From nobody Tue Jan 2 03:00:33 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6075E127201 for ; Tue, 2 Jan 2018 03:00:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xvP7KEz-r5IM for ; Tue, 2 Jan 2018 03:00:28 -0800 (PST) Received: from lb1-smtp-cloud7.xs4all.net (lb1-smtp-cloud7.xs4all.net [194.109.24.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62EF11200F1 for ; Tue, 2 Jan 2018 03:00:27 -0800 (PST) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:199]) by smtp-cloud7.xs4all.net with ESMTPA id WKIze4JnGbYqmWKIze81HG; Tue, 02 Jan 2018 12:00:26 +0100 Received: from AMontpellier-654-1-146-91.w90-0.abo.wanadoo.fr ([90.0.217.91]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Tue, 02 Jan 2018 12:00:25 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Tue, 02 Jan 2018 12:00:25 +0100 From: peter van der Stok To: Hannes Tschofenig Cc: ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: References: Message-ID: <2032dd1eec43c56458b734573ed484bc@xs4all.nl> X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfM2BB9WxmjveN1FDMzOCojhslCvxYn7Fgu5Z1ymcSg3yFLfeTKpdU9Spot1b/qejz7AFqpPeK3q9jWwcZMvbNB9C/veykCl2EOEXjF+U7i+95VkxxyPi Nvrva8GrGU8huJws/Kfwro8n7WDGBGYlVDS7HKRanESVLMTikEoHIWRBgW5cKDNOy4joupRbd+bHD35thDIxZQs1CIHbMmAdHGRGZf6pP05c9dccpJ0extKC Archived-At: Subject: Re: [Ace] draft-vanderstok-ace-coap-est-03 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jan 2018 11:00:32 -0000 Hi Hannes, Happy new year. Many thanks for your comments; See below for my "late" reactions > > Would it make sense to expand the title of the draft to something like > "Using Enrollment over Secure Transport (EST) over the Constrained > Application Protocol (CoAP)" Thanks for the suggestion; Possibly my co-authors will come up with other suggestions. > > Abstract: Here is my proposal: I understand your wish for terseness. And I agree with that purpose. > > FROM your suggestion: > > Abstract > > Enrollment over Secure Transport (EST) has been defined in RFC 7030 > and is used as a certificate management protocol over HTTPS. > > This specification defines how to convey EST payloads over the > Constrained Application Protocol (CoAP). This allows resource > constrained Internet of Things devices to re-use existing EST > functionality. I arrived at: Abstract Enrollment over Secure Transport (EST) [RFC7030] is used as a certificate management protocol over HTTPS. Low-resource devices often use the lightweight Constrained Application Protocol (CoAP) [RFC7252] for message exchanges. This document defines how to transport EST payloads over secure CoAP (EST- coaps). This allows low-resource constrained devices to re-use existing EST functionality. Example low-resource use cases for EST are: secure bootstrapping and certificate enrollment. > > ---- > > REASON: The use cases were pretty relevant for the discussion in ACE > > As such, I would suggest to change the text in the introduction: > > > TO: > > 1 [14]. INTRODUCTION > Added your phrases below > > "Classical" EST uses HTTPS and this specification defines a new > transport > > for EST using CoAP. It also profiles the use of use of EST to a > smaller subset. > > I would omit the following two paragraphs from the introduction since > you are discussing them again in more detail in Section 4.4. The two paragraphs are now preceded with an EDNote for removal suggestion > > Although EST-coaps paves the way for the utilization of EST for > > constrained devices on constrained networks, some devices will not > > have enough resources to handle the large payloads that come with > > EST-coaps. The specification of EST-coaps is intended to ensure > that > > EST works for networks of constrained devices that choose to limit > > their communications stack to UDP/CoAP. It is up to the network > > designer to decide which devices execute the EST protocol and which > > not. > > Because the relatively large EST messages cannot be readily > > transported over constrained (6LoWPAN, LLN) wireless networks, this > > document specifies the use of CoAP Block-Wise Transfer ("Block") > > [RFC7959 [11]] to fragment EST messages at the application layer. > > I would also omit the following paragraph since it is not clear to me > why you are discussing one design item that has not been added to the > spec while there are many others as well that have not been mentioned. Paragraph below has been moved to the end of transport protocol section > > > Support for Observe CoAP options [RFC7641 [12]] is out-of-scope for > this > > document. Observe options could be used by the server to notify > > clients about a change in the cacerts or csr attributes (resources) > > and might be an area of future work. > > Terminology: > > I would remove this paragraph since it does not add any value. Personally, I feel happier by leaving it in to acknowledge the cut and paste from RFC7030 > > Many of the concepts in this document are taken over from [RFC7030 > [1]]. > > Consequently, much text is directly traceable to [RFC7030 [1]]. > The same > > document structure is followed to point out the differences and > > commonalities between EST and EST-coaps. > > 2 [15]. EST OPERATIONAL DIFFERENCES > > I would move this text into the (now shorter) introduction. moved as subsection of the introduction. > > SECTION 4 [16]. PROTOCOL DESIGN AND LAYERING > > You write: > > o Server-side key generation messages, to provide a private > client- > > identity key when the client is too restricted or because of > lack > > of an entropy source. [EDNOTE: Encrypting these keys is > > important. RFC7030 [1] specifies how the private key can be > encrypted > > with CMS using symmetric or asymmetric keys. Mention how > > symmetric key can be derived for EST server side key generation > > from the TLS KEM draft.] > > I consider server-side key generation (for public key crypto) as > problematic since the server obviously gets to see the private key > (something that can be avoided by the use of asymmetric crypto and > client-side generation of secrets). With ECC (which is what I would > recommend for use on IoT devices due to the smaller key size) the key > pair generation is also much simpler. You indeed require a TRNG on the > device but you need that anyway. For public key crypto the recommended > ciphersuite uses an EDHE and DTLS also exchanges nonces in the > handshake. In a nutshell, if you don't have a hardware-based random > number generator then you are in trouble. The good thing is that you > get these nowadays in hardware even with the most basic MCUs. The server-side key generation is wanted by several applications, I understood. One of my co-authors may react here. It was explained to me that a small server may be equipped with a large enough key during the manufacturing process, but needs to generate new keys during operation with the aid of a key generation server. > > 4.3 [17]. COAP RESPONSE CODES > > Is it really necessary to create a dependency to > [I-D.hartke-core-pending [13]] since this means that this document > cannot be completed for an extended period of time?! Good remark. The reference is now informative. The new "pending" draft will specify that a server may generate additional information when returning 5.03 > > 4.4 [18]. MESSAGE FRAGMENTATION > > There is a lot of text in this section for just saying that you want > to use block-wise transfer. I also don't think you need to explain > what block-wise transfer is. For http users, "block" is pretty new and needs some explanatory introduction for stand alone understanding. > > Regarding the statements being made: It almost sounds like you are > saying that you cannot use EST over CoAP without block-wise transfer > and I don't believe that's is correct. First, there are a number of > connectivity technologies that do not have a very small MTU size and > those should be supported as well. Second, you discuss IEEE 802.15.4 > specifically. You start by saying that "Each DTLS record MUST fit > within a single datagram". You then say that: > > To avoid using IP > > fragmentation, which is not supported by 6LoWPAN, invokers of the > > DTLS record layer MUST size DTLS records so that they fit within > any > > Path MTU estimates obtained from the record layer. > > This is what the DTLS specification says and does not need to be > repeated here. Here is the text from RFC 6347 > > " In order to > > avoid IP fragmentation, clients of the DTLS record layer SHOULD > > attempt to size records so that they fit within any PMTU estimates > > obtained from the record layer. > > " > > The difference between the two sentences is that you are saying that > DTLS must perform fragmentation whereas the DTLS RFC says should. I > fear that you are modifying the behaviour of the DTLS RFC. That could > be a problem. Absolutely correct. New text is: [RFC6347] states that to avoid using IP fragmentation, which involves error-prone datagram reconstitution, invokers of the DTLS record layer SHOULD size DTLS records so that they fit within any Path MTU estimates obtained from the record layer. Like to keep this text to introduce the subject > > My naïve understanding of 6LoWPAN is that it supports fragmentation > while you claim that it doesn't. So, what is the story? > > I wonder how you came to the following conclusion: At the CoAP level > it may be difficult to "cut" the messages exactly in such a way that > they fit correctly and so it might make more sense to let the lower > layers, such as DTLS and 6LoWPAN to do their job. Expect the new text above to better cover the subject. > > In addition, > > invokers residing on a 6LoWPAN over IEEE 802.15.4 network SHOULD > > attempt to size CoAP messages such that each DTLS record will fit > > within one or two IEEE 802.15.4 frames. > > Regarding the size indications of certificates I have so far had cases > where 256-bit curves have a size of ~620 bytes but not 1000 bytes. text says between 500 and 1000 bytes. Of > course, you can add all sorts of extensions and long fields to the > cert but maybe that's not a great idea if you care about over the wire > overhead. Complete agreement. > > 7 [19]. PROXYING > > Why are you introducing proxy behaviour in EST over CoAP when it is > not available in classical EST? It is an aspect that comes into play once you add coap as a protocol next to http. Installations will probably support both. > > Can PoP work with a HTTP/CoAP proxy? Some additional text may be interesting to cover that aspect. > > Editorial: > > s/COAP/CoAP > > Final remark: would it make sense to support CoAP over TCP in the > draft since we are about to finish the specification work? Let me think about that with my co-authors. May be there are other opinions on this subject? Possibly, it is not much additional text. > > Ciao > > Hannes > Thanks Hannes The text suggestions and discussions help a lot. From nobody Mon Jan 8 18:55:50 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0945C1200B9; Mon, 8 Jan 2018 18:55:49 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: Kathleen.Moriarty.ietf@gmail.com, ace-chairs@ietf.org, kaduk@mit.edu, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.68.