From nobody Fri Mar 1 13:14:37 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DC335130EE7; Fri, 1 Mar 2019 13:10:05 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: rats@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.92.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155147460589.6101.9259506683315188951.idtracker@ietfa.amsl.com> Date: Fri, 01 Mar 2019 13:10:05 -0800 Archived-At: Subject: [Rats] rats - Requested session has been scheduled for IETF 104 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Mar 2019 21:10:18 -0000 Dear Liz Flynn, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. rats Session 1 (2:00 requested) Thursday, 28 March 2019, Afternoon Session II 1610-1810 Room Name: Grand Ballroom size: 250 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/104/sessions/rats.ics Request Information: --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Liz Flynn Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: People who must be present: Nancy Cam-Winget Roman Danyliw Benjamin Kaduk Resources Requested: Special Requests: Avoid SEC area conflicts. --------------------------------------------------------- From nobody Fri Mar 1 18:18:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCA4912D4EA; Fri, 1 Mar 2019 18:17:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TbuyjqtRoMfg; Fri, 1 Mar 2019 18:17:33 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D67E13108E; Fri, 1 Mar 2019 18:17:32 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id x222HN87009103; Sat, 2 Mar 2019 03:17:28 +0100 (CET) Received: from [192.168.217.106] (p54A6C2FE.dip0.t-ipconnect.de [84.166.194.254]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 44B90g24Tkz1Bp8; Sat, 2 Mar 2019 03:17:23 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 2 Mar 2019 03:17:20 +0100 Message-Id: <71380398-B9E0-48D4-BEFB-9EAC6C47FB82@tzi.org> To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, eat@ietf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [Rats] Constrained Node/Network Cluster @ IETF104: FINAL AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Mar 2019 02:17:46 -0000 Here is my usual eclectic condensed agenda based on the FINAL AGENDA for IETF104. Remember that, even though this will now go to the printers, there is still some potential for changes. The somewhat annoying coflicts cose/teep and lpwan/t2trg remain. I also don't like that I'll have to miss the cacao BOF (vs. core), dinrg/suit, coinrg/git. rats has been swapped against the paw/saag conflict. All times are CET (Central European Time) =3D=3D UTC +1 hours. Note = that there is no daylight saving time in effect at the time in Europe (this starts on the Sunday *after* IETF). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten FRIDAY, March 22, 2019 -- Fri 0930=E2=80=931830 T2TRG Work Meeting -- Istanbul room SATURDAY/SUNDAY, March 23/24. 2019 -- Hackathon (including various interops) (Grand Hilton Ballroom) -- Sun 1700-1900 Welcome Reception - Congress Hall 1/2 -- Sun 1800-2000 Hot RFC Lightning Talks - Congress Hall 3 MONDAY, March 25, 2019 0900-1100 Morning Session I Congress H 3 ART dispatch Dispatch WG - Joint with ARTAREA Congress H 2 INT 6man IPv6 Maintenance WG Congress H 1 IRTF pearg Privacy Enhancements and Assessments = Proposed Research Group Karlin 3 RTG bier Bit Indexed Explicit Replication WG 1120-1220 Morning Session II Congress H 3 INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Karlin 3 RTG bier Bit Indexed Explicit Replication WG Congress H 2 SEC tls Transport Layer Security WG Karlin 1/2 TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1350-1550 Afternoon Session I Karlin 1/2 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Congress H 2 IRTF irtfopen IRTF Open Meeting Congress