From nobody Sat Oct 3 19:01:42 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECAF43A0A97 for ; Sat, 3 Oct 2020 19:01:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xw6eAE7CzlxM for ; Sat, 3 Oct 2020 19:01:38 -0700 (PDT) Received: from mail-vs1-xe33.google.com (mail-vs1-xe33.google.com [IPv6:2607:f8b0:4864:20::e33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 779173A0A96 for ; Sat, 3 Oct 2020 19:01:38 -0700 (PDT) Received: by mail-vs1-xe33.google.com with SMTP id r24so2390308vsp.8 for ; Sat, 03 Oct 2020 19:01:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=4nUJjIWPsi7Nr8rCog7TzCqKsrWZvoQeibaqxJpcRv8=; b=qtW14LwBpwlFtpLEPnhEX/AsULlzX21B+B6JUEJYIWhn7vkzY7NVEE5YY+rNzyJDX8 qDZQXUu2Hy85egzH8yv9b3UvtMFiNQp/Q5IvNPYXqeY7w/wu+y6c/5tGT4sQkPnmDC8d hDytcbHm5xAxghYImwXlVlCjBsfjzKwsJg/6J1HqWRM0M412kITNJj5GQxiFEG5irQgM UvLTtwghqO2BOp/PK+N33I5IdiOH4IjAideF0q1Mq2aroxdSMnH5GSHu7KBghekTUoGu 0oX8wkBoAKQB8Aav6Mgghf2nz3A1baB3FkRGNscwcoBq0KNyWdvzO6MRxHx96spQWIql jl/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=4nUJjIWPsi7Nr8rCog7TzCqKsrWZvoQeibaqxJpcRv8=; b=f4Ww1ybYn6u1w7aKswUejrsB3BZ3cbPal8l8Fma+UieiaManYBq6Vb9nXmuQjEyXK/ XqwRlAp+AdZut+pWlLuP5k5i9FdHfbotyJ4+e27N/mzPN9pKAKUNJHDXUwyh3PueFNRs b65oQ0zVZP2epW8WOojeQSKhmoNVlINyEH3jtPIPbDGhGlH+KxH+tjGA/exJVWhL3XCS N3R9bVsQnMBPdw09/Xp8sPHqBMKvmB6oSDTWCAEAjhN+nmOmG7H62g/UA77Rqpvccv1U ygbTUpU/ggA794jbdMTIDN0rEjhsCZ/yFMKm+J345f8urlC7lMwXzByFJKDaEmp402nz MtXg== X-Gm-Message-State: AOAM533tL4kZG7WpZI9OoojWgN5w7r4RwwuT+9K8Xbw7TAJN0lOTcRsH g+PHdyEioLM7sygo3tFJ6mNIrULiuFPF9j4zCySWvqsdJoZSKQ== X-Google-Smtp-Source: ABdhPJwWZnnq1gYkU3dbivnnlZvR6qhjuiA2qK1xDMYHzJ7/uKAMRkD/BrUV2kTXCGwUju91PtYeUY7+1Mj6foKekvk= X-Received: by 2002:a67:8a8a:: with SMTP id m132mr268724vsd.14.1601776897329; Sat, 03 Oct 2020 19:01:37 -0700 (PDT) MIME-Version: 1.0 From: Daniel Migault Date: Sat, 3 Oct 2020 22:01:26 -0400 Message-ID: To: Ace Wg Content-Type: multipart/alternative; boundary="000000000000f98e0905b0cebe9a" Archived-At: Subject: [Ace] ACE interim meeting 2 October 5. X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Oct 2020 02:01:40 -0000 --000000000000f98e0905b0cebe9a Content-Type: text/plain; charset="UTF-8" Hi, I apology for the short notice for the ace interim merting of Monday October 5. Please find a draft agenda below. We do have available time slots. If you are willing to present, please update the agenda [1] directly on the codim and upload the corresponding slides to [2]. Yours, Jim and Daniel [1] https://codimd.ietf.org/notes-ietf-interim-2020-ace-11-ace [2] https://datatracker.ietf.org/meeting/interim-2020-ace-11/session/ace ACE Interim meeting 2 4:00 PM - 5:00 PM Monday, Oct 5 2020 (UTC+02:00) # Links [webex]( https://ietf.webex.com/webappng/sites/ietf/meeting/info/168045408910584965?MTID=mfe71dc1bf187784b04a3a63b589d7c26 ) [etherpad](https://codimd.ietf.org/notes-ietf-interim-2020-ace-11-ace) [slides]( https://datatracker.ietf.org/meeting/interim-2020-ace-11/session/ace) # Draft Agenda: * Chairs Slides * [Note Well Slide]( https://docs.google.com/presentation/d/1Aug0vjm-4hCXzadszOgTJxMTBqYoS51BEIhb7nvfepc/edit?usp=sharing) * minute taker * blue sheet * draft-ietf-ace-mqtt-tls-profile-07 10 min * WGLC comments * draft-ietf-ace-oscore-profile-12 15 min * next steps * draft-ietf-ace-key-groupcomm-09 10 min -- Daniel Migault Ericsson --000000000000f98e0905b0cebe9a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,=C2=A0

I apology for the short notic= e for the ace interim merting of Monday October 5.=C2=A0
Please f= ind a draft agenda below. We do have available time slots. If you are willi= ng to present, please update the agenda [1] directly on the codim and uploa= d the corresponding slides to [2].

Yours,=C2=A0Jim and Daniel


ACE Interim meeting 2 4:00 PM - 5:00 PM Monday, O= ct 5 2020 (UTC+02:00)

# Links
[webex]( https://ietf.webex.com/webappng/sites/ietf/mee= ting/info/168045408910584965?MTID=3Dmfe71dc1bf187784b04a3a63b589d7c26)<= br>[etherpad](https://codimd.ietf.org/notes-ietf-interim-2020-ace-11-ace)[slides](https://datatracker.ietf.org/meeting/interim-2020-ace-11/s= ession/ace)

# Draft Agenda:

* Chairs Slides
=C2=A0 * [= Note Well Slide](https://docs.googl= e.com/presentation/d/1Aug0vjm-4hCXzadszOgTJxMTBqYoS51BEIhb7nvfepc/edit?usp= =3Dsharing)
=C2=A0 * minute taker
=C2=A0 * blue sheet
* draft= -ietf-ace-mqtt-tls-profile-07 10 min
=C2=A0 * WGLC comments
* draft-i= etf-ace-oscore-profile-12 15 min
=C2=A0 * next steps
* draft-ietf-ace= -key-groupcomm-09 10 min

--
Daniel Migault
Ericsson
=
--000000000000f98e0905b0cebe9a-- From nobody Sun Oct 4 19:01:34 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD6283A0B12 for ; Sun, 4 Oct 2020 19:01:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4LwTMQH-BUsm for ; Sun, 4 Oct 2020 19:01:31 -0700 (PDT) Received: from mail-ua1-x934.google.com (mail-ua1-x934.google.com [IPv6:2607:f8b0:4864:20::934]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE7BB3A0B10 for ; Sun, 4 Oct 2020 19:01:30 -0700 (PDT) Received: by mail-ua1-x934.google.com with SMTP id r21so434353uaw.10 for ; Sun, 04 Oct 2020 19:01:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=/ZPUqENaME+Nbv5xmRFE24NLwp/KuaF2vHABQPs9WZQ=; b=EUQtk/mdxeTHSOgrMx3Mjaj8IIAz4ilj+sOsrAEpqwU6bBTux5zmbm1JYxplCB18yj DOOqFaIJCz3Jjb5DyD+9+BF5syuo12WNHyTwnqsEOl4jLjMidyCf8TJcCK+wUJ/bHD6X KHeJoT2KNWqBxyEg2q0YKOio4b6xR5oNLGN7N485a8I3gBPCQDvTyO67F8qR8l2xTaXg WWc1c2b9fT346vH6VwxeZSL0t86tU8ABvZLEhusFJFd50QhF6YdEsG3aLTdL0sX3LaPm YYSKx/ZD7dwRFkpM+RLIWo+/M/UImrGWZznTnfVEx+rd6/JlrgIoWITPC0TyQulnFxn0 ZTWQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=/ZPUqENaME+Nbv5xmRFE24NLwp/KuaF2vHABQPs9WZQ=; b=AQZG82OZqiQW9VogCU6Iwx8poFTwtFNbhoebKTzXbv4vmtcsh617UFLkg11nWt/jx1 VjRDPPni7tOiwuLz/MfqKD6C3Tm8Cg8kw4QJCxmgP2b9AB9yZW3cRzPEUo7qZkk2LHK6 xqtDcCOcqi57TY7/3xVMzpAbmX49FhTq6V5diZKgV6T0l2xk6NTiSn7arQC5dnyyzJhu RAwQyb3w3JeJ5+uQy88b8xMKmfiKpKQJJfJojy7VMaxnYzcWAmKfK3FlHvqsX6JwAzTj YDhRDMNBZfbvnSMOIyonzrDUooeTR38/cUTrxZVru89r28NpIH9tIjXgkUyXVOg2nkvT vvrQ== X-Gm-Message-State: AOAM530Zu1xtC1zvF7WP/i/FB5cQc2337l2N57jjMsNEtcJUGr4g9bnz k/ZERxvEjUJb8eqITdERHMkijmvJlhy3l+K954pG33k9mgY= X-Google-Smtp-Source: ABdhPJwajzvAQyAZM35JyZuU+xshhbTMu2C3hqsrz5qAYSpCX/T6dmDCK31pUU3eA1n85MF2O1VtFF/xTC/6GCx6Ly4= X-Received: by 2002:a9f:301e:: with SMTP id h30mr5195151uab.114.1601863289647; Sun, 04 Oct 2020 19:01:29 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Daniel Migault Date: Sun, 4 Oct 2020 22:01:18 -0400 Message-ID: To: Ace Wg Content-Type: multipart/alternative; boundary="0000000000005bb45d05b0e2dc4b" Archived-At: Subject: Re: [Ace] ACE interim meeting 2 October 5. X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2020 02:01:33 -0000 --0000000000005bb45d05b0e2dc4b Content-Type: text/plain; charset="UTF-8" Dear WG, I just learnt that Jim passed away and prefer to cancel the meeting. Jim's brother contacted the IETF, I propose that if you want to provide some sympathy or condolenace messages, feel free to send them to me privately, I will coordinate with the cbor co-chairs and Jay to send them to Jim's familly. Yours, Daniel On Sat, Oct 3, 2020 at 10:01 PM Daniel Migault wrote: > Hi, > > I apology for the short notice for the ace interim merting of Monday > October 5. > Please find a draft agenda below. We do have available time slots. If you > are willing to present, please update the agenda [1] directly on the codim > and upload the corresponding slides to [2]. > > Yours, > Jim and Daniel > > [1] https://codimd.ietf.org/notes-ietf-interim-2020-ace-11-ace > [2] https://datatracker.ietf.org/meeting/interim-2020-ace-11/session/ace > > ACE Interim meeting 2 4:00 PM - 5:00 PM Monday, Oct 5 2020 (UTC+02:00) > > # Links > [webex]( > https://ietf.webex.com/webappng/sites/ietf/meeting/info/168045408910584965?MTID=mfe71dc1bf187784b04a3a63b589d7c26 > ) > [etherpad](https://codimd.ietf.org/notes-ietf-interim-2020-ace-11-ace) > [slides]( > https://datatracker.ietf.org/meeting/interim-2020-ace-11/session/ace) > > # Draft Agenda: > > * Chairs Slides > * [Note Well Slide]( > https://docs.google.com/presentation/d/1Aug0vjm-4hCXzadszOgTJxMTBqYoS51BEIhb7nvfepc/edit?usp=sharing) > > * minute taker > * blue sheet > * draft-ietf-ace-mqtt-tls-profile-07 10 min > * WGLC comments > * draft-ietf-ace-oscore-profile-12 15 min > * next steps > * draft-ietf-ace-key-groupcomm-09 10 min > > -- > Daniel Migault > Ericsson > -- Daniel Migault Ericsson --0000000000005bb45d05b0e2dc4b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear WG,=C2=A0

I just learnt that Jim p= assed away and prefer to cancel the meeting.=C2=A0=C2=A0

Jim's brother contacted the IETF, I propose that if you want to = provide some sympathy or condolenace messages, feel free to send them to me= privately, I will coordinate with the cbor co-chairs and Jay to send them = to Jim's familly.=C2=A0

Yours,=C2=A0
Daniel=

On Sat, Oct 3, 2020 at 10:01 PM Daniel Migault <mglt.ietf@gmail.com> wrote:
Hi,=C2=A0

=
I apology for the short notice for the ace interim merting of Mo= nday October 5.=C2=A0
Please find a draft agenda below. We do hav= e available time slots. If you are willing to present, please update the ag= enda [1] directly on the codim and upload the corresponding slides to [2].<= /div>

Yours,=C2=A0
Jim and Daniel


ACE Interim meeting 2 4:00 PM - 5:00 PM Monday, O= ct 5 2020 (UTC+02:00)

# Links
[webex]( https://ietf.webex.com/webap= png/sites/ietf/meeting/info/168045408910584965?MTID=3Dmfe71dc1bf187784b04a3= a63b589d7c26)
[etherpad](https://codimd.ietf.org/notes= -ietf-interim-2020-ace-11-ace)
[slides](http= s://datatracker.ietf.org/meeting/interim-2020-ace-11/session/ace)
# Draft Agenda:

* Chairs Slides
=C2=A0 * [Note Well Slide](https://docs.google.c= om/presentation/d/1Aug0vjm-4hCXzadszOgTJxMTBqYoS51BEIhb7nvfepc/edit?usp=3Ds= haring)
=C2=A0 * minute taker
=C2=A0 * blue sheet
* draft-iet= f-ace-mqtt-tls-profile-07 10 min
=C2=A0 * WGLC comments
* draft-ietf-= ace-oscore-profile-12 15 min
=C2=A0 * next steps
* draft-ietf-ace-key= -groupcomm-09 10 min

--
Daniel Migault
Ericsson


--
Daniel Migault
Ericsson
--0000000000005bb45d05b0e2dc4b-- From nobody Mon Oct 5 00:21:21 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC6F33A0E00 for ; Mon, 5 Oct 2020 00:21:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Oss44TyU-rke for ; Mon, 5 Oct 2020 00:21:18 -0700 (PDT) Received: from mail-il1-x141.google.com (mail-il1-x141.google.com [IPv6:2607:f8b0:4864:20::141]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F00A93A07F0 for ; Mon, 5 Oct 2020 00:21:17 -0700 (PDT) Received: by mail-il1-x141.google.com with SMTP id t12so6882794ilh.3 for ; Mon, 05 Oct 2020 00:21:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to:cc; bh=xICcj7GwNqyWV+00Mgl8pnEXCzvCMiEVWxfhLnPhks4=; b=hA9VGmjqw6vjBIW0SiX2eNgT8qN7eyLfWvMX4oHbcm4F4nYEa2xavIYIPwQfZBi6qn +KezshJb/ZxiTCeXKcmksBfJ1dYLvsHRh7QYD8iHBaG2mugaeF0wBzRcUwlg9L6UgZot R0anUh69893By0Mx3b3maMLEuCrL9E3cxVKHD5tYhLZIbZ1fla1bt8Vr9VnSFcHX+df3 bWTVRIFoucyHP3ywsmxv4PQPar+/lMrHCN7efKiBtipgh0/2GTxXdlb2tKX9bbugPjYk IO0GWWInR4XN4Fslu1F8ht4xxxXW29YnWZxL7VHoLla18SjJoXHH5ga3xhyof83pdNDn Y72g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=xICcj7GwNqyWV+00Mgl8pnEXCzvCMiEVWxfhLnPhks4=; b=nuB9Wzwmwu28fwJpcVt+CA7642jicCe2k4kRwRyL56+N0rtiTOhJTBA9cfK8ynKL5T ziCZYToRk4M/2X3HTGe5ZFehgMxnOkDnG75O5F3SxTXFpRIWIBMnEwk8SW7tCg8dzj3O HZ46mbLqg3wd1B3xzL1B9B7+7WzwY7xwz7A7etQqw84K3DMBXifX8m+W9ZAADqSvgg0/ HAgxBThX6y4bVRl8+JI6TesbMuC1dyG6Vdyq8BXjU8C64qVNHUJQKNIWcouauMgA6Ban sgXrWNUvCvvh66MwkygZQpFfgumoVGOdMWp0QAC8VHZzsdo8L56S2qE8wuqf7zchwquI tdEw== X-Gm-Message-State: AOAM533XA7Adm5fEznyF7kvlgXrDjfqzo4IZqwiAyd8ytBDhsZxB+KfB wpgj8Q/hzaKBlTsanlWvUCE9VZ+gOPXUJI4ey8/19f4wmuILsg== X-Google-Smtp-Source: ABdhPJwqq9gIEYRQtwufKb3X8DnZhOtErQqBgm6i6pXtpaF0zM2jPf1JijKKiyKQQvoI2WXjerj3Tr260MZfdbUNTI8= X-Received: by 2002:a92:15d0:: with SMTP id 77mr8817476ilv.98.1601882476706; Mon, 05 Oct 2020 00:21:16 -0700 (PDT) MIME-Version: 1.0 From: Mohit Sahni Date: Mon, 5 Oct 2020 00:21:05 -0700 Message-ID: To: Ace Wg Cc: stripathi@paloaltonetworks.com, Mohit Sahni , saurabh.tripathi@gmail.com, "Brockhaus, Hendrik" Content-Type: multipart/alternative; boundary="000000000000feffca05b0e75331" Archived-At: Subject: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2020 07:21:20 -0000 --000000000000feffca05b0e75331 Content-Type: text/plain; charset="UTF-8" Hello Ace WG, I am presenting the draft-msahni-ace-cmpv2-coap-transport-01 to be adopted by ACE WG. This document supplements the "*Lightweight CMP Profile" draft (* https://tools.ietf.org/html/draft-brockhaus-lamps-lightweight-cmp-profile-03 *) *which specify the modifications to the CMPv2 protocol for it to be used efficiently by the constrained devices for PKI operations. I discussed this draft in IETF-108 ACE session and the need for the recharter of ACE WG in order to adopt this draft, to which we had a consensus. Please state your opinion on whether this draft should be adopted by ACE WG. Link to the draft https://datatracker.ietf.org/doc/draft-msahni-ace-cmpv2-coap-transport/ Regards, Mohit Sahni --000000000000feffca05b0e75331 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Ace WG,
I am presenting the=C2=A0draft-msahni-ac= e-cmpv2-coap-transport-01=C2=A0to be adopted by ACE WG. This document suppl= ements=C2=A0the "Lig= htweight CMP Profile" draft (https://tools.ie= tf.org/html/draft-brockhaus-lamps-lightweight-cmp-profile-03)=C2=A0which specify the modifications to the CMPv2 protocol for i= t to be used efficiently by the constrained devices for PKI operations.=C2= =A0

I discussed t= his draft in IETF-108 ACE session and the need for the recharter=C2=A0of AC= E WG in order=C2=A0to adopt this draft,=C2=A0to which we had a consensus.= =C2=A0Please state your opinion=C2=A0on whether this draft should be= adopted by ACE WG.=C2=A0

Link to the draft=C2=A0<= a href=3D"https://datatracker.ietf.org/doc/draft-msahni-ace-cmpv2-coap-tran= sport/">https://datatracker.ietf.org/doc/draft-msahni-ace-cmpv2-coap-transp= ort/=C2=A0

Regards,
Mohit Sahni

--000000000000feffca05b0e75331-- From nobody Mon Oct 5 01:22:24 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 724E03A0E41 for ; Mon, 5 Oct 2020 01:22:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.799 X-Spam-Level: X-Spam-Status: No, score=-1.799 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uJ6mniVVFbIJ for ; Mon, 5 Oct 2020 01:22:21 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on060d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::60d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8126C3A0E14 for ; Mon, 5 Oct 2020 01:22:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=TOI6PvNeCGgWD4ZHNQbF1kSQx6bqJHxq9oEHVpMViI1SaT0ipsJaH9xRyo01uglOYGCYWE+u3ICxkwvILJiBp3K6ZBkEeUKdhY3dKR+C9FOTlwnxrwqNwUyHM5ivJzVirJJcOAVphwmnDWMXDSdM58tHcX96c0i74tgyCRonTWFlv520t04kHD/0q9Z7ZbaItf7nez4CKpbWMrTOZdPrpmVqUmCCn+CPXiWAUWUnKvD9u0eOtxuOB5KO9LwJ48aUBksJ6kXkbnE9TkQgiraAcxuYbIJT+8KRtPLlYtqgJYqRZEwL92+WVo35JwW5SdHnmVc7x19UIlTYXAchrimMog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Qw2XOXK2OwZS+uCuwfYeOQaa6QeTRJ07VF9GeNCkTdI=; b=F1V/SuCLj6mmsddgB0phZhc8iPOLQfVEOPoqZLPolYgtUgPlgd5Fh9ix2C5gnmkoslWRMVVzgOIbZWNqWGtZW78O2Sm7gGniwICUd+EeEfKS1+1GFeSNMIEbkMaCAXa8GkD7d7GNkTRlJfMOPJZeAWv6RUm0ifoiwCvDWXA3TnNYdPp3rr+s0Q7LZjCMzZP11uOSKTUHEsFZtmI8fvigEB4iRmjIVeQobyewUHupuLo1K4OZ4Qhd0zFPAUIQom+bG1H3ETbtGk7V054j1SBLqwSllq9wE0s2v5BfpJXqheuU7VSF/LNa+dWTzo02r2KFdl4TAxMTHAiWBudVlKZSjQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Qw2XOXK2OwZS+uCuwfYeOQaa6QeTRJ07VF9GeNCkTdI=; b=ijdAA+M7k7UFvNB0xJ8JaQtLADJciK4TGJs3GK+IS/LxjJC67NJNcsLpdwoY1HBu+PaIyDLfuG1t9r8aCx1ldjid2Q82JxCQ6fumZ8OSuRxjsUtM8Bx17cdXvrsUKO+sI9/zSnsjPyh/ERShV4N699L/XoeTo/seHN19o83FqHI= Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:dd::17) by AM0PR10MB3364.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:166::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3433.37; Mon, 5 Oct 2020 08:22:17 +0000 Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::815c:e3e3:e2be:5eed]) by AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::815c:e3e3:e2be:5eed%6]) with mapi id 15.20.3433.044; Mon, 5 Oct 2020 08:22:17 +0000 From: "Brockhaus, Hendrik" To: Mohit Sahni , Ace Wg CC: "stripathi@paloaltonetworks.com" , Mohit Sahni , "saurabh.tripathi@gmail.com" Thread-Topic: Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 Thread-Index: AQHWmugf2jgqXegeAEWC7bN66U2odKmIqviw Content-Class: Date: Mon, 5 Oct 2020 08:22:17 +0000 Message-ID: References: In-Reply-To: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Enabled=true; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SetDate=2020-10-05T08:22:15Z; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Method=Standard; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Name=restricted-default; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ActionId=9a28d0cd-35c6-4b3d-aa5e-862195a500ef; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ContentBits=0 document_confidentiality: Restricted authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=siemens.com; x-originating-ip: [165.225.200.151] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 54e51a51-e72c-43ee-4c0c-08d86907c597 x-ms-traffictypediagnostic: AM0PR10MB3364: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 5nBD8YeAmb3KOa8Hdw2z1nOSkG93FeovJpskXRTanWg2R7eIis+KgtaXvJV7o0KBpNqicIkkMAOx/lfOFMfI+N3dmWuC77KC2Jc6+KlQGhrqkPJYAN0M8KIS4FlxqBf7L/dvmBF5HipASCOhJlH0ohDv9cHahykeoeQYtAcLDkWFrQkXvyTD4XPloL5PI1yx64ifV1QzkBsaVM0e3eXCBcBnXWjv9vWQilBbvNWoYCzS7zAl88znvXvuZFx8jcPs2oXjoN/Bt40NFPTbQ9xBTvowt2iJNZVZyyNvCPQRM7FnlfFeZNmpSlJGrO71Tsx+GYPUnpH9DoKilMusa4n8qVpSDvxy6YsnIdgyBIdJ6TjyIy15DL/vdI1LZSGldVQ9eBJ70BzOiB2mMA41cLlgQA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(376002)(396003)(39860400002)(366004)(346002)(136003)(110136005)(186003)(86362001)(71200400001)(52536014)(54906003)(4326008)(26005)(6506007)(5660300002)(4744005)(55236004)(7696005)(55016002)(9686003)(8676002)(316002)(2906002)(166002)(33656002)(8936002)(83380400001)(83080400001)(76116006)(966005)(66946007)(478600001)(66476007)(66556008)(64756008)(66446008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR10MB24180BA060502564A8F56059FE0C0AM0PR10MB2418EURP_" MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 54e51a51-e72c-43ee-4c0c-08d86907c597 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Oct 2020 08:22:17.2020 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Xwrg/uXpFhspKsdUuKnzNwAU4mZjNmoasTSL0bwylaO4NmWctN6L7o6DVFjKw8nxcu54/Ogy33v5HzIcx94borc7zihRa0ZVV7L63psP9Qc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB3364 Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2020 08:22:23 -0000 --_000_AM0PR10MB24180BA060502564A8F56059FE0C0AM0PR10MB2418EURP_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIHRvIE1vaGl0IGZvciBoaXMgcmVxdWVzdCBvbiByZWNoYXJ0ZXJpbmcgYW5kIGFkb3B0 aW9uLiBJIHN1cHBvcnQgdGhpcy4NCg0KSGVuZHJpaw0KDQpNb2hpdCBTYWhuaSA8bW9oaXQwNmph bkBnbWFpbC5jb20+ICwgTW9udGFnLCA1LiBPa3RvYmVyIDIwMjAgMDk6MjENCg0KSGVsbG8gQWNl IFdHLA0KSSBhbSBwcmVzZW50aW5nIHRoZSBkcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJh bnNwb3J0LTAxIHRvIGJlIGFkb3B0ZWQgYnkgQUNFIFdHLiBUaGlzIGRvY3VtZW50IHN1cHBsZW1l bnRzIHRoZSAiTGlnaHR3ZWlnaHQgQ01QIFByb2ZpbGUiIGRyYWZ0IChodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtYnJvY2toYXVzLWxhbXBzLWxpZ2h0d2VpZ2h0LWNtcC1wcm9maWxl LTAzPGh0dHBzOi8vZXVyMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWJyb2NraGF1cy1sYW1w cy1saWdodHdlaWdodC1jbXAtcHJvZmlsZS0wMyZkYXRhPTAyJTdDMDElN0NoZW5kcmlrLmJyb2Nr aGF1cyU0MHNpZW1lbnMuY29tJTdDNTUwNDYwZjIzNWFmNGU5MzE1OWEwOGQ4NjhmZjQxMmYlN0Mz OGFlM2JjZDk1Nzk0ZmQ0YWRkYWI0MmUxNDk1ZDU1YSU3QzElN0MxJTdDNjM3Mzc0NzkyNzk5MTc1 NTU3JnNkYXRhPWhwaFRPVmZ5bklINmc0TzlGRmVteWpEd3htRXZudlVWNnBEQWJISHRwNWMlM0Qm cmVzZXJ2ZWQ9MD4pIHdoaWNoIHNwZWNpZnkgdGhlIG1vZGlmaWNhdGlvbnMgdG8gdGhlIENNUHYy IHByb3RvY29sIGZvciBpdCB0byBiZSB1c2VkIGVmZmljaWVudGx5IGJ5IHRoZSBjb25zdHJhaW5l ZCBkZXZpY2VzIGZvciBQS0kgb3BlcmF0aW9ucy4NCg0KSSBkaXNjdXNzZWQgdGhpcyBkcmFmdCBp biBJRVRGLTEwOCBBQ0Ugc2Vzc2lvbiBhbmQgdGhlIG5lZWQgZm9yIHRoZSByZWNoYXJ0ZXIgb2Yg QUNFIFdHIGluIG9yZGVyIHRvIGFkb3B0IHRoaXMgZHJhZnQsIHRvIHdoaWNoIHdlIGhhZCBhIGNv bnNlbnN1cy4gUGxlYXNlIHN0YXRlIHlvdXIgb3BpbmlvbiBvbiB3aGV0aGVyIHRoaXMgZHJhZnQg c2hvdWxkIGJlIGFkb3B0ZWQgYnkgQUNFIFdHLg0KDQpMaW5rIHRvIHRoZSBkcmFmdCBodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJh bnNwb3J0LzxodHRwczovL2V1cjAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM0ElMkYlMkZkYXRhdHJhY2tlci5pZXRmLm9yZyUyRmRvYyUyRmRyYWZ0LW1zYWhu aS1hY2UtY21wdjItY29hcC10cmFuc3BvcnQlMkYmZGF0YT0wMiU3QzAxJTdDaGVuZHJpay5icm9j a2hhdXMlNDBzaWVtZW5zLmNvbSU3QzU1MDQ2MGYyMzVhZjRlOTMxNTlhMDhkODY4ZmY0MTJmJTdD MzhhZTNiY2Q5NTc5NGZkNGFkZGFiNDJlMTQ5NWQ1NWElN0MxJTdDMSU3QzYzNzM3NDc5Mjc5OTE4 NTUwOSZzZGF0YT1ycU9Kb1pOWU0zc2E5QXVMNFFyVWU1UlRYR3NJQk9HZEF4QTBLbGIyaEZBJTNE JnJlc2VydmVkPTA+DQoNClJlZ2FyZHMsDQpNb2hpdCBTYWhuaQ0KDQo= --_000_AM0PR10MB24180BA060502564A8F56059FE0C0AM0PR10MB2418EURP_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KLk1zb0NocERlZmF1bHQNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJbXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44NXB0IDcwLjg1cHQgMi4wY20g NzAuODVwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwv c3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJl ZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNv IDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0i ZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwv aGVhZD4NCjxib2R5IGxhbmc9IkRFIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYg Y2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5UaGFua3MgdG8gTW9oaXQg Zm9yIGhpcyByZXF1ZXN0IG9uIHJlY2hhcnRlcmluZyBhbmQgYWRvcHRpb24uIEkgc3VwcG9ydCB0 aGlzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SGVuZHJpazxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1V UyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1vaGl0IFNhaG5pICZsdDttb2hpdDA2amFuQGdtYWlsLmNv bSZndDsgLCBNb250YWcsIDUuIE9rdG9iZXIgMjAyMCAwOToyMTxicj4NCjxicj4NCjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IZWxsbyBBY2UgV0csPG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBhbSBwcmVzZW50aW5nIHRoZSZuYnNwO2RyYWZ0 LW1zYWhuaS1hY2UtY21wdjItY29hcC10cmFuc3BvcnQtMDEmbmJzcDt0byBiZSBhZG9wdGVkIGJ5 IEFDRSBXRy4gVGhpcyBkb2N1bWVudCBzdXBwbGVtZW50cyZuYnNwO3RoZSAmcXVvdDs8Yj48c3Bh biBzdHlsZT0iY29sb3I6YmxhY2siPkxpZ2h0d2VpZ2h0IENNUCBQcm9maWxlJnF1b3Q7IGRyYWZ0 ICg8L3NwYW4+PC9iPjxhIGhyZWY9Imh0dHBzOi8vZXVyMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRy YWZ0LWJyb2NraGF1cy1sYW1wcy1saWdodHdlaWdodC1jbXAtcHJvZmlsZS0wMyZhbXA7ZGF0YT0w MiU3QzAxJTdDaGVuZHJpay5icm9ja2hhdXMlNDBzaWVtZW5zLmNvbSU3QzU1MDQ2MGYyMzVhZjRl OTMxNTlhMDhkODY4ZmY0MTJmJTdDMzhhZTNiY2Q5NTc5NGZkNGFkZGFiNDJlMTQ5NWQ1NWElN0Mx JTdDMSU3QzYzNzM3NDc5Mjc5OTE3NTU1NyZhbXA7c2RhdGE9aHBoVE9WZnluSUg2ZzRPOUZGZW15 akR3eG1Fdm52VVY2cERBYkhIdHA1YyUzRCZhbXA7cmVzZXJ2ZWQ9MCI+aHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWJyb2NraGF1cy1sYW1wcy1saWdodHdlaWdodC1jbXAtcHJvZmls ZS0wMzwvYT48Yj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPikmbmJzcDs8L3NwYW4+PC9iPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+d2hpY2gNCiBzcGVjaWZ5IHRoZSBtb2RpZmljYXRpb25z IHRvIHRoZSBDTVB2MiBwcm90b2NvbCBmb3IgaXQgdG8gYmUgdXNlZCBlZmZpY2llbnRseSBieSB0 aGUgY29uc3RyYWluZWQgZGV2aWNlcyBmb3IgUEtJIG9wZXJhdGlvbnMuJm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6YmxhY2siPkkgZGlzY3Vzc2VkIHRoaXMgZHJhZnQgaW4gSUVURi0xMDgg QUNFIHNlc3Npb24gYW5kIHRoZSBuZWVkIGZvciB0aGUgcmVjaGFydGVyJm5ic3A7b2YgQUNFIFdH IGluIG9yZGVyJm5ic3A7dG8gYWRvcHQgdGhpcyBkcmFmdCwmbmJzcDt0byB3aGljaCB3ZSBoYWQg YSBjb25zZW5zdXMuJm5ic3A7PC9zcGFuPlBsZWFzZSBzdGF0ZSB5b3VyIG9waW5pb24mbmJzcDtv biB3aGV0aGVyIHRoaXMgZHJhZnQgc2hvdWxkIGJlDQogYWRvcHRlZCBieSBBQ0UgV0cuJm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxp bmsgdG8gdGhlIGRyYWZ0Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9ldXIwMS5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZGF0YXRyYWNrZXIuaWV0Zi5v cmclMkZkb2MlMkZkcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJhbnNwb3J0JTJGJmFtcDtk YXRhPTAyJTdDMDElN0NoZW5kcmlrLmJyb2NraGF1cyU0MHNpZW1lbnMuY29tJTdDNTUwNDYwZjIz NWFmNGU5MzE1OWEwOGQ4NjhmZjQxMmYlN0MzOGFlM2JjZDk1Nzk0ZmQ0YWRkYWI0MmUxNDk1ZDU1 YSU3QzElN0MxJTdDNjM3Mzc0NzkyNzk5MTg1NTA5JmFtcDtzZGF0YT1ycU9Kb1pOWU0zc2E5QXVM NFFyVWU1UlRYR3NJQk9HZEF4QTBLbGIyaEZBJTNEJmFtcDtyZXNlcnZlZD0wIj5odHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJhbnNw b3J0LzwvYT4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+UmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPk1vaGl0IFNhaG5pPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_AM0PR10MB24180BA060502564A8F56059FE0C0AM0PR10MB2418EURP_-- From nobody Mon Oct 5 08:44:32 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5A653A0838 for ; Mon, 5 Oct 2020 08:44:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=H2TP472Y; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=cp5ZlJgp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aS1FSuMlZ-0V for ; Mon, 5 Oct 2020 08:44:29 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF9FC3A0489 for ; Mon, 5 Oct 2020 08:44:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=15327; q=dns/txt; s=iport; t=1601912668; x=1603122268; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=e5s1d32OYpuNVIWvatSRVONgwf+qJm75NdvctbY/xz8=; b=H2TP472YCcB+nKQXZ0Y8yh+5lKUE2SF8tuWcsY6ySneSVtoHynNJypgT gjqjq4NRqh6O+FkjK3spq4lJkjQQpuaNEoXGSNqMgiR7SSjkZDimx1yzB 5ygDV3A0/El15Az8Pa8bFWoGSK7oBfuPjYyDFeyo22mR+XBQ/QOKTXbp4 c=; X-Files: smime.p7s : 4024 IronPort-PHdr: =?us-ascii?q?9a23=3AkyMEqRX3fxlhtADT97JxemI2hS7V8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSBNyHuf1BguvS9avnXD9I7ZWAtSUEd5pBH1?= =?us-ascii?q?8AhN4NlgMtSMiCFQXgLfHsYiB7eaYKVFJs83yhd0QAHsH4ag7dp3Sz6XgZHR?= =?us-ascii?q?CsfQZwL/7+T4jVicn/3uuu+prVNgNPgjf1Yb57IBis6wvLscxDiop5IaF3wR?= =?us-ascii?q?zM8XY=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CUBwB0Pntf/4gNJK1XCYJYgSMvUQd?= =?us-ascii?q?wLC0vLAqEM4NGA41wihGJe4RvgS6BJQNVBAcBAQEKAwEBJQgCBAEBhEoCgjg?= =?us-ascii?q?CJTUIDgIDAQELAQEFAQEBAgEGBG2FXAyFcgEBAQEDEgsGChMBATcBDwIBCBE?= =?us-ascii?q?EAQErAgICHxEdCAIEAQ0FCAYNB4MFgX5NAx8PAQ6dEQKBOYhhdoEygwEBAQW?= =?us-ascii?q?BNwIOQYMFDQuCCQcDBoE4gVOBH4JcS0KCRIN1HRuBQT+BEUOCTT6CGkIBAQM?= =?us-ascii?q?BgS8uK4JqM4ItkDSCTD2TApBAUgqCZ4RKgl+BVYZYhgCFLYMOigKUD5MUim6?= =?us-ascii?q?Cao4PhC8CBAIEBQIOAQEFgVYBN4FXcBWDJFAXAg2SEIUUhUJ0NwIGAQkBAQM?= =?us-ascii?q?JfIw7AYEQAQE?= X-IronPort-AV: E=Sophos;i="5.77,338,1596499200"; d="p7s'?scan'208,217";a="562614494" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 05 Oct 2020 15:44:27 +0000 Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 095FiR4D026381 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 5 Oct 2020 15:44:27 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 5 Oct 2020 10:44:27 -0500 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 5 Oct 2020 10:44:04 -0500 Received: from NAM12-BN8-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 5 Oct 2020 10:44:04 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Pc3OcBZeSiXR7rck+LgxtJGlHjJAPYLwRvbfXlhZhRBjBLsZpTTIVrmINopsDZwYcFw11C0op+zwT3tvukNNefBqwqVPLPtyEDAZTHXz67LkYGZPSzyfEeIcEV/Hpa/8vyw8tsgQkVRaB/qu+jlBuoaHJxFBJNwBwHr9sIp81oBUuvqVQ3k+1XdEBXeF2Vgm7TYp9N0fLLEVzM6GVax5LqPtDFJWENQa85/Jqan/++etMRQlQ7ulUWJs8XpchADnTrnSXQW0tWawPcpfRTUevlSA7kXSmPzTGfqPVFO1ybkXDF83qkbr3jRZp/df88j59IWxrrDAjZp1JbRCPTuBag== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rEArB+0I8G8XW4u++TzcXvHXxq+JvficKa4rXBQ+6gE=; b=McEiO8ABaEIYUhG+NFNPuAwvk/Yexm9LmrtcrTbFzIj9XEkrHQIsQGso1XEZbcKn//Ol/iJQO1oFGMz4EdQQ2+nYIJ2CEc/gMMRJ8IMrYOogbOA6digdm/V8ilT66cE1u2K2yzijmbBQaLmEqtTQbg20QQ5310SCJCFOAgdJIx58+FwnUPIUkJZXUX2Y1+ocDJV98ip6k8Fxu/5okHfQ1rITMT2uFedaEeAwYW60d5G4Xmi03jChdMZ248jQpTKrvwLQlFM68ApuziozUGnbr4KnK1sD8WHbAJKXOcyT9s10BaIsjihnJntlKSh0AiTXBSJeo3GvS7Pmx5pZVnk+Lg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rEArB+0I8G8XW4u++TzcXvHXxq+JvficKa4rXBQ+6gE=; b=cp5ZlJgpXAFmWsshTq7VAIHO7q5ao29YmEr9rJzH6hEWHvATgDpiO4WV9EuLZ91PHKcAt1H8Z3ASpry2F/zQRiNw3rZUix4Cf9uYoiODzVifMIsSykhyg9DTcT8Xb+az3qnqvNGRQH3tCAJpHomoa53V1MxWkFZVsaqcN9dnqMY= Received: from BN7PR11MB2547.namprd11.prod.outlook.com (2603:10b6:406:af::18) by BN6PR11MB3873.namprd11.prod.outlook.com (2603:10b6:405:83::37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3433.34; Mon, 5 Oct 2020 15:44:03 +0000 Received: from BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::2180:35e4:fe29:e470]) by BN7PR11MB2547.namprd11.prod.outlook.com ([fe80::2180:35e4:fe29:e470%3]) with mapi id 15.20.3433.044; Mon, 5 Oct 2020 15:44:03 +0000 From: "Panos Kampanakis (pkampana)" To: Mohit Sahni , Ace Wg CC: "stripathi@paloaltonetworks.com" , "saurabh.tripathi@gmail.com" , Mohit Sahni , "Brockhaus, Hendrik" Thread-Topic: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 Thread-Index: AQHWmugoDnu5TvqPKEq8g/5d0WIacqmJEZ8g Date: Mon, 5 Oct 2020 15:44:03 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [68.93.142.48] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b9338a10-3f87-4c6a-486f-08d869457c9d x-ms-traffictypediagnostic: BN6PR11MB3873: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: rVHa1pGDC89JE6HT9I0o5LdMplGcXeUMXSL+b85tqF00u1QTq9kZngFx1aFIYfy9IvCVIEhsEoqOcD4jwT/nBahmigJ5wu3W/unsDPe0QKdf58EvOLIpLJsGycG3kruCmK5SiqidzA+oQ7b2aZ6nST4vp8UcQTlAakq/ixb25iAy1fkci+87YOlpAUgb0b77TN3vR7z/0X152TZJSD1tIU4b+NPDzZm1SCQgK5Tte0pvn1FE9t+Y7tchIRFlT3X5s2VUIM+h0VOifWoEYpFzxFWerdBTV/qVxFbkGK1BEnSRlCtTqCPvPe6/QhXBqOnlI1PiwZFJGU2vlLwJ3pwgI/c0Op6wPv+i2A0digoTbJ1Y8smhJu4AZnCrQ9x22crOHyVl8sndl4OYQiWzKyC7ew== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN7PR11MB2547.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(136003)(396003)(39860400002)(376002)(366004)(86362001)(66446008)(64756008)(53546011)(166002)(66616009)(66556008)(6506007)(66946007)(186003)(66476007)(83080400001)(52536014)(8676002)(966005)(9686003)(7696005)(478600001)(2906002)(110136005)(54906003)(316002)(71200400001)(55016002)(5660300002)(33656002)(4326008)(26005)(8936002)(83380400001)(76116006)(99936003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=2.16.840.1.101.3.4.2.1; boundary="----=_NextPart_000_0025_01D69B0C.A1017B30" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BN7PR11MB2547.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: b9338a10-3f87-4c6a-486f-08d869457c9d X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Oct 2020 15:44:03.5418 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: TqP/OjZKITFReV5bYNPbg00GxLyHcAZZqHU08IgcgKnl/P29JnR8yjB+MnohpOo1L/ZVfUKDov87nky6U/dbZQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB3873 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2020 15:44:31 -0000 ------=_NextPart_000_0025_01D69B0C.A1017B30 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0026_01D69B0C.A1017B30" ------=_NextPart_001_0026_01D69B0C.A1017B30 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I oppose adoption. =20 IETF in the past has come up with SCEP, CMP, CMC and EST, all of them = for the most part doing the same thing with minor differences. I = don=E2=80=99t think we need two enrollment protocols to run over COAP. = We should not repeat mistakes of the past.=20 =20 In ACE we have EST-coaps which is done. We worked on it because EST was = in IEC 62351 and we needed a solution for some COAP usecases. Since then = EST-coaps has been picked up by Fairhair and Thread.=20 =20 The argument about L7 protection in CMPv2 could also be satisfied by = draft-selander-ace-coap-est-oscore. draft-selander-ace-coap-est-oscore = was trying to secure EST over L7 encrypted COSE messages.=20 =20 Additionally, I would argue that L7 proof-of-identity is not a strong = advantage in an (L)RA trust model for both EST-coaps and CMPv2-coaps. = What is more, having the CA trust all potential manufacturer roots in = order to do L7 proof of identity will not be trivial unless the CA is a = private one. And in a private CA and (L)RA scenario I don=E2=80=99t know = that end-to-end proof or identity is that important.=20 =20 I oppose adoption unless there is a compelling reason why. Also I am not = sure where this draft would be implemented and used. If this is just for = one or two vendors I don=E2=80=99t think ACE needs to spend the cycles.=20 =20 Thanks, Panos =20 =20 From: Ace On Behalf Of Mohit Sahni Sent: Monday, October 05, 2020 3:21 AM To: Ace Wg Cc: stripathi@paloaltonetworks.com; saurabh.tripathi@gmail.com; Mohit = Sahni ; Brockhaus, Hendrik = Subject: [Ace] Call for adoption = draft-msahni-ace-cmpv2-coap-transport-01 =20 Hello Ace WG, I am presenting the draft-msahni-ace-cmpv2-coap-transport-01 to be = adopted by ACE WG. This document supplements the "Lightweight CMP = Profile" draft = (https://tools.ietf.org/html/draft-brockhaus-lamps-lightweight-cmp-profil= e-03) which specify the modifications to the CMPv2 protocol for it to be = used efficiently by the constrained devices for PKI operations.=20 =20 I discussed this draft in IETF-108 ACE session and the need for the = recharter of ACE WG in order to adopt this draft, to which we had a = consensus. Please state your opinion on whether this draft should be = adopted by ACE WG.=20 =20 Link to the draft = https://datatracker.ietf.org/doc/draft-msahni-ace-cmpv2-coap-transport/=20 =20 Regards, Mohit Sahni =20 ------=_NextPart_001_0026_01D69B0C.A1017B30 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