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151546654899.9556.9337684930238531427.idtracker@ietfa.amsl.com> Date: Mon, 08 Jan 2018 18:55:48 -0800 Archived-At: Subject: [Ace] ace - New Meeting Session Request for IETF 101 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jan 2018 02:55:49 -0000 A new meeting session request has just been submitted by Benjamin Kaduk, a Chair of the ace working group. --------------------------------------------------------- Working Group Name: Authentication and Authorization for Constrained Environments Area Name: Security Area Session Requester: Benjamin Kaduk Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: saag cbor core tls lamps kitten cfrg Second Priority: quic oauth secevent tokbind t2trg lwig anima suit teep Third Priority: doh httpbis uta 6tisch homenet curdle People who must be present: Kathleen Moriarty Jim Schaad Benjamin Kaduk Resources Requested: Special Requests: A session in the first half of the week (Mon-Wed) would be preferred, to free up some WG participants to travel for another meeting in Prague on friday. --------------------------------------------------------- From nobody Wed Jan 17 07:44:26 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A993F13148B for ; Wed, 17 Jan 2018 07:44:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.919 X-Spam-Level: X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bnz1SgpW_rrL for ; Wed, 17 Jan 2018 07:44:07 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40070.outbound.protection.outlook.com [40.107.4.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64EE4131481 for ; Wed, 17 Jan 2018 07:44:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=tRFKJrVI9ZYZQxk4o4zalOktZ/T74SyTKFyPnOZBtQ8=; b=DZsUDSdqnJ0Qc/RTjDl4FTeTMmRsFqLulDO37zTo8LBVkAe/nbo7vYN6caFRGlKpztP5NopJSd8IWjimA5emQauyU2z1rJYsr7SBEEmUwfdsI6HxyfGfpCdiXlP9acqv/FH7SqOcXdhvSzoDo18312XjIyG83KDYeejMoJEqzAU= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2707.eurprd08.prod.outlook.com (10.167.90.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.407.7; Wed, 17 Jan 2018 15:43:58 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::5957:bfbc:9e56:4c9a]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::5957:bfbc:9e56:4c9a%13]) with mapi id 15.20.0407.012; Wed, 17 Jan 2018 15:43:58 +0000 From: Hannes Tschofenig To: "ace@ietf.org" Thread-Topic: Application Transport LAyer Security (ATLAS) Thread-Index: AdOPqYCGCBHZY9PRSTKXHigISZoqhA== Date: Wed, 17 Jan 2018 15:43:58 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [80.92.123.134] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2707; 7:5lC6Gi9nwSjfJpVHsudvFmzmsuRXgQoH+QQTmUljlulwVzRrJc8G1WPqPtjPl4dH2UWQVTycUK5RL4V5g2DxWHKOeYhbxB0tyFf4pAc5SXJmCNBmnSZCozKu1H0tNfGL9IbPqSdmDYT8T9yYn7l/FK4u+3TfjUu4TsXNUIBdoMtomUKjs45XMv3Lnx3r0zPdRgIiIcNYAbfNVXFj2HETOaXeXGDWNKUp9MIC5vNqo+lYMuMv3fWoIcaa5Nbxhx1/ x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4cbf6d34-a5d7-4537-beb0-08d55dc11ff3 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2707; x-ms-traffictypediagnostic: AM4PR0801MB2707: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040470)(2401047)(8121501046)(5005006)(10201501046)(3002001)(3231023)(2400048)(944501161)(93006095)(93001095)(6055026)(6041268)(20161123564045)(20161123560045)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:AM4PR0801MB2707; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:AM4PR0801MB2707; x-forefront-prvs: 0555EC8317 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(39380400002)(396003)(39860400002)(376002)(366004)(53754006)(40434004)(199004)(189003)(478600001)(8936002)(14454004)(10710500007)(9686003)(8676002)(2906002)(25786009)(6436002)(606006)(2900100001)(5660300001)(2351001)(15650500001)(6916009)(68736007)(106356001)(105586002)(74316002)(53936002)(316002)(236005)(1730700003)(81156014)(33656002)(966005)(81166006)(561944003)(2420400007)(3280700002)(790700001)(6116002)(55016002)(59450400001)(97736004)(5250100002)(99286004)(72206003)(3660700001)(5640700003)(5630700001)(7696005)(3846002)(6506007)(7736002)(102836004)(6346003)(54896002)(66066001)(5890100001)(26005)(86362001)(7110500001)(6306002)(2501003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2707; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-microsoft-antispam-message-info: /DVIwHruc3zeeMOs3HBMrTrIoUcf2H7jgu2R9vlSnht+Ba4T9rMYUOt1iz46OdPINjzJWQDrJ9tvdqBUkw6Zow== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB270628C3A9E633652446E80AFAE90AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4cbf6d34-a5d7-4537-beb0-08d55dc11ff3 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jan 2018 15:43:58.7994 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2707 Archived-At: Subject: [Ace] Application Transport LAyer Security (ATLAS) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jan 2018 15:44:25 -0000 --_000_AM4PR0801MB270628C3A9E633652446E80AFAE90AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, Based on the discussion late last year on this mailing list we have created= a mailing list for discussions relating to the re-use of TLS handshaking p= rotocols at the application layer for establishing keying material to prote= ct application data. Here is the link to the list: https://www.ietf.org/mailman/listinfo/atlas We are planning to distribute a strawman charter proposal to the list in th= e next few days. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB270628C3A9E633652446E80AFAE90AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

