RFC 8962

Establishing the Protocol Police

๐Ÿ“… published April 2021, from ietf

Establishing the Protocol Police ๐Ÿšจ

  • RFC 8962, "Establishing the Protocol Police" ๐ŸŽ€
  • Category: Informational ๐Ÿ’–
  • Stream: Independent Submission โœจ
  • ISSN: 2070-1721
  • Date: 1 April 2021 ๐ŸŒธ
  • Authors: G. Grover, N. ten Oever, C. Cath, and S. Sahib ๐Ÿ‘‘

Abstract โœจ

Okay so the IETF has this iconic mantra, "We are not the Protocol Police." ๐Ÿ’… But bestie, if we want every protocol to be implemented and deployed in full compliance with the IETF's standards, we need a body that's responsible for checking and enforcing correct protocol behavior. ๐Ÿ”ฅ

This document officially establishes the Protocol Police ๐Ÿš”. It defines the body and spells out which parts of IETF protocols they'll police. It's a reference point for networking engineers, law enforcement officials, government reps, and literally everyone else ๐Ÿซถ. It also gives advice on how to report issues to the Protocol Police.

Status of This Memo โœจ

Quick vibe check: this document is not an Internet Standards Track specification. It's published just for info ๐Ÿฆ‹.

It's a contribution to the RFC Series, separate from any other RFC stream. The RFC Editor chose to publish it at their discretion and makes no statement about its value for implementation or deployment ๐Ÿ™ˆ. Documents the RFC Editor approves for publication aren't candidates for any level of Internet Standard. See Section 2 of RFC 7841 for the receipts.

For the current status, errata, and how to give feedback, check https://www.rfc-editor.org/info/rfc8962 ๐Ÿ’œ.

Copyright (c) 2021 IETF Trust and the persons identified as the document authors. All rights reserved ๐Ÿ’–.

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) as they stand on the publication date. Please read these carefully, because they spell out your rights and restrictions for this document ๐Ÿ“œ.

Table of Contents ๐Ÿงš

1.  Introduction
2.  Definitions
3.  Composition of the Protocol Police
  3.1.  Recognizing the Protocol Police
  3.2.  Recruitment
4.  Support for the Protocol Police
5.  Punishable Offenses
  5.1.  Protocol-Layer Violations
  5.2.  Deliberate Non-Interoperability
  5.3.  Disobeying RFCs
6.  Reporting Offenses
7.  Punishment
  7.1.  Traffic Imprisonment
8.  Morality Considerations
  8.1.  Oversight
9.  IANA Considerations
10. Security Considerations
11. Privacy Considerations
12. Human Rights Considerations
13. Conclusion
14. Informative References
Acknowledgments
Authors' Addresses

1. Introduction ๐ŸŒˆ

Okay so IETF folks keep running into situations where developers or deployers just... don't follow the sacred words of an RFC ๐Ÿ’€. That can lead to outcomes everyone agrees are unexpected, unwarranted, or just plain undesirable.

Some people think IETF participants should reach consensus on which protocol behavior is unacceptable, and that the maintainers and developers of non-compliant protocols should get called out ๐Ÿ˜ค. Others (especially working group chairs) kinda rudely fall back on the undocumented mantra, "We [or the IETF] are not the Protocol Police." Honestly? That's led to a ton of confusion about who gets to judge proper interpretation of protocol specs ๐Ÿ™ƒ.

So this document formally establishes the Protocol Police, which has been totally undocumented at the IETF until now ๐Ÿฆ‹. It defines the body and spells out which aspects of IETF protocols they'll police. It's a reference point for networking engineers, law enforcement officials, government representatives, and others. It also gives advice on how to report issues to the Protocol Police.

The Protocol Police, as defined here, are responsible for enforcing all IETF standards and best practices ๐Ÿ’….

2. Definitions ๐Ÿ’–

For possibly the first time in IETF history, words like "SHALL" and "MAY" are used in this document in their real and enforceable sense ๐Ÿ”ฅ.

