Jamal,

On Thu, Apr 24, 2014 at 06:02:05AM -0400, Jamal Hadi Salim wrote:
> > It's pretty common to either tap before or after the transport APIs for
> > debugging.  I think the distintion is that in something text-like you can
> > tap and do thinks potentially simpler than if you have to look at binary
> > PDUs.  That requires tapping one level back before the binary marshalling
> > layer.  Obviously that is doable as well, but simply moves the point of
> > complexity one layer up/down.
> >
> 
> So I am sensing development debugging then?
> The arguement i have heard is that operators debug
> by capturing on the wire packets and that ascii was easier to follow.

Such tap points are definitely there (or should be, IMO) for development
debugging.  The "capture on the wire" scenario is complicated by whether
encryption is in use or not.  Binary or not isn't critical here in some
respects.  After all, wireshark does perfectly fine in decoding various
binary protocols.

But it does mean in terms of our security and usability requirements that
permitting integrity-only options vs. encryption required needs to be
carefully thought through.

-- Jeff

_______________________________________________
i2rs mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/i2rs

Reply via email to