Based on the discussion late last year on this maili= ng list we have created a mailing list for discussions relating to the re-u= se of TLS handshaking protocols at the application layer for establishing k= eying material to protect application data.

 

Here is the link to the list:

https://www.ietf.org/mailman/listinfo/atlas

 

We are planning to distribute a strawman charter pro= posal to the list in the next few days.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB270628C3A9E633652446E80AFAE90AM4PR0801MB2706_-- From nobody Sun Jan 21 13:33:55 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 280341243F3; Sun, 21 Jan 2018 13:33:48 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.69.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151657042804.12216.8095451832831011901@ietfa.amsl.com> Date: Sun, 21 Jan 2018 13:33:48 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cbor-web-token-11.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jan 2018 21:33:48 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : CBOR Web Token (CWT) Authors : Michael B. Jones Erik Wahlström Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cbor-web-token-11.txt Pages : 25 Date : 2018-01-21 Abstract: CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary Object Representation (CBOR) and CBOR Object Signing and Encryption (COSE) is used for added application layer security protection. A claim is a piece of information asserted about a subject and is represented as a name/value pair consisting of a claim name and a claim value. CWT is derived from JSON Web Token (JWT) but uses CBOR rather than JSON. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cbor-web-token/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-11 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cbor-web-token-11 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cbor-web-token-11 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Jan 21 13:46:18 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 072C6126D74 for ; Sun, 21 Jan 2018 13:46:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.02 X-Spam-Level: X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9yYlaV5cOAOY for ; Sun, 21 Jan 2018 13:46:14 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-bl2nam02on0112.outbound.protection.outlook.com [104.47.38.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A0A11243F3 for ; Sun, 21 Jan 2018 13:46:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=U5KjEDevJODinrmYaChE7TVfQBjG6ZDA0TBJd03y9aM=; b=IRY65y9+qEZvgHi1sh4gBEXJ37m8TFahB89FURUPgwHVRFavBfWYG+H9uU62UIrJfLjCTTn+Ih0l9EeHLk1W2fPS7c3YSpDsV9MCIUKJLhZ8MHnkF3nqof/72EaRKAw7sxKrGMPm3SBNz19rWA8BKdiijlOTwXafub60xN4YLhM= Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (52.132.114.20) by SN6PR2101MB1087.namprd21.prod.outlook.com (52.132.115.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.464.1; Sun, 21 Jan 2018 21:46:12 +0000 Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::7068:47f5:3e1c:ce6a%4]) with mapi id 15.20.0444.004; Sun, 21 Jan 2018 21:46:12 +0000 From: Mike Jones To: "ace@ietf.org" Thread-Topic: CBOR Web Token (CWT) draft correcting an example Thread-Index: AdOS/Iy5dyWpPHDuRY686ljHK3VOHw== Date: Sun, 21 Jan 2018 21:46:11 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [50.47.88.182] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR2101MB1087; 7:QZrvSUY4Y7vgQMBQpKPrjSE4CisSBFr6D+qmN5dpuG4usJRB9bOufKGociYuLH9cP6IkEEu+6VCbW5PivsTaNdVjfGhm08IU7EVFS7V/vrYuxQZFfnT9r8NnYj8IjVs9rkQm6Spei5pEECaVmdB5hXFsP2/iNB1UKMvxWE/XUQ0O8T64nptfLj9WR/Df1hzmStJkLU8vQkRjmodVKvvLA9BACkBJOfTUilzmBurpj+2wQ/EA6Jw+ogkuEU2uOyUs x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 91d31110-9962-4f7d-6904-08d5611863a0 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(48565401081)(4534125)(4602075)(4627221)(201703031133081)(201702281549075)(2017052603307)(7193020); SRVR:SN6PR2101MB1087; x-ms-traffictypediagnostic: SN6PR2101MB1087: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(31418570063057)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231046)(2400081)(944501161)(93006095)(93001095)(6055026)(61426038)(61427038)(6041288)(20161123560045)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:SN6PR2101MB1087; BCL:0; PCL:0; RULEID:(100000803126)(100110400120); SRVR:SN6PR2101MB1087; x-forefront-prvs: 0559FB9674 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39380400002)(39860400002)(366004)(346002)(376002)(396003)(209900001)(189003)(199004)(316002)(33656002)(22452003)(97736004)(606006)(53936002)(2351001)(5660300001)(2906002)(7736002)(74316002)(8990500004)(8936002)(1730700003)(5630700001)(8676002)(81156014)(81166006)(10090500001)(106356001)(26005)(3280700002)(3660700001)(10290500003)(68736007)(53376002)(478600001)(7696005)(59450400001)(6346003)(6506007)(6916009)(5640700003)(25786009)(102836004)(14454004)(790700001)(6436002)(966005)(9686003)(72206003)(55016002)(6116002)(3846002)(2900100001)(105586002)(86612001)(5250100002)(6306002)(86362001)(236005)(54896002)(66066001)(99286004)(2501003)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR2101MB1087; H:SN6PR2101MB0943.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-message-info: gHI8P3A4+N8CLXcn3gSqONpucHdzI9jWOFp5u4dFT7Yg2INM0hoikxmUsLsyoPee4owQFeGZIvI9Fd3NY+Y7Ag== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943B8D16E55D2744E1D4CA9F5ED0SN6PR2101MB0943_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 91d31110-9962-4f7d-6904-08d5611863a0 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jan 2018 21:46:11.8390 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1087 Archived-At: Subject: [Ace] CBOR Web Token (CWT) draft correcting an example X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Jan 2018 21:46:17 -0000 --_000_SN6PR2101MB0943B8D16E55D2744E1D4CA9F5ED0SN6PR2101MB0943_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable A new CBOR Web Token (CWT) draft has been published that applies a correcti= on to an example. The full list of changes is: * Corrected the "iv" value in the signed and encrypted CWT example. * Mention CoAP in the application/cwt media type registration. * Changed references of the form "Section 4.1.1 of JWT " to "Section 4.1.1 of " so that rfcmar= kup will generate correct external section reference links. * Updated Acknowledgements. Thanks to Samuel Erdtman for validating all the examples once more and find= ing the issue with the signed and encrypted example. Thanks to Benjamin Ka= duk for pointing out additional improvements that could be applied from the= second WGLC comments. The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cbor-web-token-11 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cbor-web-token-11.html -- Mike P.S. This notice was also posted http://self-issued.info/?p=3D1769 and as = @selfissued. --_000_SN6PR2101MB0943B8D16E55D2744E1D4CA9F5ED0SN6PR2101MB0943_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