H 3 SEC secdispatch Security Dispatch WG 1610-1810 Afternoon Session II Congress H 2 ART httpbis Hypertext Transfer Protocol WG Congress H 3 IAB smart Stopping Malware and Researching Threats Berlin/Brussels INT dnssd Extensions for Scalable DNS Service = Discovery WG Grand BR IRTF qirg Quantum Internet Proposed Research Group Karlin 3 RTG *** roll Routing Over Low power and Lossy = networks WG Athens/Barcel. SEC oauth Web Authorization Protocol WG Congress H 1 TSV tsvwg Transport Area Working Group WG TUESDAY, March 26, 2019 0900-1100 Morning Session I Karlin 3 ART uta Using TLS in Applications WG - 1000 - = 1100 Grand BR INT homenet Home Networking WG Berlin/Brussels SEC *** cose CBOR Object Signing and Encryption WG Karlin 1/2 SEC *** teep Trusted Execution Environment = Provisioning WG Congress H 2 TSV quic QUIC WG 1120-1220 Morning Session II Athens/Barcel. INT *** lwig Light-Weight Implementation Guidance WG Congress H 1 IRTF qirg Quantum Internet Proposed Research Group Congress H 3 TSV tsvwg Transport Area Working Group WG 1350-1550 Afternoon Session I Berlin/Brussels ART *** core Constrained RESTful Environments WG Karlin 1/2 OPS anima Autonomic Networking Integrated Model = and Approach WG Congress H 1 SEC mls Messaging Layer Security WG Congress H 3 TSV tsvarea Transport Area Open Meeting 1610-1810 Afternoon Session II Grand BR INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Congress H 1 IRTF*** t2trg Thing-to-Thing Congress H 2 SEC tls Transport Layer Security WG WEDNESDAY, March 27, 2019 0900-1100 Morning Session I Karlin 1/2 IRTF*** dinrg Decentralized Internet Infrastructure Congress H 1 RTG detnet Deterministic Networking WG Grand BR RTG rift Routing In Fat Trees WG Congress H 3 SEC *** suit Software Updates for Internet of Things = WG Congress H 2 TSV quic QUIC WG 1120-1320 Morning Session II Grand BR IRTF cfrg Crypto Forum - 12:20 - 13:20 Grand BR SEC acme Automated Certificate Management = Environment WG - 11:20 - 12:20 1500-1700 Afternoon Session I Grand BR OPS wgtlgo Technology Deep Dive - Modern Router = Architecture BOF THURSDAY, March 28, 2019 0900-1030 Morning Session I Karlin 3 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Congress H 3 IRTF panrg Path Aware Networking RG Athens/Barcel. RTG babel Babel routing protocol WG Congress H 1 SEC mls Messaging Layer Security WG Berlin/Brussels SEC oauth Web Authorization Protocol WG 1050-1220 Morning Session II Congress H 3 GEN git GitHub Integration and Tooling WG Congress H 1 IRTF coinrg Computing in the Network Congress H 2 IRTF maprg Measurement and Analysis for Protocols 1350-1550 Afternoon Session I Congress H 3 ART httpbis Hypertext Transfer Protocol WG Grand BR INT *** paw Predictable and Available Wireless BOF Athens/Barcel. OPS v6ops IPv6 Operations WG Congress H 1 SEC saag Security Area Open Meeting 1610-1810 Afternoon Session II Athens/Barcel. INT intarea Internet Area Working Group WG Grand BR SEC *** rats Remote ATtestation ProcedureS BOF FRIDAY, March 29, 2019 0900-1030 Morning Session I Grand BR ART *** core Constrained RESTful Environments WG Congress H 1 INT 6man IPv6 Maintenance WG Berlin/Brussels SEC cacao Collaborative Automated Course of Action = Operations for Cyber Security BOF 1050-1250 Morning Session II Berlin/Brussels INT ipwave IP Wireless Access in Vehicular = Environments WG Karlin 1/2 IRTF icnrg Information-Centric Networking Congress H 1 SEC *** ace Authentication and Authorization for = Constrained Environments WG Athens/Barcel. TSV taps Transport Services WG From nobody Mon Mar 4 19:35:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4B33130EE5; Mon, 4 Mar 2019 19:35:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TCYNXjjaOCBJ; Mon, 4 Mar 2019 19:35:44 -0800 (PST) Received: from