID: V03:K0:7GNxJ3yRNdaBvIotodJ9ej312n7A6VM2gKeFdeVl4lYiE+PAovX hfyWMlZfthxNHP8kbfUCgT661VuAetd9iKTV8bvCSeO/Zz3n3iuQsYnvgPUiMm8ALJlNScY jkCd38lMroarRg/FuLTQDzd0fOanl7wf3y+cEPUBFnqho33GKiR5WzEM9WfNVyCa6X/jME6 EDI+MwNH2zYa3L8+rz1eg==
X-UI-Out-Filterresults: notjunk:1;V01:K0:1C8/yuTHkac=:KmMmYykKW6RWmzgwk4fTCQ nE7iufmTHeEw+tHmexushUr7Im0T+Xg9EUluDMsA91ldg+GRHSR2RXWb3K4c1hht20GzbvX9L Joapq1RBP/dzIYf2mrzWLOPAMwLlWMAqDwx6iVnBHotyv5AbgdT0oT8DOrEtNFYG1cQVsQsxj tUHeXeqpmgL2ScYse9pgYiFgZ5fH0xqe0CQmZrI+6oV9kI+AoOB25uWY8zKHUN4TG4mUJVy96 cGKnZluO/Jv2qFcTK7kq2A1T/JlkSRXOdqu7P1Qvn0y3cK7GrLLD6E4rWq8a/Xu3bRuM3lDpR CRZhCdY6IKR5yplIOeP++i7cv10SU7J3Fv03SA3nkmKFPhth9G3TF3tEfjCW9yPpdQXRtZOGo w6ZmAbDVVz/g3CakR7SNoocNBk5Ak4r+PQ1P0zx3yKpEQDHPlIwiLuCkY+xnGaZ+5zP8RQbUD UDwDP5yyzgavyVqUnm0hR5dHYOuTWsmZdvL7z4MMFBtj/y4qCBv5HVrbJjVChiUnjgjWfZUlt PrvqXwL9iji7pFXJt9SOmm2nieccOAbz0XS3GzAoBVSs2niIeXr4EmvdPgr/uxX+Mdc1upnJu L+kfBR8OOTF0+XE3pt2ZfdUV93QAmnXGOWf/iPKm1BWEHy4Vd/2zzqb0PO9Fr03nvK06cR816 dx1zWo0XgSuYeAKSWCieAgFewT5HShC1n6lTtSFCxwHYBwWzdSMLt2u7ugFm+o65cRfFropUu Z8p47oo4C5CUTbmx8AJwuZnGOm6Ud8AK8+vINk25c5o7qDGnVgttWsfArDw=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/cHQJQUyZzo4KAQRuhr-OiC1D7wY>
Subject: Re: [core] Security aspects in CoAP over TCP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 07:18:05 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--kALQv8KmsqGr6wSaOls7a9QudU6uXDQnW
Content-Type: multipart/mixed; boundary="6gHrv5uw5lC1cAEh6x4kpl2h4HWrmvnVW";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>,
 "core@ietf.org WG" <core@ietf.org>
Message-ID: <8694cf86-d694-adc4-3d95-b69ad01648b4@gmx.net>
Subject: Re: [core] Security aspects in CoAP over TCP
References: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net>
 <D4544983.6CF40%goran.selander@ericsson.com>
In-Reply-To: <D4544983.6CF40%goran.selander@ericsson.com>

--6gHrv5uw5lC1cAEh6x4kpl2h4HWrmvnVW
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

~snip~

> But, again, the discussion here should not be about OSCOAP, it is about=

> allowing other security protocols for CoAP in the same way as RFC7252 d=
oes.

The discussion started with the question about what should be stated as
mandatory-to-implement (MTI). The problem is that the discussion then
turned into OSCOAP vs. TLS. I argue that we should have TLS as MTI.


--6gHrv5uw5lC1cAEh6x4kpl2h4HWrmvnVW--

--kALQv8KmsqGr6wSaOls7a9QudU6uXDQnW
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYLqskAAoJEGhJURNOOiAtrZoH/R2xzs3+MbTTZRFbxCC3i81+
f2WofolvSW2+2n2P0xbovOWuGz+MXrUDvfEaUejEeFKxrQUmxTySKO4rQeroKl8b
4KxF68BtYGegS92jDHHV7Lhc/ovJGoS8PMZ/NDoYNRCCCilu1o4hjAcHlaV7wb8V
gftl2PLtslvua/8EdSr0XvSbjFgQC68HLkzW9VI6TQqzG/mR7aAASy9VzZSo9Sg6
U6uznRzEgm93gaYmrQXVaOwWC/mttVpHltZGR6vJ7MrUR+oBkuTu+bz4sNc7wAKz
B1ci/ueT889XwFeCjQObx2+lSaTKpj0lWhfV4TuTLpfQNG714abYSOUMGzmXBDg=
=1FDJ
-----END PGP SIGNATURE-----

--kALQv8KmsqGr6wSaOls7a9QudU6uXDQnW--


From nobody Thu Nov 17 23:29:04 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 845EB129410 for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:29:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.003
X-Spam-Level: 
X-Spam-Status: No, score=-2.003 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dLwPMIDAJ6JF for <core@ietfa.amsl.com>; Thu, 17 Nov 2016 23:29:00 -0800 (PST)
Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-dm3nam03on0107.outbound.protection.outlook.com [104.47.41.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BB0C1293E9 for <core@ietf.org>; Thu, 17 Nov 2016 23:29:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ba/zLE3JzCP5k/TQYZg75X5PMG2kDgo1R93vYwpduCU=; b=gH8o08sOeC/7epn3xkWXu47A7jWylbDzk7vJsc6743PMlZhqsNwdfR9PI73brQu7CoXjRQf1cMufYMePueGpSNcEhVZlZi6LhVCKSlzqasjPoH1GA8hXfIQt7LcKtIvUMaEq3pELu6Y4mnB5Tr3VodsYFSl5JFWKuIaINalCKSA=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2378.namprd03.prod.outlook.com (10.166.207.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Fri, 18 Nov 2016 07:28:58 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0734.007; Fri, 18 Nov 2016 07:28:57 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: [core] Next steps for coap-tcp-tls
Thread-Index: AdJBZy/pRagtkvg4Sdm9GOeDdbeLvQAA6ayAAABQOwA=
Date: Fri, 18 Nov 2016 07:28:57 +0000
Message-ID: <CY1PR03MB2380D9F17EC81DBBC78721CD83B00@CY1PR03MB2380.namprd03.prod.outlook.com>
References: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com> <e377d431-6f8f-b3af-6433-70f31e5f8c85@gmx.net>
In-Reply-To: <e377d431-6f8f-b3af-6433-70f31e5f8c85@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [58.123.138.206]
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2378; 7:mBAAsf1GRnyVwh8aPz5CpM5GccqNHTNdawND3Mv3zXAEdVlftK91dZCuQeytoSDVl228OeAr1ChnkRmK+lUpy4ZswifPcCbRh7FUUBjw6FoGojmEM+9cnCOCCZjIYP2aK9HWEbsF/GsPLJi8ctLOjxA/xrRBrv4QOWsqgpoBc4YHhjA9zXrsR1QH+mNWEnZkS0qWABmiIsQLP3GJ36njpFLVNtSuoEkO50LbMoP2HYsBJUULGeGCfXwree9092P1ZUO2osHCJUlklkUcg1fmnOCrqIuTlPXKeuOOdTmDL8iL5hoxM1Aaf6xOIby4ZIR3MDwmI2GVDzy5tldE/qLR9mSSFS7S/zyeHxBR57qHmga4Hc/75+4I3tumXGygOAcW
x-ms-office365-filtering-correlation-id: fae38506-d5c7-472d-7281-08d40f848f44
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CY1PR03MB2378;
x-microsoft-antispam-prvs: <CY1PR03MB237890F57A92B7755B76FA3B83B00@CY1PR03MB2378.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(248736688235697); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6060326)(6045074)(6040281)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026)(61426038)(61427038)(6061324)(6041223)(6046074)(6042181)(6072148)(6047074); SRVR:CY1PR03MB2378; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2378; 
x-forefront-prvs: 01304918F3
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(189002)(24454002)(377454003)(13464003)(52024003)(199003)(5005710100001)(81156014)(3846002)(10290500002)(10090500001)(8936002)(8676002)(81166006)(87936001)(68736007)(77096005)(74316002)(6506003)(33656002)(122556002)(8990500004)(66066001)(102836003)(305945005)(38730400001)(5660300001)(6116002)(97736004)(9686002)(5001770100001)(7696004)(86612001)(54356999)(50986999)(76176999)(76576001)(106356001)(229853002)(105586002)(2906002)(101416001)(107886002)(86362001)(561944003)(2900100001)(7846002)(92566002)(3660700001)(230783001)(7736002)(2950100002)(99286002)(189998001)(3280700002)(12290500005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2378; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2016 07:28:57.8248 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2378
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/FyYU2SGwuOf6W9r3RI8E745Un3g>
Subject: Re: [core] Next steps for coap-tcp-tls
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 07:29:02 -0000

Hi Hannes-

In part, I asked Jaime for a second WGLC because of the limited participati=
on in the first WGLC.=20

We've scheduled a second WGLC for WebPush. I felt that it really polished t=
he draft for broader review which was noted in the IESG comments.

Measure twice. Cut once.

...Brian

-----Original Message-----
From: Hannes Tschofenig [mailto:hannes.tschofenig@gmx.net]=20
Sent: Friday, November 18, 2016 4:10 PM
To: Brian Raymor <Brian.Raymor@microsoft.com>; core@ietf.org WG <core@ietf.=
org>
Subject: Re: [core] Next steps for coap-tcp-tls

Hi Brian,

your proposal to start with RFC7252 as a starting point but I am
wondering why there is a need for a second WGLC. Normally, we just take
the feedback from the WGLC, incorporate it into the document and then
send it to the IESG (if the WGLC comments are not dramatic).

Ciao
Hannes


On 11/18/2016 08:06 AM, Brian Raymor wrote:
> =20
>=20
> As editor, my aspiration is to publish coap-tcp-tls-06 for a second WGLC
> between December 16-19th. I have editorial issues to address and a few
> minor normative issues that I'll raise on the mailing list. The main
> blocking point is https://github.com/core-wg/coap-tcp-tls/issues/11. We
> need to find a way to quickly move forward and reach rough consensus.
>=20
> =20
>=20
> Here is my plan that I've reviewed with Jaime and others:
>=20
> =20
>=20
> Following the CoRE WG meeting on Wednesday, I've had several
> conversations with people who needed to consult with their organizations
> before sharing positions on this issue. Please share details about your
> concrete positions and deployment plans/models (if possible) on the
> mailing list as soon as possible. Remember that many people did not hear
> the microphone discussions on Wednesday - so this is an opportunity to
> educate the WG. (I appreciate that we're travelling and then there is a
> holiday week for the US participants. Do the best you can.)
>=20
> =20
>=20
> My perception was that some of the discussion on Wednesday was not
> focused on CoAP+TCP and its scenarios. Please ensure that you're
> addressing this specific case rather than constrained devices in general
> or CoAP+UDP. Also, remember that we all share the same goals even if
> we're proposing different solutions - to ensure that CoAP+TCP addresses
> these guidelines (which are the best we have now):
>=20
> =20
>=20
> Security Challenges For the Internet Of  Things
> <https://www.iab.org/wp-content/IAB-uploads/2011/03/Turner.pdf> (2011):
>=20
> /It is essential that IoT protocol suites specify a *mandatory to
> implement but optional to use security solution*. This will ensure
> security is available in all implementations, but configurable to use
> when not necessary (e.g., in closed environment)./
>=20
> =20
>=20
> I'll use your information and RFC7252 as a starting point for a pull
> request. I plan to schedule a conference call with Hannes, Juan Perez,
> and G=F6ran Selander (or Francesca Palombini) late in the week of Decembe=
r
> 5th based on availability. We'll iterate on the pull request and then
> present to the broader working group for review during the week of
> December 12th.
>=20
> =20
>=20
> Thanks,
>=20
> .Brian
>=20
> =20
>=20
>=20
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>=20


From nobody Fri Nov 18 00:14:48 2016
Return-Path: <ludwig@sics.se>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BE961294C1 for <core@ietfa.amsl.com>; Fri, 18 Nov 2016 00:14:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Level: 
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics.se
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0BnhJt6raOnc for <core@ietfa.amsl.com>; Fri, 18 Nov 2016 00:14:45 -0800 (PST)
Received: from mail-wm0-x233.google.com (mail-wm0-x233.google.com [IPv6:2a00:1450:400c:c09::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46223129472 for <core@ietf.org>; Fri, 18 Nov 2016 00:14:45 -0800 (PST)
Received: by mail-wm0-x233.google.com with SMTP id g23so21586388wme.1 for <core@ietf.org>; Fri, 18 Nov 2016 00:14:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics.se; s=google; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=j6nBPrerRbteirDjwiE9EpoQq6y6KZ6zVCv4Y0Kda1E=; b=JwlJHuEc4nCqsbzCYH07+P3frA5Ym2+6bhA+p/A4UpeHbQRzBd14bD2HtJBJBuT3vM rNSqqw4kuCgv3jzZBuoRsSQnhn9mM6LcUWBxQRtNPQ946Hlj/lrIvMULv02zBI0FnOu4 S5iED23+d3qGfonhLF4koLpT3LYC4hbnqZgmKtuScZ0KvLq12wnxJOyh3Gk7cwpTTXGY /CIxYufOenGSxsnuh+/pJQ7Z4d8By9urpmFuxUv7QUdyXdAYeIyFrU+EnYppW5G0BSY0 F5MWyMfc07cnb/+1270ClWqPkI7x5Hlpc9LY+qQ23fj3Tzv/YRDgjxMbL3BBULzr60vj +Etg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=j6nBPrerRbteirDjwiE9EpoQq6y6KZ6zVCv4Y0Kda1E=; b=mtYUiZlNZ+QUfRwZqJkeDwyoOcWoi/flNP59hjHiqP4CdEkH3uLUhdFpivWMZ6yNhy YSkZwuThWv0/TsCVYWa08lvXyUgHbkYiKtXcF5mpjJHgfFzf61EMPJrhy2tAeTiZeDkh iIlK3cNQn2zS3inprKPgFAG8VvV9J+BTSgCGpW56WQGuVld0V27bQK1HCMz+gwoR5jjF 7ntwbeAuBQubmzm2FECc/ABqEzfkg/eq7knqJzyLw1Zauu3o0tFKYtHiYxYjOD867YZv jXvwDg5wKNP5o0yjTHCxZcwMDWXcdjXsVooIAKMvLY48HLcDJPpGVa9Xur51wcyEMblB QmVw==
X-Gm-Message-State: ABUngvflqf+zOvWgvL075VZMQ8pR9SdyDQ5emk4LgeZrZ49F6lE/bxQv/CuTniIj9YPz00cY
X-Received: by 10.25.67.2 with SMTP id q2mr1493064lfa.22.1479456883510; Fri, 18 Nov 2016 00:14:43 -0800 (PST)
Received: from [192.168.0.166] ([85.235.12.155]) by smtp.gmail.com with ESMTPSA id 18sm1900020ljj.7.2016.11.18.00.14.42 for <core@ietf.org> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 18 Nov 2016 00:14:42 -0800 (PST)
To: core@ietf.org
References: <f52a8bc2-a177-b5b5-df8c-d9b902a18ebd@gmx.net> <D4544983.6CF40%goran.selander@ericsson.com> <8694cf86-d694-adc4-3d95-b69ad01648b4@gmx.net>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <a9827e45-d937-5bec-c610-a0e4cf208cb3@sics.se>
Date: Fri, 18 Nov 2016 09:14:42 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <8694cf86-d694-adc4-3d95-b69ad01648b4@gmx.net>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms020903050802030307000304"
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/lFJlFaSxSJg8Grb1n037QfzT3qQ>
Subject: Re: [core] Security aspects in CoAP over TCP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 08:14:47 -0000

This is a cryptographically signed message in MIME format.