A new CBOR Web Token (CWT) draft has been published = that applies a correction to an example.  The full list of changes is:=

  • Corrected the “iv” value in the signed and encrypted CWT = example.
  • Mention CoAP in the application/cwt = media type registration.
  • Changed references of the for= m “Section 4.1.1 of JWT <xref target=3D"RFC7519"/>= 221; to “Section 4.1.1 of <xref target=3D"RFC7519"/>&= #8221; so that rfcmarkup will generate correct external section reference links.
  • Updated Acknowledgements.=

 

Thanks to Samuel Erdtman for validating all the exam= ples once more and finding the issue with the signed and encrypted example.=   Thanks to Benjamin Kaduk for pointing out additional improvements th= at could be applied from the second WGLC comments.

The specification is available at:

 

An HTML-formatted version is also available at:=

--_000_SN6PR2101MB0943B8D16E55D2744E1D4CA9F5ED0SN6PR2101MB0943_-- From nobody Mon Jan 22 00:38:35 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 653991242EA for ; Mon, 22 Jan 2018 00:38:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PN6t9Ai3XvGW for ; Mon, 22 Jan 2018 00:38:31 -0800 (PST) Received: from lb2-smtp-cloud9.xs4all.net (lb2-smtp-cloud9.xs4all.net [194.109.24.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 939C61200B9 for ; Mon, 22 Jan 2018 00:38:31 -0800 (PST) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:206]) by smtp-cloud9.xs4all.net with ESMTPA id dXcbeauW46VzTdXcbehV8l; Mon, 22 Jan 2018 09:38:29 +0100 Received: from AMontpellier-654-1-151-23.w90-0.abo.wanadoo.fr ([90.0.222.23]) by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Mon, 22 Jan 2018 09:38:29 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Mon, 22 Jan 2018 09:38:29 +0100 From: peter van der Stok To: ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org In-Reply-To: <151661006967.8109.1342240770919008979.idtracker@ietfa.amsl.com> References: <151661006967.8109.1342240770919008979.idtracker@ietfa.amsl.com> Message-ID: X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfKC6hOcHno+337Wx8tSZrpg9bXx9CSq+2mOQynDHc8Srjqbt8JKF1TeMOj3TDNA4SEXzQMd1RyTmcNy0CxE9Ef3qyqhADYOpuAaZxGqZGrMZU94aIrYg Lo7xZ4rEKINUZ+z6F9p+GfSIZ0b/vijrYzaPLFz00vbkAzVo/vSD6DNyrq5T+fRgDKduQxMFElqpbD/JuQyG79WiSjxi42Rmqak= Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-vanderstok-ace-coap-est-04.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jan 2018 08:38:34 -0000 Hi Ace, WG-chairs, This new version of coap-est takes into account the remarks made by Hannes; thanks Hannes. This version looks appropriate for acceptance by the WG. Greetings, peter A new version of I-D, draft-vanderstok-ace-coap-est-04.txt has been successfully submitted by Peter van der Stok and posted to the IETF repository. Name: draft-vanderstok-ace-coap-est Revision: 04 Title: EST over secure CoAP (EST-coaps) Document date: 2018-01-22 Group: Individual Submission Pages: 30 URL: https://www.ietf.org/internet-drafts/draft-vanderstok-ace-coap-est-04.txt Status: https://datatracker.ietf.org/doc/draft-vanderstok-ace-coap-est/ Htmlized: https://tools.ietf.org/html/draft-vanderstok-ace-coap-est-04 Htmlized: https://datatracker.ietf.org/doc/html/draft-vanderstok-ace-coap-est-04 Diff: https://www.ietf.org/rfcdiff?url2=draft-vanderstok-ace-coap-est-04 Abstract: Enrollment over Secure Transport (EST) [RFC7030] is used as a certificate management protocol over HTTPS. Low-resource devices often use the lightweight Constrained Application Protocol (CoAP) [RFC7252] for message exchanges. This document defines how to transport EST payloads over secure CoAP (EST- coaps). This allows low-resource constrained devices to re-use existing EST functionality. Example low-resource use cases for EST are: secure bootstrapping and certificate enrollment. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Mon Jan 22 07:00:01 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DB7A127058; Mon, 22 Jan 2018 06:59:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zBIkPrT_jO_9; Mon, 22 Jan 2018 06:59:51 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0056.outbound.protection.outlook.com [104.47.2.