From nobody Tue Apr 10 13:17:00 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D08CD12D77B for ; Tue, 10 Apr 2018 13:16:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.738 X-Spam-Level: X-Spam-Status: No, score=-1.738 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UnYMsJodOKSC for ; Tue, 10 Apr 2018 13:16:56 -0700 (PDT) Received: from mail-qt0-x229.google.com (mail-qt0-x229.google.com [IPv6:2607:f8b0:400d:c0d::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 616671272E1 for ; Tue, 10 Apr 2018 13:16:56 -0700 (PDT) Received: by mail-qt0-x229.google.com with SMTP id j3so14794353qtn.9 for ; Tue, 10 Apr 2018 13:16:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=SDrmqUrPxmaIv43ikQisM5Vy40UliQrJoEc3V0KO9jg=; b=NX+jWa3sQI0XUTYr4rh5mrjQpUvjkA1OSXmzE0wKCTJz/XfWJ6AoT5sQsT6ymuLuG9 8Pi9fF67F2QOdwtKjrK3lLde+nUyWb1jBh5hIWTbH+1mzs9oP410//IXVS0LUQzBHDgF ejp1YThGuIAA+cG5bvte6M50xxTbLCXdWddR8r0WYAw6cQnV5DX9NOIaCIm74e3S7CnI HwGfgKa1WlAwM4HTg6f03O9VdghnLwFGF2EhmJwWQd9nxr07d4k314pdbv63YhCBGSta ecqa+TttDa6Tw6BbbPLKtz+71d7OHu86YDgZg4z/cyhXcyfdDOpTK+f0dW5duog5AtQ8 6aGQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=SDrmqUrPxmaIv43ikQisM5Vy40UliQrJoEc3V0KO9jg=; b=mq7DZdv/5Br8u3govdGR0lMQjpy/3B2tdtoKt+g1vfCjNI4b+bDIOeBo3D4/+rTw5Q 5UpzUUg+DHwQ8R51tCPUCqB7UEDKrDm8zHWiVeK6tTzoWDc8ockeOnq61229zmBGDdbi 2QJFgLevqU1HhlkQv2EfN9gDxux6A206lpEqloIeHggzxX2NDg6wRTvEDuiEzxbFk8ta eS3uuh8yl8QGAc4Eq35DQM2RrB9kzJ5DZWy/emZ9C88jg3vhUuky+dqQVvHywRWtF4mj X8VWffbAmL3oash6fxppK++lLdcXsnmhgWuU8sw2KMC356o6P2AEi8QB1NH4K4e1SAtS Wi4A== X-Gm-Message-State: ALQs6tDW3yG2wjQatZi6FF4sMgRFcEgqfZ+NbJAxTH9zAJM9wQ5no9yN 9YE/5CxPBeAOASzvkFC2a3qiLO1FQsIFHlAGz7A= X-Google-Smtp-Source: AIpwx4/SnthcQ6bedNN+74KaSsB2rX7vYEkK328LOuoqttahxxq8J54i9PJh18sJyLB2IgGtwIczHotFebwVLf1TIRo= X-Received: by 10.200.39.67 with SMTP id h3mr2967199qth.115.1523391415151; Tue, 10 Apr 2018 13:16:55 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.203.135 with HTTP; Tue, 10 Apr 2018 13:16:54 -0700 (PDT) In-Reply-To: <33396711-83D8-4912-AD5E-A02CA8AFFE4D@nominet.uk> References: <152339113000.27327.10232437013613985709.idtracker@ietfa.amsl.com> <33396711-83D8-4912-AD5E-A02CA8AFFE4D@nominet.uk> From: Cigdem Sengul Date: Tue, 10 Apr 2018 21:16:54 +0100 Message-ID: To: ace@ietf.org, Dominik Obermaier Content-Type: multipart/alternative; boundary="001a1140275a27728d05698434b9" Archived-At: Subject: [Ace] Fwd: FW: New Version Notification for draft-sengul-ace-mqtt-tls-profile-02.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Apr 2018 20:16:59 -0000 --001a1140275a27728d05698434b9 Content-Type: text/plain; charset="UTF-8" Dear Ace, The new version we uploaded addresses the review comments of Dominik Obermaier (sent to list on November 7, 2017). Based on his suggestion, the ping requests from the client are added as a trigger for token expiry check at the broker as a SHOULD. Do please let us know if you have any other comments. Thanks, --Cigdem On 10/04/2018, 21:12, "internet-drafts@ietf.org" wrote: A new version of I-D, draft-sengul-ace-mqtt-tls-profile-02.txt has been successfully submitted by Cigdem Sengul and posted to the IETF repository. Name: draft-sengul-ace-mqtt-tls-profile Revision: 02 Title: MQTT-TLS profile of ACE Document date: 2018-04-10 Group: Individual