
From nobody Mon Apr  4 06:33:37 2016
Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0F612D19E for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 06:33:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.911
X-Spam-Level: 
X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91PhyIMpX5T4 for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 06:33:32 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F5FE12D15A for <ace@ietf.org>; Mon,  4 Apr 2016 06:33:23 -0700 (PDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 03F8C2002A for <ace@ietf.org>; Mon,  4 Apr 2016 09:36:47 -0400 (EDT)
Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id E381C6375A for <ace@ietf.org>; Mon,  4 Apr 2016 09:33:21 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
to: ace@ietf.org
In-Reply-To: <30349.1458086018@obiwan.sandelman.ca>
References: <30349.1458086018@obiwan.sandelman.ca>
X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.4.2
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature"
Date: Mon, 04 Apr 2016 09:33:21 -0400
Message-ID: <13760.1459776801@obiwan.sandelman.ca>
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/3fbt4yBooFmh5VhiCot6L9MCbCs>
Subject: Re: [Ace] some minor comments/suggestions on draft-ietf-ace-actors-03
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 13:33:36 -0000

--=-=-=
Content-Type: text/plain


I'm just going to pull a couple of questions out of my comments from two
weeks ago, as I think that they merit discussion on the mailing list, and
maybe at the mic:

Michael Richardson <mcr+ietf@sandelman.ca> wrote:
    > Thank you for including 2.2, architecture variants.
    > I wonder if it would be worth specific references here to Bananas for Munich?

    > I think it might also be worth this because in some flows of that use
    > case, RqP = RO, and sometimes not, and these two situations occur in the
    > same system.  I'm concerned that someone might read 2.2 and think that
    > they have to pick *one* of those variants, instead of realizing that
    > they have to support all roles in some place in their system.

    > I think that 2.3 makes this pretty clear, but maybe the first paragraph
    > of 2.3 could be more authoritative?  i.e. we standarized flows and messages,
    > not devices :-)


...

QUESTION:
    > Yes. I wonder if there is a difference between *provisioning* and
    > *commissioning*, or if these just two words for the same thing, and if so, if
    > we (the IETF) should pick one?

...

    > Section 7.2: can we link the "in other use cases"
    > to the actual use cases in 7744?

    > Section 9.1: issue should be: 0, steal the device.
    > probably the most important concern is the ability to
    > rapidly de-authorize a device, and further, to be able to
    > determine if "this is the droid you are looking for"

...

    > 9.2: I suggest that instead of listing might, might, etc.
    > that we list in *security considerations* the specific attacks
    > that are excluded by various kinds of access to clocks.




--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-




--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBVwJtHoCLcPvd0N1lAQLntAf+KwamexfxVHaaiRHY1Su9bLOOo+lWz2qN
cD3RtR3b3uHY3mdQdmfdtsnUqnnq6LPzKPP4MOeD0lqbZJWnVnFyaNMx8r/zEhxf
977ZxEJcl7TyWRxSeFRf4G1BDQWTy+0VzFKVmkrpNxw4s/uGkSJ5HPopwtB7zv/2
aQk2rtmNpcnc06u8MqHETItiTXEtSPCq9SnlxBDLHgeOwkBRx3ct3IYe+HIilk+/
Yj2tjyqZ9uPo7CaulzcFBYB/LpON4NHWAfllOFs5ehQlywCnAS8DUbztXuCPFKyo
HeQX4hh9X3NyI7DJKp1Jy7qbwdNCX9juZ+tCNPH13tuNhX/P3sNUrA==
=qe7E
-----END PGP SIGNATURE-----
--=-=-=--


From nobody Mon Apr  4 07:33:01 2016
Return-Path: <francesca.palombini@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44EB412D6FD for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 07:33:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5B51sOiiQUTQ for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 07:32:58 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B87B12D74C for <ace@ietf.org>; Mon,  4 Apr 2016 07:32:14 -0700 (PDT)
X-AuditID: c1b4fb3a-f79d86d000005b69-37-57027aecffc8
Received: from ESESSHC002.ericsson.se (Unknown_Domain [153.88.183.24]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 7B.C1.23401.CEA72075; Mon,  4 Apr 2016 16:32:12 +0200 (CEST)
Received: from ESESSMB205.ericsson.se ([169.254.5.173]) by ESESSHC002.ericsson.se ([153.88.183.24]) with mapi id 14.03.0248.002; Mon, 4 Apr 2016 16:32:11 +0200
From: Francesca Palombini <francesca.palombini@ericsson.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: [Ace] RS Synchronized Time
Thread-Index: AQHRdKx//b3GEFABW0WKgw/zJvRVBZ9RcZGAgAAMWYCADD6nAIAcVzrA
Date: Mon, 4 Apr 2016 14:32:11 +0000
Message-ID: <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se>
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com>
In-Reply-To: <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [153.88.183.150]
Content-Type: multipart/mixed; boundary="_003_D2736FF6C4A3F3428982D3508DD478DE129DEA9AESESSMB205erics_"
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrGIsWRmVeSWpSXmKPExsUyM2K7hO6bKqZwg4brShbfv/UwOzB6LFny kymAMYrLJiU1J7MstUjfLoEr43PLLNaC5qeSFWc/tzI2ML7ql+xi5OSQEDCROHNqGyuELSZx 4d56ti5GLg4hgSOMEu+v/2aBcBYzSnS93cUEUsUmYCNx4eF7oA4ODhEBRYnrjxJBwsIC6hKH vq5jBrFFBDQklm56wQhhu0nc2jgRbAGLgIrEuUtv2EFsXgFfiQlXT4CNFBLYyCjx7B1YDadA oMTMs81gcUagg76fWgNmMwuIS9x6Mp8J4lARiYcXT7NB2KISLx//g3pASWLF9kuMEPWZEvOW 9zFD7BKUODnzCcsERpFZSEbNQlI2C0nZLKDPmAU0Jdbv0ocoUZSY0v2QHSLsKfGjXRAibCFx bupp1lnAAGIGhda6IyfZIBLWEk0HrjKh6gWxdSWOnD/GDhNv294MVb+CUeLWQhmI+dYSXdMN kLUuYORfxShanFpcnJtuZKSXWpSZXFycn6eXl1qyiRGYAg5u+W21g/Hgc8dDjAIcjEo8vAtO MYYLsSaWFVfmHmJUAZrzaMPqC4xSLHn5ealKIrw55UzhQrwpiZVVqUX58UWlOanFhxilOViU xHlzIv+FCQmkJ5akZqemFqQWwWSZODilGhglZKQzvy1bsvDlvwz1xlNZSbxvWGW2TVZftMxo sR37tp5P0sHVaZ1z/wZslFnwU3qL8sGFp5paepuXzn35dGmE+aL7Eenda7L4Tl1m7F+TaHp+ hq9bLV+ysBP7h5crODi32FZdV63+nmPyf9vhtiO3o3zV+BX7C1k623Lts07xXz0t8qZ/410l luKMREMt5qLiRAAUoX6hCQMAAA==
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/tqTyWIBNojRj86q2dCbVQ2EDDDc>
Subject: [Ace] FW:  RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 14:33:00 -0000

--_003_D2736FF6C4A3F3428982D3508DD478DE129DEA9AESESSMB205erics_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_003_D2736FF6C4A3F3428982D3508DD478DE129DEA9AESESSMB205erics_
Content-Type: application/pdf; name="3PartyNonceBasedAKE-ForOAuthPoP.pdf"
Content-Description: 3PartyNonceBasedAKE-ForOAuthPoP.pdf
Content-Disposition: attachment;
	filename="3PartyNonceBasedAKE-ForOAuthPoP.pdf"; size=305096;
	creation-date="Thu, 17 Mar 2016 14:44:00 GMT";
	modification-date="Thu, 17 Mar 2016 14:44:00 GMT"
Content-ID: <5F491D42D0CB7D48AF904FFE8B14286C@ericsson.com>
Content-Transfer-Encoding: base64
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--_003_D2736FF6C4A3F3428982D3508DD478DE129DEA9AESESSMB205erics_
Content-Type: text/plain; name="ATT00001.txt"
Content-Description: ATT00001.txt
Content-Disposition: attachment; filename="ATT00001.txt"; size=124;
	creation-date="Thu, 17 Mar 2016 14:44:00 GMT";
	modification-date="Thu, 17 Mar 2016 14:44:00 GMT"
Content-ID: <4BC2135D5A88544F9EF51A754A6C83C6@ericsson.com>
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_003_D2736FF6C4A3F3428982D3508DD478DE129DEA9AESESSMB205erics_--


From nobody Mon Apr  4 08:10:33 2016
Return-Path: <renzoefra@gmail.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1248812D75C for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 08:10:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level: 
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gbXvqiBa2BOL for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 08:10:25 -0700 (PDT)
Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79CBE12D58F for <ace@ietf.org>; Mon,  4 Apr 2016 08:10:23 -0700 (PDT)
Received: by mail-qk0-x234.google.com with SMTP id o6so63557168qkc.2 for <ace@ietf.org>; Mon, 04 Apr 2016 08:10:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;  h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=1YzmPs2SmbuNm+k4wQ649Xfbvhh84ig0J/KqXjLH/Ss=; b=HALYd0HryN5U+a5zwolELTjw+bowMx5Tu+Pc9+s4sdlpGXHOJmMdjMNrh/nU7OoOPy UbAcenznhvMBESd/zC0WKgy1d4VWcQf7fCnR+DFV/jWy4mBl+N9MK/w6MmloXs9pHklp nbVTgM9gHPnPEiamccYFDG7CZiqJEaQNgVaOQvqZbkskfH4G7n9UbIfiW7GUdDnFOXpE vvYAhpJeYvkjLUECU3uqqOrUELvitdhx51F+9HYKPcD/0cziezkEoEnC32klABkKhJx3 mmrVkq45lPDfz5AxMY1wGM7Ai38cxapukBBjG9pn/DrR+V2+5UkyxIjrFGL2HwEcsi89 YVmw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=1YzmPs2SmbuNm+k4wQ649Xfbvhh84ig0J/KqXjLH/Ss=; b=S85pOYMc/OJ9t9IRDMJNcuqGIK4mLvFabm2M98hk2mCLw4jSg8B9a7Aqgob55bolKP SP+l2p2B/TlFXgvbJDl5tbv1f0KOjjmlKZY0gODZ+13Z0l1WdyNySc+R466094C9g2Nl n20FjczaLyCKQJBdq1HYD68OUp2R5uOsT39+luyFWoQi2Xx//ZGHKqzortom1Chmc+g/ Ji2ZGWfxwp1WgDd7KOZstPvoIX8WY+Ug/MC7jNNoAklUepslROQY7Yz2w46UsXahkWwL RSi10QLjUpgWNV2q7VZ2nGgAO+Satb9QVbhTWI9WJBJOoSTlRXiMOPEfnVMN0jzyrIJ5 7qkA==
X-Gm-Message-State: AD7BkJJLUrPOeb+m2iPZGBkgLFz5oduzFVsXTOOHpkj8IwSRCvOMtwKZ8d52Rq0bM9MIXHaAc9gujynrs3ISgA==
X-Received: by 10.55.77.202 with SMTP id a193mr34217337qkb.48.1459782622622; Mon, 04 Apr 2016 08:10:22 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.55.148.198 with HTTP; Mon, 4 Apr 2016 08:10:03 -0700 (PDT)
In-Reply-To: <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se>
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com> <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se>
From: Renzo Navas <renzoefra@gmail.com>
Date: Mon, 4 Apr 2016 12:10:03 -0300
Message-ID: <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com>
To: Francesca Palombini <francesca.palombini@ericsson.com>
Content-Type: text/plain; charset=UTF-8
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/SVVlP5ipQ5W4ciO7_JrEMECZ6c4>
Cc: "ace@ietf.org" <ace@ietf.org>
Subject: Re: [Ace] FW: RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 15:10:32 -0000

Hi All,

Thank you Francesca. I was a bit nervous as it is the first time I
presented something at IETF. I did not pass further than the 4th
slide... So I think I couldn't make my point so clear.

Basically the point I wanted to rise is:

There exists several nonce-based (auth key est.) well-known protocols
that can be used to solve the pop token generation.
If you skim through the slides you will see there are lots of
possibilities and much room to profiling (and confusion).

I wanted to rise the question on the mailing list to try to arrive to
a sort of discussion on which mappings do make sense (if any..) to
solve our problem.
I would gladly work on this.

Renzo


ps: I correct a mistake from my original message:

"The messages/protocols do NOT have any timestamp and the nodes do not need
to have absolute time (wall clock) awareness."


From nobody Mon Apr  4 11:52:05 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BC8912D0CC for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 11:52:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xVn2VnxDQEXM for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 11:52:01 -0700 (PDT)
Received: from mail-lb0-x22e.google.com (mail-lb0-x22e.google.com [IPv6:2a00:1450:4010:c04::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FEB512D7F6 for <ace@ietf.org>; Mon,  4 Apr 2016 11:51:50 -0700 (PDT)
Received: by mail-lb0-x22e.google.com with SMTP id vo2so175741050lbb.1 for <ace@ietf.org>; Mon, 04 Apr 2016 11:51:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=KB2UReTpY1dNmkTY6fx7gyyyPcir3EIZXJmg7eVOSE4=; b=Bpzab6duUqm020hMbYAO28tcM7ZHvpkUv/uB2A5dsz+zJyZvPrRou18qNXmpjRXbmq HW5EuP+loUl/3Vh37XkBK76tMghm1kxoAPQkrOk+X1KpQ+zGl4TeHC+VAfHiGnxw1yGE /EtxJI/XngbAFXpqG4am+VF4xKZ4VXKk4XZ1LDujceqWJJrouxsVrXuZfy+b80rPw5Jp h+8gTYS+fmqqFQh6UzjWXR+3CeC74WWyPVtI0TCPEKrbPVXkxmtCn3mQH9L3NLpBr7HY aSj7V5ovzFSmAe/ozltMhASSyOUlgB5hH0rL+zfaLNN8vhg4Efi7bE30t05KpTwP5Ipt iV6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=KB2UReTpY1dNmkTY6fx7gyyyPcir3EIZXJmg7eVOSE4=; b=Dbl+FaFiv0Hdj7OqqLyccmx7CRCxhjXzhb7dHujR2jE5iJoOm7ClYOZRlp5G09lnGi y/Ba7SuvcKk9imJhndN+nOFcQwlE7EF4GEhiYxjpA9eImSmGdPns5lu0lHz2dvPKtCkX ydQAIll40oJtpMmXGPQcGRGVgPXzR8XCNJOl9PQCXg/iBUQqpH+eAvq5bGRkikEpvzce gGSTKKuO9J2nziZ7spippys3KZIpm2+VTzyCj8wbYCfgtHM9Lw0spMC7l7QIol/ysnrn x4BMya69sH+hxVfL7EMJSh2qstWUTYDYi0/T9YJj+u4+2rcd18jqvpDx8xtXRiZBBqUr UExQ==
X-Gm-Message-State: AD7BkJIYglAd4h3eH0UkFVashVx/QDMiFn2tdj/O6gs6Om+pYpOMjtv4pWfs/MGjfXrHPZCE
X-Received: by 10.112.163.135 with SMTP id yi7mr6285018lbb.122.1459795908257;  Mon, 04 Apr 2016 11:51:48 -0700 (PDT)
Received: from [192.168.0.110] ([89.253.76.185]) by smtp.gmail.com with ESMTPSA id rp10sm5016692lbb.13.2016.04.04.11.51.46 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Mon, 04 Apr 2016 11:51:47 -0700 (PDT)
To: ace@ietf.org
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com> <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se> <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <5702B7BC.6060306@sics.se>
Date: Mon, 4 Apr 2016 20:51:40 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010008000201070806050906"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/92NIdeW79-hr650evjv4kDwkIXA>
Subject: Re: [Ace] FW: RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 18:52:03 -0000

This is a cryptographically signed message in MIME format.

--------------ms010008000201070806050906
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-04 17:10, Renzo Navas wrote:
> Hi All,
>
> Thank you Francesca. I was a bit nervous as it is the first time I
> presented something at IETF. I did not pass further than the 4th
> slide... So I think I couldn't make my point so clear.
>
> Basically the point I wanted to rise is:
>
> There exists several nonce-based (auth key est.) well-known protocols
> that can be used to solve the pop token generation.
> If you skim through the slides you will see there are lots of
> possibilities and much room to profiling (and confusion).
>
> I wanted to rise the question on the mailing list to try to arrive to
> a sort of discussion on which mappings do make sense (if any..) to
> solve our problem.
> I would gladly work on this.
>
> Renzo
>

Renzo,

I see one problem with all the approaches presented in your slides=20
except for Otway-Rees/Bauer-Berson-Feiertag: They all seem to require=20
full connectivity. Now in several usecases we have either C or RS=20
without direct connectivity to AS. I wouldn't want to work towards a=20
solution that excludes those usecases.

If I'm not mistaken the proposal G=F6ran presented is basically Otway-Ree=
s=20
integrated in the COAP request response protocol (steps 1. and 4.) and=20
the OAuth token request or introspection protocol (steps 2. and 3.). My=20
understanding is that G=F6ran is not designing a new protocol, but=20
adapting an existing one to the specific use case.

@G=F6ran: Would that be a fair description of your proposal?

/Ludwig



--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=E4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms010008000201070806050906
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ
BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll
bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3
aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF
B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK
/swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji
/GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0
+jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y
z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84
MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v
YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug
KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB
Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG
BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh
cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF
KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D
I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f
qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd
vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6
V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw
DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x
KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT
IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw
MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn
BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy
dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt
TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf
a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx
7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D
IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg
MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T
AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv
bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z
dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz
L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv
GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0
dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB
i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB
OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets
D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI
NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA
0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf
1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/
tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH
2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9
VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp
/2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG
A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa
otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
MBwGCSqGSIb3DQEJBTEPFw0xNjA0MDQxODUxNDBaMC8GCSqGSIb3DQEJBDEiBCCg8BU/ctUV
cDMmekimcRZh+8uNh/AAPBHqrqqUP5XqnDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB
KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC
AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG
A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl
cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu
dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE
BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp
ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD
QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQCoN4BpxJ1iDL3KK0CPihMQ
lTQX+gg9aS1KQekKkk/P/629TyGBshl+9NIGDSb5OKvI0eHOCSfpJxomlcvgiMNmPk59C97O
gT6ulpCOEB3ifdpVKDy5tIYblBJ1pFA0GNBS/8AO0g8teYb0mBLzQjPdg3cBt4T8iGCf7Sp4
dKTzPPLlC13XqO3pcfOiA1FopHmUDiXhpuM2XWGu84m8YoJgKV8dlQ6W203/umgxNUieD74W
tFWaEWm23Qsh5CZxHhnMbaw7dRAfDFeUmXYvu1yDyXOwind5LO0RRAlV6O/tNUyu7rTTfEPQ
6inWq7LCeV1JA7VagW/dKlzn5Kmzxx3sAAAAAAAA
--------------ms010008000201070806050906--


From nobody Mon Apr  4 14:16:06 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F309512D8BA for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 14:16:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cZ-w6KKX3gi0 for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 14:16:03 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4D2312D8B9 for <Ace@ietf.org>; Mon,  4 Apr 2016 14:16:02 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.155.135]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MGSDw-1b0PHD2lEW-00DEsR for <Ace@ietf.org>; Mon, 04 Apr 2016 23:16:01 +0200
To: "Ace@ietf.org" <Ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <5702D996.2010501@gmx.net>
Date: Mon, 4 Apr 2016 23:16:06 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="RBhsOWouMKuMmhgEG8SkXGqS9xCoTrbM6"
X-Provags-ID: V03:K0:a4gKZea3UrLNZcb8rwhiblpzyRM9dbVuItxGa8uJlPjSoiPHLEJ DohSuQVZCioWAwlS1snjuEbe7lmgQCFh8o4eFtqQKba057EtqmDXUcXRT2yWjKg3YZNTg7N 2ssT0pdvAPQPw9L+EWaMCZYwtoKF2MAi/CZDaeeXJWwgdIxVNnOAxFlTF5PaETinvF8aQ79 pcPFU7/RtVpx36XjptiBA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:KKp0CAY3QgQ=:1MO464lgnm63f4BAbsWg22 ZyuRffLl45vA5nOjxXjwfLQyoAQcxgrWiLbXkWIJfI9FbgTBxrjxph7PYpkzYlV91T7WjdJO+ gY9nvgsHMVxT/kUlIy6iYOf3AWxNMpMxhoKeK7xgHVgdrZpkvgWoo5N9WWKRsuJHv5WA67bVQ jgW2GKZFmRugGqiqTjs6SFCa51Y90ojnwwAtx0YJ/27JaEC0ztlwphFn3roHL8DfATpKaFp75 7N/4Cz5vxVEVw7XRYlkXUfthL/Kxc4tRGzYhap7o7DA782oClVs/WgbNg5WFon3tX2Vp7hOAl cuUvwzgfpW//6bUb/NlzkaGcXlTLcgIFy7kvAtDWuRB/ucROD5BHW4VasuWzCIAD8Jpf0Bso6 jzNq74S4xAjRdSOAEjMm91cFcR02USVQeFImSHHp1kX8pIQDcuSmFLrRj/rdQV4PQyO6X58Bg kxFG77lrYrhjJaokhkJcl8LNgnxQSRQT9npsWJpTt7OkQNnLOhD8gG2I3iItbO5CjkyOIWL02 ye0vXVWes4zgVg4iRRZYqdqgzBOLJ7LgoswOX3ZxDbwQFhfPyiSM0Jj9H+gD1r0lct/BYY1cv 6NgXBpiUmPzUxKX2iAm3SC2/rDKHfk0gcA7FaeEFMSTBbadju7t3Z0BFkpBa869RnNXgQnvhF ZMD09rhgRGcAndZMTCVenaPQQsVLobM+K/QJdYoJ3YcdjhKe45UDgqrnuBmlm+ehFCNHkZVsI 1o6VQYnXnGLrK2Gq1/9Gw56imfOs5WqftE2g6nfKpgybWbaFmPp/Lzyk0Ew=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/vbkUv-9IFXJATx_xjcTdW_5NXXI>
Subject: [Ace] Continuing the Discussion about ACE Profiles
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 21:16:05 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--RBhsOWouMKuMmhgEG8SkXGqS9xCoTrbM6
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi all,

today at the ACE working group meeting we talked about separating the
ACE-OAuth framework from the actually interoperable profiles into two
separate documents.

We got feedback on various design aspects but there was not enough time
to describe the characteristics of profiles.

My suggestion is to get together tomorrow evening (at 19:10 at the IETF
registration desk), to have dinner together and to brainstorm about
possible profiles.

Sent me a private message if you have interest and time to participate.

Ciao
Hannes


--RBhsOWouMKuMmhgEG8SkXGqS9xCoTrbM6
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXAtmWAAoJEGhJURNOOiAtbsEH/ijDN1v8+7K3W+/kSQ/pLstN
oGoRDaR+Ir3u7CAEOwG3ImLqNg8OBRGciZpQ6c7vUOKke0XoLp5X4iYZe9aSOHXM
bdJIVu0Nd3gOTKY8YiIeS1M7N0PgbC34uufZXg67vYcz8zy/JIasRTu6aOP1y+93
idpVMwLhcGt1Q60Uvf+/BxNCHPjK5J7GULqerSkKpkAV+iZktW43TVbyshkm2D9Z
7UU44yOu0/dZBBWU8BTRojNsxXi4PkxQHk5j+UfNgfN9mB1f/uWbgsbg0f3D4XcS
e3Qt7+f0ZcN8Mjf6KPz4/zZ0r5p/BChY9PfI+33pH7Id/v2eTA6A60T72CoRc+k=
=A/79
-----END PGP SIGNATURE-----

--RBhsOWouMKuMmhgEG8SkXGqS9xCoTrbM6--


From nobody Mon Apr  4 14:19:17 2016
Return-Path: <cabo@tzi.org>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1F1712D8D6 for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 14:19:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QZhCM_g2eDB5 for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 14:19:13 -0700 (PDT)
Received: from relay6-d.mail.gandi.net (relay6-d.mail.gandi.net [IPv6:2001:4b98:c:538::198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E13FA12D8BA for <Ace@ietf.org>; Mon,  4 Apr 2016 14:19:11 -0700 (PDT)
Received: from mfilter23-d.gandi.net (mfilter23-d.gandi.net [217.70.178.151]) by relay6-d.mail.gandi.net (Postfix) with ESMTP id 830AEFB89F; Mon,  4 Apr 2016 23:19:10 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at mfilter23-d.gandi.net
Received: from relay6-d.mail.gandi.net ([IPv6:::ffff:217.70.183.198]) by mfilter23-d.gandi.net (mfilter23-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id DeodpVcOSWsX; Mon,  4 Apr 2016 23:19:09 +0200 (CEST)
X-Originating-IP: 31.133.154.74
Received: from dhcp-9a4a.meeting.ietf.org (dhcp-9a4a.meeting.ietf.org [31.133.154.74]) (Authenticated sender: cabo@cabo.im) by relay6-d.mail.gandi.net (Postfix) with ESMTPSA id B3C2EFB89E; Mon,  4 Apr 2016 23:19:07 +0200 (CEST)
Message-ID: <5702DA47.8050209@tzi.org>
Date: Mon, 04 Apr 2016 18:19:03 -0300
From: Carsten Bormann <cabo@tzi.org>
User-Agent: Postbox 4.0.8 (Macintosh/20151105)
MIME-Version: 1.0
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>
References: <5702D996.2010501@gmx.net>
In-Reply-To: <5702D996.2010501@gmx.net>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/sbUajlQlvJCTiq0mFhteorHhs2U>
Cc: "Ace@ietf.org" <Ace@ietf.org>
Subject: Re: [Ace] Continuing the Discussion about ACE Profiles
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 21:19:16 -0000

> My suggestion is to get together tomorrow evening (at 19:10 at the IETF
> registration desk), to have dinner together and to brainstorm about
> possible profiles.

Many IoT people will be at the IoT-Directorate meeting at about that time.

GrÃ¼ÃŸe, Carsten

PS.: Did we really say "two" Documents?


From nobody Mon Apr  4 14:37:28 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D14212D8BF for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 14:37:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X2IeL_gwHrZV for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 14:37:23 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1C7D12D14A for <Ace@ietf.org>; Mon,  4 Apr 2016 14:37:22 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.155.135]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0Lymoh-1brp0g1AJz-016ABZ; Mon, 04 Apr 2016 23:37:14 +0200
To: Carsten Bormann <cabo@tzi.org>
References: <5702D996.2010501@gmx.net> <5702DA47.8050209@tzi.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
X-Enigmail-Draft-Status: N1110
Message-ID: <5702DE8F.3040300@gmx.net>
Date: Mon, 4 Apr 2016 23:37:19 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <5702DA47.8050209@tzi.org>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="GdxWUONrwH9w363HXIhvm9aN1JhKpi0Sg"
X-Provags-ID: V03:K0:a/AVFTgJ9MQny0Rcn8Hsds8SsumAWedvBM3db4ej0P86eNzCY+C SN+cFB6INz4iVqZvXuattEMkkPPXcg6EytuTeu3fE5HUXsvEKvc1tB5rPT4pnN3Kmbkd7GK 7yJO4ML3UGkm+haVcvtEPXFsOvgm5EUSTZA1hXgqKfPUx/vGv14TF9uqIk+Cyb297sSse7n au/xycMFcA/ihfqOTMVIg==
X-UI-Out-Filterresults: notjunk:1;V01:K0:PU/GUbicQrg=:e8tkUGk91lBi/9lF/kt4nN t+H5gEyPfUDFg3QccDKd8XuF4gPIily4T+96T894jFS2jb/XeOL4DUrVa4k9hqTfKcCkDf4B7 4GPVAn0Mt311Quy/wUyxKhym09WmktGRnXB8e5WFY6zxiRX1OjfGNkz0i2UAQgkmu3SeZ864F xBnbv5R4An0rDWu31ofw9iUc7ErT2I8C/Bh38h0hp15+dXFw2ozVfVZNYQA6VIu/PSz1J3UoX 3Ekquh5kuniVlqIBSz56r3tPhVWMTxMEQfwgFvCh0rnJtuKmxdkqQAzEyesGOWUADeRmVbdiw 6hh5PdFspuWCBsELuXerfuUn0DVI09jqgMq9gMiXt4F7LAEE9ukWoYGfWWdUPEtPmbIKlVC5T TRaejkYHlRH4zH3M4nezh6/xmg0T+97ook3EruWG28NuW/UJEhGFexONSbe3M6i1Ov5B3PCkQ hlwWTd1U9dNP5WD7QDsHuRuychsOgnWderXXtp+YHmiU48FMWeatutrx7GwEcZGygdbFq/wN7 y4m6SOCMjFMcSfsEwtkS4DHx2NbCO7bw1UYeAplnu8+13xOhZ7aygXkkAAop3yb36fq45ho4b hVy9muiUQgStKLFEs6263kYrGeEXtF+2nPYcPkSXMyx/FdZchbXoQReQTE3/9EfwTqOV0QdNt OR+0c4IlzXUAJJdcEqW47zLMwz5NardD4N/mkUtUizGsBrKl6Zor7Sc6R4HL+ggnlMpGA6o3w ataZqY5ygDhoc1IryYCb8McIvhPt2Z/p+X921k5HwDbXYZcGwze56el4sas=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/f25e9v-9Hq_pZS5IxZi4hNitBzo>
Cc: "Ace@ietf.org" <Ace@ietf.org>
Subject: Re: [Ace] Continuing the Discussion about ACE Profiles
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 21:37:25 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--GdxWUONrwH9w363HXIhvm9aN1JhKpi0Sg
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

I failed to recognize the IoT-Directorate meeting.

new proposal *** WEDNESDAY EVENING ***
(after the plenary, which ends at 20:10)

Ciao
Hannes

PS: No, we are not only talking about 2 docs.

On 04/04/2016 11:19 PM, Carsten Bormann wrote:
>> My suggestion is to get together tomorrow evening (at 19:10 at the IET=
F
>> registration desk), to have dinner together and to brainstorm about
>> possible profiles.
>=20
> Many IoT people will be at the IoT-Directorate meeting at about that ti=
me.
>=20
> Gr=C3=BC=C3=9Fe, Carsten
>=20
> PS.: Did we really say "two" Documents?
>=20
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>=20


--GdxWUONrwH9w363HXIhvm9aN1JhKpi0Sg
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXAt6PAAoJEGhJURNOOiAtpzoIAIChn1l7623TzB29jbelRxJ1
F3yMymqIXdcmU64pzBHgM4ORwe/t780rn58JwGpdxlSzxZx/O0QVsc76z25xoDNO
xmte8UpZnYa3L7GpG3ZtZwiUOEmSml9uIJJ8LJsz1GJ7iu8Cw7K6Jzb5leWY2F22
pWWRdb5abnuDL/PYQTt3/2AgMF7UeXpyc41stSbb+Ebp++Pvuo4vPOMc9dGr3rLP
qKfFYWsxivT7I3zsed/O/Up4fAzndKtdYhkrqezvUSv/13lNTWTgBEm8sioIoV3o
KWSbvO9JyBnQpHnT2kr2VPXFeNWczh5ULUN4BBQmiN7k7kn5q67bcTcQDD4KhmQ=
=se40
-----END PGP SIGNATURE-----

--GdxWUONrwH9w363HXIhvm9aN1JhKpi0Sg--


From nobody Mon Apr  4 15:12:40 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FB6512D8DE for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 15:12:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BWrtHC_6Y4ae for <ace@ietfa.amsl.com>; Mon,  4 Apr 2016 15:12:38 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C28B12D8C7 for <ace@ietf.org>; Mon,  4 Apr 2016 15:12:37 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.155.135]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0Mcgur-1b50hV0hhh-00HxsS; Tue, 05 Apr 2016 00:12:33 +0200
To: Renzo Navas <renzoefra@gmail.com>, Francesca Palombini <francesca.palombini@ericsson.com>
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com> <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se> <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
X-Enigmail-Draft-Status: N1110
Message-ID: <5702E6D6.9050206@gmx.net>
Date: Tue, 5 Apr 2016 00:12:38 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="DskWPOR6PdJSnUQDXNg7gTKfnA08ft1lv"
X-Provags-ID: V03:K0:/BG8B47bK3G4uD8HEx4La9fd8OOtmvmLo1i47WTNRCxleE3l4QB 6yh05xjaZc02YpKPjB5b+Nc1cCvHwDPlAjNDPOPqEklYR32oM1aNbmjA0dIxdOokceDf95z LIeD75+xAqHRuixtwPiiUq8NwSaa2+9oR2afCors8zRIKW3gAZAFHl0TAO/fbm+5t1BGq4a PkjHXYmQzU/4icWs5PM3Q==
X-UI-Out-Filterresults: notjunk:1;V01:K0:W6/2aszU6vA=:scUjP/29KVMxm9LanHT7fR Xzh5oPep1g6nPwZ84gm2OM49wFzj+e/TIzAcrg6tPSkErTQoABw0hezXJkeRqKbGnE/aPqPBK qJqSWR7GJDQbUguRQlNJ0nzlarkj2+nUUkKZHMYhc3s6IvUOYJrxc8Uv2QMM6nH85+3oDmz/C X02IAHuLsZ8H2SYAJRMcW8USF2qsw30xx5S/mWX9F0FsvvEM31dJTGOnxyKDbwaSMOSOuAfzb jz4yK2XjllBVRdkVa/BXtRO6Bu4n8ROyFB0fN2swRh3bU8PlDoBknHdGfV8R54Cggq/f+OviY l/VthrIvx+RXs6TcvL4j2XGr921Suua9UEIXah4tDJHetVReVWQx7lYYxbXcP/TFzFtN8QBPu lsxu0l/RdZ019xDsh/iZN1NZGmjKjriLLGEGPgaWgvL3RDpCswSITNROiJH2FUh9lwoQxfLhI /Y4q+WlS2dEylzfzEuS5VPPFYU00ICMj7Z34K15BMlw6P/hq5MSLWH7pUPvEebV3Gx2k3bMSM Tuy6wqKc50JuhLK9718TXPXtIxdB1hoVjaRP5AXUZ2S4jeCTN0uDAD6c/J491xtiufHPPdFQu YFUoM70pVMw0z02y6hkIw8+HDgs7027M1eIZIdl5n/AdRZ6jybej2mCsCAjXEABOS6qpQ9xsw 5etRJA719LGL26G3xk7SbpHD9dhNfiWaBlnwjYMsuw8iO9rdVfSUOfLLEQFoySFAZgwbhkUvE JcGLF6N/EEr/wMnDcg64TmN3Dk33P/20QZ7MpuFOdsMfrez4X3kirYAwvaQ=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/p9QVkEeI-u0KBnJpVwMDyif749c>
Cc: "ace@ietf.org" <ace@ietf.org>
Subject: Re: [Ace] FW: RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Apr 2016 22:12:40 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--DskWPOR6PdJSnUQDXNg7gTKfnA08ft1lv
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Hi Navas,

thanks for your contributions and great that you made it to this IETF
meeting!

As discussed at the meeting today there will be a design team with the
following persons: You + Ludwig + Carsten + Thomas

It was clear from the discussions that there are several design aspects
to take into account. Since I am always a big fan of re-using existing
work I am sure your input on the different authentication and key
exchange techniques will be valuable.

I also want to have a solution for the authorization question where the
problem can be described as: The RS needs to know whether the
authorization information in an access token (either one that has just
been received or cached from a previous interaction) is still valid.

We also need to take the state-of-the-art in hardware capabilities (such
as real-time clocks in modern embedded processors) and the different
sleep states offered by these processors into account. IMHO it would be
good to have some prototyping efforts so that we are not just guessing.

