Re: [PATCH] tls: add zerocopy device sendpage

[David Miller <davem@davemloft.net>]

From: Boris Pismenny <borisp@mellanox.com>
Date: Tue, 14 Jul 2020 10:31:25 +0300

> At the time, Dave objected when we presented this on the netdev conference,
> and we didn't want to delay the entire series just to argue this point. It's
> all a matter of timing and priorities. Now we have an ASIC that uses this API,
> and I'd like to show the best possible outcome, and not the best possible given
> an arbitrary limitation that avoids an error where the user does something
> erroneous.

It's not arbitrary, and what the user is doing is not "erroneous".

Imagine a userspace fileserver using sendpage, other users in the system can
write to the files while the fileserver sends it off to a client.

And that's perfectly legitimate and fine.  We get the IP checksums
correct, everything works.

And, therefore, if TLS is used, the signatures should be correct too.

And I'm also happy to hear that from the very start I was against an
implementation that would knowingly send incorrect signatures.

I'm not moving on this point, sorry.  Correctness over performance.