I oppose adoption.

 

IETF in the past has = come up with SCEP, CMP, CMC and EST, all of them for the most part doing = the same thing with minor differences. I don=E2=80=99t think we need two = enrollment protocols to run over COAP. We should not repeat mistakes of = the past.

 

In ACE we have EST-coaps = which is done. We worked on it because EST was in IEC 62351 and we = needed a solution for some COAP usecases. Since then EST-coaps has been = picked up by Fairhair and Thread.

 

The argument about L7 = protection in CMPv2 could also be satisfied by = draft-selander-ace-coap-est-oscore. draft-selander-ace-coap-est-oscore = was trying to secure EST over L7 encrypted COSE messages. =

 

Additionally, I would = argue that L7 proof-of-identity is not a strong advantage in an (L)RA = trust model for both EST-coaps and CMPv2-coaps. What is more, having the = CA trust all potential manufacturer roots in order to do L7 proof of = identity will not be trivial unless the CA is a private one. And in a = private CA and (L)RA scenario I don=E2=80=99t know that end-to-end proof = or identity is that important.

 

I oppose adoption unless = there is a compelling reason why. Also I am not sure where this draft = would be implemented and used. If this is just for one or two vendors I = don=E2=80=99t think ACE needs to spend the cycles. =

 

Thanks,

Panos

 

 

From: Ace = <ace-bounces@ietf.org> On Behalf Of Mohit = Sahni
Sent: Monday, October 05, 2020 3:21 AM
To: Ace = Wg <ace@ietf.org>
Cc: stripathi@paloaltonetworks.com; = saurabh.tripathi@gmail.com; Mohit Sahni = <msahni@paloaltonetworks.com>; Brockhaus, Hendrik = <hendrik.brockhaus@siemens.com>
Subject: [Ace] Call for = adoption draft-msahni-ace-cmpv2-coap-transport-01

 

Hello = Ace WG,

I am presenting = the draft-msahni-ace-cmpv2-coap-transport-01 to be adopted by = ACE WG. This document supplements the "Lightweight CMP Profile" draft (https://tools.ietf.org/html/draft-brockhaus-lamps-lightweigh= t-cmp-profile-03) which specify the modifications to the CMPv2 = protocol for it to be used efficiently by the constrained devices for = PKI operations. 

 

I discussed this draft in = IETF-108 ACE session and the need for the recharter of ACE WG in = order to adopt this draft, to which we had a = consensus. Please state your opinion on whether this = draft should be adopted by ACE WG. 

 

 

Regards,

Mohit Sahni

 