mail-lf1-x12a.google.com (mail-lf1-x12a.google.com [IPv6:2a00:1450:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE8A7130ED0; Mon, 4 Mar 2019 19:35:43 -0800 (PST) Received: by mail-lf1-x12a.google.com with SMTP id r123so5102583lff.6; Mon, 04 Mar 2019 19:35:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=r4TqQliZFhb13QZkNlZ03+Piszm7PZy8C3RuXE5hdgA=; b=qHfFcVHwV2+e025Dk1ToR1o8RUWnOGoaD/T4C2U0bV6ctWAZcaoExaAH2og3bwZfEr dKvi6R0tZ6NUmnpr2bfAN2UpLuo0UysXbhuNBj8aDzLE2Y7O14MNIm2m34GuvpTsIdy4 00xpKpfkNW3QF5ZQT6LozcGjfAzgpCvQhZYLli1fMzIW2Th7NaFxJquoKQms4ugZSzG4 kWSQ5MLF42pbg202RAaqXIs3wnmWqR9KVGM8eMV4Mzr8hs0t/OOAGAFAlzi5h912DPl+ B98beAeesGYo2vJ74sIdUCQjviSN+D3SKzyWQa7A4P979uZjjvKqPHFmOrTzS6lbUp2O L2cQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=r4TqQliZFhb13QZkNlZ03+Piszm7PZy8C3RuXE5hdgA=; b=ohRo+oz8LeIn+kRY+vS4qe+nsWHBJliopmqRKRot/H43r/x8gBJWDMA9G5AqkIaeam sr77Ptuko6mXIJh2RQPKhFBQpxt3G3oRYmbDlKankUu1VmHJPM5ikprk4aM0nwh0IgGQ 20rcvglBIYUYLPrpKYFBNlk+bSWv7SE/f1i8UtGlNLlDy+GtbTpMm9BOWNDSsLnaaAax i7JL2MoH5pdDKZ3/tpKrbUGvfRSXwDfx6Upt5WYjw9QUBg3jfvkEoZzH7gHBpivuK9ke bzdSR+lzWV7IL+HIR3f6f8OHbrXddkMFP+0BIAtSFFtm6Vwew2TgqQcLoV47cEdaosHX SENQ== X-Gm-Message-State: APjAAAWlqYWisJUQDRQSrElocjptwCy4IBBSAFw8fBymTfuldES/XTYf lOHcLwPJOLkhr0l3mm2u/U9PA8pq3wXg5g6anVs= X-Google-Smtp-Source: APXvYqygbxoTRligDzswcdlAuL7pybPKlD+yF/EdZvRPauTSkRLwojwFe1GCpnUL0Sk3w2vp6mmMPdmh4EkxTX3WwUQ= X-Received: by 2002:a19:2c52:: with SMTP id s79mr689027lfs.32.1551756941155; Mon, 04 Mar 2019 19:35:41 -0800 (PST) MIME-Version: 1.0 References: <155139850240.28693.4294203273694006667.idtracker@ietfa.amsl.com> <20190301023419.GN53396@kduck.mit.edu> In-Reply-To: <20190301023419.GN53396@kduck.mit.edu> From: Spencer Dawkins at IETF Date: Mon, 4 Mar 2019 21:35:29 -0600 Message-ID: To: Benjamin Kaduk Cc: The IESG , rats@ietf.org, rats-chairs@ietf.org Content-Type: multipart/alternative; boundary="0000000000004164e5058350917c" Archived-At: Subject: Re: [Rats] Spencer Dawkins' No Objection on charter-ietf-rats-00-02: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Mar 2019 03:35:47 -0000 --0000000000004164e5058350917c Content-Type: text/plain; charset="UTF-8" Hi, Benjamin, On Thu, Feb 28, 2019 at 8:34 PM Benjamin Kaduk wrote: > On Thu, Feb 28, 2019 at 04:01:42PM -0800, Spencer Dawkins wrote: > > Spencer Dawkins has entered the following ballot position for > > charter-ietf-rats-00-02: No Objection > > > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > > > > > > > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/charter-ietf-rats/ > > > > > > > > ---------------------------------------------------------------------- > > COMMENT: > > ---------------------------------------------------------------------- > > > > I'd be a Yes if there was a SEC AD yes. Thanks for starting this. > > Sigh, there is one now. > > "But this one is not my fault -- the secretariat created the ballot, not > me" I think. Maybe. > That's not a problem - there are reasons for the sponsoring AD to not be a Yes when balloting is taking place. I try to notice that, and not ballot Yes, because it only takes one Yes to approve a charter, and it would be awesome if the sponsoring AD found out that someone else had just balloted Yes and the charter was suddenly approved! SPencer --0000000000004164e5058350917c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi, Benjamin,=C2=A0

On Thu, Feb 28, 2019= at 8:34 PM Benjamin Kaduk <kaduk@mit.e= du> wrote:
https://datatracker.ietf.org/doc/charter-iet= f-rats/
>
>
>
> ----------------------------------------------------------------------=
> COMMENT:
> ----------------------------------------------------------------------=
>
> I'd be a Yes if there was a SEC AD yes. Thanks for starting this.<= br>
Sigh, there is one now.