--------------ms020903050802030307000304
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-11-18 08:17, Hannes Tschofenig wrote:
> ~snip~
>
>> But, again, the discussion here should not be about OSCOAP, it is abou=
t
>> allowing other security protocols for CoAP in the same way as RFC7252 =
does.
>
> The discussion started with the question about what should be stated as=

> mandatory-to-implement (MTI). The problem is that the discussion then
> turned into OSCOAP vs. TLS. I argue that we should have TLS as MTI.
>


I think you are missing G=F6ran's point here.

Can you please explain why do you think this draft should have a=20
different statement than the one that is in the CoAP RFC?

If I understood RFC 7252 correctly (please feel free to correct me),=20
CoAP specifies a binding to DTLS and MTI algorithms iff you use DTLS. It =

allows for other security protocols (such as e.g. IPSec, so this is not=20
limited to OSCOAP) by allowing to use NoSec mode at application layer.

G=F6ran is only asking that we apply the same principle to the CoAP-TLS=20
specification.

/Ludwig

--=20
Ludwig Seitz, PhD   SICS Swedish ICT AB
Ideon Science Park, Building Beta 2
Scheelev=E4gen 17, SE-223 70 Lund
Phone +46(0)70-349 92 51

The RISE institutes SP, Swedish ICT and Innventia are merging in order=20
to create a unified institute sector and become a stronger innovation=20
partner for businesses and society. At the end of the year we will=20
change our name to RISE. Read more at www.ri.se/en/about-rise


--------------ms020903050802030307000304
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms020903050802030307000304--


From nobody Fri Nov 18 04:17:53 2016
Return-Path: <Brian.Raymor@microsoft.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2613D129663 for <core@ietfa.amsl.com>; Fri, 18 Nov 2016 04:17:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.003
X-Spam-Level: 
X-Spam-Status: No, score=-2.003 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AkD-_F5HJ9Wy for <core@ietfa.amsl.com>; Fri, 18 Nov 2016 04:17:50 -0800 (PST)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0092.outbound.protection.outlook.com [104.47.34.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C0B2129653 for <core@ietf.org>; Fri, 18 Nov 2016 04:08:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=TA3NQCABsOZPZYzjpymqrBMlXqBYPw86k9ZEBy5MUZg=; b=R7ejIrr3/hAsorEaVUaSEOzgUz1gO3cZgDCRw0cne9WwJ0zUhf790Zd3Wxf7v5tuq5LPinxtfmEnAAUHcsPbmiBbcNaUS5Ezjx25hIYL1rKG0FxkL6HT4RYDIMsxReCAIdE8PtPhNU/US0bB3la6wMRvFcWqQdSZ0LWY0VdMeAs=
Received: from CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) by CY1PR03MB2380.namprd03.prod.outlook.com (10.167.8.6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Fri, 18 Nov 2016 12:07:58 +0000
Received: from CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) by CY1PR03MB2380.namprd03.prod.outlook.com ([10.167.8.6]) with mapi id 15.01.0734.007; Fri, 18 Nov 2016 12:07:58 +0000
From: Brian Raymor <Brian.Raymor@microsoft.com>
To: Brian Raymor <Brian.Raymor@microsoft.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: [core] Next steps for coap-tcp-tls
Thread-Index: AdJBZy/pRagtkvg4Sdm9GOeDdbeLvQAA6ayAAABQOwAACYgeoA==
Date: Fri, 18 Nov 2016 12:07:58 +0000
Message-ID: <CY1PR03MB23805C7C88707C6779B2AB0083B00@CY1PR03MB2380.namprd03.prod.outlook.com>
References: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com> <e377d431-6f8f-b3af-6433-70f31e5f8c85@gmx.net> <CY1PR03MB2380D9F17EC81DBBC78721CD83B00@CY1PR03MB2380.namprd03.prod.outlook.com>
In-Reply-To: <CY1PR03MB2380D9F17EC81DBBC78721CD83B00@CY1PR03MB2380.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brian.Raymor@microsoft.com; 
x-originating-ip: [58.123.138.206]
x-microsoft-exchange-diagnostics: 1; CY1PR03MB2380; 7:YiHBSgHLWRa374pKjXGJ3DAmUkhUP0SBF8937ouorWJbm8aKx75fdrtXhJWMm0g+QIZaGakWB4F0BLqgZ9zQ5nQXFNUl3tNXogwV+DGIcfeAnbRdcMVywWykPgHFb0/TJd6ivK53txLXrNc1Fh/jAGVAe4QT/Hyuj3ri4yunO/P+KPVBLJ7UMSUsMZqdkRoeqIQQfMXjnoJsXlECHqG3rCEiRletH2ilFSvwyleAuYdo03NK8saHovzaNMUPKU1GL4hp79LfqP5N9TDNukjHG4d6TzZSbnDU1iLyccDX5MQysW+22Z5pzFAvomQgZNtNkynmmzw/yNnvGPXDSX6uQPRfcXf3NhaN87CL/mK5KEjW3xaCuf67s1yeZqsElN8W
x-ms-office365-filtering-correlation-id: 72e581c5-a5af-4c95-f06c-08d40fab8991
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:CY1PR03MB2380;
x-microsoft-antispam-prvs: <CY1PR03MB23804100B47CDDF727008D7283B00@CY1PR03MB2380.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(248736688235697); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6060326)(6045074)(6040281)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038)(6061324)(6046074)(6041223)(6047074)(6072148); SRVR:CY1PR03MB2380; BCL:0; PCL:0; RULEID:; SRVR:CY1PR03MB2380; 
x-forefront-prvs: 01304918F3
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(24454002)(377454003)(199003)(13464003)(189002)(52024003)(105586002)(86612001)(2421001)(86362001)(3846002)(6116002)(50986999)(101416001)(106356001)(7696004)(54356999)(8676002)(102836003)(76576001)(2950100002)(561944003)(33656002)(81156014)(76176999)(122556002)(81166006)(6506003)(8936002)(77096005)(5001770100001)(99286002)(97736004)(2900100001)(1511001)(2906002)(5660300001)(189998001)(3660700001)(68736007)(66066001)(2561002)(230783001)(92566002)(3280700002)(5005710100001)(87936001)(10090500001)(10290500002)(8990500004)(7736002)(74316002)(7846002)(229853002)(9686002)(305945005)(107886002)(38730400001)(12290500005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR03MB2380; H:CY1PR03MB2380.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2016 12:07:58.6318 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR03MB2380
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/YD8hcj-UUvzAeC2ngFGPzA23XFU>
Subject: Re: [core] Next steps for coap-tcp-tls
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 12:17:52 -0000

Doh. I just realized that my dates are off by a week. I'll blame it on the =
jet lag ;-)=20

Take two.

Week of 11/21: Holiday week
Week of 11/28: Security conference call with Hannes, Juan, and G=F6ran to i=
terate on the pull request
Week of 12/5: Present security pull request to the WG for review
12/9-12/12: Publish coap-tcp-tls-06 and start the second WGLC


-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of Brian Raymor
Sent: Friday, November 18, 2016 4:29 PM
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>; core@ietf.org WG <core@i=
etf.org>
Subject: Re: [core] Next steps for coap-tcp-tls

Hi Hannes-

In part, I asked Jaime for a second WGLC because of the limited participati=
on in the first WGLC.=20

We've scheduled a second WGLC for WebPush. I felt that it really polished t=
he draft for broader review which was noted in the IESG comments.

Measure twice. Cut once.

...Brian

-----Original Message-----
From: Hannes Tschofenig [mailto:hannes.tschofenig@gmx.net]=20
Sent: Friday, November 18, 2016 4:10 PM
To: Brian Raymor <Brian.Raymor@microsoft.com>; core@ietf.org WG <core@ietf.=
org>
Subject: Re: [core] Next steps for coap-tcp-tls

Hi Brian,

your proposal to start with RFC7252 as a starting point but I am
wondering why there is a need for a second WGLC. Normally, we just take
the feedback from the WGLC, incorporate it into the document and then
send it to the IESG (if the WGLC comments are not dramatic).

Ciao
Hannes


On 11/18/2016 08:06 AM, Brian Raymor wrote:
> =20
>=20
> As editor, my aspiration is to publish coap-tcp-tls-06 for a second WGLC
> between December 16-19th. I have editorial issues to address and a few
> minor normative issues that I'll raise on the mailing list. The main
> blocking point is https://github.com/core-wg/coap-tcp-tls/issues/11. We
> need to find a way to quickly move forward and reach rough consensus.
>=20
> =20
>=20
> Here is my plan that I've reviewed with Jaime and others:
>=20
> =20
>=20
> Following the CoRE WG meeting on Wednesday, I've had several
> conversations with people who needed to consult with their organizations
> before sharing positions on this issue. Please share details about your
> concrete positions and deployment plans/models (if possible) on the
> mailing list as soon as possible. Remember that many people did not hear
> the microphone discussions on Wednesday - so this is an opportunity to
> educate the WG. (I appreciate that we're travelling and then there is a
> holiday week for the US participants. Do the best you can.)
>=20
> =20
>=20
> My perception was that some of the discussion on Wednesday was not
> focused on CoAP+TCP and its scenarios. Please ensure that you're
> addressing this specific case rather than constrained devices in general
> or CoAP+UDP. Also, remember that we all share the same goals even if
> we're proposing different solutions - to ensure that CoAP+TCP addresses
> these guidelines (which are the best we have now):
>=20
> =20
>=20
> Security Challenges For the Internet Of  Things
> <https://www.iab.org/wp-content/IAB-uploads/2011/03/Turner.pdf> (2011):
>=20
> /It is essential that IoT protocol suites specify a *mandatory to
> implement but optional to use security solution*. This will ensure
> security is available in all implementations, but configurable to use
> when not necessary (e.g., in closed environment)./
>=20
> =20
>=20
> I'll use your information and RFC7252 as a starting point for a pull
> request. I plan to schedule a conference call with Hannes, Juan Perez,
> and G=F6ran Selander (or Francesca Palombini) late in the week of Decembe=
r
> 5th based on availability. We'll iterate on the pull request and then
> present to the broader working group for review during the week of
> December 12th.
>=20
> =20
>=20
> Thanks,
>=20
> .Brian
>=20
> =20
>=20
>=20
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>=20

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Fri Nov 18 15:14:53 2016
Return-Path: <timothy.carey@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81B151294C6 for <core@ietfa.amsl.com>; Fri, 18 Nov 2016 15:14:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.902
X-Spam-Level: 
X-Spam-Status: No, score=-6.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yfXfKtohgbLu for <core@ietfa.amsl.com>; Fri, 18 Nov 2016 15:14:50 -0800 (PST)
Received: from smtp-us.alcatel-lucent.com (us-hpatc-esg-01.alcatel-lucent.com [135.245.18.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A080D12947E for <core@ietf.org>; Fri, 18 Nov 2016 15:14:50 -0800 (PST)
Received: from us70tumx1.dmz.alcatel-lucent.com (unknown [135.245.18.13]) by Websense Email Security Gateway with ESMTPS id 58623E00780B3; Fri, 18 Nov 2016 23:14:45 +0000 (GMT)
Received: from us70tusmtp1.zam.alcatel-lucent.com (us70tusmtp1.zam.alcatel-lucent.com [135.5.2.63]) by us70tumx1.dmz.alcatel-lucent.com (GMO) with ESMTP id uAINEnPf013964 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 18 Nov 2016 23:14:49 GMT
Received: from US70UWXCHHUB02.zam.alcatel-lucent.com (us70uwxchhub02.zam.alcatel-lucent.com [135.5.2.49]) by us70tusmtp1.zam.alcatel-lucent.com (GMO) with ESMTP id uAINEmOi014873 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 18 Nov 2016 23:14:48 GMT
Received: from US70UWXCHMBA05.zam.alcatel-lucent.com ([169.254.10.74]) by US70UWXCHHUB02.zam.alcatel-lucent.com ([135.5.2.49]) with mapi id 14.03.0301.000; Fri, 18 Nov 2016 18:14:48 -0500
From: "Carey, Timothy (Nokia - US)" <timothy.carey@nokia.com>
To: Brian Raymor <Brian.Raymor@microsoft.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "core@ietf.org WG" <core@ietf.org>
Thread-Topic: [core] Next steps for coap-tcp-tls
Thread-Index: AQHSQZXSAF7y5nhxvkanLi/JORZw16DfXi0Q
Date: Fri, 18 Nov 2016 23:14:47 +0000
Message-ID: <9966516C6EB5FC4381E05BF80AA55F77012A7DAC7F@US70UWXCHMBA05.zam.alcatel-lucent.com>
References: <CY1PR03MB2380309CAFC2D3E9A485122883B00@CY1PR03MB2380.namprd03.prod.outlook.com> <e377d431-6f8f-b3af-6433-70f31e5f8c85@gmx.net> <CY1PR03MB2380D9F17EC81DBBC78721CD83B00@CY1PR03MB2380.namprd03.prod.outlook.com>
In-Reply-To: <CY1PR03MB2380D9F17EC81DBBC78721CD83B00@CY1PR03MB2380.namprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [135.5.27.17]
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/x6bOBIoUNGKtlmvIxNwR-ACfx4E>
Subject: Re: [core] Next steps for coap-tcp-tls
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Nov 2016 23:14:52 -0000

Brian,

Nokia's positions is that a "solution" must be secure.
We believe we will  see some solutions that use CoAP-TCP/TLS between the de=
vice and the server.=20
OMA is thinking the same thing as LWM2M is considered to be added as a bind=
ing in the next release.

While we believe a "solution" must be secure that doesn't mean we have to m=
andate implementation of TLS or have it be on by default.
There are good reasons in a constrained world not to burden the UE with mul=
tiple security protocols and there are other ways to secure the solution (e=
.g., rely on the bearer, e2e security like OSCOAP).

So our stance is that TLS should be recommended to be implemented and recom=
mended to be turned on.

BR,
Tim

-----Original Message-----
From: Brian Raymor [mailto:Brian.Raymor@microsoft.com]=20
Sent: Friday, November 18, 2016 4:29 PM
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>; core@ietf.org WG <core@i=
etf.org>
Subject: Re: [core] Next steps for coap-tcp-tls

Hi Hannes-

In part, I asked Jaime for a second WGLC because of the limited participati=
on in the first WGLC.=20

We've scheduled a second WGLC for WebPush. I felt that it really polished t=
he draft for broader review which was noted in the IESG comments.

Measure twice. Cut once.

...Brian

-----Original Message-----
From: Hannes Tschofenig [mailto:hannes.tschofenig@gmx.net]
Sent: Friday, November 18, 2016 4:10 PM
To: Brian Raymor <Brian.Raymor@microsoft.com>; core@ietf.org WG <core@ietf.=
org>
Subject: Re: [core] Next steps for coap-tcp-tls

Hi Brian,

your proposal to start with RFC7252 as a starting point but I am wondering =
why there is a need for a second WGLC. Normally, we just take the feedback =
from the WGLC, incorporate it into the document and then send it to the IES=
G (if the WGLC comments are not dramatic).