Submission Pages: 20 URL: https://www.ietf.org/internet- drafts/draft-sengul-ace-mqtt-tls-profile-02.txt Status: https://datatracker.ietf.org/ doc/draft-sengul-ace-mqtt-tls-profile/ Htmlized: https://tools.ietf.org/html/d raft-sengul-ace-mqtt-tls-profile-02 Htmlized: https://datatracker.ietf.org/ doc/html/draft-sengul-ace-mqtt-tls-profile Diff: https://www.ietf.org/rfcdiff? url2=draft-sengul-ace-mqtt-tls-profile-02 Abstract: This document specifies a profile for the ACE (Authentication and Authorization for Constrained Environments) to enable authorization in an MQTT-based publish-subscribe messaging system. Proof-of- possession keys, bound to OAuth2.0 access tokens, are used to authenticate and authorize publisher and subscriber clients. The protocol relies on TLS for confidentiality and server authentication. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --001a1140275a27728d05698434b9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear Ace,

The new version we uploaded= addresses the review comments of Dominik Obermaier (sent to list on Novemb= er 7, 2017).=C2=A0
Based on his suggestion,= the ping requests from the client are added as a trigger for token expiry = check at the broker as a SHOULD.=C2=A0

=
Do please let us know if you have any othe= r comments.=C2=A0

Thanks,
--Cigdem=C2=A0


On 10/04/2018, 21:12, "internet-drafts@ietf.org" <internet-drafts@ietf.org> w= rote:


=C2=A0 =C2=A0 A new version of I-D, draft-sengul-ace-mqtt-tls-profile-= 02.txt
=C2=A0 =C2=A0 has been successfully submitted by Cigdem Sengul and posted t= o the
=C2=A0 =C2=A0 IETF repository.

=C2=A0 =C2=A0 Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0d= raft-sengul-ace-mqtt-tls-profile
=C2=A0 =C2=A0 Revision:=C2=A0 =C2=A002
=C2=A0 =C2=A0 Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 MQTT-T= LS profile of ACE
=C2=A0 =C2=A0 Document date:=C2=A0 =C2=A0 =C2=A0 2018-04-10
=C2=A0 =C2=A0 Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Indivi= dual Submission
=C2=A0 =C2=A0 Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 20
=C2=A0 =C2=A0 URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/internet-dra= fts/draft-sengul-ace-mqtt-tls-profile-02.txt
=C2=A0 =C2=A0 Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/draft-sengul-ac= e-mqtt-tls-profile/
=C2=A0 =C2=A0 Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://tools.ietf.org/html/draft-sengul-ace-mqtt-tls-pr= ofile-02
=C2=A0 =C2=A0 Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/html/draft-sengu= l-ace-mqtt-tls-profile
=C2=A0 =C2=A0 Diff:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/rfcdiff?url2=3D= draft-sengul-ace-mqtt-tls-profile-02

=C2=A0 =C2=A0 Abstract:
=C2=A0 =C2=A0 =C2=A0 =C2=A0This document specifies a profile for the ACE (A= uthentication and
=C2=A0 =C2=A0 =C2=A0 =C2=A0Authorization for Constrained Environments) to e= nable authorization
=C2=A0 =C2=A0 =C2=A0 =C2=A0in an MQTT-based publish-subscribe messaging sys= tem.=C2=A0 Proof-of-
=C2=A0 =C2=A0 =C2=A0 =C2=A0possession keys, bound to OAuth2.0 access tokens= , are used to
=C2=A0 =C2=A0 =C2=A0 =C2=A0authenticate and authorize publisher and subscri= ber clients.=C2=A0 The
=C2=A0 =C2=A0 =C2=A0 =C2=A0protocol relies on TLS for confidentiality and s= erver authentication.