------=_NextPart_001_0026_01D69B0C.A1017B30-- ------=_NextPart_000_0025_01D69B0C.A1017B30 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCDGkw ggNDMIICK6ADAgECAhBf+HsoK1TcjUKjFbVoya3/MA0GCSqGSIb3DQEBBQUAMDUxFjAUBgNVBAoT DUNpc2NvIFN5c3RlbXMxGzAZBgNVBAMTEkNpc2NvIFJvb3QgQ0EgMjA0ODAeFw0wNDA1MTQyMDE3 MTJaFw0yOTA1MTQyMDI1NDJaMDUxFjAUBgNVBAoTDUNpc2NvIFN5c3RlbXMxGzAZBgNVBAMTEkNp c2NvIFJvb3QgQ0EgMjA0ODCCASAwDQYJKoZIhvcNAQEBBQADggENADCCAQgCggEBALCauaunrwp3 p+JxtrRmYpR4iEfGYlWEQDK/wKsupRxx1rxue6iqum7SFYhIRZ2i/IPQzLmM4CZocEp43yEXnvRh BckVyM8W2jVhiZRDqISoMZh4m7lObyxTEmzNHa0rJLsxxCv/g0Rvtj0kdwnqvyqoH2pW9iAPEVSX gXWnJc5ZaoJl77fq5+KNdYtu8t1Ppl5inM8QCmTQTm3OK8xb9WClJ0eNafR/zhtw3nAbINZuzaYB qDwS0qk/oGteu44gi3qR47Vo7qDnxAF0qFMLK0qaD2USDoJNjmP97+ubGttTphNgr8J918dsFyXU c/tHZFCBgJRM4b+uSxzfku0uBd8CAQOjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/ MB0GA1UdDgQWBBQn88gVHm6aAgkWrSugiWBf2nsvqjAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG 9w0BAQUFAAOCAQEAnZ2EhKNBqXx3DLdTyk5EUGLvVHzTdRcc6ODGSEu2/kw6GYFWsFbuGZZiqlqj ZMH2TlQzxnf+xRy65V0lyvXwk5qDES7my/h0Rf7nBbir59/LS+E3hNq5i5dwHvDii9ew2A6dsWnW KpF7qUlPfuaOldiDJzzVaEkO1J32LuunvuswpKwfRPyVqzMG+31gCt60imOwnKnypLlTAYfQaKQn f6v/6frJQDiIZ7Q5xoRvV8lT27qO7sBDsvgJg27/Zs8+7xezWBglCTRe48vWFLbs8pJvdOQvgSrV kpHg4Jc8MmgFhUvR91fiUh2TGlSfBXDASnFgHkMLYB7+o86BGeELNTCCBG4wggNWoAMCAQICCmEQ gG0AAAAAAA4wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UE AxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTE0MDQwNDIwMjQxOFoXDTI5MDUxNDIwMjU0MlowLDEO MAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxveWVlIENBMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAyt9+FkxTFfsjVs3GuWUKBJXl3kxFZ4wMxwbgqx9tXzcqe+fto62A fxHI84Lr7p9Q2cm/PaEvuzwRBzXvuKXZUU7ZsPdToJSALCySZa0Qb6GGa19ACpmlUEQakE3P5kz7 RgaNSOMH1+GtY9fV6CcAFb9uB7JDu2UGL332WV2bEsUsfb3rRLBS4cL8Hu2dWfcdk6erMaZCQjkn 04FixlQsJozbPRTQqI4V6iikG/69rDyeTdbVTK+My/9LnwVsD3GBMiRh7RmrvupxtGiMu8j05Is/ d1OifhWecwvjV3Reg9Lok8bMNJEMAped1weTdVS0X4MsAheosJBld9lS5O4idwIDAQABo4IBhzCC AYMwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFJ+VNrSOXdVLwwrBpymTQ1EG/YlRMBkGCSsG AQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB8G A1UdIwQYMBaAFCfzyBUebpoCCRatK6CJYF/aey+qMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly93 d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9jcmwvY3JjYTIwNDguY3JsMFAGCCsGAQUFBwEBBEQw QjBABggrBgEFBQcwAoY0aHR0cDovL3d3dy5jaXNjby5jb20vc2VjdXJpdHkvcGtpL2NlcnRzL2Ny Y2EyMDQ4LmNlcjBcBgNVHSAEVTBTMFEGCisGAQQBCRUBFQAwQzBBBggrBgEFBQcCARY1aHR0cDov L3d3dy5jaXNjby5jb20vc2VjdXJpdHkvcGtpL3BvbGljaWVzL2luZGV4Lmh0bWwwDQYJKoZIhvcN AQEFBQADggEBAD5OviMaRgKNXmvbigI0C2Ob5QE8Jl2McLIk62Be7IqEZC4bWRWjZxrhFuP94E19 RJojKNLttveiH+dEze1t6oYhVCisbGG8+8hlUARAiiqL/J9uGJ71xT6loqkcAK5xphe7STJLSlgT k0w26fcvDeiA6zhdVHnKhVKkpOJWd9MNByFOnCQyDOK+pcNxLU6IN9TwL1ZoRkdFa11QiCX3Oimk 8YhBrVN+VzGGKtbgZ4fYU6uBo3V3vtshyDpHtGkn1e7f9/TWcY26etFzL33dzaZ4lChlw4l3XkLq 6AfCEDF5djpBdiCRjwpBUIIbCSmyESBvA+sL4j8i1vo/uEartrAwggSsMIIDlKADAgECAgoBhhEi QTzquitVMA0GCSqGSIb3DQEBCwUAMCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBF bXBsb3llZSBDQTAeFw0xOTEyMjAxOTQ5MDJaFw0yMTEyMTkxOTU5MDJaMIGfMSQwIgYDVQQDExtQ YW5vcyBLYW1wYW5ha2lzIChwa2FtcGFuYSkxFDASBgNVBAsTC0Npc2NvIFVzZXJzMRIwEAYDVQQL EwlFbXBsb3llZXMxEzARBgoJkiaJk/IsZAEZEwNjb20xFTATBgoJkiaJk/IsZAEZEwVjaXNjbzEh MB8GCSqGSIb3DQEJAQwScGthbXBhbmFAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAmIHTLIzoAnuMUiHMx8V+PF9JpAcB7zrNHOY1Vj1R1Vx7ty7m9yo9G991T2n7zHo4 UzF6tnB9NxzQOKCY54oqP5KjVGYOPPo+qZ+2rx1GABzdKUF4LwUUKOTf9uXAtvsvIRUc5J/csShT jcUIvtVmiAzWXWRfMYShjBYBVtx/h8fDqAqfFAzd6HG0TcdsN/BRb9k6QEW1afHjPKlRUaDRELyj nFGJZd2OsUJ7/aKMdFmQFd2CAJYzsuwLYjeqJsuGNzBc/k6mzQPf6FW17nz17G41KReU0UdZf2yZ jvimkwCQ/yW8SVTOcGBP+Zk+Lq5EYEGQMu1qtNK/97bXMc5kuwIDAQABo4IBWjCCAVYwDgYDVR0P AQH/BAQDAgTwMAwGA1UdEwEB/wQCMAAwegYIKwYBBQUHAQEEbjBsMDwGCCsGAQUFBzAChjBodHRw Oi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY2VjYS5jZXIwLAYIKwYBBQUHMAGG IGh0dHA6Ly9wa2ljdnMuY2lzY28uY29tL3BraS9vY3NwMB8GA1UdIwQYMBaAFJ+VNrSOXdVLwwrB pymTQ1EG/YlRMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jaXNjb2NlcnRzLmNpc2NvLmNvbS9m aWxlL2NlY2EuY3JsMB0GA1UdEQQWMBSBEnBrYW1wYW5hQGNpc2NvLmNvbTAdBgNVHQ4EFgQUjrl7 6Mrrdw3ZYFiTpZBdtrUm5P4wHwYDVR0lBBgwFgYKKwYBBAGCNwoDDAYIKwYBBQUHAwQwDQYJKoZI hvcNAQELBQADggEBAMhR6xCTygu68lppjWebXTXYznix5961hcmwiJRkPtUIGQ5JQwXyCwq/Juuq yc5ebeq9cQEO5iqyxik/UAQ35BlmKb7SNLi75RtFE/AIZrRsEjTUoO2EtCMQOEMcenWa2XE8fEID BkwzreKeaOchCbDd4L9PvKFht6nDDFtb6VZdWs4ort+J3iFeilVf3oI5MSVi+qroWaFLnLYTQGTn qEjWANfKw3RRBAMdoPCZ+N4eftAk1TWVS08nOsPoKWXtIqX6y0ZPs/EZjBSk57v1TPLpYhEqYGXI oGJlIvzIAfYNoUg8yP8toG5T7x+7hRz0MMUGWcCDsS9PMFxH6SnrUSMxggMNMIIDCQIBATA6MCwx DjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIKAYYRIkE86rorVTAN BglghkgBZQMEAgEFAKCCAaQwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUx DxcNMjAxMDA1MTU0MjM5WjAvBgkqhkiG9w0BCQQxIgQgfrDUL518YiwDByUK7U9jn2+X76GVKTzu Un8WAW6VumAwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lz Y28gRW1wbG95ZWUgQ0ECCgGGESJBPOq6K1UwSwYLKoZIhvcNAQkQAgsxPKA6MCwxDjAMBgNVBAoT BUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIKAYYRIkE86rorVTCBoAYJKoZIhvcN AQkPMYGSMIGPMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUD BAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDALBglghkgBZQMEAgEwCwYJKoZIhvcN AQEKMAsGCWCGSAFlAwQCAzALBglghkgBZQMEAgIwBwYFKw4DAhowDQYJKoZIhvcNAQEBBQAEggEA AqZzsBan5QhE7lNfb6VoUZH1hK39KDh50mhlAltzuFaZKORsAFioJREXh3qJiFmc3uO1DoqHcJsw z2HA/cDM7IKr4jp92BXl6gTXkbAgqNkIj0OLvCtP0jyr6TNE96Lx91uNoLQTOVJ6Am2z0oKTYvaO PJ0nNSld7/0jNnqinRqNLHEujNgmbBmHFQ9QL8id0dPBywLBf1Iir1YOaQJuTwPySl7fsxPDQGAe goB7vVo706WqCLpI/9PEvtR3Chjwd96PM0jpCiNnNrczbxH+9MDnd1DN+29o69Uc8kliv+X7v5NA 2CR95EoqzwoI/QCNEh4vmOojY5AeIjjX5kkQVAAAAAAAAA== ------=_NextPart_000_0025_01D69B0C.A1017B30-- From nobody Wed Oct 7 23:07:58 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 172553A1110 for ; Wed, 7 Oct 2020 23:07:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.8 X-Spam-Level: X-Spam-Status: No, score=-1.8 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eW8bPZHZrdEo for ; Wed, 7 Oct 2020 23:07:53 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2058.outbound.protection.outlook.com [40.107.22.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBBD73A1048 for ; Wed, 7 Oct 2020 23:07:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NKA5513liwYTOEIF+mJW8HIKrik8yQYTviyKI+uaXl3NHaFBNtlEtzB7z7uO9dtufJUxBpoJmxtBkBuFuF6B0x8ob0L2T6bBXvktk4OqkmsNTLJbxCjQUmbaL3/ecMmASLB5uCy9u1Kdef+kjfTNFkBG3vcoo/nyxi95ULitLtR/XEyRTGP0GPMMDLeG8TXtCZO28k5KMcB4MRTOh3ahvqYruBBdAC69V2TG64Hf9RHiHJm+z0QahO2O0UJjaB/h8wNIokhAEl8Q3mrprlr8o1DaUOFKLsU6WYhUg2yKeZF6gTrF7LklIz0GZg9z8w8c69xca8piJkNzUx/DAtVkCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KaFHZPsWGHT36rf7g6hYyWQP615YlU31JnakGgqYHXw=; b=V2kupUasmfQrEzftHU1wdQOVcj+xJxMUqenMYDo7e7VViV1qD9wXuOlSEO8jX7V8Mt3BbFLdtlMGTy3fFMJa6d5SAtT4fbOcaWokTqEGHCi+J8OFpaTI9KjDDfcih2utSOBvr1/j3+FGSlZVTTzpfDPFylbOW7xYMN+mfqhl1GPJ+OxyWXYQPdm1ZubX9ifzljXOeAOfTAXFDJAkxmcl0JLez7Pexckqocq7C++9tKbNDfWQJWgchuOlKfAWWY8mQ+xPrVgNVAlkHkpQixFQtMM/bnGwvOaOhG6fftuSeYikf6Nl+to/sU6lOLz0lN5/YwbHigdnqY9yLR48EVIr3A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=KaFHZPsWGHT36rf7g6hYyWQP615YlU31JnakGgqYHXw=; b=m8N+6IH3YAwStTOPKxlt9UuYdHFgvyr8UYBwspFbRS0AuiXuLtvLoI4S0NnKoJLQ+/GMMANbwn1C/YupHHLpalkPV/BVwrlzSNCr+Z4HdqFfJZ5pxunw4vVs5MwlqJZH/jDdutG/UsVmbXtCMlqJz7Wj2cvxCf/GqaYFTjIOab0= Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:dd::17) by AM9PR10MB4021.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:1f7::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.22; Thu, 8 Oct 2020 06:07:50 +0000 Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::815c:e3e3:e2be:5eed]) by AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::815c:e3e3:e2be:5eed%6]) with mapi id 15.20.3433.046; Thu, 8 Oct 2020 06:07:50 +0000 From: "Brockhaus, Hendrik" To: "Panos Kampanakis (pkampana)" , Mohit Sahni , Ace Wg CC: "stripathi@paloaltonetworks.com" , "saurabh.tripathi@gmail.com" , Mohit Sahni Thread-Topic: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 Thread-Index: AQHWmugf2jgqXegeAEWC7bN66U2odKmJJuOAgAQTMrA= Content-Class: Date: Thu, 8 Oct 2020 06:07:50 +0000 Message-ID: References: In-Reply-To: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Enabled=true; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SetDate=2020-10-08T06:07:49Z; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Method=Standard; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Name=restricted-default; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ActionId=ae32384d-3ab5-45c6-8cfe-f4bb5ca9f9d6; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ContentBits=0 document_confidentiality: Restricted authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none; dmarc.ietf.org; dmarc=none action=none header.from=siemens.com; x-originating-ip: [165.225.200.184] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 71ca16b6-6b06-45d4-bc71-08d86b507cc2 x-ms-traffictypediagnostic: AM9PR10MB4021: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: i3in4Gth2Jx9iYFV1bCIEksqh+tGcb6xUWfH/oXk+LljY5ZMmzOQXUbIgOPGjkXfv4uqQU0U5nhnIqmZP1q9DmcjmoKLNha24L1EhiF7YGHiDoEy6D7gqDtmHxpVO455q46sWXx7igW0v0p0eEtCN6IQlncXQ/nKTOi6Mc9/iz3sO6h2THF1WA5ApkgfBxbkdgFyyBLe+LcTdCtCK39zUbhCtMi+mjBbAixjWym5g1ljLYCDuKLTJ+Rua9niXCFUrP1CDsl1v1+dyrEl+Ldz2jdOW1midNd5CbIhUgHDNz64+C+BN0iOCadT6vtAb4jl7d+0duf8VupKtHANBv1su8+1HoDR7ghXoFGwWhEkAa7b2IH/mWHk7DW0YMk34+3DLe/z5akJaJztau4tMFL2Vg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(136003)(396003)(376002)(346002)(366004)(39860400002)(71200400001)(966005)(54906003)(8676002)(478600001)(66946007)(66476007)(5660300002)(76116006)(316002)(9686003)(52536014)(64756008)(66446008)(4326008)(66556008)(110136005)(33656002)(86362001)(6506007)(7696005)(8936002)(53546011)(55236004)(83380400001)(166002)(83080400001)(2906002)(26005)(186003)(55016002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR10MB24183F163B988B1BE3B4B976FE0B0AM0PR10MB2418EURP_" MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 71ca16b6-6b06-45d4-bc71-08d86b507cc2 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2020 06:07:50.6348 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cSCFaii3RJIXZtzzxDhe5n028/+lBo/9jnNXl5eao4j59OfYuHqShY30dIaqhGDXuilbzBi6wCceTFRoQGk6RiAq4u7c9ds4WvPab5i4swk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR10MB4021 Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2020 06:07:55 -0000 --_000_AM0PR10MB24183F163B988B1BE3B4B976FE0B0AM0PR10MB2418EURP_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBob25vciBQYW5vcyBvcGluaW9uIGFuZCB1bmRlcnN0YW5kIHRoYXQgaGUgd2hpc2hlcyB0byBo YXZlIEVTVCBhcyB0aGUgb25lIGFuZCBvbmx5IGVucm9sbG1lbnQgcHJvdG9jb2wuIEJ1dCBhbHNv IGFmdGVyIEVTVCwgdGhlcmUgd2VyZSBmdXJ0aGVyIGVucm9sbG1lbnQgcHJvdG9jb2xzIHN0YW5k YXJkaXplZCwgZS5nLiwgQUNNRSwgT1BDLVVBIEdEUywgU0NFUC4gQnV0IEkgZG8gbm90IHdhbnQg dG8gYXJndWUgcHJvIG9yIGNvbiBhIHNwZWNpZmljIHByb3RvY29sLiBJIHRoaW5rIHdlIGhhdmUg dG8gYWNjZXB0IHRoYXQgdGhlcmUgYXJlIGRpZmZlcmVudCBwcm90b2NvbHMgd2l0aCBkaWZmZXJl bnQgYWJpbGl0aWVzIGNob3NlbiBpbiBkaWZmZXJlbnQgdmVydGljYWxzLg0KDQpUaGUgcG9pbnQg aGVyZSBpcywgZG9lcyB0aGUgZ3JvdXAgc3VwcG9ydCBNb2hpdHMgZHJhZnQgb24gc3BlY2lmeSBD b0FQIHRyYW5zcG9ydCBmb3IgQ01QLg0KDQpKdXN0IHRvIHJlY2FwIHRoZSBkaXNjdXNzaW9uIGZy b20gSUVURiAxMDg6DQotLS0tLS0tLS0tLS0tLS0tLS0tLS1zbmlwLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQojIyMgQ29BUCBUcmFuc3BvcnQgZm9yIENNUCAtIE1vaGl0IFNhaG5pIC0gNToxMQ0KDQpK UzogVGhpcyBpcyBoZXJlIGZvciBwb3NzaWJsZSBhZG9wdGlvbiwgYnV0IHRoZSBXRyBpcyBub3Qg bm90IGV4cGVjdGVkIHRvIGhhdmUNCmV4cGVydGlzZSBpbiB0aGUgQ01QIHByb3RvY29sLCBidXQg anVzdCBsb29raW5nIGF0IGhvdyB0aGUgQ29BUCB3b3JrIGlzIGRvbmUuDQpETTogT2JqZWN0aW9u cyB0byBkb2luZyB0aGlzIHdvcms/IE5vIG9iamVjdGlvbnMgcmVnaXN0ZXJlZC4gRE06IE5lZWQg dG8NCnJlLWNoYXJ0ZXIgYW5kIHRoZW4gYWRvcHQuIEpTOiBSZWNoYXJ0ZXIgZG9lcyBub3Qgc3Rv cCB1cyBmcm9tIGRvaW5nIHJldmlld3MuDQpHUzogUmVhZGluZyB0YWJsZSBvZiBjb250ZW50cyAt IG11bHRpY2FzdCBhbmQgcHJveHkgc3VwcG9ydCBNUzogRG9uJ3QgdXNlDQptdWx0aWNhc3QgZm9y IHRoaXMuICBPbmx5IHVzZWQgZm9yIHNlcnZpY2UgZGlzY292ZXJ5LiBOZWVkIHRvIGhhdmUgcHJv eHkNCnN1cHBvcnQgdG8gZ2V0IGFkZGl0aW9uYWwgc2VjdXJpdHkgZm9yIHNlcnZlcnMuIEdTOiBU aGlzIGlzIGp1c3QgYSB0cmFuc3BvcnQNCmRyYWZ0PyBNUzogWWVzLg0KLS0tLS0tLS0tLS0tLS0t LS0tLS0tc25pcC0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpJIHdvdWxkIGFwcHJlY2lhdGUgZnVy dGhlciB2b3Rlcy4NCg0KSGVuZHJpaw0KDQpWb246IEFjZSA8YWNlLWJvdW5jZXNAaWV0Zi5vcmc+ IEltIEF1ZnRyYWcgdm9uIFBhbm9zIEthbXBhbmFraXMgKHBrYW1wYW5hKQ0KR2VzZW5kZXQ6IE1v bnRhZywgNS4gT2t0b2JlciAyMDIwIDE3OjQ0DQpBbjogTW9oaXQgU2FobmkgPG1vaGl0MDZqYW5A Z21haWwuY29tPjsgQWNlIFdnIDxhY2VAaWV0Zi5vcmc+DQpDYzogc3RyaXBhdGhpQHBhbG9hbHRv bmV0d29ya3MuY29tOyBzYXVyYWJoLnRyaXBhdGhpQGdtYWlsLmNvbTsgTW9oaXQgU2FobmkgPG1z YWhuaUBwYWxvYWx0b25ldHdvcmtzLmNvbT47IEJyb2NraGF1cywgSGVuZHJpayAoVCBSREEgQ1NU IFNFQS1ERSkgPGhlbmRyaWsuYnJvY2toYXVzQHNpZW1lbnMuY29tPg0KQmV0cmVmZjogUmU6IFtB Y2VdIENhbGwgZm9yIGFkb3B0aW9uIGRyYWZ0LW1zYWhuaS1hY2UtY21wdjItY29hcC10cmFuc3Bv cnQtMDENCg0KSSBvcHBvc2UgYWRvcHRpb24uDQoNCklFVEYgaW4gdGhlIHBhc3QgaGFzIGNvbWUg dXAgd2l0aCBTQ0VQLCBDTVAsIENNQyBhbmQgRVNULCBhbGwgb2YgdGhlbSBmb3IgdGhlIG1vc3Qg cGFydCBkb2luZyB0aGUgc2FtZSB0aGluZyB3aXRoIG1pbm9yIGRpZmZlcmVuY2VzLiBJIGRvbuKA mXQgdGhpbmsgd2UgbmVlZCB0d28gZW5yb2xsbWVudCBwcm90b2NvbHMgdG8gcnVuIG92ZXIgQ09B UC4gV2Ugc2hvdWxkIG5vdCByZXBlYXQgbWlzdGFrZXMgb2YgdGhlIHBhc3QuDQoNCkluIEFDRSB3 ZSBoYXZlIEVTVC1jb2FwcyB3aGljaCBpcyBkb25lLiBXZSB3b3JrZWQgb24gaXQgYmVjYXVzZSBF U1Qgd2FzIGluIElFQyA2MjM1MSBhbmQgd2UgbmVlZGVkIGEgc29sdXRpb24gZm9yIHNvbWUgQ09B UCB1c2VjYXNlcy4gU2luY2UgdGhlbiBFU1QtY29hcHMgaGFzIGJlZW4gcGlja2VkIHVwIGJ5IEZh aXJoYWlyIGFuZCBUaHJlYWQuDQoNClRoZSBhcmd1bWVudCBhYm91dCBMNyBwcm90ZWN0aW9uIGlu IENNUHYyIGNvdWxkIGFsc28gYmUgc2F0aXNmaWVkIGJ5IGRyYWZ0LXNlbGFuZGVyLWFjZS1jb2Fw LWVzdC1vc2NvcmUuIGRyYWZ0LXNlbGFuZGVyLWFjZS1jb2FwLWVzdC1vc2NvcmUgd2FzIHRyeWlu ZyB0byBzZWN1cmUgRVNUIG92ZXIgTDcgZW5jcnlwdGVkIENPU0UgbWVzc2FnZXMuDQoNCkFkZGl0 aW9uYWxseSwgSSB3b3VsZCBhcmd1ZSB0aGF0IEw3IHByb29mLW9mLWlkZW50aXR5IGlzIG5vdCBh IHN0cm9uZyBhZHZhbnRhZ2UgaW4gYW4gKEwpUkEgdHJ1c3QgbW9kZWwgZm9yIGJvdGggRVNULWNv YXBzIGFuZCBDTVB2Mi1jb2Fwcy4gV2hhdCBpcyBtb3JlLCBoYXZpbmcgdGhlIENBIHRydXN0IGFs bCBwb3RlbnRpYWwgbWFudWZhY3R1cmVyIHJvb3RzIGluIG9yZGVyIHRvIGRvIEw3IHByb29mIG9m IGlkZW50aXR5IHdpbGwgbm90IGJlIHRyaXZpYWwgdW5sZXNzIHRoZSBDQSBpcyBhIHByaXZhdGUg b25lLiBBbmQgaW4gYSBwcml2YXRlIENBIGFuZCAoTClSQSBzY2VuYXJpbyBJIGRvbuKAmXQga25v dyB0aGF0IGVuZC10by1lbmQgcHJvb2Ygb3IgaWRlbnRpdHkgaXMgdGhhdCBpbXBvcnRhbnQuDQoN Ckkgb3Bwb3NlIGFkb3B0aW9uIHVubGVzcyB0aGVyZSBpcyBhIGNvbXBlbGxpbmcgcmVhc29uIHdo eS4gQWxzbyBJIGFtIG5vdCBzdXJlIHdoZXJlIHRoaXMgZHJhZnQgd291bGQgYmUgaW1wbGVtZW50 ZWQgYW5kIHVzZWQuIElmIHRoaXMgaXMganVzdCBmb3Igb25lIG9yIHR3byB2ZW5kb3JzIEkgZG9u 4oCZdCB0aGluayBBQ0UgbmVlZHMgdG8gc3BlbmQgdGhlIGN5Y2xlcy4NCg0KVGhhbmtzLA0KUGFu b3MNCg0KDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzphY2UtYm91bmNl c0BpZXRmLm9yZz4+IE9uIEJlaGFsZiBPZiBNb2hpdCBTYWhuaQ0KU2VudDogTW9uZGF5LCBPY3Rv YmVyIDA1LCAyMDIwIDM6MjEgQU0NClRvOiBBY2UgV2cgPGFjZUBpZXRmLm9yZzxtYWlsdG86YWNl QGlldGYub3JnPj4NCkNjOiBzdHJpcGF0aGlAcGFsb2FsdG9uZXR3b3Jrcy5jb208bWFpbHRvOnN0 cmlwYXRoaUBwYWxvYWx0b25ldHdvcmtzLmNvbT47IHNhdXJhYmgudHJpcGF0aGlAZ21haWwuY29t PG1haWx0bzpzYXVyYWJoLnRyaXBhdGhpQGdtYWlsLmNvbT47IE1vaGl0IFNhaG5pIDxtc2FobmlA cGFsb2FsdG9uZXR3b3Jrcy5jb208bWFpbHRvOm1zYWhuaUBwYWxvYWx0b25ldHdvcmtzLmNvbT4+ OyBCcm9ja2hhdXMsIEhlbmRyaWsgPGhlbmRyaWsuYnJvY2toYXVzQHNpZW1lbnMuY29tPG1haWx0 bzpoZW5kcmlrLmJyb2NraGF1c0BzaWVtZW5zLmNvbT4+DQpTdWJqZWN0OiBbQWNlXSBDYWxsIGZv ciBhZG9wdGlvbiBkcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJhbnNwb3J0LTAxDQoNCkhl bGxvIEFjZSBXRywNCkkgYW0gcHJlc2VudGluZyB0aGUgZHJhZnQtbXNhaG5pLWFjZS1jbXB2Mi1j b2FwLXRyYW5zcG9ydC0wMSB0byBiZSBhZG9wdGVkIGJ5IEFDRSBXRy4gVGhpcyBkb2N1bWVudCBz dXBwbGVtZW50cyB0aGUgIkxpZ2h0d2VpZ2h0IENNUCBQcm9maWxlIiBkcmFmdCAoaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJyb2NraGF1cy1sYW1wcy1saWdodHdlaWdodC1jbXAt cHJvZmlsZS0wMzxodHRwczovL2V1cjAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZ0b29scy5pZXRmLm9yZyUyRmh0bWwlMkZkcmFmdC1icm9ja2hh dXMtbGFtcHMtbGlnaHR3ZWlnaHQtY21wLXByb2ZpbGUtMDMmZGF0YT0wMiU3QzAxJTdDaGVuZHJp ay5icm9ja2hhdXMlNDBzaWVtZW5zLmNvbSU3QzU2OWFhMTAyOGRkYTQwMzQ1MmI5MDhkODY5NDVi N2QzJTdDMzhhZTNiY2Q5NTc5NGZkNGFkZGFiNDJlMTQ5NWQ1NWElN0MxJTdDMSU3QzYzNzM3NTA5 NTQ0MzY1MDQzNCZzZGF0YT0lMkZ1ek1ZbTJVSWhiclNhcnJ1Z1g0dzUwdzglMkIwQXJQZlNQJTJC WnZZOFVjVFQ0JTNEJnJlc2VydmVkPTA+KSB3aGljaCBzcGVjaWZ5IHRoZSBtb2RpZmljYXRpb25z IHRvIHRoZSBDTVB2MiBwcm90b2NvbCBmb3IgaXQgdG8gYmUgdXNlZCBlZmZpY2llbnRseSBieSB0 aGUgY29uc3RyYWluZWQgZGV2aWNlcyBmb3IgUEtJIG9wZXJhdGlvbnMuDQoNCkkgZGlzY3Vzc2Vk IHRoaXMgZHJhZnQgaW4gSUVURi0xMDggQUNFIHNlc3Npb24gYW5kIHRoZSBuZWVkIGZvciB0aGUg cmVjaGFydGVyIG9mIEFDRSBXRyBpbiBvcmRlciB0byBhZG9wdCB0aGlzIGRyYWZ0LCB0byB3aGlj aCB3ZSBoYWQgYSBjb25zZW5zdXMuIFBsZWFzZSBzdGF0ZSB5b3VyIG9waW5pb24gb24gd2hldGhl ciB0aGlzIGRyYWZ0IHNob3VsZCBiZSBhZG9wdGVkIGJ5IEFDRSBXRy4NCg0KTGluayB0byB0aGUg ZHJhZnQgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtbXNhaG5pLWFjZS1j bXB2Mi1jb2FwLXRyYW5zcG9ydC88aHR0cHM6Ly9ldXIwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5v dXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZGF0YXRyYWNrZXIuaWV0Zi5vcmclMkZkb2Ml MkZkcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJhbnNwb3J0JTJGJmRhdGE9MDIlN0MwMSU3 Q2hlbmRyaWsuYnJvY2toYXVzJTQwc2llbWVucy5jb20lN0M1NjlhYTEwMjhkZGE0MDM0NTJiOTA4 ZDg2OTQ1YjdkMyU3QzM4YWUzYmNkOTU3OTRmZDRhZGRhYjQyZTE0OTVkNTVhJTdDMSU3QzElN0M2 MzczNzUwOTU0NDM2NjAzODkmc2RhdGE9VHBkcWR5S0hOeGl1MWZMQWRKeFhlb3QlMkJqQTlqTlYw SlZNR0o4NzBIOEFjJTNEJnJlc2VydmVkPTA+DQoNClJlZ2FyZHMsDQpNb2hpdCBTYWhuaQ0KDQo= --_000_AM0PR10MB24183F163B988B1BE3B4B976FE0B0AM0PR10MB2418EURP_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KLk1zb0NocERlZmF1bHQNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBX b3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4w cHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkRFIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxl Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5JIGhvbm9y IFBhbm9zIG9waW5pb24gYW5kIHVuZGVyc3RhbmQgdGhhdCBoZSB3aGlzaGVzIHRvIGhhdmUgRVNU IGFzIHRoZSBvbmUgYW5kIG9ubHkgZW5yb2xsbWVudCBwcm90b2NvbC4gQnV0IGFsc28gYWZ0ZXIg RVNULCB0aGVyZSB3ZXJlIGZ1cnRoZXIgZW5yb2xsbWVudCBwcm90b2NvbHMgc3RhbmRhcmRpemVk LCBlLmcuLA0KIEFDTUUsIE9QQy1VQSBHRFMsIFNDRVAuIEJ1dCBJIGRvIG5vdCB3YW50IHRvIGFy Z3VlIHBybyBvciBjb24gYSBzcGVjaWZpYyBwcm90b2NvbC4gSSB0aGluayB3ZSBoYXZlIHRvIGFj Y2VwdCB0aGF0IHRoZXJlIGFyZSBkaWZmZXJlbnQgcHJvdG9jb2xzIHdpdGggZGlmZmVyZW50IGFi aWxpdGllcyBjaG9zZW4gaW4gZGlmZmVyZW50IHZlcnRpY2Fscy4NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVMiPlRoZSBwb2ludCBoZXJlIGlzLCBkb2VzIHRoZSBncm91cCBzdXBwb3J0 IE1vaGl0cyBkcmFmdCBvbiBzcGVjaWZ5IENvQVAgdHJhbnNwb3J0IGZvciBDTVAuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SnVzdCB0byByZWNhcCB0aGUgZGlzY3Vzc2lvbiBmcm9t IElFVEYgMTA4OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPi0tLS0t LS0tLS0tLS0tLS0tLS0tLXNuaXAtLS0tLS0tLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj4jIyMgQ29BUCBUcmFuc3BvcnQgZm9yIENNUCAtIE1v aGl0IFNhaG5pIC0gNToxMTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkpTOiBUaGlz IGlzIGhlcmUgZm9yIHBvc3NpYmxlIGFkb3B0aW9uLCBidXQgdGhlIFdHIGlzIG5vdCBub3QgZXhw ZWN0ZWQgdG8gaGF2ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPmV4 cGVydGlzZSBpbiB0aGUgQ01QIHByb3RvY29sLCBidXQganVzdCBsb29raW5nIGF0IGhvdyB0aGUg Q29BUCB3b3JrIGlzIGRvbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1V UyI+RE06IE9iamVjdGlvbnMgdG8gZG9pbmcgdGhpcyB3b3JrPyBObyBvYmplY3Rpb25zIHJlZ2lz dGVyZWQuIERNOiBOZWVkIHRvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1V UyI+cmUtY2hhcnRlciBhbmQgdGhlbiBhZG9wdC4gSlM6IFJlY2hhcnRlciBkb2VzIG5vdCBzdG9w IHVzIGZyb20gZG9pbmcgcmV2aWV3cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTIj5HUzogUmVhZGluZyB0YWJsZSBvZiBjb250ZW50cyAtIG11bHRpY2FzdCBhbmQgcHJv eHkgc3VwcG9ydCBNUzogRG9uJ3QgdXNlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFn ZTpFTi1VUyI+bXVsdGljYXN0IGZvciB0aGlzLiZuYnNwOyBPbmx5IHVzZWQgZm9yIHNlcnZpY2Ug ZGlzY292ZXJ5LiBOZWVkIHRvIGhhdmUgcHJveHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxh bmd1YWdlOkVOLVVTIj5zdXBwb3J0IHRvIGdldCBhZGRpdGlvbmFsIHNlY3VyaXR5IGZvciBzZXJ2 ZXJzLiBHUzogVGhpcyBpcyBqdXN0IGEgdHJhbnNwb3J0PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUyI+ZHJhZnQ/IE1TOiBZZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUyI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tc25pcC0tLS0tLS0tLS0tLS0t LS0tLS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkkgd291bGQgYXBwcmVjaWF0 ZSBmdXJ0aGVyIHZvdGVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhlbmRyaWs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBi bHVlIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPlZvbjo8L2I+IEFjZSAmbHQ7 YWNlLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IDxiPkltIEF1ZnRyYWcgdm9uIDwvYj4NClBhbm9zIEth bXBhbmFraXMgKHBrYW1wYW5hKTxicj4NCjxiPkdlc2VuZGV0OjwvYj4gTW9udGFnLCA1LiBPa3Rv YmVyIDIwMjAgMTc6NDQ8YnI+DQo8Yj5Bbjo8L2I+IE1vaGl0IFNhaG5pICZsdDttb2hpdDA2amFu QGdtYWlsLmNvbSZndDs7IEFjZSBXZyAmbHQ7YWNlQGlldGYub3JnJmd0Ozxicj4NCjxiPkNjOjwv Yj4gc3RyaXBhdGhpQHBhbG9hbHRvbmV0d29ya3MuY29tOyBzYXVyYWJoLnRyaXBhdGhpQGdtYWls LmNvbTsgTW9oaXQgU2FobmkgJmx0O21zYWhuaUBwYWxvYWx0b25ldHdvcmtzLmNvbSZndDs7IEJy b2NraGF1cywgSGVuZHJpayAoVCBSREEgQ1NUIFNFQS1ERSkgJmx0O2hlbmRyaWsuYnJvY2toYXVz QHNpZW1lbnMuY29tJmd0Ozxicj4NCjxiPkJldHJlZmY6PC9iPiBSZTogW0FjZV0gQ2FsbCBmb3Ig YWRvcHRpb24gZHJhZnQtbXNhaG5pLWFjZS1jbXB2Mi1jb2FwLXRyYW5zcG9ydC0wMTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5JIG9wcG9zZSBhZG9wdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SUVURiBpbiB0aGUgcGFz dCBoYXMgY29tZSB1cCB3aXRoIFNDRVAsIENNUCwgQ01DIGFuZCBFU1QsIGFsbCBvZiB0aGVtIGZv ciB0aGUgbW9zdCBwYXJ0IGRvaW5nIHRoZSBzYW1lIHRoaW5nIHdpdGggbWlub3IgZGlmZmVyZW5j ZXMuIEkgZG9u4oCZdCB0aGluayB3ZSBuZWVkIHR3byBlbnJvbGxtZW50IHByb3RvY29scyB0byBy dW4gb3ZlciBDT0FQLg0KIFdlIHNob3VsZCBub3QgcmVwZWF0IG1pc3Rha2VzIG9mIHRoZSBwYXN0 LiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+SW4gQUNFIHdlIGhhdmUgRVNULWNvYXBzIHdoaWNoIGlzIGRvbmUuIFdlIHdvcmtl ZCBvbiBpdCBiZWNhdXNlIEVTVCB3YXMgaW4gSUVDIDYyMzUxIGFuZCB3ZSBuZWVkZWQgYSBzb2x1 dGlvbiBmb3Igc29tZSBDT0FQIHVzZWNhc2VzLiBTaW5jZSB0aGVuIEVTVC1jb2FwcyBoYXMgYmVl biBwaWNrZWQgdXAgYnkgRmFpcmhhaXIgYW5kIFRocmVhZC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5UaGUgYXJndW1lbnQg YWJvdXQgTDcgcHJvdGVjdGlvbiBpbiBDTVB2MiBjb3VsZCBhbHNvIGJlIHNhdGlzZmllZCBieSBk cmFmdC1zZWxhbmRlci1hY2UtY29hcC1lc3Qtb3Njb3JlLiBkcmFmdC1zZWxhbmRlci1hY2UtY29h cC1lc3Qtb3Njb3JlIHdhcyB0cnlpbmcgdG8gc2VjdXJlIEVTVCBvdmVyIEw3IGVuY3J5cHRlZCBD T1NFIG1lc3NhZ2VzLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFkZGl0aW9uYWxseSwgSSB3b3VsZCBhcmd1ZSB0aGF0IEw3 IHByb29mLW9mLWlkZW50aXR5IGlzIG5vdCBhIHN0cm9uZyBhZHZhbnRhZ2UgaW4gYW4gKEwpUkEg dHJ1c3QgbW9kZWwgZm9yIGJvdGggRVNULWNvYXBzIGFuZCBDTVB2Mi1jb2Fwcy4gV2hhdCBpcyBt b3JlLCBoYXZpbmcgdGhlIENBIHRydXN0IGFsbCBwb3RlbnRpYWwgbWFudWZhY3R1cmVyDQogcm9v dHMgaW4gb3JkZXIgdG8gZG8gTDcgcHJvb2Ygb2YgaWRlbnRpdHkgd2lsbCBub3QgYmUgdHJpdmlh bCB1bmxlc3MgdGhlIENBIGlzIGEgcHJpdmF0ZSBvbmUuIEFuZCBpbiBhIHByaXZhdGUgQ0EgYW5k IChMKVJBIHNjZW5hcmlvIEkgZG9u4oCZdCBrbm93IHRoYXQgZW5kLXRvLWVuZCBwcm9vZiBvciBp ZGVudGl0eSBpcyB0aGF0IGltcG9ydGFudC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JIG9wcG9zZSBhZG9wdGlvbiB1bmxl c3MgdGhlcmUgaXMgYSBjb21wZWxsaW5nIHJlYXNvbiB3aHkuIEFsc28gSSBhbSBub3Qgc3VyZSB3 aGVyZSB0aGlzIGRyYWZ0IHdvdWxkIGJlIGltcGxlbWVudGVkIGFuZCB1c2VkLiBJZiB0aGlzIGlz IGp1c3QgZm9yIG9uZSBvciB0d28gdmVuZG9ycyBJIGRvbuKAmXQgdGhpbmsgQUNFIG5lZWRzIHRv IHNwZW5kDQogdGhlIGN5Y2xlcy4gPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPlBhbm9zPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVO LVVTIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBBY2UgJmx0OzxhIGhyZWY9 Im1haWx0bzphY2UtYm91bmNlc0BpZXRmLm9yZyI+YWNlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0 Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5Nb2hpdCBTYWhuaTxicj4NCjxiPlNlbnQ6PC9iPiBNb25k YXksIE9jdG9iZXIgMDUsIDIwMjAgMzoyMSBBTTxicj4NCjxiPlRvOjwvYj4gQWNlIFdnICZsdDs8 YSBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxi PkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOnN0cmlwYXRoaUBwYWxvYWx0b25ldHdvcmtzLmNvbSI+ c3RyaXBhdGhpQHBhbG9hbHRvbmV0d29ya3MuY29tPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpzYXVy YWJoLnRyaXBhdGhpQGdtYWlsLmNvbSI+c2F1cmFiaC50cmlwYXRoaUBnbWFpbC5jb208L2E+OyBN b2hpdCBTYWhuaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1zYWhuaUBwYWxvYWx0b25ldHdvcmtzLmNv bSI+bXNhaG5pQHBhbG9hbHRvbmV0d29ya3MuY29tPC9hPiZndDs7IEJyb2NraGF1cywgSGVuZHJp ayAmbHQ7PGEgaHJlZj0ibWFpbHRvOmhlbmRyaWsuYnJvY2toYXVzQHNpZW1lbnMuY29tIj5oZW5k cmlrLmJyb2NraGF1c0BzaWVtZW5zLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFtB Y2VdIENhbGwgZm9yIGFkb3B0aW9uIGRyYWZ0LW1zYWhuaS1hY2UtY21wdjItY29hcC10cmFuc3Bv cnQtMDE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkhlbGxvIEFjZSBXRyw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiPkkgYW0gcHJlc2VudGluZyB0aGUmbmJzcDtkcmFmdC1tc2FobmktYWNlLWNtcHYy LWNvYXAtdHJhbnNwb3J0LTAxJm5ic3A7dG8gYmUgYWRvcHRlZCBieSBBQ0UgV0cuIFRoaXMgZG9j dW1lbnQgc3VwcGxlbWVudHMmbmJzcDt0aGUgJnF1b3Q7PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJs YWNrIj5MaWdodHdlaWdodCBDTVAgUHJvZmlsZSZxdW90OyBkcmFmdCAoPC9zcGFuPjwvYj48YSBo cmVmPSJodHRwczovL2V1cjAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9 aHR0cHMlM0ElMkYlMkZ0b29scy5pZXRmLm9yZyUyRmh0bWwlMkZkcmFmdC1icm9ja2hhdXMtbGFt cHMtbGlnaHR3ZWlnaHQtY21wLXByb2ZpbGUtMDMmYW1wO2RhdGE9MDIlN0MwMSU3Q2hlbmRyaWsu YnJvY2toYXVzJTQwc2llbWVucy5jb20lN0M1NjlhYTEwMjhkZGE0MDM0NTJiOTA4ZDg2OTQ1Yjdk MyU3QzM4YWUzYmNkOTU3OTRmZDRhZGRhYjQyZTE0OTVkNTVhJTdDMSU3QzElN0M2MzczNzUwOTU0 NDM2NTA0MzQmYW1wO3NkYXRhPSUyRnV6TVltMlVJaGJyU2FycnVnWDR3NTB3OCUyQjBBclBmU1Al MkJadlk4VWNUVDQlM0QmYW1wO3Jlc2VydmVkPTAiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1icm9ja2hhdXMtbGFtcHMtbGlnaHR3ZWlnaHQtY21wLXByb2ZpbGUtMDM8L2E+PGI+ PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4pJm5ic3A7PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPndoaWNoDQogc3BlY2lmeSB0aGUgbW9kaWZpY2F0aW9ucyB0byB0aGUgQ01Q djIgcHJvdG9jb2wgZm9yIGl0IHRvIGJlIHVzZWQgZWZmaWNpZW50bHkgYnkgdGhlIGNvbnN0cmFp bmVkIGRldmljZXMgZm9yIFBLSSBvcGVyYXRpb25zLiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjpibGFjayI+ SSBkaXNjdXNzZWQgdGhpcyBkcmFmdCBpbiBJRVRGLTEwOCBBQ0Ugc2Vzc2lvbiBhbmQgdGhlIG5l ZWQgZm9yIHRoZSByZWNoYXJ0ZXImbmJzcDtvZiBBQ0UgV0cgaW4gb3JkZXImbmJzcDt0byBhZG9w dCB0aGlzIGRyYWZ0LCZuYnNwO3RvIHdoaWNoIHdlIGhhZCBhIGNvbnNlbnN1cy4mbmJzcDs8L3Nw YW4+PHNwYW4gbGFuZz0iRU4tVVMiPlBsZWFzZSBzdGF0ZSB5b3VyIG9waW5pb24mbmJzcDtvbg0K IHdoZXRoZXIgdGhpcyBkcmFmdCBzaG91bGQgYmUgYWRvcHRlZCBieSBBQ0UgV0cuJm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5MaW5rIHRvIHRo ZSBkcmFmdCZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZXVyMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0cmFja2VyLmlldGYub3JnJTJGZG9j JTJGZHJhZnQtbXNhaG5pLWFjZS1jbXB2Mi1jb2FwLXRyYW5zcG9ydCUyRiZhbXA7ZGF0YT0wMiU3 QzAxJTdDaGVuZHJpay5icm9ja2hhdXMlNDBzaWVtZW5zLmNvbSU3QzU2OWFhMTAyOGRkYTQwMzQ1 MmI5MDhkODY5NDViN2QzJTdDMzhhZTNiY2Q5NTc5NGZkNGFkZGFiNDJlMTQ5NWQ1NWElN0MxJTdD MSU3QzYzNzM3NTA5NTQ0MzY2MDM4OSZhbXA7c2RhdGE9VHBkcWR5S0hOeGl1MWZMQWRKeFhlb3Ql MkJqQTlqTlYwSlZNR0o4NzBIOEFjJTNEJmFtcDtyZXNlcnZlZD0wIj5odHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1tc2FobmktYWNlLWNtcHYyLWNvYXAtdHJhbnNwb3J0Lzwv YT4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi PlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPk1vaGl0IFNhaG5pPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_AM0PR10MB24183F163B988B1BE3B4B976FE0B0AM0PR10MB2418EURP_-- From nobody Thu Oct 8 10:42:46 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 000E23A0B76 for ; Thu, 8 Oct 2020 10:42:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5KR3fcjNJq-3 for ; Thu, 8 Oct 2020 10:42:43 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECA523A0B75 for ; Thu, 8 Oct 2020 10:42:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 9EA67389B7; Thu, 8 Oct 2020 13:48:08 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id jBcb-cbgv4aY; Thu, 8 Oct 2020 13:48:07 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 97CA1389B5; Thu, 8 Oct 2020 13:48:07 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 3395318B; Thu, 8 Oct 2020 13:42:40 -0400 (EDT) From: Michael Richardson To: Ace Wg CC: Kent Watsen In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2020 17:42:45 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, I've read draft-msahni-ace-cmpv2-coap-transport-01. I think that the major reason to use CMP instead of EST is avoid the need f= or DTLS on the constrained client. As such, use of coaps seems far less interesting. In particular, I think that section 4.2, on CoAPs to HTTPS proxy is just wrong. I don't see why we need any kind of end to end trust assertions given that it is CMP. MITM trust for anchors seems a rather unwanted thing. Why can't the EE just be configured to speak to a CoAPS enabled RA (using it's name), and then transported to the CA via HTTPS. It is not like having the TLS MITM proxy is reducing crypto effort for any entity. I have no fundamental objection to this work, and I think that it should be adopted. But, I think that it is worth doing more than just s/http/coap/. I think that end points should be specified, as well as resource discovery. I was writing some text (not yet pushed) for BRSKI-ASYNC-ENROLL about how to do CMP for the "Delay Tolerant Networks" that AE envisions. On constrained networks, there are some significant tussles between allowing certificate renewal to be driven by a state machine on the client device vs by the network itself. Client devices know when they are awake and can receive renewals, but they don't know if the network has capacity at that time. On the other hand, the network knows when it has bandwidth, and it can mana= ge things. My approach to CMP would be define a set of resources and then use CORECONF to access/update them. I think that: https://www.ietf.org/id/draft-ietf-netconf-trust-anchors-13.html https://www.ietf.org/id/draft-ietf-netconf-keystore-20.html The later offers a CSR leaf that a RA could *retrieve*, and then when a certificate is available, could push into the keystore. This also deals with what the trust anchors are. It could be that some additional leafs are needed to implement some of the additional CMP specific functionality. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl9/T48ACgkQgItw+93Q 3WV6tAf/eXaFrcljqeRgIp/rfJ8VKhiMziGo+ZMeFICX3kbt52y8p9uwS1KrlBmH SkVS5K3siqAFkx7M/L3PjC9dD7U4XcDGYKxvWTaOtI4sCYlI8jlqdFUv3tNNqmU+ FDIjivsMQ7lABciV7XT1TIUJGUoS9g2ImYdEB1j9qIvUYGoUAQbDsjbPaBZ9SIw0 /yTnV8mz4qrcfAlgupm2qbNAUuD3we6NB7fZzB12zChD284lurR+3bcsKxc8ERCq MXos4yb/d1ENUBCwyC+bzXt/Jc05bFs5UsMtcFAI+jMcx7qzgC872/girA/d4L50 Ek1JcZO+0bTgAX27m0szVhdJVxrSlw== =f7ae -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Oct 9 08:45:05 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96F5F3A09E1; Fri, 9 Oct 2020 08:45:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sHuaJWL1kVFG; Fri, 9 Oct 2020 08:45:00 -0700 (PDT) Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6BA43A08C5; Fri, 9 Oct 2020 08:44:58 -0700 (PDT) Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id B36B140039; Fri, 9 Oct 2020 17:44:56 +0200 (CEST) Received: from poseidon-mailbox.amsuess.com (poseidon-mailbox.amsuess.com [IPv6:2a02:b18:c13b:8010:a800:ff:fede:b1bf]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id 75F5E74; Fri, 9 Oct 2020 17:44:55 +0200 (CEST) Received: from hephaistos.amsuess.com (unknown [IPv6:2a02:b18:c13b:8010:10a3:89db:f76:e611]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id AF27064; Fri, 9 Oct 2020 17:44:54 +0200 (CEST) Received: (nullmailer pid 1057477 invoked by uid 1000); Fri, 09 Oct 2020 15:44:54 -0000 Date: Fri, 9 Oct 2020 17:44:54 +0200 From: Christian =?iso-8859-1?Q?Ams=FCss?= To: Francesca Palombini Cc: Ace Wg , "draft-ietf-ace-oscore-profile@ietf.org" Message-ID: <20201009154454.GA1050533@hephaistos.amsuess.com> References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="d6Gm4EdcadzBjdND" Content-Disposition: inline In-Reply-To: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 15:45:03 -0000 --d6Gm4EdcadzBjdND Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello Francesca, hello ACE group, On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini wrote: > - clarified that Appendix B.2 of OSCORE can be used with this profile, > and what implementers need to think about if they do. I understand B.2 to be something that the involved parties need to agree on beforehand; after all, the ID context may be something the server relies on (at least for the initial attempt) to find the right key, especially when multiple AS are involved. (For example, the RS could have an agreement that the AS may issue any KID as long as they use a particular ID context). If the server expects B.2 to happen (which, as it is put now, it can as long as it supports it in general), it needs to shard its KID space for the ASs it uses. (Generally, B.2 is mutually exclusive with ID contexts's use of namespacing KIDs). Is the expectation that clients that do not anticipate B.2 by the time they are configured with their AS just don't offer B.2 to their peers? Given B.2 is in its current form client-initiated only (AFAIR we had versions where ID1 could be empty in draft versions, but currently it reads as client-initialized), does B.2 have any benefits for ACE-OSCORE clients? After all, they could just as well post the token with a new nonce1 to the same effect. Kind Regards Christian --=20 To use raw power is to make yourself infinitely vulnerable to greater power= s. -- Bene Gesserit axiom --d6Gm4EdcadzBjdND Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEECM1tElX6OodcH7CWOY0REtOkveEFAl+AhXIACgkQOY0REtOk veEAzQ/6AsIUe1YjXsZd0Rh+hX1phqbfIifUPymGlCeqehE8GAejDFKgrctSNZKB HL1iqEl+O5Jrfov2SdSXA4+fumBehI3dRmFAcWNehzKuUKhG2clOMNnQ1u5Lr1Qk xwmGd8pHN5dLv619nFPf39XQZCAQmiglpZ7Q2sw+1Gdht1aTKNFtNpgb89i+X4Pw yv9ge76rPLFd3ivrrDCl9MVuPI7P1MhFy6hZHS96JIHQ65bF3DQIw80EsvUoIw8u jItQ10fv2a8bk1myfCkV8thsX298bTPY8C1OUV3fSTDq6WnefOugSUM8Z/B+XUgM 5TSPdPunSan5Swiga50YqR9Nt5ymtfTBJc2gG4VVOLznlsve2TGdxc5O8rtiJByv lGF41x+Ulzn8oBzfdDx07v6Y31rZTWFKtX9o6ap1Od7yRzlLDKcxr1OOlgVJUnKW TWSDAtzjASTM3lnMzPfFVKvMVWaDd0vIePk8PzNRbQU2RveE6jB/aZhHzDUjb+NQ 028c9tM93rUnwUV7Sum9QseH7e4Gc2lR3mdqSb134CgBI+bjEfUnwYc3SOMjOxcy 9ArzzQPBzM68LnJ4e848tx1A1ZPOn143T3xVn1AI2u15vKV3ViGuixJwviwBGzCJ Mj7mZTjGT5hSeQgecqJFlIFz5MhrmeJ9QujcYIyligCjo3iE/9E= =Jdtq -----END PGP SIGNATURE----- --d6Gm4EdcadzBjdND-- From nobody Tue Oct 13 06:10:57 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFBFD3A0FBD; Tue, 13 Oct 2020 06:10:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cePj5RdUX_VT; Tue, 13 Oct 2020 06:10:53 -0700 (PDT) Received: from mail-ua1-x92f.google.com (mail-ua1-x92f.google.com [IPv6:2607:f8b0:4864:20::92f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DE213A0FA6; Tue, 13 Oct 2020 06:10:53 -0700 (PDT) Received: by mail-ua1-x92f.google.com with SMTP id x26so6442938uan.11; Tue, 13 Oct 2020 06:10:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cEHX+fBdlPpg3iVhJulD3uk8brvHID6oHbcWqAN3HCg=; b=l0C3Lb0v6iW3Va+gY7kb/NfnQQh1W0j7n7VXoh7CvLd6mQD5UHsSbFCI4KNerZtsqu ObbH84KTOOkqoS3gPEoMC4gWZK/zm6hUpCv5Uc/1mmvg7qEhIVBd6ezQay5+rxb/Q7XU B0zoOdaz/wFMGpu7AI9Bc6UfDfq0eOudKAOsSCxIOCtjzxpRAirpXkPTgctvmoH/vSFh iWuLYAl/JxeR/mB/33YeUvGbY1C5YFbISjvusFIN1t+PTQa5++84Y+ycjJ0AFJILkqDp EitQfa+352ab0CEeCeQPw+IrRb9Vpm+eGJMdziZm8nxeSFSVNrKGnQNT0yAI2PPxjacx B/DQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cEHX+fBdlPpg3iVhJulD3uk8brvHID6oHbcWqAN3HCg=; b=JKHTmhbdbSzLSkNXzHqNWVOSTFpdGv1crxJF21TOwZ9sZk3NmSr4VBneop3V46Z8Ja /iwA0D5Fyknx1mU7OASbGN5gqWH+f1lApxMAAY04FG/Jz3cKXRt0fIqk5bU2p2H7vMHH XHJZqkDYKJuERp3dU6ET+hBaLMOACJAsS0206DI00obp8g7+p3hAEQWBFB2MM3rpKyaP s33fA++MbG99UMlkTfJttAkacTFV4EUofD9fRhjbvnF6hzEmHFCVbPdZ9CC0nO9xYU4t XI5fsGnaU7viTfd71zJ8WX0EkglYg+3McWxydHwqftlwp54ne1aPQ3Yo205TRmhXjP04 WAOg== X-Gm-Message-State: AOAM532th4yIPygo7lG7i+oA3SctaOP2NmUQNrq7gItxUM+MbuRC8LqF mTLbLLO4es5cGhqBd9++T7K9pqM2RrUVqGQvpDF9w+xgCjE= X-Google-Smtp-Source: ABdhPJxNJSi8ELARmn+u0N93g58qyvEzXw7oGFyp2Ijb0p6uF1PFJ7/sSszYmGpZ7Au8tk0RwzQKPVVN9hjqwmtk4Wk= X-Received: by 2002:a9f:3f4f:: with SMTP id i15mr2077131uaj.7.1602594651900; Tue, 13 Oct 2020 06:10:51 -0700 (PDT) MIME-Version: 1.0 References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> <20201009154454.GA1050533@hephaistos.amsuess.com> In-Reply-To: <20201009154454.GA1050533@hephaistos.amsuess.com> From: Daniel Migault Date: Tue, 13 Oct 2020 09:10:41 -0400 Message-ID: To: =?UTF-8?Q?Christian_Ams=C3=BCss?= Cc: Francesca Palombini , "draft-ietf-ace-oscore-profile@ietf.org" , Ace Wg Content-Type: multipart/alternative; boundary="000000000000f20f1305b18d24cb" Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2020 13:10:56 -0000 --000000000000f20f1305b18d24cb Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Dear WG, If I attempt to balance the different 3 proposals, my perception is we may address a specific scenario into the core profile with no additional complexity versus via extensions. This leaves working on a profile v2 (option 2) or updating the to-become soon profile v1 (option 3). I prefer to avoid specifications being deprecated before they are even published and would prefer to consider updating the current version. I suspect that multiple versions of a profile can co-exist and that the problem of having a profile v2 that interoperate with a profile v1 - which does not seem mandatory. In order to move forward, I propose that by October 20: * A) WG member state their opinion regarding that we revise the oscore profile document * B) Francesca refines the proposed changes, so the document is ready for review * C) WG member state whether they volunteer to review the updated document. I would like to avoid the document re-opened once considered updated. With A, B and C I will be able to discuss with Ben how to move forward the document. I am happy to get your feed backs or suggestions. Yours, Daniel On Fri, Oct 9, 2020 at 11:45 AM Christian Ams=C3=BCss wrote: > Hello Francesca, hello ACE group, > > On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini wrote: > > - clarified that Appendix B.2 of OSCORE can be used with this profile, > > and what implementers need to think about if they do. > > I understand B.2 to be something that the involved parties need to agree > on beforehand; after all, the ID context may be something the server > relies on (at least for the initial attempt) to find the right key, > especially when multiple AS are involved. (For example, the RS could > have an agreement that the AS may issue any KID as long as they use a > particular ID context). If the server expects B.2 to happen (which, as > it is put now, it can as long as it supports it in general), it needs to > shard its KID space for the ASs it uses. (Generally, B.2 is mutually > exclusive with ID contexts's use of namespacing KIDs). > > Is the expectation that clients that do not anticipate B.2 by the time > they are configured with their AS just don't offer B.2 to their peers? > > Given B.2 is in its current form client-initiated only (AFAIR we had > versions where ID1 could be empty in draft versions, but currently it > reads as client-initialized), does B.2 have any benefits for ACE-OSCORE > clients? After all, they could just as well post the token with a new > nonce1 to the same effect. > > Kind Regards > Christian > > -- > To use raw power is to make yourself infinitely vulnerable to greater > powers. > -- Bene Gesserit axiom > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --=20 Daniel Migault Ericsson --000000000000f20f1305b18d24cb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear WG,=C2=A0

