Lisa Dusseault | 2 Oct 2008 00:41
Favicon

Lisa's Apps Area Activity Report for September

News, updates

Potential WGs/BOFs:
ALTO: the p2pi <at> ietf.org list has proposed a charter in IETF-wide review
ESDS: esds <at> ietf.org has requested a second BOF on discovery services for arbitrary identifiers.
OAUTH: mailing list and spec available at http://oauth.net/

Document Status and Progress

Active Documents: my action
 - draft-kucherawy-sender-auth-header (Proposed Standard, aka PS): Publication Requested.  Need to do AD review.
 - draft-ietf-sieve-notify-mailto (PS):  Ready for IESG Evaluation? I need to check diffs and put on an agenda.

Stalled, in review, waiting on other:
 - draft-irtf-asrg-dnsbl (PS): Waiting on author to decide changes from AD review.
 - draft-ietf-sieve-refuse-reject (PS):  Waiting on author for revised ID after IESG Evaluation.
 - draft-ietf-calsify-rfc2445bis (PS):  Revised ID needed after AD evaluation
 - draft-ietf-calsify-rfc2446bis (PS): Revised ID needed after AD evaluation
 - draft-ietf-lemonade-msgevent (PS): Revised ID needed after IESG evaluation
 - draft-snell-atompub-bidi (PS): A couple changes needed after IESG Evaluation.
 - draft-ietf-usefor-usepro (PS): Finished IETF Last Call.  Authors and chairs need to decide whether/what changes to make.
 - draft-sanchez-webdav-current-principal (PS): Finished last Call. Now I'm waiting to hear back from authors on next steps.
 - draft-wilde-sms-uri (PS): IESG Evaluation found a number of issues. Author needs to revise or respond.

Finished Processing -- new in RFC Ed queue and new RFCs
 - RFC 5328, Informational
"A Uniform Resource Name (URN) Namespace for
the Digital Video Broadcasting Project (DVB)"
 - RFC 5337, Experimental

     "Internationalized Delivery Status and Disposition Notifications"


WG Status
  CALSIFY: Plugging away on issues.
  HTTPBIS:   Plugging away on issues.
  IDNABIS:  Discussing contents of rationale document and Bidi rules
  SIEVE: Finishing up some docs. 
  USEFOR:  Finishing up last doc after IETF Last Call.


_______________________________________________
Apps-Discuss mailing list
Apps-Discuss <at> ietf.org
https://www.ietf.org/mailman/listinfo/apps-discuss
John C Klensin | 31 Oct 2008 20:17

Followup on IETF72 discussion of FTP protocol extensions and updates

Hi.

Some notes were circulated prior to the Dublin meeting and we
had a brief discussion there about how (or if) to progress a
number of proposals for FTP extensions and clarifications.

The conclusion was that Barry and I should try to get a
preliminary draft charter together.  It is attached.

While I won't try to reprise the information in the charter or
the discussion in July (see archives of this list with "FTP" in
the subject lines), let me give a personal impression of where
things stand at the moment.

I, and I believe Barry, are willing to invest some time in this
if others are interested and willing to work.  With possibly one
exception, we are much less willing to try to twist arms to
persuade anyone that they should be interested.  We also don't
see much point in standardizing anything for which multiple
implementations are unlikely, i.e., for any given one of the
proposals, we would expect any possible WG to determine whether
it is just an interesting idea or whether there is real,
multi-vendor or multi-implementer, interest in it.

On the other hand, if there are going to be multiple
implementations of the same general idea, I believe there is
merit in doing enough work in the IETF --presumably including
standardization-- to increase the odds that those
implementations will be interoperable.  So, at least in my case,
the threshold for an FTP extension effort being worthwhile is
well below a conviction that something is a great idea that
everyone should immediately implement.

The schedule shown in the attached draft charter is very
aggressive, but based on the assumption that there really is a
core group of people who want to make this happen and will make
an investment in it.  If that is not the case, I would
personally argue against getting a WG started -- this impresses
me as something we can either find the energy to do quickly or
cannot do at all.

As a personal comment, I believe that there is a significant
opportunity for IETF to add value to these proposals because
they are not the only way to do what they propose to accomplish.
To take two handy examples, it is not clear to me that a
single-stream FTP is FTP any more -- such a thing, if needed,
might better be modeled on TFTP, HTTP, SMTP with BDAT,or some
other arrangement.  Similarly, when we discovered that we needed
to reduce the number of turnarounds in SMTP, we invented
pipelining, rather than, e.g., a MAILRCPT command that took a
list of addresses.

Anyway, comments welcome.  My hope is to hold a brief discussion
during the Apps Area meeting and, if there is interest (i.e.,
people willing to work), that we organize a bar-BOF, tune the
charter, and get it back in the hands of the ADs before the IETF
week is over.  That implies that anyone who is interested in
participating and willing to work but will not be in
Minneapolis, and anyone who can shed light in the implementation
status of these various proposals, should say so on this list
well before Nov 17.

     john
File Transfer Protocol Extensions (ftpext)

Last Modified: 2008-10-30 (JcK, preliminary draft)

Chair(s):
# To be determined

Applications Area Director(s):
# Chris Newman <chris.newman <at> sun.com>
# Lisa Dusseault <lisa <at> osafoundation.org>

Applications Area Advisor:
# To be determined

Mailing Lists:
General Discussion: To be determined
To Subscribe: To be determined
Archive: To be determined

Description of Working Group:

The Standard File Transfer Protocol specification in RFC 959 has been
updated several times with command extensions of one sort or another,
including those described in RFCs 2228, 2640, 2773, and 3659. In the
last year or so, a series of additional Internet Drafts (listed below)
have been posted. This WG will examine the outstanding proposals,
determine which ones are worth pursuing, and bring the relevant ones
to Proposed Standard or, if more appropriate, Experimental.

