15:00:18 #startmeeting S27 01/28 15:00:18 Meeting started Tue Jan 28 15:00:18 2020 UTC. The chair is pili. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:18 Useful Commands: #action #agreed #help #info #idea #link #topic. 15:00:27 o/ 15:00:28 hi 15:00:29 Hi everyone 15:01:01 \o 15:01:02 hi 15:01:05 here's the meeting pad: https://pad.riseup.net/p/s27-meeting-keep 15:01:40 hi 15:02:09 welcome annalee_ :) 15:02:29 pili: Thanks! 15:03:08 let's give a few minutes for pad updates 15:03:27 o/ 15:06:26 dgoulet: there are some questions on socks errors on the pad 15:06:31 dgoulet: https://pad.riseup.net/p/s27-meeting-keep 15:07:14 * dgoulet looks 15:07:19 we can start the discussion with that :) 15:09:04 ok, let's start 15:09:24 so, for #32542 15:09:38 what's the next alpha we can get these in? 15:09:58 0.4.4.1-alpha i guess? 15:10:01 that's gonna take a while 15:10:04 in theory, around feb 15th 15:10:07 ++ 15:10:13 dgoulet: u think so? 15:10:16 dgoulet: thats when it's gonna be merged 15:10:19 not when it's gonna get released 15:10:40 i think real life testing with these codes will have to happen using master and not any released versions of tor 15:10:43 after feb15 indeed 15:10:51 when the code will be merged to master 15:11:09 so too late for 0.4.3. It probably does not matter since those errors do not occur much (if ever) in practice, right? 15:11:12 dgoulet: finding a way to trigger the codes would also help with review i guess 15:11:28 mcs: they do occur when it comes to overloaded network/onionservices 15:11:32 * pili adds a new discussion point to review what will make it into 0.4.3 15:11:37 asn: ah, OK. thanks 15:12:01 pili: what got in, got in. all the rest is 044. 15:12:04 pili: 043 has frozen 15:12:07 right ;) 15:12:19 :) 15:13:40 anyway, I raised the discussion point mainly so we can think about ways to test all of the errors and so people can see all of the browser behavior 15:13:55 brade/mcs: are you good then? 15:14:09 mcs: it's a good point 15:14:10 mcs: yep 15:14:18 updated the section in the pad about 043 and 044 15:14:23 dgoulet: please check it out to see it makes sense 15:15:02 that is correct 15:15:05 asn: that was quick! thank you! I was going to do it myself... ;) 15:15:06 043 is closed now for merge 15:15:13 what about f4? 15:15:39 F6? 15:15:48 043 15:15:51 just added it 15:16:26 they are all in tor except #32542 15:16:44 yeah 15:17:13 there is F7 also 15:17:16 within #32542 15:17:34 what is F7? 15:18:06 Similar has X'F2' code but in this case, all introduction attemps have failed due to a time out. (v3 only) 15:18:10 https://github.com/torproject/tor/pull/1597/commits/6d06f23a4d70a3a6eb92a0b3f61fdecfebdb3275 15:18:29 I think we need to add F7 to antonela's list 15:18:33 let me double check 15:18:34 +1 15:18:52 that code means that we tried all intro points and they all timed out 15:19:05 yup 15:19:20 so tor will stop retrying. You can either consider that the application behind the .onion is down actually 15:19:26 errr 15:19:27 overloaded* 15:19:34 but it is all "in theory" 15:20:03 updated table in #30090 15:20:12 I should update the nc spreadsheet also 15:20:23 dgoulet: is F7 the last one we know of so far? 15:20:28 yes last one 15:20:57 i will try to review #32542 this week 15:21:04 cool :) 15:21:05 ok, anything else on the errors? 15:21:20 I am good 15:21:46 thanks for raising these issues 15:21:50 ok 15:22:08 the next point is just a reminder to add your tickets to the January report pad 15:22:27 i added my onionbalance work 15:22:33 thank you asn :) 15:22:50 i can also explain more in person at fosdem 15:23:04 asn: yup! we should have a mini S27 meeting :) 15:23:44 moving on to the final discussion point, I want to double check that all of the required client auth changes will be in 0.4.3? 