"But this one is not my fault -- the secretariat created the ballot, n= ot
me"=C2=A0 I think.=C2=A0 Maybe.

Th= at's not a problem - there are reasons for the sponsoring AD to not be = a Yes when balloting is taking place.=C2=A0

I try = to notice that, and not ballot Yes, because it only takes one Yes to approv= e a charter, and it would be awesome if the sponsoring AD found out that so= meone else had just balloted Yes and the charter was suddenly approved!

SPencer=C2=A0
--0000000000004164e5058350917c-- From nobody Mon Mar 4 20:10:15 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C6CEF130E81; Mon, 4 Mar 2019 20:10:07 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Ben Campbell To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.92.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155175900781.5229.8803722399888024995.idtracker@ietfa.amsl.com> Date: Mon, 04 Mar 2019 20:10:07 -0800 Archived-At: Subject: [Rats] Ben Campbell's Yes on charter-ietf-rats-00-02: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Mar 2019 04:10:08 -0000 Ben Campbell has entered the following ballot position for charter-ietf-rats-00-02: Yes When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Milestones? From nobody Mon Mar 4 20:10:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DFEF130EC3 for ; Mon, 4 Mar 2019 20:10:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=D/Pbo4gG; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=QVxV1UnI Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tbTBsn_Ymbuc for ; Mon, 4 Mar 2019 20:10:56 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22EC1130E81 for ; Mon, 4 Mar 2019 20:10:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8381; q=dns/txt; s=iport; t=1551759056; x=1552968656; h=from:to:subject:date:message-id:mime-version; bh=lr61pwqIK6/dGLKg3+ukffDaRr0uRFuz94Qe4K6+sq8=; b=D/Pbo4gGzfH+qg/LeJ9SCIaDT5oYiql/3PSyPJS4levxFjLWW/a6HBP+ VLm+1Knl2dHIBo6S747dDG+qqc3ZhL1Do1c2scnGBC7ZsXNJT+fuYJo0b gdxgRtczYtnYVp7D0HOQSdeC5QSFBO6L2hzKbM0/dCAbOYS9QFK6H4Gbu 8=; IronPort-PHdr: =?us-ascii?q?9a23=3A51j/5xcsQ/j64MRFCKYHvER1lGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwGQD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?= =?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/aSczGdtDUlBN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BNAACq9X1c/49dJa1kHgEGBwaBUQk?= =?us-ascii?q?LAYENL1ADaHQECyeECINHA49QSpQ7hXOBJANUCwEBLIRZhA4iNAkNAQEDAQE?= =?us-ascii?q?DAQMCbRwBC4VuBh0BATgRAT0KAwIEMBQTBBODIgGBEUwDFQGdMwKKFHGBL4J?