Ciao
Hannes


On 11/18/2016 08:06 AM, Brian Raymor wrote:
> =20
>=20
> As editor, my aspiration is to publish coap-tcp-tls-06 for a second=20
> WGLC between December 16-19th. I have editorial issues to address and=20
> a few minor normative issues that I'll raise on the mailing list. The=20
> main blocking point is=20
> https://github.com/core-wg/coap-tcp-tls/issues/11. We need to find a way =
to quickly move forward and reach rough consensus.
>=20
> =20
>=20
> Here is my plan that I've reviewed with Jaime and others:
>=20
> =20
>=20
> Following the CoRE WG meeting on Wednesday, I've had several=20
> conversations with people who needed to consult with their=20
> organizations before sharing positions on this issue. Please share=20
> details about your concrete positions and deployment plans/models (if=20
> possible) on the mailing list as soon as possible. Remember that many=20
> people did not hear the microphone discussions on Wednesday - so this=20
> is an opportunity to educate the WG. (I appreciate that we're=20
> travelling and then there is a holiday week for the US participants.=20
> Do the best you can.)
>=20
> =20
>=20
> My perception was that some of the discussion on Wednesday was not=20
> focused on CoAP+TCP and its scenarios. Please ensure that you're=20
> addressing this specific case rather than constrained devices in=20
> general or CoAP+UDP. Also, remember that we all share the same goals=20
> even if we're proposing different solutions - to ensure that CoAP+TCP=20
> addresses these guidelines (which are the best we have now):
>=20
> =20
>=20
> Security Challenges For the Internet Of  Things=20
> <https://www.iab.org/wp-content/IAB-uploads/2011/03/Turner.pdf> (2011):
>=20
> /It is essential that IoT protocol suites specify a *mandatory to=20
> implement but optional to use security solution*. This will ensure=20
> security is available in all implementations, but configurable to use=20
> when not necessary (e.g., in closed environment)./
>=20
> =20
>=20
> I'll use your information and RFC7252 as a starting point for a pull=20
> request. I plan to schedule a conference call with Hannes, Juan Perez,=20
> and G=F6ran Selander (or Francesca Palombini) late in the week of=20
> December 5th based on availability. We'll iterate on the pull request=20
> and then present to the broader working group for review during the=20
> week of December 12th.
>=20
> =20
>=20
> Thanks,
>=20
> .Brian
>=20
> =20
>=20
>=20
>=20
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core
>=20



From nobody Sat Nov 19 13:56:27 2016
Return-Path: <iotpts2016chairs@gmail.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A8791294B4 for <core@ietfa.amsl.com>; Sat, 19 Nov 2016 13:56:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level: 
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r3wsAXkeSpOm for <core@ietfa.amsl.com>; Sat, 19 Nov 2016 13:56:25 -0800 (PST)
Received: from mail-oi0-x233.google.com (mail-oi0-x233.google.com [IPv6:2607:f8b0:4003:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1040212711D for <core@ietf.org>; Sat, 19 Nov 2016 13:56:25 -0800 (PST)
Received: by mail-oi0-x233.google.com with SMTP id b126so87258409oia.2 for <core@ietf.org>; Sat, 19 Nov 2016 13:56:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:from:date:message-id:subject:to; bh=bxFvZ/6Fqy6zpvJvTRgXXpBOgr+1/8h1A8Aochrcl28=; b=L52cf7VC7XzpLoh2joClK2dCj5KqmzJxb/22Axy3kxdWpH53tD2qODRfimrc4IE4gk /z9w41N+16oH0R3TQfrBlHpyTk4+xlN7DkNWbiI4NI2OE0c4Tb9jlmtr9kJNIEERRAb1 GxI4U85B+uZSaERPolU5VEa+D8TsCPJDvoHq+l52sh9h85EZHgGWfK/dVFVsJz14UCFl DQrwNXaOUZcdGYiSbi2CEVPhE0nQxg6xBFNmC7zlXzgcodxWxEykaUhvflR803qeZ94f GY3N/2l6z52ynC2P++8Ps4TUTjWtBYDhhxpYnH4+FWfOmUftwwOuxnfTeEBRKnAMVGRn BkaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=bxFvZ/6Fqy6zpvJvTRgXXpBOgr+1/8h1A8Aochrcl28=; b=WhVUkvKZbn+vvfPBa4r08bhByoZ4FtUQ2sc6DnL/WUF9Lmx2MpWoYctIt9VwgoQLQr fgYYtBxyGyZqPFbuK5eoKHi06NM0lGYSr2ARr+HcfEnnlWegen5VVrbwUtHoIfmO9YLj yhzbwVGyyva1ZbLLAbT+uMk/0jgzPdJwIoMnhyamSvL1XqV543Xf7IyOM/fZGRLJoV0C 2yuYFSMgI/DRfEqE2vwE0BmI+h6QaZVwpXtvoFjyHtb6181gKoxefNOmOeXtBoGzSRzp pw4e8B9Gkb0uaxAph9GcJMaWH/LnK3OK5/+eJwBWa3UgOzbmJIy5riuKfs+KoZOCUjrW lv2g==
X-Gm-Message-State: AKaTC03MohdNH99Cb+KN8Lfz1uZrHqMS1AZXX59lMvMjgSx0pLfrS0q9r6eUFRgNGj/eHxi8w3Vdi1zpylcDZA==
X-Received: by 10.202.48.145 with SMTP id w139mr4052162oiw.216.1479592584262;  Sat, 19 Nov 2016 13:56:24 -0800 (PST)
MIME-Version: 1.0
Received: by 10.182.98.1 with HTTP; Sat, 19 Nov 2016 13:56:23 -0800 (PST)
From: IoTPTS Chairs <iotpts2016chairs@gmail.com>
Date: Sat, 19 Nov 2016 13:56:23 -0800
Message-ID: <CAM5kaE5JKLcw_bBq6sPoSQToHzXZgipQ_tSvXe_vb6aFDjJr5Q@mail.gmail.com>
To: core@ietf.org
Content-Type: multipart/alternative; boundary=001a113cd49a65b8ef0541ae7e97
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/5azlnHplGODYEjrwOs646-qhynY>
Subject: [core] Call For Papers - 3rd International Workshop on IoT Privacy, Trust, and Security (IoTPTS'17: April 2, 2017, Abu Dhabi, UAE)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 19 Nov 2016 21:56:26 -0000

--001a113cd49a65b8ef0541ae7e97
Content-Type: text/plain; charset=UTF-8

*CALL  FOR  PAPERS

3rd International Workshop on IoT Privacy, Trust, and Security (IoTPTS 2017)

Held in conjunction with ASIACCS on April 2, 2017, in Abu Dhabi, UAE.

Paper submission: Jan 20, 2017
Author Notification: Feb 15, 2017

The Internet of Things (IoT) is the next great technology frontier. At a
basic level, IoT refers simply to networked devices, but the IoT vision is
a complex ecosystem that ranges from cloud backend services and big-data
analytics to home, public, industrial, and wearable sensor devices and
appliances. Architectures for these systems are in the formative stages,
and now is the time to ensure privacy, trust, and security are designed
into these systems from the beginning.

We encourage submissions on all aspects of IoT privacy, trust, and security.

Topics of interest include (but are not limited) to the following areas:

Privacy and IoT data
Privacy attacks for IoT
Trust management and device discoverability for IoT
Usability of privacy and security systems in IoT
User risk perceptions and modeling for IoT
Policy Management and enforcement for IoT
Authentication and access control for users for IoT
Cryptography for IoT
Attack detection and remediation for IoT
Security architectures for IoT systems and applications

===================================
For more information, see https://sites.google.com/site/iotpts2017/

--001a113cd49a65b8ef0541ae7e97
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_quote"><div dir=3D"ltr"><div><div>=
*CALL =C2=A0FOR =C2=A0PAPERS</div><div><br></div><div>3rd International Wor=
kshop on IoT Privacy, Trust, and Security (IoTPTS 2017)</div><div><br></div=
><div>Held in conjunction with ASIACCS on April 2, 2017, in Abu Dhabi, UAE.=
</div><div><br></div><div>Paper submission: Jan 20, 2017</div><div>Author N=
otification: Feb 15, 2017</div><div><br></div><div>The Internet of Things (=
IoT) is the next great technology frontier. At a basic level, IoT refers si=
mply to networked devices, but the IoT vision is a complex ecosystem that r=
anges from cloud backend services and big-data analytics to home, public, i=
ndustrial, and wearable sensor devices and appliances. Architectures for th=
ese systems are in the formative stages, and now is the time to ensure priv=
acy, trust, and security are designed into these systems from the beginning=
.</div><div><br></div><div>We encourage submissions on all aspects of IoT p=
rivacy, trust, and security.</div><div><br></div><div>Topics of interest in=
clude (but are not limited) to the following areas:</div><div><br></div><di=
v>Privacy and IoT data</div><div>Privacy attacks for IoT</div><div>Trust ma=
nagement and device discoverability for IoT</div><div>Usability of privacy =
and security systems in IoT</div><div>User risk perceptions and modeling fo=
r IoT</div><div>Policy Management and enforcement for IoT</div><div>Authent=
ication and access control for users for IoT</div><div>Cryptography for IoT=
</div><div>Attack detection and remediation for IoT</div><div>Security arch=
itectures for IoT systems and applications</div><div><br></div><div>=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D<wbr>=3D=3D=3D=3D=3D</div><div>For more information, see <a href=
=3D"https://sites.google.com/site/iotpts2017/" target=3D"_blank">https://si=
tes.google.com/site/<wbr>iotpts2017/</a></div></div></div>
</div><br></div>

--001a113cd49a65b8ef0541ae7e97--


From nobody Mon Nov 21 04:52:46 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 023AF129615 for <core@ietfa.amsl.com>; Mon, 21 Nov 2016 04:52:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ui6DUVvnes8D for <core@ietfa.amsl.com>; Mon, 21 Nov 2016 04:52:44 -0800 (PST)
Received: from lb1-smtp-cloud3.xs4all.net (lb1-smtp-cloud3.xs4all.net [194.109.24.22]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86BE112952D for <core@ietf.org>; Mon, 21 Nov 2016 04:52:44 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.217]) by smtp-cloud3.xs4all.net with ESMTP id Acsi1u0094h15BW01csiD2; Mon, 21 Nov 2016 13:52:42 +0100
Received: from 2001:983:a264:1:8d0a:fa89:62f4:4b5e by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 21 Nov 2016 13:52:42 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 21 Nov 2016 13:52:42 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Core <core@ietf.org>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
Message-ID: <1b3f3e0b91c6b9a24171f5888a40d6d8@xs4all.nl>
X-Sender: stokcons@xs4all.nl (TS9rrXq4lvesD0MM+mFxVVn0xChCZm5N)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/gLbBIbyJ1vzsAO83yXlLQSviUq8>
Subject: [core] Comi payload discussion
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2016 12:52:46 -0000

Hi all,

In Comi, objects are represented according to the CBOR (key, value) 
pair.
When an object is accessed, the key is specified in the URI, and the 
value is transported in the payload.
For DELETE, PUT, and POST, the request contains all information about 
the object.
however, in the GET, the returned payload contains the value, and the 
key is unknown.
This is very unpleasant for debugging, because it means that the request 
and return packets must be paired before debugging can take place.

I therefore propose that the return of the GET payload contains both the 
key and the value of the object.
the disadvantage is the addition of 2-5 bytes in the payload.

Your reactions, please.

thanks,

peter

-- 
Peter van der Stok
vanderstok consultancy
mailto: consultancy@vanderstok.org
www: www.vanderstok.org
tel NL: +31(0)492474673     F: +33(0)966015248


From nobody Mon Nov 21 05:46:23 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44A2312962A for <core@ietfa.amsl.com>; Mon, 21 Nov 2016 05:46:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 52ICuSruIERH for <core@ietfa.amsl.com>; Mon, 21 Nov 2016 05:46:20 -0800 (PST)
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0097.outbound.protection.outlook.com [104.47.34.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 771D2129616 for <core@ietf.org>; Mon, 21 Nov 2016 05:46:20 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=31nEbKWvNX0ptVP6Amv9TYZsr2NGMjEp2SVUckoREIU=; b=H71ih3tbRriikLks53qYwwVjIhq64xL48zkCj3Lx8G0AZCmgBoIFiRHTnw1H3x0Os0+FtT429vSHNuLijBe91feJKAgrqjzZP8scwlzVGLj54obg07+SgbPnkYjq0OtvtPvv+YeiFP7eGU8VlGm4bx66gn3LiHXlXAHQ/l2T48M=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2307.namprd06.prod.outlook.com (10.173.19.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Mon, 21 Nov 2016 13:46:12 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0734.013; Mon, 21 Nov 2016 13:46:12 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>, Core <core@ietf.org>
Thread-Topic: [core] Comi payload discussion
Thread-Index: AQHSQ/YshUqrRqXkFU+GiJAU7dp7CaDjb+gg
Date: Mon, 21 Nov 2016 13:46:11 +0000
Message-ID: <BN6PR06MB230833F0812D2068D2F56554FEB50@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <1b3f3e0b91c6b9a24171f5888a40d6d8@xs4all.nl>
In-Reply-To: <1b3f3e0b91c6b9a24171f5888a40d6d8@xs4all.nl>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [24.225.215.88]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2307; 7:ou/mqAacVBWYm+kRMZaWEkVXRGI37x2GqUQzbQW1H4zkQTvZXfB4cv7/gh9tok4KA/IOvr2EaOuK0GcsX3wrUWjuwNvwvUcFY8ThspQhCXeDCXMdtBdXRRHg7pvdVaKKekCEBEoSxU2kH+uAS/iU/02dPvn+LHbHvoBFLl7gbFR30bl7rdcJYBt/rY9hRM8wHD8myPh3821KEFCtGVZEnCU5VuMlnAbP1guUXqTZuDtGNYqvklMqZywIoizabI6KRwPkTZwxifeM3fTw+yW+QTwCom9HdptZoMICOuXE+QLXavRs44jUczzIyeCsKmAa48Q4cTa5x9s02L4Zekm90HdDjqImeiiyH8hKKb4nYhg=
x-ms-office365-filtering-correlation-id: c467943c-9af2-42fe-0ae1-08d41214c188
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2307;
x-microsoft-antispam-prvs: <BN6PR06MB230716E9EEF80A8C1CE8B527FEB50@BN6PR06MB2307.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040307)(6060326)(6045199)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6041248)(6061324)(6072148); SRVR:BN6PR06MB2307; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2307; 
x-forefront-prvs: 01334458E5
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(13464003)(199003)(53754006)(377454003)(189002)(2900100001)(81156014)(5660300001)(2906002)(81166006)(101416001)(6116002)(8676002)(102836003)(3846002)(77096005)(92566002)(54356999)(76176999)(15974865002)(122556002)(2501003)(50986999)(86362001)(106356001)(2950100002)(87936001)(9686002)(66066001)(3660700001)(99286002)(68736007)(3280700002)(305945005)(74316002)(105586002)(7846002)(7736002)(33656002)(76576001)(107886002)(6506003)(189998001)(106116001)(97736004)(7696004)(38730400001)(8936002)(229853002)(5001770100001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2307; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2016 13:46:11.9374 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2307
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/w3VOo7t3m1FsSPFbyqU4jhxlpac>
Subject: Re: [core] Comi payload discussion
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Nov 2016 13:46:22 -0000

Hi Peter

The only way to debug a GET response is to known the GET request, its URI, =
its CoAP options.
Adding the data node identifier (SID) to the response payload is insufficie=
nt to qualify the information returned and not typical for CoAP.

See RFC 7252, section 2.2. Request/Response Model
https://tools.ietf.org/html/rfc7252#section-2.2
   GET /temperature

   2.05 Content
   "22.5 C"

Similarly in CoMI:
  GET /c/Bf4?k=3Deth0

  2.05 Content
  "Ethernet adapter"

Regards,
Michel

-----Original Message-----
From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der Stok
Sent: Monday, November 21, 2016 7:53 AM
To: Core <core@ietf.org>
Subject: [core] Comi payload discussion

Hi all,

In Comi, objects are represented according to the CBOR (key, value) pair.
When an object is accessed, the key is specified in the URI, and the value =
is transported in the payload.
For DELETE, PUT, and POST, the request contains all information about the o=
bject.
however, in the GET, the returned payload contains the value, and the key i=
s unknown.
This is very unpleasant for debugging, because it means that the request an=
d return packets must be paired before debugging can take place.