Ciao
Hannes

On 04/04/2016 05:10 PM, Renzo Navas wrote:
> Hi All,
>=20
> Thank you Francesca. I was a bit nervous as it is the first time I
> presented something at IETF. I did not pass further than the 4th
> slide... So I think I couldn't make my point so clear.
>=20
> Basically the point I wanted to rise is:
>=20
> There exists several nonce-based (auth key est.) well-known protocols
> that can be used to solve the pop token generation.
> If you skim through the slides you will see there are lots of
> possibilities and much room to profiling (and confusion).
>=20
> I wanted to rise the question on the mailing list to try to arrive to
> a sort of discussion on which mappings do make sense (if any..) to
> solve our problem.
> I would gladly work on this.
>=20
> Renzo
>=20
>=20
> ps: I correct a mistake from my original message:
>=20
> "The messages/protocols do NOT have any timestamp and the nodes do not =
need
> to have absolute time (wall clock) awareness."
>=20
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>=20


--DskWPOR6PdJSnUQDXNg7gTKfnA08ft1lv
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXAubWAAoJEGhJURNOOiAti+wIAKa7S5Q9z5EKpl1R96ycBwxA
bwIULDCeJNk/6bl9LhAV2xZZjJxR2E1Om+BkNN1OgFM7k25x7tzfHinIq2+qhgr8
RuFRloIDV1ZLb8wqd+lcSQlPi0VI/VTFdTLw5BfVFLB4t2/q2kVpphxe5rm0qsDu
4ohFiux0FpX3kMtHXH7BLYsc4BJJN5yKkDwhP/Y0Yvhkz+G8P+Z5MzP58mG3ToMg
cW5wodzu4pA9Hbq6J7xGPJ+JSDpxkLJGlZ44QXlE67dcVkUA9nwXWo/8/Tg5F0WD
0Bq4UhywQwgHtV9Oj2KXOMpk1Vlfnn4aAfDevIHYVldXS/v8b9Y/D5hwKpAtHXE=
=YFer
-----END PGP SIGNATURE-----

--DskWPOR6PdJSnUQDXNg7gTKfnA08ft1lv--


From nobody Tue Apr  5 09:47:07 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B37DB12D79B for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 09:47:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.202
X-Spam-Level: 
X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZxVxNkNEYYst for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 09:47:04 -0700 (PDT)
Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5900912D792 for <ace@ietf.org>; Tue,  5 Apr 2016 09:46:58 -0700 (PDT)
X-AuditID: c1b4fb3a-f79d86d000005b69-c0-5703ec0001c6
Received: from ESESSHC012.ericsson.se (Unknown_Domain [153.88.183.54]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id B3.F3.23401.00CE3075; Tue,  5 Apr 2016 18:46:56 +0200 (CEST)
Received: from ESESSMB303.ericsson.se ([169.254.3.117]) by ESESSHC012.ericsson.se ([153.88.183.54]) with mapi id 14.03.0248.002; Tue, 5 Apr 2016 18:46:55 +0200
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: Hannes Tschofenig <hannes.tschofenig@gmx.net>, Ludwig Seitz <ludwig@sics.se>
Thread-Topic: [Ace] FW: RS Synchronized Time
Thread-Index: AQHRjoQkewOle+A+QE+KyZQLg8WquJ96P6IAgAEFB4A=
Date: Tue, 5 Apr 2016 16:46:54 +0000
Message-ID: <D32949D8.5161D%goran.selander@ericsson.com>
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com> <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se> <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com> <5702E6D6.9050206@gmx.net>
In-Reply-To: <5702E6D6.9050206@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.2.160219
x-originating-ip: [153.88.183.148]
Content-Type: text/plain; charset="utf-8"
Content-ID: <334E284B7F856A40AE567DCB80FE910B@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrCIsWRmVeSWpSXmKPExsUyM2K7mS7DG+ZwgzsvtC2+f+thtli68x6r xavWO8wOzB6LN+1n81iy5CeTR++x32wBzFFcNimpOZllqUX6dglcGTOX7mIrWKVRseLuMaYG xiXqXYycHBICJhKLZs9hg7DFJC7cWw9kc3EICRxhlHh0ZCYThLOYUWLfys0sIFVsAi4SDxoe MYHYIgJBEv93LWEFsZkFFCXWzekDiwsLaEs07p/EClGjI3G0/xhzFyMHkG0lsXmhIojJIqAi cX59MkgFr4CFxI2Ds9ghVt1kktjW8xvsIE4BdYnN2xoYQWxGoOO+n1rDBLFKXOLWk/lMEEcL SCzZc54ZwhaVePn4H9haUQE9iR3nIGwJASWJxiVPWEH2MgtoSqzfpQ8xxlpi0925TDDXT+l+ yA5xj6DEyZlPWCYwSsxCsm0WQvcsJN2zkHTPQtK9gJF1FaNocWpxcW66kZFealFmcnFxfp5e XmrJJkZgXB7c8ttqB+PB546HGAU4GJV4eBVkmMOFWBPLiitzDzFKcDArifBGvAQK8aYkVlal FuXHF5XmpBYfYpTmYFES582J/BcmJJCeWJKanZpakFoEk2Xi4JRqYDQxV9NJCH/zO7Xh7kee Dt5ps8+kdP4LnJGY9rdWZPWq5lWbGKQNoqd8/vtlhwr3ggVO/c8fv2te8mm6yYakSJ7IQ5ES MfO8Xb7sllHqL7rd7R5Y1M0mNf+OhZw6e+y5qIOXX6alLLW7uKLueGbzZvVQ2YgLDTN5F+lf KNml0vbLr7f4DKPSDiWW4oxEQy3mouJEAGMNbwXHAgAA
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/hee0r0d1NRZFE-5qa497lyiwUOo>
Cc: "ace@ietf.org" <ace@ietf.org>
Subject: Re: [Ace] FW: RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2016 16:47:06 -0000
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From nobody Tue Apr  5 10:27:08 2016
Return-Path: <samuel@erdtman.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4166A12D1D2 for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 10:27:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 855EPELEOV76 for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 10:27:05 -0700 (PDT)
Received: from mail-vk0-x234.google.com (mail-vk0-x234.google.com [IPv6:2607:f8b0:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1D7312D58B for <Ace@ietf.org>; Tue,  5 Apr 2016 10:27:02 -0700 (PDT)
Received: by mail-vk0-x234.google.com with SMTP id e6so26751356vkh.2 for <Ace@ietf.org>; Tue, 05 Apr 2016 10:27:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to; bh=fo8+QWvqGsKX27BgJQTNtK6+oO6YCArJb0uMqH6uBms=; b=RrFNSEBM+SzSZn8Nu6Lp8tb6ovmVlPYz1hrGgtJoFP7N1bKO1eH6ChMhwC1CL5AEA8 Q7aO00O78W7AaSFYL3hqkzW7/R/2QuH0EYMecEg0+URBiyPZ+vXAhpLOtqGNe6stH5/i 23/+sErhfggskuoBIUNYsDB/D2iuvrBqj+8awSa0RzuKkoqp7MIkdXsP+tHih7/dN3+w py8Fz0gxM4vYi/Nvhgc8o4woCJ1Wt8OKg65tjuVrCSK1k5AuuGaPEWIt4DEMWrg3Tnwk 8GWVBVeFf1pgjSv3s+sJ0tO4HTwtcSvhBkEgFSAx/2hPaERwKBrlTCoq8eo1ASfyuLsS ijgQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to; bh=fo8+QWvqGsKX27BgJQTNtK6+oO6YCArJb0uMqH6uBms=; b=Lzu+g1VDVgN27KOeQ6G/wxrqDQr3L1uImQg9GbyPC79z44prUW/iyXe64rn3dlLun5 SZCKyZEUCORhCZeVeQaz2JIcrUbEftEm7RQ3ZaBl+JzS5lWBgwWiu46ms5mZqyDLKM23 5WrE2OcJrOw6F0dQlyvU15Qv7GuaHuClMQyDQgkamYXdI6hiq/128LPJPLuwj2AopAye EObLcBGUZ+gEOZNvb6qMB3wYuUFrUF6/ZKgMuiGeM/mh1x5RVA0onaIHQJ3L8z0+RXPy TyTU8AMlSymXiw6xajcRAI90IYGaaRETL6QVmK1cT1CLN+MIiyU/InXV9W6RBUbOrONf RMKQ==
X-Gm-Message-State: AD7BkJIEPsEye6aKjRoN1c8D6xvnTmQr653hLEWAx3e1kHFQyqOIoy79Xq+5QQE1EayiB95logb5ZxBadXR7TQ==
MIME-Version: 1.0
X-Received: by 10.31.49.207 with SMTP id x198mr10470065vkx.1.1459877221757; Tue, 05 Apr 2016 10:27:01 -0700 (PDT)
Received: by 10.176.1.182 with HTTP; Tue, 5 Apr 2016 10:27:01 -0700 (PDT)
In-Reply-To: <20160405171703.25803.33275.idtracker@ietfa.amsl.com>
References: <20160405171703.25803.33275.idtracker@ietfa.amsl.com>
Date: Tue, 5 Apr 2016 19:27:01 +0200
Message-ID: <CAF2hCbbOOCgvPL=6040duia0GWkW_TVDvtoWN1GDOTnjLnqk1g@mail.gmail.com>
From: Samuel Erdtman <samuel@erdtman.se>
To: Ace@ietf.org
Content-Type: multipart/alternative; boundary=001a11430efe380ba0052fc027f2
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/uZu60NY6APc_dNf1E0XddphMRFo>
Subject: [Ace] Fwd: New Version Notification for draft-erdtman-ace-certificate-credential-00.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2016 17:27:07 -0000

--001a11430efe380ba0052fc027f2
Content-Type: text/plain; charset=UTF-8

Hi,

To make some progress the question on which credential types to include in
"Authorization for the Internet of Things using OAuth 2.0" (
https://tools.ietf.org/html/draft-ietf-ace-oauth-authz) I have created an
example extension. The extension details on the use of certificates as
credentials both to identify the client and the server. Based on this I
would say that is is very doable to exclude certificate based credentials
from the core specification but it is not a big chunk in it self i.e. it
could easily be included in the core document.

Best Regards
//Samuel


---------- Forwarded message ----------
From: <internet-drafts@ietf.org>
Date: Tue, Apr 5, 2016 at 7:17 PM
Subject: New Version Notification for
draft-erdtman-ace-certificate-credential-00.txt
To: Samuel Erdtman <samuel@erdtman.se>



A new version of I-D, draft-erdtman-ace-certificate-credential-00.txt
has been successfully submitted by Samuel Erdtman and posted to the
IETF repository.

Name:           draft-erdtman-ace-certificate-credential
Revision:       00
Title:          Certificate credentials for ACE framework
Document date:  2016-04-05
Group:          Individual Submission
Pages:          7
URL:
https://www.ietf.org/internet-drafts/draft-erdtman-ace-certificate-credential-00.txt
Status:
https://datatracker.ietf.org/doc/draft-erdtman-ace-certificate-credential/
Htmlized:
https://tools.ietf.org/html/draft-erdtman-ace-certificate-credential-00


Abstract:
   This draft provides an example of how to extend the ACE framework
   [I-D.ietf-ace-oauth-authz], to use client and server certificates
   (x509), for mutual authentication.  Certificate are used to establish
   the security context between the client and resource server.  This
   draft is limited to transport layer security based on DTLS and it
   does not consider the mixed case where e.g. only the server is
   authenticated with a certificate.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

--001a11430efe380ba0052fc027f2
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi,</div><div><br></div><div>To make some progress th=
e question on which credential types to include in &quot;Authorization for =
the Internet of Things using OAuth 2.0&quot; (<a href=3D"https://tools.ietf=
.org/html/draft-ietf-ace-oauth-authz">https://tools.ietf.org/html/draft-iet=
f-ace-oauth-authz</a>) I have created an example extension. The extension d=
etails on the use of certificates as credentials both to identify the clien=
t and the server. Based on this I would say that is is very doable to exclu=
de certificate based credentials from the core specification but it is not =
a big chunk in it self i.e. it could easily be included in the core documen=
t.=C2=A0</div><div><br></div><div>Best Regards</div><div>//Samuel</div><div=
><br></div><br><div class=3D"gmail_quote">---------- Forwarded message ----=
------<br>From: <b class=3D"gmail_sendername"></b> <span dir=3D"ltr">&lt;<a=
 href=3D"mailto:internet-drafts@ietf.org">internet-drafts@ietf.org</a>&gt;<=
/span><br>Date: Tue, Apr 5, 2016 at 7:17 PM<br>Subject: New Version Notific=
ation for draft-erdtman-ace-certificate-credential-00.txt<br>To: Samuel Erd=
tman &lt;<a href=3D"mailto:samuel@erdtman.se">samuel@erdtman.se</a>&gt;<br>=
<br><br><br>
A new version of I-D, draft-erdtman-ace-certificate-credential-00.txt<br>
has been successfully submitted by Samuel Erdtman and posted to the<br>
IETF repository.<br>
<br>
Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-erdtman-ace-certificate=
-credential<br>
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A000<br>
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Certificate credentials for ACE fr=
amework<br>
Document date:=C2=A0 2016-04-05<br>
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission<br>
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 7<br>
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"https://www.ietf.o=
rg/internet-drafts/draft-erdtman-ace-certificate-credential-00.txt" rel=3D"=
noreferrer" target=3D"_blank">https://www.ietf.org/internet-drafts/draft-er=
dtman-ace-certificate-credential-00.txt</a><br>
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://datatracker.iet=
f.org/doc/draft-erdtman-ace-certificate-credential/" rel=3D"noreferrer" tar=
get=3D"_blank">https://datatracker.ietf.org/doc/draft-erdtman-ace-certifica=
te-credential/</a><br>
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"https://tools.ietf.org/html/=
draft-erdtman-ace-certificate-credential-00" rel=3D"noreferrer" target=3D"_=
blank">https://tools.ietf.org/html/draft-erdtman-ace-certificate-credential=
-00</a><br>
<br>
<br>
Abstract:<br>
=C2=A0 =C2=A0This draft provides an example of how to extend the ACE framew=
ork<br>
=C2=A0 =C2=A0[I-D.ietf-ace-oauth-authz], to use client and server certifica=
tes<br>
=C2=A0 =C2=A0(x509), for mutual authentication.=C2=A0 Certificate are used =
to establish<br>
=C2=A0 =C2=A0the security context between the client and resource server.=
=C2=A0 This<br>
=C2=A0 =C2=A0draft is limited to transport layer security based on DTLS and=
 it<br>
=C2=A0 =C2=A0does not consider the mixed case where e.g. only the server is=
<br>
=C2=A0 =C2=A0authenticated with a certificate.<br>
<br>
<br>
<br>
<br>
Please note that it may take a couple of minutes from the time of submissio=
n<br>
until the htmlized version and diff are available at <a href=3D"http://tool=
s.ietf.org" rel=3D"noreferrer" target=3D"_blank">tools.ietf.org</a>.<br>
<br>
The IETF Secretariat<br>
<br>
</div><br></div>

--001a11430efe380ba0052fc027f2--


From nobody Tue Apr  5 13:41:16 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67D1212D846 for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 13:41:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T70t1v87sndR for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 13:41:12 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E010012D184 for <Ace@ietf.org>; Tue,  5 Apr 2016 13:41:11 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.163.59]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0M5cpk-1blAgm3cQC-00xbSH for <Ace@ietf.org>; Tue, 05 Apr 2016 22:41:09 +0200
To: "Ace@ietf.org" <Ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <570422ED.20704@gmx.net>
Date: Tue, 5 Apr 2016 22:41:17 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="QuNPew7kAKoAU72d8dO0NBrqpTk3sGWlt"
X-Provags-ID: V03:K0:mxLbvjTK2IcFvFj34NOOEBESxTSICad4k8ndCXSYWzrwshdW0sz y1T7Kkd1eDQJTl7PLnesWFG7cGhfEsD7XPFiiKYAO2iJ+4kvuklQSqlN8fGJ9ZOfQuj/2OC izp+YSdroRhfnjaRdpKBKGcy/Ft97iGJdT1JVMF/BietaNE87ImeUBTqLBdYzJrNxYYU7zn 3mcKorRaZV/WbUbOaADLQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:ccOaT46pCZc=:Kf/2giRLPUf1iUD6WczaKR rA+E5+QQgYPpWfXStjM7rfEgRVRl2SZ1TeGFYd1+TSR7JIC9ZehyO3YRj4cKfXx7MgSYNdFrY KTHzODjTJkDYVLQ/qnE9xnTyBSBh7M1OKbUAPg76l2dwHGg2g8AzD9bNnxt+WeHsmpAG8uiYX GxUgJCheKH/U2QVg/z32IMWsqYbbU7p1JLPFpReTakqSto/c3eFzfieRkl9GWMIAAmUX6pD91 zeWG0yJnA0BLeX7LBUF873nKwi+ATA2mrFbw7AqOD6fNK1RhGrsKngKbboUF72EmBTvnugUKu M+Y01f9o4OuJZQZ4KJ3K76RVtwLuzM9B3IZ9vVKdhlvOdhna5iGBPu2RpUdfWFQGIfUzbdcA5 ljsRKB3JATSPZZ5uCVpKzbwWq1Kk4VbWvAM1fjFeUpe1YbvUGhR85VTsZ094gQ69XCSW3dSqk YbxYyfer8N+vWjfjQ4lLwWVALZz6QtRGV0JcpqRmIGokFP0DxQK6sFaFA6T3a9oPCJmK8KUB7 XPuQouhLIbjjyPRGbl/rrk//E/ByvoiQ71fOIIWGZIhGtufhrERrNnmOtz+KbIciawm4cXX0U F0/aFYaczICklNe2pL6b3Ga8BdcisFnjs1cylErTIMEJJqmofc9/nZd873NU/6AjtmxMHE9EX o0EjZfWV77fyIWC7DR5333cIffAetKa/3AndC93iZMuMtPBm2X2Mvy1OZliEnE7phJjk5G4p1 LONIZRsZI9BUmYnvDZvwepg9bSe0XLfGAnN9YYwa0wpyhudlPaMVAcjzg3g=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/zkHViv_WCj3RhFDs8tn4QeJ8u0s>
Subject: [Ace] Meeting Minutes
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2016 20:41:14 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--QuNPew7kAKoAU72d8dO0NBrqpTk3sGWlt
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Thomas Fossati was so nice to take meeting notes during the Monday
morning f2f WG session and they have been uploaded to:
https://www.ietf.org/proceedings/95/minutes/minutes-95-ace

Please take a look at them and let me know if they are incorrect or need
to be extended.

Ciao
Hannes



--QuNPew7kAKoAU72d8dO0NBrqpTk3sGWlt
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXBCLtAAoJEGhJURNOOiAtUFcIAIkuTirtxTNbmzzyHZGnBR6F
KJAsoRU1dl8Bkw2vllI1DjClhMFfte7rPcHEUCtWTLDylGDHve4+W5gllkn0ybGS
64sujeT6BGcqWvFmaZbUEdP/c+2QxeyqV9a0VxLwYcjoSO3EqE2JjVSglPNKAzao
jFgfPY+7dj9neCvE2ZTeHlJ1vOG+EVhPAd0U4FWCoh27ReLSZ2gR/dW+M5gMu2Mb
fru6OWpP0/YizhbP3Y9Qr6CnJJPIcjLWXFKDM1JFw77/VZEEFQ/JCfVqvRmzvmwf
1F6EQ3Ssrd30bj8NVdlv7cSb7dlCtjs3hSN/Qg5aLyVMau6aUXbfZSm5l0L6igA=
=6R25
-----END PGP SIGNATURE-----

--QuNPew7kAKoAU72d8dO0NBrqpTk3sGWlt--


From nobody Tue Apr  5 14:16:28 2016
Return-Path: <mohit.m.sethi@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E84F12D5A0 for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 14:16:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.22
X-Spam-Level: 
X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sWQ_wN1IjpKS for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 14:16:13 -0700 (PDT)
Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9FBF12D87D for <ace@ietf.org>; Tue,  5 Apr 2016 14:16:12 -0700 (PDT)
X-AuditID: c1b4fb2d-f79c06d000005960-74-57042b1af960
Received: from ESESSHC024.ericsson.se (Unknown_Domain [153.88.183.90]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 94.4F.22880.A1B24075; Tue,  5 Apr 2016 23:16:11 +0200 (CEST)
Received: from nomadiclab.lmf.ericsson.se (153.88.183.153) by smtp.internal.ericsson.com (153.88.183.92) with Microsoft SMTP Server id 14.3.248.2; Tue, 5 Apr 2016 23:15:10 +0200
Received: from nomadiclab.lmf.ericsson.se (localhost [127.0.0.1])	by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 7C666510C6	for <ace@ietf.org>; Wed,  6 Apr 2016 00:18:44 +0300 (EEST)
Received: from [127.0.0.1] (localhost [127.0.0.1])	by nomadiclab.lmf.ericsson.se (Postfix) with ESMTP id 434354E9B6	for <ace@ietf.org>; Wed,  6 Apr 2016 00:18:42 +0300 (EEST)
To: <ace@ietf.org>
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com> <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se> <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com> <5702B7BC.6060306@sics.se>
From: Mohit Sethi <mohit.m.sethi@ericsson.com>
Message-ID: <57042ADB.9090907@ericsson.com>
Date: Tue, 5 Apr 2016 18:15:07 -0300
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <5702B7BC.6060306@sics.se>
Content-Type: multipart/alternative; boundary="------------010307080805090201090108"
X-Virus-Scanned: ClamAV using ClamSMTP
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBLMWRmVeSWpSXmKPExsUyM2J7lK60Nku4weOP7Bbfv/UwOzB6LFny kymAMYrLJiU1J7MstUjfLoEr48D0BUwFR4wq9v24zdbA+FW1i5GTQ0LARGLboXXMELaYxIV7 69lAbCGBI4wSh65GdDFyAdlbGSUa/11khXAOMkqsv7iAGcLZxChxcNs/VpAWYQFticb9k8Bs EQEhiesdy6A6bjJJnD7/jgkkwSagJ9F57jjYPl6ghmtd39hBbBYBFYk3q9aDNYsKREg8mXuS EaJGUOLkzCcsIDangLpEw5f7YHOYBcIkLh08wgZxt5rE1XObmCHuVpfY2nGAcQKj0Cwk7bOQ tMxi5ACy7SUebC2DCGtLLFv4mhnC1pe4fuc+K4QtL9G8dTbzAka2VYyixanFxbnpRsZ6qUWZ ycXF+Xl6eaklmxiB4X9wy2/dHYyrXzseYhTgYFTi4VWQYQ4XYk0sK67MPcQowcGsJMLbqMYS LsSbklhZlVqUH19UmpNafIhRmoNFSZw3J/JfmJBAemJJanZqakFqEUyWiYNTqoGxlJdJZgZj /L2SFo4nX31ZDlRWvy4/PPFl7uS0fMNVidtfBrJEn+WdslFiw+1l9zW+x0sbtprLrLqkYJLt sfrl8fTb32TE+B+cE9vMs+Qrk/lNrnJzoT0XWiyW+dpLBLiU2+Y8Vd41TcPjgNfhpWGus6dO ZTNZ+Nvr//U9lXZuM0sfM4qGL7RRYinOSDTUYi4qTgQAVPLo9XsCAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/_fkx0lLG19DcA4gJq0uBaA9MvXc>
Subject: Re: [Ace] FW: RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2016 21:16:15 -0000

--------------010307080805090201090108
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: quoted-printable

Hi All

The discussion during the WG meeting on Monday about Synchronized time=20
also made me wonder if anyone has had a look at Lamport's vector clocks:

http://www.citemaster.net/get/10b50274-7bc5-11e5-8aa1-00163e009cc7/p558-l=
amport.pdf

So if the participating entities: C, RS, and AS at least have=20
monotonically increasing clocks, then a vector of the three clocks can=20
give some idea about the ordering of events. This probably does not=20
solve the challenges, but might help to think of possible solutions.

/--Mohit

On 04/04/2016 03:51 PM, Ludwig Seitz wrote:
> On 2016-04-04 17:10, Renzo Navas wrote:
>> Hi All,
>>
>> Thank you Francesca. I was a bit nervous as it is the first time I
>> presented something at IETF. I did not pass further than the 4th
>> slide... So I think I couldn't make my point so clear.
>>
>> Basically the point I wanted to rise is:
>>
>> There exists several nonce-based (auth key est.) well-known protocols
>> that can be used to solve the pop token generation.
>> If you skim through the slides you will see there are lots of
>> possibilities and much room to profiling (and confusion).
>>
>> I wanted to rise the question on the mailing list to try to arrive to
>> a sort of discussion on which mappings do make sense (if any..) to
>> solve our problem.
>> I would gladly work on this.
>>
>> Renzo
>>
>
> Renzo,
>
> I see one problem with all the approaches presented in your slides=20
> except for Otway-Rees/Bauer-Berson-Feiertag: They all seem to require=20
> full connectivity. Now in several usecases we have either C or RS=20
> without direct connectivity to AS. I wouldn't want to work towards a=20
> solution that excludes those usecases.
>
> If I'm not mistaken the proposal G=F6ran presented is basically=20
> Otway-Rees integrated in the COAP request response protocol (steps 1.=20
> and 4.) and the OAuth token request or introspection protocol (steps=20
> 2. and 3.). My understanding is that G=F6ran is not designing a new=20
> protocol, but adapting an existing one to the specific use case.
>
> @G=F6ran: Would that be a fair description of your proposal?
>
> /Ludwig
>
>
>
>
>
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace


--------------010307080805090201090108
Content-Type: text/html; charset="windows-1252"
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi All <br>
    <br>
    The discussion during the WG meeting on Monday about Synchronized
    time also made me wonder if anyone has had a look at Lamport's
    vector clocks:<br>
    <br>
    <a
href="http://www.citemaster.net/get/10b50274-7bc5-11e5-8aa1-00163e009cc7/p558-lamport.pdf"><a class="moz-txt-link-freetext" href="http://www.citemaster.net/get/10b50274-7bc5-11e5-8aa1-00163e009cc7/p558-lamport.pdf">http://www.citemaster.net/get/10b50274-7bc5-11e5-8aa1-00163e009cc7/p558-lamport.pdf</a></a><br>
    <br>
    So if the participating entities: C, RS, and AS at least have
    monotonically increasing clocks, then a vector of the three clocks
    can give some idea about the ordering of events. This probably does
    not solve the challenges, but might help to think of possible
    solutions.<br>
    <br>
    /--Mohit<br>
    <br>
    <div class="moz-cite-prefix">On 04/04/2016 03:51 PM, Ludwig Seitz
      wrote:<br>
    </div>
    <blockquote cite="mid:5702B7BC.6060306@sics.se" type="cite">On
      2016-04-04 17:10, Renzo Navas wrote:
      <br>
      <blockquote type="cite">Hi All,
        <br>
        <br>
        Thank you Francesca. I was a bit nervous as it is the first time
        I
        <br>
        presented something at IETF. I did not pass further than the 4th
        <br>
        slide... So I think I couldn't make my point so clear.
        <br>
        <br>
        Basically the point I wanted to rise is:
        <br>
        <br>
        There exists several nonce-based (auth key est.) well-known
        protocols
        <br>
        that can be used to solve the pop token generation.
        <br>
        If you skim through the slides you will see there are lots of
        <br>
        possibilities and much room to profiling (and confusion).
        <br>
        <br>
        I wanted to rise the question on the mailing list to try to
        arrive to
        <br>
        a sort of discussion on which mappings do make sense (if any..)
        to
        <br>
        solve our problem.
        <br>
        I would gladly work on this.
        <br>
        <br>
        Renzo
        <br>
        <br>
      </blockquote>
      <br>
      Renzo,
      <br>
      <br>
      I see one problem with all the approaches presented in your slides
      except for Otway-Rees/Bauer-Berson-Feiertag: They all seem to
      require full connectivity. Now in several usecases we have either
      C or RS without direct connectivity to AS. I wouldn't want to work
      towards a solution that excludes those usecases.
      <br>
      <br>
      If I'm not mistaken the proposal Göran presented is basically
      Otway-Rees integrated in the COAP request response protocol (steps
      1. and 4.) and the OAuth token request or introspection protocol
      (steps 2. and 3.). My understanding is that Göran is not designing
      a new protocol, but adapting an existing one to the specific use
      case.
      <br>
      <br>
      @Göran: Would that be a fair description of your proposal?
      <br>
      <br>
      /Ludwig
      <br>
      <br>
      <br>
      <br>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Ace mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Ace@ietf.org">Ace@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/ace">https://www.ietf.org/mailman/listinfo/ace</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------010307080805090201090108--


From nobody Tue Apr  5 14:21:51 2016
Return-Path: <stokcons@xs4all.nl>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C238312D885 for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 14:21:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level: 
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ryf3KoMRziDd for <ace@ietfa.amsl.com>; Tue,  5 Apr 2016 14:21:47 -0700 (PDT)
Received: from lb3-smtp-cloud2.xs4all.net (lb3-smtp-cloud2.xs4all.net [194.109.24.29]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D98812D593 for <ace@ietf.org>; Tue,  5 Apr 2016 14:21:44 -0700 (PDT)
Received: from webmail.xs4all.nl ([194.109.20.205]) by smtp-cloud2.xs4all.net with ESMTP id elMi1s00P4RV18J01lMish; Tue, 05 Apr 2016 23:21:43 +0200
Received: from 2001:67c:370:160:db8:5bdc:7868:67a7 by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Tue, 05 Apr 2016 23:21:42 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Date: Tue, 05 Apr 2016 23:21:42 +0200
From: peter van der Stok <stokcons@xs4all.nl>
To: Mohit Sethi <mohit.m.sethi@ericsson.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <57042ADB.9090907@ericsson.com>
References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> <CAD2CPUGr2q7p1n6xZbLwhb1fRPG3sR3vYkpPN2q32SxD_aS6MQ@mail.gmail.com> <D2736FF6C4A3F3428982D3508DD478DE129DEA9A@ESESSMB205.ericsson.se> <CAD2CPUHT2rPZHOVzv4Wetu5Lo5T1kkWJObO9_sYguPWbdCoghw@mail.gmail.com> <5702B7BC.6060306@sics.se> <57042ADB.9090907@ericsson.com>
Message-ID: <429ad4ec8c31f828921d5b9f3eed83dd@xs4all.nl>
X-Sender: stokcons@xs4all.nl (LR9tGaGm27uzG2g5Vnj81bQFpFIgmotm)
User-Agent: XS4ALL Webmail
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/_LYVlLGlQP29l9X9PDSlDFCB4YA>
Cc: ace@ietf.org
Subject: Re: [Ace] FW: RS Synchronized Time
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Apr 2016 21:21:50 -0000

Or have a look at vector clocks;

https://en.wikipedia.org/wiki/Vector_clock

They guarantee advance, and with a few nodes the overhead is not too 
awful.

Peter

Mohit Sethi schreef op 2016-04-05 23:15:
> Hi All
> 
> The discussion during the WG meeting on Monday about Synchronized time
> also made me wonder if anyone has had a look at Lamport's vector
> clocks:
> 
> http://www.citemaster.net/get/10b50274-7bc5-11e5-8aa1-00163e009cc7/p558-lamport.pdf
> [1]
> 
> So if the participating entities: C, RS, and AS at least have
> monotonically increasing clocks, then a vector of the three clocks can
> give some idea about the ordering of events. This probably does not
> solve the challenges, but might help to think of possible solutions.
> 
> /--Mohit
> 
> On 04/04/2016 03:51 PM, Ludwig Seitz wrote:
> 
>> On 2016-04-04 17:10, Renzo Navas wrote:
>> 
>>> Hi All,
>>> 
>>> Thank you Francesca. I was a bit nervous as it is the first time I
>>> 
>>> presented something at IETF. I did not pass further than the 4th
>>> slide... So I think I couldn't make my point so clear.
>>> 
>>> Basically the point I wanted to rise is:
>>> 
>>> There exists several nonce-based (auth key est.) well-known
>>> protocols
>>> that can be used to solve the pop token generation.
>>> If you skim through the slides you will see there are lots of
>>> possibilities and much room to profiling (and confusion).
>>> 
>>> I wanted to rise the question on the mailing list to try to arrive
>>> to
>>> a sort of discussion on which mappings do make sense (if any..) to
>>> 
>>> solve our problem.
>>> I would gladly work on this.
>>> 
>>> Renzo
>> 
>> Renzo,
>> 
>> I see one problem with all the approaches presented in your slides
>> except for Otway-Rees/Bauer-Berson-Feiertag: They all seem to
>> require full connectivity. Now in several usecases we have either C
>> or RS without direct connectivity to AS. I wouldn't want to work
>> towards a solution that excludes those usecases.
>> 
>> If I'm not mistaken the proposal GÃ¶ran presented is basically
>> Otway-Rees integrated in the COAP request response protocol (steps
>> 1. and 4.) and the OAuth token request or introspection protocol
>> (steps 2. and 3.). My understanding is that GÃ¶ran is not designing
>> a new protocol, but adapting an existing one to the specific use
>> case.
>> 
>> @GÃ¶ran: Would that be a fair description of your proposal?
>> 
>> /Ludwig
>> 
>> _______________________________________________
>> Ace mailing list
>> Ace@ietf.org
>> https://www.ietf.org/mailman/listinfo/ace
> 
> 
> 
> Links:
> ------
> [1]
> http://www.citemaster.net/get/10b50274-7bc5-11e5-8aa1-00163e009cc7/p558-lamport.pdf
> 
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace


From nobody Wed Apr  6 07:45:10 2016
Return-Path: <goran.selander@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D659012D676 for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 07:45:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.221
X-Spam-Level: 
X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1zWgmfHvTWIU for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 07:45:07 -0700 (PDT)
Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59B7212D5C7 for <Ace@ietf.org>; Wed,  6 Apr 2016 07:44:25 -0700 (PDT)
X-AuditID: c1b4fb25-f79f86d00000400a-d5-570520c7d9de
Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 4A.5F.16394.7C025075; Wed,  6 Apr 2016 16:44:23 +0200 (CEST)
Received: from ESESSMB303.ericsson.se ([169.254.3.117]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0248.002; Wed, 6 Apr 2016 16:44:14 +0200
From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= <goran.selander@ericsson.com>
To: "Fossati, Thomas (Nokia - GB)" <thomas.fossati@nokia.com>, "Hannes Tschofenig" <hannes.tschofenig@gmx.net>
Thread-Topic: [Ace] Meeting Minutes
Thread-Index: AQHRj3uBIjyhP+/rDEqwyAJJqkxScZ98ssYA
Date: Wed, 6 Apr 2016 14:44:13 +0000
Message-ID: <D32A1A6C.518FF%goran.selander@ericsson.com>
References: <570422ED.20704@gmx.net>
In-Reply-To: <570422ED.20704@gmx.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
user-agent: Microsoft-MacOutlook/14.6.2.160219
x-originating-ip: [153.88.183.148]
Content-Type: text/plain; charset="utf-8"
Content-ID: <CECF50B5951F654BA3C7B9106511E173@ericsson.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrKIsWRmVeSWpSXmKPExsUyM2K7t+5xBdZwg7ObZS2+f+thtli68x6r RcvnT2wOzB6LN+1n81iy5CeTx91bl5gCmKO4bFJSczLLUov07RK4Mk5MuspeMIez4tjJ32wN jH84uhg5OSQETCS6Vzxmg7DFJC7cWw9kc3EICRxhlFi87iEThLOYUWLTuvlMIFVsAi4SDxoe gdkiAgUS59c2MYLYzAKKErtnnWUHsYUFlCTedE9jhahRlmheupYRwjaSePNmBVicRUBF4vn5 SSwgNq+AhcT5TxPArhACinf83c8MYnMKqEos3jkPbCYj0HXfT61hgtglLnHrCcQ9EgICEkv2 nGeGsEUlXj7+BzZfVEBPYsc5CFsC6J7GJU+AbA6gXk2J9bv0IcZYSzy4/B/u/CndD9khzhGU ODnzCcsERolZSLbNQuiehaR7FpLuWUi6FzCyrmIULU4tTspNNzLWSy3KTC4uzs/Ty0st2cQI jMyDW36r7mC8/MbxEKMAB6MSD++CXJZwIdbEsuLK3EOMEhzMSiK8jMC4FuJNSaysSi3Kjy8q zUktPsQozcGiJM6bHfkvTEggPbEkNTs1tSC1CCbLxMEp1cCo7B7Rff95cPazZ/9X77/AtFqQ o+52lFaP2j3ddc11Gabr/q6uWReY6b/r0l2+swwqN+N3N3Dbn8z/4tE1VYrzx8vVQksrsjUe /stV0bL2ndt2lH/2P5VvFTN3tGy/zx31zHZCp4fp4+n/Tly+9fvX/xTriZdz7b98zxZ9pcnk M7Gq+FiT37orSizFGYmGWsxFxYkAxoPYAcgCAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/MrdEb7iGR1AqQaj4Ch9HAwMTrk4>
Cc: "Ace@ietf.org" <Ace@ietf.org>
Subject: Re: [Ace] Meeting Minutes
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Apr 2016 14:45:09 -0000
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From nobody Wed Apr  6 10:57:21 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9B3012D6FF for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 10:57:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PP4RBw6aYzE9 for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 10:57:18 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E4B9212D6F5 for <Ace@ietf.org>; Wed,  6 Apr 2016 10:57:17 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.155.135]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0MeQ43-1bBAuK1ADP-00QChS for <Ace@ietf.org>; Wed, 06 Apr 2016 19:57:16 +0200
To: "Ace@ietf.org" <Ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <57054DF8.8030608@gmx.net>
Date: Wed, 6 Apr 2016 19:57:12 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="tcTvbFSjbvtlcPHHe0saNhGTrwtCa9JJT"
X-Provags-ID: V03:K0:Ca9EacgMpJJGGydODncE8g3FJHHnO90s5pFbmA25KH48h5IASEc bLxhyDv861qevv6VUcf3Uxdkyz/fzX9kerDqNMBK0BJ3kvcHd1UaYBnEixuKVTLek/rMET3 nt+E2d+eYYGY6mZQs7rC0vBMo9T/5pEMS1Um3a2yS5nPiq7GSyIwD28kwcto4wh0zI7LLTv d4AcshrX5DRXuXiBnYKnw==
X-UI-Out-Filterresults: notjunk:1;V01:K0:j5N21PDSPs8=:3Cjjh/9S4QJ9sRWlJzISmb S+9IanttLZK/shJTKBZGQjx9E29PayNaV/nL+0XxLSCIyXwICoXqz2tQpQUYNmVPH/urujfi8 btL3T312NIRB9H+ky2EH5rGBQ+eD4kJ0Y3UNWpkPPLORNBuwO41+e7u7xL18L4ezfoG3NPN+D V3h+ZTHZOW1EL9W1mqLA8ISF4r1RviyrEmIdRDHmLFhtUsKDzVJ21gBCl7OKbcdZP9eAlfe/N 2cuEVOxEwwFTSc5x1DBDY835CJ+0xnrNiy4FrRGxdFHdZSCFQPDOGJ2GVyFd3fOXxvnGsqna3 XnEKBWQaQCrQP2U044XH0L9pIlOBnganRtDO9gkLZFp5mhS/YKWuCMBcgPIpXH9Ml4jkiOvaK B8AYClRy0LfbZRYtQnymFFs4WmECwvTguPM8dnOtMxI6tiABVh/qlmedQ8shImVqJBcnTGp09 CHENT2lYlbiIWLWXeFE3uYeNs+Y++1dqZMSQoh9fDIPJecnbnD/wUfJfWM5d7WrnbUdasmbwI 9ujid6kKwaXsAkgaIF+UzhqSaXovmnzUaNmTOw0mYDjaJ4ZyksSYEW7aYwMRovPVmur4KbO2f 5d+W1R5VplZ0tdo5gbd65C5t8BI+bo4XDhrc+cjqwClBtTOXAtVyi21SqBeaclT2A4LvwVKo4 yqQHDgjl+ogHfsGUjIEOOL4L5AK+Y3GMwjPQUkLs2e7YE1E2iI+sm7scNMGk7dyI2ZgUDjmtD Caqx+EN+01uF7i/ESwtFtVocjl8Qv2p2wxKOeKYT90XnBqfSE8Y2HbNgc1s=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/-jHcJ5MekA-ByVJTaK2o94JHCBk>
Subject: [Ace] Informal Discussion: Today at 20:10
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Apr 2016 17:57:20 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--tcTvbFSjbvtlcPHHe0saNhGTrwtCa9JJT
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi all,

during the ACE meeting I suggested to get together for dinner Wednesday
evening (after the plenary).

Hence, we are going to meet at 20:10 at the Hilton Lobby.

I would to hear more about your interest in specific ACE-OAuth profiles.

Please respond to me privately about this event, if you have feedback
and if you have time to join!