=C2=A0 =C2=A0 Please note that it may take a couple of minutes from the tim= e of submission
=C2=A0 =C2=A0 until the htmlized version and diff are available at tools.ietf.= org.

=C2=A0 =C2=A0 The IETF Secretariat




--001a1140275a27728d05698434b9-- From nobody Fri Apr 13 05:52:21 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F1F2120721 for ; Fri, 13 Apr 2018 05:52:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VSOvOtmDAm-v for ; Fri, 13 Apr 2018 05:52:19 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 006891200C1 for ; Fri, 13 Apr 2018 05:52:18 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w3DCqI1s015404 for ; Fri, 13 Apr 2018 08:52:18 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu w3DCqI1s015404 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1523623938; bh=HW3v/rMx/soyU7KWGqgx4DNX7urnVaSB/ZqBCaobo3I=; h=From:To:Subject:Date:From; b=C0rLWncFrO4wVAIZRqHib9dv5Z0JM8EY7Jqzjg9VSFxr8Kt8Hibj6WX5UhWBlWEuy 7h26C4YXhlIyfHw/PREz7ciYLkXyWcCnm08dVSs/Mrtoj/9pG0lZGAe1idUmqidjPR p1Er9OfbGweH/RNhViXyQI6S/M+p48bn4y+AA1gA= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w3DCpG0F006660 for ; Fri, 13 Apr 2018 08:51:16 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0361.001; Fri, 13 Apr 2018 08:51:16 -0400 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Draft minutes from the IETF 101 meeting Thread-Index: AdPTJcW1vX2CsfXiR0mZWB/JifktPA== Date: Fri, 13 Apr 2018 12:51:15 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC014C3834E1@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Draft minutes from the IETF 101 meeting X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Apr 2018 12:52:21 -0000 Hello WG! Draft minutes from the IETF 101 meeting have been published at: https://dat= atracker.ietf.org/meeting/101/materials/minutes-101-ace-00 Please send all updates and corrections to the chairs. Regards, Roman and Jim From nobody Thu Apr 19 02:37:06 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C79812D7F9 for ; Thu, 19 Apr 2018 02:37:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u0x1ifwfnCT8 for ; Thu, 19 Apr 2018 02:37:02 -0700 (PDT) Received: from lb1-smtp-cloud8.xs4all.net (lb1-smtp-cloud8.xs4all.net [194.109.24.21]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68D91124C27 for ; Thu, 19 Apr 2018 02:37:02 -0700 (PDT) Received: from webmail.xs4all.nl ([IPv6:2001:888:0:22:194:109:20:214]) by smtp-cloud8.xs4all.net with ESMTPA id 95zrfVMBpdX8I95zrfx13n; Thu, 19 Apr 2018 11:37:00 +0200 Received: from 2001:983:a264:1:61f3:5e12:df9b:61b5 by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Thu, 19 Apr 2018 11:36:55 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 19 Apr 2018 11:36:55 +0200 From: peter van der Stok To: ace@ietf.org Organization: vanderstok consultancy Reply-To: consultancy@vanderstok.org Mail-Reply-To: consultancy@vanderstok.org Message-ID: <0c356bc5b658c27cb6341177f205fd67@xs4all.nl> X-Sender: stokcons@xs4all.nl User-Agent: XS4ALL Webmail X-CMAE-Envelope: MS4wfABqIaeC1GYMhHEnkqkUXx2ThFXvcO14VEuYYCUhNmkuywaVezTzymvInr1Lj4pqarQIhDhFE9iZrO69FVKZ7UZyIa2iT3QDd6RNzCydv5OzFnSoWW8+ cZQ+liSliazHdzkRSJBfa5zXzV3LDJsJZakj2kfSPjQ1Wgwwl/OckIWoyj3lnqLFFLmmdu45Ks3aB4F8Exqri5lEsTObpI59ALk= Archived-At: Subject: [Ace] ace-oscoap-joining