I therefore propose that the return of the GET payload contains both the ke=
y and the value of the object.
the disadvantage is the addition of 2-5 bytes in the payload.

Your reactions, please.

thanks,

peter

--
Peter van der Stok
vanderstok consultancy
mailto: consultancy@vanderstok.org
www: www.vanderstok.org
tel NL: +31(0)492474673     F: +33(0)966015248

_______________________________________________
core mailing list
core@ietf.org
https://www.ietf.org/mailman/listinfo/core


From nobody Tue Nov 22 00:29:13 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4863B12969C for <core@ietfa.amsl.com>; Tue, 22 Nov 2016 00:29:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s7qm8O0We_9N for <core@ietfa.amsl.com>; Tue, 22 Nov 2016 00:29:10 -0800 (PST)
Received: from lb3-smtp-cloud3.xs4all.net (lb3-smtp-cloud3.xs4all.net [194.109.24.30]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 503D61296CC for <core@ietf.org>; Tue, 22 Nov 2016 00:29:10 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.204]) by smtp-cloud3.xs4all.net with ESMTP id AwV81u0074QBLo201wV8Zt; Tue, 22 Nov 2016 09:29:08 +0100
Received: from 2001:983:a264:1:d39:7aed:8e68:7f8c by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Tue, 22 Nov 2016 09:29:08 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Tue, 22 Nov 2016 09:29:08 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <BN6PR06MB230833F0812D2068D2F56554FEB50@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <1b3f3e0b91c6b9a24171f5888a40d6d8@xs4all.nl> <BN6PR06MB230833F0812D2068D2F56554FEB50@BN6PR06MB2308.namprd06.prod.outlook.com>
Message-ID: <1597407ea7d5152fc9de385d7a1b484a@xs4all.nl>
X-Sender: stokcons@xs4all.nl (cBUbtsJDc1GHKypwLYCGDfBDmpInuSzN)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/TirLN0Lsh7AqkJkRJbp982r54dE>
Cc: Core <core@ietf.org>
Subject: Re: [core] Comi payload discussion
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Nov 2016 08:29:12 -0000

Hi Michel,

Indeed a very good observation, that you need more info than only the 
SID.
I like to limit the discussion to CoMI.

For example 2, the debugger knows it is a value of Bf4 and not the 
temperature.
And the analysis tool can find the enveloping container or list.

Peter

Michel Veillette schreef op 2016-11-21 14:46:
> Hi Peter
> 
> The only way to debug a GET response is to known the GET request, its
> URI, its CoAP options.
> Adding the data node identifier (SID) to the response payload is
> insufficient to qualify the information returned and not typical for
> CoAP.
> 
> See RFC 7252, section 2.2. Request/Response Model
> https://tools.ietf.org/html/rfc7252#section-2.2
>    GET /temperature
> 
>    2.05 Content
>    "22.5 C"
> 
> Similarly in CoMI:
>   GET /c/Bf4?k=eth0
> 
>   2.05 Content
>   "Ethernet adapter"
> 
> Regards,
> Michel
> 
> -----Original Message-----
> From: core [mailto:core-bounces@ietf.org] On Behalf Of peter van der 
> Stok
> Sent: Monday, November 21, 2016 7:53 AM
> To: Core <core@ietf.org>
> Subject: [core] Comi payload discussion
> 
> Hi all,
> 
> In Comi, objects are represented according to the CBOR (key, value) 
> pair.
> When an object is accessed, the key is specified in the URI, and the
> value is transported in the payload.
> For DELETE, PUT, and POST, the request contains all information about
> the object.
> however, in the GET, the returned payload contains the value, and the
> key is unknown.
> This is very unpleasant for debugging, because it means that the
> request and return packets must be paired before debugging can take
> place.
> 
> I therefore propose that the return of the GET payload contains both
> the key and the value of the object.
> the disadvantage is the addition of 2-5 bytes in the payload.
> 
> Your reactions, please.
> 
> thanks,
> 
> peter
> 
> --
> Peter van der Stok
> vanderstok consultancy
> mailto: consultancy@vanderstok.org
> www: www.vanderstok.org
> tel NL: +31(0)492474673     F: +33(0)966015248
> 
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core


From nobody Tue Nov 22 10:02:05 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7C2E129EED for <core@ietfa.amsl.com>; Tue, 22 Nov 2016 10:01:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lmoiZCbC2OaW for <core@ietfa.amsl.com>; Tue, 22 Nov 2016 10:01:58 -0800 (PST)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0138.outbound.protection.outlook.com [104.47.40.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B0E0129D8B for <core@ietf.org>; Tue, 22 Nov 2016 09:59:14 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CAY3xgUTarSHGwWmXwlSevshFxaDN3H2lo/tnyz+DgU=; b=ZsH3Pjxd34v32eaKwEeKzKapjkg/4T+rwuVSZNylxAreMWkq8P3uoNSsEpCcmrmrN5V79wAh97W8Z1AA/Qe9L6f0sChriBmhfxigcTnJ6zoD0BDclz6UqCARI3KCop41p3CnpP6hzfjNpG47Md0Neao7U5LJm3sGSu+KWfOiQLo=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2307.namprd06.prod.outlook.com (10.173.19.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Tue, 22 Nov 2016 17:59:13 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0734.014; Tue, 22 Nov 2016 17:59:12 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>
Thread-Topic: [core] yang cbor comments
Thread-Index: AQHSQLpL47EAr//15UCwVCri7zu5mqDdWvVAgACFSgCAB2rIMA==
Date: Tue, 22 Nov 2016 17:59:12 +0000
Message-ID: <BN6PR06MB230826157F0BE9FDBCFC5C47FEB40@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <fac7eafba28cb9bd1098074d0542cd49@xs4all.nl>
In-Reply-To: <fac7eafba28cb9bd1098074d0542cd49@xs4all.nl>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2307; 7:dJitdfgV5FzeuqBqOBSNuZ6nYxEjGuyiLS0HVf2HlqFZxUGmri4da0P5if/NhWrkbKYkdmBcvqHZbuEJL0sOMjw/Gc04C3hiGAJucMTxRQy8D7hM7tPTJd5rXUjRZVlI6ey7gTwRQsyrTQ7Vn9vpBkPS7MRmUwCAyC46sDwG0NYSHCFB0zB1Bl/oL1zs8wwxWs7M/zW/0sZNgE4nUG9B8yREyAb8OmkxIaWX4PPnanNgXOrqpeikr7rdZpwUlMLvXe9ukSOgeFUAeOZdKygj0xat8fuQ1e1FSs7K6wdHMwEZN4c6drjJhWxm3OPDHGMA0zT2gIiGJgvtGrknueVV7P5ot1zKvzREHJi9w2CYl+A=
x-ms-office365-filtering-correlation-id: 9a6d5a37-83d6-4a79-f465-08d413014465
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2307;
x-microsoft-antispam-prvs: <BN6PR06MB23075C0C58025EA480F3523BFEB40@BN6PR06MB2307.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(158342451672863)(166708455590820)(150554046322364); 
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6045199)(6040307)(6060326)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6041248)(6061324)(6042181); SRVR:BN6PR06MB2307; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2307; 
x-forefront-prvs: 0134AD334F
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(13464003)(199003)(377454003)(189002)(106356001)(76576001)(2900100001)(7846002)(74316002)(229853002)(5640700001)(7736002)(305945005)(105586002)(1730700003)(33656002)(77096005)(66066001)(8676002)(106116001)(38730400001)(110136003)(7696004)(92566002)(2501003)(97736004)(189998001)(99286002)(6506003)(5660300001)(6916009)(68736007)(4326007)(3846002)(9686002)(2950100002)(81166006)(81156014)(8936002)(50986999)(54356999)(15395725005)(76176999)(3280700002)(2351001)(2906002)(101416001)(86362001)(122556002)(102836003)(6116002)(3660700001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2307; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2016 17:59:12.7748 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2307
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/FFpfFafnxwEi5I0V5UGzrvkO-P8>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Nov 2016 18:02:00 -0000
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From nobody Tue Nov 22 13:30:31 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9171A129A2C for <core@ietfa.amsl.com>; Tue, 22 Nov 2016 13:30:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level: 
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j0ILeLOwSr_T for <core@ietfa.amsl.com>; Tue, 22 Nov 2016 13:30:26 -0800 (PST)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0117.outbound.protection.outlook.com [104.47.42.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1355129A0B for <core@ietf.org>; Tue, 22 Nov 2016 13:30:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qyah1Zhrld6g8FtgDgdmZ71i70v/cupyaN1ARuE3Qcs=; b=SXw18T5wJ4HQ9VeMMS+HeT0wdvEVTwp7JiCctiasGwJClZJClHqlhnViz6mtZVxmPZqekphec21dcDQLzrZRGCw7Ot9Rt/bPmlAT5SUSgBHGj+iLsQjNYpppqIXmyA3ygs0+6maJn+LQ1sIEwNxbWEMIycFigpMjhLDcAfYlGCk=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.734.8; Tue, 22 Nov 2016 21:30:19 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0734.014; Tue, 22 Nov 2016 21:30:19 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: Carsten Bormann <cabo@tzi.org>
Thread-Topic: [core] yang cbor comments
Thread-Index: AQHSQLpL47EAr//15UCwVCri7zu5mqDdWvVAgABM/gCAAADQgIAAByCAgAfZdlA=
Date: Tue, 22 Nov 2016 21:30:19 +0000
Message-ID: <BN6PR06MB2308A7C62619230033047D45FEB40@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <79A729D4-75E6-4DAC-BE05-CE7CF3F2C907@tzi.org> <4F62E1C7-C519-4A23-B037-8A8376D1F7FB@tzi.org> <C6E3B285-A8B3-4B22-800C-B4819F1FD5B1@tzi.org>
In-Reply-To: <C6E3B285-A8B3-4B22-800C-B4819F1FD5B1@tzi.org>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2308; 7:MnN2rZRMW66uieOWQq1a7Z7vgveQvrtviJzvtKeFUVco3LtMf3JLg4VmCWoaIOAbEWTcKholvFbuiZ9O95AgT7FlW2n/IfRXwAtx5D8TIRtPDmYwqmrc1OwWGedGQEKHrb76mfK29/tQjtusCLJ3MaK0HHASUPUzczPyNCDCRO/mj/36lvFidmK8s8i2ZE8PSs0+zC7rgd5Pa4oX/yqQ4pw4NTw0IxN8/wLukASPEpsuBtDnA79Eh/dUacuRdJJmy2pUSgod1d+lDbEZaDJoYC5UPmqI98VypC9q7icX06MUyssZOkti7EbIwYwDhT1INLsqoUCuboy9Qro6GnrEZ8UCDA4wXIe3qZG5Jwi2hB0=
x-ms-office365-filtering-correlation-id: 33122a58-7435-4dc9-1f55-08d4131ec21c
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2308;
x-microsoft-antispam-prvs: <BN6PR06MB2308BB5E63A67FA20AD639C8FEB40@BN6PR06MB2308.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6045199)(6040307)(6060326)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6041248)(6061324)(6042181); SRVR:BN6PR06MB2308; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2308; 
x-forefront-prvs: 0134AD334F
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(13464003)(189002)(199003)(377454003)(92566002)(2900100001)(33656002)(5660300001)(189998001)(790700001)(76576001)(122556002)(3846002)(38730400001)(6116002)(2950100002)(102836003)(101416001)(6916009)(8676002)(7696004)(105586002)(229853002)(99286002)(81156014)(6506003)(106356001)(54356999)(106116001)(76176999)(50986999)(97736004)(77096005)(81166006)(3660700001)(3280700002)(74316002)(110136003)(8936002)(7846002)(7736002)(93886004)(68736007)(4326007)(66066001)(86362001)(2906002)(9686002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2308; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  MX:1; A:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BN6PR06MB2308A7C62619230033047D45FEB40BN6PR06MB2308namp_"
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2016 21:30:19.1210 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2308
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/E0vZTZ_PSjcw1g3mis3hvtvq7eU>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Nov 2016 21:30:29 -0000

--_000_BN6PR06MB2308A7C62619230033047D45FEB40BN6PR06MB2308namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_BN6PR06MB2308A7C62619230033047D45FEB40BN6PR06MB2308namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_BN6PR06MB2308A7C62619230033047D45FEB40BN6PR06MB2308namp_--


From nobody Wed Nov 23 06:35:16 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E33E3129E0A for <core@ietfa.amsl.com>; Wed, 23 Nov 2016 06:35:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id udqlgM31KvCo for <core@ietfa.amsl.com>; Wed, 23 Nov 2016 06:35:12 -0800 (PST)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F00B2127077 for <core@ietf.org>; Wed, 23 Nov 2016 06:35:11 -0800 (PST)
X-AuditID: c1b4fb3a-d644398000007918-ac-5835a91e3146
Received: from ESESSHC022.ericsson.se (Unknown_Domain [153.88.183.84]) by  (Symantec Mail Security) with SMTP id 0D.48.31000.E19A5385; Wed, 23 Nov 2016 15:35:10 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.128]) by ESESSHC022.ericsson.se ([153.88.183.84]) with mapi id 14.03.0319.002; Wed, 23 Nov 2016 15:34:44 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Jim Schaad <ietf@augustcellars.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: End-to-end integrity protection only
Thread-Index: AQHSRZa7M0FmpnyXeUqbDiFDkK3+8A==
Date: Wed, 23 Nov 2016 14:34:43 +0000
Message-ID: <D452168F.6CD6E%goran.selander@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.148]
Content-Type: text/plain; charset="utf-8"
Content-ID: <692F2CF9089BC14B84497694E1770C1B@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpjkeLIzCtJLcpLzFFi42KZGbE9RFdupWmEwbxlkhb73q5ntlg9/Tub A5PHxjnT2TyWLPnJFMAUxWWTkpqTWZZapG+XwJXRs+I8S8Ee6YpdZw8yNzA+kOpi5OSQEDCR uPR1LWsXIxeHkMA6RommRYvYIJwljBITNy5kBaliE3CReNDwiAnEFhHwkJjdtJIRxGYWsJK4 cqKfBcQWFtCV+PPkFSNEjZHEgXV32CFsPYmbz1vBalgEVCVmX5/FBmLzClhIbDy8H8xmFBCT +H5qDRPETHGJW0/mM0FcJyCxZM95ZghbVOLl439A93BwiALNXHM/DCKsJNG45AlYmFlAU2L9 Ln2IKdYSp1uOQk1UlJjS/ZAdYqugxMmZT1gmMIrOQrJsFkL3LCTds5B0z0LSvYCRdRWjaHFq cXFuupGRXmpRZnJxcX6eXl5qySZGYOwc3PLbagfjweeOhxgFOBiVeHgLYk0ihFgTy4orcw8x SnAwK4nwLlpmGiHEm5JYWZValB9fVJqTWnyIUZqDRUmc12zl/XAhgfTEktTs1NSC1CKYLBMH p1QDY+Zis5P2mbeWPUifKTyzUDq83tssMXFV8IOL/GJPV16x3v9j8ZrC+ie6MT0xLXoNp9r+ 2epebPbl/uOz1+6I5J3jhmnTrW4tYM+u8JV5xt+oO5v34k/dfA3BTbz9RgnfYjuffePZweU4 TXC/iklVVvSn+x+b8y6GCf4qWrH+6uwlaT5FNy/9UmIpzkg01GIuKk4EAN2lB5WZAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/7kiDjIkaXUfNTbqBb4159F1xm5M>
Subject: [core] End-to-end integrity protection only
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Nov 2016 14:35:14 -0000
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From nobody Wed Nov 23 12:21:23 2016
Return-Path: <ietf@augustcellars.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD1A41296D8 for <core@ietfa.amsl.com>; Wed, 23 Nov 2016 12:21:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.398
X-Spam-Level: 
X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fBPr26s8wkOR for <core@ietfa.amsl.com>; Wed, 23 Nov 2016 12:21:20 -0800 (PST)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5D0D12945A for <core@ietf.org>; Wed, 23 Nov 2016 12:21:19 -0800 (PST)
Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 23 Nov 2016 12:38:47 -0800
From: Jim Schaad <ietf@augustcellars.com>
To: =?utf-8?Q?'G=C3=B6ran_Selander'?= <goran.selander@ericsson.com>, <core@ietf.org>
References: <D452168F.6CD6E%goran.selander@ericsson.com>
In-Reply-To: <D452168F.6CD6E%goran.selander@ericsson.com>
Date: Wed, 23 Nov 2016 12:21:05 -0800
Message-ID: <015001d245c7$1ff36920$5fda3b60$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQEVIDyrcX/bf+sOeRR0agcNqguEHaJhR7ZQ
Content-Language: en-us
X-Originating-IP: [24.21.96.37]
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/gOfyhs4_M-3DWYIeKhIanCn5nWk>
Subject: Re: [core] End-to-end integrity protection only
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Nov 2016 20:21:22 -0000

> -----Original Message-----
> From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com]
> Sent: Wednesday, November 23, 2016 6:35 AM
> To: Jim Schaad <ietf@augustcellars.com>; core@ietf.org
> Cc: Francesca Palombini <francesca.palombini@ericsson.com>
> Subject: End-to-end integrity protection only
>=20
> Hi Jim,
>=20
> Referring to your comment in the CoRE f2f on integrity protection only =
on
> application layer, i.e. the use of a MAC algorithm instead of an AEAD =
as traffic
> protection in OSCOAP.