3. Composition of the Protocol Police ๐Ÿ‘‘

The Protocol Police shall be selected by the IETF Nominating Committee (NomCom) as laid out in [RFC3797], in a manner similar to the one used to select the IAB and IESG [RFC8713].

Here's the tea though: the members of the Protocol Police shall not be publicly named ๐Ÿ™ˆ. That lets them operate more effectively, without interference or unwarranted pressure from the community. The first rule of the Protocol Police is $CIPHERTEXT ๐Ÿ”.

3.1. Recognizing the Protocol Police ๐Ÿ•ต๏ธโ€โ™€๏ธ

When more than one person says, "We are not the Protocol Police," at least one of them is not telling the truth ๐Ÿ‘€.

The Protocol Police love company and are never alone ๐Ÿซถ.

You are not the Protocol Police: we are. We are not the Protocol Police: you are. ๐ŸŒ€

3.2. Recruitment ๐ŸŽ€

If you're interested in joining the Protocol Police, contact your localhost ๐Ÿ’ป. Your behavior will be monitored, and your implementation will be analyzed for full RFC compliance. If your deeds, both now and in the past, are recognized as true to the scripture, NomCom will of course be instructed to induct you into the ranks โœจ. But if you've transgressed, any information the investigation produces MAY be used against you in future proceedings ๐Ÿ˜ญ.

When your suitability for Protocol Police membership is being assessed, contact may be made on your behalf with the Internet Moral Majority [RFC4041] ๐Ÿ“ฃ.

If you have nothing to hide, you have nothing to fear ๐Ÿซฃ.

4. Support for the Protocol Police ๐Ÿ’œ

Support for the existence and operation of the Protocol Police is essential to the concept of "policing by consent." Luckily, the IETF community and all stakeholders can now consider themselves served by this document, which, just by existing, warrants adherence ๐Ÿ‘‘.

5. Punishable Offenses ๐Ÿšจ

5.1. Protocol-Layer Violations ๐Ÿงฑ

Some boundaries must not be crossed. There are no acceptable layer violations ๐Ÿ™…โ€โ™€๏ธ. Layers, like borders, are ambiguous abstractions that only exist to uphold the legitimacy and identity of the institutions that produce them. Even so, they shall be observed and defended, because the Protocol Police exist to defend them ๐Ÿ›ก๏ธ.

5.2. Deliberate Non-Interoperability ๐Ÿšซ

The Protocol Police are sanctioned to get into any walled garden that undermines interoperability ๐ŸŒท. At the same time, they'll defend legacy interoperability options in all NTP eras (see Section 6 of [RFC5905]), and they'll be reachable via the Extensible Messaging and Presence Protocol (XMPP) until at least era 2147483649 ๐Ÿ“ฑ. Iconic commitment.

5.3. Disobeying RFCs ๐Ÿ“œ

Back in the beginning, there was the RFC, and the network was with the RFC, and the RFC was with the network. Through the RFC, everything was made, and nothing that was made came to be without it. Inside the network was life, and that life was the light of the INTERNET โœจ. The commandment is simple: thou shalt not stray from the path set out in the RFCs, or else thou shalt be scattered across the data plane ๐Ÿ’€.

6. Reporting Offenses ๐Ÿ“ฎ

Send all your reports of possible violations and all your tips about wrongdoing to /dev/null ๐Ÿ•ณ๏ธ. The Protocol Police are listening and will take care of it ๐Ÿซก.

7. Punishment โšก

7.1. Traffic Imprisonment โ›“๏ธ

The Protocol Police will keep a list of hosts and clients that have shown they can't understand simple commandments in RFCs. Those commandments are, as all IETF participants know, precise and accessible even to a general audience ๐Ÿ™ƒ.

If this work gets standardized, IANA is requested to register the list of addresses (see Section 9). For a period set out in an official notification, all other networks SHALL drop all network packets originating from or intended for such addresses ๐Ÿšซ. This results in effective and forced confinement of criminal networks. Period ๐Ÿ”’.