= =?us-ascii?q?4AQEFgkWCPhiCCwiBLwGLJxeBf4ERJx+KVzGCJoxEhAWTPQkCgXaQfBmBdIV?= =?us-ascii?q?ii0yKZJIjAgQCBAUCDQEBBYFHOIFWcBVlAYJBggqDbopTcoEoj20BAQ?= X-IronPort-AV: E=Sophos;i="5.58,442,1544486400"; d="scan'208,217";a="241762489" Received: from rcdn-core-7.cisco.com ([173.37.93.143]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Mar 2019 04:10:55 +0000 Received: from XCH-ALN-013.cisco.com (xch-aln-013.cisco.com [173.36.7.23]) by rcdn-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id x254AteX029669 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 5 Mar 2019 04:10:55 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-013.cisco.com (173.36.7.23) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 4 Mar 2019 22:10:54 -0600 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 4 Mar 2019 22:10:53 -0600 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 4 Mar 2019 22:10:53 -0600 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector1-cisco-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lr61pwqIK6/dGLKg3+ukffDaRr0uRFuz94Qe4K6+sq8=; b=QVxV1UnIRMr0uH+Q1bsU4EAtTFUFdKsNxhSBCZWIQuXP8kgnM/vqeJnEfVCXVkgkvxXTQbkrUIoJ75lW15mmV57r3L8obk8Of1Qd+4pt1g1G3jEr4UD4aPQxAQhlbotkr/3EJArk9YHxrAERVLHEM/NiNrQy6DVTdgHjl+49Neg= Received: from BN6PR11MB1732.namprd11.prod.outlook.com (10.175.99.7) by BN6PR11MB1601.namprd11.prod.outlook.com (10.172.23.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1665.19; Tue, 5 Mar 2019 04:10:52 +0000 Received: from BN6PR11MB1732.namprd11.prod.outlook.com ([fe80::3df6:de14:447c:4146]) by BN6PR11MB1732.namprd11.prod.outlook.com ([fe80::3df6:de14:447c:4146%3]) with mapi id 15.20.1665.019; Tue, 5 Mar 2019 04:10:52 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: Call for RATS agenda items Thread-Index: AQHU0wlsZRg2KzeiCU6PWFkenb0ogg== Date: Tue, 5 Mar 2019 04:10:52 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.7.190210 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:c0c8:1008::4aa] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8932572d-9e0a-46ca-4bc2-08d6a1208ec9 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:BN6PR11MB1601; x-ms-traffictypediagnostic: BN6PR11MB1601: x-microsoft-exchange-diagnostics: =?utf-8?B?MTtCTjZQUjExTUIxNjAxOzIzOlAweWdrQVZwRFFwS0hidURZMi82cW1vL1dm?= =?utf-8?B?dlhHcnlnWjJVd2lFNk5aQzNNS3BRdzFCTVFtQkRSdWVaMHhjQ3Z1S0QyQnph?= =?utf-8?B?eFhqQXp3blkxRUhuMWdBckFyMGpCM3JXbEZMNzhBYkViSXpqbjFQeXl1WWRS?= =?utf-8?B?RlpHUjJFdm1ST0psZ0JybjRmNm1UWVpXazl5T2U3QStwb2ZpQlJsR2l0ZTR6?= =?utf-8?B?UUZseDFYZ1YrWEtVMUhNeEV5d1YzeXZFb05aSHV3NGRmd3c5YWNUUzlDVFpL?