I would not limit it to MAC, a signature would also be equally effective =
in terms of dealing with this issue.

>=20
> If I understand right, the idea is that an intermediate node should be =
able to read
> but not change payload which is integrity protected between endpoints.

That was what was presented at the Berlin F2F.

>=20
> First of all, as was similarly discussed in COSE, in order for the =
intermediary to
> depend upon the payload it would need to verify its integrity (a MAC), =
and if it
> has the key to do so, that key could with negligible performance =
penalty be used
> to encrypt the payload. So if we are speaking application layer =
protection of
> message between endpoint and proxy, then I don=E2=80=99t see the need =
for a MAC.

The use case presented is that the intermediary can read, but not verify =
the integrity, of the payload.  That is, it wants to be able to monitor =
the content being sent back but does not care if it occasionally gets a =
bad answer.  Note the use case is not mine.

>=20
> Another use case previously discussed is hop-by-hop endpoint-proxy
> communication protected with (D)TLS and endpoint-endpoint =
communication
> protected by OSCOAP. In this case the proxy would verify the DTLS =
record layer
> message. But in order to read out the application layer payload, the =
proxy would
> need to parse the OSCOAP message, without being able to verify the =
COSE
> object, neither the payload nor the options or header, since by =
assumption only
> the endpoints share that key. But the point with using OSCOAP is =
exactly that it
> protects not only payload but essentially all options and headers that =
are not
> part of CoAP message layer, that it is possible to verify that request =
and
> response belong together etc.. Nothing of this would available to the =
proxy.
>=20
> Additionally, the use of duplicate CoAP options for proxy and endpoint
> respectively, as currently specified will not work with integrity =
protection only,
> since only one set of options are available. So, e.g. the use of =
Blockwise as is
> currently specified for use both end-to-end and hop-by-hop would not =
work.

I don't follow this.  If it was true, then it would not work for =
encryption either.  Duplicating the options inside of the payload should =
be just fine for either case.  If it is integrity only protected, then =
the ones inside the payload are ignored by the proxy just as is done =
with encryption.  Additionally, one could place some of the attributes =
in the external application data and protect them in that manner even if =
one did not duplicate them.

>=20
>=20
> While DTLS and OSCOAP can be combined for additional protection of the =
few
> header fields which are not already encrypted, I think that the use =
case discussed
> here where security on different layers is used for protecting one and =
the same
> payload should be addressed with OSCON or even COSE directly over =
DTLS,
> rather than OSCOAP over DTLS. So, using the OSCON format or other =
simple
> COSE wrapping of payload and potentially metadata, this can be more =
easily
> parsed by an intermediate node for this use case.

Using just OSCON does not protect headers which I think is going to be =
of importance.  One will want to protect the Uri-Port and Uri-Path =
options for a PUT. =20

Jim

> Alternatively payload protection hop-by-hop and end-to-end could be =
entirely
> solved on application layer. This would actually be a use case for a =
counter-
> MAC.
>=20
> Does it make sense?
>=20
>=20
> G=C3=B6ran



From nobody Thu Nov 24 00:12:23 2016
Return-Path: <weigengyu@bupt.edu.cn>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C98591296B5 for <core@ietfa.amsl.com>; Thu, 24 Nov 2016 00:12:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.259
X-Spam-Level: 
X-Spam-Status: No, score=-0.259 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001, STOX_REPLY_TYPE=0.439] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QO5fJuWUZZlo for <core@ietfa.amsl.com>; Thu, 24 Nov 2016 00:12:19 -0800 (PST)
Received: from mx1.bupt.edu.cn (mx1.bupt.edu.cn [211.68.68.2]) by ietfa.amsl.com (Postfix) with ESMTP id 778BD1294EB for <core@ietf.org>; Thu, 24 Nov 2016 00:12:18 -0800 (PST)
Received: from WeiGengyuPC (unknown [221.219.56.78]) by mx1.bupt.edu.cn (AnyMacro(G7)) with ESMTPA id 1416E19F404; Thu, 24 Nov 2016 16:12:15 +0800 (HKT)
Message-ID: <44FAF50836AF40D5BB631F8778957841@WeiGengyuPC>
From: "weigengyu" <weigengyu@bupt.edu.cn>
To: "Carsten Bormann" <cabo@tzi.org>
References: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net> <D451B9B7.6CB6D%goran.selander@ericsson.com> <D8D94104B39943488598F79C6AD1C829@WeiGengyuPC> <EE120603-17BE-4709-94DA-3B878232BEDE@tzi.org>
In-Reply-To: <EE120603-17BE-4709-94DA-3B878232BEDE@tzi.org>
Date: Thu, 24 Nov 2016 16:12:13 +0800
Organization: BUPT
MIME-Version: 1.0
Content-Type: text/plain; format=flowed; charset="utf-8"; reply-type=original
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
Importance: Normal
X-Mailer: Microsoft Windows Live Mail 16.4.3528.331
X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/qp6hwn1tjgeQoLBcgbDEXQgvwRo>
Cc: core@ietf.org
Subject: Re: [core] DTLS over CoAP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Nov 2016 08:12:21 -0000

Hiï¼Œ

>> Indeed â€” that was the original motivation â€” getting rid of DTLS 
>> retransmissions by using the much better behaved CoAP retransmissions 
>> instead.
>> Only then did we notice that this makes a nice end-to-end key agreement 
>> protocol if there is a cipher suite that matches your security 
>> requirements.

When considering DTLS over CoAP, another question is why not to have TLS 
over CoAP instead.

CoAP is a reliable protocol and TLS is designed to run over a reliable 
protocol which is TCP as default.
So, having TLS over CoAP seems to be rational.

I wonder that TLS may needs modifing less than DTLS if comparing TLS over 
CoAP than DTLS over CoAP.

>>GÃ¶ran: I mentioned this as a reaction to Hannesâ€™ idea that we should use 
>>TLS at the application layer.  We still need OSCOAP to actually replace 
>>the record layer (and provide semantics appropriate to end-to-end 
>>security).  And no, I still donâ€™t want to be forced to add transport 
>>layer security when application layer security is what my security 
>>objectives actually require.

The OSCOAP may be required if TLS over CoAP and CoAP connection is not 
end-to-end.


Regards,

Gengyu WEI
Network Technology Center
School of Computer
Beijing University of Posts and Telecommunications
-----åŽŸå§‹é‚®ä»¶----- 
From: Carsten Bormann
Sent: Wednesday, November 16, 2016 4:26 PM
To: weigengyu
Cc: GÃ¶ran Selander ; Hannes Tschofenig ; core@ietf.org
Subject: Re: [core] DTLS over CoAP

On 16 Nov 2016, at 16:21, weigengyu <weigengyu@bupt.edu.cn> wrote:
>
> It needs to point out that DTLS would work better on some reliable 
> datagram transport facilities.
> So, "DTLS over CoAP" is much like that.
> But, we also think that DTLS needs optimizing its handshake efficiencies, 
> retransmission mechanism, and ets.


GÃ¶ran: I mentioned this as a reaction to Hannesâ€™ idea that we should use 
TLS at the application layer.  We still need OSCOAP to actually replace the 
record layer (and provide semantics appropriate to end-to-end security). 
And no, I still donâ€™t want to be forced to add transport layer security 
when application layer security is what my security objectives actually 
require.

GrÃ¼ÃŸe, Carsten


From nobody Thu Nov 24 01:36:01 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 942B2129F13 for <core@ietfa.amsl.com>; Thu, 24 Nov 2016 01:35:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e0FhnQOFebQh for <core@ietfa.amsl.com>; Thu, 24 Nov 2016 01:35:57 -0800 (PST)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C012129F11 for <core@ietf.org>; Thu, 24 Nov 2016 01:35:57 -0800 (PST)
X-AuditID: c1b4fb25-ec9d598000007ee2-41-5836b47b8c23
Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.183.45]) by  (Symantec Mail Security) with SMTP id 71.0D.32482.B74B6385; Thu, 24 Nov 2016 10:35:55 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.128]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0319.002; Thu, 24 Nov 2016 10:35:55 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Jim Schaad <ietf@augustcellars.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: End-to-end integrity protection only
Thread-Index: AQHSRZa7M0FmpnyXeUqbDiFDkK3+8KDm8kqAgADu14A=
Date: Thu, 24 Nov 2016 09:35:54 +0000
Message-ID: <D45BCA23.6D541%goran.selander@ericsson.com>
References: <D452168F.6CD6E%goran.selander@ericsson.com> <015001d245c7$1ff36920$5fda3b60$@augustcellars.com>
In-Reply-To: <015001d245c7$1ff36920$5fda3b60$@augustcellars.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.154]
Content-Type: text/plain; charset="utf-8"
Content-ID: <815E667CA899034BB47429F1109CC650@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRmVeSWpSXmKPExsUyM2K7rm71FrMIg3sT9C32vV3PbLF6+nc2 ByaPjXOms3ksWfKTKYApissmJTUnsyy1SN8ugSvjdNtCtoIV9hXn/55mbWC8YdvFyMkhIWAi sar5OHsXIxeHkMA6RomV169DOUsYJX4vnc4CUsUm4CLxoOERE4gtIuAhMbtpJSOIzSxgJXHl RD9YjbCAocSRnfdZIWqMJA6su8MOYVtJPLg7F6yXRUBV4tOCC2C9vAIWEouObgXrFRLIk7g/ /SxYPaeAg8TiK1PYQGxGATGJ76fWMEHsEpe49WQ+E8TVAhJL9pxnhrBFJV4+/ge0l4NDVEBP Ys39MIiwksSi25+ZQMLMApoS63fpQ0yxlvh4eio7hK0oMaX7ITvENYISJ2c+YZnAKD4LybJZ CN2zkHTPQtI9C0n3AkbWVYyixanFSbnpRsZ6qUWZycXF+Xl6eaklmxiBsXZwy2/VHYyX3zge YhTgYFTi4f2wzjRCiDWxrLgy9xCjBAezkgjvgU1mEUK8KYmVValF+fFFpTmpxYcYpTlYlMR5 zVbeDxcSSE8sSc1OTS1ILYLJMnFwSjUwZkY8OpAWuDrjX/zsV3uvsry93OLxbmXY2YrveRZO t5rb3CbxHW7ZXbWCWVP7FGPulXIDN08vAc1l34w5rbx8bQ9Wx0xw2n0qjOnSQfXE+3yczzTW FOmdMnx5muflO4fiWQoHapuXevu8YgivOTZX0WpRMMsWJ5cnl/Zq+lws9vr93/TnimPhSizF GYmGWsxFxYkA/wiT7LECAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/BV7rFgVXAUq5o4yEsf8TDQI18u8>
Subject: Re: [core] End-to-end integrity protection only
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Nov 2016 09:36:00 -0000
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==


From nobody Thu Nov 24 05:37:27 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC41C129611 for <core@ietfa.amsl.com>; Thu, 24 Nov 2016 05:37:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.098
X-Spam-Level: 
X-Spam-Status: No, score=-4.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vq2FVhY3shDK for <core@ietfa.amsl.com>; Thu, 24 Nov 2016 05:37:25 -0800 (PST)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF33E1299A0 for <core@ietf.org>; Thu, 24 Nov 2016 05:37:24 -0800 (PST)
Received: from [172.16.254.118] ([80.92.114.246]) by mail.gmx.com (mrgmx103 [212.227.17.168]) with ESMTPSA (Nemesis) id 0MbOrg-1cQKdI2lZU-00Ini5; Thu, 24 Nov 2016 14:37:04 +0100
To: weigengyu <weigengyu@bupt.edu.cn>, Carsten Bormann <cabo@tzi.org>
References: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net> <D451B9B7.6CB6D%goran.selander@ericsson.com> <D8D94104B39943488598F79C6AD1C829@WeiGengyuPC> <EE120603-17BE-4709-94DA-3B878232BEDE@tzi.org> <44FAF50836AF40D5BB631F8778957841@WeiGengyuPC>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <be6e198f-087d-de70-84d0-eac5e9705ec0@gmx.net>
Date: Thu, 24 Nov 2016 14:36:57 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <44FAF50836AF40D5BB631F8778957841@WeiGengyuPC>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="LgIhlbRJ8oPGpHkfdj1q81cmuR57oFHUu"
X-Provags-ID: V03:K0:LyZtsHIHPtwhfo6VitFOCoWfJL+44SKNNrRaoZfUNTWvqvTARBk CNmyQqFvYfMdOL3xTTbOxs1Hz4BPnf2zz7hWz1lpdnAxaPnajmX9GJQKbNcm4qqDArLd8an EtLovz79WwkLRrENegDnEmpiABfrnbPiIrCogbLwS/h4yLWw1iSrPQi+hdR9Cz3UaDpFcDV ZyOsQyGuC4go/N8i4wsxw==
X-UI-Out-Filterresults: notjunk:1;V01:K0:QN8+UzV2Wa0=:O4WbzlK7Kw3868IFCEaZpb jgna8CAkpOP0MhN9qvGdDikyXVcqXlGdBs1tCgtX6nV433rolLEPwOUhtXOt5YrdllU6a6jjI FFQDkwwj0pASmmxLvnCi6WlrVoBWRr5ATejYLjzEDAy2H8O6BXf2iTaHVVAGIZflKnEhu/GMl 9CC3h9juHKSOGVHxcB5mP73iiebbtdoFCZBV47zFNtMaCvRPDEAVl1t4kkTh68wsRQzqs8Dfh pCih6KNdZp9GFLKXN6sL4yWLMDhSsKKkKjmzmPW2DMauV8Z24HAOenkS69SlWidk/eGdtm6OF Ew2oZPJMtGOqEuSmaR6L4e3ZNxjeVQbUXqFKL8bzGMKsWhDSfy5R7jYMDlx16FvG2AsTIuRc7 vLmOM0twMzHU9nnK9j2NwcOCpB8mJDfqBOgXCmN44b88KyeLUHSmraiJW9B5XgY87SO78T9uk tTMbe0HQgYtM+DMuu5ZfsVKi1oSoXkkZ9aWgL/NWKD3WOBZtzFucSRHNJehGlEDrKfPWI/ExH GJoAHi1rr6zbVHMSHyEGtB6Xu8HVF+QT8AIytHewV3Ca9a7v1cnEm+94WRxzob5G6z263SWkj 4qEIbJGJUNj7Npl4+IxgWIODDAtb5OnMhOJdtPzlon6Fo3ksKrPkh6M4RFlmk8tT+3bhnL1Hd jV+LGhCqFx1KI6IFCavJMo/Y45QKmXIZ+2gSFyoj6OJvMQvbNFi/Sewzg5NFKkRfIpH84bAqp BBlOLySjyhRI06IQF4QXWmJdaRYhLhF7TZtnSQpCi3qrKVmvnhjP2QqKPMs=
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Q5FYNmHmUhdyWLtOQomJCDX6ma4>
Cc: core@ietf.org
Subject: Re: [core] DTLS over CoAP
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Nov 2016 13:37:27 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--LgIhlbRJ8oPGpHkfdj1q81cmuR57oFHUu
Content-Type: multipart/mixed; boundary="FMsjliME251tAVeRDlJDaTnLUWtjHcrUs";
 protected-headers="v1"
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
To: weigengyu <weigengyu@bupt.edu.cn>, Carsten Bormann <cabo@tzi.org>
Cc: =?UTF-8?Q?G=c3=b6ran_Selander?= <goran.selander@ericsson.com>,
 core@ietf.org
Message-ID: <be6e198f-087d-de70-84d0-eac5e9705ec0@gmx.net>
Subject: Re: [core] DTLS over CoAP
References: <0877a32a-3363-c86b-6cbb-a5c7db798c2c@gmx.net>
 <D451B9B7.6CB6D%goran.selander@ericsson.com>
 <D8D94104B39943488598F79C6AD1C829@WeiGengyuPC>
 <EE120603-17BE-4709-94DA-3B878232BEDE@tzi.org>
 <44FAF50836AF40D5BB631F8778957841@WeiGengyuPC>
In-Reply-To: <44FAF50836AF40D5BB631F8778957841@WeiGengyuPC>