15:24:41 i think it is 15:25:05 cool 15:25:19 ok 15:25:32 on the browser side, the client auth changes have not been merged yet but I think tor provides what we need 15:25:38 tor 0.4.3 that is 15:26:19 mcs: yup :) 15:26:49 it would be good to merge the browser changes soon so we can see that things work in our nightly builds 15:27:12 that would be really nice, are you still waiting on a review? 15:28:03 the main client auth part has been reviewed (#30237) and we are waiting on one more review for #19757 (key management) 15:28:17 should be soon :) 15:28:26 ready soon 15:29:05 great :) 15:29:28 I have added one more discussion point about objective percentage completion 15:29:42 I want to send a work completion report at the end of this month so now is a good time to review where we are 15:30:18 shall we move on to that? 15:30:37 yes 15:30:43 dgoulet: 01A1.1 seems to still be open 15:30:48 are there more to do there? 15:30:55 seems like #31632 is still open 15:30:57 that's the reason 15:31:04 ok: #29995 15:31:05 yup 15:31:06 not sure 15:31:07 you tell me ;) 15:31:15 asn: yeah that one you asked for testing but I have no idea how to test that ... 15:31:36 asn: I need to somehow simulate circuit failure service side exactly during a desc upload 15:32:14 if u think it's ok to merge without explicit testing, perhaps make a small case in the ticket and we can proceed? 15:32:20 i had kinda forgotten about that ticket 15:32:29 and since it's blocking o1a1.1 from 100% let's try to move it forward somehow? 15:32:39 we can move it to -can 15:32:50 since next merge window is in a while so that will linger for a bit 15:32:56 it's kinda important no? 15:33:13 that was my next question (how important is this?) 15:33:15 if we move it to -can it will never be done 15:33:22 it is but not critical 15:33:27 i think it's fine to linger as -must until feb15 15:33:42 asn: well if it is in the correct milestone and assigned, we won't loose it 15:33:43 but if u think it should be moved to -can thats fine by me 15:33:48 it just seems like a reachability issue 15:33:50 my plan was to report O1A1.1 as 90% completed 15:34:00 I think that's a good compromise 15:34:06 well wait 15:34:24 O1A1.1 is basically done 15:34:44 the work has been done in #31632 15:34:53 just need to figure out the last bits 15:35:04 yep 15:35:09 and #22893 will _not_ happen 15:35:13 yep 15:35:16 ill move that out 15:35:31 moved out 15:35:41 ok 15:36:00 #31632 is important but unlikely to cause real issues honestly... so until we can merge it (which will happen in ~15 days+, we can consider it done imo 15:36:07 and what are we going to do about #31632? 15:36:15 but we won't loose it since it is assigned to me and milestone is not Unspecified 15:36:22 dgoulet: so we will merge it? 15:36:31 it will get merged one way or the other for sure :) 15:36:41 dgoulet: ok sounds good 15:36:42 that is a fix we need 15:36:47 feel free to do the move 15:36:53 and we can close o1a1.1 15:37:05 ok, so I'll go ahead and mark as 90% for O1A1.1 15:37:16 i think dgoulet is suggesting we can go 100% 15:37:25 it is 100% 15:37:28 no need to keep it open still 15:37:31 we are virtually done there 15:37:38 ok, so it's done, it's just waiting to be merged? 15:37:40 as in no more work will go in that ticket for s27 15:37:41 because we're not going to add the test? 15:38:05 we'll see what we decide there for that ticket about the test, unclear at the moment 15:38:18 ok 15:38:29 let's move on then... ;) 15:39:04 O1A1.2 was last reported as 50% complete 15:39:05 asn: how much work do you estimate is left in this one? 15:39:12 we are at 70% 15:39:45 it will be 100% in beginning of march 15:39:50 in 7-10 days i will ask for first testing 15:39:58 and then some more days of bugfixing 15:40:02 write a blog post 15:40:05 and we can call it done 15:40:24 ok, sounds good, thank you :) 15:40:43 O1A2 was done a while back 15:41:09 O2A1 15:41:10 I guess we're just waiting for reviews there and we can call it done? 15:41:51 I think so, yes. What percentage did you reported for O2A1 last month? 