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54AFC1200C5; Mon, 22 Jan 2018 06:59:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=NyeXPaRL2iPAYA2WxZOuklZDDNmVh215d0pOxquGuVw=; b=aBk07thOIcaGwhsDORiKIhEt0hKAQCl8DagzjoHRxjsmdo/5j19coMc7Qm+rycL/JPZMo4QeyhArcQxXwYiAiKa4Inh5N8aoC21KCFvKVlISVW7Y3ij88yZc21orT0XMcKQ6HtX7Fr6eNgipfD3hE3JlHWqohl2Z0Akck+8bvE8= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.428.17; Mon, 22 Jan 2018 14:59:49 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0428.019; Mon, 22 Jan 2018 14:59:49 +0000 From: Hannes Tschofenig To: "ace@ietf.org" , oauth Thread-Topic: Deadline Extended - Call for Position Papers and Tutorials - Third OAuth Security Workshop (OSW 2018) Thread-Index: AdOTkUoil+6yuQInT8u/MYqvx0ZmfQ== Date: Mon, 22 Jan 2018 14:59:48 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [97.105.200.131] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2706; 7:ho/WUJWTeWJ96oSS/gM9SsgWZk679WHAA0TTTj+jhBimodn59Csq7XpoBDBq7eXy0gyQXHXS3QtEWGztPbMIIwH3mFw7Rk95jHWYJ8OKOtpBwScCg7Y7xC3kCvFlGIaOEMYnLrW1SodvE3apEJKx/7Oq0K/HOPQl48dJFPz1xrfkIHoKtJnvivw4sgAmV7n/mB+51O3yl+Crit2AdyuauJ9sgqIB9s9nuD0x1uATHSKrhhRza9wACYQU9rrW6oXj x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: 4678fbc8-25e2-4d5e-7ee9-08d561a8c89a x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(48565401081)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2706; x-ms-traffictypediagnostic: AM4PR0801MB2706: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231023)(2400081)(944501161)(6055026)(6041288)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:AM4PR0801MB2706; BCL:0; PCL:0; RULEID:(100000803101)(100110400095); SRVR:AM4PR0801MB2706; x-forefront-prvs: 0560A2214D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(39380400002)(366004)(346002)(376002)(396003)(199004)(189003)(40434004)(59450400001)(99286004)(966005)(72206003)(316002)(2906002)(10710500007)(105586002)(5660300001)(86362001)(74316002)(7696005)(7110500001)(6506007)(81166006)(25786009)(81156014)(8676002)(606006)(102836004)(450100002)(478600001)(7736002)(26005)(97736004)(14454004)(110136005)(5890100001)(66066001)(15650500001)(3280700002)(236005)(9686003)(68736007)(3660700001)(6436002)(6306002)(54896002)(2501003)(8936002)(106356001)(5250100002)(3846002)(6116002)(790700001)(53936002)(55016002)(33656002)(2420400007)(2900100001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2706; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: ydYzHiGdZLp5mkQltwZHU9ij7AyAVoRR4vyZKhMwCEkm3XMcuzcIKr/Xq7HGHIDiMoJ7vztNW8xkUoOXNivyoQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB27068CE92871E7F76D87C4CCFAEC0AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4678fbc8-25e2-4d5e-7ee9-08d561a8c89a X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jan 2018 14:59:48.9823 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2706 Archived-At: Subject: [Ace] Deadline Extended - Call for Position Papers and Tutorials - Third OAuth Security Workshop (OSW 2018) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jan 2018 14:59:54 -0000 --_000_AM4PR0801MB27068CE92871E7F76D87C4CCFAEC0AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We have extended the submission deadline to January 26 for our 3rd OAuth Se= curity workshop, which will take place in March the week before the IETF me= eting. More info about the workshop can be found here: https://st.fbk.eu/os= w2018 Please consider contributing your experience with OAuth-related technologie= s. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB27068CE92871E7F76D87C4CCFAEC0AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We have extended the submission deadline to January = 26 for our 3rd OAuth Security workshop, which will take place in March the = week before the IETF meeting. More info about the workshop can be found her= e: https://st.fbk.eu/osw2018