Ciao
Hannes



--tcTvbFSjbvtlcPHHe0saNhGTrwtCa9JJT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXBU34AAoJEGhJURNOOiAtLhEH/3eKyuSHO+95F2OCbIl48mEJ
SpEhfYI508ctvT88UI3UIuBfRc473VIdKh5hQ9OdCA+Onv2h3e5c2JzOI69k89GE
QzMIl6SiYTrwzjr3pf8AuFurBqo0qQg7V3ItROQJmxxQqhjbX9joxzqgudNttgze
u1ldaTE+DnqtgP0zeCONbfSDeZcmHH19RdiaeVCSRHd2YC5Z3632Exv0VNQ8lM/L
c1ca4e7JJccJJywBs8UGtwPuqXgMAv37mhZa8qQ355mSPerwa3zD1ERbwfGvV6rC
Fuq2y7keiD0pZmgY4GBYDpb2DtM11WFxRnaY6bOrIkTy9M8ecPa+ND4P6prVy7c=
=jPbq
-----END PGP SIGNATURE-----

--tcTvbFSjbvtlcPHHe0saNhGTrwtCa9JJT--


From nobody Wed Apr  6 11:45:26 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 529BD12D168 for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 11:45:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ssKU0n3_Csxp for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 11:45:22 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B1E312D0C6 for <Ace@ietf.org>; Wed,  6 Apr 2016 11:45:21 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.155.135]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0Le5XQ-1bbWb32z3U-00psTU for <Ace@ietf.org>; Wed, 06 Apr 2016 20:45:18 +0200
To: "Ace@ietf.org" <Ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
X-Enigmail-Draft-Status: N1110
Message-ID: <57055946.1040304@gmx.net>
Date: Wed, 6 Apr 2016 20:45:26 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="UqdIrHwRDVTn3MaFiaaGmtmVjRv7c7sg3"
X-Provags-ID: V03:K0:VAC6ZkkwWnvM7EnjYoiggOKesx6Lr66hK/J+2sc0Ggd05qMg8Ds nC6+WBxSIisDUB7CcpGbdJ8IVRp5Ujq1IrISntXq8B+7Lu1GoNJUpthmslJl0MYgJiMuFTo 8nKES3v5BD3ffCi1E5whZQNc6Q5t2i/CMzIOaSQ1PMaknLTdJOfLrClJluDpN9b+ed1pwMb 2vVDkdpin+1Wxlk91f7pQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:Wh3/ykZZdSw=:6IWSQD7W1wvZ/XdyumlWmc nUAzNNAruiAPzBD3FNPvCa/BopB+kyFlejGphrQPVMXph6ABulNOoe370jakMgY0CKXo5kQae KQsXSnFagzDmJydYioc6zyfxtH1KZhYE5dVPNSZVOXDNUlGGb+/+Z7SZnV4G7PQM1bYvZJe5n VIL0QaADj2N2nXZ1sqYPYY2z9Fx9CS09dFnkc2IVhDo84fY8j23VnMF0AiS7/w/Nonf9FvJR1 QHMK82bUYXbZdqWw8HdY7UJJlznDaWkf+6hlI30yum+UnILn5hNyTt5O2RM41CdUeGCKU53n6 pkpB6sbCVnATcZBLjPDXMQO3I6KdcN8tWY4GORhH+uXvdMCwS5O4ArsOtjQDc7w+ZA1uNVr+n 5lgJlrBPBe5WsOxkynK+0/jE7m3Ir5J1IOIPQWMBZ0UhKarxX8hjvQxV7tu2Kp4dUS94RDld9 emNrPM743tEWok4JGN36hT+lOTRGzBOXiBFMjIFH83BEL86zRvfAKy4kECuh91O1z9GCd+Lso ouCq0QKsgU1OL41QBgotDS6AWk8Dx8GN2J1eVJ7ssfH0pnP4IfslVt1j2f/O4y+AxRjTkhBa8 m0sjMMOS3bN3/L3I0EwNiVD74R51GDecJauOqClAZVudYXpeEwI9nJLcb+gh4Pm97E8BTWAt3 oqiDRgN9ELVbc9RnRa4dP1jEXHpQt8+y8nzZtfQY+tTVPe3trZbI//mjcBCMW+5dyBX1D2jls GzM1oU2xnCcM0e/novfLfyIwpNiwVxq02JPNMa17RlBtwe3orhQL7hNGXCI=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/s2XIEDGdytXStTRTvuY52qW59yk>
Subject: [Ace] Design team on Clock Synchronization
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Apr 2016 18:45:24 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--UqdIrHwRDVTn3MaFiaaGmtmVjRv7c7sg3
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi all,

at the ACE face-to-face meeting we decided to create a design team to
work on the challenge of dealing with time.

This is a short term design team that will report back to the group at
the virtual interim meeting end of May/beginning of June.

The following persons volunteered to be part of this design team:
* Ludwig Seitz
* Renzo Navas
* Thomas Watteyne
* Carsten Bormann

We will schedule conference calls to progress the work.

If you are interested to join as well let me/us know.

Ciao
Hannes & Kepeng


--UqdIrHwRDVTn3MaFiaaGmtmVjRv7c7sg3
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXBVlGAAoJEGhJURNOOiAtCNwH/RBfe2MPtcmq9yhxm7KpMYZ5
gpLjVOEBB8nrCOCv6Mb4Q1EL32baVp8jWu0FBdTXW9Aq+Lj3+Z34FM/Z4Fa30SHm
HkEzUTV6pAD6upzf0d7Mr6HWBcdDTdI51MFL1j1OX49CZPDGIXVLkfsNeQULbVCR
Lz38z5GQ92C3qQ2umypSY6SKnln4kg6CjR4ZD0euzm6g2NG83BWxMJR2V4FKWs0t
OZ3vymbj4pNzs16j/WHkqCOz0j5KjHIFny5mAikV7i7WVRmRL5H9jp/yf7VSiy1b
QHeACnL1wul85Tj9gdEsKfd/iuAL1Rl417gddm9d3ersPGMFgpoV4R5EjyhAue8=
=yUwJ
-----END PGP SIGNATURE-----

--UqdIrHwRDVTn3MaFiaaGmtmVjRv7c7sg3--


From nobody Wed Apr  6 16:30:23 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0B1112D16A for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 16:30:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.611
X-Spam-Level: 
X-Spam-Status: No, score=-2.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z6yuFip80ssx for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 16:30:20 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8968812D109 for <Ace@ietf.org>; Wed,  6 Apr 2016 16:30:19 -0700 (PDT)
Received: from [192.168.10.140] ([31.133.155.135]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0Ma1pn-1b6yxD15kV-00Loqz for <Ace@ietf.org>; Thu, 07 Apr 2016 01:30:17 +0200
To: "Ace@ietf.org" <Ace@ietf.org>
References: <57054DF8.8030608@gmx.net>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
Message-ID: <57059C10.20607@gmx.net>
Date: Thu, 7 Apr 2016 01:30:24 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <57054DF8.8030608@gmx.net>
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="BTqjtwWwPDUn1kovilcNQu05VEW3SBahT"
X-Provags-ID: V03:K0:9lJIJy/mEHDp8hLDfHBnDp+7fGlWZnOcACcwFNVV70bVaEUpShG EIrwiKcWZTUBguE3PH4dgyXL1k/KJgEsqhKh/HA6MrwbIdBkyXc/VSxxmu1ABgNzu3kgiGe hZprZYqu+YPEVrm7kRMGYeaAOb3DrkqBvALrQkMCtmvOEgQ5B7uE67igvcjWHMvjF89GykZ pQzkvQDaZfElnZLMIEE2A==
X-UI-Out-Filterresults: notjunk:1;V01:K0:d1BfbmnoiqY=:AIQ2LzSC1xrY1QhHXbM3wT iR2GcdfhtwRqZbvU5QUAUYNKaMZykx7eb8/xq8DafPncjNrSoI8RlphJEUtmWSFMbDnI4vgGe 3PVdAZmg9+xt0CmXs4OFxJSmtzewjRsTLyBVN3cAFH9tXkWxA5rPqf+nRt57MZzJaMWWs9mmJ /V4Mx59nAqnjMy07BLuARauhuwjrdr2rzAMA8XcWWdT2696Pi1f8nMTpZ7LjK1zlZHKQKIfHQ xDGpEepNgEJ13IV1qsJOlJz+/QuRR1rgdTVcua/kXCfsvgnFGv8cV6shTf+mdIxS/P9OgnTtB CfvGbqQz3aq15An1fgsUor4nH7cu+/8wCkGygrLz6yCbl2ripJBqbmCJ8hjRfnTWZvjOQ0lJA /Zf6Vt39KtBMsK0GStow435xJ3wGKsdWty2Beb0FFrVA9jovn3Wj7c/6QuiOmLTdnRYe8QB6v 68Z3vU5h55OmazvI394Ofm4WbdHswEugRKt8BA+VOcLykeQZuoOFFkh0cwyPFQLfotWrXLm1Q q/zn6B6oMq3jwDb38QEe7qs7Vc7MHGlKSRfT74dSg2xu8M+ZIz3KwkklILfnzb+yMDr0dSmG1 5TNKc3o/e1/kzw6RgILYgpBhnPc+dncUCkY0EixjdhCMqeaI8t4v9bI5FPfd7v4HG3HxBlf0+ NaNbIN/mpUQh3tWESI24nhULaCNGCcjlewJK8l7H2fcICOhVGZ9cyQOZ9jpSsDB1U8NXekVUv XJqumUd7F6RrCsd/XY1WjFs+9396e22pDQbRTG7vebcouccvs8ayd7FIltg=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/EwsXo-Mp8ROEfJxaWf79XkycYcw>
Subject: Re: [Ace] Informal Discussion: Today at 20:10
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Apr 2016 23:30:22 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--BTqjtwWwPDUn1kovilcNQu05VEW3SBahT
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

In case you are late please join us at

BierLife, Humberto Primo 670

Here is the map with walking directions:
https://goo.gl/maps/v3MRGqDCe3S2

Ciao
Hannes

On 04/06/2016 07:57 PM, Hannes Tschofenig wrote:
> Hi all,
>=20
> during the ACE meeting I suggested to get together for dinner Wednesday=

> evening (after the plenary).
>=20
> Hence, we are going to meet at 20:10 at the Hilton Lobby.
>=20
> I would to hear more about your interest in specific ACE-OAuth profiles=
=2E
>=20
> Please respond to me privately about this event, if you have feedback
> and if you have time to join!
>=20
> Ciao
> Hannes
>=20
>=20


--BTqjtwWwPDUn1kovilcNQu05VEW3SBahT
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXBZwRAAoJEGhJURNOOiAtq3cIAI8ueydlqRi/4H+Pe2q3QVsD
96WUnl+Lzj9SwanUpizTEU3Hd5G+xAtb1dRl4j7OBsyyMuRC8v6tAwEiyJlqo85z
PkUyeV7b636Gw6vN6f9ILeVPam00PznzuCzfY7WNnIvE1kPyP8krSKBI3OkY02mJ
vh8DipX2y6biuHW08eH+Q8eyTZQB98uUFFM11kEliRX9e2ZfjdSe7nfKAIZklcer
1UFIrzeSDOKbcEVMTC69Vocuc8CpnJ1oFiG71zzt0o4Lls3eo9cEUxdKhPQLBBoc
4m0vPPoH8zbX6OgoSbMX7cZp2p7pJfmk/VPsxlA9dTj3CW8OSbYQqkbqsP5V7AY=
=Jdpt
-----END PGP SIGNATURE-----

--BTqjtwWwPDUn1kovilcNQu05VEW3SBahT--


From nobody Wed Apr  6 18:35:13 2016
Return-Path: <kepeng.lkp@alibaba-inc.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C49212D6D3; Wed,  6 Apr 2016 18:35:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.698
X-Spam-Level: 
X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=alibaba-inc.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bLv1e_mfNyg8; Wed,  6 Apr 2016 18:35:08 -0700 (PDT)
Received: from out4133-82.mail.aliyun.com (out4133-82.mail.aliyun.com [42.120.133.82]) by ietfa.amsl.com (Postfix) with ESMTP id 7BD8D12D126; Wed,  6 Apr 2016 18:35:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1459992906; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=6RTEyvBI+UFHIHr08A9f41qlB/2cPAlJydDF25CJwVQ=; b=uy96gYepRgeStgSs1fFKE+5skj/neFwvSKApiCJM0QAFeGuhyo0vD+FuwNoek6QyksSUdcaqgCwEoBGGo1YBa/EH761qU+kmG3D47sFFZBCfe6FghZRP5YbggNbcMIGpzaY2aYBfjB2sl3GHZp3mJHnEeMaTwHvPvvsAmDVmHpc=
X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R191e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03296; MF=kepeng.lkp@alibaba-inc.com; NM=1; PH=DS; RN=6; SR=0; TI=SMTPD_----4gKK-ts_1459992890; 
Received: from 30.10.37.162(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.90) by smtp.aliyun-inc.com(127.0.0.1); Thu, 07 Apr 2016 09:34:54 +0800
User-Agent: Microsoft-MacOutlook/14.4.8.150116
Date: Thu, 07 Apr 2016 09:34:47 +0800
From: "Kepeng Li" <kepeng.lkp@alibaba-inc.com>
To: "ace@ietf.org" <ace@ietf.org>
Message-ID: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
Thread-Topic: Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3542866494_289664"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/vC4xD2VoYKFyT7DCavOCckxgItk>
Cc: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, cose@ietf.org, oauth@ietf.org, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Subject: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2016 01:35:12 -0000

> ´ËÓÊ¼þÊ¹ÓÃ MIME ¸ñÊ½¡£ÓÉÓÚÓÊ¼þÔÄ¶Á³ÌÐò²»ÄÜÊ¶±ð
´Ë¸ñÊ½£¬Òò´Ë£¬¿ÉÄÜÎÞ·¨Ê¶±ð¸ÃÓÊ¼þµÄ·Ö²¿»ò²¿·ÖÄÚÈÝ¡£

--B_3542866494_289664
Content-type: text/plain;
	charset="GB2312"
Content-transfer-encoding: 7bit

To: ACE WG
Cc: OAuth and COSE WG

Hello all,

This note begins a Call For Adoption for
draft-wahlstroem-ace-cbor-web-token-00 [1]
to be adopted as an ACE working group item, and added in the charter.
The call ends on April 22, 2016.

Keep in mind that adoption of a document does not mean the document
as-is is ready for publication. It is merely acceptance of the
document as a starting point for what will be the final product
of the ACE working group. The working group is free to make changes to
the document according to the normal consensus process.

Please reply on this thread with expressions of support or opposition,
preferably with comments, regarding accepting this as a work item.

Note that this email was also copied to OAuth and COSE WG, in order to
get input from wider audience.

Thanks,

Kind Regards
Kepeng (ACE co-chair)

[1] https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/




--B_3542866494_289664
Content-type: text/html;
	charset="GB2312"
Content-transfer-encoding: quoted-printable

<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: s=
pace; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size:=
 14px; font-family: =CB=CE=CC=E5, sans-serif;"><div style=3D"font-size: 14px; font-fam=
ily: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"fon=
t-size: 12px;">To: ACE WG</font></div><div style=3D"font-size: 14px; font-fami=
ly: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"font=
-size: 12px;">Cc:&nbsp;</font><span style=3D"font-size: 12px; font-family: Cou=
rier;">OAuth and COSE WG</span></div><span id=3D"OLK_SRC_BODY_SECTION" style=3D"=
font-size: 12px; font-family: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><font =
face=3D"Courier"><div><br></div><div><div style=3D"word-wrap: break-word; -webki=
t-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, =
0);"><div><span style=3D"line-height: 18px; white-space: pre-wrap;">Hello all,=
</span></div><span id=3D"OLK_SRC_BODY_SECTION"><div style=3D"word-wrap: break-wo=
rd; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: =
rgb(0, 0, 0);"><pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom: =
0px; padding: 0px; border: 0px; line-height: 18px; vertical-align: baseline;=
 white-space: pre-wrap; word-wrap: break-word;"><br></pre><pre class=3D"wordwr=
ap" style=3D"margin-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px; l=
ine-height: 18px; vertical-align: baseline; white-space: pre-wrap; word-wrap=
: break-word;">This note begins a Call For Adoption for <span style=3D"line-he=
ight: 1.214; widows: 1; background-color: rgb(255, 253, 245);">draft-wahlstr=
oem-ace-cbor-web-token-00 [1]</span></pre></div></span></div></div></font></=
span><div style=3D"font-size: 14px; font-family: =CB=CE=CC=E5, sans-serif; widows: 1;"=
><font face=3D"Courier" style=3D"font-size: 12px;"><span style=3D"line-height: 18p=
x; white-space: pre-wrap;">to </span><span style=3D"color: rgb(0, 0, 0); line-=
height: 18px; white-space: pre-wrap;">be adopted as an ACE working group ite=
m, and added in the charter.</span></font></div><span id=3D"OLK_SRC_BODY_SECTI=
ON" style=3D"font-size: 12px; font-family: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, =
0);"><div><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webk=
it-line-break: after-white-space; color: rgb(0, 0, 0);"><font face=3D"Courier"=
><div><span style=3D"line-height: 18px; white-space: pre-wrap;">The call ends =
on April 22, 2016.</span></div></font></div></div></span><div style=3D"font-si=
ze: 14px; font-family: =CB=CE=CC=E5, sans-serif;"><br></div><span id=3D"OLK_SRC_BODY_S=
ECTION" style=3D"font-size: 12px; font-family: =CB=CE=CC=E5, sans-serif; color: rgb(0,=
 0, 0);"><div><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -=
webkit-line-break: after-white-space; color: rgb(0, 0, 0);"><font face=3D"Cour=
ier"><span id=3D"OLK_SRC_BODY_SECTION"><div style=3D"word-wrap: break-word; -web=
kit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0=
, 0);"><pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom: 0px; pad=
ding: 0px; border: 0px; line-height: 18px; vertical-align: baseline; white-s=
pace: pre-wrap; word-wrap: break-word;">Keep in mind that adoption of a docu=
ment does not mean the document
as-is is ready for publication. It is merely acceptance of the
document as a starting point for what will be the final product
of the ACE working group. The working group is free to make changes to
the document according to the normal consensus process.

Please reply on this thread with expressions of support or opposition,
preferably with comments, regarding accepting this as a work item.</pre></d=
iv></span></font></div></div></span><div style=3D"font-size: 14px; font-family=
: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><br></div><div style=3D"font-size: 1=
4px; font-family: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><font face=3D"Courie=
r" style=3D"font-size: 12px;">Note that this email was also copied to OAuth an=
d COSE WG, in order to&nbsp;</font></div><div style=3D"font-size: 14px; font-f=
amily: =CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"f=
ont-size: 12px;">get input from wider audience.</font></div><span id=3D"OLK_SR=
C_BODY_SECTION" style=3D"font-size: 14px; font-family: =CB=CE=CC=E5, sans-serif; color=
: rgb(0, 0, 0);"><div style=3D"font-size: 14px; font-family: =CB=CE=CC=E5, sans-serif;=
"><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-=
break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family:=
 =CB=CE=CC=E5, sans-serif;"><span id=3D"OLK_SRC_BODY_SECTION"><div style=3D"word-wrap: b=
reak-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; =
color: rgb(0, 0, 0); font-size: 14px; font-family: =CB=CE=CC=E5, sans-serif;"><pre c=
lass=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom: 0px; padding: 0px; bo=
rder: 0px; font-family: Courier, 'Courier New', monospace; font-size: 12px; =
line-height: 18px; vertical-align: baseline; white-space: pre-wrap; word-wra=
p: break-word;"><br></pre><pre class=3D"wordwrap" style=3D"margin-top: 0px; marg=
in-bottom: 0px; padding: 0px; border: 0px; font-family: Courier, 'Courier Ne=
w', monospace; font-size: 12px; line-height: 18px; vertical-align: baseline;=
 white-space: pre-wrap; word-wrap: break-word;">Thanks,</pre><pre class=3D"wor=
dwrap" style=3D"margin-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px=
; font-family: Courier, 'Courier New', monospace; font-size: 12px; line-heig=
ht: 18px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-=
word;"><br></pre><pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom=
: 0px; padding: 0px; border: 0px; font-family: Courier, 'Courier New', monos=
pace; font-size: 12px; line-height: 18px; vertical-align: baseline; white-sp=
ace: pre-wrap; word-wrap: break-word;">Kind Regards</pre><pre class=3D"wordwra=
p" style=3D"margin-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px; fo=
nt-family: Courier, 'Courier New', monospace; font-size: 12px; line-height: =
18px; vertical-align: baseline; white-space: pre-wrap; word-wrap: break-word=
;">Kepeng (ACE co-chair)</pre></div></span></div></div></span><div style=3D"co=
lor: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"font-size: 12px;"><br></font=
></div><div style=3D"color: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"font-si=
ze: 12px;">[1]&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-wahlstro=
em-ace-cbor-web-token/">https://datatracker.ietf.org/doc/draft-wahlstroem-ac=
e-cbor-web-token/</a></font></div><div style=3D"font-size: 14px; font-family: =
=CB=CE=CC=E5, sans-serif; color: rgb(0, 0, 0);"><br></div></body></html>

--B_3542866494_289664--



From nobody Wed Apr  6 19:59:28 2016
Return-Path: <Michael.Jones@microsoft.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13B5612D0B3; Wed,  6 Apr 2016 19:59:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tEx-GDOe3CsN; Wed,  6 Apr 2016 19:59:21 -0700 (PDT)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0783.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:783]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DCF2B12D146; Wed,  6 Apr 2016 19:59:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Zs6LcTX9Vt64B/UEL13nRBUjxCzU4TpK7lta6o/N9Pw=; b=IDKKI+Bh2buwaNp6JCGGydjr3uSG5ETh1ZGVKYg2lKr0MUkSzb4huhNtrMyfcapcft0SefESBs//MQWhKbmjbrtGHbWY+S/FX8u3t40SCcKfAnt82hAh/PRbAp0SLlzjEC/d3GYWWGwbpJdiumpFrq1jX2YpbUoP6dFXhb2/HE4=
Received: from SN1PR0301MB1645.namprd03.prod.outlook.com (10.162.130.139) by SN1PR0301MB1648.namprd03.prod.outlook.com (10.162.130.142) with Microsoft SMTP Server (TLS) id 15.1.447.15; Thu, 7 Apr 2016 02:59:01 +0000
Received: from SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) by SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) with mapi id 15.01.0447.028; Thu, 7 Apr 2016 02:59:01 +0000
From: Mike Jones <Michael.Jones@microsoft.com>
To: Kepeng Li <kepeng.lkp@alibaba-inc.com>, "ace@ietf.org" <ace@ietf.org>
Thread-Topic: Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
Thread-Index: AQHRkG299//iUC6O6EGSqoxS6svzQJ990fHA
Date: Thu, 7 Apr 2016 02:59:00 +0000
Message-ID: <SN1PR0301MB1645D4830C04B586FABEC296F5900@SN1PR0301MB1645.namprd03.prod.outlook.com>
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
In-Reply-To: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: alibaba-inc.com; dkim=none (message not signed) header.d=none;alibaba-inc.com; dmarc=none action=none header.from=microsoft.com;
x-originating-ip: [2001:67c:370:136:4837:2cfb:1d37:c4e6]
x-ms-office365-filtering-correlation-id: 85549ad6-5837-4d0c-cb8f-08d35e909247
x-microsoft-exchange-diagnostics: 1; SN1PR0301MB1648; 5:eygIGK1N6ZBzd/CmPAW5rTBY8dNH4GWV8e5EwHqatWj8UvjiHysfWC8UV31MkAXVFu3eRqK7xaz3+X+Tvv/kjMIdp0mP1Mqb3Tkl/v/0sKiVk98sKsgqy7zCipkRXQ5RYf82WwlmatpQJYs8NVBF+A==; 24:/lCO/3qH8NIO2DCaa5ZS5UAk0W5eGfbeVapF6ni9Zql5Nm5GR1DheNuvIWVTUvzauHzecP63ceCaFomduKHiZVWWI0NHxDxZDqJZznz/hfk=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR0301MB1648;
x-microsoft-antispam-prvs: <SN1PR0301MB1648392D7F6795F46CE90BD9F5900@SN1PR0301MB1648.namprd03.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(61426038)(61427038); SRVR:SN1PR0301MB1648; BCL:0; PCL:0; RULEID:; SRVR:SN1PR0301MB1648; 
x-forefront-prvs: 0905A6B2C7
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(53754006)(71364002)(122556002)(19617315012)(19625215002)(77096005)(10290500002)(15975445007)(87936001)(5005710100001)(5004730100002)(92566002)(4326007)(2950100001)(33656002)(5003600100002)(5002640100001)(81166005)(11100500001)(1096002)(5008740100001)(2900100001)(86362001)(586003)(76176999)(76576001)(86612001)(50986999)(10090500001)(230783001)(790700001)(106116001)(19300405004)(6116002)(102836003)(8990500004)(1220700001)(10400500002)(74316001)(2501003)(3660700001)(99286002)(54356999)(16236675004)(2906002)(3280700002)(189998001)(164054004)(5001770100001)(19580405001)(19580395003)(3826002)(564094006); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR0301MB1648; H:SN1PR0301MB1645.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; 
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_SN1PR0301MB1645D4830C04B586FABEC296F5900SN1PR0301MB1645_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Apr 2016 02:59:00.9820 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR0301MB1648
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/K7BDhHBuvdDWeS0GB6X-_lZUNAk>
Cc: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "oauth@ietf.org" <oauth@ietf.org>, "cose@ietf.org" <cose@ietf.org>
Subject: Re: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2016 02:59:24 -0000

--_000_SN1PR0301MB1645D4830C04B586FABEC296F5900SN1PR0301MB1645_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

+1 for adoption

From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Kepeng Li
Sent: Wednesday, April 6, 2016 10:35 PM
To: ace@ietf.org
Cc: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>; Hannes Tschofenig=
 <hannes.tschofenig@gmx.net>; cose@ietf.org; oauth@ietf.org; Stephen Farrel=
l <stephen.farrell@cs.tcd.ie>
Subject: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00

To: ACE WG
Cc: OAuth and COSE WG

Hello all,



This note begins a Call For Adoption for draft-wahlstroem-ace-cbor-web-toke=
n-00 [1]
to be adopted as an ACE working group item, and added in the charter.
The call ends on April 22, 2016.


Keep in mind that adoption of a document does not mean the document

as-is is ready for publication. It is merely acceptance of the

document as a starting point for what will be the final product

of the ACE working group. The working group is free to make changes to

the document according to the normal consensus process.



Please reply on this thread with expressions of support or opposition,

preferably with comments, regarding accepting this as a work item.

Note that this email was also copied to OAuth and COSE WG, in order to
get input from wider audience.



Thanks,



Kind Regards

Kepeng (ACE co-chair)

[1] https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/


--_000_SN1PR0301MB1645D4830C04B586FABEC296F5900SN1PR0301MB1645_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:Courier;
	panose-1:2 7 4 9 2 2 5 2 4 4;}
@font-face
	{font-family:SimSun;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
	{font-family:"\@SimSun";
	panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:SimSun;
	mso-fareast-language:ZH-CN;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:SimSun;
	mso-fareast-language:ZH-CN;}
p.msonormal0, li.msonormal0, div.msonormal0
	{mso-style-name:msonormal;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:SimSun;
	mso-fareast-language:ZH-CN;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;
	mso-fareast-language:ZH-CN;}
span.EmailStyle20
	{mso-style-type:personal-reply;
	font-family:"Calibri",sans-serif;
	color:#002060;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt;font-family:&quot;Ca=
libri&quot;,sans-serif;color:#002060;mso-fareast-language:EN-US">&#43;1 for=
 adoption<o:p></o:p></span></p>
<p class=3D"MsoNormal"><a name=3D"_MailEndCompose"><span style=3D"font-size=
:11.0pt;font-family:&quot;Calibri&quot;,sans-serif;color:#002060;mso-fareas=
t-language:EN-US"><o:p>&nbsp;</o:p></span></a></p>
<span style=3D"mso-bookmark:_MailEndCompose"></span>
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in =
0in 0in">
<p class=3D"MsoNormal"><b><span style=3D"font-size:11.0pt;font-family:&quot=
;Calibri&quot;,sans-serif">From:</span></b><span style=3D"font-size:11.0pt;=
font-family:&quot;Calibri&quot;,sans-serif"> Ace [mailto:ace-bounces@ietf.o=
rg]
<b>On Behalf Of </b>Kepeng Li<br>
<b>Sent:</b> Wednesday, April 6, 2016 10:35 PM<br>
<b>To:</b> ace@ietf.org<br>
<b>Cc:</b> Kathleen Moriarty &lt;kathleen.moriarty.ietf@gmail.com&gt;; Hann=
es Tschofenig &lt;hannes.tschofenig@gmx.net&gt;; cose@ietf.org; oauth@ietf.=
org; Stephen Farrell &lt;stephen.farrell@cs.tcd.ie&gt;<br>
<b>Subject:</b> [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-t=
oken-00<o:p></o:p></span></p>
</div>
</div>
<p class=3D"MsoNormal"><o:p>&nbsp;</o:p></p>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">To: ACE WG</span><span style=3D"font-size:10.5pt;color:black"><=
o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">Cc:&nbsp;OAuth and COSE WG</span><span style=3D"font-size:10.5p=
t;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black"><o:p>&nbsp;</o:p></span></p>
</div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">Hello all,<o:p></o:p></span></p>
</div>
<div>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black"><o:p>&nbsp;</o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline;white-space:pre-wr=
ap;word-wrap: break-word"><span style=3D"color:black">This note begins a Ca=
ll For Adoption for <span style=3D"background:#FFFDF5">draft-wahlstroem-ace=
-cbor-web-token-00 [1]</span><o:p></o:p></span></pre>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">to be adopted as an ACE working group item, and added in the ch=
arter.</span><span style=3D"font-size:10.5pt;color:black"><o:p></o:p></span=
></p>
</div>
<div>
<div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">The call ends on April 22, 2016.<o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><o:p>&n=
bsp;</o:p></span></p>
</div>
<div>
<div>
<div>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">Keep in mind that adoption of a document does not mean the docum=
ent<o:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">as-is is ready for publication. It is merely acceptance of the<o=
:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">document as a starting point for what will be the final product<=
o:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">of the ACE working group. The working group is free to make chan=
ges to<o:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">the document according to the normal consensus process.<o:p></o:=
p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black"><o:p>&nbsp;</o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">Please reply on this thread with expressions of support or oppos=
ition,<o:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"co=
lor:black">preferably with comments, regarding accepting this as a work ite=
m.<o:p></o:p></span></pre>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><o:p>&n=
bsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">Note that this email was also copied to OAuth and COSE WG, in o=
rder to&nbsp;</span><span style=3D"font-size:10.5pt;color:black"><o:p></o:p=
></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">get input from wider audience.</span><span style=3D"font-size:1=
0.5pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<pre style=3D"line-height:13.5pt;vertical-align:baseline"><span style=3D"fo=
nt-size:9.0pt;font-family:Courier;color:black"><o:p>&nbsp;</o:p></span></pr=
e>
<pre style=3D"line-height:13.5pt;vertical-align:baseline;white-space:pre-wr=
ap;word-wrap: break-word"><span style=3D"font-size:9.0pt;font-family:Courie=
r;color:black">Thanks,<o:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline;white-space:pre-wr=
ap;word-wrap: break-word"><span style=3D"font-size:9.0pt;font-family:Courie=
r;color:black"><o:p>&nbsp;</o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline;white-space:pre-wr=
ap;word-wrap: break-word"><span style=3D"font-size:9.0pt;font-family:Courie=
r;color:black">Kind Regards<o:p></o:p></span></pre>
<pre style=3D"line-height:13.5pt;vertical-align:baseline;white-space:pre-wr=
ap;word-wrap: break-word"><span style=3D"font-size:9.0pt;font-family:Courie=
r;color:black">Kepeng (ACE co-chair)<o:p></o:p></span></pre>
</div>
</div>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><o:p>&n=
bsp;</o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;font-family:Courier;c=
olor:black">[1]&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-wahl=
stroem-ace-cbor-web-token/">https://datatracker.ietf.org/doc/draft-wahlstro=
em-ace-cbor-web-token/</a></span><span style=3D"font-size:10.5pt;color:blac=
k"><o:p></o:p></span></p>
</div>
<div>
<p class=3D"MsoNormal"><span style=3D"font-size:10.5pt;color:black"><o:p>&n=
bsp;</o:p></span></p>
</div>
</div>
</body>
</html>

--_000_SN1PR0301MB1645D4830C04B586FABEC296F5900SN1PR0301MB1645_--


From nobody Wed Apr  6 23:23:41 2016
Return-Path: <samuel@erdtman.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E52C12D56C for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 23:23:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BudAaICt5sUc for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 23:23:38 -0700 (PDT)
Received: from mail-lf0-x242.google.com (mail-lf0-x242.google.com [IPv6:2a00:1450:4010:c07::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE62412D569 for <ace@ietf.org>; Wed,  6 Apr 2016 23:23:37 -0700 (PDT)
Received: by mail-lf0-x242.google.com with SMTP id p81so6496150lfb.3 for <ace@ietf.org>; Wed, 06 Apr 2016 23:23:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=Fxm3q6ZsLkKiMN1LbOdvEWQ0m/gWoPrkABX+FmHaAOo=; b=s+Md9sgf2BGeTwSoBxseUYuH271NGb39+rPawsmLdQdoJgUqiuFnIX4uwhchGlOeo1 XVXx/oyCzanVmUE88iwPFwSuRbSee6ZIsJHNvcC3IE1xpV9+mktTJiXC+rZ31qv13B3r grCkqEFgx828M2mNpoYcldhHv0ldxN+atnxBUqqtHHRnAiMazzluL/WpDLoaDfatQ800 OYp+xtrJQKHncnWx3gSvA3fvAsr8jAHTZw3Gm2icWAMJ2uN3opZcRbh7dMmnL5wIL9Oy V3J+jnrH6crQeSW5ZdRFrimY/WT36OeWbdYZ9MFyeAYT9sWUKZG2PYEOmHkwMv4U1BIA 9bLg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=Fxm3q6ZsLkKiMN1LbOdvEWQ0m/gWoPrkABX+FmHaAOo=; b=G/ibzTaXdFGTFAbB32QRCdaMZdV0KkhIoeKHQ5SDL1rP/9TwtvRpAaAGRa31znAjvw xIr3SOSXUym0ueuCWZRD4i1g5JUDAfk1Ru3TAsmririAGW2LFc4hrQH+31PymB6DIpVL fiUNBNnsS76FabZWAmb1hysNiPIh2IfqnYL3jgODMTBRnkDPOxOZGbFVwtMr4jBtrjYY WtcZrVlzmWil6L1oUSf8hj+Nj67hdts5hwuDzKExxAJOdqBVuN3dseh01qHy805G04/5 J3Vct3iBYmAWCzMYksZMhuIWuNu0mdFcXC4tu2XpxuPpzolRpYI1vSbe34TDsZ2DbT60 q8ag==
X-Gm-Message-State: AD7BkJJh3Tj5R73G9ZTrOXBYKcxnoN2s6o8V9svXSmymiDW1qC6hqELt9J+2assAyQBl4A==
X-Received: by 10.25.146.206 with SMTP id u197mr589171lfd.139.1460010215690; Wed, 06 Apr 2016 23:23:35 -0700 (PDT)
Received: from ?IPv6:2a01:2b0:3041:30c0:dd3d:a4ee:eed:382e? ([2a01:2b0:3041:30c0:dd3d:a4ee:eed:382e]) by smtp.gmail.com with ESMTPSA id i204sm961979lfg.47.2016.04.06.23.23.34 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 06 Apr 2016 23:23:34 -0700 (PDT)
Content-Type: multipart/alternative; boundary=Apple-Mail-9A9B9DEF-4435-42B5-9696-B5A1444E1B69
Content-Transfer-Encoding: 7bit
From: Samuel Erdtman <samuel@erdtman.se>
Mime-Version: 1.0 (1.0)
Date: Thu, 7 Apr 2016 06:47:46 +0200
Message-Id: <EA7D95DA-F8C0-4430-BE83-812E97F4CC12@erdtman.se>
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
In-Reply-To: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
To: Kepeng Li <kepeng.lkp@alibaba-inc.com>
X-Mailer: iPhone Mail (13E237)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/fdV3coGJ9otSiRE6HsZRIMeiE2Y>
Cc: cose@ietf.org, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, "ace@ietf.org" <ace@ietf.org>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, oauth@ietf.org, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Subject: Re: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2016 06:23:40 -0000

--Apple-Mail-9A9B9DEF-4435-42B5-9696-B5A1444E1B69
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

+1 for adoption

Sent from my iPhone

> On 7 apr. 2016, at 03:34, Kepeng Li <kepeng.lkp@alibaba-inc.com> wrote:
>=20
> To: ACE WG
> Cc: OAuth and COSE WG
>=20
> Hello all,
>=20
> This note begins a Call For Adoption for draft-wahlstroem-ace-cbor-web-tok=
en-00 [1]
> to be adopted as an ACE working group item, and added in the charter.
> The call ends on April 22, 2016.
>=20
> Keep in mind that adoption of a document does not mean the document
> as-is is ready for publication. It is merely acceptance of the
> document as a starting point for what will be the final product
> of the ACE working group. The working group is free to make changes to
> the document according to the normal consensus process.
>=20
> Please reply on this thread with expressions of support or opposition,
> preferably with comments, regarding accepting this as a work item.
>=20
> Note that this email was also copied to OAuth and COSE WG, in order to=20
> get input from wider audience.
>=20
> Thanks,
>=20
> Kind Regards
> Kepeng (ACE co-chair)
>=20
> [1] https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/
>=20
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace

--Apple-Mail-9A9B9DEF-4435-42B5-9696-B5A1444E1B69
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div>+1 for adoption<br><br>Sent from my iP=
hone</div><div><br>On 7 apr. 2016, at 03:34, Kepeng Li &lt;<a href=3D"mailto=
:kepeng.lkp@alibaba-inc.com">kepeng.lkp@alibaba-inc.com</a>&gt; wrote:<br><b=
r></div><blockquote type=3D"cite"><div><div style=3D"font-size: 14px; font-f=
amily: =E5=AE=8B=E4=BD=93, sans-serif; color: rgb(0, 0, 0);"><font face=3D"C=
ourier" style=3D"font-size: 12px;">To: ACE WG</font></div><div style=3D"font=
-size: 14px; font-family: =E5=AE=8B=E4=BD=93, sans-serif; color: rgb(0, 0, 0=
);"><font face=3D"Courier" style=3D"font-size: 12px;">Cc:&nbsp;</font><span s=
tyle=3D"font-size: 12px; font-family: Courier;">OAuth and COSE WG</span></di=
v><span id=3D"OLK_SRC_BODY_SECTION" style=3D"font-size: 12px; font-family: =E5=
=AE=8B=E4=BD=93, sans-serif; color: rgb(0, 0, 0);"><font face=3D"Courier"><d=
iv><br></div><div><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: sp=
ace; -webkit-line-break: after-white-space; color: rgb(0, 0, 0);"><div><span=
 style=3D"line-height: 18px; white-space: pre-wrap;">Hello all,</span></div>=
<span id=3D"OLK_SRC_BODY_SECTION"><div style=3D"word-wrap: break-word; -webk=
it-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0,=
 0);"><pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom: 0px; p=
adding: 0px; border: 0px; line-height: 18px; vertical-align: baseline; white=
-space: pre-wrap; word-wrap: break-word;"><br></pre><pre class=3D"wordwrap" s=
tyle=3D"margin-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px; line=
-height: 18px; vertical-align: baseline; white-space: pre-wrap; word-wrap: b=
reak-word;">This note begins a Call For Adoption for <span style=3D"line-hei=
ght: 1.214; widows: 1; background-color: rgb(255, 253, 245);">draft-wahlstro=
em-ace-cbor-web-token-00 [1]</span></pre></div></span></div></div></font></s=
pan><div style=3D"font-size: 14px; font-family: =E5=AE=8B=E4=BD=93, sans-ser=
if; widows: 1;"><font face=3D"Courier" style=3D"font-size: 12px;"><span styl=
e=3D"line-height: 18px; white-space: pre-wrap;">to </span><span style=3D"col=
or: rgb(0, 0, 0); line-height: 18px; white-space: pre-wrap;">be adopted as a=
n ACE working group item, and added in the charter.</span></font></div><span=
 id=3D"OLK_SRC_BODY_SECTION" style=3D"font-size: 12px; font-family: =E5=AE=8B=
=E4=BD=93, sans-serif; color: rgb(0, 0, 0);"><div><div style=3D"word-wrap: b=
reak-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; c=
olor: rgb(0, 0, 0);"><font face=3D"Courier"><div><span style=3D"line-height:=
 18px; white-space: pre-wrap;">The call ends on April 22, 2016.</span></div>=
</font></div></div></span><div style=3D"font-size: 14px; font-family: =E5=AE=
=8B=E4=BD=93, sans-serif;"><br></div><span id=3D"OLK_SRC_BODY_SECTION" style=
=3D"font-size: 12px; font-family: =E5=AE=8B=E4=BD=93, sans-serif; color: rgb=
(0, 0, 0);"><div><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: spa=
ce; -webkit-line-break: after-white-space; color: rgb(0, 0, 0);"><font face=3D=
"Courier"><span id=3D"OLK_SRC_BODY_SECTION"><div style=3D"word-wrap: break-w=
ord; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color:=
 rgb(0, 0, 0);"><pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bot=
tom: 0px; padding: 0px; border: 0px; line-height: 18px; vertical-align: base=
line; white-space: pre-wrap; word-wrap: break-word;">Keep in mind that adopt=
ion of a document does not mean the document
as-is is ready for publication. It is merely acceptance of the
document as a starting point for what will be the final product
of the ACE working group. The working group is free to make changes to
the document according to the normal consensus process.