If I attempt to balance = the different 3 proposals, my perception is we may address a specific scena= rio into the core profile with no additional complexity versus via extensio= ns. This leaves=C2=A0working on a profile v2 (option 2) or updating the to-= become soon profile v1 (option 3). I prefer to avoid specifications being d= eprecated before they are even published and would prefer to consider updat= ing the current version.=C2=A0=C2=A0

I suspect tha= t multiple versions of a profile can co-exist and that the problem of havin= g a profile v2 that interoperate with a profile v1 - which does not seem ma= ndatory.=C2=A0=C2=A0

In order to move forward, I p= ropose that by October 20:
* A)=C2=A0 WG member state their opini= on regarding that we revise the oscore profile document=C2=A0
* B= ) Francesca refines the proposed changes, so the document is ready for revi= ew=C2=A0 =C2=A0 =C2=A0
* C) WG member state whether they voluntee= r=C2=A0to review the updated document. I would=C2=A0like to avoid the docum= ent re-opened once considered updated.=C2=A0

With = A, B and C I will be able to discuss with Ben how to move forward the docum= ent. I am happy to get your feed backs=C2=A0or suggestions.

<= /div>
Yours,=C2=A0
Daniel
=C2=A0




On Fri, Oct 9, 2020 at 11:45 AM Christian A= ms=C3=BCss <c= hristian@amsuess.com> wrote:
Hello Francesca, hello ACE group,

On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini wrote:
> - clarified that Appendix B.2 of OSCORE can be used with this profile,=
> and what implementers need to think about if they do.

I understand B.2 to be something that the involved parties need to agree on beforehand; after all, the ID context may be something the server
relies on (at least for the initial attempt) to find the right key,
especially when multiple AS are involved. (For example, the RS could
have an agreement that the AS may issue any KID as long as they use a
particular ID context). If the server expects B.2 to happen (which, as
it is put now, it can as long as it supports it in general), it needs to shard its KID space for the ASs it uses. (Generally, B.2 is mutually
exclusive with ID contexts's use of namespacing KIDs).

Is the expectation that clients that do not anticipate B.2 by the time
they are configured with their AS just don't offer B.2 to their peers?<= br>
Given B.2 is in its current form client-initiated only (AFAIR we had
versions where ID1 could be empty in draft versions, but currently it
reads as client-initialized), does B.2 have any benefits for ACE-OSCORE
clients? After all, they could just as well post the token with a new
nonce1 to the same effect.

Kind Regards
Christian

--
To use raw power is to make yourself infinitely vulnerable to greater power= s.
=C2=A0 -- Bene Gesserit axiom
_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--
Daniel Migault
Ericsson
--000000000000f20f1305b18d24cb-- From nobody Tue Oct 13 09:33:30 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAEC43A09A3 for ; Tue, 13 Oct 2020 09:33:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zCq1VCzPhkSs for ; Tue, 13 Oct 2020 09:33:27 -0700 (PDT) Received: from mail-vk1-xa2a.google.com (mail-vk1-xa2a.google.com [IPv6:2607:f8b0:4864:20::a2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F0E53A0994 for ; Tue, 13 Oct 2020 09:33:27 -0700 (PDT) Received: by mail-vk1-xa2a.google.com with SMTP id d125so55931vkh.10 for ; Tue, 13 Oct 2020 09:33:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=D/YwgRL8TcA2on0XFiuw3guhzLk6pYB9uEBJLkIXl7g=; b=ajue9C6mKUYLICUI6JgtFztFoB3PxhdMe2XBoaW9UtTHWr6SBOPYCQ/iqN66XkFolk khn6OzLE51KJHheAXXAHyD0b7UWPqUiGH0Q1ps1UGIyNcNhQIhBU4fUfQbfJnQ+oTDmB ce7dQMuUjf0Lx1ruJMyBBqL8g/onG7rxX2GFj9YUP/pQrTFfsXhJ+NCRooIluCcThkf8 8VXuButsRvAndzQMeG0JyqnQVjH4Pw4/6o1p9CN93xbrpw99+AHPmaqAV8GYrkf4mfCR vHhPzRGvXvQHaePHZaTEKiWxhTTEE/IssEI9CdE8jB31lhgcbK0QearN7JINA5Z9PqcH HHrA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=D/YwgRL8TcA2on0XFiuw3guhzLk6pYB9uEBJLkIXl7g=; b=MqWmI6DJq8ZE9n6JvHYlOOlniQ+djr50yze1smn33Dn9o7qtdzEItxmxFF74Tg26kb DqS1HG1DEte5P2apz8rEbXMoR46BjQnDbVaSCkgDmVgpmFITosvBjpZoPj/ps9XTaIEK /UUTm2et4It+sIal3hHScQLqjS/Ff165O4NsPuLqCWlvN98BsJ/AZoZPWUlhgLgKwzoG XEIH4pTESyFZCpzFv2NOjjCJoBGfUHWr0/4VZpO460N7fHHI1msQJZvUM/upEP/VcJU5 a6PMlpCfRKr7Wd+LhnfaqUpsjFhARMVjU2Al/SkjgGeZmDfwbxCW8L6sY3KTeRs9rpjH YP7w== X-Gm-Message-State: AOAM531vNYDpVgwHjUFRxU3oikQtksQH4ZgYT6wixK0uoBTaDN0S0tBD KVBViPWUMdCivOBuf8bGFWp+jBbw+LEyCnLVzz9qvmXgohw= X-Google-Smtp-Source: ABdhPJyG4K867YAbq8nSlmScF2Dd6yw+gDTnwEG8SG9QDevhAB3wcPT+wTOdfahsJo6X8zCCmLNHpqfgLxRk9HeZlDQ= X-Received: by 2002:a1f:3a09:: with SMTP id h9mr488374vka.6.1602606806204; Tue, 13 Oct 2020 09:33:26 -0700 (PDT) MIME-Version: 1.0 From: Daniel Migault Date: Tue, 13 Oct 2020 12:33:14 -0400 Message-ID: To: Ace Wg Content-Type: multipart/alternative; boundary="0000000000006603f205b18ff965" Archived-At: Subject: [Ace] Call for agenda item for IETF 109 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2020 16:33:29 -0000 --0000000000006603f205b18ff965 Content-Type: text/plain; charset="UTF-8" Hi, The Ace WG will meet during IETF 109. If you are willing to present, please let me know by the end of the month what you are willing to present and the necessary time you need. Yours, Daniel -- Daniel Migault Ericsson --0000000000006603f205b18ff965 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,=C2=A0

The Ace WG will meet during I= ETF 109. If you are willing to present, please let me know by the end of th= e month what you are willing to present and the necessary time you need.=C2= =A0=C2=A0

Yours,=C2=A0
Daniel
=

--
Daniel Migault
Ericsson
--0000000000006603f205b18ff965-- From nobody Wed Oct 14 16:19:32 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E2EB3A112E for ; Wed, 14 Oct 2020 16:19:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Kux5GSxsU_B for ; Wed, 14 Oct 2020 16:19:29 -0700 (PDT) Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AB5D3A112D for ; Wed, 14 Oct 2020 16:19:29 -0700 (PDT) Received: by mail-io1-xd36.google.com with SMTP id u19so1834237ion.3 for ; Wed, 14 Oct 2020 16:19:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=1T3k2x2nP2tBh2Ekf4IMymseg5Xy+O12O2LhnIYLRcM=; b=kUYjf7JyrOqGNQR+QlqRivo3BnzeoDELprY+yQW/Bl1vDJHUPD9ZWovcEdQMFNsW+S AHodfxO3DLpYH5iLEKIJGsM8in6YJ0okmq+5Iyr1IooUibtBe69s58/pJIkS1jjz2tZH 5y8gAKWm6o2mJZNkd9GbKQ3aWefYH6QdROAuoUSUsKCkz9nqYvakLXy9gf3UKy2tNnJW tNM8ZlhD5l3fsFP9AB6T3S0ZCxDrVpLh5FjRYjULR12lcLn9jvcjZuKSwC7xovMr5y7t 4xkwrFJkjsYA8yHq++09tuPbhyqpxHQRHXwC3Rxt3RELY1sWuB50iXKWf5XNot4ySKW2 2w1Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=1T3k2x2nP2tBh2Ekf4IMymseg5Xy+O12O2LhnIYLRcM=; b=s7Z2xT0WVE7srrbN5RoSoD2EEfYSPt5+Ogja0wc83DfPz1q8r41LOfhJXR0Ff86KRP MzEP/GC4CnwQLiBrO5L7aD7u4zZXfis5/T16ccsTXUxKcNfrWuWh6rChC18kpbwFcEuL DUjv3AHDuLlZtPBbhvuw4TBkZo8j2CYTXs31d9uXwRLFGA79bV2dxZJXOeKCQvx/H6P+ Y6xNI3dFyqbxo9U/iQbVtYXNhMfqtCq/p7/1OKFh2vOgOzhginnAC7s8+kYBSRdr/KQz X6Y8qyQ/FdehOqMEsOyuOZn79Y+PSQQLlXHJSFB1IC7OrN9XP6O7oEM5X4sOKIyAVXW7 y5YA== X-Gm-Message-State: AOAM531a0FDOq78dk85wtu0DmQ0og6HBw2ZgVAKBw7TAhXxetTdw8y0E x5QpmKUhS2sXR/toKJLMT76zcJ3djisLYJHl+Apw7KREggo= X-Google-Smtp-Source: ABdhPJyF78Jcoj7soe4WV3EzryD/tmywXbb60GvKwxNcouJOIajIe15ePSuKRHepw6N6lyGJsHMVWT4jW6YUgd8ADw4= X-Received: by 2002:a02:a384:: with SMTP id y4mr1437433jak.63.1602717567237; Wed, 14 Oct 2020 16:19:27 -0700 (PDT) MIME-Version: 1.0 From: Mohit Sahni Date: Wed, 14 Oct 2020 16:19:16 -0700 Message-ID: To: Ace Wg Content-Type: multipart/alternative; boundary="0000000000004546a905b1a9c300" Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Oct 2020 23:19:31 -0000 --0000000000004546a905b1a9c300 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Michael, Thanks for going through the draft. Your feedback is very helpful. I just want to reiterate that the scope of this draft is only how to use CoAP as a transport protocol for CMP. The work on defining how CMP protocol itself should work on constrained devices is being done in the "Light Weight CMP Profile" https://datatracker.ietf.org/doc/draft-ietf-lamps-lightweight-cmp-profile/. Some of your suggestions should be discussed in the context of the LightWeight CMP profile draft. Please see my comments inline: > > ---------- Forwarded message ---------- > From: Michael Richardson > To: Ace Wg > Cc: Kent Watsen > Bcc: > Date: Thu, 08 Oct 2020 13:42:40 -0400 > Subject: Re: [Ace] Call for adoption > draft-msahni-ace-cmpv2-coap-transport-01 > > Hi, I've read draft-msahni-ace-cmpv2-coap-transport-01. > > I think that the major reason to use CMP instead of EST is avoid the need > for > DTLS on the constrained client. As such, use of coaps seems far less > interesting. > > In particular, I think that section 4.2, on CoAPs to HTTPS proxy > is just wrong. I don't see why we need any kind of end to end trust > assertions given that it is CMP. MITM trust for anchors seems a rather > unwanted thing. Why can't the EE just be configured to speak to a CoAPS enabled RA (using > it's name), and then transported to the CA via HTTPS. It is not like > having the TLS MITM proxy is reducing crypto effort for any entity. > > Section 3 covers the case where EE can talk to RA directly over CoAPs, the CoAPs to HTTPs proxy in section 4.2 is for the use case where changes to the existing RA deployment are not desired due to operational overheads of upgrading the RA to something that supports CoAP/CoAPs. CoAPs to HTTPs proxy is not something that is required for the functionality but rather an option to help with easy adoption of the "Lightweight CMP profile" and CMPv2 protocol for constrained devices. I will work on making it more clear what are the pros and cons of using a proxy vs direct communication. > I have no fundamental objection to this work, and I think that it should = be > adopted. > > But, I think that it is worth doing more than just s/http/coap/. > I agree with that. I think that end points should be specified, as well as resource discovery. > I was writing some text (not yet pushed) for BRSKI-ASYNC-ENROLL > about how to do CMP for the "Delay Tolerant Networks" that AE envisions I will add the endpoint definitions and make resource discovery more clear in the draft. > > On constrained networks, there are some significant tussles between allowin= g > certificate renewal to be driven by a state machine on the client device = vs > by the network itself. > > Client devices know when they are awake and can receive renewals, but the= y > don't know if the network has capacity at that time. > > On the other hand, the network knows when it has bandwidth, and it can > manage > things. > > My approach to CMP would be define a set of resources and then use CORECO= NF > to access/update them. I think that: > > https://www.ietf.org/id/draft-ietf-netconf-trust-anchors-13.html > https://www.ietf.org/id/draft-ietf-netconf-keystore-20.html > > The later offers a CSR leaf that a RA could *retrieve*, and then when a > certificate is available, could push into the keystore. > This also deals with what the trust anchors are. > > It could be that some additional leafs are needed to implement some of th= e > additional CMP specific functionality. > This is something that I believe is not in the scope of this draft, This draft only defines how to use the CoAP transport for carrying the CMP messages. When and what CMP messages are sent should come under the CMP protocol implementation itself. > -- > Michael Richardson . o O ( IPv6 I=C3=B8T consul= ting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --0000000000004546a905b1a9c300 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Michael,
Thanks for going through the dr= aft. Your feedback is very helpful. I just want to reiterate that the scope= of this draft is only how to use CoAP as a transport protocol for CMP. The= work on defining how CMP protocol itself should work on constrained device= s is being done in the "Light Weight CMP Profile"=C2=A0https://datatracker.ietf.org/doc/draft-ietf-lamps-light= weight-cmp-profile/. Some of your suggestions should be discussed in th= e context of the LightWeight CMP profile draft.

Pl= ease see my comments inline:=C2=A0



----------= Forwarded message ----------
From:=C2=A0Michael Richardson <mcr+ietf@sandelman.ca= >
To:=C2=A0Ace Wg <ace@ietf.org>
Cc:=C2=A0Kent Watsen <kent+ietf@watsen.net>
Bc= c:=C2=A0
Date:=C2=A0Thu, 08 Oct 2020 13:42:40 -0400
Subject:=C2=A0Re:= [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01

Hi, I've read draft-msahni-ace-cmpv2-coap-transport-01.

I think that the major reason to use CMP instead of EST is avoid the need f= or
DTLS on the constrained client.=C2=A0 As such, use of coaps seems far less<= br> interesting.

In particular, I think that section 4.2, on CoAPs to HTTPS proxy
is just wrong.=C2=A0 =C2=A0I don't see why we need any kind of end to e= nd trust
assertions given that it is CMP.=C2=A0 =C2=A0MITM trust for anchors seems a= rather
unwanted thing.=C2=A0
Why can't the EE just be configured to speak to a CoAPS enabled RA (usi= ng
it's name), and then transported to the CA via HTTPS.=C2=A0 It is not l= ike
having the TLS MITM proxy is reducing crypto effort for any entity.

<MS> Section 3 covers the case where EE can tal= k to RA directly over CoAPs, the CoAPs to HTTPs proxy in section 4.2 is for= the use case where changes to the existing RA deployment are not desired d= ue to operational overheads of upgrading the RA to something that supports = CoAP/CoAPs. CoAPs to HTTPs proxy is not something that is required for the = functionality but rather an option to help with easy adoption of the "= Lightweight CMP profile" and CMPv2 protocol for constrained devices. I= will work on making it more clear what are the pros and cons of using a pr= oxy vs direct communication.=C2=A0
=C2=A0
I have no fundamental objection to this work, and I think that it should be=
adopted.

But, I think that it is worth doing more than just s/http/coap/.
=C2=A0
<MS> I agree with that.=C2=A0=C2=A0
=

I think that end points should be specified, as well as resource discovery.=
I was writing some text (not yet pushed) for BRSKI-ASYNC-ENROLL
about how to do CMP for the "Delay Tolerant Networks" that AE env= isions
=C2=A0
<MS> I will add the endpoint= definitions and make resource discovery more clear in the draft.=C2=A0
=C2=A0
=
On constrained networks, there are some significant tussles between allowin= g
certificate renewal to be driven by a state machine on the client device vs=
by the network itself.

Client devices know when they are awake and can receive renewals, but they<= br> don't know if the network has capacity at that time.

On the other hand, the network knows when it has bandwidth, and it can mana= ge
things.

My approach to CMP would be define a set of resources and then use CORECONF=
to access/update them.=C2=A0 =C2=A0I think that:

https://www.ietf.org/id/draft-ietf-n= etconf-trust-anchors-13.html
https://www.ietf.org/id/draft-ietf-netcon= f-keystore-20.html

The later offers a CSR leaf that a RA could *retrieve*, and then when a
certificate is available, could push into the keystore.
This also deals with what the trust anchors are.

It could be that some additional leafs are needed to implement some of the<= br> additional CMP specific functionality.
<MS> This= is something that I believe is not in the scope of this draft, This draft = only defines how to use the CoAP transport for carrying the CMP messages. W= hen and what CMP messages are sent should come under the CMP protocol imple= mentation itself.=C2=A0
=C2=A0
--
Michael Richardson <mcr+IETF@sandelman.ca>=C2=A0 =C2=A0. o O ( IPv6 I=C3=B8T co= nsulting )
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Sandelman Software Works Inc, Otta= wa and Worldwide