If time and energy permit, the WG will also review the Proposed
Standard specifications identified above, revise and advance them to
Draft Standard as appropriate, and review and, if needed, update, the
FTP URI specifications.

Goals and Milestones:

January 2008	  	WG formation
March 2009			Decision on form and structure of the WG document
					set, including which documents will be addressed. 
June 2009			WG Last Call on WG document set
August 2009			IETF Last Call on WG document set

Internet-Drafts:

Streamlined FTP Command Extensions
   draft-peterson-streamlined-ftp-command-extensions-05.txt

FTP Extension for Internationalized Text
   draft-klensin-ftp-typeu-00.txt

FTP Extension Registry
   draft-klensin-ftp-registry-00.txt

File Transfer Protocol HOST Command
   draft-hethmon-mcmurray-ftp-hosts-01

FTP Extension Allowing IP Forwarding (NATs)
   draft-rosenau-ftp-single-port-04

No Request For Comments
_______________________________________________
Apps-Discuss mailing list
Apps-Discuss <at> ietf.org
https://www.ietf.org/mailman/listinfo/apps-discuss
Nicolas Williams | 31 Oct 2008 20:24
Picon

Re: Followup on IETF72 discussion of FTP protocol extensions and updates

On Fri, Oct 31, 2008 at 03:17:42PM -0400, John C Klensin wrote:
> Streamlined FTP Command Extensions
>    draft-peterson-streamlined-ftp-command-extensions-05.txt

-05 is expired; -06 is available.

> FTP Extension Allowing IP Forwarding (NATs)
>    draft-rosenau-ftp-single-port-04

-05 is available.
John C Klensin | 31 Oct 2008 21:12

Re: Followup on IETF72 discussion of FTP protocol extensions and updates


--On Friday, 31 October, 2008 14:24 -0500 Nicolas Williams
<Nicolas.Williams <at> sun.com> wrote:

> On Fri, Oct 31, 2008 at 03:17:42PM -0400, John C Klensin wrote:
>> Streamlined FTP Command Extensions
>>    draft-peterson-streamlined-ftp-command-extensions-05.txt
> 
> -05 is expired; -06 is available.
> 
>> FTP Extension Allowing IP Forwarding (NATs)
>>    draft-rosenau-ftp-single-port-04
> 
> -05 is available.

Thanks.  I've updated my working copy of the draft.  Shows how
long I/we have been working on this.

    john
Paul Hoffman | 31 Oct 2008 21:35
Picon

Re: Followup on IETF72 discussion of FTP protocol extensions and updates

At 3:17 PM -0400 10/31/08, John C Klensin wrote:
>We also don't
>see much point in standardizing anything for which multiple
>implementations are unlikely, i.e., for any given one of the
>proposals, we would expect any possible WG to determine whether
>it is just an interesting idea or whether there is real,
>multi-vendor or multi-implementer, interest in it.

That seems like the crux of the question. In your charter you list RFCs 2228, 2640, 2773, and 3659; of those, I
am not sure any are implemented in "common" FTP clients and servers.

Given that parts of the world have moved on to SCP and FTPS and SFTP and whatever for moving files using
stronger authentication and encryption, I'm not sure if this WG should be spun up unless it deals with
security. I am perfectly happy with "FTP over TLS" or "FTP over SSH", but if the IETF is going to make more
extensions but doesn't have a standard way for securing files moving around, we're not helping.
Nicolas Williams | 31 Oct 2008 22:00
Picon

Re: Followup on IETF72 discussion of FTP protocol extensions and updates

On Fri, Oct 31, 2008 at 01:35:39PM -0700, Paul Hoffman wrote:
> That seems like the crux of the question. In your charter you list
> RFCs 2228, 2640, 2773, and 3659; of those, I am not sure any are
> implemented in "common" FTP clients and servers.

RFC2228 is certainly supported by multiple implementations, as is
RFC4217 (though often only RFC2228 with the GSS-API Kerberos V
mechanism, or RFC4217, but not both, are found in any given
implementation).  I'd not heard of any of the others though.

> Given that parts of the world have moved on to SCP and FTPS and SFTP
> and whatever for moving files using stronger authentication and
> encryption, I'm not sure if this WG should be spun up unless it deals
> with security. I am perfectly happy with "FTP over TLS" or "FTP over
> SSH", but if the IETF is going to make more extensions but doesn't
> have a standard way for securing files moving around, we're not
> helping.

RFC2228 and RFC4217 work just fine for security, thank you.

Personally, I'd rather see SFTP (or FTP over SSH) improved enough to
make FTP go away.  But I don't think I mind this proposed WG.

Nico
--

-- 
Paul Hoffman | 31 Oct 2008 22:34
Picon

Re: Followup on IETF72 discussion of FTP protocol extensions and updates

At 4:00 PM -0500 10/31/08, Nicolas Williams wrote:
>RFC2228 is certainly supported by multiple implementations,

That's good to hear; I had heard the opposite a few years ago.

> as is
>RFC4217 (though often only RFC2228 with the GSS-API Kerberos V
>mechanism, or RFC4217, but not both, are found in any given
>implementation). 

RFC 4217 would be my preference, but I don't see it in the clients I use. Maybe they call it something else.

>RFC2228 and RFC4217 work just fine for security, thank you.

Fully agree.

>Personally, I'd rather see SFTP (or FTP over SSH) improved enough to
>make FTP go away.  But I don't think I mind this proposed WG.

Yep.

Gmane