Please reply on this thread with expressions of support or opposition,
preferably with comments, regarding accepting this as a work item.</pre></di=
v></span></font></div></div></span><div style=3D"font-size: 14px; font-famil=
y: =E5=AE=8B=E4=BD=93, sans-serif; color: rgb(0, 0, 0);"><br></div><div styl=
e=3D"font-size: 14px; font-family: =E5=AE=8B=E4=BD=93, sans-serif; color: rg=
b(0, 0, 0);"><font face=3D"Courier" style=3D"font-size: 12px;">Note that thi=
s email was also copied to OAuth and COSE WG, in order to&nbsp;</font></div>=
<div style=3D"font-size: 14px; font-family: =E5=AE=8B=E4=BD=93, sans-serif; c=
olor: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"font-size: 12px;">get i=
nput from wider audience.</font></div><span id=3D"OLK_SRC_BODY_SECTION" styl=
e=3D"font-size: 14px; font-family: =E5=AE=8B=E4=BD=93, sans-serif; color: rg=
b(0, 0, 0);"><div style=3D"font-size: 14px; font-family: =E5=AE=8B=E4=BD=93,=
 sans-serif;"><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space;=
 -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px=
; font-family: =E5=AE=8B=E4=BD=93, sans-serif;"><span id=3D"OLK_SRC_BODY_SEC=
TION"><div style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit=
-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-f=
amily: =E5=AE=8B=E4=BD=93, sans-serif;"><pre class=3D"wordwrap" style=3D"mar=
gin-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px; font-family: Co=
urier, 'Courier New', monospace; font-size: 12px; line-height: 18px; vertica=
l-align: baseline; white-space: pre-wrap; word-wrap: break-word;"><br></pre>=
<pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom: 0px; paddin=
g: 0px; border: 0px; font-family: Courier, 'Courier New', monospace; font-si=
ze: 12px; line-height: 18px; vertical-align: baseline; white-space: pre-wrap=
; word-wrap: break-word;">Thanks,</pre><pre class=3D"wordwrap" style=3D"marg=
in-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px; font-family: Cou=
rier, 'Courier New', monospace; font-size: 12px; line-height: 18px; vertical=
-align: baseline; white-space: pre-wrap; word-wrap: break-word;"><br></pre><=
pre class=3D"wordwrap" style=3D"margin-top: 0px; margin-bottom: 0px; padding=
: 0px; border: 0px; font-family: Courier, 'Courier New', monospace; font-siz=
e: 12px; line-height: 18px; vertical-align: baseline; white-space: pre-wrap;=
 word-wrap: break-word;">Kind Regards</pre><pre class=3D"wordwrap" style=3D"=
margin-top: 0px; margin-bottom: 0px; padding: 0px; border: 0px; font-family:=
 Courier, 'Courier New', monospace; font-size: 12px; line-height: 18px; vert=
ical-align: baseline; white-space: pre-wrap; word-wrap: break-word;">Kepeng (=
ACE co-chair)</pre></div></span></div></div></span><div style=3D"color: rgb(=
0, 0, 0);"><font face=3D"Courier" style=3D"font-size: 12px;"><br></font></di=
v><div style=3D"color: rgb(0, 0, 0);"><font face=3D"Courier" style=3D"font-s=
ize: 12px;">[1]&nbsp;<a href=3D"https://datatracker.ietf.org/doc/draft-wahls=
troem-ace-cbor-web-token/">https://datatracker.ietf.org/doc/draft-wahlstroem=
-ace-cbor-web-token/</a></font></div><div style=3D"font-size: 14px; font-fam=
ily: =E5=AE=8B=E4=BD=93, sans-serif; color: rgb(0, 0, 0);"><br></div>
</div></blockquote><blockquote type=3D"cite"><div><span>____________________=
___________________________</span><br><span>Ace mailing list</span><br><span=
><a href=3D"mailto:Ace@ietf.org">Ace@ietf.org</a></span><br><span><a href=3D=
"https://www.ietf.org/mailman/listinfo/ace">https://www.ietf.org/mailman/lis=
tinfo/ace</a></span><br></div></blockquote></body></html>=

--Apple-Mail-9A9B9DEF-4435-42B5-9696-B5A1444E1B69--


From nobody Wed Apr  6 23:42:45 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7725712D56C for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 23:42:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWjsnHqO2PoA for <ace@ietfa.amsl.com>; Wed,  6 Apr 2016 23:42:41 -0700 (PDT)
Received: from mail-lf0-x22c.google.com (mail-lf0-x22c.google.com [IPv6:2a00:1450:4010:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84F9F12D555 for <ace@ietf.org>; Wed,  6 Apr 2016 23:42:40 -0700 (PDT)
Received: by mail-lf0-x22c.google.com with SMTP id e190so48056513lfe.0 for <ace@ietf.org>; Wed, 06 Apr 2016 23:42:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=nEJoy3X/JLOD04c+RkEMzKZAhzDYcWHamzXTwh0p+JY=; b=bPte5pJEbqX7Ky4fs9uRJE0fJaG+MdbEqtQZ6lGQmeI+hXBTYzm4jBe0lXDizzor/8 irq+wNcNKDz8OQQ7RFAEwdRoLpRL2u0yt6tw+VRUxnuERPwhy7et+7PDgLU9EYvpqIf0 X1zHSMdq82LSlo9p1eVfcLErF09+RbHYrd95it66UYm0VvuHQAEIebY/hL3764nUmAJx zr/VEdvqu+jw/8HxOpsniHfVi7G9gMw2HdLURebgFl1J8INy/P7rk4T9ATfDNmfuinLi 4Mtv7YB8wJgNVOBgAqNqtAn8JSk3Xalb6vmMJRwpLuavh/O5BsuYCXXB7KB/Bl5uX9Vq Zhiw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=nEJoy3X/JLOD04c+RkEMzKZAhzDYcWHamzXTwh0p+JY=; b=gJZVZ6euky8X/NhrKYyfMvEqLciWkdFgzqORFnrsn6D25YH1cz9rgrwFFy12YrujrJ G2PXJcz13Q70ma4PeQg3nWbTxiwgSUjO9aeN4Tnp4TWJ4kFlsjOIM5fHb+Yje8v/I4LP IItDWtrR9G9S3fwtIKtVztur4MDCidb0Ibv3ZWpDpYx69pjnx2EEfIsqnd82chkUcEpm MzIjbIAusK5YOyu/9/ocoK8+3WIDsjOgYfaDKBF2elNHDXo0bIIzXwMHX9/aGnGrQY5r PIk3okIomzHvb7y+C4mCCUQD8uikRpy5+PmCR6XjPBPBNfsyv8FqYnvaOpjQpUtur3A+ fO/Q==
X-Gm-Message-State: AD7BkJLj4d4Bsxsphj6L3drAngKdbHIPOKdjUWuJnhNLDbLijqnCROkp6LHnXr8/d5yZW+BJ
X-Received: by 10.25.17.67 with SMTP id g64mr677565lfi.112.1460011358641; Wed, 06 Apr 2016 23:42:38 -0700 (PDT)
Received: from [192.168.0.167] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id rk1sm975395lbb.0.2016.04.06.23.42.37 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Wed, 06 Apr 2016 23:42:37 -0700 (PDT)
To: ace@ietf.org
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <57060158.4050507@sics.se>
Date: Thu, 7 Apr 2016 08:42:32 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030008080107030802020203"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/RZgXDWFRCwU_8s54DDnk1bO4AKg>
Subject: Re: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2016 06:42:43 -0000

This is a cryptographically signed message in MIME format.

--------------ms030008080107030802020203
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-07 03:34, Kepeng Li wrote:
> To: ACE WG
> Cc: OAuth and COSE WG
>
> Hello all,
>
> This note begins a Call For Adoption for
> draft-wahlstroem-ace-cbor-web-token-00 [1]
> to be adopted as an ACE working group item, and added in the charter.
> The call ends on April 22, 2016.
>

+1 for adoption.

/Ludwig

Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=E4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms030008080107030802020203
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ
BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll
bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3
aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF
B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK
/swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji
/GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0
+jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y
z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84
MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v
YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug
KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB
Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG
BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh
cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF
KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D
I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f
qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd
vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6
V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw
DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x
KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT
IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw
MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn
BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy
dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt
TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf
a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx
7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D
IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg
MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T
AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv
bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z
dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz
L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv
GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0
dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB
i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB
OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets
D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI
NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA
0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf
1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/
tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH
2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9
VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp
/2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG
A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa
otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
MBwGCSqGSIb3DQEJBTEPFw0xNjA0MDcwNjQyMzJaMC8GCSqGSIb3DQEJBDEiBCACO/jGaLLR
Dgm3oK2imyn9QfVn8SOIPGbLSv4TD4lWrTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB
KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC
AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG
A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl
cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu
dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE
BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp
ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD
QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQCdOhMVuU8mbkkm4lzKoXGE
xei1xkQ/JFBF/CmFykW28JVFlILNHsCoxUpAKkWeUQ7g/otBLqLN7cZqW3Tkk6c4QgUC9Fgl
4X/f8ERNrme5UtSD25mMpWndRmN5szV6Yg2aCwwR3dy8Y/05kHkUtcfID3TUdOtnHXAlE36N
vACYDabgd6Ut8v4+DjeS47YfcGe/VaIRg9xrmEyqC0Ue2sOlNYHaFoLJBHuSATK/+C5f6h80
I1w+hB80uifk/OrhefTZu4b+AsFsIC3aITuaI0XXWKWdvSVrA4hdx4HROFqs+SSo9hQpA10f
prWVgrAi5ceuKZQ/bwPn5uOoZOivxnUZAAAAAAAA
--------------ms030008080107030802020203--


From nobody Thu Apr  7 02:12:08 2016
Return-Path: <shahid@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6ACA012D136 for <ace@ietfa.amsl.com>; Thu,  7 Apr 2016 02:12:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hOoHOtu8xq1q for <ace@ietfa.amsl.com>; Thu,  7 Apr 2016 02:12:05 -0700 (PDT)
Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E92D12D10E for <ace@ietf.org>; Thu,  7 Apr 2016 02:12:04 -0700 (PDT)
Received: by mail-lb0-x22c.google.com with SMTP id bk9so18627410lbc.3 for <ace@ietf.org>; Thu, 07 Apr 2016 02:12:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=0EuQlvzjOOZHdV7A+Hd4CRpL0/91RIBVdAYlpP9N8No=; b=0Tzlu4FSOq84NE5NeMagq4yycH6wDL2o1gwE7JamAIQ6hfnSVbM2xz8iXrhVHu1uFV T55RC/UZrZbWksBGLSPeUMiVhkNiXGk7qLxDlkcEFf1/99l3sTEbrm0mVXBFp6yNmlWB m6dFuWEmbdHt3ukel1Gl6jNWZmSTl/Jzx9Ef8tzf2wMvJKB8cplmWTq7TNJLP7Dv/e4X 1WCJxikPER72Ezj2ANJUnCcKMY3dr0RhWDGgQki1tlzpoEWCmXoL0HJVz2u+VGYc56M2 v0jWZIwzgf+KaeJGukPNnugVxJvfXOohjTTgyMPX21CHJrW79Tacg1o9yuviv15C7RdA qNUQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=0EuQlvzjOOZHdV7A+Hd4CRpL0/91RIBVdAYlpP9N8No=; b=WaX5Deae5RdvvzX9ww+DlmXLwLzk4NJBgd8fPJvu7ztdQWMa/VB1etX6nQPf5EPEeN /sjGVAbcE2jyKtVoVZHpg2IGuvny9UNVoPins6XrHLqdSV+tbjKMXKOKHbtS3DgtkcMM +K14rhcdVmZSW7TWS+naJ6RJh0OeoK0gdeiturhaaPnsK+Oyc84TqGelWwA74EB2w0V2 mxzVigJtT1X/u46RtVAozDhP1rjfUFjrFz6vj124MhOwjtJP+JuWpRje953/Z2SwQMGl JHk11JQ3np4IiUqN5NWdoCK3PPbhkyDr0jbQoYmXrE8FwvrNTtlZwcJNcFYKY3TJWsgJ jwHA==
X-Gm-Message-State: AD7BkJIfix8Ias9eRKKAWun8SRAuIUe+zC1WdoWhRnDOuY/c/3fvoLRSDyHl7u8UdY42EMpj
X-Received: by 10.112.159.70 with SMTP id xa6mr881153lbb.87.1460020322446; Thu, 07 Apr 2016 02:12:02 -0700 (PDT)
Received: from ?IPv6:2001:6b0:3a:1:a5bb:8dc2:c79:323f? ([2001:6b0:3a:1:a5bb:8dc2:c79:323f]) by smtp.gmail.com with ESMTPSA id m64sm1040221lfd.36.2016.04.07.02.12.01 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 07 Apr 2016 02:12:01 -0700 (PDT)
Content-Type: text/plain; charset=windows-1252
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: Shahid Raza <shahid@sics.se>
In-Reply-To: <57060158.4050507@sics.se>
Date: Thu, 7 Apr 2016 11:12:02 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <2AA505D4-0BC1-4AF2-B2A8-A8D5F12F5827@sics.se>
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com> <57060158.4050507@sics.se>
To: Kepeng Li <kepeng.lkp@alibaba-inc.com>
X-Mailer: Apple Mail (2.3124)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/Q7qwy3LnJMXAPjCoIXrf0hv2DPE>
Cc: ace@ietf.org
Subject: Re: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Apr 2016 09:12:07 -0000

+1 for adoption.

/Shahid

----------------------------------------------------------------------
Shahid Raza
PhD, Senior Researcher
Networked Embedded Systems group
SICS Swedish ICT, Stockholm, Sweden
Mobile. No. +46 768831797
Personal Web: http://www.shahidraza.info
Company Web: https://www.sics.se

Research Interests: IoT, Security, Sensor Networks
Associate Editor: IEEE Internet of Things Journal
----------------------------------------------------------------------

> On 07 Apr 2016, at 08:42, Ludwig Seitz <ludwig@sics.se> wrote:
>=20
> On 2016-04-07 03:34, Kepeng Li wrote:
>> To: ACE WG
>> Cc: OAuth and COSE WG
>>=20
>> Hello all,
>>=20
>> This note begins a Call For Adoption for
>> draft-wahlstroem-ace-cbor-web-token-00 [1]
>> to be adopted as an ACE working group item, and added in the charter.
>> The call ends on April 22, 2016.
>>=20
>=20
> +1 for adoption.
>=20
> /Ludwig
>=20
> Ludwig Seitz, PhD
> SICS Swedish ICT AB
> Ideon Science Park
> Building Beta 2
> Scheelev=E4gen 17
> SE-223 70 Lund
>=20
> Phone +46(0)70-349 92 51
> http://www.sics.se
>=20
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace



From nobody Sun Apr 10 04:53:30 2016
Return-Path: <erik@wahlstromstekniska.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 415F812D0F6 for <ace@ietfa.amsl.com>; Sun, 10 Apr 2016 04:53:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=wahlstromstekniska-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RPMRDwCjfMkJ for <ace@ietfa.amsl.com>; Sun, 10 Apr 2016 04:53:26 -0700 (PDT)
Received: from mail-lf0-x233.google.com (mail-lf0-x233.google.com [IPv6:2a00:1450:4010:c07::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21F5312D0B0 for <ace@ietf.org>; Sun, 10 Apr 2016 04:53:25 -0700 (PDT)
Received: by mail-lf0-x233.google.com with SMTP id j11so124467212lfb.1 for <ace@ietf.org>; Sun, 10 Apr 2016 04:53:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wahlstromstekniska-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=RMPyLKAqInjOx7XO1tiF6mwZcyv0F+BqZRDK2vn1EHE=; b=v7N/n4f+dFpAAT1ROPMHkdxesEIYhrTeCZn9nGeWIW79jYAwDuGh8GAAPrfPa85TUs JUk7p/kGDtTM31uD2jjpF+nZRbx02K1xCyoOJc2u0U+M2H0XVLGy0RrT2dxy325libvf EkEdNGFWnqTA0EOxcL7kJGE3PVSshvg2Z3vIwoNjJahPS1aQPphRs4B3YIbCQ6lhR0Nq XGeGUynlzcfHmjE+pLXAV6I0e7pXNuvp8gMUgNHKyiEIVOqda2xjMRCcyvE2RrqsbdIf CK5q3OHDaWPcDQhs1qeEEdkDrGjbteTf58WZ+B0jn+Sf7J8hRF/GuHo/1ard9ImPycf2 CcNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=RMPyLKAqInjOx7XO1tiF6mwZcyv0F+BqZRDK2vn1EHE=; b=GqNAolaWiyeHt4ZaWw1DrNnIurdV/7RbNlTtb1FHyII/vHrQLYeJUFt2HHYWhP5U0k Tlb2DGU/W4Fa1BG1jr4oSzMmIEGs3eIi0zi0z4DKtMK1Kpii6WUbBqAvn3S0ojL8DwlQ VjE7p0Zpx3V9TJdofRur9/Y89K9OMaPwb4rgiKFC0XTulhZnl3HCRJemwm9D+Dd5tIa8 HvqTz3bM03C4ZKB0LW48FwmzWPYEQpfBHDba7g9LQ5QhIjEMgK6ZoJ2DGNJvTPqPy5Lh 59YcFn3zGVnvlffiFL3WuHZL8e/nkWTEO9/PXBQIZ9zj98e1ImYzYQmROTOy40ml39aw 8G+g==
X-Gm-Message-State: AD7BkJIDh018S2rcTQWuyjlumYJiPg4itHdQTdWYPmLUaN8LmpG11wQ3/hcaZLI0SpTgPXOTAiItQt3eftvyag==
MIME-Version: 1.0
X-Received: by 10.112.49.50 with SMTP id r18mr6693128lbn.65.1460289203569; Sun, 10 Apr 2016 04:53:23 -0700 (PDT)
Received: by 10.25.78.72 with HTTP; Sun, 10 Apr 2016 04:53:23 -0700 (PDT)
X-Originating-IP: [37.247.26.197]
In-Reply-To: <EA7D95DA-F8C0-4430-BE83-812E97F4CC12@erdtman.se>
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com> <EA7D95DA-F8C0-4430-BE83-812E97F4CC12@erdtman.se>
Date: Sun, 10 Apr 2016 13:53:23 +0200
Message-ID: <CA+KYQAteKmZPY+ZOj2-VxLkUjmU7aMMJGHPMPjiBOZLurDyxyw@mail.gmail.com>
From: =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= <erik@wahlstromstekniska.se>
To: Samuel Erdtman <samuel@erdtman.se>
Content-Type: multipart/alternative; boundary=001a113605a43f99cb05302013e3
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/nlmXAhZ9_eHBmm6BNPK-g0UPHPs>
Cc: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, Kepeng Li <kepeng.lkp@alibaba-inc.com>, "ace@ietf.org" <ace@ietf.org>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "<oauth@ietf.org>" <oauth@ietf.org>, cose <cose@ietf.org>
Subject: Re: [Ace] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 10 Apr 2016 11:53:29 -0000

--001a113605a43f99cb05302013e3
Content-Type: text/plain; charset=UTF-8

+1

On Thu, Apr 7, 2016 at 6:47 AM, Samuel Erdtman <samuel@erdtman.se> wrote:

> +1 for adoption
>
> Sent from my iPhone
>
> On 7 apr. 2016, at 03:34, Kepeng Li <kepeng.lkp@alibaba-inc.com> wrote:
>
> To: ACE WG
> Cc: OAuth and COSE WG
>
> Hello all,
>
>
> This note begins a Call For Adoption for draft-wahlstroem-ace-cbor-web-token-00 [1]
>
> to be adopted as an ACE working group item, and added in the charter.
> The call ends on April 22, 2016.
>
> Keep in mind that adoption of a document does not mean the document
> as-is is ready for publication. It is merely acceptance of the
> document as a starting point for what will be the final product
> of the ACE working group. The working group is free to make changes to
> the document according to the normal consensus process.
>
> Please reply on this thread with expressions of support or opposition,
> preferably with comments, regarding accepting this as a work item.
>
>
> Note that this email was also copied to OAuth and COSE WG, in order to
> get input from wider audience.
>
>
> Thanks,
>
>
> Kind Regards
>
> Kepeng (ACE co-chair)
>
>
> [1] https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/
>
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>
>
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>
>

--001a113605a43f99cb05302013e3
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">+1<div class=3D"gmail_extra"><br><div class=3D"gmail_quote=
">On Thu, Apr 7, 2016 at 6:47 AM, Samuel Erdtman <span dir=3D"ltr">&lt;<a h=
ref=3D"mailto:samuel@erdtman.se" target=3D"_blank">samuel@erdtman.se</a>&gt=
;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"auto"><div>+1=
 for adoption<br><br>Sent from my iPhone</div><div><div class=3D"h5"><div><=
br>On 7 apr. 2016, at 03:34, Kepeng Li &lt;<a href=3D"mailto:kepeng.lkp@ali=
baba-inc.com" target=3D"_blank">kepeng.lkp@alibaba-inc.com</a>&gt; wrote:<b=
r><br></div><blockquote type=3D"cite"><div><div style=3D"font-size:14px;fon=
t-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"><font face=3D"Cour=
ier" style=3D"font-size:12px">To: ACE WG</font></div><div style=3D"font-siz=
e:14px;font-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"><font fa=
ce=3D"Courier" style=3D"font-size:12px">Cc:=C2=A0</font><span style=3D"font=
-size:12px;font-family:Courier">OAuth and COSE WG</span></div><span style=
=3D"font-size:12px;font-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,=
0)"><font face=3D"Courier"><div><br></div><div><div style=3D"word-wrap:brea=
k-word;color:rgb(0,0,0)"><div><span style=3D"line-height:18px;white-space:p=
re-wrap">Hello all,</span></div><span><div style=3D"word-wrap:break-word;co=
lor:rgb(0,0,0)"><pre style=3D"margin-top:0px;margin-bottom:0px;padding:0px;=
border:0px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;wo=
rd-wrap:break-word"><br></pre><pre style=3D"margin-top:0px;margin-bottom:0p=
x;padding:0px;border:0px;line-height:18px;vertical-align:baseline;white-spa=
ce:pre-wrap;word-wrap:break-word">This note begins a Call For Adoption for =
<span style=3D"line-height:1.214;background-color:rgb(255,253,245)">draft-w=
ahlstroem-ace-cbor-web-token-00 [1]</span></pre></div></span></div></div></=
font></span><div style=3D"font-size:14px;font-family:=E5=AE=8B=E4=BD=93,san=
s-serif"><font face=3D"Courier" style=3D"font-size:12px"><span style=3D"lin=
e-height:18px;white-space:pre-wrap">to </span><span style=3D"color:rgb(0,0,=
0);line-height:18px;white-space:pre-wrap">be adopted as an ACE working grou=
p item, and added in the charter.</span></font></div><span style=3D"font-si=
ze:12px;font-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"><div><d=
iv style=3D"word-wrap:break-word;color:rgb(0,0,0)"><font face=3D"Courier"><=
div><span style=3D"line-height:18px;white-space:pre-wrap">The call ends on =
April 22, 2016.</span></div></font></div></div></span><div style=3D"font-si=
ze:14px;font-family:=E5=AE=8B=E4=BD=93,sans-serif"><br></div><span style=3D=
"font-size:12px;font-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"=
><div><div style=3D"word-wrap:break-word;color:rgb(0,0,0)"><font face=3D"Co=
urier"><span><div style=3D"word-wrap:break-word;color:rgb(0,0,0)"><pre styl=
e=3D"margin-top:0px;margin-bottom:0px;padding:0px;border:0px;line-height:18=
px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">Keep =
in mind that adoption of a document does not mean the document
as-is is ready for publication. It is merely acceptance of the
document as a starting point for what will be the final product
of the ACE working group. The working group is free to make changes to
the document according to the normal consensus process.

Please reply on this thread with expressions of support or opposition,
preferably with comments, regarding accepting this as a work item.</pre></d=
iv></span></font></div></div></span><div style=3D"font-size:14px;font-famil=
y:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"><br></div><div style=3D"f=
ont-size:14px;font-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"><=
font face=3D"Courier" style=3D"font-size:12px">Note that this email was als=
o copied to OAuth and COSE WG, in order to=C2=A0</font></div><div style=3D"=
font-size:14px;font-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)">=
<font face=3D"Courier" style=3D"font-size:12px">get input from wider audien=
ce.</font></div><span style=3D"font-size:14px;font-family:=E5=AE=8B=E4=BD=
=93,sans-serif;color:rgb(0,0,0)"><div style=3D"font-size:14px;font-family:=
=E5=AE=8B=E4=BD=93,sans-serif"><div style=3D"word-wrap:break-word;color:rgb=
(0,0,0);font-size:14px;font-family:=E5=AE=8B=E4=BD=93,sans-serif"><span><di=
v style=3D"word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family=
:=E5=AE=8B=E4=BD=93,sans-serif"><pre style=3D"margin-top:0px;margin-bottom:=
0px;padding:0px;border:0px;font-family:Courier,&#39;Courier New&#39;,monosp=
ace;font-size:12px;line-height:18px;vertical-align:baseline;white-space:pre=
-wrap;word-wrap:break-word"><br></pre><pre style=3D"margin-top:0px;margin-b=
ottom:0px;padding:0px;border:0px;font-family:Courier,&#39;Courier New&#39;,=
monospace;font-size:12px;line-height:18px;vertical-align:baseline;white-spa=
ce:pre-wrap;word-wrap:break-word">Thanks,</pre><pre style=3D"margin-top:0px=
;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,&#39;Courier =
New&#39;,monospace;font-size:12px;line-height:18px;vertical-align:baseline;=
white-space:pre-wrap;word-wrap:break-word"><br></pre><pre style=3D"margin-t=
op:0px;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,&#39;Co=
urier New&#39;,monospace;font-size:12px;line-height:18px;vertical-align:bas=
eline;white-space:pre-wrap;word-wrap:break-word">Kind Regards</pre><pre sty=
le=3D"margin-top:0px;margin-bottom:0px;padding:0px;border:0px;font-family:C=
ourier,&#39;Courier New&#39;,monospace;font-size:12px;line-height:18px;vert=
ical-align:baseline;white-space:pre-wrap;word-wrap:break-word">Kepeng (ACE =
co-chair)</pre></div></span></div></div></span><div style=3D"color:rgb(0,0,=
0)"><font face=3D"Courier" style=3D"font-size:12px"><br></font></div><div s=
tyle=3D"color:rgb(0,0,0)"><font face=3D"Courier" style=3D"font-size:12px">[=
1]=C2=A0<a href=3D"https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cb=
or-web-token/" target=3D"_blank">https://datatracker.ietf.org/doc/draft-wah=
lstroem-ace-cbor-web-token/</a></font></div><div style=3D"font-size:14px;fo=
nt-family:=E5=AE=8B=E4=BD=93,sans-serif;color:rgb(0,0,0)"><br></div>
</div></blockquote></div></div><blockquote type=3D"cite"><div><span>_______=
________________________________________</span><br><span>Ace mailing list</=
span><br><span><a href=3D"mailto:Ace@ietf.org" target=3D"_blank">Ace@ietf.o=
rg</a></span><br><span><a href=3D"https://www.ietf.org/mailman/listinfo/ace=
" target=3D"_blank">https://www.ietf.org/mailman/listinfo/ace</a></span><br=
></div></blockquote></div><br>_____________________________________________=
__<br>
Ace mailing list<br>
<a href=3D"mailto:Ace@ietf.org">Ace@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/ace" rel=3D"noreferrer" ta=
rget=3D"_blank">https://www.ietf.org/mailman/listinfo/ace</a><br>
<br></blockquote></div><br></div></div>

--001a113605a43f99cb05302013e3--


From nobody Sun Apr 10 05:51:20 2016
Return-Path: <jricher@mit.edu>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC98D12D522; Sun, 10 Apr 2016 05:51:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.216
X-Spam-Level: 
X-Spam-Status: No, score=-5.216 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w3tESGFeCfrv; Sun, 10 Apr 2016 05:51:16 -0700 (PDT)
Received: from dmz-mailsec-scanner-5.mit.edu (dmz-mailsec-scanner-5.mit.edu [18.7.68.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D18E412D11E; Sun, 10 Apr 2016 05:51:14 -0700 (PDT)
X-AuditID: 12074422-bf3ff70000007b1b-19-570a4c412059
Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by  (Symantec Messaging Gateway) with SMTP id 94.E4.31515.14C4A075; Sun, 10 Apr 2016 08:51:13 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id u3ACpCqB006169; Sun, 10 Apr 2016 08:51:12 -0400
Received: from [192.168.128.57] (static-96-237-195-53.bstnma.fios.verizon.net [96.237.195.53]) (authenticated bits=0) (User authenticated as jricher@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id u3ACp6aq019742 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Sun, 10 Apr 2016 08:51:07 -0400
To: =?UTF-8?Q?Erik_Wahlstr=c3=b6m?= <erik@wahlstromstekniska.se>, Samuel Erdtman <samuel@erdtman.se>
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com> <EA7D95DA-F8C0-4430-BE83-812E97F4CC12@erdtman.se> <CA+KYQAteKmZPY+ZOj2-VxLkUjmU7aMMJGHPMPjiBOZLurDyxyw@mail.gmail.com>
From: Justin Richer <jricher@mit.edu>
Message-ID: <570A4C2D.4030701@mit.edu>
Date: Sun, 10 Apr 2016 08:50:53 -0400
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2
MIME-Version: 1.0
In-Reply-To: <CA+KYQAteKmZPY+ZOj2-VxLkUjmU7aMMJGHPMPjiBOZLurDyxyw@mail.gmail.com>
Content-Type: multipart/alternative; boundary="------------050806070808050500030608"
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrDKsWRmVeSWpSXmKPExsUixCmqrevowxVuMPurlMX3bz3MFtO2TmW1 +DqhidVi6c57rBYNO/MtLs8vsjj59hWbxf+lp5gspu+9xu7A6THx7UcWj7XdV9k8Xvzbw+ix c9Zddo/Fm/azeSxZ8pPJY820GSwB7FFcNimpOZllqUX6dglcGa/XXGYvmFFR8f7JaqYGxu/+ XYycHBICJhLXv3UzdTFycQgJtDFJrF5wiwXC2cgo8fzxGqjMbSaJn4vWMIK0CAtESMw63gmU 4OAQEciVeNTLDFGziVGi7/FMRhCHWWAXk8Sn5n6wBjYBVYnpa1qYQGxeATWJZU/fs4LYLEDx G9+/gcVFBWIkGh+cgqoRlDg58wkLiM0pECjRdeUNG4jNLBAm8WnqPtYJjPyzkJTNQpKCsM0k urZ2MULY8hLNW2czQ9hqEre3XWVHFl/AyLaKUTYlt0o3NzEzpzg1Wbc4OTEvL7VI11QvN7NE LzWldBMjKKLYXZR2ME7853WIUYCDUYmHN6KEM1yINbGsuDL3EKMkB5OSKK/VS45wIb6k/JTK jMTijPii0pzU4kOMEhzMSiK8Jx24woV4UxIrq1KL8mFS0hwsSuK8QZHHwoQE0hNLUrNTUwtS i2CyMhwcShK8BV5AjYJFqempFWmZOSUIaSYOTpDhPEDD2T1BhhcXJOYWZ6ZD5E8x6nKsm3Ft LZMQS15+XqqUOK8PyCABkKKM0jy4OaBEmPD2sOkrRnGgt4R52UBG8QCTKNykV0BLmICWPPvH CbKkJBEhJdXA2BTzmmNbZYBeamCjedIFaeXCbVZ+ueUbpKO5Gpat4Uir/dTVGpnp2FZ258Kh W9NS1oZ+td4rcYZl5p1WkRP8bAWTAgtcKo/K52T3teapLvnMEtgfzeDablwrv+P/ropj708K r9qvLbX3+W5b/YWMD4ynGe18VLGjNDMp4Xn1Tptv27QsJ3QosRRnJBpqMRcVJwIAk9cSyF8D AAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/NZxLD4nxWKMRcMauYNOfvUQ8MeU>
Cc: cose <cose@ietf.org>, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, Kepeng Li <kepeng.lkp@alibaba-inc.com>, "ace@ietf.org" <ace@ietf.org>, Hannes Tschofenig <hannes.tschofenig@gmx.net>, "<oauth@ietf.org>" <oauth@ietf.org>, Stephen Farrell <stephen.farrell@cs.tcd.ie>
Subject: Re: [Ace] [COSE] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 10 Apr 2016 12:51:20 -0000

This is a multi-part message in MIME format.
--------------050806070808050500030608
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

+1 for adoption, but please remove the "web" from the name.

One of the main features of JSON Web Tokens, from which this is 
inspired, is that it can be passed without any additional encoding in 
HTTP headers, parameters, forms, strings, etc. It's built for the "web" 
from the ground up.

The same is not true of the COSE-based token format here. It's designed 
for CoAP and other embedded systems that can speak the CBOR encoding 
natively. You could argue that this is the "web" in a sense but I think 
that it's misleading to implementors to claim such.

Therefore I strongly encourage the authors and ACE WG to drop the "web" 
from the name, leaving simply the COSE Token.