--FMsjliME251tAVeRDlJDaTnLUWtjHcrUs
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

You are correct in your observation that TLS may due the job when the
underlying application protocol already provides reliable transmission.

On 11/24/2016 09:12 AM, weigengyu wrote:
> CoAP is a reliable protocol and TLS is designed to run over a reliable
> protocol which is TCP as default.
> So, having TLS over CoAP seems to be rational.
>=20
> I wonder that TLS may needs modifing less than DTLS if comparing TLS
> over CoAP than DTLS over CoAP.


--FMsjliME251tAVeRDlJDaTnLUWtjHcrUs--

--LgIhlbRJ8oPGpHkfdj1q81cmuR57oFHUu
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJYNuz6AAoJEGhJURNOOiAtEK0H/it4Hvaor604MjdphLMl6m4U
LWO5qE4T5CxugXJ3XtqGLOKv+goDohqbJERm9xuc8s7W6QoQxEBu3yw22VswC6US
Rh+La1svO98ac6/ofCLFNFwCplrDiTNyte6NJHcn1PXF5rOwYLdhX5pIyCFvhCwq
IgGYgsRK632RGGNFB092BuV6Z7AvpRnpx7UzvpwkTuIAoGW9g07ldlRIsgOTmXuK
li3JMTdb8YjDgGHMx08HAQ9A7WqntESIbKQeJvRP8lYsAMBxZiV4vJfPF21iC6Df
mkT/WyL3vuUGdXB6iJ2TgPet2Q4MZQ98Acnze5Q27BBOPzX0E0BE2h+gD56Jy6I=
=eQdh
-----END PGP SIGNATURE-----

--LgIhlbRJ8oPGpHkfdj1q81cmuR57oFHUu--


From nobody Mon Nov 28 09:34:10 2016
Return-Path: <internet-drafts@ietf.org>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 084D5129F69; Mon, 28 Nov 2016 09:34:06 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.38.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <148035444603.5386.435381283293769937.idtracker@ietfa.amsl.com>
Date: Mon, 28 Nov 2016 09:34:06 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/Jv597v8onLImmlnPvtAnCv7QSeo>
Cc: core@ietf.org
Subject: [core] I-D Action: draft-ietf-core-http-mapping-17.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2016 17:34:06 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Constrained RESTful Environments of the IETF.

        Title           : Guidelines for HTTP-to-CoAP Mapping Implementations
        Authors         : Angelo P. Castellani
                          Salvatore Loreto
                          Akbar Rahman
                          Thomas Fossati
                          Esko Dijk
	Filename        : draft-ietf-core-http-mapping-17.txt
	Pages           : 43
	Date            : 2016-11-28

Abstract:
   This document provides reference information for implementing a
   cross-protocol network proxy that performs translation from the HTTP
   protocol to CoAP (Constrained Application Protocol).  This will
   enable an HTTP client to access resources on a CoAP server through
   the proxy.  This document describes how an HTTP request is mapped to
   a CoAP request, and then how a CoAP response is mapped back to an
   HTTP response.  This includes guidelines for status code, URI, and
   media type mappings, as well as additional interworking advice.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/

There's also a htmlized version available at:
https://tools.ietf.org/html/draft-ietf-core-http-mapping-17

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-core-http-mapping-17


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Mon Nov 28 09:40:17 2016
Return-Path: <thomas.fossati@nokia.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66E25129F76; Mon, 28 Nov 2016 09:40:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.9
X-Spam-Level: 
X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3SADLTMiwysU; Mon, 28 Nov 2016 09:40:08 -0800 (PST)
Received: from smtp-fr.alcatel-lucent.com (fr-hpida-esg-02.alcatel-lucent.com [135.245.210.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E49B129EAB; Mon, 28 Nov 2016 09:40:07 -0800 (PST)
Received: from fr712umx3.dmz.alcatel-lucent.com (unknown [135.245.210.42]) by Websense Email Security Gateway with ESMTPS id C71D6EF7AD567; Mon, 28 Nov 2016 17:40:01 +0000 (GMT)
Received: from fr711usmtp1.zeu.alcatel-lucent.com (fr711usmtp1.zeu.alcatel-lucent.com [135.239.2.122]) by fr712umx3.dmz.alcatel-lucent.com (GMO-o) with ESMTP id uASHe3Fv022296 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 28 Nov 2016 17:40:04 GMT
Received: from FR712WXCHHUB03.zeu.alcatel-lucent.com (fr712wxchhub03.zeu.alcatel-lucent.com [135.239.2.74]) by fr711usmtp1.zeu.alcatel-lucent.com (GMO) with ESMTP id uASHe2dU030625 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 28 Nov 2016 17:40:02 GMT
Received: from FR711WXCHMBA08.zeu.alcatel-lucent.com ([169.254.4.191]) by FR712WXCHHUB03.zeu.alcatel-lucent.com ([135.239.2.74]) with mapi id 14.03.0301.000; Mon, 28 Nov 2016 18:40:02 +0100
From: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] I-D Action: draft-ietf-core-http-mapping-17.txt
Thread-Index: AQHSSZ5yQWheox8CbkSzeCNa0RoAnw==
Date: Mon, 28 Nov 2016 17:40:02 +0000
Message-ID: <D4621B41.76DBB%thomas.fossati@alcatel-lucent.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.7.0.161029
x-originating-ip: [135.239.27.38]
Content-Type: multipart/alternative; boundary="_000_D4621B4176DBBthomasfossatialcatellucentcom_"
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/UVOuA2ur_a6gPxQPfT3Pzo-l5cg>
Cc: Ben Campbell <ben@nostrum.com>, The IESG <iesg@ietf.org>
Subject: Re: [core] I-D Action: draft-ietf-core-http-mapping-17.txt
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2016 17:40:10 -0000

--_000_D4621B4176DBBthomasfossatialcatellucentcom_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

Hi all,

We have just uploaded http-mapping-17.

This version should close all open DISCUSS, i.e.: Stephens' [1] and Ben's [=
2].

In particular, the conversation around the latter point ended in Seoul with=
 the decision of the working group to move the document from Informational =
to PS [3].

Hopefully Stephen and Ben are satisfied with the outcome of this pretty lon=
g but important discussion and we can move forward =97 IIUC, re-issuing IET=
F LC on the document?

Cheers, Thomas (on behalf of the draft editors).

[1] https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/ballot/#s=
tephen-farrell
[2] https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/ballot/#b=
en-campbell
[3] http://etherpad.tools.ietf.org:9000/p/notes-ietf-97-core

--_000_D4621B4176DBBthomasfossatialcatellucentcom_
Content-Type: text/html; charset="Windows-1252"
Content-ID: <4B4E542D3525FB41ACBF60BB992CF679@exchange.lucent.com>
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1=
252">
</head>
<body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin=
e-break: after-white-space; font-family: Calibri, sans-serif; font-size: 14=
px; color: rgb(0, 0, 0);">
<div>
<div>Hi all,</div>
<div><br>
</div>
<div>We have just uploaded http-mapping-17.</div>
<div><br>
</div>
<div>This version should close all open DISCUSS, i.e.: Stephens' [1] and Be=
n's [2].</div>
<div><br>
</div>
<div>In particular, the conversation around the latter point ended in Seoul=
 with the decision of the working group to move the document from Informati=
onal to PS [3].</div>
<div><br>
</div>
<div>Hopefully Stephen and Ben are satisfied with the outcome of this prett=
y long but important discussion and we can move forward =97 IIUC, re-issuin=
g IETF LC on the document?</div>
<div><br>
</div>
<div>Cheers, Thomas (on behalf of the draft editors).</div>
<div><br>
</div>
<div>[1]&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-core-h=
ttp-mapping/ballot/#stephen-farrell">https://datatracker.ietf.org/doc/draft=
-ietf-core-http-mapping/ballot/#stephen-farrell</a></div>
<div>[2]&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-ietf-core-h=
ttp-mapping/ballot/#ben-campbell">https://datatracker.ietf.org/doc/draft-ie=
tf-core-http-mapping/ballot/#ben-campbell</a></div>
<div>[3]&nbsp;<font face=3D"Calibri,sans-serif"><a href=3D"http://etherpad.=
tools.ietf.org:9000/p/notes-ietf-97-core">http://etherpad.tools.ietf.org:90=
00/p/notes-ietf-97-core</a></font></div>
</div>
</body>
</html>

--_000_D4621B4176DBBthomasfossatialcatellucentcom_--


From nobody Mon Nov 28 11:08:47 2016
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D58C1129F8F; Mon, 28 Nov 2016 11:08:39 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: "IETF-Announce" <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.38.1
Auto-Submitted: auto-generated
Precedence: bulk
Sender: <iesg-secretary@ietf.org>
Message-ID: <148036011985.5514.3457646909214230918.idtracker@ietfa.amsl.com>
Date: Mon, 28 Nov 2016 11:08:39 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/YqiB3glD-M7N-cR68i4KexrILRA>
Cc: core-chairs@ietf.org, core@ietf.org, draft-ietf-core-http-mapping@ietf.org
Subject: [core] Last Call: <draft-ietf-core-http-mapping-17.txt> (Guidelines for HTTP-to-CoAP Mapping Implementations) to Informational RFC
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Reply-To: ietf@ietf.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2016 19:08:40 -0000

The IESG has received a request from the Constrained RESTful Environments
WG (core) to consider the following document:
- 'Guidelines for HTTP-to-CoAP Mapping Implementations'
  <draft-ietf-core-http-mapping-17.txt> as Informational RFC

The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2016-12-12. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the
beginning of the Subject line to allow automated sorting.

This is a Second IETF LC for the document. The document was initially
targeted at Informational, but is now targeting to become Proposed Standard.

Abstract

   This document provides reference information for implementing a
   cross-protocol network proxy that performs translation from the HTTP
   protocol to CoAP (Constrained Application Protocol).  This will
   enable an HTTP client to access resources on a CoAP server through
   the proxy.  This document describes how an HTTP request is mapped to
   a CoAP request, and then how a CoAP response is mapped back to an
   HTTP response.  This includes guidelines for status code, URI, and
   media type mappings, as well as additional interworking advice.

The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/ballot/


No IPR declarations have been submitted directly on this I-D.





From nobody Tue Nov 29 09:38:14 2016
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A0D2B129C36; Tue, 29 Nov 2016 09:38:11 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: "IETF-Announce" <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.38.2
Auto-Submitted: auto-generated
Precedence: bulk
Sender: <iesg-secretary@ietf.org>
Message-ID: <148044109165.11686.836486035375310202.idtracker@ietfa.amsl.com>
Date: Tue, 29 Nov 2016 09:38:11 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/CzXwB4I-BJDP2cB4cNa_o3TUEUc>
Cc: core-chairs@ietf.org, core@ietf.org, draft-ietf-core-http-mapping@ietf.org
Subject: [core] Last Call: <draft-ietf-core-http-mapping-17.txt> (Guidelines for HTTP-to-CoAP Mapping Implementations) to Proposed Standard
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Reply-To: ietf@ietf.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Nov 2016 17:38:12 -0000

The IESG has received a request from the Constrained RESTful Environments
WG (core) to consider the following document:
- 'Guidelines for HTTP-to-CoAP Mapping Implementations'
  <draft-ietf-core-http-mapping-17.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2016-12-13. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the
beginning of the Subject line to allow automated sorting.

This is a Second IETF LC for the document. The document was initially
targeted at Informational, but is now targeting to become Proposed Standard.

Abstract

   This document provides reference information for implementing a
   cross-protocol network proxy that performs translation from the HTTP
   protocol to CoAP (Constrained Application Protocol).  This will
   enable an HTTP client to access resources on a CoAP server through
   the proxy.  This document describes how an HTTP request is mapped to
   a CoAP request, and then how a CoAP response is mapped back to an
   HTTP response.  This includes guidelines for status code, URI, and
   media type mappings, as well as additional interworking advice.


The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/

IESG discussion can be tracked via
https://datatracker.ietf.org/doc/draft-ietf-core-http-mapping/ballot/


No IPR declarations have been submitted directly on this I-D.


From nobody Tue Nov 29 22:09:13 2016
Return-Path: <ietf@augustcellars.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D18C0126CD8; Tue, 29 Nov 2016 22:09:10 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.398
X-Spam-Level: 
X-Spam-Status: No, score=-3.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-1.497, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h0zDH8mhqp-U; Tue, 29 Nov 2016 22:09:07 -0800 (PST)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8184C129488; Tue, 29 Nov 2016 22:08:59 -0800 (PST)
Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Tue, 29 Nov 2016 22:28:40 -0800
From: Jim Schaad <ietf@augustcellars.com>
To: <draft-ietf-core-object-security@ietf.org>
Date: Tue, 29 Nov 2016 22:08:52 -0800
Message-ID: <083101d24ad0$3b071aa0$b1154fe0$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdJKtW70xWwK1XHBRtGhNREf/zkBMg==
Content-Language: en-us
X-Originating-IP: [24.21.96.37]
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/rq7eVep5fLW3N2r62ruApCWUoKg>
Cc: core@ietf.org
Subject: [core] Comments on draft-ietf-core-object-security-06
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 06:09:11 -0000

Since I never seem to get that far in the document I decided to jump
straight to appendix C and look at what you have for OSCON.  As I have
stated many times the past, I believe that this should be part of the core
document and not an appendix, but I don't ever remember reading it.