 

Please consider contributing your experience with OA= uth-related technologies.

 

Ciao
Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB27068CE92871E7F76D87C4CCFAEC0AM4PR0801MB2706_-- From nobody Tue Jan 30 08:10:36 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE0D61252BA for ; Tue, 30 Jan 2018 08:10:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lD_R0XBi-jfX for ; Tue, 30 Jan 2018 08:10:31 -0800 (PST) Received: from aer-iport-3.cisco.com (aer-iport-3.cisco.com [173.38.203.53]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7158212DA22 for ; Tue, 30 Jan 2018 08:10:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4099; q=dns/txt; s=iport; t=1517328625; x=1518538225; h=subject:to:references:from:message-id:date:mime-version: in-reply-to; bh=DG7rPmTuhRwqeef6ddIo3ViEWvMSYEmsu3jIy9NO0Lw=; b=RuNd7YqRJl6k3IXfBF1ZAEYm9SAK+EV3bhnFuTzHtUuR9L4Z3N+8yahl PY48SjJBIgWBRiiCaJTw92BkvVgX3jL+UknIMoDFqe0iQmWrWms7C9zpM sDF+4gOK59I2jRFdHr14SmNZMuZP+/I5T2QoTObj5nrGBRzLicsGzD0Y/ U=; X-Files: signature.asc : 488 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AZAgCXmHBa/xbLJq1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBAQcBAQEBAYQodSiDYIsYj1Unl0UVggIHAxgNhRYCgx4WAQEBAQEBAQECayi?= =?us-ascii?q?FJAEBBAEBIUsJEgkCGBUVAgInMAcMBgIBAYoxEIg8nXGCJ4NXhwUIAQEBAQEFA?= =?us-ascii?q?QEBARUPhFeFfQyCeYMvAQECAQEXgRGBBIJYgmUFkj+RWIRhgjKBBY1QghtnhTq?= =?us-ascii?q?DcYd8jWaKAYE8JgooJYErMxoIGxUZJIIqCYMBgW5ANwGObAEBAQ?= X-IronPort-AV: E=Sophos; i="5.46,435,1511827200"; d="asc'?scan'208"; a="1703399" Received: from aer-iport-nat.cisco.com (HELO aer-core-1.cisco.com) ([173.38.203.22]) by aer-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Jan 2018 16:10:21 +0000 Received: from [10.61.243.57] ([10.61.243.57]) by aer-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id w0UGALAu010377; Tue, 30 Jan 2018 16:10:21 GMT To: consultancy@vanderstok.org, ace@ietf.org References: <151661006967.8109.1342240770919008979.idtracker@ietfa.amsl.com> From: Eliot Lear Message-ID: Date: Tue, 30 Jan 2018 17:10:20 +0100 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ah09WbMo0DDXL83Jqx6mKUboJ7pQtViq6" Archived-At: Subject: Re: [Ace] Fwd: New Version Notification for draft-vanderstok-ace-coap-est-04.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 16:10:35 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --ah09WbMo0DDXL83Jqx6mKUboJ7pQtViq6 Content-Type: multipart/mixed; boundary="glA3LE5lbg1fsUuCQFKp85E9DsB2rTQRA"; protected-headers="v1" From: Eliot Lear To: consultancy@vanderstok.org, ace@ietf.org Message-ID: Subject: Re: [Ace] Fwd: New Version Notification for draft-vanderstok-ace-coap-est-04.txt References: <151661006967.8109.1342240770919008979.idtracker@ietfa.amsl.com> In-Reply-To: --glA3LE5lbg1fsUuCQFKp85E9DsB2rTQRA Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Hi, Is this ready for publication as a WG draft? Eliot On 22.01.18 09:38, peter van der Stok wrote: > Hi Ace, WG-chairs, > > This new version of coap-est takes into account the remarks made by > Hannes; thanks Hannes. > > This version looks appropriate for acceptance by the WG. > > Greetings, > > peter > > A new version of I-D, draft-vanderstok-ace-coap-est-04.txt > has been successfully submitted by Peter van der Stok and posted to the= > IETF repository. > > Name:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 draft-vanderstok-ace-co= ap-est > Revision:=C2=A0=C2=A0=C2=A0 04 > Title:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 EST over secure CoAP (= EST-coaps) > Document date:=C2=A0=C2=A0=C2=A0 2018-01-22 > Group:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Individual Submission > Pages:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 30 > URL:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > https://www.ietf.org/internet-drafts/draft-vanderstok-ace-coap-est-04.t= xt > Status:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > https://datatracker.ietf.org/doc/draft-vanderstok-ace-coap-est/ > Htmlized:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > https://tools.ietf.org/html/draft-vanderstok-ace-coap-est-04 > Htmlized:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > https://datatracker.ietf.org/doc/html/draft-vanderstok-ace-coap-est-04 > Diff:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > https://www.ietf.org/rfcdiff?url2=3Ddraft-vanderstok-ace-coap-est-04 > > Abstract: > =C2=A0=C2=A0 Enrollment over Secure Transport (EST) [RFC7030] is used a= s a > =C2=A0=C2=A0 certificate management protocol over HTTPS. > > =C2=A0=C2=A0 Low-resource devices often use the lightweight Constrained= > =C2=A0=C2=A0 Application Protocol (CoAP) [RFC7252] for message exchange= s.=C2=A0 This > =C2=A0=C2=A0 document defines how to transport EST payloads over secure= CoAP (EST- > =C2=A0=C2=A0 coaps).=C2=A0 This allows low-resource constrained devices= to re-use > =C2=A0=C2=A0 existing EST functionality.=C2=A0 Example low-resource use= cases for EST > =C2=A0=C2=A0 are: secure bootstrapping and certificate enrollment. > > > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --glA3LE5lbg1fsUuCQFKp85E9DsB2rTQRA-- --ah09WbMo0DDXL83Jqx6mKUboJ7pQtViq6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEmNC9kEYdsJKnsmEdh7ZrRtnSejMFAlpwmOwACgkQh7ZrRtnS ejO5FAf6A+7a87PLBNThWMsoPJm0B+3a3EkFK9BrXTiDBLnyCFU21MF8J/zwmOv3 oCy3tqr5xFF4cpldhMGL4GmHWjEbYKxFP6W644+MYS1Is8gcs4kqG6mYttH4qqWm LkwgeqOJv1t3qlJiGMi1Rzt8bkjhL3S5DBJIqkiioj53c3MztUxKBidi4rKUqCL/ a4mtxR+j0d3SVkD826bcXh0/o0C+Cm/BeGeLY/Fpnf2J3Bu8DRGBM2dGAJAzeu4b Bq0vNSbXg6QLPSnDSeM5sjTFZI5KE3pUEXBcOUauzeppf+EyOycL2u+62KPhEjnV IAfdSYZTm4OvW6hGjI6M3g+EX4kpbw== =j4Hg -----END PGP SIGNATURE----- --ah09WbMo0DDXL83Jqx6mKUboJ7pQtViq6-- From nobody Tue Jan 30 12:23:14 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AF57D12FB1D; Tue, 30 Jan 2018 12:23:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151734379171.31839.3908006858728977734.idtracker@ietfa.amsl.com> Date: Tue, 30 Jan 2018 12:23:11 -0800 Archived-At: Subject: [Ace] The ACE WG has placed draft-vanderstok-ace-coap-est in state "Call For Adoption By WG Issued" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 20:23:12 -0000 The ACE WG has placed draft-vanderstok-ace-coap-est in state Call For Adoption By WG Issued (entered by Jim Schaad) The document is available at https://datatracker.ietf.org/doc/draft-vanderstok-ace-coap-est/ From nobody Tue Jan 30 12:25:24 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C2FF12FAE2 for ; Tue, 30 Jan 2018 12:25:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.012 X-Spam-Level: X-Spam-Status: No, score=-0.012 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NB4Yt_MtFLl7 for ; Tue, 30 Jan 2018 12:25:20 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A652D12FAB1 for ; Tue, 30 Jan 2018 12:25:19 -0800 (PST) Received: from Jude (192.168.1.162) by mail2.augustcellars.com (192.168.1.201) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Tue, 30 Jan 2018 12:21:35 -0800 From: Jim Schaad To: Date: Tue, 30 Jan 2018 12:23:07 -0800 Message-ID: <010f01d39a08$255723c0$70056b40$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdOaBxPvuhazfivPQR6hGrReGsdXHw== Content-Language: en-us X-Originating-IP: [192.168.1.162] Archived-At: Subject: [Ace] Working group adoption of draft-vanderstok-ace-est X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jan 2018 20:25:22 -0000 This is the start of a two week call for input on the adoption of the WG of the document draft-vanderstok-ace-est. The document has been presented at the last two meetings and has some significant recent updates to respond to feedback. There seemed to be support at the last F2F to adopt. Please provide feedback to the list/chairs if you believe that this document should be adopted as a WG document. The adoption call will end on Feb 13 2018. Jim