  -- Justin

On 4/10/2016 7:53 AM, Erik WahlstrÃ¶m wrote:
> +1
>
> On Thu, Apr 7, 2016 at 6:47 AM, Samuel Erdtman <samuel@erdtman.se 
> <mailto:samuel@erdtman.se>> wrote:
>
>     +1 for adoption
>
>     Sent from my iPhone
>
>     On 7 apr. 2016, at 03:34, Kepeng Li <kepeng.lkp@alibaba-inc.com
>     <mailto:kepeng.lkp@alibaba-inc.com>> wrote:
>
>>     To: ACE WG
>>     Cc: OAuth and COSE WG
>>
>>     Hello all,
>>     This note begins a Call For Adoption fordraft-wahlstroem-ace-cbor-web-token-00 [1]
>>     to be adopted as an ACE working group item, and added in the charter.
>>     The call ends on April 22, 2016.
>>
>>     Keep in mind that adoption of a document does not mean the document
>>     as-is is ready for publication. It is merely acceptance of the
>>     document as a starting point for what will be the final product
>>     of the ACE working group. The working group is free to make changes to
>>     the document according to the normal consensus process.
>>
>>     Please reply on this thread with expressions of support or opposition,
>>     preferably with comments, regarding accepting this as a work item.
>>
>>     Note that this email was also copied to OAuth and COSE WG, in
>>     order to
>>     get input from wider audience.
>>     Thanks,
>>     Kind Regards
>>     Kepeng (ACE co-chair)
>>
>>     [1]
>>     https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/
>>
>>     _______________________________________________
>>     Ace mailing list
>>     Ace@ietf.org <mailto:Ace@ietf.org>
>>     https://www.ietf.org/mailman/listinfo/ace
>
>     _______________________________________________
>     Ace mailing list
>     Ace@ietf.org <mailto:Ace@ietf.org>
>     https://www.ietf.org/mailman/listinfo/ace
>
>
>
>
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
> https://www.ietf.org/mailman/listinfo/cose


--------------050806070808050500030608
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    +1 for adoption, but please remove the "web" from the name. <br>
    <br>
    One of the main features of JSON Web Tokens, from which this is
    inspired, is that it can be passed without any additional encoding
    in HTTP headers, parameters, forms, strings, etc. It's built for the
    "web" from the ground up. <br>
    <br>
    The same is not true of the COSE-based token format here. It's
    designed for CoAP and other embedded systems that can speak the CBOR
    encoding natively. You could argue that this is the "web" in a sense
    but I think that it's misleading to implementors to claim such.<br>
    <br>
    Therefore I strongly encourage the authors and ACE WG to drop the
    "web" from the name, leaving simply the COSE Token.<br>
    <br>
    Â -- Justin<br>
    <br>
    <div class="moz-cite-prefix">On 4/10/2016 7:53 AM, Erik WahlstrÃ¶m
      wrote:<br>
    </div>
    <blockquote
cite="mid:CA+KYQAteKmZPY+ZOj2-VxLkUjmU7aMMJGHPMPjiBOZLurDyxyw@mail.gmail.com"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <div dir="ltr">+1
        <div class="gmail_extra"><br>
          <div class="gmail_quote">On Thu, Apr 7, 2016 at 6:47 AM,
            Samuel Erdtman <span dir="ltr">&lt;<a
                moz-do-not-send="true" href="mailto:samuel@erdtman.se"
                target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:samuel@erdtman.se">samuel@erdtman.se</a></a>&gt;</span> wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">
              <div dir="auto">
                <div>+1 for adoption<br>
                  <br>
                  Sent from my iPhone</div>
                <div>
                  <div class="h5">
                    <div><br>
                      On 7 apr. 2016, at 03:34, Kepeng Li &lt;<a
                        moz-do-not-send="true"
                        href="mailto:kepeng.lkp@alibaba-inc.com"
                        target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:kepeng.lkp@alibaba-inc.com">kepeng.lkp@alibaba-inc.com</a></a>&gt;
                      wrote:<br>
                      <br>
                    </div>
                    <blockquote type="cite">
                      <div>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><font
                            style="font-size:12px" face="Courier">To:
                            ACE WG</font></div>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><font
                            style="font-size:12px" face="Courier">Cc:Â </font><span
                            style="font-size:12px;font-family:Courier">OAuth
                            and COSE WG</span></div>
                        <span
                          style="font-size:12px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><font
                            face="Courier">
                            <div><br>
                            </div>
                            <div>
                              <div
                                style="word-wrap:break-word;color:rgb(0,0,0)">
                                <div><span style="line-height:18px;white-space:pre-wrap">Hello all,</span></div>
                                <span>
                                  <div
                                    style="word-wrap:break-word;color:rgb(0,0,0)">
                                    <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">
</pre>
                                    <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">This note begins a Call For Adoption for <span style="line-height:1.214;background-color:rgb(255,253,245)">draft-wahlstroem-ace-cbor-web-token-00 [1]</span></pre>
                                  </div>
                                </span></div>
                            </div>
                          </font></span>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif"><font
                            style="font-size:12px" face="Courier"><span style="line-height:18px;white-space:pre-wrap">to </span><span style="color:rgb(0,0,0);line-height:18px;white-space:pre-wrap">be adopted as an ACE working group item, and added in the charter.</span></font></div>
                        <span
                          style="font-size:12px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)">
                          <div>
                            <div
                              style="word-wrap:break-word;color:rgb(0,0,0)"><font
                                face="Courier">
                                <div><span style="line-height:18px;white-space:pre-wrap">The call ends on April 22, 2016.</span></div>
                              </font></div>
                          </div>
                        </span>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif"><br>
                        </div>
                        <span
                          style="font-size:12px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)">
                          <div>
                            <div
                              style="word-wrap:break-word;color:rgb(0,0,0)"><font
                                face="Courier"><span>
                                  <div
                                    style="word-wrap:break-word;color:rgb(0,0,0)">
                                    <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">Keep in mind that adoption of a document does not mean the document
as-is is ready for publication. It is merely acceptance of the
document as a starting point for what will be the final product
of the ACE working group. The working group is free to make changes to
the document according to the normal consensus process.

Please reply on this thread with expressions of support or opposition,
preferably with comments, regarding accepting this as a work item.</pre>
                                  </div>
                                </span></font></div>
                          </div>
                        </span>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><br>
                        </div>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><font
                            style="font-size:12px" face="Courier">Note
                            that this email was also copied to OAuth and
                            COSE WG, in order toÂ </font></div>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><font
                            style="font-size:12px" face="Courier">get
                            input from wider audience.</font></div>
                        <span
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)">
                          <div
                            style="font-size:14px;font-family:å®‹ä½“,sans-serif">
                            <div
                              style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:
                              å®‹ä½“,sans-serif"><span>
                                <div
                                  style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:
                                  å®‹ä½“,sans-serif">
                                  <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,'Courier New',monospace;font-size:12px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">
</pre>
                                  <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,'Courier New',monospace;font-size:12px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">Thanks,</pre>
                                  <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,'Courier New',monospace;font-size:12px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">
</pre>
                                  <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,'Courier New',monospace;font-size:12px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">Kind Regards</pre>
                                  <pre style="margin-top:0px;margin-bottom:0px;padding:0px;border:0px;font-family:Courier,'Courier New',monospace;font-size:12px;line-height:18px;vertical-align:baseline;white-space:pre-wrap;word-wrap:break-word">Kepeng (ACE co-chair)</pre>
                                </div>
                              </span></div>
                          </div>
                        </span>
                        <div style="color:rgb(0,0,0)"><font
                            style="font-size:12px" face="Courier"><br>
                          </font></div>
                        <div style="color:rgb(0,0,0)"><font
                            style="font-size:12px" face="Courier">[1]Â <a
                              moz-do-not-send="true"
href="https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/"
                              target="_blank"><a class="moz-txt-link-freetext" href="https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/">https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/</a></a></font></div>
                        <div
                          style="font-size:14px;font-family:å®‹ä½“,sans-serif;color:rgb(0,0,0)"><br>
                        </div>
                      </div>
                    </blockquote>
                  </div>
                </div>
                <blockquote type="cite">
                  <div><span>_______________________________________________</span><br>
                    <span>Ace mailing list</span><br>
                    <span><a moz-do-not-send="true"
                        href="mailto:Ace@ietf.org" target="_blank">Ace@ietf.org</a></span><br>
                    <span><a moz-do-not-send="true"
                        href="https://www.ietf.org/mailman/listinfo/ace"
                        target="_blank">https://www.ietf.org/mailman/listinfo/ace</a></span><br>
                  </div>
                </blockquote>
              </div>
              <br>
              _______________________________________________<br>
              Ace mailing list<br>
              <a moz-do-not-send="true" href="mailto:Ace@ietf.org">Ace@ietf.org</a><br>
              <a moz-do-not-send="true"
                href="https://www.ietf.org/mailman/listinfo/ace"
                rel="noreferrer" target="_blank">https://www.ietf.org/mailman/listinfo/ace</a><br>
              <br>
            </blockquote>
          </div>
          <br>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
COSE mailing list
<a class="moz-txt-link-abbreviated" href="mailto:COSE@ietf.org">COSE@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/cose">https://www.ietf.org/mailman/listinfo/cose</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------050806070808050500030608--


From nobody Mon Apr 11 00:14:04 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83ABD12E7D2 for <ace@ietfa.amsl.com>; Mon, 11 Apr 2016 00:14:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wugAq2D6sPyK for <ace@ietfa.amsl.com>; Mon, 11 Apr 2016 00:14:01 -0700 (PDT)
Received: from mail-lf0-x22f.google.com (mail-lf0-x22f.google.com [IPv6:2a00:1450:4010:c07::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E25ED12E7B6 for <ace@ietf.org>; Mon, 11 Apr 2016 00:14:00 -0700 (PDT)
Received: by mail-lf0-x22f.google.com with SMTP id c126so143905561lfb.2 for <ace@ietf.org>; Mon, 11 Apr 2016 00:14:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=pgj9P6vwi7hhDaGfcas15dCXL1Jcv1AsApEfGVrr/i8=; b=SUK5K+VLTTtheIRjluT3xmwxXqHwV3nPIMca37/lCbvhtDGGNnCvhw6+WOSiQxBKBD cDjRWdC0teF4iYCmEYQYUwfRzLC/mUK9f9aH+BHu8SVLqfNLpbNqVdyz0Z3UmZdKdxxL eY/aw/l76+QCAbh0/BG+liUtzLKzMGDyu3T4nekW2aWXBJ2PU2yfgzZ/+4TtnclF9xJW tmFBpHzR2KccW/EWCqgWVJj1Ur2nNzaQu5DeToe6+cmaWljXQCFBSWPRq+xNcDKrrNcx 6H6WldG+eT/2M2q5hcCQYO6ReUO1Pk1ELvK2gnCs32NAfeC4sOyMBV76GLEbEG9x+T6Z RbhA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=pgj9P6vwi7hhDaGfcas15dCXL1Jcv1AsApEfGVrr/i8=; b=VcH7aEk0fBtWuK1q2EK/x/FkJzKVFBnPuSnkcnDIgnEhktK1j86EtxyqjfajTK+nnA HAmUhH1cgAy81Q6MqdXlxq82irJMBCDcO8TsXys6+5v0ktGFCVxttE/xWSq3f3D06epD DO5tEJULuzI4kKCzkLF8yXAtHms584DqoD0fzaAY7W6APpSZUc/B6AvU7skgYav7cgmI zvmv73gpcOnII42+oalNMfYYYurn9sS/KyE/vl8+W05gpw/zB4Mn2AvW7Sf79vcP0NlD dBB52cA0aJxwXTU8e76xTWmaWao0ZE96tQor3bxaiVLAc1FJX8ZgUZCTwSC4DUWrSzid 5aVA==
X-Gm-Message-State: AD7BkJLwyabwkRkQ13AZyq+XUNU3k/7MpPfuszVnaNQqtejm4tg3NF8jL6WYzHBii9s+qxc3
X-Received: by 10.25.139.194 with SMTP id n185mr6386712lfd.79.1460358839076; Mon, 11 Apr 2016 00:13:59 -0700 (PDT)
Received: from [192.168.0.167] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id y77sm4295812lfd.15.2016.04.11.00.13.57 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Mon, 11 Apr 2016 00:13:58 -0700 (PDT)
To: ace@ietf.org
References: <D32BCF2D.31101%kepeng.lkp@alibaba-inc.com> <EA7D95DA-F8C0-4430-BE83-812E97F4CC12@erdtman.se> <CA+KYQAteKmZPY+ZOj2-VxLkUjmU7aMMJGHPMPjiBOZLurDyxyw@mail.gmail.com> <570A4C2D.4030701@mit.edu>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <570B4EAF.20401@sics.se>
Date: Mon, 11 Apr 2016 09:13:51 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <570A4C2D.4030701@mit.edu>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050309020504040502090308"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/yVPyqWandDi5ELCciKfoWX0R9EI>
Subject: Re: [Ace] [COSE] Call for adoption for draft-wahlstroem-ace-cbor-web-token-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Apr 2016 07:14:03 -0000

This is a cryptographically signed message in MIME format.

--------------ms050309020504040502090308
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-10 14:50, Justin Richer wrote:
> +1 for adoption, but please remove the "web" from the name.
>
> One of the main features of JSON Web Tokens, from which this is
> inspired, is that it can be passed without any additional encoding in
> HTTP headers, parameters, forms, strings, etc. It's built for the "web"=

> from the ground up.
>
> The same is not true of the COSE-based token format here. It's designed=

> for CoAP and other embedded systems that can speak the CBOR encoding
> natively. You could argue that this is the "web" in a sense but I think=

> that it's misleading to implementors to claim such.
>
> Therefore I strongly encourage the authors and ACE WG to drop the "web"=

> from the name, leaving simply the COSE Token.
>
>   -- Justin

+1 for making it just CBOR Token

/Ludwig
--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=E4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms050309020504040502090308
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms050309020504040502090308--


From nobody Tue Apr 12 02:44:28 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24EBA12E57D for <ace@ietfa.amsl.com>; Tue, 12 Apr 2016 02:44:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LtnbiGU6UH7w for <ace@ietfa.amsl.com>; Tue, 12 Apr 2016 02:44:24 -0700 (PDT)
Received: from mail-lf0-x22f.google.com (mail-lf0-x22f.google.com [IPv6:2a00:1450:4010:c07::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FD9112E58B for <ace@ietf.org>; Tue, 12 Apr 2016 02:44:24 -0700 (PDT)
Received: by mail-lf0-x22f.google.com with SMTP id c126so17225786lfb.2 for <ace@ietf.org>; Tue, 12 Apr 2016 02:44:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=DpuKuUHpCvt2O25tLtPbA8ScE6HRo35DAHb0G2uyOJc=; b=DZZNtaOys8gYY1hDA/lhzq1mrjbgsb3GutqVubgtNaXW+Y/iHDdmwLlww3OklLH/Zc IljtFFfiKpAvtnL+J9JFeuKCG+UvtWqnaOHd3ZnRFmZac0WGUcPmXjLTWSL1JqPICL1a 0/b+ZziRDT8a2aEzVYfE927Vw0Gw5mGGfq0aRRGegNuQLDzlYrTUdLnI/5nx/snEyWCi 3Dwu5dOU8udJML+WMuxBHB+LpgvdRuZf56+excT8ARzyW2gS3ztu5lABdh6aXSfW05wD YKMJZbH00mpPH3g42y/W8R78i1IekTfV5Fx7CQJSK2jBAa7l6CZJU9ODxhnyA/4N3RVq 6EnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=DpuKuUHpCvt2O25tLtPbA8ScE6HRo35DAHb0G2uyOJc=; b=UVQ8pQHlcjPrfFPOg/DBboQsIGNj8X1YCeXhPG9fJ6wvTBUd53SH3djqLHvNJtdCB2 Gpf+TY885/qjzBML26gx/HMhLHIEHWaBXmG2Y79bViN/QfPEY7iJSPrrDFBy8ZHnlsY0 sXCS35xAOhayuMjSZAv0dPS/QQ2uFZdMk6mMUf5Wb6EjpjqycPVv5tDhmeEUcCxF1RiV L9jJhg8ekSETWcq/sqkEfGNDnm6D08QYcCzwdAqpCfJq5p0vB3hkaDNASJCJ5sjVUe4G BPhVQ5FuEvmH94fXUJ3LN0KzZHyPjf1JLULQD5uduxatV0heaRi1q/tNAUAPCoFmtL5+ pe4Q==
X-Gm-Message-State: AOPr4FXFLsJLBCN5J+PVDEpkqHVF9qyW9G/KWZjNutEfWePmp0LjfU7I454Vtiqw7FLfK25B
X-Received: by 10.25.80.81 with SMTP id e78mr1050291lfb.133.1460454262257; Tue, 12 Apr 2016 02:44:22 -0700 (PDT)
Received: from [192.168.0.167] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id rk1sm5168187lbb.0.2016.04.12.02.44.21 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Tue, 12 Apr 2016 02:44:21 -0700 (PDT)
To: ace@ietf.org
References: <56D725F8.60306@gmx.net>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <570CC374.2060506@sics.se>
Date: Tue, 12 Apr 2016 11:44:20 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <56D725F8.60306@gmx.net>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030303060202070103050205"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/mZ775_8u8EQZmOWU953OazryDW0>
Subject: Re: [Ace] Options for Transporting Access Tokens
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Apr 2016 09:44:27 -0000

This is a cryptographically signed message in MIME format.

--------------ms030303060202070103050205
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-03-02 18:42, Hannes Tschofenig wrote:
> Hi all,
>
> in the ACE architecture there needs to be the option to pass the access=

> token from the client to the resource server. It turns out that there
> are various options to do so (each with pros & cons).
>
> Here is the list we discussed at the interim meeting:
> =3D POST to a well-known or discoverable resource (e.g. /authz-info)
> =3D Use a dedicated CoAP option
> =3D Use TLS supplemental data (RFC 4680)
> =3D Use psk_identity (DCAF)
> =3D Define new TLS certificate type (similar to RPK)
> =3D Use ticket extension (RFC 5077)
>
> Here are the slides from the ACE virtual interim meeting providing
> further background information:
> https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-i=
nterim-2016-ace-1-2.pdf
>
> Since we are still in the phase of exploring options and finding new
> options we soliciting your input without setting a specific deadline.
>
> Ciao
> Hannes & Kepeng
>
>
>
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>

Hello, I've created a quick and dirty draft to support token transport=20
via RFC 5077. Comments are welcome.

/Ludwig


> A new version of I-D, draft-seitz-ace-ticket-token-transfer-00.txt
> has been successfully submitted by Ludwig Seitz and posted to the
> IETF repository.
>
> Name: draft-seitz-ace-ticket-token-transfer
> Revision: 00
> Title: Transporing access tokens in session resumption tickets draft-se=
itz-ace-ticket-token-transfer-00 (TTT) Abstract
> Document date: 2016-04-12
> Group: Individual Submission
> Pages: 6
> URL: https://www.ietf.org/internet-drafts/draft-seitz-ace-ticket-token-=
transfer-00.txt
> Status: https://datatracker.ietf.org/doc/draft-seitz-ace-ticket-token-t=
ransfer/
> Htmlized: https://tools.ietf.org/html/draft-seitz-ace-ticket-token-tran=
sfer-00
>
>
> Abstract:
> This memo presents a method of transferring an access token from a
> client to a resource server in a (D)TLS handshake, based on Session
> Resumption without Server-Side State (RFC 5077).
>
>
>
>
> Please note that it may take a couple of minutes from the time of submi=
ssion
> until the htmlized version and diff are available at tools.ietf.org.
>
> The IETF Secretariat
>



--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=E4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms030303060202070103050205
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030303060202070103050205--


From nobody Tue Apr 12 08:02:34 2016
Return-Path: <ietf-secretariat-reply@ietf.org>
X-Original-To: ace@ietf.org
Delivered-To: ace@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AA65212EFA8 for <ace@ietf.org>; Mon, 11 Apr 2016 08:07:02 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
To: <ace@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 6.19.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20160411150702.13184.50803.idtracker@ietfa.amsl.com>
Date: Mon, 11 Apr 2016 08:07:02 -0700
From: IETF Secretariat <ietf-secretariat-reply@ietf.org>
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/PbvAVG5vvYMZeRKikM1oDDeTqDI>
X-Mailman-Approved-At: Tue, 12 Apr 2016 08:02:32 -0700
Subject: [Ace] Milestones changed for ace WG
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Apr 2016 15:07:02 -0000

Changed milestone "Submit  "An Architecture for Authorization in
Constrained Environments" to the IESG for publication as a
Informational RFC.", set due date to May 2016 from March 2016, added
draft-ietf-ace-actors to milestone, removed draft-gerdes-ace-actors
from milestone.

Changed milestone "Submit "Authentication and Authorization Solution"
specification to the IESG for publication as a Proposed Standard.",
set due date to September 2016 from May 2016, added
draft-ietf-ace-oauth-authz to milestone.

URL: https://datatracker.ietf.org/wg/ace/charter/


From nobody Sat Apr 16 15:42:32 2016
Return-Path: <samuel@erdtman.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72DB512DB10 for <ace@ietfa.amsl.com>; Sat, 16 Apr 2016 15:42:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sC4qEoHMub3U for <ace@ietfa.amsl.com>; Sat, 16 Apr 2016 15:42:29 -0700 (PDT)
Received: from mail-vk0-x229.google.com (mail-vk0-x229.google.com [IPv6:2607:f8b0:400c:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91AFC12DB62 for <Ace@ietf.org>; Sat, 16 Apr 2016 15:42:29 -0700 (PDT)
Received: by mail-vk0-x229.google.com with SMTP id t129so184670777vkg.2 for <Ace@ietf.org>; Sat, 16 Apr 2016 15:42:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:date:message-id:subject:from:to; bh=AtR6g9z2HKHdMZ4VArR8YChbh2H3g8+/L58ACqLKPec=; b=BHcsYyaTMosCfIa/WW39pQoqX17a5B0A+roBGAXpJhznDyS+7nYkgpjTYNsHW8H1J+ iDIRfywAYXE+S2zdPbE15cDnkeAHvABFhxKlMXaBAEqKBmehcbQepNyPxASmpLCwWWPd i1XTAcMhdDfdQ2pKM90sagnNR+2+JiuoITRE2dZgCgPW/eaVqJ1vSCRna2tbM96hqRIW oeVdrVp2TWOGLdUPctOAwbrBr6b/lhNN9TebS1Z9km/It5/tgd6pj9ltHC4C8SNxzqtu 8o2g0F6a0UXvSVr3C7YflvueqhZI4JN9gVVL/9PXO6lWQrleb7OTxXdnpOtVKZFNFWAz 96FQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=AtR6g9z2HKHdMZ4VArR8YChbh2H3g8+/L58ACqLKPec=; b=LEIOPIPa+Yg8W5eM1MQfCIkDZR/dWbAMFoLDJfEycB0ugq8c+Q8xS27g7fzFu9l8t+ INt+7ur24cfRdphnyEh5IUCTi4M6Qp8kHM1cS9mO+QDMzeUy6YSzhXVpVihYDrobdaIU XDsc2mIVd1dtasor0xfE9FbY3coibIOQ8+11VJZrsXjXXvCWS/rNgrL3QsWkxUVkj/Y3 b3RGsdBhIyypg4Pgo5OUOCipwUzYJW/HpFn33wixT5pbXrSVfnp4FTjvKrgqOud9V+Tg LA/lcC50Ic7XMTxSts52KRZwVSDImgBhjfWTGtSxLbQRmylMafWXrcryGaLqzbsfqGcO 9+lg==
X-Gm-Message-State: AOPr4FXFacqUeOx42zX2LxSWErrmDRA1rctTj09tKMfvODG42NBq6FcPl/Ixoe0FtrWJHAKX6RNZ9COIi+d4XQ==
MIME-Version: 1.0
X-Received: by 10.159.36.143 with SMTP id 15mr4195160uar.136.1460846548209; Sat, 16 Apr 2016 15:42:28 -0700 (PDT)
Received: by 10.176.1.182 with HTTP; Sat, 16 Apr 2016 15:42:28 -0700 (PDT)
Date: Sun, 17 Apr 2016 00:42:28 +0200
Message-ID: <CAF2hCbZiL5qQ28hzEF_5PYFNrJfXZ8XGzLOVPznBMH9heMqELg@mail.gmail.com>
From: Samuel Erdtman <samuel@erdtman.se>
To: "<oauth@ietf.org>" <oauth@ietf.org>, Ace@ietf.org
Content-Type: multipart/alternative; boundary=001a113df51693ea670530a1d754
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/JW5ZPeo9ERmNzqueWcgcsDYkf1I>
Subject: [Ace] PoP, Introspection and ACE
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Apr 2016 22:42:31 -0000

--001a113df51693ea670530a1d754
Content-Type: text/plain; charset=UTF-8

Hi,

I'm working on the IANA section in
https://tools.ietf.org/html/draft-ietf-ace-oauth-authz.

In https://tools.ietf.org/html/draft-ietf-ace-oauth-authz we want to have
the option to get the PoP parameters (alg, key and aud) via introspection
e.g. if using a reference token.

At the moment I wrote the registration text of the parameters in the ACE
specification but I think it would be preferable if
https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution did the
registration for introspection too.

Comments?

//Samuel

--001a113df51693ea670530a1d754
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div><div>Hi,<br><br></div>I&#39;m working on th=
e IANA section in <a href=3D"https://tools.ietf.org/html/draft-ietf-ace-oau=
th-authz">https://tools.ietf.org/html/draft-ietf-ace-oauth-authz</a>.<br><b=
r></div>In <a href=3D"https://tools.ietf.org/html/draft-ietf-ace-oauth-auth=
z">https://tools.ietf.org/html/draft-ietf-ace-oauth-authz</a> we want to ha=
ve the option to get the PoP parameters (alg, key and aud) via introspectio=
n e.g. if using a reference token.<br><br></div>At the moment I wrote the r=
egistration text of the parameters in the ACE specification but I think it =
would be preferable if <a href=3D"https://tools.ietf.org/html/draft-ietf-oa=
uth-pop-key-distribution">https://tools.ietf.org/html/draft-ietf-oauth-pop-=
key-distribution</a> did the registration for introspection too.<br><br></d=
iv><div>Comments?<br></div><div><br></div>//Samuel<br></div>

--001a113df51693ea670530a1d754--


From nobody Sat Apr 16 16:23:28 2016
Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 240F212E10C for <ace@ietfa.amsl.com>; Sat, 16 Apr 2016 16:23:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level: 
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ve7jtb-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3j4k4N-fUf0A for <ace@ietfa.amsl.com>; Sat, 16 Apr 2016 16:23:22 -0700 (PDT)
Received: from mail-qg0-x22c.google.com (mail-qg0-x22c.google.com [IPv6:2607:f8b0:400d:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BCF112E0F6 for <Ace@ietf.org>; Sat, 16 Apr 2016 16:23:22 -0700 (PDT)
Received: by mail-qg0-x22c.google.com with SMTP id v14so9069747qge.0 for <Ace@ietf.org>; Sat, 16 Apr 2016 16:23:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ve7jtb-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=75Dc61EZJiztZUO1Fd7yGrMjSEjJ/V3CMIDj4XjE4YM=; b=dFGo27kDZB2NMLtp4MTJ9HO6QG6m8acopJ3zkM2/pT9iAet/JaBO9/92pXgoVqKVUe 6zZKZk6ES0zNcTbFyTW6fyj6PT2P/O/p3D2HKQJJpNpr/q/RBpzE1lupegrqkYnInDE3 rSeKdw9IOpTNCpEjqHkC2S3r3i5LgJ5MJTbYeLOiLAU7BSLirKBy7McecBFJLklePv49 LkZBVBoI8q333j5+CBGRfRNA4FlNJNa63GrcBGPN/zsRwvNgc8/shC1M3ZcV2Tz6leIv cz/ic97T9NvcePC5LNE9p1PG7YQhTDmBK/Mn/fhwxRxH/rpBo/TGXzA3DTAr9ljuJqEM crIQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=75Dc61EZJiztZUO1Fd7yGrMjSEjJ/V3CMIDj4XjE4YM=; b=QeqX0eIhYWAOgs69F1eXa5NOQhXb8uASyUxxyui1c3alLq6Op173ZzSCNuF3TPEI3u /bVEqrpQezrnTS1BvsJQZ40lGIC2jKFVf88C9v0IeSa7uCLVKHsWWO1/9fi5n7pSDs9A bX4XTAq1utGlVWDNc9CIHuX+XZf6MxgGHgBM0YzxJHrY9mzn6qGZCGwZY5ebenvq5fLM vq085165MLsY9WfuY5gbjHitGgjBbvGnjn5MPRDoXOE09PNvZKNTVO97vHGnIqhy3DBV MteLqwKDP6/KnYt7BAK+/wHx4gkHpJaz9ixUlyeBp4hSB7MjtWI9a6u1SE0VPsoP1j3X TyCg==
X-Gm-Message-State: AOPr4FWX6664cRHGzm9f1r0+vW8WiDjXTGyM3Sc/56SpLpUu7epWmRVE5oYgZ2RmMlJrLg==
X-Received: by 10.140.142.144 with SMTP id 138mr35853165qho.84.1460849001568;  Sat, 16 Apr 2016 16:23:21 -0700 (PDT)
Received: from [192.168.9.7] (ip-64-134-65-170.public.wayport.net. [64.134.65.170]) by smtp.gmail.com with ESMTPSA id y129sm23512490qka.33.2016.04.16.16.23.20 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sat, 16 Apr 2016 16:23:20 -0700 (PDT)
Content-Type: multipart/alternative; boundary="Apple-Mail=_543DE61F-F594-47B1-BD76-D789B466C3E4"
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <CAF2hCbZiL5qQ28hzEF_5PYFNrJfXZ8XGzLOVPznBMH9heMqELg@mail.gmail.com>
Date: Sat, 16 Apr 2016 19:23:19 -0400
Message-Id: <F2346FD0-BBBF-4FA1-B373-959F5F95884D@ve7jtb.com>
References: <CAF2hCbZiL5qQ28hzEF_5PYFNrJfXZ8XGzLOVPznBMH9heMqELg@mail.gmail.com>
To: Samuel Erdtman <samuel@erdtman.se>
X-Mailer: Apple Mail (2.3124)
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/aheoYo9cl2XhBQll6zGc0xFgAEE>
Cc: "<oauth@ietf.org>" <oauth@ietf.org>, Ace@ietf.org
Subject: Re: [Ace] PoP, Introspection and ACE
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 16 Apr 2016 23:23:25 -0000

--Apple-Mail=_543DE61F-F594-47B1-BD76-D789B466C3E4
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

It is probably best to register =E2=80=9Ccnf=E2=80=9D to match RFC 7600 =
so we don=E2=80=99t have two different structures one for JWT/CWT and =
one for introspection.

On the other hand introspected tokens are generally relatively custom in =
what claims they pass.

I will discuss it with Hannes.

John B.
> On Apr 16, 2016, at 6:42 PM, Samuel Erdtman <samuel@erdtman.se> wrote:
>=20
> Hi,
>=20
> I'm working on the IANA section in =
https://tools.ietf.org/html/draft-ietf-ace-oauth-authz =
<https://tools.ietf.org/html/draft-ietf-ace-oauth-authz>.
>=20
> In https://tools.ietf.org/html/draft-ietf-ace-oauth-authz =
<https://tools.ietf.org/html/draft-ietf-ace-oauth-authz> we want to have =
the option to get the PoP parameters (alg, key and aud) via =
introspection e.g. if using a reference token.
>=20
> At the moment I wrote the registration text of the parameters in the =
ACE specification but I think it would be preferable if =
https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution =
<https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution> did =
the registration for introspection too.
>=20
> Comments?
>=20
> //Samuel
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace


--Apple-Mail=_543DE61F-F594-47B1-BD76-D789B466C3E4
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=utf-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html =
charset=3Dutf-8"></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" =
class=3D"">It is probably best to register =E2=80=9Ccnf=E2=80=9D to =
match RFC 7600 so we don=E2=80=99t have two different structures one for =
JWT/CWT and one for introspection.<div class=3D""><br =
class=3D""></div><div class=3D"">On the other hand introspected tokens =
are generally relatively custom in what claims they pass.</div><div =
class=3D""><br class=3D""></div><div class=3D"">I will discuss it with =
Hannes.</div><div class=3D""><br class=3D""></div><div class=3D"">John =
B.<br class=3D""><div><blockquote type=3D"cite" class=3D""><div =
class=3D"">On Apr 16, 2016, at 6:42 PM, Samuel Erdtman &lt;<a =
href=3D"mailto:samuel@erdtman.se" class=3D"">samuel@erdtman.se</a>&gt; =
wrote:</div><br class=3D"Apple-interchange-newline"><div class=3D""><div =
dir=3D"ltr" class=3D""><div class=3D""><div class=3D""><div =
class=3D""><div class=3D"">Hi,<br class=3D""><br class=3D""></div>I'm =
working on the IANA section in <a =
href=3D"https://tools.ietf.org/html/draft-ietf-ace-oauth-authz" =
class=3D"">https://tools.ietf.org/html/draft-ietf-ace-oauth-authz</a>.<br =
class=3D""><br class=3D""></div>In <a =
href=3D"https://tools.ietf.org/html/draft-ietf-ace-oauth-authz" =
class=3D"">https://tools.ietf.org/html/draft-ietf-ace-oauth-authz</a> we =
want to have the option to get the PoP parameters (alg, key and aud) via =
introspection e.g. if using a reference token.<br class=3D""><br =
class=3D""></div>At the moment I wrote the registration text of the =
parameters in the ACE specification but I think it would be preferable =
if <a =
href=3D"https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution"=
 =
class=3D"">https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distributi=
on</a> did the registration for introspection too.<br class=3D""><br =
class=3D""></div><div class=3D"">Comments?<br class=3D""></div><div =
class=3D""><br class=3D""></div>//Samuel<br class=3D""></div>
_______________________________________________<br class=3D"">Ace =
mailing list<br class=3D""><a href=3D"mailto:Ace@ietf.org" =
class=3D"">Ace@ietf.org</a><br =
class=3D"">https://www.ietf.org/mailman/listinfo/ace<br =
class=3D""></div></blockquote></div><br class=3D""></div></body></html>=

--Apple-Mail=_543DE61F-F594-47B1-BD76-D789B466C3E4--


From nobody Mon Apr 18 03:23:28 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 718A112DE08; Mon, 18 Apr 2016 03:23:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pIHfCm9WmYAw; Mon, 18 Apr 2016 03:23:24 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 549D412DDF9; Mon, 18 Apr 2016 03:23:23 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml707-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CHT94160; Mon, 18 Apr 2016 09:56:42 +0000 (GMT)
Received: from BLREML408-HUB.china.huawei.com (10.20.4.47) by lhreml707-cah.china.huawei.com (10.201.5.199) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 18 Apr 2016 10:56:34 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML408-HUB.china.huawei.com ([10.20.4.47]) with mapi id 14.03.0235.001; Mon, 18 Apr 2016 15:26:24 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "core@ietf.org" <core@ietf.org>, "ace@ietf.org" <ace@ietf.org>
Thread-Topic: New Version Notification for draft-vasu-ace-core-access-privilege-provisioning-00.txt
Thread-Index: AQHRlzE4W5soGoneV0Ws+BItK+DdmJ+PgGNg
Date: Mon, 18 Apr 2016 09:56:23 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/d-Aauk-YUe1xugpMjCjMLnHBln4>
Cc: Ashutosh prakash <ashutosh.prakash@huawei.com>, Javed siddiqui <javed.siddiqui@huawei.com>, "Zuojing \(2012 Laboratories\)" <jing.zuo@huawei.com>
Subject: [Ace] FW: New Version Notification for draft-vasu-ace-core-access-privilege-provisioning-00.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Apr 2016 10:23:25 -0000
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From nobody Mon Apr 18 03:55:13 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2373F12B03B for <ace@ietfa.amsl.com>; Mon, 18 Apr 2016 03:55:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2xwqDdVqoQAV for <ace@ietfa.amsl.com>; Mon, 18 Apr 2016 03:55:09 -0700 (PDT)
Received: from mail-lf0-x235.google.com (mail-lf0-x235.google.com [IPv6:2a00:1450:4010:c07::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50B6D12B02D for <ace@ietf.org>; Mon, 18 Apr 2016 03:55:08 -0700 (PDT)
Received: by mail-lf0-x235.google.com with SMTP id e190so211930071lfe.0 for <ace@ietf.org>; Mon, 18 Apr 2016 03:55:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to; bh=jWTLgYgLQDNx3qUfsQPxT/zk4gw7yZtNAK/SnEMd6dc=; b=hWECxXVgfHd8dMmnVZi3b0qkAA4KFxUaAMascekEpdp+wjDUnnof1qdghvEN1AgIUR 6rE20Dl5W19lgVheRDhpSw7JB+QbbszBVpq47Nt7T1H1Lof3/bkwAjOsqh3VUmph5VZW 339gmnN7zcAtGJM/8eHeX+KEmQPG4+Q2mVovotjWRlhFkOu20TURaKhA0AuBmx3CK7mu /Lbwx0ZhRXE2PIPFuZQVRnT9/h3kn9PJtytI/cOztF85LcG0C7f7wYCOej29/qACbS7L aCKje0UJhOTBtdnnqZ1A9ZiFN18gjCE0t6QJe9JmA2SwXflvBd+ZGzgerSuNSRgdEWod sq5A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to; bh=jWTLgYgLQDNx3qUfsQPxT/zk4gw7yZtNAK/SnEMd6dc=; b=MUxeaJCVnIH5xa9XS5YcFhi/Qpi8Qdq5bSkHOHYhzYPDL+dZL/5KpTKKTd8lAz2QQY oknapfr/CBMvTI7uSH6XON44Anvo3IWjkAkz+AdgQmU/rPdj+TJL//Qdlbe85xE/HKck TtzVADSJVb7e7puxGvnTpPkQ9DkVT0NG7L9HNZq3E5LC7fkkJbwjO2g/yVk3vo58NgTj FPVGgkvEiLOEEUMiyubcSX5HbtDWiPVZ3Sx9aRYzw2sDYziBIQcQ0kPTXXHz4gbUfUXn OGfLLBcp11xPw5VklBXcqW+8gHLn9jamGUOg0L3qBIqWZIFEOwK8MqE2A9msqRYtxbBU NPuQ==
X-Gm-Message-State: AOPr4FUESPeRRwmJYWiXPVmI5QRrxRaLU5Gj7c/aSgb9oqWlDJCuh6ZXnnPer45SuGfwFrDJ
X-Received: by 10.25.168.80 with SMTP id r77mr3615416lfe.133.1460976906452; Mon, 18 Apr 2016 03:55:06 -0700 (PDT)
Received: from [192.168.0.166] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id jn5sm84484lbc.24.2016.04.18.03.55.05 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Mon, 18 Apr 2016 03:55:05 -0700 (PDT)
References: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <5714BD09.2020608@sics.se>
Date: Mon, 18 Apr 2016 12:55:05 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms070107030704060205040802"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/PFOYDpyV18fNWKn3Hj0wzRvP9c4>
Subject: Re: [Ace] [core] FW: New Version Notification for draft-vasu-ace-core-access-privilege-provisioning-00.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Apr 2016 10:55:12 -0000

This is a cryptographically signed message in MIME format.

--------------ms070107030704060205040802
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-18 11:56, Vasu Kantubukta wrote:
> Dear CORE and ACE,
>
> We have submitted a draft on "access privilege provisioning for
> constrained devices" ...
>

Hello Vasu,

thank you for your interest in the ACE work. I've had a quick look at=20
your draft and noticed some issues that I'd like to clarify with your=20
help. You write:

>
>    Admission control is addressed with the draft (draft-seitz-ace-oauth=
-
>    authz) provides a mechanism for pre-configuring secure/authorization=

>    policies with token mechanism to access the resource.

Actually that draft is not so much about pre-configuring enpoints with=20
tokens, the idea behind OAuth is that you supply these tokens on demand, =

i.e. when a client tries to access a resource on a server.

Btw: The reference is wrong, it's now draft-ietf-ace-oauth-authz


> It is not possible to manage the rest resources by using only tokens th=
at
>    authorize the clients to access the resource. Because, it also needs=

>    to handle resource control interms of various other parameters such
>    as priority of request, QoS, Operations that can be performed on
>    resource by various clients.

I'm not sure what you mean with those points. Priority of requests and=20
QoS could be parameters that have a bearing on what kind of access token =

you get, but they are certainly out of scope for ACE.
The operations that clients can perform on the resource are supposed to=20
either be encoded in the token, or available through introspection by=20
ways of the "scope" of an OAuth token.

> The draft (draft-seitz-ace-oauth-authz)
>    talks about how to provide admission control (conditional
>    authorization) for resource access from client device, but it does
>    not consider constrained device access from another constrained
>    device.

That is simply not correct. If you look at section 6.1 of
draft-ietf-ace-oauth-authz-01, this deployment example deals with the=20
case of a constrained client accessing a constrained resource server.

Maybe you have identified other requirements that are not currently=20
covered by our draft, or that are unclear in the current document. If=20
that is the case, please explain to the group what these requirements=20
are, so that we can discuss them and try to find the best solution.

I'd also like to clarify what you mean with 'Admission Control' vs=20
'Resource Control', the distinction does not seem very useful to me at=20
this point, so perhaps I'm missing something.