comments X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Apr 2018 09:37:04 -0000 Hi authors, Below comments on the draft-tiloca-ace-oscoap-joining-03. The draft seems to be pretty clear, but then, I did not try to implement it. Comments on details, typos, structure, and questions are mixed together in reading sequence. title: I expect draft-tiloca-ace-oscore-joining (oscoap is in the past) page 3 section 1. dtls-authorize and oscore-profile are mentioned quite prominently here, but almost not used elsewhere in the draft (section 6), and only informative. suggest to remove here. section 1.1 The phrase "message exchanges .... useful terminology" may go for me. (mentioned in authz and others already). Is reference to oAuth 2.0 not sufficient, ace-actors is not really needed IMO. I miss Group Manager in the terminology. here relation with RS can be mentioned, not needed in section 2. Section 2 bullet 3 is quite complex text: Suggestion: The Authorization Server (AS) authorizes joining nodes to join .... The AS MAY release access tokens for other purposes than accessing join resources; for example: to release...... of OSCORE groups Page 5 Is paragraph "All communication ...... ACE Framework [authz]" not almost identical to "communications between ..... this specification". If not, reformulation is clearly needed. page 5 point 1. suggestion for last phrase: With the response from the AS, the joining node starts or continues a secure channel with the Group Manager. point 2 Collapse phrase 2 and 3 to: "Then, a joining node must establish ....first time". May be add a reference to DTLS or other recommended alternatives? point 4 in the OSCORE group -> with the OSCORE group members. Suggest a point 5 to say that the secure channel is maintained for between JN and GM Section 3 is about JN to AS but mentions secure channel between JN and GM. That is confusing, because I expect text about secure channel between JN and AS. I suggest to remove the discovery with the aid of resource-directory, or add more text and specify a resource-type rt=) for the AS. section 3.1 under scope parameter first *: I failed to find the "dynamic" component of the scope parameter in [key-groupcomm] get-pub-keys. I wonder why you want to separate the public key storage from the GM. What is the operational advantage?; I only see added complexity. section 3.2 "The AS is responsible.....Group Manager" I don't understand this phrase. The "exp" parameter; it MUST be present and then is out of scope? The phrase "in case the value......include the "scope" parameter" is difficult to read. I suggest: The AS must include the "scope" parameter in the response, when the returned value of the response differs from the one in the request. (or anything shorter) section 4 page 7 /what specified/ what is specified/ section 4.2 page 8 /yields to a positive/yields a positive/ section 5 Again why separate key storage first bullet: IMO, it does not hurt to provide the public key, when already known; specifying conditions in the protocol increases the probability of errors. (Others may have different opinions given the need of payload reduction) page 11 "Before sending the join response .... this specification" suggest to move this