_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
--0000000000004546a905b1a9c300-- From nobody Wed Oct 14 17:56:19 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E9F93A119B for ; Wed, 14 Oct 2020 17:56:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 682RZjruTSLa for ; Wed, 14 Oct 2020 17:56:16 -0700 (PDT) Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A763E3A1120 for ; Wed, 14 Oct 2020 17:56:16 -0700 (PDT) Received: by mail-io1-xd2e.google.com with SMTP id l8so2129790ioh.11 for ; Wed, 14 Oct 2020 17:56:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=I5vG79HqPJ+BfGQiBUfmGPeE/XDC0cipmUhJiNJ2m5I=; b=Q2rMYxdjAJYX2NTyTBZmATI41aHSJ4GObB2VrwyemBlwIv76Z7AM6G1uXeKrIloEJJ Ukxa8XQN0XxK7gvlEj7eYvnQPwwp0rBfhYbvfEPPjIgRbXS238s2HLCFMxBXVx6YEPuf AIIE0RAexlM9RJQmSCZQjYJT/Xg455aHGHTVSXpwpzdXNAvG0co0fEGUaf8QlvxHFz3S ltzeGkZZoXQzMLj+ZL8XTv8i3UzNpC7S17MIIE1n03bV08GtR6MnhsA5MLNyeJ3DfCwO K9UeXoZ/svmdqD6zvdKDltCXKU+CkpUKGchV2h/KE2gwE9xYzcS4pCEbsZd/KvEElAD8 TN1Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=I5vG79HqPJ+BfGQiBUfmGPeE/XDC0cipmUhJiNJ2m5I=; b=MdOywf3c0oU5N/Td2Bsu/AYrtN1cryf4SJxftA/bbvhWK6hBSvIvmZ/kYD+as/k8et rnbaDuYHHFdQZkFEvmXMXh8TNdJqmm45se8QjbMFfE/YosrBBtJK9lP3QnWr0wMCpwuv jJ5WTKawAF7NLdGcGfJOrkrmwb2O0RWvhkPznCHn5hM/3GfqH/WCwfcJiyfQZ2GG+ZHO W6eXMH9I6SzwPv8RT6adQNArM0O+0iLNjZi0D2CE3LqshVZt4lYRSggO5o1CEr+ngXn6 WsfVAlIXL63ZrbP44SY6/JvlEO59U71HfVo7H9ZnssXjEGBDljkzH6Qbqi+oOMiwJY3M mANg== X-Gm-Message-State: AOAM533nrJCmldx77IEwFJJBYkoiPqC4LCbv31ic118qRsTwfuOetmhT 6SXi+lbtw2KMMTde918drL7FmFdiFyt195UjfSA= X-Google-Smtp-Source: ABdhPJzkAIV22nulHw0tpTC3vmwzUjbP1Sdml44xYlEPwHWmLTdpmy/PlzxkUVNoqU+1zRuDlBAf3I4TA83ZycH2vJw= X-Received: by 2002:a05:6638:218b:: with SMTP id s11mr1718299jaj.16.1602723375980; Wed, 14 Oct 2020 17:56:15 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Mohit Sahni Date: Wed, 14 Oct 2020 17:56:05 -0700 Message-ID: To: mcr+ietf@sandelman.ca Cc: Ace Wg , stripathi@paloaltonetworks.com, "Brockhaus, Hendrik" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 00:56:18 -0000 Resending it with correct formatting: =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D Hi Michael, Thanks for going through the draft. Your feedback is very helpful. I just want to reiterate that the scope of this draft is only how to use CoAP as a transport protocol for CMP. The work on defining how CMP protocol itself should work on constrained devices is being done in the "Light Weight CMP Profile" https://datatracker.ietf.org/doc/draft-ietf-lamps-lightweight-cmp-profile/. Some of your suggestions should be discussed in the context of the LightWeight CMP profile draft. Please see my comments inline: > ---------- Forwarded message ---------- > From: Michael Richardson > To: Ace Wg > Cc: Kent Watsen > Bcc: > Date: Thu, 08 Oct 2020 13:42:40 -0400 > Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transpor= t-01 > > Hi, I've read draft-msahni-ace-cmpv2-coap-transport-01. > > I think that the major reason to use CMP instead of EST is avoid the need= for > DTLS on the constrained client. As such, use of coaps seems far less > interesting. > > In particular, I think that section 4.2, on CoAPs to HTTPS proxy > is just wrong. I don't see why we need any kind of end to end trust > assertions given that it is CMP. MITM trust for anchors seems a rather > unwanted thing. > > Why can't the EE just be configured to speak to a CoAPS enabled RA (using > it's name), and then transported to the CA via HTTPS. It is not like > having the TLS MITM proxy is reducing crypto effort for any entity. [M.S.] Section 3 covers the case where EE can talk to RA directly over CoAPs, the CoAPs to HTTPs proxy in section 4.2 is for the use case where changes to the existing RA deployment are not desired due to operational overheads of upgrading the RA to something that supports CoAP/CoAPs. CoAPs to HTTPs proxy is not something that is required for the functionality but rather an option to help with easy adoption of the "Lightweight CMP profile" and CMPv2 protocol for constrained devices. I will work on making it more clear what are the pros and cons of using a proxy vs direct communication. > I have no fundamental objection to this work, and I think that it should = be > adopted. > > But, I think that it is worth doing more than just s/http/coap/. [M.S.] I agree with that. > > I think that end points should be specified, as well as resource discover= y. > I was writing some text (not yet pushed) for BRSKI-ASYNC-ENROLL > about how to do CMP for the "Delay Tolerant Networks" that AE envisions. [M.S.] I will add the endpoint definitions and make resource discovery more clear in the draft. > > On constrained networks, there are some significant tussles between allow= ing > certificate renewal to be driven by a state machine on the client device = vs > by the network itself. > > Client devices know when they are awake and can receive renewals, but the= y > don't know if the network has capacity at that time. > > On the other hand, the network knows when it has bandwidth, and it can ma= nage > things. > > My approach to CMP would be define a set of resources and then use CORECO= NF > to access/update them. I think that: > > https://www.ietf.org/id/draft-ietf-netconf-trust-anchors-13.html > https://www.ietf.org/id/draft-ietf-netconf-keystore-20.html > > The later offers a CSR leaf that a RA could *retrieve*, and then when a > certificate is available, could push into the keystore. > This also deals with what the trust anchors are. > > It could be that some additional leafs are needed to implement some of th= e > additional CMP specific functionality. [M.S.] This is something that I believe is not in the scope of this draft, This draft only defines how to use the CoAP transport for carrying the CMP messages. When and what CMP messages are sent should come under the CMP protocol implementation itself. > > -- > Michael Richardson . o O ( IPv6 I=C3=B8T consul= ting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Thu Oct 15 01:16:10 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 051A43A135B for ; Thu, 15 Oct 2020 01:16:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZHMKOlFn_-WE for ; Thu, 15 Oct 2020 01:16:07 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E11473A135C for ; Thu, 15 Oct 2020 01:16:06 -0700 (PDT) Received: from wangari.tzi.org (p508a4e5d.dip0.t-ipconnect.de [80.138.78.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CBhtr0WjdzyWb; Thu, 15 Oct 2020 10:16:04 +0200 (CEST) From: Olaf Bergmann To: "Brockhaus\, Hendrik" , Mohit Sahni Cc: "Panos Kampanakis \(pkampana\)" , Ace Wg , "stripathi\@paloaltonetworks.com" , "saurabh.tripathi\@gmail.com" , Mohit Sahni References: Date: Thu, 15 Oct 2020 10:16:03 +0200 In-Reply-To: (Hendrik Brockhaus's message of "Thu, 8 Oct 2020 06:07:50 +0000") Message-ID: <87k0vrkipo.fsf@wangari> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 08:16:09 -0000 Hi Hendrik and all, "Brockhaus, Hendrik" writes: > The point here is, does the group support Mohits draft on specify CoAP > transport for CMP. > >=20=20 > > Just to recap the discussion from IETF 108: As draft-ietf-lamps-lightweight-cmp-profile already is something a working group in the IETF has decided to spend cycles on, the question whether or not CMPv2 is something to work on already seems decided. Given that, after a quick look at draft-msahni-ace-cmpv2-coap-transport, I do not see a reason why not to adopt this as well. I was a bit surprised that you have selected the ACE working group for this. One thing that might get in our way when doing this in ACE is the emerging input for draft-ietf-lamps-lightweight-cmp-profile. But otherwise, I do not see a strong reason for not adopting draft-msahni-ace-cmpv2-coap-transport. Gr=C3=BC=C3=9Fe Olaf From nobody Thu Oct 15 10:17:09 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB1FF3A0A68 for ; Thu, 15 Oct 2020 10:17:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6j7Odathkawk for ; Thu, 15 Oct 2020 10:17:04 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80048.outbound.protection.outlook.com [40.107.8.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E2913A0A6A for ; Thu, 15 Oct 2020 10:17:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XbsV8DgqDaqijPD7ZPyvVNUiSctrX1ZoX+uFr4FsRF6szx6N7e+L8r6MKZ1u7fwg3KvCi1LmgCfJ2thQrrxr4N6KNYqifvb/OV0KLuIlqaaZip6pse0na3SeW/04fXvYWRtxHMFEcdf5pNqvbFsordSXGh9unDY93MNEqKQKoqAVlX+AfwffsOHlGfLUe2KANv6Wr6zlZVIk+Re1n6W9lET3WjsIDMHhWIWwAWzoKKBXOkx71DmGU0WgDyvMmOSThKro+XXLl+UtaiPT0YZchn/d23h90I9s56I1gjEBywiv43GNoSpOkMfNAVF0h6BNKe9YQQ1i6NMMqfkgQ0M9PA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=124bJeB5Mlc1iVyRxhXd+T2XlH36nTLe4NSBt5aN/y4=; b=OALAKH7ZcODvJhwPhow0PEFjGyt9Cw9BFOAUQf8dsWd1dHF2AqVVyHeVcUoEeKFzxe6fmQ31Ot6PZMulw76FJIhVImjJL7aVaAlrOZsVEW7vHF8rGLzyT4zJFdpPR0ras4NHfpybv6Mm453QcjusSLOdXraEaoZ8bzBVonRS55fPjqlaT3sTEbp35ubx3z4Ia9wJ8WkZiAUzzmYwsHdf9nHHqJxk0LSNp5dX0/Hb9QH8lLKxpHqP7wZ2j49kTx/okvh2tVVkOxL21vL4im56Ziv8o+MKNbgSFnN4ScynJwvnA338bWp8PR9u4htabN0y2+NXwknorkC6tbBeyHFghw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=124bJeB5Mlc1iVyRxhXd+T2XlH36nTLe4NSBt5aN/y4=; b=OmLvsTjWdICI/uf0yKz8L8NCaPedA14Xamu/A9t6eEoHVMFuCmRICRXwpzYTcbgVfnodg9ZEMoD9Q2VC3CRok9/HuAo3OmxequSViNBP6mOjm0ilZyZWRSXdBoT/+nGwVOD4B3q1ll3N0u2SKvA893UAg4mKLjlf9SwGZEdTb/g= Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:dd::17) by AM8PR10MB4049.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:1ef::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.22; Thu, 15 Oct 2020 17:17:01 +0000 Received: from AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::48d8:f723:944:efe6]) by AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM ([fe80::48d8:f723:944:efe6%6]) with mapi id 15.20.3477.023; Thu, 15 Oct 2020 17:17:01 +0000 From: "Brockhaus, Hendrik" To: Olaf Bergmann , Mohit Sahni CC: "Panos Kampanakis (pkampana)" , Ace Wg , "stripathi@paloaltonetworks.com" , "saurabh.tripathi@gmail.com" , Mohit Sahni Thread-Topic: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 Thread-Index: AQHWmugf2jgqXegeAEWC7bN66U2odKmJJuOAgAQTMrCACyb99YAAlbTw Content-Class: Date: Thu, 15 Oct 2020 17:17:01 +0000 Message-ID: References: <87k0vrkipo.fsf@wangari> In-Reply-To: <87k0vrkipo.fsf@wangari> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Enabled=true; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SetDate=2020-10-15T17:17:00Z; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Method=Standard; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Name=restricted-default; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ActionId=10a27d58-db8a-4597-b94f-cfb7f2281537; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ContentBits=0 document_confidentiality: Restricted authentication-results: tzi.org; dkim=none (message not signed) header.d=none;tzi.org; dmarc=none action=none header.from=siemens.com; x-originating-ip: [165.225.200.150] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 6ea5c21c-dd33-41f8-5e4b-08d8712e219c x-ms-traffictypediagnostic: AM8PR10MB4049: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: buVKrn2yDjZc696JT3cd9QnJMcB+P9pOfeL9M6XAiliQVhOOzeQy5Ximl0u6gTTPzs+vaZLA0uWmMggTwEOq8ACah+7CZ5eZP6v+RZKlrC8tsx1A9IApGO5HxBOR7NGBRW8U1K+/lnit94QwuCLLVrXo7P+4kGGR11ka36FkqiZQU1Xo+Q9Y/Lwb5TqAz7oIxcuKFP4MxzhwJgpN6GNywivrSO0QUjA4eONBOMhfyBeo66z9XBXlmyGMxJmrWa0zO2Oql+UXh4Ws/SkBWjoTWAige28vGsKHe2tNIcz83lQ5nzus5Nrw1Enm3J8+x3aogIZxKPYd0r5LToPNtx9/yw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(396003)(376002)(346002)(366004)(136003)(39860400002)(33656002)(52536014)(76116006)(64756008)(66476007)(66556008)(66946007)(66446008)(7696005)(9686003)(83380400001)(86362001)(55016002)(55236004)(54906003)(6506007)(186003)(478600001)(110136005)(71200400001)(8676002)(2906002)(5660300002)(316002)(4744005)(4326008)(26005)(8936002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM0PR10MB2418.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 6ea5c21c-dd33-41f8-5e4b-08d8712e219c X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2020 17:17:01.8345 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: WeftySMH12r7SJyUNNWZwZ6PbCq97WGL5oh42afapBOkLi0jRIg5aKtEMQug8vLTMPZB6VPuGOaqvRxiKGQEk4F9PfpQOYlXht8efD+Va9g= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM8PR10MB4049 Archived-At: Subject: Re: [Ace] Call for adoption draft-msahni-ace-cmpv2-coap-transport-01 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 17:17:07 -0000 T2xhZg0KDQpUaGFua3MgZm9yIHN1cHBvcnRpbmcgTW9oaXQncyBkcmFmdC4NCg0KPiBWb246IE9s YWYgQmVyZ21hbm4gPGJlcmdtYW5uQHR6aS5vcmc+DQo+IEdlc2VuZGV0OiBEb25uZXJzdGFnLCAx NS4gT2t0b2JlciAyMDIwIDEwOjE2DQo+IA0KPiBIaSBIZW5kcmlrIGFuZCBhbGwsDQo+IA0KPiAN Cj4gSSB3YXMgYSBiaXQgc3VycHJpc2VkIHRoYXQgeW91IGhhdmUgc2VsZWN0ZWQgdGhlIEFDRSB3 b3JraW5nIGdyb3VwIGZvciB0aGlzLiBPbmUNCj4gdGhpbmcgdGhhdCBtaWdodCBnZXQgaW4gb3Vy IHdheSB3aGVuIGRvaW5nIHRoaXMgaW4gQUNFIGlzIHRoZSBlbWVyZ2luZyBpbnB1dA0KPiBmb3Ig ZHJhZnQtaWV0Zi1sYW1wcy1saWdodHdlaWdodC1jbXAtcHJvZmlsZS4gQnV0IG90aGVyd2lzZSwg SSBkbyBub3Qgc2VlIGENCj4gc3Ryb25nIHJlYXNvbiBmb3Igbm90IGFkb3B0aW5nIGRyYWZ0LW1z YWhuaS1hY2UtY21wdjItY29hcC10cmFuc3BvcnQuDQoNCkFjdHVhbGx5IHRoaXMgd2FzIGZpcnN0 IGRpc2N1c3NlZCBpbiBMQU1QUywgYnV0IGFzIHRoZSBkcmFmdCBmb2N1c3NlcyBvbiBDb0FQIHRy YW5zcG9ydCBhbmQgbm90IG9uIENNUCBzcGVjaWZpY3MsIHRoZSBncm91cCBoYWQgdGhlIG9waW5p b24gdGhhdCBBQ0UgaXMgdGhlIGJldHRlciBob21lIGFzIGhlcmUgaXMgdGhlIGtub3dsZWRnZSBy ZWdhcmRpbmcgQ29BUC4NCg0KSGVuZHJpaw0K From nobody Thu Oct 15 10:22:57 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16E3F3A0AE0; Thu, 15 Oct 2020 10:22:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KNv94z7l8bwa; Thu, 15 Oct 2020 10:22:53 -0700 (PDT) Received: from mail-vs1-xe32.google.com (mail-vs1-xe32.google.com [IPv6:2607:f8b0:4864:20::e32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BC8D3A07F0; Thu, 15 Oct 2020 10:22:53 -0700 (PDT) Received: by mail-vs1-xe32.google.com with SMTP id x185so1955153vsb.1; Thu, 15 Oct 2020 10:22:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Hq6In/wr6G5UsVUq2Yn9LN1uJlv4MGMNbxyCMGlfSds=; b=Zk7dr/5uzZweJkCi7jE5wDp2uuk1Ww+o4l+C1siMPyV6GZszX1iVk5lWwpWLeGep1L WU3nWgUot/fp7VZO55NzTYPNAo6UOtAXb6v0UPTq9ccFn4HJszsfb+rhutLNRQKseCEY j9JZrjIBnoroSnwVntdaOKALGN7wOY1JvHg1X/5xCUy934lkD2fjrBIVUtl1D/d101T9 IBhoP0ZtI+m1FRcnI+sDrtGwH6wSIcBOMcQLtHHyJhtnCU4Bmwajts1FrV9sLfHCOUeO grnnbYNS/Z3zSUU7ltj8rl2NeuuhZY4gERbNJD/ihK0XlCqVuC3tgI5HBZcG6v57/1uA qrUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Hq6In/wr6G5UsVUq2Yn9LN1uJlv4MGMNbxyCMGlfSds=; b=R3hmB6mwhAyMllR3QMASg7EwdBa35/2+vIuG9QMY+z9sJmr6Zdvy5zZFr8e5rbGp48 yP1ImmEDztUts6RXHRuLUGm66K9k29nvQrOx0WT0x1UsL3auiSZY1WenDpWnAYS0vgZa FJRYjDfLkkCMY2Fo9ceqZ+8WFvN/cjqUK9Wgt3RziwDSwn1h+6+hKKd5ja8PSB71RgmA pjGWLJxXYBnsHbaM+BL57ZOCwMJxjMu3/9dk8X4OnjBANjsUg/06BO/5QimCBYUgNIT5 vqG+AKdnWUQ/3MF3mCmaRWwNZinVQVSv5ntK5lhTSaF69S2kgOzYdAv8mEzIg1fGJNFw SoHg== X-Gm-Message-State: AOAM530mo4lcF9ZN8wAZpE7jYAmFsx1HtcSelj18j5poOTsCrFL6BzJH CCR4Jzk1jXAS+rX0Pyuq00Dx5xLOHvYdO/fwnqxs0WVmd/Q= X-Google-Smtp-Source: ABdhPJxWdgNnKr+10ybd2cOnJsnHHREzSmqKyOZOkpem2PM4wpn5aZoDOMmXY7dIVmC9Oi58d0KTm6FUmQarJbM5Tcg= X-Received: by 2002:a67:1e02:: with SMTP id e2mr3711246vse.40.1602782572100; Thu, 15 Oct 2020 10:22:52 -0700 (PDT) MIME-Version: 1.0 References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> <20201009154454.GA1050533@hephaistos.amsuess.com> In-Reply-To: From: Daniel Migault Date: Thu, 15 Oct 2020 13:22:41 -0400 Message-ID: To: =?UTF-8?Q?Christian_Ams=C3=BCss?= Cc: Francesca Palombini , "draft-ietf-ace-oscore-profile@ietf.org" , Ace Wg Content-Type: multipart/alternative; boundary="000000000000dcc2f005b1b8e54a" Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 17:22:55 -0000 --000000000000dcc2f005b1b8e54a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, To follow-up this thread, we discussed with Ben and found out that the best path would be to go through an official WGLC before sending the document back to the IESG. This should not change much as a careful review of the document was needed anyway (C), so the WGLC would just consist of these reviewers to confirm their reviews. Yours, Daniel On Tue, Oct 13, 2020 at 9:10 AM Daniel Migault wrote: > Dear WG, > > If I attempt to balance the different 3 proposals, my perception is we ma= y > address a specific scenario into the core profile with no additional > complexity versus via extensions. This leaves working on a profile v2 > (option 2) or updating the to-become soon profile v1 (option 3). I prefer > to avoid specifications being deprecated before they are even published a= nd > would prefer to consider updating the current version. > > I suspect that multiple versions of a profile can co-exist and that the > problem of having a profile v2 that interoperate with a profile v1 - whic= h > does not seem mandatory. > > In order to move forward, I propose that by October 20: > * A) WG member state their opinion regarding that we revise the oscore > profile document > * B) Francesca refines the proposed changes, so the document is ready for > review > * C) WG member state whether they volunteer to review the updated > document. I would like to avoid the document re-opened once considered > updated. > > With A, B and C I will be able to discuss with Ben how to move forward th= e > document. I am happy to get your feed backs or suggestions. > > Yours, > Daniel > > > > > > On Fri, Oct 9, 2020 at 11:45 AM Christian Ams=C3=BCss > wrote: > >> Hello Francesca, hello ACE group, >> >> On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini wrote: >> > - clarified that Appendix B.2 of OSCORE can be used with this profile, >> > and what implementers need to think about if they do. >> >> I understand B.2 to be something that the involved parties need to agree >> on beforehand; after all, the ID context may be something the server >> relies on (at least for the initial attempt) to find the right key, >> especially when multiple AS are involved. (For example, the RS could >> have an agreement that the AS may issue any KID as long as they use a >> particular ID context). If the server expects B.2 to happen (which, as >> it is put now, it can as long as it supports it in general), it needs to >> shard its KID space for the ASs it uses. (Generally, B.2 is mutually >> exclusive with ID contexts's use of namespacing KIDs). >> >> Is the expectation that clients that do not anticipate B.2 by the time >> they are configured with their AS just don't offer B.2 to their peers? >> >> Given B.2 is in its current form client-initiated only (AFAIR we had >> versions where ID1 could be empty in draft versions, but currently it >> reads as client-initialized), does B.2 have any benefits for ACE-OSCORE >> clients? After all, they could just as well post the token with a new >> nonce1 to the same effect. >> >> Kind Regards >> Christian >> >> -- >> To use raw power is to make yourself infinitely vulnerable to greater >> powers. >> -- Bene Gesserit axiom >> _______________________________________________ >> Ace mailing list >> Ace@ietf.org >> https://www.ietf.org/mailman/listinfo/ace >> > > > -- > Daniel Migault > Ericsson > --=20 Daniel Migault Ericsson --000000000000dcc2f005b1b8e54a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,=C2=A0

To follow-up this = thread, we discussed with Ben and found out that the best path would=C2=A0b= e to go through=C2=A0an official WGLC before sending the document back to t= he IESG. This should not change much as a careful review of the document wa= s needed anyway (C), so the WGLC would=C2=A0just consist of these reviewers= to confirm their reviews.=C2=A0
=C2=A0=C2=A0
Yours,=C2= =A0
Daniel

On Tue, Oct 13, 2020 at 9:10 AM Daniel Migau= lt <mglt.ietf@gmail.com> w= rote:
Dear WG,=C2=A0

If I attempt to balance the diff= erent 3 proposals, my perception is we may address a specific scenario into= the core profile with no additional complexity versus via extensions. This= leaves=C2=A0working on a profile v2 (option 2) or updating the to-become s= oon profile v1 (option 3). I prefer to avoid specifications being deprecate= d before they are even published and would prefer to consider updating the = current version.=C2=A0=C2=A0

I suspect that multip= le versions of a profile can co-exist and that the problem of having a prof= ile v2 that interoperate with a profile v1 - which does not seem mandatory.= =C2=A0=C2=A0

In order to move forward, I propose t= hat by October 20:
* A)=C2=A0 WG member state their opinion regar= ding that we revise the oscore profile document=C2=A0
* B) France= sca refines the proposed changes, so the document is ready for review=C2=A0= =C2=A0 =C2=A0
* C) WG member state whether they volunteer=C2=A0t= o review the updated document. I would=C2=A0like to avoid the document re-o= pened once considered updated.=C2=A0

With A, B and= C I will be able to discuss with Ben how to move forward the document. I a= m happy to get your feed backs=C2=A0or suggestions.

Yours,=C2=A0
Daniel
=C2=A0

<= br>


On Fri, Oct 9, 2020 at 11:45 AM Christian Ams=C3=BC= ss <christian= @amsuess.com> wrote:
Hello Francesca, hello ACE group,

On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini wrote:
> - clarified that Appendix B.2 of OSCORE can be used with this profile,=
> and what implementers need to think about if they do.

I understand B.2 to be something that the involved parties need to agree on beforehand; after all, the ID context may be something the server
relies on (at least for the initial attempt) to find the right key,
especially when multiple AS are involved. (For example, the RS could
have an agreement that the AS may issue any KID as long as they use a
particular ID context). If the server expects B.2 to happen (which, as
it is put now, it can as long as it supports it in general), it needs to shard its KID space for the ASs it uses. (Generally, B.2 is mutually
exclusive with ID contexts's use of namespacing KIDs).

Is the expectation that clients that do not anticipate B.2 by the time
they are configured with their AS just don't offer B.2 to their peers?<= br>
Given B.2 is in its current form client-initiated only (AFAIR we had
versions where ID1 could be empty in draft versions, but currently it
reads as client-initialized), does B.2 have any benefits for ACE-OSCORE
clients? After all, they could just as well post the token with a new
nonce1 to the same effect.

Kind Regards
Christian

--
To use raw power is to make yourself infinitely vulnerable to greater power= s.
=C2=A0 -- Bene Gesserit axiom
_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--
Daniel Migault
Ericsson


--
Daniel Migault
Ericsson
--000000000000dcc2f005b1b8e54a-- From nobody Thu Oct 15 10:48:13 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 218AC3A0898 for ; Thu, 15 Oct 2020 10:48:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.096 X-Spam-Level: X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zIwXcQJFDBac for ; Thu, 15 Oct 2020 10:48:10 -0700 (PDT) Received: from mail-vk1-xa36.google.com (mail-vk1-xa36.google.com [IPv6:2607:f8b0:4864:20::a36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 778F03A0BC6 for ; Thu, 15 Oct 2020 10:48:10 -0700 (PDT) Received: by mail-vk1-xa36.google.com with SMTP id h74so826454vkh.6 for ; Thu, 15 Oct 2020 10:48:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Tzyr/aaOhF4Oixk+KnbLyi7gIO54YyUSLsO8w/jd3eQ=; b=njxFrpojLxu3hD3Lbv1VpxbO+NWIQ6GtOmqjcqdrw1RH2L6qAA49jfwtIvy3nekD81 rBCtZbBObn25928SYbh5VX0rFtFUUyo53tw27TAJyYoPlEui1D4p3GILXxf9yNtTlRGH nEi6nwgtPQFWCaoSwsDYyvhdJqtAs7Cg6eaNuSsWlhbDl4CaXZb6/0U+nPR+i/XDfogb dzj+1tSn8i9jMrYewp85A6JeeUiAjCWcrrFyqv+eNKwGvjWv+cfotvOLvhNpYVirqsXN VeNcKJnlsenSx5Ve7A5FpSl5dAownVCUL3LIeMB+ZHp9hGyXkQKJYID/n8LsSYo5/Q1k p1kg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Tzyr/aaOhF4Oixk+KnbLyi7gIO54YyUSLsO8w/jd3eQ=; b=EDVO2ZZEE7wqnzzSs3a11sN5xWTnZg0vUTYYDBWmRK+OqsG1xOX0cOLlHaB6JL10Tn gdPe5PZIdUCqxcoEn6qiw2G1XPzxT86hDOh38BocwKnN/4+hL5An0+Ki7nUw+E7hFef1 UBS/D2UQ/AyVwQGi4gNAEw/0j/qbQ+dml6ZZEOp9LeESRGvARpyd2Er8e3qZmpoAa0E/ CUvPMhbBTGHoKSDjK1yYc7gPMN0/CxNAutctzuMoBDSk0RC4fneQR3+C8tRTVeIV8bvu rJ9NKncAXmrsdlqkKsxyU2ci5RnqvxZ/55DZxtEdhM6n6FakSOgpCDgJJJrcuyycH8gn owpQ== X-Gm-Message-State: AOAM532O4EFTaFBJ+9L4FvjORv7CS85wfpaUturVqqeeIVPpRBoxXpHr RSRJyV+buC4HRB9Vdq3IKfsO6HxurnHBoRo5hj4Sj3wqoMIsSw== X-Google-Smtp-Source: ABdhPJwKgAZz8Dm711cufxMfr1sHaRjwgmWqLi0NAdq8TSr+evgO8QvikH7+uOWAWzjdi5CLAV66Bsj1CobojPyOEww= X-Received: by 2002:a1f:3a09:: with SMTP id h9mr3419505vka.6.1602784089213; Thu, 15 Oct 2020 10:48:09 -0700 (PDT) MIME-Version: 1.0 From: Daniel Migault Date: Thu, 15 Oct 2020 13:47:58 -0400 Message-ID: To: Ace Wg Content-Type: multipart/alternative; boundary="0000000000004a0fb605b1b9401c" Archived-At: Subject: [Ace] Charter discussion X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 17:48:12 -0000 --0000000000004a0fb605b1b9401c Content-Type: text/plain; charset="UTF-8" Hi, I would like to start the charter discussion. Here is a draft of a proposed charter [1]. It seems to be that additional discussion is needed with regard to the last paragraph related certificate management. In particular the discussion might revive a discussion that happened in 2017 [2] - when I was not co-chair of ACE -and considered other expired work such as [3]. Please make this discussion constructive on this thread. The fundamental question is whether we need certificate management at this stage. If the answer is yes, and we have multiple proposals, it would be good to clarify the position of the different proposals and evaluate whether a selection is needed or not before validating the charter. Please provide your inputs on the mailing list before October 30. Of course for minor edits, you may suggest them directly on the google doc. Yours, Daniel [1] https://docs.google.com/document/d/1RtxUSvUeBdZWoQkjSj2c3DtR8DuBwPM2BnBXhoDiptY/edit?usp=sharing [2] https://datatracker.ietf.org/doc/minutes-interim-2017-ace-03-201710191300/ [3] https://datatracker.ietf.org/doc/draft-selander-ace-eals/ -- Daniel Migault Ericsson --0000000000004a0fb605b1b9401c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,=C2=A0

I would like to start the cha= rter discussion. Here is a draft of a proposed charter [1].=C2=A0

It seems to be that additional discussion is needed with re= gard to the last paragraph related certificate management. In particular th= e discussion might revive a discussion that happened in 2017 [2] - when I w= as not co-chair of ACE -and considered other expired work such as [3]. Plea= se make this discussion constructive on this thread.=C2=A0

The fundamental question is whether we need certificate management= at this stage. If the answer is yes, and we have multiple proposals, it wo= uld be good to clarify the position of the different proposals and evaluate= whether a selection=C2=A0is needed or not before validating the charter.= =C2=A0

Please provide your inputs on the mailing l= ist before October 30. Of course for minor edits, you may suggest them dire= ctly on the google doc.

Yours,=C2=A0
Daniel

--0000000000004a0fb605b1b9401c-- From nobody Thu Oct 15 11:01:17 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 249123A0C44; Thu, 15 Oct 2020 11:01:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.302 X-Spam-Level: X-Spam-Status: No, score=-3.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U23HrQKICM7J; Thu, 15 Oct 2020 11:01:14 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70048.outbound.protection.outlook.com [40.107.7.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09DDD3A0C43; Thu, 15 Oct 2020 11:01:13 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lntDfWaloW3yV/1tGP7KhTnxGsWfDU46i/Wtap8hbcT3XyPPE9GPLqlkbEFOCdLm7N6bA7TaI7n+YL7+LB+4GsbPb7U8KWLjYpJrEta4D96tktMg6aBJMHgm63LuNn1qSIH55YSFmfu/5Mn90by44vpc9aU6qUKlaTcBXac3kv5Rm4v9xh0Dhu2scZVP8rNvCAVHiP0+IglPmoyvuCyABU2cxFDDKwotJuQEJ8hbOT40u5nbzScfIDre6Bj5iEP+pmib8Vu1z+RJpw8Kj18ojJgtMIAbWFWNum7bF3/1J9xu2ynkOxuhPApvoPQoNW7TuQHJ8TEmiKHxSKIO5/0inw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L7jqr+S+BdgcUXHZzsPLwR4p7ZGG7iuOO+EebGiffdc=; b=OaRDvAVXrawKf4R2/GsN9LYnAwuOEfZcuAimwl016D/CbFMtKWJyJuho8mg1Isp3FGSvGF7NJC79If6EEUfkcv7xZXdHsZetPKUnclmtX/0vsmIqIrSSqPJW7/AgTNC2/7Q2JgkJLyXjiYVn02HSMRw8AWM4HRTmCqlOBmUFJYiBB8kVRZ+mWYjcM+sQxjQjyvu4Dbsv+/MZ1+6uwVRKevooacs8VckR8wS8CUaCyk9/1vpWRkh0fnISIDF6v0IMz3ha6UFujABlzWgSMvzDBibDZw9AQ+o3DuWl9KB0PvQm9bpXVruFX5l98e9Qtz5ZXIaGml14/DLRUX9i73mxGA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L7jqr+S+BdgcUXHZzsPLwR4p7ZGG7iuOO+EebGiffdc=; b=Cd26Yt5f+af01cJtwCs8odjN4WRUPEu3YA+M9+Ts622hOJrc6clN3NtFSrk/kfUVuTi6R443S48UeJAXiCEokH3/kXSaMUtbPCYTMAR31IBGSPI5gm61mlje+crKslBSSrl2giezoBjrnu/rvilqllZXa7iUkzbgHr5p71dnYQg= Received: from HE1PR0702MB3674.eurprd07.prod.outlook.com (2603:10a6:7:82::14) by HE1PR07MB3066.eurprd07.prod.outlook.com (2603:10a6:7:2f::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.11; Thu, 15 Oct 2020 18:01:11 +0000 Received: from HE1PR0702MB3674.eurprd07.prod.outlook.com ([fe80::f5ce:b24:f47e:799c]) by HE1PR0702MB3674.eurprd07.prod.outlook.com ([fe80::f5ce:b24:f47e:799c%4]) with mapi id 15.20.3477.020; Thu, 15 Oct 2020 18:01:11 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: =?utf-8?B?Q2hyaXN0aWFuIEFtc8O8c3M=?= , Francesca Palombini CC: Ace Wg , "draft-ietf-ace-oscore-profile@ietf.org" Thread-Topic: [Ace] OSCORE Profile status update and way forward Thread-Index: AQHWkB3lL5vgPcSqm0itM92+Khf54amPhgcAgAm1lwA= Date: Thu, 15 Oct 2020 18:01:11 +0000 Message-ID: <809D1CE3-A75E-4871-9E1D-48260E787762@ericsson.com> References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> <20201009154454.GA1050533@hephaistos.amsuess.com> In-Reply-To: <20201009154454.GA1050533@hephaistos.amsuess.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: amsuess.com; dkim=none (message not signed) header.d=none;amsuess.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [83.251.145.232] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ff412530-e1da-4732-e10e-08d871344ccb x-ms-traffictypediagnostic: HE1PR07MB3066: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Z1z4I2yPJe9s5A85ARzXE0SHdjGaWc/JkYVMGpd/+kYPFP1zeUXt+24buD2e3smKkVnaoWkis5b8zBCcX5eUAocEixZ3Ev3Jbbkv5js9wYcLnY9c+kSMp1QQdacbNx1piNT1yhRoraeEjRSoAvjJb5/8krpNcUfjYi9o8SbDq2cVPrZDbHh+lnORmP93Voxrr4z0AwCuNEFYSy2KYfTvJ6B9SzTobUGp/9b7zyVPBIlhFO9RstUTPGoTFlw0MjFY11Cq0Wh/RrVlJwESlIOTCCUIzCxC5E1g6HuhpPsDlgPzr3gkhgUzfwaQR+CSNWpdR8+VCeLuRkrPVhkNPGd5fA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3674.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(396003)(136003)(39860400002)(376002)(346002)(316002)(64756008)(186003)(8936002)(71200400001)(85202003)(26005)(85182001)(110136005)(66556008)(66476007)(66446008)(5660300002)(76116006)(66946007)(8676002)(83380400001)(33656002)(6506007)(478600001)(6486002)(54906003)(86362001)(2616005)(15650500001)(36756003)(6512007)(2906002)(66574015)(4326008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <338BB8A746A173438C0EE68793B18657@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3674.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ff412530-e1da-4732-e10e-08d871344ccb X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2020 18:01:11.2713 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8Mpxwa88b28tFnSx7+0x5xM8hD4mgeOKHpND9OnuQTvd8CjIUGfyh229TNGz70ax2192qfMocSlu4kbu20pZJh0w7VjACy8YJ7J2W/dZ2h8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3066 Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 18:01:16 -0000 SGkgQ2hyaXN0aWFuLA0KDQpUaGUgcHVycG9zZSBvZiB0aGUgdXBkYXRlIHdhcyB0byBjbGFyaWZ5 IHRoYXQgQXBwZW5kaXggQi4yIG9mIFJGQyA4NjEzIGNvdWxkIGJlIHVzZWQgaW4gY29uanVuY3Rp b24gd2l0aCB0aGUgQUNFIE9TQ09SRSBwcm9maWxlLiBCdXQgYXMgeW91IHBvaW50IG91dCwgdGhl IHVzZSBvZiBCLjIgd291bGQgbmVlZCB0byBiZSB1bmRlcnN0b29kIGJldHdlZW4gdGhlIGNsaWVu dCBhbmQgc2VydmVyIGJlZm9yZWhhbmQuIFRoZXJlIGFyZSBzbGlnaHQgZGlmZmVyZW5jZXM6IFdp dGggQi4yIHRoZXJlIGlzIG5vIG5lZWQgdG8gdHJhbnNwb3J0IHRoZSBhY2Nlc3MgdG9rZW4gYWdh aW4uIEFuZCBCLjIgY2FuIGJlIHRyaWdnZXJlZCBieSB0aGUgKHJlc291cmNlKSBzZXJ2ZXIsIGlm IGl0IHVuZGVyc3RhbmRzIHRoYXQgaXQgZG9lcyBub3QgaGF2ZSB0aGUgcmlnaHQgY29udGV4dCAo d2hpY2ggY2FuIGhhcHBlbiBldmVuIGlmIHRoZXJlIGlzIG5vIElEIGNvbnRleHQgaW4gdGhlIHJl cXVlc3QpLiBKdXN0IHVzaW5nIHRoZSBBQ0UgT1NDT1JFIHByb2ZpbGUsIHRoZSBjbGllbnQgd291 bGQgbmVlZCB0byB1bmRlcnN0YW5kIHRoYXQgdGhlIGNvbnRleHQgaXMgbG9zdCBhbmQgcnVuIHRo ZSBwcm90b2NvbCBhZ2Fpbi4gU28sIHRoZXJlIGlzIGEgZGlmZmVyZW5jZSBidXQgZXNzZW50aWFs bHkgdGhlIHNhbWUgZnVuY3Rpb25hbGl0eSBjYW4gYmUgb2J0YWluZWQuDQoNCldvdWxkIGl0IGJl IHN1ZmZpY2llbnQgdG8gY2xhcmlmeSB0aGUgZGlmZmVyZW5jZXMgYXMgYWJvdmUgdG8gYWRkcmVz cyB5b3VyIGNvbW1lbnQ/DQoNClRoYW5rcywNCkfDtnJhbg0KDQoNCu+7v09uIDIwMjAtMTAtMDks IDE3OjQ1LCAiQ2hyaXN0aWFuIEFtc8O8c3MiIDxjaHJpc3RpYW5AYW1zdWVzcy5jb20+IHdyb3Rl Og0KDQogICAgSGVsbG8gRnJhbmNlc2NhLCBoZWxsbyBBQ0UgZ3JvdXAsDQoNCiAgICBPbiBNb24s IFNlcCAyMSwgMjAyMCBhdCAwMTo0ODozM1BNICswMDAwLCBGcmFuY2VzY2EgUGFsb21iaW5pIHdy b3RlOg0KICAgID4gLSBjbGFyaWZpZWQgdGhhdCBBcHBlbmRpeCBCLjIgb2YgT1NDT1JFIGNhbiBi ZSB1c2VkIHdpdGggdGhpcyBwcm9maWxlLA0KICAgID4gYW5kIHdoYXQgaW1wbGVtZW50ZXJzIG5l ZWQgdG8gdGhpbmsgYWJvdXQgaWYgdGhleSBkby4NCg0KICAgIEkgdW5kZXJzdGFuZCBCLjIgdG8g YmUgc29tZXRoaW5nIHRoYXQgdGhlIGludm9sdmVkIHBhcnRpZXMgbmVlZCB0byBhZ3JlZQ0KICAg IG9uIGJlZm9yZWhhbmQ7IGFmdGVyIGFsbCwgdGhlIElEIGNvbnRleHQgbWF5IGJlIHNvbWV0aGlu ZyB0aGUgc2VydmVyDQogICAgcmVsaWVzIG9uIChhdCBsZWFzdCBmb3IgdGhlIGluaXRpYWwgYXR0 ZW1wdCkgdG8gZmluZCB0aGUgcmlnaHQga2V5LA0KICAgIGVzcGVjaWFsbHkgd2hlbiBtdWx0aXBs ZSBBUyBhcmUgaW52b2x2ZWQuIChGb3IgZXhhbXBsZSwgdGhlIFJTIGNvdWxkDQogICAgaGF2ZSBh biBhZ3JlZW1lbnQgdGhhdCB0aGUgQVMgbWF5IGlzc3VlIGFueSBLSUQgYXMgbG9uZyBhcyB0aGV5 IHVzZSBhDQogICAgcGFydGljdWxhciBJRCBjb250ZXh0KS4gSWYgdGhlIHNlcnZlciBleHBlY3Rz IEIuMiB0byBoYXBwZW4gKHdoaWNoLCBhcw0KICAgIGl0IGlzIHB1dCBub3csIGl0IGNhbiBhcyBs b25nIGFzIGl0IHN1cHBvcnRzIGl0IGluIGdlbmVyYWwpLCBpdCBuZWVkcyB0bw0KICAgIHNoYXJk IGl0cyBLSUQgc3BhY2UgZm9yIHRoZSBBU3MgaXQgdXNlcy4gKEdlbmVyYWxseSwgQi4yIGlzIG11 dHVhbGx5DQogICAgZXhjbHVzaXZlIHdpdGggSUQgY29udGV4dHMncyB1c2Ugb2YgbmFtZXNwYWNp bmcgS0lEcykuDQoNCiAgICBJcyB0aGUgZXhwZWN0YXRpb24gdGhhdCBjbGllbnRzIHRoYXQgZG8g bm90IGFudGljaXBhdGUgQi4yIGJ5IHRoZSB0aW1lDQogICAgdGhleSBhcmUgY29uZmlndXJlZCB3 aXRoIHRoZWlyIEFTIGp1c3QgZG9uJ3Qgb2ZmZXIgQi4yIHRvIHRoZWlyIHBlZXJzPw0KDQogICAg R2l2ZW4gQi4yIGlzIGluIGl0cyBjdXJyZW50IGZvcm0gY2xpZW50LWluaXRpYXRlZCBvbmx5IChB RkFJUiB3ZSBoYWQNCiAgICB2ZXJzaW9ucyB3aGVyZSBJRDEgY291bGQgYmUgZW1wdHkgaW4gZHJh ZnQgdmVyc2lvbnMsIGJ1dCBjdXJyZW50bHkgaXQNCiAgICByZWFkcyBhcyBjbGllbnQtaW5pdGlh bGl6ZWQpLCBkb2VzIEIuMiBoYXZlIGFueSBiZW5lZml0cyBmb3IgQUNFLU9TQ09SRQ0KICAgIGNs aWVudHM/IEFmdGVyIGFsbCwgdGhleSBjb3VsZCBqdXN0IGFzIHdlbGwgcG9zdCB0aGUgdG9rZW4g d2l0aCBhIG5ldw0KICAgIG5vbmNlMSB0byB0aGUgc2FtZSBlZmZlY3QuDQoNCiAgICBLaW5kIFJl Z2FyZHMNCiAgICBDaHJpc3RpYW4NCg0KICAgIC0tIA0KICAgIFRvIHVzZSByYXcgcG93ZXIgaXMg dG8gbWFrZSB5b3Vyc2VsZiBpbmZpbml0ZWx5IHZ1bG5lcmFibGUgdG8gZ3JlYXRlciBwb3dlcnMu DQogICAgICAtLSBCZW5lIEdlc3Nlcml0IGF4aW9tDQoNCg== From nobody Thu Oct 15 11:34:58 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 822723A122A for ; Thu, 15 Oct 2020 11:34:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.096 X-Spam-Level: X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DEtfxT5yQPou for ; Thu, 15 Oct 2020 11:34:54 -0700 (PDT) Received: from mail-vk1-xa32.google.com (mail-vk1-xa32.google.com [IPv6:2607:f8b0:4864:20::a32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFDE03A1226 for ; Thu, 15 Oct 2020 11:34:54 -0700 (PDT) Received: by mail-vk1-xa32.google.com with SMTP id d125so22175vkh.10 for ; Thu, 15 Oct 2020 11:34:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=82YRrQdymvhX7GY1ALzNuhLAqcedy3eZ3cN2Fgfmn4I=; b=GNV5yMqFtUdBZkNdrM4cJcYxU9CMMAI5M3MWYL5xBMPAqfY65DehIOseN6/ZyPVoMy Z5k0BElCDEQq0w40dPa3+VJZu/9QaVTBVDtU/Rpgqi/61nFogSvbbNCO80M/boM68Qir hByd2M42e3y+Jm1g/a2EQHEbyMPHmGdkB85aKfUo0nXogwR7Kq38gy/hDAksdjPCRQat PiW0DY/+RZu8nj8fM6qlPtaOUhOrFk6T+LLkjEd7S+YnBeNnPXzv/P8COLuWt6GFEV5F hXUauLsSkf8AnylYj/Zu3Iv04VamB9IhTlNYvSXzX8vq/bQ57N9HfGM78t51mfHfArnm 8XaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=82YRrQdymvhX7GY1ALzNuhLAqcedy3eZ3cN2Fgfmn4I=; b=C8dHMZRsQfEMhYXWXM9+4R1Pcd6bd1XeDpDR6GIC/izamybxViaA523CGh+t7cTuXy rN785ESLryVKLYm6QlwIUfaNtgm8qUU6rl9ViVcDR27iDXascMVr3ZO1VeIdPa2MbJZE Yr4q/kW3PmIzrqMxn66xDaoKbGUoyM1+EdGymDN6lUNMuyohASmsls9v5On8Wa9evaU2 Al+QcnD5OwXaD9LsDf/dZHT1MB/2m3i/4Ltn3T1eiG3264U+1QT/fPKQfaXzNAMa6wOB 9zUO2KBvbZhdHhvNzMJelx8WdyuHougy4ISyQqJ0Hxqw6FLpdz0thWtUBQml+pGe5crv YS8g== X-Gm-Message-State: AOAM531Dk+93nnkBMn32tG9lziYFppqTP5TStn4wNv3K9rAInlfzqq2r FaGEmoBEMDiDH4Rb4gNkmPT6WO/d+Jz80xZ+cPUCoY5YhX4= X-Google-Smtp-Source: ABdhPJwgF+ViRak/AGoWdN9Y9PFIlUKnMgCxGL4VLx+RU+JKvQ4f2Hj0tRDvhYu+2sauAIS0jsrDufdyTX1uYRx42Hw= X-Received: by 2002:a1f:9a4f:: with SMTP id c76mr3712218vke.13.1602786893690; Thu, 15 Oct 2020 11:34:53 -0700 (PDT) MIME-Version: 1.0 References: <159922443186.20634.8403661739953851965@ietfa.amsl.com> In-Reply-To: From: Daniel Migault Date: Thu, 15 Oct 2020 14:34:42 -0400 Message-ID: To: Francesca Palombini Cc: Ace Wg Content-Type: multipart/alternative; boundary="00000000000072fa9e05b1b9e775" Archived-At: Subject: Re: [Ace] FW: New Version Notification for draft-ietf-ace-key-groupcomm-09.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 18:34:57 -0000 --00000000000072fa9e05b1b9e775 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Francesca and Marco, I am just wondering if Christian's comment could be addressed by the next IETF meeting. Yours, Daniel On Fri, Sep 4, 2020 at 9:05 AM Francesca Palombini wrote: > Hi, > > This update deals with Jim's review comments for version -07 and followin= g > IETF108. > We are going to address Christian's review ( > https://mailarchive.ietf.org/arch/msg/ace/q03pyqFHFT4CpdsckLLlifPB3w0/ ) > in the next update. > > Thanks, > Francesca > > =EF=BB=BFOn 04/09/2020, 15:00, "internet-drafts@ietf.org" < > internet-drafts@ietf.org> wrote: > > > A new version of I-D, draft-ietf-ace-key-groupcomm-09.txt > has been successfully submitted by Francesca Palombini and posted to > the > IETF repository. > > Name: draft-ietf-ace-key-groupcomm > Revision: 09 > Title: Key Provisioning for Group Communication using AC= E > Document date: 2020-09-04 > Group: ace > Pages: 61 > URL: > https://www.ietf.org/id/draft-ietf-ace-key-groupcomm-09.txt > Status: > https://datatracker.ietf.org/doc/draft-ietf-ace-key-groupcomm/ > Html: > https://www.ietf.org/id/draft-ietf-ace-key-groupcomm-09.html > Htmlized: > https://tools.ietf.org/html/draft-ietf-ace-key-groupcomm-09 > Diff: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-ace-key-groupcomm-09 > > Abstract: > This document defines message formats and procedures for requestin= g > and distributing group keying material using the ACE framework, to > protect communications between group members. > > Discussion Venues > > This note is to be removed before publishing as an RFC. > > Source for this draft and an issue tracker can be found at > > https://protect2.fireeye.com/v1/url?k=3Db951d6d2-e7f1781f-b9519649-86073b= 36ea28-dd68199b84112dab&q=3D1&e=3D43c18049-3363-489e-9e80-01780d314b99&u=3D= https%3A%2F%2Fgithub.com%2Face-wg%2Face-key-groupcomm > . > > > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --=20 Daniel Migault Ericsson --00000000000072fa9e05b1b9e775 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Francesca and Marco,=C2=A0