= =?utf-8?B?dURyMzcwTkdmNkZjLzJQT3Jid3ZNRkV4ZTRrU0tXRFhhVGd0WCtjcnhpRzV6?= =?utf-8?B?UkZqQndkZXFNeTF6WDl5MTZhR0VxUll4YnRNUkFvRVlsbGc4M2dOcVFnS1N0?= =?utf-8?B?alprR3hpWkNKZUtJYUl4U1lHM0lSbXNNMENienVxNzdNRUFjM2JTWGZwM2Fi?= =?utf-8?B?dnpXY2tCU1l1NnpjVVlCVXJ2UndFZnlwcVRmOTZtQjFlZzhrN1dtR1F4ZEhy?= =?utf-8?B?WW1FbmV3R1pJSXFJK0x1WUxnbUh4Q2dFRE9OL05DTzlsMTk0V1pVODJQVFhW?= =?utf-8?B?dGozMjBZUDY4WldVcU1aOGY3aWZCL0M5dEZnVVMvRXkwZ3pnTEN1Y2ZjSFpz?= =?utf-8?B?aE5tU2FzSnJIa3A5YUNqZUgxOXovY01PL25RYVVJVFdFNXhGK2JETGhyeU1Q?= =?utf-8?B?VEdoVUM4N0p1b3d1TzZYN0x4WGVhQm9ETFM1U3E5clFDbGN4b3VKV2krWE9s?= =?utf-8?B?dG41ZkFOcy80K3NXaTVDQmNnd2pDbHBvT0hRVjhlZGRFZFBublFhaWI5Z0Vs?= =?utf-8?B?L2dKN25oZjRCeExkemtmWFprcXZkSUhvRll0SVBDL092RjBmUzhoRFZITFZX?= =?utf-8?B?U0w2RUdlTEtrQlJLMGFOZGVVb1BaRklCRllRU1VYMUtNOEdzcldNem9MRE5l?= =?utf-8?B?VGoxZ2RtTTVEN2R1bzlaQ3o4OE1Ud1lHVnp5MTFKSlNkZkFmN3RLbElyZWtF?= =?utf-8?B?dEdqc3VwK1lvaHJuaVhCdlI1UVRPdEtPSVpZK2dpbkoybkJLN04rQ25BT3Mx?= =?utf-8?B?bXlVN1VSY05EWk1KRVpsaEkyMmp5alI0aHhNUm9KWGs1YUpuZ3VyVzQrc2hI?= =?utf-8?B?TFVsTTBESTVjWUpEdUtpbkk4STZBN1lxU2dsRkYyUlNsaTM5RXlpS1dRNkxI?= =?utf-8?B?ZVN3SFhzNi9DWDlQaTRCK2UvLzFLbHNyNWQ0eGI1dCtSSlQ0MWIyQmJPWWFr?= =?utf-8?B?Nkl5MVAyQUhxN2MrdVorcnFXYUVCV3B2YTVCQnVIaVNScGpCa2QxVXlvbXIr?= =?utf-8?B?WllTS2xPOE5kbGRvYy9TeHIxNWxMaEFyRzNIaW9JL1pPOERNSTYzME0xYmtC?= =?utf-8?B?bm05ZHB6Q1pmNko4WWVxUFF3TVg0TEZsdjgzK2liMzc3MkdRU0dlbkNDTXRx?= =?utf-8?B?U01FQkxlamRUTUgyUXd1RzBCbndSNURpV3M5RjYrUTljR2E2d3diM0REOUFx?= =?utf-8?B?ckFiY01saWtuN3l0cG05L3dWS2lWS214RndFQi9ySTdDUk42ZThidWtZZDM3?= =?utf-8?B?UXJoVjdyZEhnUVZQbXpIYVRSdzhTNitpMmFodnFFM2NwbksvTUJ2QllzcW5h?= =?utf-8?Q?y5BAD/bMbxrWN+MnPPZ0?= x-microsoft-antispam-prvs: x-forefront-prvs: 0967749BC1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(346002)(376002)(136003)(366004)(39860400002)(199004)(189003)(6506007)(6116002)(6486002)(236005)(54896002)(6512007)(71200400001)(71190400001)(8936002)(25786009)(2616005)(86362001)(6306002)(256004)(97736004)(186003)(82746002)(83716004)(6436002)(5660300002)(2501003)(5640700003)(14454004)(4744005)(102836004)(46003)(53936002)(99286004)(33656002)(2351001)(68736007)(105586002)(106356001)(2906002)(7736002)(6916009)(58126008)(36756003)(316002)(478600001)(1730700003)(81166006)(81156014)(8676002)(486006)(476003); DIR:OUT; SFP:1101; SCL:1; SRVR:BN6PR11MB1601; H:BN6PR11MB1732.