phrase to section 6. section 6. I suggest to add the reference to oscore-groupcomm when referring to the (sections) or (appendix). Hope this helps, Peter -- Peter van der Stok vanderstok consultancy mailto: consultancy@vanderstok.org www: www.vanderstok.org tel NL: +31(0)492474673 F: +33(0)966015248 From nobody Fri Apr 27 10:26:21 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C8ED126DEE; Fri, 27 Apr 2018 08:58:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.929 X-Spam-Level: X-Spam-Status: No, score=-2.929 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5bg2y_u9lgr0; Fri, 27 Apr 2018 08:58:02 -0700 (PDT) Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:40]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38282126CD6; Fri, 27 Apr 2018 08:58:02 -0700 (PDT) Received: from faui48f.informatik.uni-erlangen.de (faui48f.informatik.uni-erlangen.de [131.188.34.52]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id 571E958C4B1; Fri, 27 Apr 2018 17:57:58 +0200 (CEST) Received: by faui48f.informatik.uni-erlangen.de (Postfix, from userid 10463) id EAEA4440214; Fri, 27 Apr 2018 17:57:57 +0200 (CEST) Date: Fri, 27 Apr 2018 17:57:57 +0200 From: Toerless Eckert Cc: draft-richardson-anima-ace-constrained-voucher@ietf.org Message-ID: <20180427155757.oeequgkav6d6g55b@faui48f.informatik.uni-erlangen.de> Reply-To: anima@ietf.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) Archived-At: X-Mailman-Approved-At: Fri, 27 Apr 2018 10:26:20 -0700 Subject: [Ace] FYI: [Anima] Adoption call for draft-richardson-anima-ace-constrained-voucher (ends 05/12/2018) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Apr 2018 15:58:04 -0000 Just a quick notification for the adoption call of subject draft in anima: If you are interested in the work in ACE or 6TISCH intending to leverage it, or the draft itself, please chime in on ANIMA mailing list. Thank you Toerless On Fri, Apr 27, 2018 at 05:33:03PM +0200, Toerless Eckert wrote: > draft-richardson-anima-ace-constrained-voucher was presented at IETF101 > and received good interest. The authors asked for adoption. As far > as the chairs heard, there was no objection in the room. As new > work, we discussed this with the new AD for ANIMA Ignas Bagdonas and > also concluded that this work would be in scope of our current chater. > > We hereby are officially asking the working group to confirm adoption > of this work: This message starts a two-week adoption call on: > > Title: Constrained Voucher Profile for Bootstrapping Protocols > Name: draft-richardson-anima-ace-constrained-voucher > Authors: M. Richardson, P. van der Stok, P. Kampanakis > URL: https://datatracker.ietf.org/doc/draft-richardson-anima-ace-constrained-voucher/ > > Please express your support or rejection. If you think this document > should _not_ be adopted, please also explicitly indicate the reasons. > This adoption call will end on May 12, 2018. > > More information as follows: > > This document is intended to become standards track ANIMA WG document > (-03 has a format mistake indicating informational, this would be fixed). > > Standard track is desired because it is meant to become the required > voucher format for solutions with (low-end) devices with existing or > future