I am just= wondering if Christian's comment could be addressed by the next IETF m= eeting.=C2=A0

Yours,=C2=A0
Daniel
On Fri, = Sep 4, 2020 at 9:05 AM Francesca Palombini <francesca.palombini=3D40ericsson.com@dmarc.ietf.org> wrote:
Hi,=

This update deals with Jim's review comments for version -07 and follow= ing IETF108.
We are going to address Christian's review ( https://mailarchive.ietf.org/arch/msg/ace/q03pyqFHFT4Cpd= sckLLlifPB3w0/ ) in the next update.

Thanks,
Francesca

=EF=BB=BFOn 04/09/2020, 15:00, "internet-drafts@ietf.org" <internet-drafts@ietf.org<= /a>> wrote:


=C2=A0 =C2=A0 A new version of I-D, draft-ietf-ace-key-groupcomm-09.txt
=C2=A0 =C2=A0 has been successfully submitted by Francesca Palombini and po= sted to the
=C2=A0 =C2=A0 IETF repository.

=C2=A0 =C2=A0 Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0d= raft-ietf-ace-key-groupcomm
=C2=A0 =C2=A0 Revision:=C2=A0 =C2=A009
=C2=A0 =C2=A0 Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Key Pr= ovisioning for Group Communication using ACE
=C2=A0 =C2=A0 Document date:=C2=A0 =C2=A0 =C2=A0 2020-09-04
=C2=A0 =C2=A0 Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ace =C2=A0 =C2=A0 Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 61
=C2=A0 =C2=A0 URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/id/draft-ietf-ace-key-groupcomm-09.= txt
=C2=A0 =C2=A0 Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://datatracker.ietf.org/doc/draft-ietf-ace-key-groupc= omm/
=C2=A0 =C2=A0 Html:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/id/draft-ietf-ace-key-groupcomm-09= .html
=C2=A0 =C2=A0 Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://tools.ietf.org/html/draft-ietf-ace-key-groupcomm-09 =C2=A0 =C2=A0 Diff:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-a= ce-key-groupcomm-09

=C2=A0 =C2=A0 Abstract:
=C2=A0 =C2=A0 =C2=A0 =C2=A0This document defines message formats and proced= ures for requesting
=C2=A0 =C2=A0 =C2=A0 =C2=A0and distributing group keying material using the= ACE framework, to
=C2=A0 =C2=A0 =C2=A0 =C2=A0protect communications between group members.
=C2=A0 =C2=A0 Discussion Venues

=C2=A0 =C2=A0 =C2=A0 =C2=A0This note is to be removed before publishing as = an RFC.

=C2=A0 =C2=A0 =C2=A0 =C2=A0Source for this draft and an issue tracker can b= e found at
=C2=A0 =C2=A0 =C2=A0 =C2=A0https://pr= otect2.fireeye.com/v1/url?k=3Db951d6d2-e7f1781f-b9519649-86073b36ea28-dd681= 99b84112dab&q=3D1&e=3D43c18049-3363-489e-9e80-01780d314b99&u=3D= https%3A%2F%2Fgithub.com%2Face-wg%2Face-key-groupcomm.




=C2=A0 =C2=A0 Please note that it may take a couple of minutes from the tim= e of submission
=C2=A0 =C2=A0 until the htmlized version and diff are available at tools.ietf.= org.