Regards,

Ludwig Seitz

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms070107030704060205040802
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms070107030704060205040802--


From nobody Mon Apr 18 23:58:46 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D0D312D80A for <ace@ietfa.amsl.com>; Mon, 18 Apr 2016 23:58:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VIumHmlnAvub for <ace@ietfa.amsl.com>; Mon, 18 Apr 2016 23:58:36 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D07CF12D55E for <ace@ietf.org>; Mon, 18 Apr 2016 23:58:35 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml706-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CMP30927; Tue, 19 Apr 2016 06:58:33 +0000 (GMT)
Received: from BLREML408-HUB.china.huawei.com (10.20.4.47) by lhreml706-cah.china.huawei.com (10.201.5.182) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 19 Apr 2016 07:58:31 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML408-HUB.china.huawei.com ([10.20.4.47]) with mapi id 14.03.0235.001; Tue, 19 Apr 2016 12:28:21 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: Ace Digest, Vol 29, Issue 12
Thread-Index: AQHRmaSe9/iz6l37DUaAbpj4CuW5UZ+Q1ekA
Date: Tue, 19 Apr 2016 06:58:20 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2B875@blreml509-mbb.china.huawei.com>
References: <mailman.46.1461006006.23559.ace@ietf.org>
In-Reply-To: <mailman.46.1461006006.23559.ace@ietf.org>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: multipart/mixed; boundary="_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090202.5715D71A.0013, ss=1, re=0.000, recu=0.000, reip=0.000,  cl=1, cld=1, fgs=0, ip=169.254.1.138, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: 4b7edd3c3e00d01f1d7042568d18c4bf
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/S4A1sGBsFJYjfxW9uRvgiT3cdyA>
Cc: "Caozhen \(zcao\)" <zhen.cao@huawei.com>, Ashutosh prakash <ashutosh.prakash@huawei.com>, Javed siddiqui <javed.siddiqui@huawei.com>, "Zuojing \(2012 Laboratories\)" <jing.zuo@huawei.com>
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 12
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Apr 2016 06:58:44 -0000

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (2 messages)"
Content-Description: Today's Topics (2 messages)
Content-Disposition: attachment; filename="Today's Topics (2 messages)";
	size=285; creation-date="Mon, 18 Apr 2016 19:00:48 GMT";
	modification-date="Mon, 18 Apr 2016 19:00:48 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIEZXOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9y
DQogICAgICBkcmFmdC12YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9uaW5n
LTAwLnR4dA0KICAgICAgKFZhc3UgS2FudHVidWt0YSkNCiAgIDIuIFJlOiBbY29yZV0gRlc6IE5l
dyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3INCiAgICAgIGRyYWZ0LXZhc3UtYWNlLWNvcmUtYWNj
ZXNzLXByaXZpbGVnZS1wcm92aXNpb25pbmctMDAudHh0DQogICAgICAoTHVkd2lnIFNlaXR6KQ0K

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Tue, 19 Apr 2016 06:58:20 GMT";
	modification-date="Tue, 19 Apr 2016 06:58:20 GMT"

List-Post: <mailto:ace@ietf.org>
Content-Transfer-Encoding: base64
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
Precedence: list
CC: Ashutosh prakash <ashutosh.prakash@huawei.com>, Javed siddiqui
	<javed.siddiqui@huawei.com>, "Zuojing (2012 Laboratories)"
	<jing.zuo@huawei.com>
To: "core@ietf.org" <core@ietf.org>, "ace@ietf.org" <ace@ietf.org>
Date: Mon, 18 Apr 2016 09:56:23 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
Content-Type: text/plain; charset="utf-8"
Subject: [Ace] FW: New Version Notification for
 draft-vasu-ace-core-access-privilege-provisioning-00.txt
Message: 1
MIME-Version: 1.0
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=

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Tue, 19 Apr 2016 06:58:20 GMT";
	modification-date="Tue, 19 Apr 2016 06:58:20 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: "ace@ietf.org" <ace@ietf.org>
References: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
Date: Mon, 18 Apr 2016 12:55:05 +0200
Message-ID: <5714BD09.2020608@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms070107030704060205040802"
Subject: Re: [Ace] [core] FW: New Version Notification for
 draft-vasu-ace-core-access-privilege-provisioning-00.txt
Message: 2
MIME-Version: 1.0

--------------ms070107030704060205040802
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-18 11:56, Vasu Kantubukta wrote:
> Dear CORE and ACE,
>
> We have submitted a draft on "access privilege provisioning for
> constrained devices" ...
>

Hello Vasu,

thank you for your interest in the ACE work. I've had a quick look at=20
your draft and noticed some issues that I'd like to clarify with your=20
help. You write:

>
>    Admission control is addressed with the draft (draft-seitz-ace-oauth=
-
>    authz) provides a mechanism for pre-configuring secure/authorization=

>    policies with token mechanism to access the resource.

Actually that draft is not so much about pre-configuring enpoints with=20
tokens, the idea behind OAuth is that you supply these tokens on demand, =

i.e. when a client tries to access a resource on a server.

Btw: The reference is wrong, it's now draft-ietf-ace-oauth-authz


> It is not possible to manage the rest resources by using only tokens th=
at
>    authorize the clients to access the resource. Because, it also needs=

>    to handle resource control interms of various other parameters such
>    as priority of request, QoS, Operations that can be performed on
>    resource by various clients.

I'm not sure what you mean with those points. Priority of requests and=20
QoS could be parameters that have a bearing on what kind of access token =

you get, but they are certainly out of scope for ACE.
The operations that clients can perform on the resource are supposed to=20
either be encoded in the token, or available through introspection by=20
ways of the "scope" of an OAuth token.

> The draft (draft-seitz-ace-oauth-authz)
>    talks about how to provide admission control (conditional
>    authorization) for resource access from client device, but it does
>    not consider constrained device access from another constrained
>    device.

That is simply not correct. If you look at section 6.1 of
draft-ietf-ace-oauth-authz-01, this deployment example deals with the=20
case of a constrained client accessing a constrained resource server.

Maybe you have identified other requirements that are not currently=20
covered by our draft, or that are unclear in the current document. If=20
that is the case, please explain to the group what these requirements=20
are, so that we can discuss them and try to find the best solution.

I'd also like to clarify what you mean with 'Admission Control' vs=20
'Resource Control', the distinction does not seem very useful to me at=20
this point, so perhaps I'm missing something.

Regards,

Ludwig Seitz

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms070107030704060205040802
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms070107030704060205040802--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Mon, 18 Apr 2016 19:00:48 GMT";
	modification-date="Mon, 18 Apr 2016 19:00:48 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_--


From nobody Tue Apr 19 01:10:42 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7769612DAF0 for <ace@ietfa.amsl.com>; Tue, 19 Apr 2016 01:10:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zip-kPIqHdyp for <ace@ietfa.amsl.com>; Tue, 19 Apr 2016 01:10:35 -0700 (PDT)
Received: from mail-lf0-x22b.google.com (mail-lf0-x22b.google.com [IPv6:2a00:1450:4010:c07::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 292F612D91D for <ace@ietf.org>; Tue, 19 Apr 2016 01:10:35 -0700 (PDT)
Received: by mail-lf0-x22b.google.com with SMTP id j11so9667361lfb.1 for <ace@ietf.org>; Tue, 19 Apr 2016 01:10:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=pfMHMKISVklwt9k0Hsx98lEMHWU+YIatyqAyLwy2NZc=; b=azKMSNVDHjS/6O4h0y4IJ0izZs7Blw17EY3iPHYSUVovV2PYzPycVMPZuop7cvYSfG vP/DbdOwYBl7RYK2t2dHqfb6lebNxRyE24cFDVEaJjrPrn2Jsf5C+HTMP9nEl5kOorYm 8WdA/irpglJZaSVSpGycUmUXHLpP3RRExVWEVXo3MKtqkILlGvycXcFeINmfJ1qTeuW4 O0Osi19/QBZgwzXZpDiMYheeCcp+tVaM3EpzVA5ycsnJt7pyju7HJha5a5RZvEwkC4qB 5b9t3WGhGjP/6soUcpsukuL4Njik5EwU+3rffus1kPbJSteswstL7Rwovo5i9Dd0hoEh lvaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=pfMHMKISVklwt9k0Hsx98lEMHWU+YIatyqAyLwy2NZc=; b=I4DkcI4yJF3UYYPwSIStBJCTtBD+WPaldMuuDkrhnkPVRDqYdHsDa9Tz3xlWythujI PDvnvgG4bELUhB6TUMjvd6dd22BTapKknMPDC5BhXQi1MTtLDxIoQNekWb1GuqddEOP2 se7UI1/eJVA228paEMVLGNmuqVIahaooLNXecWncmPHAC9kBgQ//Qrc4N94Lu9xFPpt3 O3XbvpUAOJYwY/NzsxGmWb8C9N7OC7N4/25kg+9t72U2M13XppootDXDSVV2UEFSHh2U ivztZJOBRnmaKxyCFtM+6lGzqg2jj3VS3Uxprx4qpuZM6kVdHzl6hX9ixLNR0PTEGsd7 1kCA==
X-Gm-Message-State: AOPr4FUovyXg/UZTWMVS7bSKC/KmEbY0NPfpoDeHJNOZrz0xaWssD6gV1D0d0JJ4T2Pc86Gk
X-Received: by 10.112.141.40 with SMTP id rl8mr788153lbb.0.1461053433077; Tue, 19 Apr 2016 01:10:33 -0700 (PDT)
Received: from [192.168.0.166] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id a197sm2786253lfe.23.2016.04.19.01.10.32 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Tue, 19 Apr 2016 01:10:32 -0700 (PDT)
To: ace@ietf.org
References: <mailman.46.1461006006.23559.ace@ietf.org> <D6EBB546995C064A9492E8E27F62D90D0AA2B875@blreml509-mbb.china.huawei.com>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <5715E7F7.80604@sics.se>
Date: Tue, 19 Apr 2016 10:10:31 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2B875@blreml509-mbb.china.huawei.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030306080300090409030305"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/sxUClmQMIp2ePIafqAxQnV7d3uY>
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 12
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Apr 2016 08:10:38 -0000

This is a cryptographically signed message in MIME format.

--------------ms030306080300090409030305
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-19 08:58, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> I have a quick look on your draft. We are happy even to discuss about
> our draft and can collaborate.
>
> Plz find my few inline comments below:
>
> Actually that draft is not so much about pre-configuring endpoints
> with tokens, the idea behind OAuth is that you supply these tokens on
> demand, i.e. when a client tries to access a resource on a server.
>
> Btw: The reference is wrong, it's now draft-ietf-ace-oauth-authz
>
> ----> Thanks for bringing me to notice the new draft
> "draft-ietf-ace-oauth-authz-01"

----> Yes, these tokens are not
> configured at the endpoints, those are at AS, my doubt is about how
> AS can make dynamic configuration of security policies about RS, and
> clients. Does there be any frequent updates about policies from RS to
> AS.
>

The RS is not supposed to manage policies at the AS. Managing access=20
control policies at the AS is the job of the Resource Owner RO (i.e. the =

entity in charge of RS). Since the AS and RO are not considered to be=20
constrained devices, normal web tools can be used for that. Furthermore=20
since the AS is not constrained it is considered to be connected at all=20
times, thus frequent access control policy updates are possible.
How AS are implemented in detail is not in scope for ACE, you might be=20
able to get some feedback on that from people at the OAuth WG.

> I'm not sure what you mean with those points. Priority of requests
> and QoS could be parameters that have a bearing on what kind of
> access token you get, but they are certainly out of scope for ACE.
> The operations that clients can perform on the resource are supposed
> to either be encoded in the token, or available through introspection
> by ways of the "scope" of an OAuth token.
>
> ---> Authorization server provides resource access to client by
> giving access tokens to client that includes only security context,
> and kind of protocol access.

The token only includes very few parameters indeed, but the policies the =

AS uses to determine what token a client can get in a specific situation =

can be as complex as you like (e.g. depending on requested QoS or=20
whatever else).

Btw: I really don't know what exactly you mean with 'security context'=20
and 'protocol access', in order to avoid misunderstandings it would be=20
good to get to a common understanding on the terms we use.


---> Suppose RS cannot handle any
> request at that time, and some other similar resource can handle the
> request. Does the RS will update to AS?. If not, then request should
> not be allowed.

You are aware that in some usecases the RS is not even be able to=20
communicate with AS?

Note however that an access token might be valid for more than just one=20
specific RS, so in the case you describe above, where several RS could=20
satisfy the client's request, the AS could issue such a token to the=20
client, and the client could contact all the matching RS using the same=20
token until it finds one that can satisfy its request.

> Here the check is not happened based on the resource
> management. Only protocol operations like (PUT,POST,GET etc) may not
> be sufficient to distinguish the resource access. Resource oriented
> operations are more appropriate for resource control (for ex. for
> resource IP Camera, the operations allowed are {"turn it up", "turn
> it down", "play", "pause"}).

Such resource oriented operations can be encoded in an access token as=20
well using a different set of OAuth scopes. The ACL defined in
draft-bormann-core-ace-aif is just one example specific to protocol=20
operations. This will probably pan out for IoT the same way it has for=20
Web OAuth: There will be many different application specific uses scope, =

that define resource oriented permissions similar to those you listed=20
above.
See https://www.brandur.org/oauth-scope for an overview of how people=20
have used scopes differently to implement application/resource specific=20
permissions.

> Centralized resource control is required
> to admit client request. On what basis these tokens assigned is very
> important in constrained environments. only based on security context
> is not sufficient to authorize the resource. Authorization should
> include both admission and resource control. There should be some
> decision making required to provide access controls on resource
> access not only just by the security context.

Again it is hard for me to discuss your points unless I know what you=20
mean with 'security context', 'admission control' and 'resource=20
control'. Could you please clarify these terms?

Note that there is centralized control today in OAuth through the AS.

--> Admission control
> does not have to consider about resource management, but resource
> control should consider. And, any access control mechanism should
> include both admission and resource control. Permission to access a
> resource is an authorization. So, managing and monitoring of access
> controls of a resource is also a part of resource access.
>
> Moreover, other few queries about draft-ietf-ace-oauth-authz-01:
>
--->resource server is involved in processing the access token which
> is supplied as payload from client request. Or in other case, it has
> to construct new introspection request to AS and verify the access
> token of client. Which burdens the resource heavily due to limited
> memory.
--->why can't this be delegated to some intermediate server
> that do access token verification on behalf of RS.

The RS would still have to get the results from the intermediate server=20
in a secure way and verify that they are correct.

a.) In some usecases this does not work at all because the RS has no=20
connectivity
b.) In most cases I expect that verifying the intermediate servers=20
assertions and maintaining a secure connection to this intermediate=20
server is going to be at least as burdensome for the RS as just=20
verifying token itself.

Note that the idea is that the AS makes an access control decision,=20
which is a heavyweight process, it encodes this decision into an access=20
token. The RS then only enforces the decision made by the AS, and for=20
that it has to verify the token, which is supposed to be a lightweight=20
process.

--->Does the RS
> has to do this verification of access request for each client and
> resource request?.
>
Access requests are verified by the AS, the RS only matches the resource =

request against the token to see if the token authorizes this resource=20
request.


Regards,

Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms030306080300090409030305
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030306080300090409030305--


From nobody Tue Apr 19 23:10:57 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83B6412E9AA for <ace@ietfa.amsl.com>; Tue, 19 Apr 2016 23:10:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s15KnDf8gPa0 for <ace@ietfa.amsl.com>; Tue, 19 Apr 2016 23:10:52 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 808D212E93F for <ace@ietf.org>; Tue, 19 Apr 2016 23:10:51 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml703-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CHY28540; Wed, 20 Apr 2016 06:10:48 +0000 (GMT)
Received: from BLREML405-HUB.china.huawei.com (10.20.4.41) by lhreml703-cah.china.huawei.com (10.201.5.104) with Microsoft SMTP Server (TLS) id 14.3.235.1; Wed, 20 Apr 2016 07:10:47 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML405-HUB.china.huawei.com ([10.20.4.41]) with mapi id 14.03.0235.001; Wed, 20 Apr 2016 11:40:40 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: Ace Digest, Vol 29, Issue 13
Thread-Index: AQHRmhL9J8sYYtJi40imgpzylR7nIJ+SXZmw
Date: Wed, 20 Apr 2016 06:10:39 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
References: <mailman.1171.1461053439.4402.ace@ietf.org>
In-Reply-To: <mailman.1171.1461053439.4402.ace@ietf.org>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: multipart/mixed; boundary="_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020201.57171D69.00A5, ss=1, re=0.000, recu=0.000, reip=0.000,  cl=1, cld=1, fgs=0, ip=169.254.1.138, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: ceaeb5002e43267dc828868bec73169a
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/A3Npfp80RbmoiGOJdUaGn2gJJo0>
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 13
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Apr 2016 06:10:56 -0000

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (2 messages)"
Content-Description: Today's Topics (2 messages)
Content-Disposition: attachment; filename="Today's Topics (2 messages)";
	size=132; creation-date="Tue, 19 Apr 2016 08:10:52 GMT";
	modification-date="Tue, 19 Apr 2016 08:10:52 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIFJlOiBBY2UgRGlnZXN0LCBWb2wgMjksIElzc3VlIDEy
IChWYXN1IEthbnR1YnVrdGEpDQogICAyLiBSZTogQWNlIERpZ2VzdCwgVm9sIDI5LCBJc3N1ZSAx
MiAoTHVkd2lnIFNlaXR6KQ0K

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Wed, 20 Apr 2016 06:10:38 GMT";
	modification-date="Wed, 20 Apr 2016 06:10:38 GMT"

List-Post: <mailto:ace@ietf.org>
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
Precedence: list
CC: "Caozhen (zcao)" <zhen.cao@huawei.com>, Ashutosh prakash
	<ashutosh.prakash@huawei.com>, Javed siddiqui <javed.siddiqui@huawei.com>,
	"Zuojing (2012 Laboratories)" <jing.zuo@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
References: <mailman.46.1461006006.23559.ace@ietf.org>
In-Reply-To: <mailman.46.1461006006.23559.ace@ietf.org>
Date: Tue, 19 Apr 2016 06:58:20 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2B875@blreml509-mbb.china.huawei.com>
Content-Type: multipart/mixed;
	boundary="_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_"
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 12
Message: 1
MIME-Version: 1.0

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64

SGkgTHVkd2lnIFNlaXR6LA0KDQpJIGhhdmUgYSBxdWljayBsb29rIG9uIHlvdXIgZHJhZnQuIFdl
IGFyZSBoYXBweSBldmVuIHRvIGRpc2N1c3MgYWJvdXQgb3VyIGRyYWZ0IGFuZCBjYW4gY29sbGFi
b3JhdGUuDQoNClBseiBmaW5kIG15IGZldyBpbmxpbmUgY29tbWVudHMgYmVsb3c6DQoNCkFjdHVh
bGx5IHRoYXQgZHJhZnQgaXMgbm90IHNvIG11Y2ggYWJvdXQgcHJlLWNvbmZpZ3VyaW5nIGVuZHBv
aW50cyB3aXRoDQp0b2tlbnMsIHRoZSBpZGVhIGJlaGluZCBPQXV0aCBpcyB0aGF0IHlvdSBzdXBw
bHkgdGhlc2UgdG9rZW5zIG9uIGRlbWFuZCwNCmkuZS4gd2hlbiBhIGNsaWVudCB0cmllcyB0byBh
Y2Nlc3MgYSByZXNvdXJjZSBvbiBhIHNlcnZlci4NCg0KQnR3OiBUaGUgcmVmZXJlbmNlIGlzIHdy
b25nLCBpdCdzIG5vdyBkcmFmdC1pZXRmLWFjZS1vYXV0aC1hdXRoeg0KDQotLS0tPiBUaGFua3Mg
Zm9yIGJyaW5naW5nIG1lIHRvIG5vdGljZSB0aGUgbmV3IGRyYWZ0ICJkcmFmdC1pZXRmLWFjZS1v
YXV0aC1hdXRoei0wMSINCi0tLS0+IFllcywgdGhlc2UgdG9rZW5zIGFyZSBub3QgY29uZmlndXJl
ZCBhdCB0aGUgZW5kcG9pbnRzLCB0aG9zZSBhcmUgYXQgQVMsIG15IGRvdWJ0IGlzIGFib3V0IGhv
dyBBUyBjYW4gbWFrZSBkeW5hbWljIGNvbmZpZ3VyYXRpb24gb2Ygc2VjdXJpdHkgcG9saWNpZXMg
YWJvdXQgUlMsIGFuZCBjbGllbnRzLiBEb2VzIHRoZXJlIGJlIGFueSBmcmVxdWVudCB1cGRhdGVz
IGFib3V0IHBvbGljaWVzIGZyb20gUlMgdG8gQVMuDQoNCkknbSBub3Qgc3VyZSB3aGF0IHlvdSBt
ZWFuIHdpdGggdGhvc2UgcG9pbnRzLiBQcmlvcml0eSBvZiByZXF1ZXN0cyBhbmQNClFvUyBjb3Vs
ZCBiZSBwYXJhbWV0ZXJzIHRoYXQgaGF2ZSBhIGJlYXJpbmcgb24gd2hhdCBraW5kIG9mIGFjY2Vz
cyB0b2tlbg0KeW91IGdldCwgYnV0IHRoZXkgYXJlIGNlcnRhaW5seSBvdXQgb2Ygc2NvcGUgZm9y
IEFDRS4NClRoZSBvcGVyYXRpb25zIHRoYXQgY2xpZW50cyBjYW4gcGVyZm9ybSBvbiB0aGUgcmVz
b3VyY2UgYXJlIHN1cHBvc2VkIHRvDQplaXRoZXIgYmUgZW5jb2RlZCBpbiB0aGUgdG9rZW4sIG9y
IGF2YWlsYWJsZSB0aHJvdWdoIGludHJvc3BlY3Rpb24gYnkNCndheXMgb2YgdGhlICJzY29wZSIg
b2YgYW4gT0F1dGggdG9rZW4uDQoNCi0tLT4gQXV0aG9yaXphdGlvbiBzZXJ2ZXIgcHJvdmlkZXMg
cmVzb3VyY2UgYWNjZXNzIHRvIGNsaWVudCBieSBnaXZpbmcgYWNjZXNzIHRva2VucyB0byBjbGll
bnQgdGhhdCBpbmNsdWRlcyBvbmx5IHNlY3VyaXR5IGNvbnRleHQsIGFuZCBraW5kIG9mIHByb3Rv
Y29sDQphY2Nlc3MuDQotLS0+IFN1cHBvc2UgUlMgY2Fubm90IGhhbmRsZSBhbnkgcmVxdWVzdCBh
dCB0aGF0IHRpbWUsIGFuZCBzb21lIG90aGVyIHNpbWlsYXIgcmVzb3VyY2UgY2FuIGhhbmRsZSB0
aGUgcmVxdWVzdC4gRG9lcyB0aGUgUlMgd2lsbCB1cGRhdGUgdG8gQVM/LiBJZiBub3QsIHRoZW4g
cmVxdWVzdCBzaG91bGQgbm90IGJlIGFsbG93ZWQuIEhlcmUgdGhlIGNoZWNrIGlzIG5vdCBoYXBw
ZW5lZCBiYXNlZCBvbiB0aGUgcmVzb3VyY2UgbWFuYWdlbWVudC4gT25seSBwcm90b2NvbCBvcGVy
YXRpb25zIGxpa2UgKFBVVCxQT1NULEdFVCBldGMpIG1heSBub3QgYmUgc3VmZmljaWVudCB0byBk
aXN0aW5ndWlzaCB0aGUgcmVzb3VyY2UgYWNjZXNzLiBSZXNvdXJjZSBvcmllbnRlZCBvcGVyYXRp
b25zIGFyZSBtb3JlIGFwcHJvcHJpYXRlIGZvciByZXNvdXJjZSBjb250cm9sIChmb3IgZXguIGZv
ciByZXNvdXJjZSBJUCBDYW1lcmEsIHRoZSBvcGVyYXRpb25zIGFsbG93ZWQgYXJlIHsidHVybiBp
dCB1cCIsICJ0dXJuIGl0IGRvd24iLCAicGxheSIsICJwYXVzZSJ9KS4gQ2VudHJhbGl6ZWQgcmVz
b3VyY2UgY29udHJvbCBpcyByZXF1aXJlZCB0byBhZG1pdCBjbGllbnQgcmVxdWVzdC4gT24gd2hh
dCBiYXNpcyB0aGVzZSB0b2tlbnMgYXNzaWduZWQgaXMgdmVyeSBpbXBvcnRhbnQgaW4gY29uc3Ry
YWluZWQgZW52aXJvbm1lbnRzLiBvbmx5IGJhc2VkIG9uIHNlY3VyaXR5IGNvbnRleHQgaXMgbm90
IHN1ZmZpY2llbnQgdG8gYXV0aG9yaXplIHRoZSByZXNvdXJjZS4gQXV0aG9yaXphdGlvbiBzaG91
bGQgaW5jbHVkZSBib3RoIGFkbWlzc2lvbiBhbmQgcmVzb3VyY2UgY29udHJvbC4gVGhlcmUgc2hv
dWxkIGJlIHNvbWUgZGVjaXNpb24gbWFraW5nIHJlcXVpcmVkIHRvIHByb3ZpZGUgYWNjZXNzIGNv
bnRyb2xzIG9uIHJlc291cmNlIGFjY2VzcyBub3Qgb25seSBqdXN0IGJ5IHRoZSBzZWN1cml0eSBj
b250ZXh0Lg0KLS0tPiBBZG1pc3Npb24gY29udHJvbCBkb2VzIG5vdCBoYXZlIHRvIGNvbnNpZGVy
IGFib3V0IHJlc291cmNlIG1hbmFnZW1lbnQsIGJ1dCByZXNvdXJjZSBjb250cm9sIHNob3VsZCBj
b25zaWRlci4gQW5kLCBhbnkgYWNjZXNzIGNvbnRyb2wgbWVjaGFuaXNtIHNob3VsZCBpbmNsdWRl
IGJvdGggYWRtaXNzaW9uIGFuZCByZXNvdXJjZSBjb250cm9sLiBQZXJtaXNzaW9uIHRvIGFjY2Vz
cyBhIHJlc291cmNlIGlzIGFuIGF1dGhvcml6YXRpb24uIFNvLCBtYW5hZ2luZyBhbmQgbW9uaXRv
cmluZyBvZiBhY2Nlc3MgY29udHJvbHMgb2YgYSByZXNvdXJjZSBpcyBhbHNvIGEgcGFydCBvZiBy
ZXNvdXJjZSBhY2Nlc3MuDQoNCk1vcmVvdmVyLCBvdGhlciBmZXcgcXVlcmllcyBhYm91dCBkcmFm
dC1pZXRmLWFjZS1vYXV0aC1hdXRoei0wMToNCi0tLT5yZXNvdXJjZSBzZXJ2ZXIgaXMgaW52b2x2
ZWQgaW4gcHJvY2Vzc2luZyB0aGUgYWNjZXNzIHRva2VuIHdoaWNoIGlzIHN1cHBsaWVkIGFzIHBh
eWxvYWQgZnJvbSBjbGllbnQgcmVxdWVzdC4gT3IgaW4gb3RoZXIgY2FzZSwgaXQgaGFzIHRvIGNv
bnN0cnVjdCBuZXcgaW50cm9zcGVjdGlvbiByZXF1ZXN0IHRvIEFTIGFuZCB2ZXJpZnkgdGhlIGFj
Y2VzcyB0b2tlbiBvZiBjbGllbnQuIFdoaWNoIGJ1cmRlbnMgdGhlIHJlc291cmNlIGhlYXZpbHkg
ZHVlIHRvIGxpbWl0ZWQgbWVtb3J5Lg0KLS0tPndoeSBjYW4ndCB0aGlzIGJlIGRlbGVnYXRlZCB0
byBzb21lIGludGVybWVkaWF0ZSBzZXJ2ZXIgdGhhdCBkbyBhY2Nlc3MgdG9rZW4gdmVyaWZpY2F0
aW9uIG9uIGJlaGFsZiBvZiBSUy4NCi0tLT5Eb2VzIHRoZSBSUyBoYXMgdG8gZG8gdGhpcyB2ZXJp
ZmljYXRpb24gb2YgYWNjZXNzIHJlcXVlc3QgZm9yIGVhY2ggY2xpZW50IGFuZCByZXNvdXJjZSBy
ZXF1ZXN0Py4NCg0KDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFjZSBb
bWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgYWNlLXJlcXVlc3RAaWV0
Zi5vcmcNClNlbnQ6IDIwMTbE6jTUwjE5yNUgMDozMA0KVG86IGFjZUBpZXRmLm9yZw0KU3ViamVj
dDogQWNlIERpZ2VzdCwgVm9sIDI5LCBJc3N1ZSAxMg0KDQpTZW5kIEFjZSBtYWlsaW5nIGxpc3Qg
c3VibWlzc2lvbnMgdG8NCiAgICAgICAgYWNlQGlldGYub3JnDQoNClRvIHN1YnNjcmliZSBvciB1
bnN1YnNjcmliZSB2aWEgdGhlIFdvcmxkIFdpZGUgV2ViLCB2aXNpdA0KICAgICAgICBodHRwczov
L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZQ0Kb3IsIHZpYSBlbWFpbCwgc2VuZCBh
IG1lc3NhZ2Ugd2l0aCBzdWJqZWN0IG9yIGJvZHkgJ2hlbHAnIHRvDQogICAgICAgIGFjZS1yZXF1
ZXN0QGlldGYub3JnDQoNCllvdSBjYW4gcmVhY2ggdGhlIHBlcnNvbiBtYW5hZ2luZyB0aGUgbGlz
dCBhdA0KICAgICAgICBhY2Utb3duZXJAaWV0Zi5vcmcNCg0KV2hlbiByZXBseWluZywgcGxlYXNl
IGVkaXQgeW91ciBTdWJqZWN0IGxpbmUgc28gaXQgaXMgbW9yZSBzcGVjaWZpYyB0aGFuICJSZTog
Q29udGVudHMgb2YgQWNlIGRpZ2VzdC4uLiINCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (2 messages)"
Content-Description: Today's Topics (2 messages)
Content-Disposition: attachment; filename="Today's Topics (2 messages)";
	size=285; creation-date="Mon, 18 Apr 2016 19:00:48 GMT";
	modification-date="Mon, 18 Apr 2016 19:00:48 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIEZXOiBOZXcgVmVyc2lvbiBOb3RpZmljYXRpb24gZm9y
DQogICAgICBkcmFmdC12YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9uaW5n
LTAwLnR4dA0KICAgICAgKFZhc3UgS2FudHVidWt0YSkNCiAgIDIuIFJlOiBbY29yZV0gRlc6IE5l
dyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3INCiAgICAgIGRyYWZ0LXZhc3UtYWNlLWNvcmUtYWNj
ZXNzLXByaXZpbGVnZS1wcm92aXNpb25pbmctMDAudHh0DQogICAgICAoTHVkd2lnIFNlaXR6KQ0K

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Tue, 19 Apr 2016 06:58:20 GMT";
	modification-date="Tue, 19 Apr 2016 06:58:20 GMT"

List-Post: <mailto:ace@ietf.org>
Content-Transfer-Encoding: base64
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
Precedence: list
CC: Ashutosh prakash <ashutosh.prakash@huawei.com>, Javed siddiqui
	<javed.siddiqui@huawei.com>, "Zuojing (2012 Laboratories)"
	<jing.zuo@huawei.com>
To: "core@ietf.org" <core@ietf.org>, "ace@ietf.org" <ace@ietf.org>
Date: Mon, 18 Apr 2016 09:56:23 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
Content-Type: text/plain; charset="utf-8"
Subject: [Ace] FW: New Version Notification for
 draft-vasu-ace-core-access-privilege-provisioning-00.txt
Message: 1
MIME-Version: 1.0
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=

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Tue, 19 Apr 2016 06:58:20 GMT";
	modification-date="Tue, 19 Apr 2016 06:58:20 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: "ace@ietf.org" <ace@ietf.org>
References: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2B2C2@blreml509-mbb.china.huawei.com>
Date: Mon, 18 Apr 2016 12:55:05 +0200
Message-ID: <5714BD09.2020608@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms070107030704060205040802"
Subject: Re: [Ace] [core] FW: New Version Notification for
 draft-vasu-ace-core-access-privilege-provisioning-00.txt
Message: 2
MIME-Version: 1.0

--------------ms070107030704060205040802
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-18 11:56, Vasu Kantubukta wrote:
> Dear CORE and ACE,
>
> We have submitted a draft on "access privilege provisioning for
> constrained devices" ...
>

Hello Vasu,

thank you for your interest in the ACE work. I've had a quick look at=20
your draft and noticed some issues that I'd like to clarify with your=20
help. You write:

>
>    Admission control is addressed with the draft (draft-seitz-ace-oauth=
-
>    authz) provides a mechanism for pre-configuring secure/authorization=

>    policies with token mechanism to access the resource.

Actually that draft is not so much about pre-configuring enpoints with=20
tokens, the idea behind OAuth is that you supply these tokens on demand, =

i.e. when a client tries to access a resource on a server.

Btw: The reference is wrong, it's now draft-ietf-ace-oauth-authz


> It is not possible to manage the rest resources by using only tokens th=
at
>    authorize the clients to access the resource. Because, it also needs=

>    to handle resource control interms of various other parameters such
>    as priority of request, QoS, Operations that can be performed on
>    resource by various clients.

I'm not sure what you mean with those points. Priority of requests and=20
QoS could be parameters that have a bearing on what kind of access token =

you get, but they are certainly out of scope for ACE.
The operations that clients can perform on the resource are supposed to=20
either be encoded in the token, or available through introspection by=20
ways of the "scope" of an OAuth token.

> The draft (draft-seitz-ace-oauth-authz)
>    talks about how to provide admission control (conditional
>    authorization) for resource access from client device, but it does
>    not consider constrained device access from another constrained
>    device.

That is simply not correct. If you look at section 6.1 of
draft-ietf-ace-oauth-authz-01, this deployment example deals with the=20
case of a constrained client accessing a constrained resource server.

Maybe you have identified other requirements that are not currently=20
covered by our draft, or that are unclear in the current document. If=20
that is the case, please explain to the group what these requirements=20
are, so that we can discuss them and try to find the best solution.

I'd also like to clarify what you mean with 'Admission Control' vs=20
'Resource Control', the distinction does not seem very useful to me at=20
this point, so perhaps I'm missing something.

Regards,

Ludwig Seitz

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms070107030704060205040802
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms070107030704060205040802--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Mon, 18 Apr 2016 19:00:48 GMT";
	modification-date="Mon, 18 Apr 2016 19:00:48 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2B875blreml509mbbchi_--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Wed, 20 Apr 2016 06:10:39 GMT";
	modification-date="Wed, 20 Apr 2016 06:10:39 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: <ace@ietf.org>
References: <mailman.46.1461006006.23559.ace@ietf.org>
 <D6EBB546995C064A9492E8E27F62D90D0AA2B875@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2B875@blreml509-mbb.china.huawei.com>
Date: Tue, 19 Apr 2016 10:10:31 +0200
Message-ID: <5715E7F7.80604@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms030306080300090409030305"
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 12
Message: 2
MIME-Version: 1.0

--------------ms030306080300090409030305
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-19 08:58, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> I have a quick look on your draft. We are happy even to discuss about
> our draft and can collaborate.
>
> Plz find my few inline comments below:
>
> Actually that draft is not so much about pre-configuring endpoints
> with tokens, the idea behind OAuth is that you supply these tokens on
> demand, i.e. when a client tries to access a resource on a server.
>
> Btw: The reference is wrong, it's now draft-ietf-ace-oauth-authz
>
> ----> Thanks for bringing me to notice the new draft
> "draft-ietf-ace-oauth-authz-01"

----> Yes, these tokens are not
> configured at the endpoints, those are at AS, my doubt is about how
> AS can make dynamic configuration of security policies about RS, and
> clients. Does there be any frequent updates about policies from RS to
> AS.
>

The RS is not supposed to manage policies at the AS. Managing access=20
control policies at the AS is the job of the Resource Owner RO (i.e. the =

entity in charge of RS). Since the AS and RO are not considered to be=20
constrained devices, normal web tools can be used for that. Furthermore=20
since the AS is not constrained it is considered to be connected at all=20
times, thus frequent access control policy updates are possible.
How AS are implemented in detail is not in scope for ACE, you might be=20
able to get some feedback on that from people at the OAuth WG.

> I'm not sure what you mean with those points. Priority of requests
> and QoS could be parameters that have a bearing on what kind of
> access token you get, but they are certainly out of scope for ACE.
> The operations that clients can perform on the resource are supposed
> to either be encoded in the token, or available through introspection
> by ways of the "scope" of an OAuth token.
>
> ---> Authorization server provides resource access to client by
> giving access tokens to client that includes only security context,
> and kind of protocol access.

The token only includes very few parameters indeed, but the policies the =

AS uses to determine what token a client can get in a specific situation =

can be as complex as you like (e.g. depending on requested QoS or=20
whatever else).

Btw: I really don't know what exactly you mean with 'security context'=20
and 'protocol access', in order to avoid misunderstandings it would be=20
good to get to a common understanding on the terms we use.


---> Suppose RS cannot handle any
> request at that time, and some other similar resource can handle the
> request. Does the RS will update to AS?. If not, then request should
> not be allowed.

You are aware that in some usecases the RS is not even be able to=20
communicate with AS?

Note however that an access token might be valid for more than just one=20
specific RS, so in the case you describe above, where several RS could=20
satisfy the client's request, the AS could issue such a token to the=20
client, and the client could contact all the matching RS using the same=20
token until it finds one that can satisfy its request.

> Here the check is not happened based on the resource
> management. Only protocol operations like (PUT,POST,GET etc) may not
> be sufficient to distinguish the resource access. Resource oriented
> operations are more appropriate for resource control (for ex. for
> resource IP Camera, the operations allowed are {"turn it up", "turn
> it down", "play", "pause"}).

Such resource oriented operations can be encoded in an access token as=20
well using a different set of OAuth scopes. The ACL defined in
draft-bormann-core-ace-aif is just one example specific to protocol=20
operations. This will probably pan out for IoT the same way it has for=20
Web OAuth: There will be many different application specific uses scope, =

that define resource oriented permissions similar to those you listed=20
above.
See https://www.brandur.org/oauth-scope for an overview of how people=20
have used scopes differently to implement application/resource specific=20
permissions.

> Centralized resource control is required
> to admit client request. On what basis these tokens assigned is very
> important in constrained environments. only based on security context
> is not sufficient to authorize the resource. Authorization should
> include both admission and resource control. There should be some
> decision making required to provide access controls on resource
> access not only just by the security context.