signaling protocols. > > One of the candidate future signaling to use this voucher is > draft-ietf-ace-coap-est. Another one is BRSKI with DTLS > using the CBOR encoding proposed in the document for use cases > of the FairHair association which includes members from ZigBEE, KNX > and Bacnet. It would also be needed to by other 6tisch > documents such as draft-ietf-6tisch-dtsecurity-zerotouch-join > (from which this voucher draft was actually extracted, similarily to > how voucher was extracted from BRSKI). > > The choice for bringing this to anima was done because of the experience > with the first voucher draft, comparing possible working groups and > concluding that ANIMA was best the best WG for it. > > Regards > ANIMA chairs (Sheng & Toerless) From nobody Sat Apr 28 00:50:34 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05A0D12D88D for ; Sat, 28 Apr 2018 00:50:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.371 X-Spam-Level: X-Spam-Status: No, score=-3.371 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, INVALID_MSGID=0.568, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eOOb9gKKqrdy for ; Sat, 28 Apr 2018 00:50:29 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDA3112D881 for ; Sat, 28 Apr 2018 00:50:28 -0700 (PDT) Received: from lhreml702-cah.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id BF36C204D8EE0 for ; Sat, 28 Apr 2018 08:50:24 +0100 (IST) Received: from SINEML703-CAH.china.huawei.com (10.223.161.53) by lhreml702-cah.china.huawei.com (10.201.108.43) with Microsoft SMTP Server (TLS) id 14.3.382.0; Sat, 28 Apr 2018 08:50:26 +0100 Received: from SINEML521-MBS.china.huawei.com ([169.254.2.135]) by SINEML703-CAH.china.huawei.com ([10.223.161.53]) with mapi id 14.03.0382.000; Sat, 28 Apr 2018 15:50:21 +0800 From: Wang Guilin To: "ace@ietf.org" Thread-Topic: Ace Digest, Vol 53, Issue 4 Thread-Index: AQHT3loL1mHKHpe/nUKY15DxSzWL1aQVzmlc Date: Sat, 28 Apr 2018 07:50:21 +0000 Message-ID: A1821046-9D6F-4F0E-8A60-0FEF10A07BBD References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_A18210469D6F4F0E8A600FEF10A07BBD_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Ace] Ace Digest, Vol 53, Issue 4 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Apr 2018 07:50:33 -0000 --_000_A18210469D6F4F0E8A600FEF10A07BBD_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 WWVzLCBKYXZpZXIsIHdlIGhhdmUgcmVjZWl2ZWQgeW91ciBncmVhdCBjb21tZW50cyAyIHdlZWtz IGFnby4gQXBwcmVjaWF0ZWQhDQoNClRob3VnaHQgSSBoYXZlIHJlcGxpZWQuIFNvcnJ5IGZvciB0 aGF0Lg0KDQpHdWlsaW4NCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCldhbmcgR3VpbGluDQpNOiArNjUtODY5MjAzNDU8dGVsOis2NS04NjkyMDM0 NT4NCkU6IFdhbmcuR3VpbGluQGh1YXdlaS5jb208bWFpbHRvOldhbmcuR3VpbGluQGh1YXdlaS5j b20+DQoyMDEyPHRlbDoyMDEyPuWunumqjOWupC3mlrDliqDlnaHnoJTnqbbmiYANCjIwMTI8dGVs OjIwMTI+IExhYm9yYXRvcmllcy1TaW5nYXBvcmUgUmVzZWFyY2ggQ2VudGVyDQrlj5Hku7bkurrv vJphY2UtcmVxdWVzdEBpZXRmLm9yZw0K5pS25Lu25Lq677yaYWNlQGlldGYub3JnLA0K5pe26Ze0 77yaMjAxOC0wNC0yOCAwOTowMDo0NA0K5Li74oCD6aKY77yaQWNlIERpZ2VzdCwgVm9sIDUzLCBJ c3N1ZSA0DQoNClNlbmQgQWNlIG1haWxpbmcgbGlzdCBzdWJtaXNzaW9ucyB0bw0KICAgICAgICBh Y2VAaWV0Zi5vcmcNCg0KVG8gc3Vic2NyaWJlIG9yIHVuc3Vic2NyaWJlIHZpYSB0aGUgV29ybGQg