=C2=A0 =C2=A0 The IETF Secretariat



_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--
Daniel Migault
Ericsson
--00000000000072fa9e05b1b9e775-- From nobody Fri Oct 16 05:13:29 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 385433A0EC5 for ; Fri, 16 Oct 2020 05:13:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.3 X-Spam-Level: X-Spam-Status: No, score=-3.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H0DcX6ITtexk for ; Fri, 16 Oct 2020 05:13:26 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60065.outbound.protection.outlook.com [40.107.6.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A7F83A0EAD for ; Fri, 16 Oct 2020 05:13:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UhBnD4guJj17+LXdudpItcKQGV8am7zL5Ckxar9x+wuTUzdkYEp4v66cH4dV7MTs9dfZHhBdDfDxODqbBuZ4zLIInRDfZhROQweiHgvMtrKJFkzqePKLsyeSlCefL2hgkUNee32wgfSYGccOgFHLw+4WNLek9piTNdvTJlsbTpreYajVzePFlUALCXMnVruCeT/kHTANECN3wZMIj3yzyb3UmIwgt8RFgF2o2SLW/x1tQgfpNZCsYQZzpPKbsXqFGb04m6L00KUhA1uxDsMAwFlroviMk0vdmWIRG2daKZYMnDqSEYdZO69BcfSnH/iKcr851uEqIsBs0SVCMg5p/g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=al5RNJGx4M2SF2/pb+6eK5I5/xMpldFIiiWSw8AOLh0=; b=WUnsmPPzRUDrnKawCDVoqS9WIsVC9PkylulqfetMphUEVMIongbfsXsXI9C1uQeShmMKoYAFTLjaBFQNc3ZSa2kHJcMeX1cEE3m0908TQiDmH9j7rg+NHOwXFqU22N7melFrcxAfTwd+gC0xQ5Fw+MVlWhYHnIJxzkk/an6NmxuRUEvZDVa4R/At2WP4cOSzDlv3qfLpBxJgVzZekWqtGcR6CaQP5WyhjqBG8PqZL5ML5ZSJHSspDmGZt1NAi2CFYu8KKAiJptqWIs04d6jkVaZMx1FKS2GmrtzJnmDgwph+mGlCkly4/kwxB4unGCQh7KHAUd1I5C/qz52/p6aVtQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=al5RNJGx4M2SF2/pb+6eK5I5/xMpldFIiiWSw8AOLh0=; b=gK8EzssVcm0Nt+KNnnPqCK+vJ26PQ5TOSkQGkHl5ap36tq0w1+BqLUQd6XKEfedgnorbzZbgIzXpY9pERIQ3kaoOFmcl03wYhmrAObfkfDKPTentTGYh68WLEXcNrPm781HP5Rn3MhY7OQTzIxz7dw0viYIZhhvWrfmls8siOWk= Received: from VI1PR07MB4477.eurprd07.prod.outlook.com (2603:10a6:803:74::33) by VI1PR0702MB3726.eurprd07.prod.outlook.com (2603:10a6:803:3::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.11; Fri, 16 Oct 2020 12:13:23 +0000 Received: from VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::cba:ac03:353c:2d1f]) by VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::cba:ac03:353c:2d1f%7]) with mapi id 15.20.3477.020; Fri, 16 Oct 2020 12:13:23 +0000 From: Francesca Palombini To: Daniel Migault CC: Ace Wg Thread-Topic: [Ace] FW: New Version Notification for draft-ietf-ace-key-groupcomm-09.txt Thread-Index: AQHWgrtiI/aeeGoCm0WRJHFGQN4AoqlYlDCAgECqCgCAAUlRAA== Date: Fri, 16 Oct 2020 12:13:22 +0000 Message-ID: <008BA2B6-97B2-4598-94EB-52E1A6E1DDC0@ericsson.com> References: <159922443186.20634.8403661739953851965@ietfa.amsl.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [158.174.219.143] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e8c2627b-3cf5-432b-efc8-08d871cce0c0 x-ms-traffictypediagnostic: VI1PR0702MB3726: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Lby38hEcMVbiovUrW7v70RanSEx1HKEbOqORjcSLf2NxjOFmHoUi179tYqtiVyFqt75jfH/TTnLvSu9e9G74F9eE0FdqUXabvoCSZNGX3WZKp+sloMOPvwsWhgWlEWU9HXldbOLWmP3Mi9U77lcXqYsOGwTiJwI5j3H81lKbPpQjgXx7MvqfV3EPmZYbKgV4vNJXXW4OobXWlR9iJRCzOLIZ5SlrxY+lNsMxdCVH8OFtsWCpTkL3wvTVefQ8IK5jK8OelpfDp3/BUnElR7/pGKyxYc2nvPgbm2Yu5YW/POQ3IBtp40cL0mTewqaKB0AUmRbjismYqly6U/ZVW2WHSg8HyD1VenPON+Z06Kd4FcMZvkvVeB59iVn9zZTMCsyee+sh8gdOyWfnBXqrtg4WRg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB4477.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(376002)(39860400002)(396003)(366004)(346002)(36756003)(44832011)(26005)(53546011)(478600001)(6916009)(86362001)(166002)(186003)(2906002)(71200400001)(316002)(33656002)(66946007)(66476007)(6506007)(6512007)(66446008)(966005)(76116006)(66556008)(91956017)(4326008)(5660300002)(64756008)(83380400001)(8676002)(15650500001)(21615005)(2616005)(6486002)(8936002)(66574015)(9326002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_008BA2B697B2459894EB52E1A6E1DDC0ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: VI1PR07MB4477.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e8c2627b-3cf5-432b-efc8-08d871cce0c0 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Oct 2020 12:13:22.9483 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: terlcDTrAkVa7H5T5JpiCS9IbFcwORLyb+ccv+VWThHdqXOVT+6t8xcRlV6pJ1Mho1HwJkPQLy3gdEDE+po07f6FhuabYc5PRb4RMkE+sVUG1y0STztuAf/zV4iEVHBP X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0702MB3726 Archived-At: Subject: Re: [Ace] FW: New Version Notification for draft-ietf-ace-key-groupcomm-09.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 12:13:28 -0000 --_000_008BA2B697B2459894EB52E1A6E1DDC0ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGFuaWVsLA0KDQpXZSBiZWxpZXZlIHdlIGNhbiBhZGRyZXNzIENocmlzdGlhbuKAmXMgY29t bWVudHMgYnkgbmV4dCBJRVRGIG1lZXRpbmcuIFdlIHdpbGwgcmVxdWVzdCBzb21lIHRpbWUgb24g dGhlIGFnZW5kYSB0byBwcmVzZW50IHRoZSB1cGRhdGUgYW5kIGRpc2N1c3MgYW55IG9wZW4gcG9p bnQuDQoNClRoYW5rcywNCkZyYW5jZXNjYQ0KDQpGcm9tOiBEYW5pZWwgTWlnYXVsdCA8bWdsdC5p ZXRmQGdtYWlsLmNvbT4NCkRhdGU6IFRodXJzZGF5LCAxNSBPY3RvYmVyIDIwMjAgYXQgMjA6MzUN ClRvOiBGcmFuY2VzY2EgUGFsb21iaW5pIDxmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNzc29uLmNv bT4NCkNjOiBBY2UgV2cgPGFjZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbQWNlXSBGVzogTmV3 IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1pZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5 LnR4dA0KDQpIaSBGcmFuY2VzY2EgYW5kIE1hcmNvLA0KDQpJIGFtIGp1c3Qgd29uZGVyaW5nIGlm IENocmlzdGlhbidzIGNvbW1lbnQgY291bGQgYmUgYWRkcmVzc2VkIGJ5IHRoZSBuZXh0IElFVEYg bWVldGluZy4NCg0KWW91cnMsDQpEYW5pZWwNCg0KT24gRnJpLCBTZXAgNCwgMjAyMCBhdCA5OjA1 IEFNIEZyYW5jZXNjYSBQYWxvbWJpbmkgPGZyYW5jZXNjYS5wYWxvbWJpbmk9NDBlcmljc3Nvbi5j b21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOjQwZXJpY3Nzb24uY29tQGRtYXJjLmlldGYub3JnPj4g d3JvdGU6DQpIaSwNCg0KVGhpcyB1cGRhdGUgZGVhbHMgd2l0aCBKaW0ncyByZXZpZXcgY29tbWVu dHMgZm9yIHZlcnNpb24gLTA3IGFuZCBmb2xsb3dpbmcgSUVURjEwOC4NCldlIGFyZSBnb2luZyB0 byBhZGRyZXNzIENocmlzdGlhbidzIHJldmlldyAoIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5v cmcvYXJjaC9tc2cvYWNlL3EwM3B5cUZIRlQ0Q3Bkc2NrTExsaWZQQjN3MC8gKSBpbiB0aGUgbmV4 dCB1cGRhdGUuDQoNClRoYW5rcywNCkZyYW5jZXNjYQ0KDQpPbiAwNC8wOS8yMDIwLCAxNTowMCwg ImludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3Jn PiIgPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYu b3JnPj4gd3JvdGU6DQoNCg0KICAgIEEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1pZXRmLWFj ZS1rZXktZ3JvdXBjb21tLTA5LnR4dA0KICAgIGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0 ZWQgYnkgRnJhbmNlc2NhIFBhbG9tYmluaSBhbmQgcG9zdGVkIHRvIHRoZQ0KICAgIElFVEYgcmVw b3NpdG9yeS4NCg0KICAgIE5hbWU6ICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1hY2Uta2V5LWdy b3VwY29tbQ0KICAgIFJldmlzaW9uOiAgIDA5DQogICAgVGl0bGU6ICAgICAgICAgICAgICBLZXkg UHJvdmlzaW9uaW5nIGZvciBHcm91cCBDb21tdW5pY2F0aW9uIHVzaW5nIEFDRQ0KICAgIERvY3Vt ZW50IGRhdGU6ICAgICAgMjAyMC0wOS0wNA0KICAgIEdyb3VwOiAgICAgICAgICAgICAgYWNlDQog ICAgUGFnZXM6ICAgICAgICAgICAgICA2MQ0KICAgIFVSTDogICAgICAgICAgICBodHRwczovL3d3 dy5pZXRmLm9yZy9pZC9kcmFmdC1pZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5LnR4dA0KICAgIFN0 YXR1czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRm LWFjZS1rZXktZ3JvdXBjb21tLw0KICAgIEh0bWw6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRm Lm9yZy9pZC9kcmFmdC1pZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5Lmh0bWwNCiAgICBIdG1saXpl ZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYWNlLWtleS1n cm91cGNvbW0tMDkNCiAgICBEaWZmOiAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZj ZGlmZj91cmwyPWRyYWZ0LWlldGYtYWNlLWtleS1ncm91cGNvbW0tMDkNCg0KICAgIEFic3RyYWN0 Og0KICAgICAgIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyBtZXNzYWdlIGZvcm1hdHMgYW5kIHByb2Nl ZHVyZXMgZm9yIHJlcXVlc3RpbmcNCiAgICAgICBhbmQgZGlzdHJpYnV0aW5nIGdyb3VwIGtleWlu ZyBtYXRlcmlhbCB1c2luZyB0aGUgQUNFIGZyYW1ld29yaywgdG8NCiAgICAgICBwcm90ZWN0IGNv bW11bmljYXRpb25zIGJldHdlZW4gZ3JvdXAgbWVtYmVycy4NCg0KICAgIERpc2N1c3Npb24gVmVu dWVzDQoNCiAgICAgICBUaGlzIG5vdGUgaXMgdG8gYmUgcmVtb3ZlZCBiZWZvcmUgcHVibGlzaGlu ZyBhcyBhbiBSRkMuDQoNCiAgICAgICBTb3VyY2UgZm9yIHRoaXMgZHJhZnQgYW5kIGFuIGlzc3Vl IHRyYWNrZXIgY2FuIGJlIGZvdW5kIGF0DQogICAgICAgaHR0cHM6Ly9wcm90ZWN0Mi5maXJlZXll LmNvbS92MS91cmw/az1iOTUxZDZkMi1lN2YxNzgxZi1iOTUxOTY0OS04NjA3M2IzNmVhMjgtZGQ2 ODE5OWI4NDExMmRhYiZxPTEmZT00M2MxODA0OS0zMzYzLTQ4OWUtOWU4MC0wMTc4MGQzMTRiOTkm dT1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZhY2Utd2clMkZhY2Uta2V5LWdyb3VwY29tbS4N Cg0KDQoNCg0KICAgIFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWlu dXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCiAgICB1bnRpbCB0aGUgaHRtbGl6ZWQg dmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnPGh0dHA6Ly90 b29scy5pZXRmLm9yZz4uDQoNCiAgICBUaGUgSUVURiBTZWNyZXRhcmlhdA0KDQoNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWlsaW5nIGxp c3QNCkFjZUBpZXRmLm9yZzxtYWlsdG86QWNlQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCg0KDQotLQ0KRGFuaWVsIE1pZ2F1bHQNCkVyaWNzc29u DQo= --_000_008BA2B697B2459894EB52E1A6E1DDC0ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <1462B62427CC5B449E34C62B3A55F5BB@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjEN Cgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcy LjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5 bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBs ZSIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3Vh Z2U6RU4tVVMiPkhpIERhbmllbCw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+V2UgYmVsaWV2ZSB3ZSBjYW4gYWRkcmVzcyBDaHJp c3RpYW7igJlzIGNvbW1lbnRzIGJ5IG5leHQgSUVURiBtZWV0aW5nLiBXZSB3aWxsIHJlcXVlc3Qg c29tZSB0aW1lIG9uIHRoZSBhZ2VuZGEgdG8gcHJlc2VudCB0aGUgdXBkYXRlIGFuZCBkaXNjdXNz IGFueSBvcGVuIHBvaW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5UaGFua3MsPGJyPg0KRnJhbmNlc2NhPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBw dCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJv bToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2si PkRhbmllbCBNaWdhdWx0ICZsdDttZ2x0LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCjxiPkRhdGU6 IDwvYj5UaHVyc2RheSwgMTUgT2N0b2JlciAyMDIwIGF0IDIwOjM1PGJyPg0KPGI+VG86IDwvYj5G cmFuY2VzY2EgUGFsb21iaW5pICZsdDtmcmFuY2VzY2EucGFsb21iaW5pQGVyaWNzc29uLmNvbSZn dDs8YnI+DQo8Yj5DYzogPC9iPkFjZSBXZyAmbHQ7YWNlQGlldGYub3JnJmd0Ozxicj4NCjxiPlN1 YmplY3Q6IDwvYj5SZTogW0FjZV0gRlc6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJh ZnQtaWV0Zi1hY2Uta2V5LWdyb3VwY29tbS0wOS50eHQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkhpIEZyYW5jZXNjYSBhbmQgTWFyY28s Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JIGFtIGp1 c3Qgd29uZGVyaW5nIGlmIENocmlzdGlhbidzIGNvbW1lbnQgY291bGQgYmUgYWRkcmVzc2VkIGJ5 IHRoZSBuZXh0IElFVEYgbWVldGluZy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+WW91cnMsJm5ic3A7PGJyPg0KRGFuaWVsPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk9uIEZyaSwgU2VwIDQs IDIwMjAgYXQgOTowNSBBTSBGcmFuY2VzY2EgUGFsb21iaW5pICZsdDtmcmFuY2VzY2EucGFsb21i aW5pPTxhIGhyZWY9Im1haWx0bzo0MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZyI+NDBlcmlj c3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICND Q0NDQ0MgMS4wcHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPkhpLDxicj4NCjxicj4NClRoaXMgdXBkYXRlIGRlYWxzIHdpdGggSmltJ3MgcmV2 aWV3IGNvbW1lbnRzIGZvciB2ZXJzaW9uIC0wNyBhbmQgZm9sbG93aW5nIElFVEYxMDguPGJyPg0K V2UgYXJlIGdvaW5nIHRvIGFkZHJlc3MgQ2hyaXN0aWFuJ3MgcmV2aWV3ICggPGEgaHJlZj0iaHR0 cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNoL21zZy9hY2UvcTAzcHlxRkhGVDRDcGRzY2tM TGxpZlBCM3cwLyIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9y Zy9hcmNoL21zZy9hY2UvcTAzcHlxRkhGVDRDcGRzY2tMTGxpZlBCM3cwLzwvYT4gKSBpbiB0aGUg bmV4dCB1cGRhdGUuPGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCkZyYW5jZXNjYTxicj4NCjxicj4N Ck9uIDA0LzA5LzIwMjAsIDE1OjAwLCAmcXVvdDs8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPC9h PiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxicj4N Cjxicj4NCjxicj4NCiZuYnNwOyAmbmJzcDsgQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LWll dGYtYWNlLWtleS1ncm91cGNvbW0tMDkudHh0PGJyPg0KJm5ic3A7ICZuYnNwOyBoYXMgYmVlbiBz dWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IEZyYW5jZXNjYSBQYWxvbWJpbmkgYW5kIHBvc3RlZCB0 byB0aGU8YnI+DQombmJzcDsgJm5ic3A7IElFVEYgcmVwb3NpdG9yeS48YnI+DQo8YnI+DQombmJz cDsgJm5ic3A7IE5hbWU6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO2RyYWZ0LWlldGYtYWNlLWtleS1ncm91cGNvbW08YnI+DQombmJzcDsgJm5i c3A7IFJldmlzaW9uOiZuYnNwOyAmbmJzcDswOTxicj4NCiZuYnNwOyAmbmJzcDsgVGl0bGU6Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IEtleSBQcm92aXNp b25pbmcgZm9yIEdyb3VwIENvbW11bmljYXRpb24gdXNpbmcgQUNFPGJyPg0KJm5ic3A7ICZuYnNw OyBEb2N1bWVudCBkYXRlOiZuYnNwOyAmbmJzcDsgJm5ic3A7IDIwMjAtMDktMDQ8YnI+DQombmJz cDsgJm5ic3A7IEdyb3VwOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyBhY2U8YnI+DQombmJzcDsgJm5ic3A7IFBhZ2VzOiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyA2MTxicj4NCiZuYnNwOyAmbmJzcDsgVVJMOiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL2lkL2RyYWZ0LWlldGYtYWNlLWtleS1ncm91cGNvbW0tMDkudHh0IiB0YXJn ZXQ9Il9ibGFuayI+DQpodHRwczovL3d3dy5pZXRmLm9yZy9pZC9kcmFmdC1pZXRmLWFjZS1rZXkt Z3JvdXBjb21tLTA5LnR4dDwvYT48YnI+DQombmJzcDsgJm5ic3A7IFN0YXR1czombmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtaWV0Zi1hY2Uta2V5LWdyb3VwY29tbS8iIHRhcmdldD0iX2JsYW5rIj5o dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWFjZS1rZXktZ3JvdXBj b21tLzwvYT48YnI+DQombmJzcDsgJm5ic3A7IEh0bWw6Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDs8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9pZC9kcmFmdC1p ZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5Lmh0bWwiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3 dy5pZXRmLm9yZy9pZC9kcmFmdC1pZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5Lmh0bWw8L2E+PGJy Pg0KJm5ic3A7ICZuYnNwOyBIdG1saXplZDombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8YSBo cmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1hY2Uta2V5LWdyb3Vw Y29tbS0wOSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1pZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5PC9hPjxicj4NCiZuYnNwOyAmbmJzcDsgRGlmZjom bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8v d3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWFjZS1rZXktZ3JvdXBjb21tLTA5 IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0 LWlldGYtYWNlLWtleS1ncm91cGNvbW0tMDk8L2E+PGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBB YnN0cmFjdDo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtUaGlzIGRvY3VtZW50IGRl ZmluZXMgbWVzc2FnZSBmb3JtYXRzIGFuZCBwcm9jZWR1cmVzIGZvciByZXF1ZXN0aW5nPGJyPg0K Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YW5kIGRpc3RyaWJ1dGluZyBncm91cCBrZXlpbmcg bWF0ZXJpYWwgdXNpbmcgdGhlIEFDRSBmcmFtZXdvcmssIHRvPGJyPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7cHJvdGVjdCBjb21tdW5pY2F0aW9ucyBiZXR3ZWVuIGdyb3VwIG1lbWJlcnMu PGJyPg0KPGJyPg0KJm5ic3A7ICZuYnNwOyBEaXNjdXNzaW9uIFZlbnVlczxicj4NCjxicj4NCiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1RoaXMgbm90ZSBpcyB0byBiZSByZW1vdmVkIGJlZm9y ZSBwdWJsaXNoaW5nIGFzIGFuIFJGQy48YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDtTb3VyY2UgZm9yIHRoaXMgZHJhZnQgYW5kIGFuIGlzc3VlIHRyYWNrZXIgY2FuIGJlIGZv dW5kIGF0PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9w cm90ZWN0Mi5maXJlZXllLmNvbS92MS91cmw/az1iOTUxZDZkMi1lN2YxNzgxZi1iOTUxOTY0OS04 NjA3M2IzNmVhMjgtZGQ2ODE5OWI4NDExMmRhYiZhbXA7cT0xJmFtcDtlPTQzYzE4MDQ5LTMzNjMt NDg5ZS05ZTgwLTAxNzgwZDMxNGI5OSZhbXA7dT1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZh Y2Utd2clMkZhY2Uta2V5LWdyb3VwY29tbSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vcHJvdGVj dDIuZmlyZWV5ZS5jb20vdjEvdXJsP2s9Yjk1MWQ2ZDItZTdmMTc4MWYtYjk1MTk2NDktODYwNzNi MzZlYTI4LWRkNjgxOTliODQxMTJkYWImYW1wO3E9MSZhbXA7ZT00M2MxODA0OS0zMzYzLTQ4OWUt OWU4MC0wMTc4MGQzMTRiOTkmYW1wO3U9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGYWNlLXdn JTJGYWNlLWtleS1ncm91cGNvbW08L2E+Ljxicj4NCjxicj4NCjxicj4NCjxicj4NCjxicj4NCiZu YnNwOyAmbmJzcDsgUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51 dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbjxicj4NCiZuYnNwOyAmbmJzcDsgdW50aWwg dGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCA8YSBocmVmPSJo dHRwOi8vdG9vbHMuaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj4NCnRvb2xzLmlldGYub3JnPC9h Pi48YnI+DQo8YnI+DQombmJzcDsgJm5ic3A7IFRoZSBJRVRGIFNlY3JldGFyaWF0PGJyPg0KPGJy Pg0KPGJyPg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX188YnI+DQpBY2UgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkFjZUBpZXRm Lm9yZyIgdGFyZ2V0PSJfYmxhbmsiPkFjZUBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZSIgdGFyZ2V0PSJfYmxhbmsiPmh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlPC9hPjxvOnA+PC9vOnA+PC9w Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+LS0gPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5EYW5pZWwgTWln YXVsdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+RXJpY3Nzb248bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_008BA2B697B2459894EB52E1A6E1DDC0ericssoncom_-- From nobody Fri Oct 16 16:32:28 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91DA13A0965; Fri, 16 Oct 2020 16:32:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZOlLTV6HgEJt; Fri, 16 Oct 2020 16:32:21 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1596E3A0978; Fri, 16 Oct 2020 16:32:19 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CCj9Y6g7szyX6; Sat, 17 Oct 2020 01:32:17 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 624583937.127264-88b71d10106123a895c57d7ea3ef9d06 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Sat, 17 Oct 2020 01:32:17 +0200 Message-Id: To: ace@ietf.org, "core@ietf.org WG (core@ietf.org)" , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF109: DRAFT AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 23:32:23 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF109. Remember that there is still quite some potential for changes. The conflicts that meet the eye this time seem to impact generalists = only. Great scheduling job! All times *on my agenda* are in UTC (the default page is UTC+0700). https://datatracker.ietf.org/meeting/agenda-utc might be handy. Note that both EU and US are on winter time (standard time) then. Gr=C3=BC=C3=9Fe, Carsten MONDAY, November 9, 2020 0500-0700 Hackathon Kickoff Rm 1 GEN hackathon Hackathon FRIDAY, November 13, 2020 0500-0700 Hackathon Closing Rm 1 GEN hackathon Hackathon MONDAY, November 16, 2020 0500-0700 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 3 IRTF qirg Quantum Internet Research Group Rm 5 RTG raw Reliable and Available Wireless WG Rm 6 SEC *** lake Lightweight Authenticated Key Exchange = WG 0730-0830 Session II Rm 3 INT add Adaptive DNS Discovery WG Rm 4 IRTF maprg Measurement and Analysis for Protocols Rm 7 SEC *** cose CBOR Object Signing and Encryption WG 0900-1100 Session III Rm 1 ART jsonpath JSON Path WG Rm 6 SEC secdispatch Security Dispatch WG Rm 7 TSV tsvwg Transport Area Working Group WG TUESDAY, November 17, 2020 0500-0700 Session I Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 7 SEC gnap Grant Negotiation and Authorization = Protocol WG 0730-0830 Session II Rm 5 RTG babel Babel routing protocol WG Rm 6 SEC tls Transport Layer Security WG 0900-1100 Session III Rm 1 ART *** asdf A Semantic Definition Format for Data = and Interactions of Things WG Rm 2 IRTF irtfopen IRTF Open Meeting Rm 4 RTG apn Application-aware Networking BOF Rm 7 SEC *** rats Remote ATtestation ProcedureS WG WEDNESDAY, November 18, 2020 0500-0700 Session I Rm 3 INT madinas MAC Address Device Identification for = Network and Application Services BOF Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 7 SEC *** ace Authentication and Authorization for = Constrained Environments WG Rm 8 TSV quic QUIC WG 0730-0830 Session II Rm 3 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Rm 4 INT *** drip Drone Remote ID Protocol WG Rm 7 SEC *** teep Trusted Execution Environment = Provisioning WG Rm 8 TSV tsvwg Transport Area Working Group WG THURSDAY, November 19, 2020 0500-0700 Session I Rm 3 IRTF coinrg Computing in the Network Research Group Rm 7 SEC saag Security Area Open Meeting 0730-0830 Session II Rm 1 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Rm 2 INT intarea Internet Area Working Group WG Rm 3 RTG detnet Deterministic Networking WG Rm 5 SEC acme Automated Certificate Management = Environment WG 0900-1100 Session III Rm 4 OPS v6ops IPv6 Operations WG Rm 6 RTG *** roll Routing Over Low power and Lossy = networks WG Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG FRIDAY, November 20, 2020 0500-0700 Session I Rm 2 INT add Adaptive DNS Discovery WG Rm 6 RTG rift Routing In Fat Trees WG Rm 7 SEC emu EAP Method Update WG 0730-0830 Session II Rm 1 ART httpapi Building Blocks for HTTP APIs WG Rm 2 INT *** lwig Light-Weight Implementation Guidance WG Rm 3 OPS anima Autonomic Networking Integrated Model = and Approach WG Rm 6 SEC *** suit Software Updates for Internet of Things = WG Rm 7 TSV tsvarea Transport Area Open Meeting 0900-1100 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 4 IRTF cfrg Crypto Forum Rm 7 TSV masque Multiplexed Application Substrate over = QUIC Encryption WG From nobody Mon Oct 19 08:52:45 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D3AF3A0B04; Mon, 19 Oct 2020 08:52:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.201 X-Spam-Level: X-Spam-Status: No, score=-0.201 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PanVWwOAzyTS; Mon, 19 Oct 2020 08:52:43 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80040.outbound.protection.outlook.com [40.107.8.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5EC53A0AEE; Mon, 19 Oct 2020 08:52:42 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=U6/sroveREz984wCaGrIuXX52m+BoljKIGhU+se01RxIF200ZnmGAsucGQWjh65fouMJ9ZeCRJRLUft2iY59/TXLopBpB5RHFfQDIQcX3rmLX5z0gBm/+P0ZTKL1Hgu2kIp2MHra+QBsNF2iQewMXf74dqOONkYbd8V8OXyYZlkwu9Zdb6WkROxSeNWjJND3K+rCSWJ1G36J7uBimXVaaHK/Ruyu8BOORhJh2iU7f7FuAoLueTlWk2teqR8wejiFOraT+oMtYzbQCTRlxeRdMTFTteSBPTQfmYQBMIhIHEvjDlbuZlk08slAaxqXNGCmOt113vJk4yj1ZvSVIBpTQw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HxEcR+nufenvPCTA8eJPk8vs7RSvrTjV8cMudALNmVU=; b=XhLowCWAwTf7qIsqcSrY3DgpoV3+r5zhn0OK4u8dYBe22uabywxNTQF4gAmgV772mEBjSLhP6tIldLdgRsU6hFswpu7pnls09gQfTqtyRLfRp6ucxcDzHUUlhWpLoElQ04Ll1oY/xMZ71lUTEqkXgFRWVHBNFqJcRx8CUp9UneFM+gKzm2w1weVFmqFVq/Y/56/bG2NHMUEa1vNFRUBdd50BbuxvJQ8EKRsjJKHIFqOlkkHCCPWbYEjXBweG1fz5br2WIgNz3BSBNFw0RdHJg8TbGXGtpuZd/4hyLiMGaxwdGIHhM+vYDk3Sn7jcP5WX34eFmrg/d3P+ANF/qYYgxA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HxEcR+nufenvPCTA8eJPk8vs7RSvrTjV8cMudALNmVU=; b=NdHIkbg4KDg0MWYlSZpwvbwaEDycEkk7zmrCe8Nvw2gT8N8Uo7gdqjP+8IMtm0k5IgOvBK/aCbOdYHB8XNquJwFnxL77hBlStFd8omr1GVJ5c61ZE9KE/qb3itpyhBm2PVg46wZTZHzGrjy6/NFUHOAR6MuHJg/SCztvwRIvyoM= Received: from VI1PR07MB4477.eurprd07.prod.outlook.com (2603:10a6:803:74::33) by VI1PR0701MB6831.eurprd07.prod.outlook.com (2603:10a6:800:191::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.7; Mon, 19 Oct 2020 15:52:40 +0000 Received: from VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::d9ad:72f6:f14b:40ef]) by VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::d9ad:72f6:f14b:40ef%7]) with mapi id 15.20.3499.015; Mon, 19 Oct 2020 15:52:40 +0000 From: Francesca Palombini To: =?utf-8?B?Q2hyaXN0aWFuIEFtc8O8c3M=?= , Daniel Migault CC: Ace Wg , "draft-ietf-ace-oscore-profile@ietf.org" Thread-Topic: [Ace] OSCORE Profile status update and way forward Thread-Index: AQHWkB3lL5vgPcSqm0itM92+Khf54amPhgcAgAm1lwCABiVrgA== Date: Mon, 19 Oct 2020 15:52:40 +0000 Message-ID: References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> <20201009154454.GA1050533@hephaistos.amsuess.com> <809D1CE3-A75E-4871-9E1D-48260E787762@ericsson.com> In-Reply-To: <809D1CE3-A75E-4871-9E1D-48260E787762@ericsson.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: amsuess.com; dkim=none (message not signed) header.d=none;amsuess.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [158.174.219.143] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1ddfa848-ad40-47a0-1dc7-08d87447024a x-ms-traffictypediagnostic: VI1PR0701MB6831: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: uAW3j3xZPDNwrqWZaV9fooA9nRMHUCfK2yllxkYR26CTER23D59lee41p7XSvLBCihOSNcl00O6veHxwi0Y4cyuO5e6dNQPcdXmUUk62sAZteFFkA/OYDqzN+/QUh285tEbzHUDALzVXsfjw6Jr3S6oAUCY4CP3oFDUpjxQWADeTNOaEg7t2ihutILvRsd8VdDcnOWT/7glzLYT06sTv8DF1BBizrPXHuao9GZlVxMZOYVbOO/a2Q6f1s9E8Q2vCN67JqTBN9Vet4KfQSFIZglov8J4qPpKT2h8dSoPdGW9ciry/F7tCUMsEez4Hdr36mEROZRSWBsvsiaa2yqhGqQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB4477.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(366004)(136003)(346002)(39860400002)(376002)(64756008)(316002)(66556008)(66476007)(110136005)(36756003)(66446008)(6636002)(86362001)(26005)(54906003)(66946007)(44832011)(2906002)(4326008)(6512007)(2616005)(8936002)(66574015)(15650500001)(83380400001)(33656002)(53546011)(6486002)(71200400001)(91956017)(76116006)(478600001)(5660300002)(186003)(8676002)(6506007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: zVy/zCZj/uSbB+1QBNOmnCIdWpO9VASZIcdkuyImLgbBhSCgCR6C3CKq8IS3pfwNzPL8Ro8GnRmDp8NO2B6ctjxRTVZDSbjiYvk6wxJH5hSHmC5REmSbzh7YdrgFkebiCfO5zFaH7Do94xUFOZ19V2z4O+cP6gJ3riHJAZ35D6urzPNG0r5MENY3xlIuPo/B/nlDp2tYNTYf1ZRMg7duPTFQ3mIzHw96jxBBi5cnphQILOj0pZLTZsgl9tPUu/NXehgk5BcA+RJV1/ZqOLXqWqnaBKJsgnwmH5g93l/hM/29JkDX1ZMLcoaY+G+T/ACFOTcuc3CkEXUbo9MPSUElsV/pnvqhR4MCrDUm8AsOqDQu4DaJYnyUgKxZbo3YvZFPM+0LGB8xBVM2kpNEphk2ikk4Rx/d7h3vJMt5vDFiTz0oWmDLVRb+7GGkw4oDaJI70/n/SGmaWFOeVLSd6yH0w/wpPdEQH2LDhgEHlVwE5AD7siCGQeu/InPpkrrplHIHxtsi90QFuO5S7UcWElhFaW5qSWBgxYUEqgfcr+Mcs8Xs3Qaf0e47oKMMu1V2lLz91TrAHewau2gxS9FCDUEfLiU0fy8qDwnI0Xzng/NDO7BGvW9eOw3lzQqinXwI9itZvDY04bhFPICeeqZGp6v9rw== Content-Type: text/plain; charset="utf-8" Content-ID: <2684A52B2230B146A276E4834102512D@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: VI1PR07MB4477.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1ddfa848-ad40-47a0-1dc7-08d87447024a X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2020 15:52:40.1687 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: F1vsqLTblflRGBM4/9iGb/v2PkmxTBK+3c0wdWrTnLVaPdex4JuFxaU1ZHJXrDhcqYU65onEFpKxnpd7/nug0AJ8mRQ2tUvAY4tzZ4j5/Z69B4cKCLzHDh6tBskbSi4g X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0701MB6831 Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2020 15:52:44 -0000 SGkgQ2hyaXN0aWFuLCBEYW5pZWwsDQoNCkRhbmllbDogSSBhZ3JlZSB0aGF0IHdoYXQgeW91IGRl c2NyaWJlIGlzIHRoZSBiZXN0IHdheSBmb3J3YXJkLiBPbmNlIHRoZSBQUiByZWdhcmRpbmcgdGhl IG5lZ290aWF0aW9uIG9mIElkcyBpcyBtZXJnZWQsIEkgY2FuIG9ubHkgc2VlIGEgbWlub3IgYWRk aXRpb24gdG8gdGhlIGRyYWZ0LCB0byBjbGFyaWZ5IHdoYXQgQ2hyaXN0aWFuIGhhcyBicm91Z2h0 IHVwLiBCeSB0aGUgZW5kIG9mIHRoaXMgd2VlayB3ZSBzaG91bGQgaGF2ZSBDaHJpc3RpYW4ncyBj b21tZW50IGltcGxlbWVudGVkIGFzIHdlbGwuIEFmdGVyIHRoYXQsIHdlJ3JlIHJlYWR5IGZvciBh bm90aGVyIHJvdW5kIG9mIHJldmlld3MsIGFuZCBJIHRoaW5rIGEgV0dMQyBpcyB3YXJyYW50ZWQu DQoNCkNocmlzdGlhbiwgbGV0IHVzIGtub3cgaWYgdGhlcmUgaXMgYW55dGhpbmcgZWxzZSBleGNl cHQgc29tZSBtb3JlIGNvbnNpZGVyYXRpb25zIGNvdmVyaW5nIHdoYXQgeW91IGFyZSBzYXlpbmcu IEfDtnJhbiBzdW1tYXJpemVkIGl0IHdlbGwsIGJ1dCBiYXNpY2FsbHkgbm8sIHRoZXJlIGlzIG5v IHBhcnRpY3VsYXIgYmVuZWZpdC4gVGhlIHNlbnRlbmNlIHdhcyBhZGRlZCBhcyB0aGUgcmVzcG9u c2UgZnJvbSBhIHJldmlldyBjb21tZW50LCBidXQgaXQgc2VlbXMgbGlrZSBhIGdvb2QgaWRlYSB0 byBhZGQgbW9yZSBjb250ZXh0IHRvIGl0LiANCg0KVGhhbmtzLA0KRnJhbmNlc2NhDQoNCu+7v09u IDE1LzEwLzIwMjAsIDIwOjAxLCAiR8O2cmFuIFNlbGFuZGVyIiA8Z29yYW4uc2VsYW5kZXJAZXJp Y3Nzb24uY29tPiB3cm90ZToNCg0KICAgIEhpIENocmlzdGlhbiwNCg0KICAgIFRoZSBwdXJwb3Nl IG9mIHRoZSB1cGRhdGUgd2FzIHRvIGNsYXJpZnkgdGhhdCBBcHBlbmRpeCBCLjIgb2YgUkZDIDg2 MTMgY291bGQgYmUgdXNlZCBpbiBjb25qdW5jdGlvbiB3aXRoIHRoZSBBQ0UgT1NDT1JFIHByb2Zp bGUuIEJ1dCBhcyB5b3UgcG9pbnQgb3V0LCB0aGUgdXNlIG9mIEIuMiB3b3VsZCBuZWVkIHRvIGJl IHVuZGVyc3Rvb2QgYmV0d2VlbiB0aGUgY2xpZW50IGFuZCBzZXJ2ZXIgYmVmb3JlaGFuZC4gVGhl cmUgYXJlIHNsaWdodCBkaWZmZXJlbmNlczogV2l0aCBCLjIgdGhlcmUgaXMgbm8gbmVlZCB0byB0 cmFuc3BvcnQgdGhlIGFjY2VzcyB0b2tlbiBhZ2Fpbi4gQW5kIEIuMiBjYW4gYmUgdHJpZ2dlcmVk IGJ5IHRoZSAocmVzb3VyY2UpIHNlcnZlciwgaWYgaXQgdW5kZXJzdGFuZHMgdGhhdCBpdCBkb2Vz IG5vdCBoYXZlIHRoZSByaWdodCBjb250ZXh0ICh3aGljaCBjYW4gaGFwcGVuIGV2ZW4gaWYgdGhl cmUgaXMgbm8gSUQgY29udGV4dCBpbiB0aGUgcmVxdWVzdCkuIEp1c3QgdXNpbmcgdGhlIEFDRSBP U0NPUkUgcHJvZmlsZSwgdGhlIGNsaWVudCB3b3VsZCBuZWVkIHRvIHVuZGVyc3RhbmQgdGhhdCB0 aGUgY29udGV4dCBpcyBsb3N0IGFuZCBydW4gdGhlIHByb3RvY29sIGFnYWluLiBTbywgdGhlcmUg aXMgYSBkaWZmZXJlbmNlIGJ1dCBlc3NlbnRpYWxseSB0aGUgc2FtZSBmdW5jdGlvbmFsaXR5IGNh biBiZSBvYnRhaW5lZC4NCg0KICAgIFdvdWxkIGl0IGJlIHN1ZmZpY2llbnQgdG8gY2xhcmlmeSB0 aGUgZGlmZmVyZW5jZXMgYXMgYWJvdmUgdG8gYWRkcmVzcyB5b3VyIGNvbW1lbnQ/DQoNCiAgICBU aGFua3MsDQogICAgR8O2cmFuDQoNCg0KICAgIE9uIDIwMjAtMTAtMDksIDE3OjQ1LCAiQ2hyaXN0 aWFuIEFtc8O8c3MiIDxjaHJpc3RpYW5AYW1zdWVzcy5jb20+IHdyb3RlOg0KDQogICAgICAgIEhl bGxvIEZyYW5jZXNjYSwgaGVsbG8gQUNFIGdyb3VwLA0KDQogICAgICAgIE9uIE1vbiwgU2VwIDIx LCAyMDIwIGF0IDAxOjQ4OjMzUE0gKzAwMDAsIEZyYW5jZXNjYSBQYWxvbWJpbmkgd3JvdGU6DQog ICAgICAgID4gLSBjbGFyaWZpZWQgdGhhdCBBcHBlbmRpeCBCLjIgb2YgT1NDT1JFIGNhbiBiZSB1 c2VkIHdpdGggdGhpcyBwcm9maWxlLA0KICAgICAgICA+IGFuZCB3aGF0IGltcGxlbWVudGVycyBu ZWVkIHRvIHRoaW5rIGFib3V0IGlmIHRoZXkgZG8uDQoNCiAgICAgICAgSSB1bmRlcnN0YW5kIEIu MiB0byBiZSBzb21ldGhpbmcgdGhhdCB0aGUgaW52b2x2ZWQgcGFydGllcyBuZWVkIHRvIGFncmVl DQogICAgICAgIG9uIGJlZm9yZWhhbmQ7IGFmdGVyIGFsbCwgdGhlIElEIGNvbnRleHQgbWF5IGJl IHNvbWV0aGluZyB0aGUgc2VydmVyDQogICAgICAgIHJlbGllcyBvbiAoYXQgbGVhc3QgZm9yIHRo ZSBpbml0aWFsIGF0dGVtcHQpIHRvIGZpbmQgdGhlIHJpZ2h0IGtleSwNCiAgICAgICAgZXNwZWNp YWxseSB3aGVuIG11bHRpcGxlIEFTIGFyZSBpbnZvbHZlZC4gKEZvciBleGFtcGxlLCB0aGUgUlMg Y291bGQNCiAgICAgICAgaGF2ZSBhbiBhZ3JlZW1lbnQgdGhhdCB0aGUgQVMgbWF5IGlzc3VlIGFu eSBLSUQgYXMgbG9uZyBhcyB0aGV5IHVzZSBhDQogICAgICAgIHBhcnRpY3VsYXIgSUQgY29udGV4 dCkuIElmIHRoZSBzZXJ2ZXIgZXhwZWN0cyBCLjIgdG8gaGFwcGVuICh3aGljaCwgYXMNCiAgICAg ICAgaXQgaXMgcHV0IG5vdywgaXQgY2FuIGFzIGxvbmcgYXMgaXQgc3VwcG9ydHMgaXQgaW4gZ2Vu ZXJhbCksIGl0IG5lZWRzIHRvDQogICAgICAgIHNoYXJkIGl0cyBLSUQgc3BhY2UgZm9yIHRoZSBB U3MgaXQgdXNlcy4gKEdlbmVyYWxseSwgQi4yIGlzIG11dHVhbGx5DQogICAgICAgIGV4Y2x1c2l2 ZSB3aXRoIElEIGNvbnRleHRzJ3MgdXNlIG9mIG5hbWVzcGFjaW5nIEtJRHMpLg0KDQogICAgICAg IElzIHRoZSBleHBlY3RhdGlvbiB0aGF0IGNsaWVudHMgdGhhdCBkbyBub3QgYW50aWNpcGF0ZSBC LjIgYnkgdGhlIHRpbWUNCiAgICAgICAgdGhleSBhcmUgY29uZmlndXJlZCB3aXRoIHRoZWlyIEFT IGp1c3QgZG9uJ3Qgb2ZmZXIgQi4yIHRvIHRoZWlyIHBlZXJzPw0KDQogICAgICAgIEdpdmVuIEIu MiBpcyBpbiBpdHMgY3VycmVudCBmb3JtIGNsaWVudC1pbml0aWF0ZWQgb25seSAoQUZBSVIgd2Ug aGFkDQogICAgICAgIHZlcnNpb25zIHdoZXJlIElEMSBjb3VsZCBiZSBlbXB0eSBpbiBkcmFmdCB2 ZXJzaW9ucywgYnV0IGN1cnJlbnRseSBpdA0KICAgICAgICByZWFkcyBhcyBjbGllbnQtaW5pdGlh bGl6ZWQpLCBkb2VzIEIuMiBoYXZlIGFueSBiZW5lZml0cyBmb3IgQUNFLU9TQ09SRQ0KICAgICAg ICBjbGllbnRzPyBBZnRlciBhbGwsIHRoZXkgY291bGQganVzdCBhcyB3ZWxsIHBvc3QgdGhlIHRv a2VuIHdpdGggYSBuZXcNCiAgICAgICAgbm9uY2UxIHRvIHRoZSBzYW1lIGVmZmVjdC4NCg0KICAg ICAgICBLaW5kIFJlZ2FyZHMNCiAgICAgICAgQ2hyaXN0aWFuDQoNCiAgICAgICAgLS0gDQogICAg ICAgIFRvIHVzZSByYXcgcG93ZXIgaXMgdG8gbWFrZSB5b3Vyc2VsZiBpbmZpbml0ZWx5IHZ1bG5l cmFibGUgdG8gZ3JlYXRlciBwb3dlcnMuDQogICAgICAgICAgLS0gQmVuZSBHZXNzZXJpdCBheGlv bQ0KDQoNCg== From nobody Mon Oct 19 13:45:35 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4207C3A09C5; Mon, 19 Oct 2020 13:45:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.197 X-Spam-Level: X-Spam-Status: No, score=-0.197 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PltucxrwXlA8; Mon, 19 Oct 2020 13:45:33 -0700 (PDT) Received: from mail-ua1-x92b.google.com (mail-ua1-x92b.google.com [IPv6:2607:f8b0:4864:20::92b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDD023A09C3; Mon, 19 Oct 2020 13:45:32 -0700 (PDT) Received: by mail-ua1-x92b.google.com with SMTP id t15so278324ual.6; Mon, 19 Oct 2020 13:45:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=qRV5uxgjzns+jK1GtX7rbTgzT/FieDJuDqNmqBsDXBk=; b=BqaJ1KizXlpfcxYRFSl3/qnY0Hv1nxcAm+Qt56WFXDYKzN7zRNEH+xy3xr1OGQZeym aZBzq23BvJf2zWHGcx19jEp+VFxo3uThaZWyFCK5EGCSVZIl9n+WoqrJB6to/sQ96uTG 1a6aDl4YIxJmVdns2/WgUElO7ZkRUoBGB4rroQyBe9xI8S4AGiTaEJEUBEfF/7DYzwc/ lk6nix/YE5YUpTsqn4DpUNXDTGrp3PgW1JGj9smnYNQew/6tcuw/2tkJNi3iwFOL8emM mBcP0bzcWLHON90nA/RTT4pXUDOpPnZ65RoSm5QTTccMFveWnNxkFlO9HLCqox8WcBg5 6KAg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=qRV5uxgjzns+jK1GtX7rbTgzT/FieDJuDqNmqBsDXBk=; b=tpBBukg/8pAOU9lwmTI5bllF+jHKoxfl/YSSlritsIk3swnZPS47BAumRALwnqR+4n r14HQT9BXoPacyiGZyv9sP0EZIbbTnHtX80tacmkanFZXmGn+MSYbv3oY6WcGNTiP1AC duReZWU1ZqKKax2J56smVC+A//YTSvelF5oWYLJXmfyYKr+9BRtD1RV0U9JfLwDeITEK CbYz4JeL/vOmYzALH2Q/nhJuHrLeG6SzMUOZK0py8iPFlQgQAg9oj778oT3V8UfyyATp VEYUwNtQOCBS6+4mgWQPLA1FluYyaoVDWWQHQQW+FHOjrDUQT3nuz1Ggj8YvAsaR44MM 4csg== X-Gm-Message-State: AOAM532Eaeo7pN9fYk2QlRlYwF8EBYMEYR9i1ThMfACbO2kK+oWwWULU z/MC2r2nHa/Z+7WqFJ1VV2qsg0eR2zKRtpSa1x+EmzIZkxI= X-Google-Smtp-Source: ABdhPJypLT/H+OLV2pMCqiP7oEmFXo7990tmKDE8c0vFBeYcZ+uipyWR7LZuo8oIeZ6JUleGjKWAYr/OUWntwlyq5bo= X-Received: by 2002:ab0:3a92:: with SMTP id r18mr759819uaw.42.1603140331614; Mon, 19 Oct 2020 13:45:31 -0700 (PDT) MIME-Version: 1.0 References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> <20201009154454.GA1050533@hephaistos.amsuess.com> <809D1CE3-A75E-4871-9E1D-48260E787762@ericsson.com> In-Reply-To: From: Daniel Migault Date: Mon, 19 Oct 2020 16:45:20 -0400 Message-ID: To: Francesca Palombini Cc: =?UTF-8?Q?Christian_Ams=C3=BCss?= , "draft-ietf-ace-oscore-profile@ietf.org" , Ace Wg Content-Type: multipart/alternative; boundary="000000000000fdb73f05b20c313d" Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2020 20:45:34 -0000 --000000000000fdb73f05b20c313d Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks Francesca for the reply. Other members of the WG, if you have an opinion, please let the WG know asap. We set October 20 to get comments on which path to take. Yours, Daniel On Mon, Oct 19, 2020 at 11:52 AM Francesca Palombini wrote: > Hi Christian, Daniel, > > Daniel: I agree that what you describe is the best way forward. Once the > PR regarding the negotiation of Ids is merged, I can only see a minor > addition to the draft, to clarify what Christian has brought up. By the e= nd > of this week we should have Christian's comment implemented as well. Afte= r > that, we're ready for another round of reviews, and I think a WGLC is > warranted. > > Christian, let us know if there is anything else except some more > considerations covering what you are saying. G=C3=B6ran summarized it wel= l, but > basically no, there is no particular benefit. The sentence was added as t= he > response from a review comment, but it seems like a good idea to add more > context to it. > > Thanks, > Francesca > > =EF=BB=BFOn 15/10/2020, 20:01, "G=C3=B6ran Selander" > wrote: > > Hi Christian, > > The purpose of the update was to clarify that Appendix B.2 of RFC 861= 3 > could be used in conjunction with the ACE OSCORE profile. But as you poin= t > out, the use of B.2 would need to be understood between the client and > server beforehand. There are slight differences: With B.2 there is no nee= d > to transport the access token again. And B.2 can be triggered by the > (resource) server, if it understands that it does not have the right > context (which can happen even if there is no ID context in the request). > Just using the ACE OSCORE profile, the client would need to understand th= at > the context is lost and run the protocol again. So, there is a difference > but essentially the same functionality can be obtained. > > Would it be sufficient to clarify the differences as above to address > your comment? > > Thanks, > G=C3=B6ran > > > On 2020-10-09, 17:45, "Christian Ams=C3=BCss" > wrote: > > Hello Francesca, hello ACE group, > > On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini > wrote: > > - clarified that Appendix B.2 of OSCORE can be used with this > profile, > > and what implementers need to think about if they do. > > I understand B.2 to be something that the involved parties need t= o > agree > on beforehand; after all, the ID context may be something the > server > relies on (at least for the initial attempt) to find the right ke= y, > especially when multiple AS are involved. (For example, the RS > could > have an agreement that the AS may issue any KID as long as they > use a > particular ID context). If the server expects B.2 to happen > (which, as > it is put now, it can as long as it supports it in general), it > needs to > shard its KID space for the ASs it uses. (Generally, B.2 is > mutually > exclusive with ID contexts's use of namespacing KIDs). > > Is the expectation that clients that do not anticipate B.2 by the > time > they are configured with their AS just don't offer B.2 to their > peers? > > Given B.2 is in its current form client-initiated only (AFAIR we > had > versions where ID1 could be empty in draft versions, but currentl= y > it > reads as client-initialized), does B.2 have any benefits for > ACE-OSCORE > clients? After all, they could just as well post the token with a > new > nonce1 to the same effect. > > Kind Regards > Christian > > -- > To use raw power is to make yourself infinitely vulnerable to > greater powers. > -- Bene Gesserit axiom > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --=20 Daniel Migault Ericsson --000000000000fdb73f05b20c313d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks Francesca for the reply. Other members of the WG, i= f you have an opinion, please let the WG know asap. We set October 20 to ge= t comments on which path to take.=C2=A0

Yours,=C2=A0
= Daniel

On Mon, Oct 19, 2020 at 11:52 AM Francesca Palombini <france= sca.palombini=3D40ericsson= .com@dmarc.ietf.org> wrote:
Hi Christian, Daniel,

Daniel: I agree that what you describe is the best way forward. Once the PR= regarding the negotiation of Ids is merged, I can only see a minor additio= n to the draft, to clarify what Christian has brought up. By the end of thi= s week we should have Christian's comment implemented as well. After th= at, we're ready for another round of reviews, and I think a WGLC is war= ranted.

Christian, let us know if there is anything else except some more considera= tions covering what you are saying. G=C3=B6ran summarized it well, but basi= cally no, there is no particular benefit. The sentence was added as the res= ponse from a review comment, but it seems like a good idea to add more cont= ext to it.

Thanks,
Francesca

=EF=BB=BFOn 15/10/2020, 20:01, "G=C3=B6ran Selander" <goran.selander@er= icsson.com> wrote:

=C2=A0 =C2=A0 Hi Christian,

=C2=A0 =C2=A0 The purpose of the update was to clarify that Appendix B.2 of= RFC 8613 could be used in conjunction with the ACE OSCORE profile. But as = you point out, the use of B.2 would need to be understood between the clien= t and server beforehand. There are slight differences: With B.2 there is no= need to transport the access token again. And B.2 can be triggered by the = (resource) server, if it understands that it does not have the right contex= t (which can happen even if there is no ID context in the request). Just us= ing the ACE OSCORE profile, the client would need to understand that the co= ntext is lost and run the protocol again. So, there is a difference but ess= entially the same functionality can be obtained.

=C2=A0 =C2=A0 Would it be sufficient to clarify the differences as above to= address your comment?

=C2=A0 =C2=A0 Thanks,
=C2=A0 =C2=A0 G=C3=B6ran


=C2=A0 =C2=A0 On 2020-10-09, 17:45, "Christian Ams=C3=BCss" <<= a href=3D"mailto:christian@amsuess.com" target=3D"_blank">christian@amsuess= .com> wrote:

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Hello Francesca, hello ACE group,

=C2=A0 =C2=A0 =C2=A0 =C2=A0 On Mon, Sep 21, 2020 at 01:48:33PM +0000, Franc= esca Palombini wrote:
=C2=A0 =C2=A0 =C2=A0 =C2=A0 > - clarified that Appendix B.2 of OSCORE ca= n be used with this profile,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 > and what implementers need to think about = if they do.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 I understand B.2 to be something that the invol= ved parties need to agree
=C2=A0 =C2=A0 =C2=A0 =C2=A0 on beforehand; after all, the ID context may be= something the server
=C2=A0 =C2=A0 =C2=A0 =C2=A0 relies on (at least for the initial attempt) to= find the right key,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 especially when multiple AS are involved. (For = example, the RS could
=C2=A0 =C2=A0 =C2=A0 =C2=A0 have an agreement that the AS may issue any KID= as long as they use a
=C2=A0 =C2=A0 =C2=A0 =C2=A0 particular ID context). If the server expects B= .2 to happen (which, as
=C2=A0 =C2=A0 =C2=A0 =C2=A0 it is put now, it can as long as it supports it= in general), it needs to
=C2=A0 =C2=A0 =C2=A0 =C2=A0 shard its KID space for the ASs it uses. (Gener= ally, B.2 is mutually
=C2=A0 =C2=A0 =C2=A0 =C2=A0 exclusive with ID contexts's use of namespa= cing KIDs).

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Is the expectation that clients that do not ant= icipate B.2 by the time
=C2=A0 =C2=A0 =C2=A0 =C2=A0 they are configured with their AS just don'= t offer B.2 to their peers?

