Re: Review of GIST over SCTP and DTLS - updated

Jukka Manner <[email protected]> Thu, 25 Mar 2010 19:27:07 -0700
Newsgroups gmane.ietf.nsis
Message-ID <[email protected]>
Okey. Just make it clear in the text that MA ID 4 is never used alone 
but always coupled with a transport protocol in the stack proposal.

Jukka

On 03/25/2010 07:00 PM, Xiaoming Fu wrote:
> Hi Jukka,
>
> The GIST spec tells how one could "stack" a multitude of security and
> transport protocols as MA protocol IDs, via the "Stack-Proposal" and
> "Stack-Config-Data".
>
> To add: This has also been documented in the extensibility draft
> currently being IETF last call (which is good!).
>
> Xiaoming
> On 3/25/2010 6:29 PM, Jukka Manner wrote:
>> Hi Xiaoming,
>>
>> Maybe I'm not getting it, but how do you differentiate in the proposal
>>
>> 1. SCTP
>> 2. SCTP with DTLS security
>> 3. DCCP with DTLS security
>>
>> If DTLS is it's own MA ID, then you always need to specify in addition
>> which underlying transport is used with it?
>>
>> Jukka
>>
>> On 03/25/2010 05:24 PM, Xiaoming Fu wrote:
>>> Hi Jukka,
>>>
>>> Thanks a lot for your comments.
>>>
>>> We will address issues your raised and submit a new version asap, with a
>>> clarification to your last part comments:
>>> > - 9. IANA section: name the MA protocol 4 differently, we could also
>>> > have DCCP and DTLS. Thus, MA protocol 4 is DTLS over SCTP."
>>> nsis/current/msg08493.html
>>> http://www.ietf.org/mail-archive/web
>>> Earlier the WG has commented on this, and seems to have agreed on
>>> identifying DTLS as a separate MA (thus the ID changed its name as
>>> well), which can be used for SCTP and other transport mechanisms in the
>>> future:
>>>
>>> http://www.ietf.org/mail-archive/web//nsis/current/msg08483.html
>>>
>>> I think this way might make more sense, as it allows a stacked MAs
>>> (alike TLS vs TCP).
>>> What do you think?
>>> Xiaoming
>>> On 3/25/2010 5:00 PM, Jukka Manner wrote:
>>>> Hi Xiaoming,
>>>>
>>>> I have reviewed the draft and would like to see the following things
>>>> fixed before we can conclude that the draft is ready to go forward:
>>>>
>>>> - Introduction:
>>>> * what are these "other issues" of TCP? Please clarify.
>>>> * "...especially if deployment over the public Internet is
>>>> contemplated": I don't quite get this statement. SCTP, as DCCP, does
>>>> not
>>>> natively get through firewalls (nor NATs), so SCTP is not directly
>>>> applicable to the Internet at large, on the contrary.
>>>>
>>>> - S3.4: s/"was able to remain"/"was able to retain"/
>>>>
>>>> - 5.1: In practice the multihoming support of SCTP is not that
>>>> beneficial. Since NSIS is about signaling on the data path, and if that
>>>> data path fails, it doesn't really the application if the state can
>>>> still be refreshed using an alternative path. The only benefit of
>>>> multihoming might be that the state on the failed path can be more
>>>> quickly torn down using the multihoming capability of SCTP. So, please
>>>> be more clear on this, the current text goes back and forth on the
>>>> topic.
>>>>
>>>> - 9. IANA section: name the MA protocol 4 differently, we could also
>>>> have DCCP and DTLS. Thus, MA protocol 4 is DTLS over SCTP.
>>>>
>>>> Regards,
>>>> Jukka
>>
>

-- 
Jukka MJ Manner, Professor, PhD.  Phone:  +358+(0)9+470 22481
Aalto University                  Mobile: +358+(0)50+5112973
Department of Communications      Fax:    +358+(0)9+470 22474
and Networking (Comnet)           Office: G320a (Otakaari 5A)
P.O. Box 13000, FIN-00076 Aalto   E-mail: [email protected]
Finland                           www.netlab.hut.fi/~jmanner/