Appendix C - I am having a hard time with the first paragraph here.  I do
not believe that you have correctly characterized the problem.  The reason
that you cannot use OSCOAP for this has more to do with how you decided
which records in the header to authenticate rather than the fact that this
is going to be distributed to multiple recipients.  

Appendix C - Talking about the "unprotected" and the "protected" CoAP
message is very confusing especially since COSE has protected and
unprotected objects as well.  It would be better to use a different
terminology such as "the original message" and "the resulting message".

Appendix C - I do not understand what this sentence means. " OSCON shall not
be used in cases which require a secure binding between request and
response."  Is it intended to say that the use of a transaction identifier
in the COSE wrappers for the request and response is not permitted?  There
are a lot of ways to do this that do not rely on CoAP.

Appendix C - It is not clear if the Content-Format should be set if there
was no Content-Format in the original message.

Appendix C.1 - I do not understand what this section is trying to
accomplish.  It appears to be doing three different things, some of which
should be in Appendix C, some of which should be standalone and some of
which looks like it should be 

Appendix C.5 - There should be a discussion related this this about the
different security properties that are to be found for Encrypt+Sign(M) vs
Sign(Encrypt(M)).

Appendix B - These are really example message flows rather than examples of
OSCOP messages.  This should be made clearer in the section title

Appendix B.1 - How does one securely bind the request and the response?  I
am not seeing anything from this example that will do so.




From nobody Wed Nov 30 00:30:44 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 814941295F7 for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 00:30:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qjn3yovMScuZ for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 00:28:52 -0800 (PST)
Received: from lb2-smtp-cloud2.xs4all.net (lb2-smtp-cloud2.xs4all.net [194.109.24.25]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D36D129406 for <core@ietf.org>; Wed, 30 Nov 2016 00:28:51 -0800 (PST)
Received: from webmail.xs4all.nl ([194.109.20.204]) by smtp-cloud2.xs4all.net with ESMTP id E8Up1u00G4QBLo2018Updf; Wed, 30 Nov 2016 09:28:50 +0100
Received: from a82-95-140-48.adsl.xs4all.nl ([82.95.140.48]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Wed, 30 Nov 2016 09:28:49 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 30 Nov 2016 09:28:49 +0100
From: peter van der Stok <stokcons@xs4all.nl>
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <BN6PR06MB230826157F0BE9FDBCFC5C47FEB40@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <fac7eafba28cb9bd1098074d0542cd49@xs4all.nl> <BN6PR06MB230826157F0BE9FDBCFC5C47FEB40@BN6PR06MB2308.namprd06.prod.outlook.com>
Message-ID: <0c85346845306da9e01117bedd9e5747@xs4all.nl>
X-Sender: stokcons@xs4all.nl (rYFxHj1FY9ezSaFBb/vrduo7KBZNZgxL)
User-Agent: XS4ALL Webmail
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/fLRl0kWYVLE-xqmneZ4O6XczYl8>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 08:30:42 -0000

Hi Michel,

Apologies for the late reaction, but I was occupied by other things, and 
almost forgot.

Let me give one example from section 5.9

The text says: The following example shows the encoding of leaf 
'interface-state-
    ref' set to the value "eth1".

However it is NOT the encoding of the leaf, but the encoding of the 
value of the leaf. (that's where my confusion comes from, sorry to seem 
to be nit-picking)

My proposal:

The following example shows the encoding of the value "eth1" assigned to 
the leaf 'interface-state-ref'.

I hope I made my point clearer.

You may start the sections 5, before section 5.1, with the following 
text:
In the folowing examples values of the discussed type are assigned to an 
example leaf of the discussed type.
Consectively, the CBOR encoding of the value is shown.
(Or similar but much better text.)
> 

>> ====> Examples of section 5. Do the examples not need an identifier
>> (CBOR key)? We now are faced with values which do not belong anywhere.
>> Also the SID value needs to be specified. For example section 5.1 can
>> be written as follows:
>> The leaf mtu is assumed to have value 1280 The sid of mtu is 1350 The
>> CBOR diagnostic notation of the pair is 1350: 1280, which results in
>> Page 15 /signed integer/negative integer/
>> 
>> Same answer as above.
>> None of the YANG Data Node Instances defined in section 4 (leaf,
>> container, leaf-list, list, anydata, anyxml) is encoded with its
>> identifier.
>> Such identifiers are part of the instance-identifier carry in the
>> request URI or within the payload.
>> This is the job of CoMI
>> 
>>  ====>Section 5.10.1; it is unclear where the value 1180 comes from.
> 
> I seem to express myself badly.
> It is only needed to say that mtu is assumed to have value 1280  and
> that the CBOR encoding of 1280 is:
> 
> At this moment the scope of the example CBOR code is unclear.
> 
> [MV] in section 5.1, the example is introduced with the sentence:
> [MV] "The following example shows the encoding of leaf 'mtu' set to 
> 1280 bytes."
> [MV] Is it the part that is unclear?
> [MV] Can you propose an updated text to clarify this example?
> 
>> ====> Section 5.13 is very unclear. There are many examples but it is
>> not clear where all these values come from; what is the SID value,
>> what was the leaf instance value, is one large puzzle. One example
>> (instead of 3), but with more explanations would help. In my opinion
>> the text in belongs in the FETCH content format document that still
>> needs to be written.
>> 
>> The multiple examples have been requested by different peoples
>> including Carsten.
>> These examples show completely different use cases, single instance
>> data node, list and list instance and are all useful.
>> For the question, "what is the SID value", this will be resolved by
>> the implementation of the registrars sharing a common database
>> (blockchain) of .sid files.
> 
> please see my responses above.
> Not the examples are questioned but an explanation is needed that says
> that the CBOR code for the value is shown and not the whole leaf.
> 
> [MV] This topic is discussed in section
> https://tools.ietf.org/html/draft-ietf-core-yang-cbor-03#section-3
> [MV]
> [MV]   "Basic schema nodes such as leaf, leaf-list, list, anydata and
> anyxml can be encoded standalone.
> [MV]    In this case, only the value of this schema node is encoded in
> CBOR. Identification of this value needs
> [MV]    to be provided by some external means when required.
> [MV]    A collection such as container, list instance, notification,
> RPC input, RPC output, action input and action
> [MV]    output is serialized using a CBOR map in which each child
> schema node is encoded using a key and a value."
> [MV]
> [MV] Can you propose an updated text to clarify this topic?
> 


From nobody Wed Nov 30 06:48:17 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 912501295DE for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 06:47:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8JBNsb-VCq2K for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 06:47:57 -0800 (PST)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 688981298C3 for <core@ietf.org>; Wed, 30 Nov 2016 06:47:09 -0800 (PST)
X-AuditID: c1b4fb3a-97bff70000007918-83-583ee66b5676
Received: from ESESSHC013.ericsson.se (Unknown_Domain [153.88.183.57]) by  (Symantec Mail Security) with SMTP id D3.01.31000.B66EE385; Wed, 30 Nov 2016 15:47:07 +0100 (CET)
Received: from ESESSMB303.ericsson.se ([169.254.3.128]) by ESESSHC013.ericsson.se ([153.88.183.57]) with mapi id 14.03.0319.002; Wed, 30 Nov 2016 15:47:07 +0100
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: "core@ietf.org" <core@ietf.org>
Thread-Topic: OSCOAP update
Thread-Index: AQHSSxif7sKIdzvIZ0GoNx6934CUxA==
Date: Wed, 30 Nov 2016 14:47:07 +0000
Message-ID: <D464A4F9.6DEF9%goran.selander@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.9.160926
x-originating-ip: [153.88.183.149]
Content-Type: text/plain; charset="utf-8"
Content-ID: <4E185968FACCED439047C5612747E082@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPLMWRmVeSWpSXmKPExsUyM2K7pW72M7sIg/tXTS32vV3P7MDosWTJ T6YAxigum5TUnMyy1CJ9uwSujO33PzEWtHFW3N/1nrWB8QVHFyMnh4SAiUTLqUesILaQwDpG iQOr1LsYuYDsJYwSjycsYgZJsAm4SDxoeMQEYosIKEtsPvOaEcQWFhCTaN5+ByouLdE0eTML hK0nMWvZPbA4i4CqxIK5G8Dm8ApYSBxaPgWslxGo9/upNWA1zALiEreezGeCOEhAYsme88wQ tqjEy8f/gI7j4BAFmrnmfhhEWEli7eHtLCBhZgFNifW79CGmWEtMurGbGcJWlJjS/ZAdYqug xMmZT1gmMIrMQrJsFkL3LCTds5B0z0LSvYCRdRWjaHFqcXFuupGRXmpRZnJxcX6eXl5qySZG YDQc3PLbagfjweeOhxgFOBiVeHg/TLeNEGJNLCuuzD3EKMHBrCTCu+WBXYQQb0piZVVqUX58 UWlOavEhRmkOFiVxXrOV98OFBNITS1KzU1MLUotgskwcnFINjJoqxa+VD89y3JO+9XV1//GS zxPjVjzXU5n+c5Yjj6ymCcsWfc8tigznhWO2/OnwXHB4Ztq75ZGxDS5HLSdG+PArcN6XMvju V6imkF8y8/vBi3JJ9/rLml0efHi6i/m54gXhdGnfc2as8mI6TizSf331XlmHhZ4/t/l04CpL tZXccw4/5Q1KU2Ipzkg01GIuKk4EANBxCc+CAgAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/EIgIxgnanWU7lj0sCQdFYAFzi9o>
Subject: [core] OSCOAP update
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 14:47:59 -0000
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=


From nobody Wed Nov 30 07:16:38 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AEA8129446 for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 07:16:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BAYA5XLDBG6O for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 07:16:34 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B35C1293F5 for <core@ietf.org>; Wed, 30 Nov 2016 07:16:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAUFGU0D029775; Wed, 30 Nov 2016 16:16:30 +0100 (CET)
Received: from eduroam-pool6-0447.wlan.uni-bremen.de (eduroam-pool6-0447.wlan.uni-bremen.de [134.102.25.191]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tTPC23yZkz8L9t; Wed, 30 Nov 2016 16:16:30 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <D464A4F9.6DEF9%goran.selander@ericsson.com>
Date: Wed, 30 Nov 2016 16:16:29 +0100
X-Mao-Original-Outgoing-Id: 502211789.231691-0cce714d69118504d05c8c2954ddd3e4
Content-Transfer-Encoding: quoted-printable
Message-Id: <ECB3386F-BB2B-4F88-82E0-E92C038A3D4C@tzi.org>
References: <D464A4F9.6DEF9%goran.selander@ericsson.com>
To: =?utf-8?Q?G=C3=B6ran_Selander?= <goran.selander@ericsson.com>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-ikIwfDeT3J81IHksx_Qsfp7JsQ>
Cc: "core@ietf.org" <core@ietf.org>
Subject: Re: [core] OSCOAP update
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 15:16:37 -0000

On 30 Nov 2016, at 15:47, G=C3=B6ran Selander =
<goran.selander@ericsson.com> wrote:
>=20
> We plan to release a version -01 this week (also considering the =
recent
> comments from Jim) and would propose us to use -01 as the =
implementation
> version instead of -00.

Sounds good to me.  Maybe we should even get in a few reviews of -01 =
before we label.

I think the best way to get these is for the chairs to issue a formal =
last call on -01 once its there (not a WGLC, but a last call before =
labeling).  This should be doable in a week, I think.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Wed Nov 30 09:04:22 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42D611295B0; Wed, 30 Nov 2016 09:03:59 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.3
X-Spam-Level: 
X-Spam-Status: No, score=-2.3 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QGsXxq6PDRnY; Wed, 30 Nov 2016 09:03:54 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 003C4129456; Wed, 30 Nov 2016 09:03:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uAUH3k3d001975; Wed, 30 Nov 2016 18:03:47 +0100 (CET)
Received: from [192.168.217.113] (p5DC7E34C.dip0.t-ipconnect.de [93.199.227.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tTRZp4k1Fz8LCs; Wed, 30 Nov 2016 18:03:46 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <8C4F164D-DB72-4927-9BB7-81EB6B69980B@tzi.org>
Date: Wed, 30 Nov 2016 18:03:46 +0100
X-Mao-Original-Outgoing-Id: 502218225.961512-7f2d7495a74c5b5dd90cf3eea905e436
Content-Transfer-Encoding: quoted-printable
Message-Id: <F8611886-2C73-44A4-8808-D49F275BFA39@tzi.org>
References: <147612868715.31457.7459381389963542114.idtracker@ietfa.amsl.com> <57FCDC80.3000004@tzi.org> <2DCF36F2-0821-4B02-A97F-2B8D238B3C67@cooperw.in> <8C4F164D-DB72-4927-9BB7-81EB6B69980B@tzi.org>
To: Alissa Cooper <alissa@cooperw.in>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/swbDC2PkyFhLXUaeL4n8LhTuJDA>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, IESG <iesg@ietf.org>, core@ietf.org
Subject: Re: [core] Alissa Cooper's Discuss on draft-ietf-core-etch-03: (with DISCUSS and COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 17:03:59 -0000

On 14 Nov 2016, at 02:29, Carsten Bormann <cabo@tzi.org> wrote:
>=20
> I think that together with the other editorial improvements that =
should be enough to address the concern and clear the DISCUSS.

Hi Alissa,

just checking whether this fell on the floor in the run up to IETF97.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Wed Nov 30 12:51:02 2016
Return-Path: <alissa@cooperw.in>
X-Original-To: core@ietf.org
Delivered-To: core@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 737F7129A8B; Wed, 30 Nov 2016 12:51:01 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "Alissa Cooper" <alissa@cooperw.in>
To: "The IESG" <iesg@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.39.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <148053906144.9726.4431534233095634676.idtracker@ietfa.amsl.com>
Date: Wed, 30 Nov 2016 12:51:01 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/dznBe_5LhTzIzTr0dg4BFAtaTAE>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, core@ietf.org
Subject: [core] Alissa Cooper's No Objection on draft-ietf-core-etch-04: (with COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 20:51:01 -0000

Alissa Cooper has entered the following ballot position for
draft-ietf-core-etch-04: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-core-etch/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thank you for addressing my DISCUSS.

OLD COMMENT:

= Section 2 =

"(However, while processing a search request, a server can be expected
   to allocate computing and memory resources or even create additional
   server resources through which the response to the search can be
   retrieved.)"

s/search/fetch/ would be clearer I think

= Section 3 =

"If the Request-URI does not point to an existing
   resource, the server MAY create a new resource with that URI,
   depending on the patch document type (whether it can logically modify
   a null resource) and permissions, etc."

I know this is the same text as in RFC 5789, but it's vague. What else
might create the basis for the server's decision besides the document
type and permissions?

= Section 5 =

It seems that FETCH does introduce a new security consideration, in that
any observer of FETCH requests can potentially glean information about
the specific portions of a resource of interest to the requester. This
might factor into decisions about whether to use DTLS to secure a
particular request so may be worth mentioning.