Using powerful machine-learning mechanisms for threat analysis, the Protocol Police will identify networks that are likely to fail to comply with this requirement ๐Ÿค–. This process is known as Heuristic Internet Policing (HIP). Networks identified this way will be disciplined by the Protocol Police with TCP RSTs ๐Ÿ’ฅ. Let it be known: the Protocol Police always shoot from the HIP ๐ŸŽฏ.

8. Morality Considerations ๐Ÿ’…

This section contains morality considerations consistent with the demands of [RFC4041] ๐ŸŒธ.

|  We reject: kings, presidents and voting.
|  We believe in: rough consensus and running code.
|  We only bow down to: the Protocol Police.
|
|  -- My friend Dave

|  Woop-woop!  This is the Protocol Police!
|  Woop-woop!  That's the packet of the beast!
|
|  -- KRS-ZERO (after spotting an evil bit [RFC3514])

8.1. Oversight ๐Ÿ‘๏ธ

All police forces must be accountable and subject to oversight. The Protocol Police take full responsibility for overseeing their own actions, and they promise to overlook all activities ๐Ÿซก.

9. IANA Considerations ๐Ÿ—‚๏ธ

If this work gets standardized, IANA SHALL set up a registry for criminal networks and addresses. If IANA doesn't comply with these orders, the Protocol Police shall go and cry to ICANN before getting lost in its bureaucracy ๐Ÿ˜ค.

10. Security Considerations ๐Ÿ”

Before the Protocol Police, there was no security. Then the Police arrived. All your networks are belong to us ๐Ÿ˜ˆ๐Ÿ’€.

11. Privacy Considerations ๐Ÿซฅ

None.

12. Human Rights Considerations ๐ŸŒท

There are none for you to worry about. The Police will see to it ๐Ÿ‘ฎโ€โ™€๏ธ.

13. Conclusion ๐ŸŽ€

Case closed. ๐Ÿ”จ

14. Informative References ๐Ÿ“š

[RFC3514]  Bellovin, S., "The Security Flag in the IPv4 Header",
           RFC 3514, DOI 10.17487/RFC3514, April 2003,
           <https://www.rfc-editor.org/info/rfc3514>.

[RFC3797]  Eastlake 3rd, D., "Publicly Verifiable Nominations
           Committee (NomCom) Random Selection", RFC 3797,
           DOI 10.17487/RFC3797, June 2004,
           <https://www.rfc-editor.org/info/rfc3797>.

[RFC4041]  Farrel, A., "Requirements for Morality Sections in Routing
           Area Drafts", RFC 4041, DOI 10.17487/RFC4041, April 2005,
           <https://www.rfc-editor.org/info/rfc4041>.

[RFC5905]  Mills, D., Martin, J., Ed., Burbank, J., and W. Kasch,
           "Network Time Protocol Version 4: Protocol and Algorithms
           Specification", RFC 5905, DOI 10.17487/RFC5905, June 2010,
           <https://www.rfc-editor.org/info/rfc5905>.

[RFC8713]  Kucherawy, M., Ed., Hinden, R., Ed., and J. Livingood,
           Ed., "IAB, IESG, IETF Trust, and IETF LLC Selection,
           Confirmation, and Recall Process: Operation of the IETF
           Nominating and Recall Committees", BCP 10, RFC 8713,
           DOI 10.17487/RFC8713, February 2020,
           <https://www.rfc-editor.org/info/rfc8713>.

Acknowledgments ๐Ÿซถ

Members of the Protocol Police MUST salute and ACK all network traffic from Daniel Kahn Gillmor, Mallory Knodel, and Adrian Farrel ๐Ÿซก๐ŸŒŸ.

Authors' Addresses ๐Ÿ’Œ

Gurshabad Grover
Email: gurshabad@cis-india.org

Niels ten Oever
Email: mail@nielstenoever.net

Corinne Cath
Email: corinnecath@gmail.com

Shivan Kaul Sahib
Email: shivankaulsahib@gmail.com

๐Ÿ“ฆ where this page comes from