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Given B.2 is in its current form client-initiat= ed only (AFAIR we had
=C2=A0 =C2=A0 =C2=A0 =C2=A0 versions where ID1 could be empty in draft vers= ions, but currently it
=C2=A0 =C2=A0 =C2=A0 =C2=A0 reads as client-initialized), does B.2 have any= benefits for ACE-OSCORE
=C2=A0 =C2=A0 =C2=A0 =C2=A0 clients? After all, they could just as well pos= t the token with a new
=C2=A0 =C2=A0 =C2=A0 =C2=A0 nonce1 to the same effect.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Kind Regards
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Christian

=C2=A0 =C2=A0 =C2=A0 =C2=A0 --
=C2=A0 =C2=A0 =C2=A0 =C2=A0 To use raw power is to make yourself infinitely= vulnerable to greater powers.
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- Bene Gesserit axiom


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--
Daniel Migault
Ericsson
--000000000000fdb73f05b20c313d-- From nobody Fri Oct 23 14:20:45 2020 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3234D3A1410; Fri, 23 Oct 2020 14:16:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: kaduk@mit.edu, ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160348778118.5087.8588295500668894952@ietfa.amsl.com> Date: Fri, 23 Oct 2020 14:16:21 -0700 Archived-At: Subject: [Ace] ace - Requested session has been scheduled for IETF 109 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 21:16:25 -0000 Dear Jim Schaad, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. ace Session 1 (2:00 requested) Wednesday, 18 November 2020, Session I 1200-1400 Room Name: Room 7 size: 507 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/109/sessions/ace.ics Request Information: --------------------------------------------------------- Working Group Name: Authentication and Authorization for Constrained Environments Area Name: Security Area Session Requester: Jim Schaad Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 15 Conflicts to Avoid: Chair Conflict: lamps calext drip cbor cose Technology Overlap: lake tls oauth t2trg suit core saag rats cfrg Key Participant Conflict: add anima homenet ipsecme dprive People who must be present: Daniel Migault Jim Schaad Benjamin Kaduk Francesca Palombini Marco Tiloca Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 23 14:56:06 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95DFD3A096B; Fri, 23 Oct 2020 14:56:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KS5aT5_cwUgt; Fri, 23 Oct 2020 14:55:59 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDE2B3A0969; Fri, 23 Oct 2020 14:55:58 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CHyj80bmnzyQH; Fri, 23 Oct 2020 23:55:56 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 625182955.352785-88957ab6bab68974b1cdf3ee5b0db56d Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Date: Fri, 23 Oct 2020 23:55:55 +0200 Message-Id: <15D90A88-9959-4417-8F87-1C8A35E9DC0A@tzi.org> To: Ace Wg , "core@ietf.org WG (core@ietf.org)" , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF109: "FINAL" AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 21:56:02 -0000 Here is my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF109. Remember that further agenda changes can still happen. Very little has changed with respect to the draft agenda. WEBTRANS does meet, and CFRG and IRTFOPEN have been moved around (CFRG now on top of CORE, unfortunately). All times *on my agenda* are in UTC (the default page is UTC+0700). https://datatracker.ietf.org/meeting/agenda-utc might be handy. Note that both EU and US are on winter time (standard time) then. Gr=C3=BC=C3=9Fe, Carsten MONDAY, November 9, 2020 0500-0700 Hackathon Kickoff Rm 1 GEN hackathon Hackathon FRIDAY, November 13, 2020 0500-0700 Hackathon Closing Rm 1 GEN hackathon Hackathon MONDAY, November 16, 2020 0500-0700 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 3 IRTF qirg Quantum Internet Research Group Rm 5 RTG raw Reliable and Available Wireless WG Rm 6 SEC *** lake Lightweight Authenticated Key Exchange WG 0730-0830 Session II Rm 2 INT add Adaptive DNS Discovery WG Rm 3 IRTF maprg Measurement and Analysis for Protocols Rm 6 SEC *** cose CBOR Object Signing and Encryption WG 0900-1100 Session III Rm 1 ART jsonpath JSON Path WG Rm 2 ART webtrans WebTransport WG Rm 7 SEC secdispatch Security Dispatch WG Rm 8 TSV tsvwg Transport Area Working Group WG TUESDAY, November 17, 2020 0500-0700 Session I Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 3 IRTF cfrg Crypto Forum Rm 7 SEC gnap Grant Negotiation and Authorization Protocol WG 0730-0830 Session II Rm 5 RTG babel Babel routing protocol WG Rm 6 SEC tls Transport Layer Security WG 0900-1100 Session III Rm 1 ART *** asdf A Semantic Definition Format for Data and = Interactions of Things WG Rm 5 RTG apn Application-aware Networking BOF Rm 8 SEC *** rats Remote ATtestation ProcedureS WG WEDNESDAY, November 18, 2020 0500-0700 Session I Rm 3 INT madinas MAC Address Device Identification for Network = and Application Services BOF Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 7 SEC *** ace Authentication and Authorization for Constrained = Environments WG Rm 8 TSV quic QUIC WG 0730-0830 Session II Rm 3 INT *** 6lo IPv6 over Networks of Resource-constrained Nodes = WG Rm 4 INT *** drip Drone Remote ID Protocol WG Rm 7 SEC *** teep Trusted Execution Environment Provisioning WG Rm 8 TSV tsvwg Transport Area Working Group WG THURSDAY, November 19, 2020 0500-0700 Session I Rm 3 IRTF coinrg Computing in the Network Research Group Rm 7 SEC saag Security Area Open Meeting 0730-0830 Session II Rm 1 ART *** cbor Concise Binary Object Representation Maintenance = and Extensions WG Rm 2 INT intarea Internet Area Working Group WG Rm 3 RTG detnet Deterministic Networking WG Rm 5 SEC acme Automated Certificate Management Environment WG 0900-1100 Session III Rm 4 OPS v6ops IPv6 Operations WG Rm 6 RTG *** roll Routing Over Low power and Lossy networks WG Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG FRIDAY, November 20, 2020 0500-0700 Session I Rm 2 INT add Adaptive DNS Discovery WG Rm 6 RTG rift Routing In Fat Trees WG Rm 7 SEC emu EAP Method Update WG 0730-0830 Session II Rm 1 ART httpapi Building Blocks for HTTP APIs WG Rm 2 INT *** lwig Light-Weight Implementation Guidance WG Rm 3 OPS anima Autonomic Networking Integrated Model and = Approach WG Rm 6 SEC *** suit Software Updates for Internet of Things WG Rm 7 TSV tsvarea Transport Area Open Meeting 0900-1100 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 3 INT 6man IPv6 Maintenance WG Rm 5 IRTF irtfopen IRTF Open Meeting Rm 8 TSV masque Multiplexed Application Substrate over QUIC = Encryption WG From nobody Fri Oct 23 16:58:24 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 333EA3A0ADD; Fri, 23 Oct 2020 16:58:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3kXsKSd_PLwl; Fri, 23 Oct 2020 16:58:21 -0700 (PDT) Received: from mail-vs1-xe2c.google.com (mail-vs1-xe2c.google.com [IPv6:2607:f8b0:4864:20::e2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D81D3A0989; Fri, 23 Oct 2020 16:58:21 -0700 (PDT) Received: by mail-vs1-xe2c.google.com with SMTP id b129so1818509vsb.1; Fri, 23 Oct 2020 16:58:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Gdl7bdo1qBZmTwHjEn1LarHxZTgOLtR76Z95sXsZ1Fk=; b=mmS0KPDytmQ426YhbBk498ysL/Rwd51FQoZjqhaQop0M9ppYky04o3io85ZJDDzDyq LO3FFhyOZVPNv69cX7ZC8UT7QpJzRG5RYeslmv5L1wGEn0IVSWPhfsFQ8/i8JBPdm5WQ zxqeWxDYDcWEV4t+OIaDC4uyC/QSRM90kbQSpplN/jp883GAxwgRlYOxeIYQUsivi38y Ov9kv+W33PVLxI9uj0lOkov8UUOr1N9ih/Uu8WABVGxfHVIVfP0CWwRuxpUVwV92GyvN GQfa6THToxdqCfQFqrfaNnZsA+psGp/v69ZFAcLsQKKcJljxL3og5UFuDTFt0khpEIHb Kk3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Gdl7bdo1qBZmTwHjEn1LarHxZTgOLtR76Z95sXsZ1Fk=; b=k+zJ+had3HRH3IU4XWl+Sy5GGjLD3upYoJjm2Gy3KYeGA/2qRaz5bIiyDG7icuEowd Lg/Q69RxnSRvLl1m9oXz6C86z8OXzEeLS8T/a9tqO6z/H+h/p24VVllN8BpOUUsZOzH9 ISNUAoWE2wj5ygfyWAGYoQ9J9vyHh7nAZvZVpA84fOBcWJU30K5P40MsSawblK76+Mpa VHAZXflla8kLC+iCCyYXQpW0oxFW91KNv9wvEsoMVyBd7EaGvbu5jbGDGhwDlUTvM1hc PWnRVE5dPRVYBV2i6FaJ4x7UWPqQZkdGOYjbgdLzYgg+zhG4H6Kh+X/g6d8HnCaMatkL /0/A== X-Gm-Message-State: AOAM531t31pk5B1MCLIjNnFZspMWS/dpquJ310vfzIwFEN9/SUORJ67M JWydOCGJyfBsozNj/ZnYd8LimA6tMJuSsIPhe2Ds4E2v46k= X-Google-Smtp-Source: ABdhPJwq4o1NUv8K9W5hct/SRDJPgqdmSnevq5yUhqfOsTUs1GIBVQ6JCOyWtrIluTOvMRFE0FoB0t6BBniFiG0Bm0A= X-Received: by 2002:a67:1e02:: with SMTP id e2mr4886937vse.40.1603497500188; Fri, 23 Oct 2020 16:58:20 -0700 (PDT) MIME-Version: 1.0 References: <2D021116-D240-4EE8-9223-83E9F9D4A4EB@ericsson.com> <20201009154454.GA1050533@hephaistos.amsuess.com> <809D1CE3-A75E-4871-9E1D-48260E787762@ericsson.com> In-Reply-To: From: Daniel Migault Date: Fri, 23 Oct 2020 19:58:09 -0400 Message-ID: To: Francesca Palombini Cc: =?UTF-8?Q?Christian_Ams=C3=BCss?= , "draft-ietf-ace-oscore-profile@ietf.org" , Ace Wg Content-Type: multipart/alternative; boundary="000000000000e5a1b205b25f5aa9" Archived-At: Subject: Re: [Ace] OSCORE Profile status update and way forward X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 23:58:23 -0000 --000000000000e5a1b205b25f5aa9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I am not hearing anyone opposing the proposed way to move forward. Once we will have the update from Francesca, we will be able to start a WGLC. On the other hand, we will need reviews to move the document forward, so please remain committed for the last miles! Yours, Daniel On Mon, Oct 19, 2020 at 4:45 PM Daniel Migault wrote: > Thanks Francesca for the reply. Other members of the WG, if you have an > opinion, please let the WG know asap. We set October 20 to get comments o= n > which path to take. > > Yours, > Daniel > > On Mon, Oct 19, 2020 at 11:52 AM Francesca Palombini 40ericsson.com@dmarc.ietf.org> wrote: > >> Hi Christian, Daniel, >> >> Daniel: I agree that what you describe is the best way forward. Once the >> PR regarding the negotiation of Ids is merged, I can only see a minor >> addition to the draft, to clarify what Christian has brought up. By the = end >> of this week we should have Christian's comment implemented as well. Aft= er >> that, we're ready for another round of reviews, and I think a WGLC is >> warranted. >> >> Christian, let us know if there is anything else except some more >> considerations covering what you are saying. G=C3=B6ran summarized it we= ll, but >> basically no, there is no particular benefit. The sentence was added as = the >> response from a review comment, but it seems like a good idea to add mor= e >> context to it. >> >> Thanks, >> Francesca >> >> =EF=BB=BFOn 15/10/2020, 20:01, "G=C3=B6ran Selander" >> wrote: >> >> Hi Christian, >> >> The purpose of the update was to clarify that Appendix B.2 of RFC >> 8613 could be used in conjunction with the ACE OSCORE profile. But as yo= u >> point out, the use of B.2 would need to be understood between the client >> and server beforehand. There are slight differences: With B.2 there is n= o >> need to transport the access token again. And B.2 can be triggered by th= e >> (resource) server, if it understands that it does not have the right >> context (which can happen even if there is no ID context in the request)= . >> Just using the ACE OSCORE profile, the client would need to understand t= hat >> the context is lost and run the protocol again. So, there is a differenc= e >> but essentially the same functionality can be obtained. >> >> Would it be sufficient to clarify the differences as above to addres= s >> your comment? >> >> Thanks, >> G=C3=B6ran >> >> >> On 2020-10-09, 17:45, "Christian Ams=C3=BCss" >> wrote: >> >> Hello Francesca, hello ACE group, >> >> On Mon, Sep 21, 2020 at 01:48:33PM +0000, Francesca Palombini >> wrote: >> > - clarified that Appendix B.2 of OSCORE can be used with this >> profile, >> > and what implementers need to think about if they do. >> >> I understand B.2 to be something that the involved parties need >> to agree >> on beforehand; after all, the ID context may be something the >> server >> relies on (at least for the initial attempt) to find the right >> key, >> especially when multiple AS are involved. (For example, the RS >> could >> have an agreement that the AS may issue any KID as long as they >> use a >> particular ID context). If the server expects B.2 to happen >> (which, as >> it is put now, it can as long as it supports it in general), it >> needs to >> shard its KID space for the ASs it uses. (Generally, B.2 is >> mutually >> exclusive with ID contexts's use of namespacing KIDs). >> >> Is the expectation that clients that do not anticipate B.2 by th= e >> time >> they are configured with their AS just don't offer B.2 to their >> peers? >> >> Given B.2 is in its current form client-initiated only (AFAIR we >> had >> versions where ID1 could be empty in draft versions, but >> currently it >> reads as client-initialized), does B.2 have any benefits for >> ACE-OSCORE >> clients? After all, they could just as well post the token with = a >> new >> nonce1 to the same effect. >> >> Kind Regards >> Christian >> >> -- >> To use raw power is to make yourself infinitely vulnerable to >> greater powers. >> -- Bene Gesserit axiom >> >> >> _______________________________________________ >> Ace mailing list >> Ace@ietf.org >> https://www.ietf.org/mailman/listinfo/ace >> > > > -- > Daniel Migault > Ericsson > --=20 Daniel Migault Ericsson --000000000000e5a1b205b25f5aa9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I am not hearing anyone opposing the proposed way to move = forward. Once we will have the update from Francesca, we will be able to st= art a WGLC. On the other hand, we will need reviews to move the document fo= rward, so please remain committed for the last miles!

Yo= urs,=C2=A0
Daniel

On Mon, Oct 19, 2020 at 4:45 PM Daniel Mig= ault <mglt.ietf@gmail.com>= wrote:
Thanks Francesca for the reply. Other members of the WG, if you ha= ve an opinion, please let the WG know asap. We set October 20 to get commen= ts on which path to take.=C2=A0

Yours,=C2=A0
Daniel

On Mon, Oct 19, 2020 at 11:52 AM Francesca Palombini <francesca.palo= mbini=3D= 40ericsson.com@dmarc.ietf.org> wrote:
Hi Christian, Daniel,

Daniel: I agree that what you describe is the best way forward. Once the PR= regarding the negotiation of Ids is merged, I can only see a minor additio= n to the draft, to clarify what Christian has brought up. By the end of thi= s week we should have Christian's comment implemented as well. After th= at, we're ready for another round of reviews, and I think a WGLC is war= ranted.

Christian, let us know if there is anything else except some more considera= tions covering what you are saying. G=C3=B6ran summarized it well, but basi= cally no, there is no particular benefit. The sentence was added as the res= ponse from a review comment, but it seems like a good idea to add more cont= ext to it.

Thanks,
Francesca

=EF=BB=BFOn 15/10/2020, 20:01, "G=C3=B6ran Selander" <goran.selander@er= icsson.com> wrote:

=C2=A0 =C2=A0 Hi Christian,

=C2=A0 =C2=A0 The purpose of the update was to clarify that Appendix B.2 of= RFC 8613 could be used in conjunction with the ACE OSCORE profile. But as = you point out, the use of B.2 would need to be understood between the clien= t and server beforehand. There are slight differences: With B.2 there is no= need to transport the access token again. And B.2 can be triggered by the = (resource) server, if it understands that it does not have the right contex= t (which can happen even if there is no ID context in the request). Just us= ing the ACE OSCORE profile, the client would need to understand that the co= ntext is lost and run the protocol again. So, there is a difference but ess= entially the same functionality can be obtained.

=C2=A0 =C2=A0 Would it be sufficient to clarify the differences as above to= address your comment?

=C2=A0 =C2=A0 Thanks,
=C2=A0 =C2=A0 G=C3=B6ran


=C2=A0 =C2=A0 On 2020-10-09, 17:45, "Christian Ams=C3=BCss" <<= a href=3D"mailto:christian@amsuess.com" target=3D"_blank">christian@amsuess= .com> wrote:

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Hello Francesca, hello ACE group,

=C2=A0 =C2=A0 =C2=A0 =C2=A0 On Mon, Sep 21, 2020 at 01:48:33PM +0000, Franc= esca Palombini wrote:
=C2=A0 =C2=A0 =C2=A0 =C2=A0 > - clarified that Appendix B.2 of OSCORE ca= n be used with this profile,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 > and what implementers need to think about = if they do.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 I understand B.2 to be something that the invol= ved parties need to agree
=C2=A0 =C2=A0 =C2=A0 =C2=A0 on beforehand; after all, the ID context may be= something the server
=C2=A0 =C2=A0 =C2=A0 =C2=A0 relies on (at least for the initial attempt) to= find the right key,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 especially when multiple AS are involved. (For = example, the RS could
=C2=A0 =C2=A0 =C2=A0 =C2=A0 have an agreement that the AS may issue any KID= as long as they use a
=C2=A0 =C2=A0 =C2=A0 =C2=A0 particular ID context). If the server expects B= .2 to happen (which, as
=C2=A0 =C2=A0 =C2=A0 =C2=A0 it is put now, it can as long as it supports it= in general), it needs to
=C2=A0 =C2=A0 =C2=A0 =C2=A0 shard its KID space for the ASs it uses. (Gener= ally, B.2 is mutually
=C2=A0 =C2=A0 =C2=A0 =C2=A0 exclusive with ID contexts's use of namespa= cing KIDs).

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Is the expectation that clients that do not ant= icipate B.2 by the time
=C2=A0 =C2=A0 =C2=A0 =C2=A0 they are configured with their AS just don'= t offer B.2 to their peers?

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Given B.2 is in its current form client-initiat= ed only (AFAIR we had
=C2=A0 =C2=A0 =C2=A0 =C2=A0 versions where ID1 could be empty in draft vers= ions, but currently it
=C2=A0 =C2=A0 =C2=A0 =C2=A0 reads as client-initialized), does B.2 have any= benefits for ACE-OSCORE
=C2=A0 =C2=A0 =C2=A0 =C2=A0 clients? After all, they could just as well pos= t the token with a new
=C2=A0 =C2=A0 =C2=A0 =C2=A0 nonce1 to the same effect.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 Kind Regards
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Christian

=C2=A0 =C2=A0 =C2=A0 =C2=A0 --
=C2=A0 =C2=A0 =C2=A0 =C2=A0 To use raw power is to make yourself infinitely= vulnerable to greater powers.
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 -- Bene Gesserit axiom


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--
Daniel Migault
Ericsson


--
Daniel Migault
Ericsson
--000000000000e5a1b205b25f5aa9-- From nobody Tue Oct 27 09:14:12 2020 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A1A6B3A1045; Tue, 27 Oct 2020 09:14:10 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.21.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <160381525062.27226.4156909974711721360@ietfa.amsl.com> Date: Tue, 27 Oct 2020 09:14:10 -0700 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oscore-profile-13.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 16:14:11 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : OSCORE Profile of the Authentication and Authorization for Constrained Environments Framework Authors : Francesca Palombini Ludwig Seitz Göran Selander Martin Gunnarsson Filename : draft-ietf-ace-oscore-profile-13.txt Pages : 32 Date : 2020-10-27 Abstract: This memo specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. It utilizes Object Security for Constrained RESTful Environments (OSCORE) to provide communication security and proof-of-possession for a key owned by the client and bound to an OAuth 2.0 access token. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oscore-profile/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oscore-profile-13 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oscore-profile-13 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oscore-profile-13 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Oct 27 09:18:14 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EC953A0D06 for ; Tue, 27 Oct 2020 09:18:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cAT1W--dx-lS for ; Tue, 27 Oct 2020 09:18:11 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2060.outbound.protection.outlook.com [40.107.22.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 565E33A0D49 for ; Tue, 27 Oct 2020 09:18:11 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mhwwUF/aiYjbvBa9sX2d+YpQ5/BtyRqXTt23o9JSBwafvEHoF+mzH1FN3uez2BEyTGHaHzPnr+M2QSBILsU73yH4nq61H7p5vzpz7mYjkh8nqK+kNpLxPum64oKdCZXaFLpUJzydR7Mtl3MY7hSqIv63B0FjZtYTiKetBdZOU7Rzbnakp9cIsK4M7BilO7uBpel9Tv3DakJ0ThsJyR399ySSrTr2gKg4xGlPFrMZOSXKMPof3h5+V0AMaSeQDOykgN+YAdvqiSK+uiocKw5Fg2TTD0MSo0+SQ5bfR5Lukx4/NUKYrS9yXbI3leByCywtCMktsZC52Zr91VEnDSaPSQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hWQvr/K0CWM3QGlVgS6+IWe17v/jJfaftKIlLt0P15E=; b=KxGnBfjh6oGqvCj5gRfJZpet5q67UDo1gfub4Y+h2W/haTmIQPGl+4e9ViWzQrk45S53RDwK1im1TJ/itlR7Tvu7bv5PjYLRjVbqvVKBYVwZowSozQ5EcKhShmrzyPH0mVNOa/HyenZxXkvTW4r7kpQmQVmRfrymtjUncXPF7uKpgL7+kM/q7t6tKAuS9b8e6XONYYRAZn6CQ0lc+UsPVuqRLynmrxrwhrMCpUDHbB4FoxFq9+V0bDFVRui2s9hPNGa0YYLBSQ9GJBiEbPIdB3QEm83XdRMVotevs7vKixDneMtQUEQOW1H/EaXDHHuCDHc1SlopcmI2MwlBQTsqQw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hWQvr/K0CWM3QGlVgS6+IWe17v/jJfaftKIlLt0P15E=; b=dCxXEOsvioHKvlMLZm/uaiCXKW35DcehWvVmYJqQHkd5dYOAudypue+Hw4IIOstpC8Ny4ZMJKaHVbREv90r4UfxUW+Lhq27E+S7WR9kA1nOKaiVaS/paNIdfH3F7NTZWDkvtvfjt9XKTr+iBI4/oTC3OZquC+9Je4BLIRHHuHQk= Received: from VI1PR07MB4477.eurprd07.prod.outlook.com (2603:10a6:803:74::33) by VI1PR07MB5198.eurprd07.prod.outlook.com (2603:10a6:803:a8::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.7; Tue, 27 Oct 2020 16:18:07 +0000 Received: from VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::d9ad:72f6:f14b:40ef]) by VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::d9ad:72f6:f14b:40ef%7]) with mapi id 15.20.3499.018; Tue, 27 Oct 2020 16:18:07 +0000 From: Francesca Palombini To: "ace@ietf.org" Thread-Topic: [Ace] I-D Action: draft-ietf-ace-oscore-profile-13.txt Thread-Index: AQHWrHw8H6/Dedysj02Rsmt3b9Gi/amrsUwA Date: Tue, 27 Oct 2020 16:18:07 +0000 Message-ID: <8AFADB71-59EC-4351-AEFD-6FA9C0B6771A@ericsson.com> References: <160381525062.27226.4156909974711721360@ietfa.amsl.com> In-Reply-To: <160381525062.27226.4156909974711721360@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [158.174.219.143] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cf1a0367-aab2-42ca-fc62-08d87a93e3f6 x-ms-traffictypediagnostic: VI1PR07MB5198: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 1nc6ipKqDv7K6bEvmqBE8d/646bvNuDmoo+OOzvrUhE7JZM1JIr5FeuN+s7euHAeL/qKDGAI27h0zA/A4dW1GrA8zvIgRPL/0QcNo3vVGK1Z/2MlSyL0fIdKI46ebzlRwnFHYwo9hZLWhJSzOvQ3So5x41lyXo2YwjWi/m+XUNuh4UwF1LBzNDXy1i9uZc5n6ZMOuPHchmlKKB5TjujS1pwKMIoKN9RhQHqe1WUKph0Qzx1EnkNL+lfF7R7cLJhZJnq6eORzQ87WH2A4rQBVl+/1xrOkeVP1LL1BL2m7Jb2HOmDHCkfPlhCyZvuoDCbW9izMIg3W9dN6Z3PGIC/tMfvZiQLfeuQ0f00xwnPK3AovqvSf8tVMUmWoOlFv89cC4Fs9zLjzYa3CberFbvj2/Q== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB4477.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(396003)(366004)(39860400002)(346002)(136003)(186003)(2616005)(8676002)(33656002)(66574015)(44832011)(478600001)(26005)(6916009)(86362001)(83380400001)(36756003)(6486002)(4001150100001)(6506007)(6512007)(91956017)(66476007)(316002)(76116006)(966005)(2906002)(71200400001)(64756008)(66946007)(66446008)(66556008)(8936002)(5660300002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <8E54AD64C74E8942ACD63F48AC9779CE@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: VI1PR07MB4477.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cf1a0367-aab2-42ca-fc62-08d87a93e3f6 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2020 16:18:07.4212 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: PVUSMsrTg7FOn/fN6IGYW+9bh1/NQElxszL2jb6BzkB71ymeqVtEMX1QNTa/KmFiJczoPr6nRUS7fFbcMvrgJnWGsoynlGjDJjKsAbEoi3pRv/sMqiGxVoOB+alyI1Ne X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5198 Archived-At: Subject: Re: [Ace] I-D Action: draft-ietf-ace-oscore-profile-13.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 16:18:13 -0000 SGkgYWxsLA0KDQpUaGlzIGlzIHRoZSB1cGRhdGUgaW1wbGVtZW50aW5nIHRoZSBJRCBuZWdvdGlh dGlvbiwgYW5kIHRoZSBtaW5vciBjbGFyaWZpY2F0aW9uIGNvbmNlcm5pbmcgYXBwZW5kaXggQi4y IG9mIE9TQ09SRSwgYXMgYnJvdWdodCB1cCBieSBDaHJpc3RpYW4uDQoNCkFueSBmZWVkYmFjayBp cyB3ZWxjb21lLg0KVGhhbmtzLA0KRnJhbmNlc2NhDQoNCu+7v09uIDI3LzEwLzIwMjAsIDE3OjE0 LCAiQWNlIG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciIDxhY2UtYm91bmNl c0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPiB3cm90ZToN Cg0KDQogICAgQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9uLWxp bmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KICAgIFRoaXMgZHJhZnQgaXMgYSB3b3Jr IGl0ZW0gb2YgdGhlIEF1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIGZvciBDb25zdHJh aW5lZCBFbnZpcm9ubWVudHMgV0cgb2YgdGhlIElFVEYuDQoNCiAgICAgICAgICAgIFRpdGxlICAg ICAgICAgICA6IE9TQ09SRSBQcm9maWxlIG9mIHRoZSBBdXRoZW50aWNhdGlvbiBhbmQgQXV0aG9y aXphdGlvbiBmb3IgQ29uc3RyYWluZWQgRW52aXJvbm1lbnRzIEZyYW1ld29yaw0KICAgICAgICAg ICAgQXV0aG9ycyAgICAgICAgIDogRnJhbmNlc2NhIFBhbG9tYmluaQ0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgTHVkd2lnIFNlaXR6DQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBHw7ZyYW4gU2VsYW5kZXINCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE1hcnRpbiBH dW5uYXJzc29uDQogICAgCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtYWNlLW9zY29yZS1w cm9maWxlLTEzLnR4dA0KICAgIAlQYWdlcyAgICAgICAgICAgOiAzMg0KICAgIAlEYXRlICAgICAg ICAgICAgOiAyMDIwLTEwLTI3DQoNCiAgICBBYnN0cmFjdDoNCiAgICAgICBUaGlzIG1lbW8gc3Bl Y2lmaWVzIGEgcHJvZmlsZSBmb3IgdGhlIEF1dGhlbnRpY2F0aW9uIGFuZA0KICAgICAgIEF1dGhv cml6YXRpb24gZm9yIENvbnN0cmFpbmVkIEVudmlyb25tZW50cyAoQUNFKSBmcmFtZXdvcmsuICBJ dA0KICAgICAgIHV0aWxpemVzIE9iamVjdCBTZWN1cml0eSBmb3IgQ29uc3RyYWluZWQgUkVTVGZ1 bCBFbnZpcm9ubWVudHMNCiAgICAgICAoT1NDT1JFKSB0byBwcm92aWRlIGNvbW11bmljYXRpb24g c2VjdXJpdHkgYW5kIHByb29mLW9mLXBvc3Nlc3Npb24NCiAgICAgICBmb3IgYSBrZXkgb3duZWQg YnkgdGhlIGNsaWVudCBhbmQgYm91bmQgdG8gYW4gT0F1dGggMi4wIGFjY2VzcyB0b2tlbi4NCg0K DQogICAgVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6 DQogICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1hY2Utb3Nj b3JlLXByb2ZpbGUvDQoNCiAgICBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFp bGFibGUgYXQ6DQogICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtYWNl LW9zY29yZS1wcm9maWxlLTEzDQogICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv aHRtbC9kcmFmdC1pZXRmLWFjZS1vc2NvcmUtcHJvZmlsZS0xMw0KDQogICAgQSBkaWZmIGZyb20g dGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxlIGF0Og0KICAgIGh0dHBzOi8vd3d3Lmll dGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLWFjZS1vc2NvcmUtcHJvZmlsZS0xMw0KDQoN CiAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJv bSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQogICAgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24g YW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCg0KICAgIEludGVybmV0 LURyYWZ0cyBhcmUgYWxzbyBhdmFpbGFibGUgYnkgYW5vbnltb3VzIEZUUCBhdDoNCiAgICBmdHA6 Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KDQoNCiAgICBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIEFjZSBtYWlsaW5nIGxpc3QNCiAg ICBBY2VAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2FjZQ0KDQo= From nobody Thu Oct 29 01:28:28 2020 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id F1CCE3A0BAD; Thu, 29 Oct 2020 01:28:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.21.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <160396010191.13212.2310366557579121171@ietfa.amsl.com> Date: Thu, 29 Oct 2020 01:28:21 -0700 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-dtls-authorize-14.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 08:28:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE) Authors : Stefanie Gerdes Olaf Bergmann Carsten Bormann Göran Selander Ludwig Seitz Filename : draft-ietf-ace-dtls-authorize-14.txt Pages : 27 Date : 2020-10-29 Abstract: This specification defines a profile of the ACE framework that allows constrained servers to delegate client authentication and authorization. The protocol relies on DTLS version 1.2 for communication security between entities in a constrained network using either raw public keys or pre-shared keys. A resource- constrained server can use this protocol to delegate management of authorization information to a trusted host with less severe limitations regarding processing power and memory. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-dtls-authorize/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-dtls-authorize-14 https://datatracker.ietf.org/doc/html/draft-ietf-ace-dtls-authorize-14 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-dtls-authorize-14 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 29 01:33:26 2020 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAA423A0BE4 for ; Thu, 29 Oct 2020 01:33:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O0qMfWw8VncT for ; Thu, 29 Oct 2020 01:33:23 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24E613A0BE3 for ; Thu, 29 Oct 2020 01:33:22 -0700 (PDT) Received: from wangari.tzi.org (p508a4e5d.dip0.t-ipconnect.de [80.138.78.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CMJcK0Mgvzysx for ; Thu, 29 Oct 2020 09:33:21 +0100 (CET) From: Olaf Bergmann To: ace@ietf.org References: <160396010191.13212.2310366557579121171@ietfa.amsl.com> Date: Thu, 29 Oct 2020 09:33:20 +0100 In-Reply-To: <160396010191.13212.2310366557579121171@ietfa.amsl.com> (internet-drafts@ietf.org's message of "Thu, 29 Oct 2020 01:28:21 -0700") Message-ID: <87a6w5whwv.fsf@wangari> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Ace] I-D Action: draft-ietf-ace-dtls-authorize-14.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 08:33:26 -0000 Dear all, we have just submitted version 14 of the ACE DTLS profile draft. This version resolves the final open issue from Paul's GenART review. Gr=C3=BC=C3=9Fe Olaf internet-drafts@ietf.org writes: > A New Internet-Draft is available from the on-line Internet-Drafts direct= ories. > This draft is a work item of the Authentication and Authorization for Con= strained Environments WG of the IETF. > > Title : Datagram Transport Layer Security (DTLS) Profil= e for Authentication and Authorization for Constrained Environments (ACE) > Authors : Stefanie Gerdes > Olaf Bergmann > Carsten Bormann > G=C3=B6ran Selander > Ludwig Seitz > Filename : draft-ietf-ace-dtls-authorize-14.txt > Pages : 27 > Date : 2020-10-29 > > Abstract: > This specification defines a profile of the ACE framework that allows > constrained servers to delegate client authentication and > authorization. The protocol relies on DTLS version 1.2 for > communication security between entities in a constrained network > using either raw public keys or pre-shared keys. A resource- > constrained server can use this protocol to delegate management of > authorization information to a trusted host with less severe > limitations regarding processing power and memory. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-ace-dtls-authorize/ > > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-ace-dtls-authorize-14 > https://datatracker.ietf.org/doc/html/draft-ietf-ace-dtls-authorize-14