Again it is hard for me to discuss your points unless I know what you=20
mean with 'security context', 'admission control' and 'resource=20
control'. Could you please clarify these terms?

Note that there is centralized control today in OAuth through the AS.

--> Admission control
> does not have to consider about resource management, but resource
> control should consider. And, any access control mechanism should
> include both admission and resource control. Permission to access a
> resource is an authorization. So, managing and monitoring of access
> controls of a resource is also a part of resource access.
>
> Moreover, other few queries about draft-ietf-ace-oauth-authz-01:
>
--->resource server is involved in processing the access token which
> is supplied as payload from client request. Or in other case, it has
> to construct new introspection request to AS and verify the access
> token of client. Which burdens the resource heavily due to limited
> memory.
--->why can't this be delegated to some intermediate server
> that do access token verification on behalf of RS.

The RS would still have to get the results from the intermediate server=20
in a secure way and verify that they are correct.

a.) In some usecases this does not work at all because the RS has no=20
connectivity
b.) In most cases I expect that verifying the intermediate servers=20
assertions and maintaining a secure connection to this intermediate=20
server is going to be at least as burdensome for the RS as just=20
verifying token itself.

Note that the idea is that the AS makes an access control decision,=20
which is a heavyweight process, it encodes this decision into an access=20
token. The RS then only enforces the decision made by the AS, and for=20
that it has to verify the token, which is supposed to be a lightweight=20
process.

--->Does the RS
> has to do this verification of access request for each client and
> resource request?.
>
Access requests are verified by the AS, the RS only matches the resource =

request against the token to see if the token authorizes this resource=20
request.


Regards,

Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms030306080300090409030305
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030306080300090409030305--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Tue, 19 Apr 2016 08:10:52 GMT";
	modification-date="Tue, 19 Apr 2016 08:10:52 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2BF65blreml509mbbchi_--



From nobody Wed Apr 20 00:15:21 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87FD512EBA7 for <ace@ietfa.amsl.com>; Wed, 20 Apr 2016 00:15:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 644FjblXYo1y for <ace@ietfa.amsl.com>; Wed, 20 Apr 2016 00:15:17 -0700 (PDT)
Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97B5A12D78F for <ace@ietf.org>; Wed, 20 Apr 2016 00:15:16 -0700 (PDT)
Received: by mail-lb0-x22c.google.com with SMTP id ys16so4265069lbb.3 for <ace@ietf.org>; Wed, 20 Apr 2016 00:15:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=APmwrsX3Uqf4WzgmPUUawYT6Uktk2DGwEu7PHgL9FoQ=; b=a9zVXvz9RJUbXbXwR/8Kyje6Z2isex+Or9GcjlMYfxGHmsdSVscIUr+ltFvtQG62wt 7VT40EmGtbCDXeVtqCfF6q+1NnA5S/79zCTfV48C5FapJDyhDrttfQKd9LU1eS6r6tQR ZmGs12d1uBN8MBPRdkfKJA8HDLpqSAYUIVu768u8VfXhp70W2z/QdTARoX6j8VxlUdtD achLwkel4uI7R3y/f/h9jdlzvy+H86+a/Bq5SnSkxJmbslSix6GU7V7pNLuued4kG/KF 1isTKrni+PyZdMa1hXMeyAS18Xcc/ZvMGSL6Y5TSbFChzyduFNvnbQmtlxor+MNViUol Dc8A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=APmwrsX3Uqf4WzgmPUUawYT6Uktk2DGwEu7PHgL9FoQ=; b=bTEJcJgiHIEeHpBBCVxm5LR7m/Gyh2KoraHi0vrJat9v+LZ2ULbquaQmW+kAfS+LGI ysoR6W9WQItfEL4JiKuUWJkLdQPK4NyYJ9g3wcduImHQr0Cg4wAW9sDg6WdQkrvISmrT eEyOmkqkNiXOTlPyxtmOu98yn8m7NHdwDPVX63IQ0LvIH9ylMFUOba1wO3eNkkaBg8Sy iHbLms5qhDwrar190YesJcOG1rSfBP1o36T+Smmh39ccYXSg5/XQUkI6oLGVRPCyhcOP 8cr9QmnfeXxzgyLey8w+xWEL3dDDN/UVNzjlox7hQC18gp9rQ6zHjGcTvILZXLVByKhJ U3vA==
X-Gm-Message-State: AOPr4FW0Tz1LTSp8a7cp1a3GUTVFYBUkUaO7UvaKE8Ego4dwWKzMiEPOhhszEHaRJYbuhpts
X-Received: by 10.112.13.130 with SMTP id h2mr2923608lbc.91.1461136514727; Wed, 20 Apr 2016 00:15:14 -0700 (PDT)
Received: from [192.168.0.166] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id um4sm817047lbb.1.2016.04.20.00.15.13 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Wed, 20 Apr 2016 00:15:13 -0700 (PDT)
To: ace@ietf.org
References: <mailman.1171.1461053439.4402.ace@ietf.org> <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <57172C7B.9010607@sics.se>
Date: Wed, 20 Apr 2016 09:15:07 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms060205060008050105080001"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/sj2s8kgLkVZXOZE3-onGF0-w6KM>
Subject: Re: [Ace] discussion on draft-vasu-ace-core-access-privilege-provisioning-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Apr 2016 07:15:19 -0000

This is a cryptographically signed message in MIME format.

--------------ms060205060008050105080001
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-20 08:10, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> Plz find the below comment inline :
>
> Btw: I really don't know what exactly you mean with 'security
> context' and 'protocol access', in order to avoid misunderstandings
> it would be good to get to a common understanding on the terms we
> use.
>
> ----> A Security Context is an object that captures all
> security-related information, consider below access token example
> specified in the draft that considers only the security related
> information (i.e. security context) { "aud" :
> "tempSensorInLivingRoom", "iat" : "1360189224", "cnf" : { "jwk" : {
> "kid" : b64'1Bg8vub9tLe1gHMzV76e8', "kty" : "EC", "crv" : "P-256",
> "x" : b64'f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU', "y" :
> b64'x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0' } } }
>
> ----> protocol access such as DTLS Response-Payload : {
> "access_token" : b64'SlAV32hkKG ...', "token_type" : "pop", "csp" :
> "DTLS", "key" : b64'eyJhbGciOiJSU0ExXzUi ...' }

Ok good! We have a common understanding of security context.
If I understand you correctly you are suggesting that the token should=20
carry more information than just security context, right?

Note that the security context alone already makes the tokens quite=20
large, and thus not ideal for constrained networks, so one should be=20
very careful about adding even more data to this format.

I would suggest the following approach: Have a look at what is done in=20
the "Web" world with OAuth. If it's not done there, there is probably a=20
good reason for it. To my knowledge OAuth does not deal with resource=20
availability, service level agreements, QoS, and resource manageability.
I would venture the guess that this is simply because things would get=20
very messy if you mixed up access control with such resource control issu=
es.

> You are aware that in some usecases the RS is not even be able to
> communicate with AS?
>
> Note however that an access token might be valid for more than just
> one specific RS, so in the case you describe above, where several RS
> could satisfy the client's request, the AS could issue such a token
> to the client, and the client could contact all the matching RS using
> the same token until it finds one that can satisfy its request.

>--> suppose if client is a constrained device, then also it has to send
> request to all RS's ?
--> It may be a overhead in network aend burden
 > on constrained client.

That's a scheduling problem and not an access control problem and thus=20
out of scope for ACE. This could for example be handled by a proxy that=20
dispatches the client's request to the right RS.

> Such resource oriented operations can be encoded in an access token
> as well using a different set of OAuth scopes. The ACL defined in
> draft-bormann-core-ace-aif is just one example specific to protocol
> operations. This will probably pan out for IoT the same way it has
> for Web OAuth: There will be many different application specific uses
> scope, that define resource oriented permissions similar to those you
> listed above. See https://www.brandur.org/oauth-scope for an overview
> of how people have used scopes differently to implement
> application/resource specific permissions.
>
> ---> yes, scope parameters can be used to encode the resource
> specific permissions and operations.
>
>
> Again it is hard for me to discuses your points unless I know what you
> mean with 'security context', 'admission control' and 'resource
> control'. Could you please clarify these terms?

---> Admission control: admission control is realized by accepting or
> refusing the request for the resources. It has the defined policies to
 > admit/deny the request. These policies might be made upon security inf=
o.

That would be 'Access Control' in the terms I've been using, this is in=20
scope for ACE.

---> Resource control: resource control defines extra policies based on
> resource availability, service level agreements and QoS, and resource
> manageability. (you can refer section 6.4 of
> draft-vasu-ace-core-access-privilege-provisioning-00)
>

This is not in scope for ACE. Furthermore I don't think individual=20
constrained devices should handle this kind of things, they are simply=20
not well-equipped to do so. This should be handled by back-end devices=20
and enforced by gateways or proxies. Perhaps this could influence the=20
policies governing what access tokens the AS issues.


[...]
---> In my
> opinion, RS may not have to verify the token each time the resource
> access done.
>

Depends on what you mean with "verify". The signature of a JWT/CWT has=20
to be verified once only, as well as the audience (i.e. which RS the=20
token applies to), but expiration, and scope have to be checked for each =

resource access. If you don't have a secure session, you also need to=20
check the binding between client and token (see Proof-of-Possession in=20
OAuth) for every access.

/Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms060205060008050105080001
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms060205060008050105080001--


From nobody Wed Apr 20 22:36:21 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 247EE12E468 for <ace@ietfa.amsl.com>; Wed, 20 Apr 2016 22:36:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mBvmkb21VGkz for <ace@ietfa.amsl.com>; Wed, 20 Apr 2016 22:36:16 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51A5512E445 for <ace@ietf.org>; Wed, 20 Apr 2016 22:36:15 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml707-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CIA73291; Thu, 21 Apr 2016 05:36:12 +0000 (GMT)
Received: from BLREML405-HUB.china.huawei.com (10.20.4.41) by lhreml707-cah.china.huawei.com (10.201.5.199) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 21 Apr 2016 06:36:06 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML405-HUB.china.huawei.com ([10.20.4.41]) with mapi id 14.03.0235.001; Thu, 21 Apr 2016 11:05:58 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: Ace Digest, Vol 29, Issue 15
Thread-Index: AQHRmzbiYXl3KERUvEqk7M47ctqviJ+T5M8w
Date: Thu, 21 Apr 2016 05:35:57 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2C6F6@blreml509-mbb.china.huawei.com>
References: <mailman.32.1461178807.12726.ace@ietf.org>
In-Reply-To: <mailman.32.1461178807.12726.ace@ietf.org>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: multipart/mixed; boundary="_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020206.571866CD.00D6, ss=1, re=0.000, recu=0.000, reip=0.000,  cl=1, cld=1, fgs=0, ip=169.254.1.138, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: c19ec94bddc043a61e41a754d883550c
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/CZnNsSOpLO_MpAZgX-RM2IQadZA>
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 15
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Apr 2016 05:36:20 -0000

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (1 messages)"
Content-Description: Today's Topics (1 messages)
Content-Disposition: attachment; filename="Today's Topics (1 messages)";
	size=119; creation-date="Wed, 20 Apr 2016 19:00:20 GMT";
	modification-date="Wed, 20 Apr 2016 19:00:20 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIFJlOiBkaXNjdXNzaW9uIG9uDQogICAgICBkcmFmdC12
YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9uaW5nLTAwIChMdWR3aWcgU2Vp
dHopDQo=

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Thu, 21 Apr 2016 05:35:57 GMT";
	modification-date="Thu, 21 Apr 2016 05:35:57 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: <ace@ietf.org>
References: <mailman.1171.1461053439.4402.ace@ietf.org>
 <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
Date: Wed, 20 Apr 2016 09:15:07 +0200
Message-ID: <57172C7B.9010607@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms060205060008050105080001"
Subject: Re: [Ace] discussion on
 draft-vasu-ace-core-access-privilege-provisioning-00
Message: 1
MIME-Version: 1.0

--------------ms060205060008050105080001
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-20 08:10, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> Plz find the below comment inline :
>
> Btw: I really don't know what exactly you mean with 'security
> context' and 'protocol access', in order to avoid misunderstandings
> it would be good to get to a common understanding on the terms we
> use.
>
> ----> A Security Context is an object that captures all
> security-related information, consider below access token example
> specified in the draft that considers only the security related
> information (i.e. security context) { "aud" :
> "tempSensorInLivingRoom", "iat" : "1360189224", "cnf" : { "jwk" : {
> "kid" : b64'1Bg8vub9tLe1gHMzV76e8', "kty" : "EC", "crv" : "P-256",
> "x" : b64'f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU', "y" :
> b64'x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0' } } }
>
> ----> protocol access such as DTLS Response-Payload : {
> "access_token" : b64'SlAV32hkKG ...', "token_type" : "pop", "csp" :
> "DTLS", "key" : b64'eyJhbGciOiJSU0ExXzUi ...' }

Ok good! We have a common understanding of security context.
If I understand you correctly you are suggesting that the token should=20
carry more information than just security context, right?

Note that the security context alone already makes the tokens quite=20
large, and thus not ideal for constrained networks, so one should be=20
very careful about adding even more data to this format.

I would suggest the following approach: Have a look at what is done in=20
the "Web" world with OAuth. If it's not done there, there is probably a=20
good reason for it. To my knowledge OAuth does not deal with resource=20
availability, service level agreements, QoS, and resource manageability.
I would venture the guess that this is simply because things would get=20
very messy if you mixed up access control with such resource control issu=
es.

> You are aware that in some usecases the RS is not even be able to
> communicate with AS?
>
> Note however that an access token might be valid for more than just
> one specific RS, so in the case you describe above, where several RS
> could satisfy the client's request, the AS could issue such a token
> to the client, and the client could contact all the matching RS using
> the same token until it finds one that can satisfy its request.

>--> suppose if client is a constrained device, then also it has to send
> request to all RS's ?
--> It may be a overhead in network aend burden
 > on constrained client.

That's a scheduling problem and not an access control problem and thus=20
out of scope for ACE. This could for example be handled by a proxy that=20
dispatches the client's request to the right RS.

> Such resource oriented operations can be encoded in an access token
> as well using a different set of OAuth scopes. The ACL defined in
> draft-bormann-core-ace-aif is just one example specific to protocol
> operations. This will probably pan out for IoT the same way it has
> for Web OAuth: There will be many different application specific uses
> scope, that define resource oriented permissions similar to those you
> listed above. See https://www.brandur.org/oauth-scope for an overview
> of how people have used scopes differently to implement
> application/resource specific permissions.
>
> ---> yes, scope parameters can be used to encode the resource
> specific permissions and operations.
>
>
> Again it is hard for me to discuses your points unless I know what you
> mean with 'security context', 'admission control' and 'resource
> control'. Could you please clarify these terms?

---> Admission control: admission control is realized by accepting or
> refusing the request for the resources. It has the defined policies to
 > admit/deny the request. These policies might be made upon security inf=
o.

That would be 'Access Control' in the terms I've been using, this is in=20
scope for ACE.

---> Resource control: resource control defines extra policies based on
> resource availability, service level agreements and QoS, and resource
> manageability. (you can refer section 6.4 of
> draft-vasu-ace-core-access-privilege-provisioning-00)
>

This is not in scope for ACE. Furthermore I don't think individual=20
constrained devices should handle this kind of things, they are simply=20
not well-equipped to do so. This should be handled by back-end devices=20
and enforced by gateways or proxies. Perhaps this could influence the=20
policies governing what access tokens the AS issues.


[...]
---> In my
> opinion, RS may not have to verify the token each time the resource
> access done.
>

Depends on what you mean with "verify". The signature of a JWT/CWT has=20
to be verified once only, as well as the audience (i.e. which RS the=20
token applies to), but expiration, and scope have to be checked for each =

resource access. If you don't have a secure session, you also need to=20
check the binding between client and token (see Proof-of-Possession in=20
OAuth) for every access.

/Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms060205060008050105080001
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ
BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll
bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3
aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF
B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK
/swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji
/GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0
+jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y
z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84
MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v
YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug
KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB
Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG
BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh
cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF
KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D
I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f
qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd
vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6
V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw
DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x
KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT
IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw
MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn
BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy
dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt
TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf
a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx
7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D
IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg
MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T
AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv
bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z
dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz
L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv
GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0
dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB
i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB
OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets
D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI
NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA
0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf
1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/
tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH
2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9
VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp
/2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG
A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa
otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
MBwGCSqGSIb3DQEJBTEPFw0xNjA0MjAwNzE1MDdaMC8GCSqGSIb3DQEJBDEiBCDVfbzrwq/z
MDZoxWM6QOv7qUG8nduwdvs84L3XFcEOiTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB
KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC
AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG
A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl
cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu
dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE
BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp
ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD
QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQAGzqmLHcQ5r9c3RMTcMvQB
OITUAPLBXU86YrnkxZQ3r/aZCxbxSr7iPKiVj98ZJ32YbWpdfHTLjtvSWp5eWMaMmxx237pG
KCm6pwEx31nwKoWNKrlm9k0eoIthSeDDMJ+MTwWRQEaNze4M6UfEtVCgo2M02H9NZtakVFZF
g2KwzL28/ZgzdC738fMU+q/+08ZE2tMsTwzJVdn3tuOp4+QNrmFL7CAjqjZa4tYMfw6ZSJft
+0vtJn56crsgXYe9iaGTkJX8HQgJ3k42urs0Gy4cSG/Qj0WxwOd8neaNV+uzbdOS4khg+a6z
deqnWUaux0ZpNk5YZPy2TSxhztuJu6egAAAAAAAA

--------------ms060205060008050105080001--

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Wed, 20 Apr 2016 19:00:20 GMT";
	modification-date="Wed, 20 Apr 2016 19:00:20 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_--


From nobody Thu Apr 21 04:25:50 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E738412EBAD for <ace@ietfa.amsl.com>; Thu, 21 Apr 2016 04:25:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xtxz6keJ81jq for <ace@ietfa.amsl.com>; Thu, 21 Apr 2016 04:25:46 -0700 (PDT)
Received: from mail-lf0-x22e.google.com (mail-lf0-x22e.google.com [IPv6:2a00:1450:4010:c07::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D3F612EB9F for <ace@ietf.org>; Thu, 21 Apr 2016 04:25:46 -0700 (PDT)
Received: by mail-lf0-x22e.google.com with SMTP id g184so58582892lfb.3 for <ace@ietf.org>; Thu, 21 Apr 2016 04:25:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=NkV+ry7uk5CV25IjHb4XoPEOFchkUJkQdCvSVo9YVqc=; b=Sc8DCHzWjA34SKI5rr+nCltrKgHO3TaYv26y0Geso8+8JFfyTHSfTejiaAOIzKDxyF rAnmKZUz1GR0Y7Ksr+csCuLXv7mS/xfvO6DjFs6Q+RRw1BLZtL83dty5mXJ0rK3QRwyS tIQVDjTd4RCpzzYlgY61b07qFPerDtslws/1pdyf65Dn+oauCDap32WFtoZ/kG13Qjcn mXgQ0qganrSFgBf6FFhaQ+JEO4gQPGDvFgjHCPJEiTiNH7McnhcN1FJkgRHC224zwYUZ FZc9eWqGziFehF+2A+yEfafRKeUPYTUD+aNmHA3AEKRWtcV09Vx3bfOsz7u4CNulTUUw B8EQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=NkV+ry7uk5CV25IjHb4XoPEOFchkUJkQdCvSVo9YVqc=; b=TGP80rVofOJR4wm7w3HugGoMPWvRL4My7nqyt9zwAseyRTofhrvv+shL07dTECfu+F tjeiJOkBFlxiaARsSPK/jnSyRses5guhqlOgS7dLf/WQAwSnvYzrLiFfmtIdAt/QC7bM PVMXLycwci6KFazSAA6bLxBMVSe1xUVy7sRnF3pX7JVyl9qLAEfhNjwSrw69+6PCJ/4t N8a4H8NNXQ4bxRd64PXzX0jKygUdD9EWWSktjwkt2VoFFUkDTlaaXmNOphSW6G8rBTes dyamIB2zw0DB8LdyV/c9KZLd6jEkyTyMPeb/qpWNCeB2JeHnvTFsQ3NmfxT9ug73Wp7L wnnQ==
X-Gm-Message-State: AOPr4FWrggPxH2IOLFCWYpra6tqWFomuiu02dLLxZXvdLp8V7IUnjIiO0vTmUExAJAyR9sz5
X-Received: by 10.25.90.73 with SMTP id o70mr6198847lfb.80.1461237944281; Thu, 21 Apr 2016 04:25:44 -0700 (PDT)
Received: from [192.168.0.166] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id hm4sm450001lbb.33.2016.04.21.04.25.43 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Thu, 21 Apr 2016 04:25:43 -0700 (PDT)
To: ace@ietf.org
References: <mailman.32.1461178807.12726.ace@ietf.org> <D6EBB546995C064A9492E8E27F62D90D0AA2C6F6@blreml509-mbb.china.huawei.com>
From: Ludwig Seitz <ludwig@sics.se>
Message-ID: <5718B8B6.9090206@sics.se>
Date: Thu, 21 Apr 2016 13:25:42 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2C6F6@blreml509-mbb.china.huawei.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030801030509070906010005"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/tAoYNakpcJMSDZKP2I8Tj6X8Sic>
Subject: Re: [Ace] discussion on draft-vasu-ace-core-access-privilege-provisioning-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Apr 2016 11:25:49 -0000

This is a cryptographically signed message in MIME format.

--------------ms030801030509070906010005
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-21 07:35, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> Plz find my inline comments:
>
> -->Admission control, and resource control together will provide
> increased security of resource access by providing limited access
> with various other provisioning parameters.
>
Access control already provides limited access on it's own, so I would
need a bit more concrete convincing on why mixing it up with resource
control would increase security.

Usually when you mix up solutions for different problems, the
increased complexity goes a long way to reduce security. You are simply
creating more ways of getting it wrong.

> Ok good! We have a common understanding of security context. If I
> understand you correctly you are suggesting that the token should
> carry more information than just security context, right? Note that
> the security context alone already makes the tokens quite large, and
>  thus not ideal for constrained networks, so one should be very
> careful about adding even more data to this format.

> --->yes, that's why it needs to be provisioned by resource control
> policies offline at the provisioning server and provide access
> tokens to clients.
>

I am not sure I understand what you are trying to say here. Who
provisions resource control policies to whom? And how is this related to
the access token?

Is the provisioning server something like the Authorization Server (AS)=20
in our design?

Do you expect a RS to be connected to a PS at all times? (Note that we=20
have use cases where that is not possible or not cost-effective)

Alternatively, do you expect to be able to provision both access control =

policies and resource control policies to an RS at commissioning time=20
and then enforce them offline at the RS when a client requests access?

> I would suggest the following approach: Have a look at what is done
> in the "Web" world with OAuth. If it's not done there, there is
> probably a good reason for it. To my knowledge OAuth does not deal
> with resource availability, service level agreements, QoS, and
> resource manageability. I would venture the guess that this is simply
> because things would get very messy if you mixed up access control
> with such resource control issues.
>
> ---> yes, oAuth does not deal the resource control. Resource control
>  also needs a  privilege mechanism to provision the request along
> with admission control.
>

So if OAuth does not deal with resource control, why should the ACE=20
solution (which is based on OAuth) do so?

[...]
> That's a scheduling problem and not an access control problem and
> thus out of scope for ACE. This could for example be handled by a
> proxy that dispatches the client's request to the right RS.
>
> ---> of course, it is a scheduling problem. But scheduling problem
> because of an access control mechanism. proxy can be a provisioning
> server here.

Why would the scheduling problem be caused by the access control=20
mechanism? That causality doesn't seem obvious to me, please explain in=20
more detail.

=2E..
> This is not in scope for ACE. Furthermore I don't think individual
> constrained devices should handle this kind of things, they are
> simply not well-equipped to do so. This should be handled by back-end
> devices and enforced by gateways or proxies. Perhaps this could
> influence the policies governing what access tokens the AS issues.
>
 >
  >-->yes, that's why commissioning agents will make the policy rules
> about the registered services to provisioning server, which can
> ultimately influence the access tokens/grants issued to the client
> devices.

Here in ACE we are not trying to standardize how an Authorization Server =

(or provisioning server) decides which client is issued which kind of=20
access token (i.e. the access control decision process).

It seems to me that your goal is to include resource control aspects=20
into that decision, and that is fine by me, but not relevant for the ACE =

work, which deals with encoding the access control decision into a=20
token, getting the token to the Resource Server and then having the RS=20
enforce that access control decision.


Regards,

Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=E4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms030801030509070906010005
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030801030509070906010005--


From nobody Thu Apr 21 06:04:17 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D045A12D527 for <ace@ietfa.amsl.com>; Thu, 21 Apr 2016 06:04:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lDue2kjJbqL9 for <ace@ietfa.amsl.com>; Thu, 21 Apr 2016 06:04:13 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 430E712B031 for <ace@ietf.org>; Thu, 21 Apr 2016 06:04:12 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml702-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CMW54370; Thu, 21 Apr 2016 13:04:09 +0000 (GMT)
Received: from BLREML408-HUB.china.huawei.com (10.20.4.47) by lhreml702-cah.china.huawei.com (10.201.5.99) with Microsoft SMTP Server (TLS) id 14.3.235.1; Thu, 21 Apr 2016 14:04:08 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML408-HUB.china.huawei.com ([10.20.4.47]) with mapi id 14.03.0235.001; Thu, 21 Apr 2016 18:33:57 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: Ace Digest, Vol 29, Issue 16
Thread-Index: AQHRm8CgBWfWigtj/EeZ1/17Ua7ntZ+UXhQw
Date: Thu, 21 Apr 2016 13:03:57 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
References: <mailman.1679.1461237949.4402.ace@ietf.org>
In-Reply-To: <mailman.1679.1461237949.4402.ace@ietf.org>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: multipart/mixed; boundary="_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090203.5718CFCA.011E, ss=1, re=0.000, recu=0.000, reip=0.000,  cl=1, cld=1, fgs=0, ip=169.254.1.138, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: 3631b70c21fda2b4707467e2e6ee67f9
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/HQCqwllorFVjO5EuJ9G8SB1U_tU>
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 16
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Apr 2016 13:04:16 -0000

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (2 messages)"
Content-Description: Today's Topics (2 messages)
Content-Disposition: attachment; filename="Today's Topics (2 messages)";
	size=177; creation-date="Thu, 21 Apr 2016 11:26:19 GMT";
	modification-date="Thu, 21 Apr 2016 11:26:19 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIFJlOiBBY2UgRGlnZXN0LCBWb2wgMjksIElzc3VlIDE1
IChWYXN1IEthbnR1YnVrdGEpDQogICAyLiBSZTogZGlzY3Vzc2lvbiBvbg0KICAgICAgZHJhZnQt
dmFzdS1hY2UtY29yZS1hY2Nlc3MtcHJpdmlsZWdlLXByb3Zpc2lvbmluZy0wMCAoTHVkd2lnIFNl
aXR6KQ0K

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Thu, 21 Apr 2016 13:03:57 GMT";
	modification-date="Thu, 21 Apr 2016 13:03:57 GMT"

List-Post: <mailto:ace@ietf.org>
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
Precedence: list
To: "ace@ietf.org" <ace@ietf.org>
References: <mailman.32.1461178807.12726.ace@ietf.org>
In-Reply-To: <mailman.32.1461178807.12726.ace@ietf.org>
Date: Thu, 21 Apr 2016 05:35:57 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2C6F6@blreml509-mbb.china.huawei.com>
Content-Type: multipart/mixed;
	boundary="_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_"
Subject: Re: [Ace] Ace Digest, Vol 29, Issue 15
Message: 1
MIME-Version: 1.0

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (1 messages)"
Content-Description: Today's Topics (1 messages)
Content-Disposition: attachment; filename="Today's Topics (1 messages)";
	size=119; creation-date="Wed, 20 Apr 2016 19:00:20 GMT";
	modification-date="Wed, 20 Apr 2016 19:00:20 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIFJlOiBkaXNjdXNzaW9uIG9uDQogICAgICBkcmFmdC12
YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9uaW5nLTAwIChMdWR3aWcgU2Vp
dHopDQo=

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Thu, 21 Apr 2016 05:35:57 GMT";
	modification-date="Thu, 21 Apr 2016 05:35:57 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: <ace@ietf.org>
References: <mailman.1171.1461053439.4402.ace@ietf.org>
 <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2BF65@blreml509-mbb.china.huawei.com>
Date: Wed, 20 Apr 2016 09:15:07 +0200
Message-ID: <57172C7B.9010607@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms060205060008050105080001"
Subject: Re: [Ace] discussion on
 draft-vasu-ace-core-access-privilege-provisioning-00
Message: 1
MIME-Version: 1.0

--------------ms060205060008050105080001
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-20 08:10, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> Plz find the below comment inline :
>
> Btw: I really don't know what exactly you mean with 'security
> context' and 'protocol access', in order to avoid misunderstandings
> it would be good to get to a common understanding on the terms we
> use.
>
> ----> A Security Context is an object that captures all
> security-related information, consider below access token example
> specified in the draft that considers only the security related
> information (i.e. security context) { "aud" :
> "tempSensorInLivingRoom", "iat" : "1360189224", "cnf" : { "jwk" : {
> "kid" : b64'1Bg8vub9tLe1gHMzV76e8', "kty" : "EC", "crv" : "P-256",
> "x" : b64'f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU', "y" :
> b64'x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0' } } }
>
> ----> protocol access such as DTLS Response-Payload : {
> "access_token" : b64'SlAV32hkKG ...', "token_type" : "pop", "csp" :
> "DTLS", "key" : b64'eyJhbGciOiJSU0ExXzUi ...' }

Ok good! We have a common understanding of security context.
If I understand you correctly you are suggesting that the token should=20
carry more information than just security context, right?

Note that the security context alone already makes the tokens quite=20
large, and thus not ideal for constrained networks, so one should be=20
very careful about adding even more data to this format.

I would suggest the following approach: Have a look at what is done in=20
the "Web" world with OAuth. If it's not done there, there is probably a=20
good reason for it. To my knowledge OAuth does not deal with resource=20
availability, service level agreements, QoS, and resource manageability.
I would venture the guess that this is simply because things would get=20
very messy if you mixed up access control with such resource control issu=
es.

> You are aware that in some usecases the RS is not even be able to
> communicate with AS?
>
> Note however that an access token might be valid for more than just
> one specific RS, so in the case you describe above, where several RS
> could satisfy the client's request, the AS could issue such a token
> to the client, and the client could contact all the matching RS using
> the same token until it finds one that can satisfy its request.

>--> suppose if client is a constrained device, then also it has to send
> request to all RS's ?
--> It may be a overhead in network aend burden
 > on constrained client.

That's a scheduling problem and not an access control problem and thus=20
out of scope for ACE. This could for example be handled by a proxy that=20
dispatches the client's request to the right RS.

> Such resource oriented operations can be encoded in an access token
> as well using a different set of OAuth scopes. The ACL defined in
> draft-bormann-core-ace-aif is just one example specific to protocol
> operations. This will probably pan out for IoT the same way it has
> for Web OAuth: There will be many different application specific uses
> scope, that define resource oriented permissions similar to those you
> listed above. See https://www.brandur.org/oauth-scope for an overview
> of how people have used scopes differently to implement
> application/resource specific permissions.
>
> ---> yes, scope parameters can be used to encode the resource
> specific permissions and operations.
>
>
> Again it is hard for me to discuses your points unless I know what you
> mean with 'security context', 'admission control' and 'resource
> control'. Could you please clarify these terms?

---> Admission control: admission control is realized by accepting or
> refusing the request for the resources. It has the defined policies to
 > admit/deny the request. These policies might be made upon security inf=
o.

That would be 'Access Control' in the terms I've been using, this is in=20
scope for ACE.

---> Resource control: resource control defines extra policies based on
> resource availability, service level agreements and QoS, and resource
> manageability. (you can refer section 6.4 of
> draft-vasu-ace-core-access-privilege-provisioning-00)
>

This is not in scope for ACE. Furthermore I don't think individual=20
constrained devices should handle this kind of things, they are simply=20
not well-equipped to do so. This should be handled by back-end devices=20
and enforced by gateways or proxies. Perhaps this could influence the=20
policies governing what access tokens the AS issues.


[...]
---> In my
> opinion, RS may not have to verify the token each time the resource
> access done.
>

Depends on what you mean with "verify". The signature of a JWT/CWT has=20
to be verified once only, as well as the audience (i.e. which RS the=20
token applies to), but expiration, and scope have to be checked for each =

resource access. If you don't have a secure session, you also need to=20
check the binding between client and token (see Proof-of-Possession in=20
OAuth) for every access.

/Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms060205060008050105080001
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms060205060008050105080001--

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Wed, 20 Apr 2016 19:00:20 GMT";
	modification-date="Wed, 20 Apr 2016 19:00:20 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_004_D6EBB546995C064A9492E8E27F62D90D0AA2C6F6blreml509mbbchi_--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Thu, 21 Apr 2016 13:03:57 GMT";
	modification-date="Thu, 21 Apr 2016 13:03:57 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: <ace@ietf.org>
References: <mailman.32.1461178807.12726.ace@ietf.org>
 <D6EBB546995C064A9492E8E27F62D90D0AA2C6F6@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2C6F6@blreml509-mbb.china.huawei.com>
Date: Thu, 21 Apr 2016 13:25:42 +0200
Message-ID: <5718B8B6.9090206@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms030801030509070906010005"
Subject: Re: [Ace] discussion on
 draft-vasu-ace-core-access-privilege-provisioning-00
Message: 2
MIME-Version: 1.0

--------------ms030801030509070906010005
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: quoted-printable

On 2016-04-21 07:35, Vasu Kantubukta wrote:
> Hi Ludwig Seitz,
>
> Plz find my inline comments:
>
> -->Admission control, and resource control together will provide
> increased security of resource access by providing limited access
> with various other provisioning parameters.
>
Access control already provides limited access on it's own, so I would
need a bit more concrete convincing on why mixing it up with resource
control would increase security.

Usually when you mix up solutions for different problems, the
increased complexity goes a long way to reduce security. You are simply
creating more ways of getting it wrong.

> Ok good! We have a common understanding of security context. If I
> understand you correctly you are suggesting that the token should
> carry more information than just security context, right? Note that
> the security context alone already makes the tokens quite large, and
>  thus not ideal for constrained networks, so one should be very
> careful about adding even more data to this format.

> --->yes, that's why it needs to be provisioned by resource control
> policies offline at the provisioning server and provide access
> tokens to clients.
>

I am not sure I understand what you are trying to say here. Who
provisions resource control policies to whom? And how is this related to
the access token?

Is the provisioning server something like the Authorization Server (AS)=20
in our design?

Do you expect a RS to be connected to a PS at all times? (Note that we=20
have use cases where that is not possible or not cost-effective)

Alternatively, do you expect to be able to provision both access control =

policies and resource control policies to an RS at commissioning time=20
and then enforce them offline at the RS when a client requests access?

> I would suggest the following approach: Have a look at what is done
> in the "Web" world with OAuth. If it's not done there, there is
> probably a good reason for it. To my knowledge OAuth does not deal
> with resource availability, service level agreements, QoS, and
> resource manageability. I would venture the guess that this is simply
> because things would get very messy if you mixed up access control
> with such resource control issues.
>
> ---> yes, oAuth does not deal the resource control. Resource control
>  also needs a  privilege mechanism to provision the request along
> with admission control.
>

So if OAuth does not deal with resource control, why should the ACE=20
solution (which is based on OAuth) do so?

[...]
> That's a scheduling problem and not an access control problem and
> thus out of scope for ACE. This could for example be handled by a
> proxy that dispatches the client's request to the right RS.
>
> ---> of course, it is a scheduling problem. But scheduling problem
> because of an access control mechanism. proxy can be a provisioning
> server here.

Why would the scheduling problem be caused by the access control=20
mechanism? That causality doesn't seem obvious to me, please explain in=20
more detail.

=2E..
> This is not in scope for ACE. Furthermore I don't think individual
> constrained devices should handle this kind of things, they are
> simply not well-equipped to do so. This should be handled by back-end
> devices and enforced by gateways or proxies. Perhaps this could
> influence the policies governing what access tokens the AS issues.
>
 >
  >-->yes, that's why commissioning agents will make the policy rules
> about the registered services to provisioning server, which can
> ultimately influence the access tokens/grants issued to the client
> devices.

Here in ACE we are not trying to standardize how an Authorization Server =

(or provisioning server) decides which client is issued which kind of=20
access token (i.e. the access control decision process).

It seems to me that your goal is to include resource control aspects=20
into that decision, and that is fine by me, but not relevant for the ACE =

work, which deals with encoding the access control decision into a=20
token, getting the token to the Resource Server and then having the RS=20
enforce that access control decision.