From nobody Wed Nov 30 14:00:10 2016
Return-Path: <Michel.Veillette@trilliantinc.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A0DB129B74 for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 14:00:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level: 
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=trilliant.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SK-_8-zd6q43 for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 14:00:02 -0800 (PST)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0091.outbound.protection.outlook.com [104.47.42.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 136EB129B75 for <core@ietf.org>; Wed, 30 Nov 2016 13:59:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Trilliant.onmicrosoft.com; s=selector1-trilliantinc-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=8t0PiBMv5+pBTSvezk7o3UM/BnBfwe/FRN0mKRHSt6o=; b=bqjUkavhsph1m+ntM0nc2BAWKsnbbUduNuFd+HVQEIBz65lU2OyxdkO+NprZbwk8ayuyBQPe1JcO0CFaKYg88GnTDvrWDz4IVqdEOB90RZ31XDT6S7pdpugf8C8K13Kre9yB47WikHZRNEbS6WWW8P95N3W2Owg2rGg6FGuB8ZQ=
Received: from BN6PR06MB2308.namprd06.prod.outlook.com (10.173.19.139) by BN6PR06MB2307.namprd06.prod.outlook.com (10.173.19.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.13; Wed, 30 Nov 2016 21:59:46 +0000
Received: from BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) by BN6PR06MB2308.namprd06.prod.outlook.com ([10.173.19.139]) with mapi id 15.01.0747.013; Wed, 30 Nov 2016 21:59:45 +0000
From: Michel Veillette <Michel.Veillette@trilliantinc.com>
To: "consultancy@vanderstok.org" <consultancy@vanderstok.org>
Thread-Topic: [core] yang cbor comments
Thread-Index: AQHSQLpL47EAr//15UCwVCri7zu5mqDdWvVAgACFSgCAB2rIMIAL+xCAgADSL4A=
Date: Wed, 30 Nov 2016 21:59:45 +0000
Message-ID: <BN6PR06MB230837FD63D706AD4136E3BAFE8C0@BN6PR06MB2308.namprd06.prod.outlook.com>
References: <cf53724e14f6babcdc75859eae2208c4@xs4all.nl> <BN6PR06MB2308DF9C864F377870FA2292FEB10@BN6PR06MB2308.namprd06.prod.outlook.com> <fac7eafba28cb9bd1098074d0542cd49@xs4all.nl> <BN6PR06MB230826157F0BE9FDBCFC5C47FEB40@BN6PR06MB2308.namprd06.prod.outlook.com> <0c85346845306da9e01117bedd9e5747@xs4all.nl>
In-Reply-To: <0c85346845306da9e01117bedd9e5747@xs4all.nl>
Accept-Language: fr-CA, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michel.Veillette@trilliantinc.com; 
x-originating-ip: [207.96.192.122]
x-ms-office365-filtering-correlation-id: 18a5d616-201d-4048-9b65-08d4196c3258
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:BN6PR06MB2307;
x-microsoft-exchange-diagnostics: 1; BN6PR06MB2307; 7:3zVgRhho53P1ixtyDXhqhpm14FDOBQcUFSj5VXoJhc9t+vUKdl6i9bzaShQyiUmOPfPP0dEojfikSFTzAQxnJ1h3vNvRqxv7S5wzdS5T/7S6de3aOM1M8MV4gsW0MBnGdYLcqMEDdZNuS/rQVOQMig8mjCgRgnP16obF69PeIF2loai3X8wP00vj7rkaq55Yabmh20HN6jBX8BBG1EzBzHNgKFdTrw+AVXVY8aKDsr6tUCW0enaZiDUVl996V5XG8YX8Poeqgu4p4oM2BouAu1T4P+W8IoAn1cDP/RkTQbLOgedLXpH5nRy3C1LF9uhsj6wR0D78NvdEg6Rpfd6MukLfCkFBG6OCnNxgSru1tbO4l/i3rON0fi7RCed8JmFKJ/dQfLz0rDRLChqKfWCb6Xt60Xvl2e9hJTj1Btb21VjrXsFKhsZdzT6IvoPXavOkg60KtRiVUzFEnpwPaCEWXA==
x-microsoft-antispam-prvs: <BN6PR06MB2307BD93B8DF92566E038811FE8C0@BN6PR06MB2307.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(166708455590820);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040375)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6041248)(20161123560025)(20161123564025)(20161123562025)(20161123555025)(6072148); SRVR:BN6PR06MB2307; BCL:0; PCL:0; RULEID:; SRVR:BN6PR06MB2307; 
x-forefront-prvs: 0142F22657
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(377454003)(199003)(189002)(13464003)(5660300001)(2906002)(93886004)(3280700002)(81156014)(561944003)(2501003)(105586002)(3660700001)(8936002)(92566002)(99286002)(33656002)(9686002)(5640700001)(68736007)(8676002)(81166006)(7846002)(1730700003)(7736002)(76576001)(74316002)(305945005)(106116001)(54356999)(229853002)(50986999)(122556002)(6916009)(86362001)(2950100002)(2351001)(106356001)(38730400001)(110136003)(7696004)(4326007)(3846002)(6116002)(66066001)(102836003)(2900100001)(39450400002)(101416001)(39410400001)(76176999)(77096006)(189998001)(6506003)(97736004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR06MB2307; H:BN6PR06MB2308.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords;  A:1; MX:1; LANG:en; 
received-spf: None (protection.outlook.com: trilliantinc.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: trilliantinc.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2016 21:59:45.5230 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4f6fbd13-0dfb-4150-85c3-d43260c04309
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR06MB2307
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/zzyjyedW_fcR5WfUHrNfCQaP_tQ>
Cc: Core <core@ietf.org>
Subject: Re: [core] yang cbor comments
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Nov 2016 22:00:07 -0000

Hi Peter

=3D=3D=3D About " My proposal: The following example shows the encoding of =
the value "eth1" assigned to the leaf 'interface-state-ref'."

All examples have been fixed with the following scheme:
   The following example shows the encoding of an 'interface-state-ref' lea=
f instance set to "eth1".
See diff at
   https://github.com/core-wg/yang-cbor/commit/6f514542d5d09ec5c992e095dd60=
9c68303cdb89#diff-083fd5e71ffd63b12d8cd2854c3ad1bf

Your proposed solution works fine for this specific example but was hard to=
 apply to all examples.
I'm also not sure about the use of "assigned" which seem to imply a previou=
s PUT or POST.
I'm open the revisit this wording if needed.

=3D=3D=3D About the into of section 5, I proposing the following text based=
 on the intro present in https://tools.ietf.org/html/rfc7951#section-6=20

The CBOR encoding of an instance of a leaf or leaf-list data node depends o=
n the built-in type of that data node. The following sub-section defined th=
e CBOR encoding of each built-in type supported by YANG as listed in [RFC79=
50] section 4.2.4. Each subsection shows an example value assigned to a dat=
a node instance of the discussed built-in type.

The update draft is available at http://core-wg.github.io/yang-cbor/draft-i=
etf-core-yang-cbor-latest.txt

Regards,
Michel

-----Original Message-----
From: peter van der Stok [mailto:stokcons@xs4all.nl]=20
Sent: Wednesday, November 30, 2016 3:29 AM
To: Michel Veillette <Michel.Veillette@trilliantinc.com>
Cc: consultancy@vanderstok.org; Core <core@ietf.org>
Subject: RE: [core] yang cbor comments

Hi Michel,

Apologies for the late reaction, but I was occupied by other things, and al=
most forgot.

Let me give one example from section 5.9

The text says: The following example shows the encoding of leaf
'interface-state-
    ref' set to the value "eth1".

However it is NOT the encoding of the leaf, but the encoding of the value o=
f the leaf. (that's where my confusion comes from, sorry to seem to be nit-=
picking)

My proposal:

The following example shows the encoding of the value "eth1" assigned to th=
e leaf 'interface-state-ref'.

I hope I made my point clearer.

You may start the sections 5, before section 5.1, with the following
text:
In the folowing examples values of the discussed type are assigned to an ex=
ample leaf of the discussed type.
Consectively, the CBOR encoding of the value is shown.
(Or similar but much better text.)
>=20

>> =3D=3D=3D=3D> Examples of section 5. Do the examples not need an identif=
ier=20
>> (CBOR key)? We now are faced with values which do not belong anywhere.
>> Also the SID value needs to be specified. For example section 5.1 can=20
>> be written as follows:
>> The leaf mtu is assumed to have value 1280 The sid of mtu is 1350 The=20
>> CBOR diagnostic notation of the pair is 1350: 1280, which results in=20
>> Page 15 /signed integer/negative integer/
>>=20
>> Same answer as above.
>> None of the YANG Data Node Instances defined in section 4 (leaf,=20
>> container, leaf-list, list, anydata, anyxml) is encoded with its=20
>> identifier.
>> Such identifiers are part of the instance-identifier carry in the=20
>> request URI or within the payload.
>> This is the job of CoMI
>>=20
>>  =3D=3D=3D=3D>Section 5.10.1; it is unclear where the value 1180 comes f=
rom.
>=20
> I seem to express myself badly.
> It is only needed to say that mtu is assumed to have value 1280  and=20
> that the CBOR encoding of 1280 is:
>=20
> At this moment the scope of the example CBOR code is unclear.
>=20
> [MV] in section 5.1, the example is introduced with the sentence:
> [MV] "The following example shows the encoding of leaf 'mtu' set to
> 1280 bytes."
> [MV] Is it the part that is unclear?
> [MV] Can you propose an updated text to clarify this example?
>=20
>> =3D=3D=3D=3D> Section 5.13 is very unclear. There are many examples but =
it is=20
>> not clear where all these values come from; what is the SID value,=20
>> what was the leaf instance value, is one large puzzle. One example=20
>> (instead of 3), but with more explanations would help. In my opinion=20
>> the text in belongs in the FETCH content format document that still=20
>> needs to be written.
>>=20
>> The multiple examples have been requested by different peoples=20
>> including Carsten.
>> These examples show completely different use cases, single instance=20
>> data node, list and list instance and are all useful.
>> For the question, "what is the SID value", this will be resolved by=20
>> the implementation of the registrars sharing a common database
>> (blockchain) of .sid files.
>=20
> please see my responses above.
> Not the examples are questioned but an explanation is needed that says=20
> that the CBOR code for the value is shown and not the whole leaf.
>=20
> [MV] This topic is discussed in section
> https://tools.ietf.org/html/draft-ietf-core-yang-cbor-03#section-3
> [MV]
> [MV]   "Basic schema nodes such as leaf, leaf-list, list, anydata and
> anyxml can be encoded standalone.
> [MV]    In this case, only the value of this schema node is encoded in
> CBOR. Identification of this value needs
> [MV]    to be provided by some external means when required.
> [MV]    A collection such as container, list instance, notification,
> RPC input, RPC output, action input and action
> [MV]    output is serialized using a CBOR map in which each child
> schema node is encoded using a key and a value."
> [MV]
> [MV] Can you propose an updated text to clarify this topic?
>=20


From nobody Wed Nov 30 22:52:48 2016
Return-Path: <ietf@augustcellars.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73F18128874 for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 22:52:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.797
X-Spam-Level: 
X-Spam-Status: No, score=-4.797 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-2.896, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 28GpdY0bLDxg for <core@ietfa.amsl.com>; Wed, 30 Nov 2016 22:52:42 -0800 (PST)
Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA2FF129BEC for <core@ietf.org>; Wed, 30 Nov 2016 22:52:40 -0800 (PST)
Received: from hebrews (24.21.96.37) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Wed, 30 Nov 2016 23:11:59 -0800
From: Jim Schaad <ietf@augustcellars.com>
To: <core@ietf.org>
Date: Wed, 30 Nov 2016 22:52:12 -0800
Message-ID: <018401d24b9f$72d6f8e0$5884eaa0$@augustcellars.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdJLnlAU1xxThzc1SwG4iFkQ1mka5A==
Content-Language: en-us
X-Originating-IP: [24.21.96.37]
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/v2CdxA7JBmGfzlmwcT5U18S9GYM>
Subject: [core] Caching of responses
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Dec 2016 06:52:46 -0000

In the process of talking about the OSCOAP drafts with people at the Seoul
IETF, I finally managed to get my understanding of the caching problem that
I see into a formulation that can be understood by other people.

When you look at caching, there are two different types that can be thought
about:

1.  I am caching a value that can be used by anybody who asks for the same
answer.  This is the classical type of caching that occurs on the internet
today and is how things such as DNS work.

2. I am caching a value that can only be used by a specific person, but I am
doing so in order to deal with the fact that the network is unreliable and
by doing so I can a) decrease the response time in the even the packet is
lost between me and the asker and b) can generally increase the reliability
of the network between me and the responder.  Generally, this type of
caching would require a combination of asker address/port and information
from the request.

CoAP currently supports the first and not the second.  When security is
added to messages, I believe that the second type of caching may become
important as well since the first set of caching would hopefully approach
zero as we add more and more security to messages. 

Am I way out in left field or does this make sense?

Jim



From nobody Wed Nov 30 23:48:04 2016
Return-Path: <cabo@tzi.org>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87943129C11; Wed, 30 Nov 2016 23:47:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id efgcL7Tr2xMl; Wed, 30 Nov 2016 23:47:54 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2EEC51295AC; Wed, 30 Nov 2016 23:47:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id uB17ljOl005961; Thu, 1 Dec 2016 08:47:45 +0100 (CET)
Received: from [172.20.10.2] (ip-109-47-2-226.web.vodafone.de [109.47.2.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3tTqBk0hMpz8LPt; Thu,  1 Dec 2016 08:47:42 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3251\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <148053906144.9726.4431534233095634676.idtracker@ietfa.amsl.com>
Date: Thu, 1 Dec 2016 08:47:40 +0100
X-Mao-Original-Outgoing-Id: 502271260.371683-3ebb6472c998039b9c0f502f24fc394a
Content-Transfer-Encoding: quoted-printable
Message-Id: <0E4DD69D-E4EF-4FFC-B15F-A2368B3EA226@tzi.org>
References: <148053906144.9726.4431534233095634676.idtracker@ietfa.amsl.com>
To: Alissa Cooper <alissa@cooperw.in>
X-Mailer: Apple Mail (2.3251)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/UaEnro4UPWZKyX2PxY_qh-xtDto>
Cc: draft-ietf-core-etch@ietf.org, core-chairs@ietf.org, The IESG <iesg@ietf.org>, core@ietf.org
Subject: Re: [core] Alissa Cooper's No Objection on draft-ietf-core-etch-04: (with COMMENT)
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Dec 2016 07:47:55 -0000

> On 30 Nov 2016, at 21:51, Alissa Cooper <alissa@cooperw.in> wrote:
>=20
> Alissa Cooper has entered the following ballot position for
> draft-ietf-core-etch-04: No Objection

Thank you for clearing the DISCUSS.

Your remaining COMMENTs also have been addressed in -04:

> =3D Section 2 =3D
>=20
> "(However, while processing a search request, a server can be expected
>   to allocate computing and memory resources or even create additional
>   server resources through which the response to the search can be
>   retrieved.)"
>=20
> s/search/fetch/ would be clearer I think

Done in -04.

> =3D Section 3 =3D
>=20
> "If the Request-URI does not point to an existing
>   resource, the server MAY create a new resource with that URI,
>   depending on the patch document type (whether it can logically =
modify
>   a null resource) and permissions, etc."
>=20
> I know this is the same text as in RFC 5789, but it's vague. What else
> might create the basis for the server's decision besides the document
> type and permissions?

I don=E2=80=99t think the considerations going into the server=E2=80=99s =
decision can be enumerated completely, but -04 changes =E2=80=9Cetc.=E2=80=
=9D into:

   [=E2=80=A6], as well as other conditions such as
   the degree of control the server gives clients in creating new
   entries in its URI space (see also Section 3.4). =20

> =3D Section 5 =3D
>=20
> It seems that FETCH does introduce a new security consideration, in =
that
> any observer of FETCH requests can potentially glean information about
> the specific portions of a resource of interest to the requester. This
> might factor into decisions about whether to use DTLS to secure a
> particular request so may be worth mentioning.

This is indeed an important security consideration to be aware of.
-04 now says:

   [=E2=80=A6] The payload of a FETCH
   request may reveal more detailed information about the specific
   portions of a resource of interest to the requester than a GET
   request for the entire resource would; this may mean that
   confidentiality protection of the request by DTLS or other means is
   needed for FETCH where it wouldn't be needed for GET.

Thank you again for comments that really helped us improve the document.

Gr=C3=BC=C3=9Fe, Carsten