15:41:57 s/reported/report/ 15:42:58 (brb) 15:43:19 last time I reported was at 50% 15:43:26 as I wanted to be conservative :) 15:43:33 that was at the end of November 15:43:58 so this is for the work completion ones which we have been doing every 2 months 15:44:01 separate from the monthly reports 15:44:12 mcs: I might call it 75% or 90% 15:44:16 I would report at least 75% 15:44:25 just in case there are any surprises (which I doubt) 15:44:30 mcs: yup, sounds good 15:45:33 O2A2: I've previously reported 30% as antonela had been working on it 15:46:26 I think you can report at least 50% for O2A2 because we have the tor piece done plus work in progress for the new error pages (part of O2A4) 15:46:27 actually, that could be a bit higher given that dgoulet did some work on the tor side for it also 15:46:30 yup 15:47:25 O2A3 15:47:32 the main ticket there is #21952 15:47:42 acat: are you still waiting on reviews? :) 15:48:36 i think so, for the revision i did addressing mcs/brade first review 15:49:14 then there are pospeselr's comments wrt to Onion-Location being sent in non 30X responses 15:49:22 I think maybe pospeselr and antonela will discuss it together this week 15:49:41 since they're both at the all hands 15:50:04 acat: so how much more work do you expect on this one? 15:50:09 maybe we should wait for the outcome of their discussion…. 15:50:25 mcs: yeah... 15:51:03 pili: very little, i think 15:51:05 ok, I might not report on this one, I'll see 15:51:06 and sysrqb may want to give an opinion about issues raised too. we should check with Matt in any case. 15:51:13 it's a matter of being sure about the header behaviour 15:51:18 yup 15:51:18 sure 15:51:38 there's the other tickets on O2A3 that are not moving and make me uneasy also 15:51:41 i think pospeselr asked asn, and it was suggested to ping web folks who would actually use Onion-Location header (anarcat/hiro, our Facebook friendo, etc) and see how they would want it to work/how they would configure web services to use it 15:51:43 we should figure out if we want to do them or not 15:52:12 we should defer what we can if we want to finish on time :) 15:52:26 ok, I'll follow up on O2A3 offline, let's move on to O2A4 15:53:04 I had reported this at 50% last time 15:53:07 and we agreed that i would try to ask will about his opinion of Onion-Location 15:53:26 acat: ok 15:53:27 sorry, we already moved on :) 15:53:38 we can always move back :D 15:53:45 I know I'm always rushing everyone :P 15:54:00 the main tickets for O2A4 are #19251 15:54:18 and the onion indicators in the url bar 15:54:31 which I think antonela and pospeselr will also discuss this week 15:54:40 I would say we are 50% or more done with #19251 (but we have not published patches for review yet so who knows?) 15:55:01 creating good text for the error pages will take some work too 15:55:25 did we report progress for O2A4 previously? 15:55:49 yup, 50% also, mainly on the design work done already 15:55:52 I might lie 15:55:59 not lie :S 15:56:02 leave it at that... ugh 15:56:25 as in not report any more time so far, in case of any surprises 15:56:26 (ugh; WiFi glitch) 15:56:27 we are always truthful 15:56:32 :) 15:56:43 50% seems fine to me but we need to move fast over the next few weeks 15:57:05 yup 15:57:06 and finally O2A5 15:57:07 which I haven't reported anything on yet 15:57:18 since we hadn't started until recently :D 15:57:39 acat: I assume there's no point in reporting any percentage completion, unless you want to count the research/analysis... 15:57:50 (we should wrap up the meeting soon also) 15:59:02 pili: i did some progress with the poc, but there are parts of it i think are still not clear/decided 15:59:13 UI mostly 15:59:20 acat has made some good progress with respect to planning for the implementation but I am not sure what % to assign 15:59:23 25%? 15:59:26 maybe we can report 25% 15:59:27 snap :) 15:59:31 ok, I will do that 15:59:33 (grabbing a number from thin air) 15:59:38 me too :P 15:59:47 ok, let's leave it there then 15:59:54 and end the meeting 15:59:55 thanks everyone 15:59:58 #endmeeting