Regards,

Ludwig

--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=E4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se


--------------ms030801030509070906010005
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ
BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll
bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3
aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF
B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK
/swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji
/GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0
+jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y
z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84
MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v
YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug
KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB
Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG
BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh
cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF
KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D
I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f
qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd
vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6
V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw
DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x
KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT
IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw
MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn
BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy
dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt
TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf
a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx
7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D
IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg
MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T
AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv
bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z
dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz
L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv
GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0
dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB
i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB
OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets
D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI
NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA
0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf
1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/
tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH
2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9
VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp
/2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG
A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa
otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
MBwGCSqGSIb3DQEJBTEPFw0xNjA0MjExMTI1NDJaMC8GCSqGSIb3DQEJBDEiBCBEvNcffJO1
xCprK6OLYI0+MdOIB+XZEXbltzGjPvfUPDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB
KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC
AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG
A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl
cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu
dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE
BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp
ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD
QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQCitbbf6SnoBxqwq6VXJmOA
PqJv88N7VNpF/pCCkwMnoBwRUyuSCYc3OExUtNYhFVsCFMkgEAz7htkMXZ6kixzfT4jBNSyl
998gBJtpVOs8D8jbc/5yfyL+ehKM+NrqzChHyAnifyu+Phmw1DM8jo7jMYLo7mUe9MPaYubd
TTJE932wPLEYAzi1w98F8SaUh6YMjxYX8ehj5YRFMZboROZRxMP1ezoYiZHrqOm0nwLYLPeR
rI4VLHXCuaPPZd9McriwHnk0bdzLt5j3C2PC0qAHzECCAylJ5FygVZcuzN2eqVxI+e/A6j+4
OhZqfbwMFT8uxNHN36CrO+VQz22qnlXNAAAAAAAA

--------------ms030801030509070906010005--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Thu, 21 Apr 2016 11:26:19 GMT";
	modification-date="Thu, 21 Apr 2016 11:26:19 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2C958blreml509mbbchi_--


From nobody Fri Apr 22 01:58:22 2016
Return-Path: <ludwig@sics.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D60C12E35E for <ace@ietfa.amsl.com>; Fri, 22 Apr 2016 01:58:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level: 
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CXdDqWMm3np8 for <ace@ietfa.amsl.com>; Fri, 22 Apr 2016 01:58:18 -0700 (PDT)
Received: from mail-lb0-x229.google.com (mail-lb0-x229.google.com [IPv6:2a00:1450:4010:c04::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA87312DFCC for <ace@ietf.org>; Fri, 22 Apr 2016 01:58:17 -0700 (PDT)
Received: by mail-lb0-x229.google.com with SMTP id os9so40393095lbb.2 for <ace@ietf.org>; Fri, 22 Apr 2016 01:58:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:message-id:date:user-agent:mime-version :in-reply-to; bh=x7lkBWHHBl9YsipOf4ef3LS1ZArAW0TmCIY6sgiLBc4=; b=Nk3PVJqMDHHzXpHdP9VYMgwoY5cGqD9IzOoGGDQw0WyD2VB3PIZLl3A18eRMEfyuCK oK5q0bv7GPtZdoLhfz7aq+wIjb6dhXA/2A/IZrkr1MHK9euvoNSFWFfEZsWNKu1UATvE F711FToM039kxiSkecUofjnMGPqePr2Bxbk0YJrYNZrFzh+KeYNRsFcH8tulbtzZSdzO TYU6ONZ9qgiIF0CrpA7dg5cFSoBi7hIN0+x9jCz4oYfrj+wZnIpkLF/ym0Z0PQhJUHkm UcrHsgquV98e1CMlZ3SITEIpG0Kfee3eg5XVoVSJYAmactzlEhazzmCJwoG2GBQ+oT6p BicA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:message-id:date :user-agent:mime-version:in-reply-to; bh=x7lkBWHHBl9YsipOf4ef3LS1ZArAW0TmCIY6sgiLBc4=; b=dfXV4HETDVSsStnBr5BeA0sXFE7lzblCyuGBxlscgJxM9lFZvWXV1zkQnkJlxKes1t 1K2ROGJlLcIk45X+AO2q7kWmgzm+V8p4Dxm6cdG6MXk4iC/OKtSc4RFVu9w0wC+Fg+cw 5uYgQ53irUc8nzbcYKmr71IDparE70P46nE9OzWXwUmoBFHmH9nVC1dx6PycYQLlKvmb qr4dZwjDEn+Nl1UXybWNSo3S8PdsgbPWcv9Q/xkQfFErU0VdYdBU6JC1s8/xFajONkW5 wdTjmEAFvauXDNtxb6VB/MFhSKLRcEeNVy59P4MuZBT8qxPzbZsJaR2MHN38JDmwoW+w GELw==
X-Gm-Message-State: AOPr4FWW5bgOcwJjTlaw8pYRk/jEb6KVyg1AJqZWWiHmXMhrIZQkhLQQi/OrttwDeZQGsqQ+
X-Received: by 10.112.154.5 with SMTP id vk5mr2305015lbb.126.1461315496075; Fri, 22 Apr 2016 01:58:16 -0700 (PDT)
Received: from [192.168.0.166] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id ug7sm1359859lbb.9.2016.04.22.01.58.14 for <ace@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Fri, 22 Apr 2016 01:58:15 -0700 (PDT)
From: Ludwig Seitz <ludwig@sics.se>
To: ace@ietf.org
References: <mailman.1679.1461237949.4402.ace@ietf.org> <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
Message-ID: <5719E7A6.3@sics.se>
Date: Fri, 22 Apr 2016 10:58:14 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030600020601090402040700"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/buWQmqvWsHvF_Y6lfSk04tIkCNc>
Subject: Re: [Ace] discussion on draft-vasu-ace-core-access-privilege-provisioning-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Apr 2016 08:58:20 -0000

This is a cryptographically signed message in MIME format.

--------------ms030600020601090402040700
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hello,

I'm still trying to clarify the details of the approach you propose,
so please excuse the barrage of questions.

In figure 2 it looks like the RS has to do an online lookup at the AS to
get an access control decision while in figure 3 it seems as if the AS
itself executes the request on behalf of the client.

Both cases work fine if the RS can connect to the AS at the time of the
request, but if you look at RFC 7744 we have usecases where this is not
possible or not cost effective (e.g. in terms of battery usage). Have=20
you considered such usecases?

 From our discussion I got the impression that in your approach, both
access control and resource control policies are provisioned to the AS
only and not to the RS, but in figure 3 is seems like the RS makes some
access control decision towards the AS, I wonder based on which policies
that happens?

> Why would the scheduling problem be caused by the access control
> mechanism? That causality doesn't seem obvious to me, please explain
> in more detail.
> --> Here, If I am not wrong, you mentioned that same access tokens
> can be valid for multiple resources.

Right

> If access control does not consider resource availability and
> resources max capacity to handle the request. Then clients need to
> send the resource request to multiple resource servers. Then it may
> need a scheduling by a proxy.

As I said, the AS can very well consider resource control or scheduling=20
when making an access control decision, but the details of how the AS=20
makes access control decisions are not in scope for ACE.

I also get the feeling that you got hang up on my simplistic example of=20
a client sending a request to multiple resource servers. I guess a more=20
realistic example would be that there are proxies taking care of=20
scheduling, independently of the access control mechanism in place.=20
Alternatively you could imagine a setting where the client broadcasts or =

multicasts its request.

>
> It seems to me that your goal is to include resource control aspects
> into that decision, and that is fine by me, but not relevant for the
> ACE work, which deals with encoding the access control decision into
> a token, getting the token to the Resource Server and then having the
> RS enforce that access control decision. --> Can you suggest me,
> which group I can reach for?

I don't think there is an IETF working group on that topic.




> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Ace digest..."

Please note this ^^^^^^



/Ludwig


--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se



--------------ms030600020601090402040700
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ
BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD
ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll
bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3
aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF
B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK
/swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji
/GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0
+jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y
z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84
MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr
BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v
YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug
KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB
Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG
BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh
cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF
KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D
I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f
qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd
vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6
V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw
DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x
KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT
IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw
MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn
BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy
dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt
TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf
a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx
7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D
IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg
MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T
AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv
bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z
dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz
L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv
GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0
dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB
i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB
OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets
D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI
NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA
0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf
1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/
tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH
2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9
VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp
/2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG
A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa
otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
MBwGCSqGSIb3DQEJBTEPFw0xNjA0MjIwODU4MTRaMC8GCSqGSIb3DQEJBDEiBCDRMle8cYKK
Fk2x6Z5o8bLikZPR5+00Gc3YRZ4fKABMrTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB
KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC
AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG
A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl
cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu
dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE
BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp
ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD
QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQC1KOss9APL/GQ0K2K6YJrO
lJWvtbncVTjrrts33yLhm9HKphQPlxJmnEay7Pf5J3OUZwZGmZe4uSAj/+dWyuxSnygo1OBW
7qGksqqohI+6z6qvv/anBCNPEHLd9+u5A86HRr1oU4PyPRnK5mgRxpAreI2XXKyWGeB4Msq5
IVCyhPlP4/UHlmmyDmA7yLwi3XZVa0MQp343+e94x/QnyFkZord/0XgYE8Xi2x9HrarmoIUq
FvozSvMtc50c21vNkirXxSAVUwOLPVSSs+ItBz3S4kQy/ptZQKHuAxcl/z6ANfL3gFSZwkru
xSITrX7T8Wp74dmIJUyg8tNMSISw5Tp6AAAAAAAA
--------------ms030600020601090402040700--


From nobody Fri Apr 22 04:00:43 2016
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAFF912E668 for <ace@ietfa.amsl.com>; Fri, 22 Apr 2016 04:00:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.597
X-Spam-Level: 
X-Spam-Status: No, score=-3.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rRjOgN0irw9g for <ace@ietfa.amsl.com>; Fri, 22 Apr 2016 04:00:34 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8F3D12E731 for <Ace@ietf.org>; Fri, 22 Apr 2016 04:00:33 -0700 (PDT)
Received: from [192.168.10.140] ([138.232.236.15]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0M1SLt-1bieGs01yz-00tVY5 for <Ace@ietf.org>; Fri, 22 Apr 2016 13:00:31 +0200
To: "Ace@ietf.org" <Ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9
X-Enigmail-Draft-Status: N1110
Message-ID: <571A0454.4080301@gmx.net>
Date: Fri, 22 Apr 2016 13:00:36 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE"
X-Provags-ID: V03:K0:GOZl/E+U8vn86LgxCsaPujsTfhfpLOeCmn4Yg7ZQvSS7ry6PuoP bS1xcbEQIEQ5B5GUGwaBivLJXopZxKakimiipMK3iS0ivK37JaPEfPdt3lOrNdo/0Gytd+D ZylZuZT3Ez+ouSUGlOltpKKXHKo8RdkIQoLrsy7txXXDjp8hj9VdwjKpX/GlxdiN1AEWQDa +Mm3gdoPeb2Be5UA6OGaQ==
X-UI-Out-Filterresults: notjunk:1;V01:K0:5rLK2C11FIc=:Ux0LngDNLMw07l21vxCG7h UAkWs7X2n8ypKpqzU8BlY1IoPQ4Q+aSJvryTMnFk62T3LGjbtUqqZYwzdqq7eP4qobn2+gNYf zfFrrhB35gCvKhiaseuP6nyJOWILECLjlNHaZW1EPDete3iBu+xQH6DYn+go6qULC8ck6/NLC XGmfPMLPyw/bC7WQGx0dhw1FJkn9Ew2azRZIphY+kWTmFyRPJUKX8Lh9M/xWYNoRvCG4mk+i8 Vp1DDJOf4+5TeNpddGpE7VArF8DxsegumjcE6FEbohWt/EhN/5nu6fn94Yp0OQ32LTL6fgG5H LuMKfABU6trNTSXhzvQqpnXwCRrtOKAkfTOl58ieeFYwhEDq9+YIXJTuhzFJqsLQ2chKRVFAe l2ZjZR33GOqkaQF/9mjzlbwKadFdq77GlSnCVIwxnXemD9rIqv3WrOqVB62AaXI1NoJn7Uoa3 MyPRgGENfVdD2UIgoGFOJb2QhHzJfr2Ls6XXV20mHcLJKoubRizkePCqQlBKr1+mUyv7Jj30b yCk04KKS/4HqEoHMqvVySi78c3zzu/8MctmhJHRAoivHNxmUtYSw6Prtqf/uXVTxNN6Y1gIAz Wwx+0Gqmno3wpekLS0P5ZCYGT5HxWnXHWJ+di01bFFPEhrKj4rJkUHGBZLp5iJgDAxBH2rrYq MFed0XJSC617FJScZUctFt9b6BSs1m0KZ24BeoQuwIm83AkwSroFvpib/+rflFhFEKC2Xuzi3 D4N8vmNHcqqxBuW7njrKFij6ZI4o2bUKcmNy7yXfaEFvsMcXFnZm8rPllhk=
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/aYW4REck5BMjTrKu24qrkzAQX-4>
Subject: [Ace] draft-vasu-ace-core-access-privilege-provisioning-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Apr 2016 11:00:36 -0000

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Vasu,

thanks for your draft. I have browsed through it and I had a number of
questions and I wanted to start with one aspect that seems to be quite
central to your document.

In the introduction you talk about RD and the past work in the IETF CORE
working group.

Then, you introduce a Commissioner:

   Once the services are advertised by any device, those services need
   to be verified using commissioner. CORE RD provides a standard
   procedure to interact with commissioner, where commissioner acts like
   a client device to look up and verify the advertised services. Once
   the commissioner verifies the pre-registered services, commissioner
   can put some policy rules on services hosted by devices for resource
   control.

The term itself is defined in the terminology section:

      o "Commissioner" Commissioning agent is tool/device that verifies
      the devices operation, integrity check with the network.

Could you explain a little bit what you mean by "verifies the device
operation", and "integrity check with the network"?

Ciao
Hannes

PS: You may have missed a few working group meetings and therefore you
may not know that we have already made a decision regarding the solution
direction regarding the use of OAuth for IoT.


--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXGgRVAAoJEGhJURNOOiAtfH8H/3sRrbL0nT+rWIP2NcfIztoB
Vt1Je0KknXARHyNgMfr9dm5fbYT3/nuRvR3VlOJUJy0kX5WSVQpd85w5Cm9fT0DR
HLyWi//otxzesCfBIu8oQSHkzcmiwnAxaW9abiSSWgrzIbofDyXkFBT+puILMtJo
bqOmKGL8Sbo3uyS93fLZLweHpD0yqoXNJvckhbe6KnjXacd1gQHPNTg3La9rz0fj
qfydkQQYe3w7ompZP6IesAa5znDSqMbSLvDeizdTqNcey5DUn1FPbHEVLmSWZr9U
yIFMBvXHS+xYTLAxn9k9bcz3WusnUFHU0XT2IC20tp9UN3ni2sJWEudiKXHigks=
=Gumj
-----END PGP SIGNATURE-----

--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE--


From nobody Sat Apr 23 02:09:09 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86B8112E4C8 for <ace@ietfa.amsl.com>; Sat, 23 Apr 2016 02:09:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xHbHGcqzJV10 for <ace@ietfa.amsl.com>; Sat, 23 Apr 2016 02:09:03 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07C6B12E4BA for <ace@ietf.org>; Sat, 23 Apr 2016 02:09:02 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml705-cah.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CNA05952; Sat, 23 Apr 2016 09:09:00 +0000 (GMT)
Received: from BLREML408-HUB.china.huawei.com (10.20.4.47) by lhreml705-cah.china.huawei.com (10.201.5.168) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 23 Apr 2016 10:08:59 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML408-HUB.china.huawei.com ([10.20.4.47]) with mapi id 14.03.0235.001; Sat, 23 Apr 2016 14:38:41 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: discussion on draft-vasu-ace-core-access-privilege-provisoining-00
Thread-Index: AQHRnMlB/ZGS96TbOUGxy1P6DRf9yZ+XQxjw
Date: Sat, 23 Apr 2016 09:08:40 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2D4F3@blreml509-mbb.china.huawei.com>
References: <mailman.32.1461351612.25426.ace@ietf.org>
In-Reply-To: <mailman.32.1461351612.25426.ace@ietf.org>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: multipart/mixed; boundary="_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.571B3BAD.0060, ss=1, re=0.000, recu=0.000, reip=0.000,  cl=1, cld=1, fgs=0, ip=169.254.1.138, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: 43e285772c9acdb42d8a9fc27a5baaf5
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/xVJjjK1pe8-Qmtr56O73BcwxzOE>
Subject: Re: [Ace] discussion on draft-vasu-ace-core-access-privilege-provisoining-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Apr 2016 09:09:06 -0000

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (2 messages)"
Content-Description: Today's Topics (2 messages)
Content-Disposition: attachment; filename="Today's Topics (2 messages)";
	size=206; creation-date="Fri, 22 Apr 2016 19:00:37 GMT";
	modification-date="Fri, 22 Apr 2016 19:00:37 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIFJlOiBkaXNjdXNzaW9uIG9uDQogICAgICBkcmFmdC12
YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9uaW5nLTAwIChMdWR3aWcgU2Vp
dHopDQogICAyLiBkcmFmdC12YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9u
aW5nLTAwDQogICAgICAoSGFubmVzIFRzY2hvZmVuaWcpDQo=

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Sat, 23 Apr 2016 09:08:40 GMT";
	modification-date="Sat, 23 Apr 2016 09:08:40 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: <ace@ietf.org>
References: <mailman.1679.1461237949.4402.ace@ietf.org>
 <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
Date: Fri, 22 Apr 2016 10:58:14 +0200
Message-ID: <5719E7A6.3@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms030600020601090402040700"
Subject: Re: [Ace] discussion on
 draft-vasu-ace-core-access-privilege-provisioning-00
Message: 1
MIME-Version: 1.0

--------------ms030600020601090402040700
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hello,

I'm still trying to clarify the details of the approach you propose,
so please excuse the barrage of questions.

In figure 2 it looks like the RS has to do an online lookup at the AS to
get an access control decision while in figure 3 it seems as if the AS
itself executes the request on behalf of the client.

Both cases work fine if the RS can connect to the AS at the time of the
request, but if you look at RFC 7744 we have usecases where this is not
possible or not cost effective (e.g. in terms of battery usage). Have=20
you considered such usecases?

 From our discussion I got the impression that in your approach, both
access control and resource control policies are provisioned to the AS
only and not to the RS, but in figure 3 is seems like the RS makes some
access control decision towards the AS, I wonder based on which policies
that happens?

> Why would the scheduling problem be caused by the access control
> mechanism? That causality doesn't seem obvious to me, please explain
> in more detail.
> --> Here, If I am not wrong, you mentioned that same access tokens
> can be valid for multiple resources.

Right

> If access control does not consider resource availability and
> resources max capacity to handle the request. Then clients need to
> send the resource request to multiple resource servers. Then it may
> need a scheduling by a proxy.

As I said, the AS can very well consider resource control or scheduling=20
when making an access control decision, but the details of how the AS=20
makes access control decisions are not in scope for ACE.

I also get the feeling that you got hang up on my simplistic example of=20
a client sending a request to multiple resource servers. I guess a more=20
realistic example would be that there are proxies taking care of=20
scheduling, independently of the access control mechanism in place.=20
Alternatively you could imagine a setting where the client broadcasts or =

multicasts its request.

>
> It seems to me that your goal is to include resource control aspects
> into that decision, and that is fine by me, but not relevant for the
> ACE work, which deals with encoding the access control decision into
> a token, getting the token to the Resource Server and then having the
> RS enforce that access control decision. --> Can you suggest me,
> which group I can reach for?

I don't think there is an IETF working group on that topic.




> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Ace digest..."

Please note this ^^^^^^



/Ludwig


--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se



--------------ms030600020601090402040700
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030600020601090402040700--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Sat, 23 Apr 2016 09:08:40 GMT";
	modification-date="Sat, 23 Apr 2016 09:08:40 GMT"

List-Post: <mailto:ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Precedence: list
To: "Ace@ietf.org" <Ace@ietf.org>
Date: Fri, 22 Apr 2016 13:00:36 +0200
Message-ID: <571A0454.4080301@gmx.net>
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
	boundary="07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE"
Subject: [Ace] draft-vasu-ace-core-access-privilege-provisioning-00
Message: 2
MIME-Version: 1.0

--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Vasu,

thanks for your draft. I have browsed through it and I had a number of
questions and I wanted to start with one aspect that seems to be quite
central to your document.

In the introduction you talk about RD and the past work in the IETF CORE
working group.

Then, you introduce a Commissioner:

   Once the services are advertised by any device, those services need
   to be verified using commissioner. CORE RD provides a standard
   procedure to interact with commissioner, where commissioner acts like
   a client device to look up and verify the advertised services. Once
   the commissioner verifies the pre-registered services, commissioner
   can put some policy rules on services hosted by devices for resource
   control.

The term itself is defined in the terminology section:

      o "Commissioner" Commissioning agent is tool/device that verifies
      the devices operation, integrity check with the network.

Could you explain a little bit what you mean by "verifies the device
operation", and "integrity check with the network"?

Ciao
Hannes

PS: You may have missed a few working group meetings and therefore you
may not know that we have already made a decision regarding the solution
direction regarding the use of OAuth for IoT.


--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXGgRVAAoJEGhJURNOOiAtfH8H/3sRrbL0nT+rWIP2NcfIztoB
Vt1Je0KknXARHyNgMfr9dm5fbYT3/nuRvR3VlOJUJy0kX5WSVQpd85w5Cm9fT0DR
HLyWi//otxzesCfBIu8oQSHkzcmiwnAxaW9abiSSWgrzIbofDyXkFBT+puILMtJo
bqOmKGL8Sbo3uyS93fLZLweHpD0yqoXNJvckhbe6KnjXacd1gQHPNTg3La9rz0fj
qfydkQQYe3w7ompZP6IesAa5znDSqMbSLvDeizdTqNcey5DUn1FPbHEVLmSWZr9U
yIFMBvXHS+xYTLAxn9k9bcz3WusnUFHU0XT2IC20tp9UN3ni2sJWEudiKXHigks=
=Gumj
-----END PGP SIGNATURE-----

--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Fri, 22 Apr 2016 19:00:37 GMT";
	modification-date="Fri, 22 Apr 2016 19:00:37 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D4F3blreml509mbbchi_--


From nobody Sat Apr 23 02:16:06 2016
Return-Path: <vasu.kantubukta@huawei.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF1AD12E6F3 for <ace@ietfa.amsl.com>; Sat, 23 Apr 2016 02:16:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.217
X-Spam-Level: 
X-Spam-Status: No, score=-5.217 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wXrDu37PJdfG for <ace@ietfa.amsl.com>; Sat, 23 Apr 2016 02:16:04 -0700 (PDT)
Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D18712E6E8 for <ace@ietf.org>; Sat, 23 Apr 2016 02:16:03 -0700 (PDT)
Received: from 172.18.7.190 (EHLO lhreml702-cah.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CIG01928; Sat, 23 Apr 2016 09:16:01 +0000 (GMT)
Received: from BLREML406-HUB.china.huawei.com (10.20.4.43) by lhreml702-cah.china.huawei.com (10.201.5.99) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 23 Apr 2016 10:15:57 +0100
Received: from BLREML509-MBB.china.huawei.com ([169.254.1.138]) by BLREML406-HUB.china.huawei.com ([10.20.4.43]) with mapi id 14.03.0235.001; Sat, 23 Apr 2016 14:45:47 +0530
From: Vasu Kantubukta <vasu.kantubukta@huawei.com>
To: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: discussion on draft-vasu-ace-core-access-privilege-provisoining-00
Thread-Index: AQHRnMlB/ZGS96TbOUGxy1P6DRf9yZ+XRfcw
Date: Sat, 23 Apr 2016 09:15:46 +0000
Message-ID: <D6EBB546995C064A9492E8E27F62D90D0AA2D51C@blreml509-mbb.china.huawei.com>
References: <mailman.32.1461351612.25426.ace@ietf.org>
In-Reply-To: <mailman.32.1461351612.25426.ace@ietf.org>
Accept-Language: zh-CN, en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
x-originating-ip: [10.18.211.249]
Content-Type: multipart/mixed; boundary="_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_"
MIME-Version: 1.0
X-CFilter-Loop: Reflected
X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020206.571B3D52.0014, ss=1, re=0.000, recu=0.000, reip=0.000,  cl=1, cld=1, fgs=0, ip=169.254.1.138, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32
X-Mirapoint-Loop-Id: c4c06fba18e5667c2a9a52d542100270
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/SiUDqG2k86USZKDXC6iDqjvw_yU>
Subject: Re: [Ace] discussion on draft-vasu-ace-core-access-privilege-provisoining-00
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Apr 2016 09:16:05 -0000

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_
Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
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--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_
Content-Type: application/octet-stream; name="Today's Topics (2 messages)"
Content-Description: Today's Topics (2 messages)
Content-Disposition: attachment; filename="Today's Topics (2 messages)";
	size=206; creation-date="Fri, 22 Apr 2016 19:00:37 GMT";
	modification-date="Fri, 22 Apr 2016 19:00:37 GMT"
Content-Transfer-Encoding: base64

VG9kYXkncyBUb3BpY3M6DQoNCiAgIDEuIFJlOiBkaXNjdXNzaW9uIG9uDQogICAgICBkcmFmdC12
YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9uaW5nLTAwIChMdWR3aWcgU2Vp
dHopDQogICAyLiBkcmFmdC12YXN1LWFjZS1jb3JlLWFjY2Vzcy1wcml2aWxlZ2UtcHJvdmlzaW9u
aW5nLTAwDQogICAgICAoSGFubmVzIFRzY2hvZmVuaWcpDQo=

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Sat, 23 Apr 2016 09:15:46 GMT";
	modification-date="Sat, 23 Apr 2016 09:15:46 GMT"

List-Post: <mailto:ace@ietf.org>
From: Ludwig Seitz <ludwig@sics.se>
Precedence: list
To: <ace@ietf.org>
References: <mailman.1679.1461237949.4402.ace@ietf.org>
 <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
In-Reply-To: <D6EBB546995C064A9492E8E27F62D90D0AA2C958@blreml509-mbb.china.huawei.com>
Date: Fri, 22 Apr 2016 10:58:14 +0200
Message-ID: <5719E7A6.3@sics.se>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-256; boundary="------------ms030600020601090402040700"
Subject: Re: [Ace] discussion on
 draft-vasu-ace-core-access-privilege-provisioning-00
Message: 1
MIME-Version: 1.0

--------------ms030600020601090402040700
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hello,

I'm still trying to clarify the details of the approach you propose,
so please excuse the barrage of questions.

In figure 2 it looks like the RS has to do an online lookup at the AS to
get an access control decision while in figure 3 it seems as if the AS
itself executes the request on behalf of the client.

Both cases work fine if the RS can connect to the AS at the time of the
request, but if you look at RFC 7744 we have usecases where this is not
possible or not cost effective (e.g. in terms of battery usage). Have=20
you considered such usecases?

 From our discussion I got the impression that in your approach, both
access control and resource control policies are provisioned to the AS
only and not to the RS, but in figure 3 is seems like the RS makes some
access control decision towards the AS, I wonder based on which policies
that happens?

> Why would the scheduling problem be caused by the access control
> mechanism? That causality doesn't seem obvious to me, please explain
> in more detail.
> --> Here, If I am not wrong, you mentioned that same access tokens
> can be valid for multiple resources.

Right

> If access control does not consider resource availability and
> resources max capacity to handle the request. Then clients need to
> send the resource request to multiple resource servers. Then it may
> need a scheduling by a proxy.

As I said, the AS can very well consider resource control or scheduling=20
when making an access control decision, but the details of how the AS=20
makes access control decisions are not in scope for ACE.

I also get the feeling that you got hang up on my simplistic example of=20
a client sending a request to multiple resource servers. I guess a more=20
realistic example would be that there are proxies taking care of=20
scheduling, independently of the access control mechanism in place.=20
Alternatively you could imagine a setting where the client broadcasts or =

multicasts its request.

>
> It seems to me that your goal is to include resource control aspects
> into that decision, and that is fine by me, but not relevant for the
> ACE work, which deals with encoding the access control decision into
> a token, getting the token to the Resource Server and then having the
> RS enforce that access control decision. --> Can you suggest me,
> which group I can reach for?

I don't think there is an IETF working group on that topic.




> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Ace digest..."

Please note this ^^^^^^



/Ludwig


--=20
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se



--------------ms030600020601090402040700
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030600020601090402040700--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_
Content-Type: message/rfc822
Content-Disposition: attachment;
	creation-date="Sat, 23 Apr 2016 09:15:46 GMT";
	modification-date="Sat, 23 Apr 2016 09:15:46 GMT"

List-Post: <mailto:ace@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Precedence: list
To: "Ace@ietf.org" <Ace@ietf.org>
Date: Fri, 22 Apr 2016 13:00:36 +0200
Message-ID: <571A0454.4080301@gmx.net>
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
	boundary="07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE"
Subject: [Ace] draft-vasu-ace-core-access-privilege-provisioning-00
Message: 2
MIME-Version: 1.0

--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Vasu,

thanks for your draft. I have browsed through it and I had a number of
questions and I wanted to start with one aspect that seems to be quite
central to your document.

In the introduction you talk about RD and the past work in the IETF CORE
working group.

Then, you introduce a Commissioner:

   Once the services are advertised by any device, those services need
   to be verified using commissioner. CORE RD provides a standard
   procedure to interact with commissioner, where commissioner acts like
   a client device to look up and verify the advertised services. Once
   the commissioner verifies the pre-registered services, commissioner
   can put some policy rules on services hosted by devices for resource
   control.

The term itself is defined in the terminology section:

      o "Commissioner" Commissioning agent is tool/device that verifies
      the devices operation, integrity check with the network.

Could you explain a little bit what you mean by "verifies the device
operation", and "integrity check with the network"?

Ciao
Hannes

PS: You may have missed a few working group meetings and therefore you
may not know that we have already made a decision regarding the solution
direction regarding the use of OAuth for IoT.


--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBCgAGBQJXGgRVAAoJEGhJURNOOiAtfH8H/3sRrbL0nT+rWIP2NcfIztoB
Vt1Je0KknXARHyNgMfr9dm5fbYT3/nuRvR3VlOJUJy0kX5WSVQpd85w5Cm9fT0DR
HLyWi//otxzesCfBIu8oQSHkzcmiwnAxaW9abiSSWgrzIbofDyXkFBT+puILMtJo
bqOmKGL8Sbo3uyS93fLZLweHpD0yqoXNJvckhbe6KnjXacd1gQHPNTg3La9rz0fj
qfydkQQYe3w7ompZP6IesAa5znDSqMbSLvDeizdTqNcey5DUn1FPbHEVLmSWZr9U
yIFMBvXHS+xYTLAxn9k9bcz3WusnUFHU0XT2IC20tp9UN3ni2sJWEudiKXHigks=
=Gumj
-----END PGP SIGNATURE-----

--07g2TSB4URhOKvqe8t6pPKcVUvw8cFcIE--

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_
Content-Type: application/octet-stream; name="Digest Footer"
Content-Description: Digest Footer
Content-Disposition: attachment; filename="Digest Footer"; size=124;
	creation-date="Fri, 22 Apr 2016 19:00:37 GMT";
	modification-date="Fri, 22 Apr 2016 19:00:37 GMT"
Content-Transfer-Encoding: base64

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWls
aW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0
aW5mby9hY2UNCg==

--_005_D6EBB546995C064A9492E8E27F62D90D0AA2D51Cblreml509mbbchi_--


From nobody Sat Apr 23 16:00:05 2016
Return-Path: <samuel@erdtman.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B435612B027 for <ace@ietfa.amsl.com>; Sat, 23 Apr 2016 16:00:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqNxUhtpta02 for <ace@ietfa.amsl.com>; Sat, 23 Apr 2016 16:00:03 -0700 (PDT)
Received: from mail-vk0-x22f.google.com (mail-vk0-x22f.google.com [IPv6:2607:f8b0:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EDBA112B061 for <Ace@ietf.org>; Sat, 23 Apr 2016 16:00:02 -0700 (PDT)
Received: by mail-vk0-x22f.google.com with SMTP id t129so176924881vkg.2 for <Ace@ietf.org>; Sat, 23 Apr 2016 16:00:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=+iniwx5bMsvWgrm129tqWBx2v1K806ljYM6eIk5lmUQ=; b=iEhMkFNf2iVl4jTU4qsG4VW99NBPCrATTeNJsylCMMXPj8yWAPbrPLEjdBcphmoTNU C3uXty8XO7DIxMxSTmbnxWDtSIza3YVUvgOp5kXfBlmY3rmdZs32xJSWAFmk/p9RyJJG Q/8l2vofP1IrwyoY0RumzeNxRt29+bsNap6dwxNyNZVL0ujcXOR5MHcgu3CqrJEgTcI+ YQLVCF+JY0f0GGD/XjQ9RTLleyHDjPdO3d6NIPY792NBLtMNosOstDZxCwrGMzDeXHnp 0Nj2hRizmfHEFBo++CZ+br1pWkAKDKfHQSs2o/w65UTc18/SkYA4t/S4TR5k8Bxcy/kq tf/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=+iniwx5bMsvWgrm129tqWBx2v1K806ljYM6eIk5lmUQ=; b=FNikWvWgSbQM1blfIHb6InJoGUw9/gsNYlJpDd8UTeUnYXt/mRC15yHSdGi6lQ2bUs Q790r7+45gI9l56fnwxgxrXsxF1QtSGjwVp7MY8jOo6JZHCdHlW/TwyFk71KQFpwani6 CspF7MaJbYdB3H/aBntg+mXq8sDRMjquY3qDk+x4LqP5Mi+f6n5j1DiLI1tGbm07xX+9 O93POSR7Fjszj1ld7VnLkwO6DssYUFrULJDU0xHzM6lCWzRj6ocw+UVznKqp39HCA++Y oxRMstNW68ycdsgWHLtAtyp8OTo0aqdJp4xKZfv5yIyLNC+aD4VjZDotG5XunSxW742Q aemw==
X-Gm-Message-State: AOPr4FUcrFO2+kb40IfkjFMuvQbFSaPsL092/CIiib54kU2X3w8OAasbJDeV2L2v1sFoxjTtymd228lmLJX5TA==
MIME-Version: 1.0
X-Received: by 10.159.37.208 with SMTP id 74mr15803718uaf.148.1461452401881; Sat, 23 Apr 2016 16:00:01 -0700 (PDT)
Received: by 10.176.64.74 with HTTP; Sat, 23 Apr 2016 16:00:01 -0700 (PDT)
In-Reply-To: <F2346FD0-BBBF-4FA1-B373-959F5F95884D@ve7jtb.com>
References: <CAF2hCbZiL5qQ28hzEF_5PYFNrJfXZ8XGzLOVPznBMH9heMqELg@mail.gmail.com> <F2346FD0-BBBF-4FA1-B373-959F5F95884D@ve7jtb.com>
Date: Sun, 24 Apr 2016 01:00:01 +0200
Message-ID: <CAF2hCbaxZRCbExZ7Ls7HEJ+V47YwCgc0cjxtDTrwd78tA1weVw@mail.gmail.com>
From: Samuel Erdtman <samuel@erdtman.se>
To: John Bradley <ve7jtb@ve7jtb.com>, Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: multipart/alternative; boundary=001a1139558c4549e005312ee7d9
Archived-At: <http://mailarchive.ietf.org/arch/msg/ace/mkBy1h3j5v-5iEjnfD0m_Q-i60c>
Cc: "<oauth@ietf.org>" <oauth@ietf.org>, Ace@ietf.org
Subject: Re: [Ace] PoP, Introspection and ACE
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 23 Apr 2016 23:00:04 -0000

--001a1139558c4549e005312ee7d9
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Thanks John for your reply, have you had time to discuss a way forward with
Hannes.

I agree we should absolutely register cnf in introspection to go inline
with RFC 7800.

Since RFC 7800 is done it might be preferable to do the registration in the
ACE specification that is the specification that needs it.

//Samuel


On Sun, Apr 17, 2016 at 1:23 AM, John Bradley <ve7jtb@ve7jtb.com> wrote:

> It is probably best to register =E2=80=9Ccnf=E2=80=9D to match RFC 7600 s=
o we don=E2=80=99t have
> two different structures one for JWT/CWT and one for introspection.
>
> On the other hand introspected tokens are generally relatively custom in
> what claims they pass.
>
> I will discuss it with Hannes.
>
> John B.
>
> On Apr 16, 2016, at 6:42 PM, Samuel Erdtman <samuel@erdtman.se> wrote:
>
> Hi,
>
> I'm working on the IANA section in
> https://tools.ietf.org/html/draft-ietf-ace-oauth-authz.
>
> In https://tools.ietf.org/html/draft-ietf-ace-oauth-authz we want to have
> the option to get the PoP parameters (alg, key and aud) via introspection
> e.g. if using a reference token.
>
> At the moment I wrote the registration text of the parameters in the ACE
> specification but I think it would be preferable if
> https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution did the
> registration for introspection too.
>
> Comments?
>
> //Samuel
> _______________________________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>
>
>

--001a1139558c4549e005312ee7d9
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>Thanks John for your reply, have you had time to=
 discuss a way forward with Hannes.<br><br></div>I agree we should absolute=
ly register cnf in introspection to go inline with RFC 7800.<br><br></div>S=
ince RFC 7800 is done it might be preferable to do the registration in the =
ACE specification that is the specification that needs it.<br><div><div><br=
></div><div>//Samuel</div><div><br></div></div></div><div class=3D"gmail_ex=
tra"><br><div class=3D"gmail_quote">On Sun, Apr 17, 2016 at 1:23 AM, John B=
radley <span dir=3D"ltr">&lt;<a href=3D"mailto:ve7jtb@ve7jtb.com" target=3D=
"_blank">ve7jtb@ve7jtb.com</a>&gt;</span> wrote:<br><blockquote class=3D"gm=
ail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-le=
ft:1ex"><div style=3D"word-wrap:break-word">It is probably best to register=
 =E2=80=9Ccnf=E2=80=9D to match RFC 7600 so we don=E2=80=99t have two diffe=
rent structures one for JWT/CWT and one for introspection.<div><br></div><d=
iv>On the other hand introspected tokens are generally relatively custom in=
 what claims they pass.</div><div><br></div><div>I will discuss it with Han=
nes.</div><div><br></div><div>John B.<br><div><blockquote type=3D"cite"><di=
v><div class=3D"h5"><div>On Apr 16, 2016, at 6:42 PM, Samuel Erdtman &lt;<a=
 href=3D"mailto:samuel@erdtman.se" target=3D"_blank">samuel@erdtman.se</a>&=
gt; wrote:</div><br></div></div><div><div><div class=3D"h5"><div dir=3D"ltr=
"><div><div><div><div>Hi,<br><br></div>I&#39;m working on the IANA section =
in <a href=3D"https://tools.ietf.org/html/draft-ietf-ace-oauth-authz" targe=
t=3D"_blank">https://tools.ietf.org/html/draft-ietf-ace-oauth-authz</a>.<br=
><br></div>In <a href=3D"https://tools.ietf.org/html/draft-ietf-ace-oauth-a=
uthz" target=3D"_blank">https://tools.ietf.org/html/draft-ietf-ace-oauth-au=
thz</a> we want to have the option to get the PoP parameters (alg, key and =
aud) via introspection e.g. if using a reference token.<br><br></div>At the=
 moment I wrote the registration text of the parameters in the ACE specific=
ation but I think it would be preferable if <a href=3D"https://tools.ietf.o=
rg/html/draft-ietf-oauth-pop-key-distribution" target=3D"_blank">https://to=
ols.ietf.org/html/draft-ietf-oauth-pop-key-distribution</a> did the registr=
ation for introspection too.<br><br></div><div>Comments?<br></div><div><br>=
</div>//Samuel<br></div></div></div>
_______________________________________________<br>Ace mailing list<br><a h=
ref=3D"mailto:Ace@ietf.org" target=3D"_blank">Ace@ietf.org</a><br><a href=
=3D"https://www.ietf.org/mailman/listinfo/ace" target=3D"_blank">https://ww=
w.ietf.org/mailman/listinfo/ace</a><br></div></blockquote></div><br></div><=
/div></blockquote></div><br></div>

--001a1139558c4549e005312ee7d9--