V2lkZSBXZWIsIHZpc2l0DQogICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vYWNlDQpvciwgdmlhIGVtYWlsLCBzZW5kIGEgbWVzc2FnZSB3aXRoIHN1YmplY3Qgb3Ig Ym9keSAnaGVscCcgdG8NCiAgICAgICAgYWNlLXJlcXVlc3RAaWV0Zi5vcmcNCg0KWW91IGNhbiBy ZWFjaCB0aGUgcGVyc29uIG1hbmFnaW5nIHRoZSBsaXN0IGF0DQogICAgICAgIGFjZS1vd25lckBp ZXRmLm9yZw0KDQpXaGVuIHJlcGx5aW5nLCBwbGVhc2UgZWRpdCB5b3VyIFN1YmplY3QgbGluZSBz byBpdCBpcyBtb3JlIHNwZWNpZmljDQp0aGFuICJSZTogQ29udGVudHMgb2YgQWNlIGRpZ2VzdC4u LiINCg== --_000_A18210469D6F4F0E8A600FEF10A07BBD_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVu dD0iTWljcm9zb2Z0IEV4Y2hhbmdlIFNlcnZlciI+DQo8IS0tIGNvbnZlcnRlZCBmcm9tIHRleHQg LS0+PHN0eWxlPjwhLS0gLkVtYWlsUXVvdGUgeyBtYXJnaW4tbGVmdDogMXB0OyBwYWRkaW5nLWxl ZnQ6IDRwdDsgYm9yZGVyLWxlZnQ6ICM4MDAwMDAgMnB4IHNvbGlkOyB9IC0tPjwvc3R5bGU+DQo8 L2hlYWQ+DQo8Ym9keT4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+DQo8IS0tDQotLT4NCjwvc3R5 bGU+DQo8ZGl2Pg0KPGRpdj5ZZXMsIEphdmllciwgd2UgaGF2ZSByZWNlaXZlZCB5b3VyIGdyZWF0 IGNvbW1lbnRzIDIgd2Vla3MgYWdvLiBBcHByZWNpYXRlZCE8YnI+DQo8YnI+DQpUaG91Z2h0IEkg aGF2ZSByZXBsaWVkLiBTb3JyeSBmb3IgdGhhdC4gPGJyPg0KPGJyPg0KR3VpbGluPGJyPg0KPGJy Pg0KPC9kaXY+DQo8ZGl2PjwvZGl2Pg0KPGRpdj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxicj4NCldhbmcgR3VpbGluPGJyPg0KTTogPGEgaHJlZj0i dGVsOiYjNDM7NjUtODY5MjAzNDUiPiYjNDM7NjUtODY5MjAzNDU8L2E+PGJyPg0KRTogPGEgaHJl Zj0ibWFpbHRvOldhbmcuR3VpbGluQGh1YXdlaS5jb20iPldhbmcuR3VpbGluQGh1YXdlaS5jb208 L2E+PGJyPg0KPGEgaHJlZj0idGVsOjIwMTIiPjIwMTI8L2E+5a6e6aqM5a6kLeaWsOWKoOWdoeeg lOeptuaJgDxicj4NCjxhIGhyZWY9InRlbDoyMDEyIj4yMDEyPC9hPiBMYWJvcmF0b3JpZXMtU2lu Z2Fwb3JlIFJlc2VhcmNoIENlbnRlcjwvZGl2Pg0KPGRpdiBuYW1lPSJ4X0FueU9mZmljZS1CYWNr Z3JvdW5kLUltYWdlIiBzdHlsZT0iYm9yZGVyLXRvcDoxcHggc29saWQgI0I1QzRERjsgcGFkZGlu Zzo4cHgiPg0KPGRpdiBzdHlsZT0id29yZC1icmVhazpicmVhay1hbGwiPjxiPuWPkeS7tuS6uu+8 mjwvYj5hY2UtcmVxdWVzdEBpZXRmLm9yZzwvZGl2Pg0KPGRpdiBzdHlsZT0id29yZC1icmVhazpi cmVhay1hbGwiPjxiPuaUtuS7tuS6uu+8mjwvYj5hY2VAaWV0Zi5vcmcsPC9kaXY+DQo8ZGl2IHN0 eWxlPSJ3b3JkLWJyZWFrOmJyZWFrLWFsbCI+PGI+5pe26Ze077yaPC9iPjIwMTgtMDQtMjggMDk6 MDA6NDQ8L2Rpdj4NCjxkaXYgc3R5bGU9IndvcmQtYnJlYWs6YnJlYWstYWxsIj48Yj7kuLvigIPp opjvvJo8L2I+QWNlIERpZ2VzdCwgVm9sIDUzLCBJc3N1ZSA0PC9kaXY+DQo8ZGl2Pjxicj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxmb250IHNpemU9IjIiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTBwdDsiPg0KPGRpdiBjbGFzcz0iUGxhaW5UZXh0Ij5TZW5kIEFjZSBtYWlsaW5nIGxpc3Qg c3VibWlzc2lvbnMgdG88YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgYWNlQGlldGYub3JnPGJyPg0KPGJyPg0KVG8gc3Vic2NyaWJlIG9yIHVuc3Vic2NyaWJl IHZpYSB0aGUgV29ybGQgV2lkZSBXZWIsIHZpc2l0PGJyPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vYWNlIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Fj ZTwvYT48YnI+DQpvciwgdmlhIGVtYWlsLCBzZW5kIGEgbWVzc2FnZSB3aXRoIHN1YmplY3Qgb3Ig Ym9keSAnaGVscCcgdG88YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgYWNlLXJlcXVlc3RAaWV0Zi5vcmc8YnI+DQo8YnI+DQpZb3UgY2FuIHJlYWNoIHRoZSBw ZXJzb24gbWFuYWdpbmcgdGhlIGxpc3QgYXQ8YnI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgYWNlLW93bmVyQGlldGYub3JnPGJyPg0KPGJyPg0KV2hlbiByZXBs eWluZywgcGxlYXNlIGVkaXQgeW91ciBTdWJqZWN0IGxpbmUgc28gaXQgaXMgbW9yZSBzcGVjaWZp Yzxicj4NCnRoYW4gJnF1b3Q7UmU6IENvbnRlbnRzIG9mIEFjZSBkaWdlc3QuLi4mcXVvdDs8YnI+ DQo8L2Rpdj4NCjwvc3Bhbj48L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_A18210469D6F4F0E8A600FEF10A07BBD_--