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: 2rvS/int+G7wv1CAciskuoxWWFbXoR+XJIaN1X9wmrqRelmWtoenUPMN1thRngk/TlcD2Npx+ZyCsp88ZbeozqD5hNKQV874exyd5cRYKT70Uwhsy4LGz0v64ibBlUxr7N5iIKoM/SkKIxWi01AOd+udGfC2fl592VDWoXg2opAYxPLJ4jeTuscyMGflE+GmbTwlxwgLes7lBazihcfcy/2JjWUpEPtxwq6IOX53/yV24/ao8dYNyLCTBV+Sby8vPDFjsNKTaW6KqOiYGicMLmlqVwaGF9VDAgjBfDqUGIs8HTHSA/zhXZWME5qI20QvYeaJjY3XqKancpH5jdRgG9nXDjwdFufYTd6jVLK7lEGyT8+axVAZLE4/uoXOmECpMWy60+WGHZBzdAUQPiodm7c2kyp059KH6pS01Jvhppc= Content-Type: multipart/alternative; boundary="_000_FDA7C5DA4DA04C09A3949FAEF59B7CB5ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 8932572d-9e0a-46ca-4bc2-08d6a1208ec9 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Mar 2019 04:10:52.5445 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN6PR11MB1601 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.23, xch-aln-013.cisco.com X-Outbound-Node: rcdn-core-7.cisco.com Archived-At: Subject: [Rats] Call for RATS agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Mar 2019 04:10:58 -0000 --_000_FDA7C5DA4DA04C09A3949FAEF59B7CB5ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UkFUUyBpcyBzY2hlZHVsZWQgdG8gbWVldCAxNjsxMC0xODoxMCBDRVQgb24gVGh1cnNkYXkgTWFy IDI4dGguICBXaGlsZSB3ZSBhcmUgYXdhaXRpbmcgdG8gaGVhciBpZiB3ZSBtZWV0IGFzIGEgZm9y bWFsIHdvcmtpbmcgZ3JvdXAgb3IgQm9GIHdlIGNhbiBzdGlsbCBwcm9jZWVkIHRvIGZvcm11bGF0 ZSBhbiBhZ2VuZGEuICBBcyBzdWNoLCBoZXJlIGFyZSBzb21lIHByZWxpbWluYXJ5IGFnZW5kYSBp dGVtczoNCg0KDQogICogICBHaXZlbiB0aGUgY3VycmVudCBjaGFydGVyLCBkaXNjdXNzIGhvdyB0 aGUgY3VycmVudCBpbmRpdmlkdWFsIGRyYWZ0cyBmaXQNCiAgKiAgIERlZmluZSBtaWxlc3RvbmVz IGZvciB0aGUgd29ya2luZyBncm91cA0KICAqICAgRGVmaW5lIGEgd2F5IGZvcndhcmQgYmFzZWQg b24gbWlsZXN0b25lcyBhbmQgZHJhZnQgZGlzY3Vzc2lvbg0KDQpQbGVhc2Ugc2VuZCBhbnkgYWdl bmRhIHJlcXVlc3RzLCBpbmNsdWRpbmcgcmVxdWVzdGVkIHRpbWUgYW5kIHByZXNlbnRlciwgdG8N CnJhdHMtY2hhaXJzQGlldGYub3JnPG1haWx0bzpyYXRzLWNoYWlyc0BpZXRmLm9yZz4NCg0KV2Fy bSByZWdhcmRzLCBOYW5jeQ0K --_000_FDA7C5DA4DA04C09A3949FAEF59B7CB5ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <29647716DA38F1499A92EF955A3D4617@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2 Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6 MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxl ZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBp biAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rp b24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE1 NDI1MjE3NzU7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRz Oi0xOTA4NjYyMjI2IDExMTc5Njc5MjAgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2 OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6bGV2ZWwx DQoJe21zby1sZXZlbC1zdGFydC1hdDoyOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6Q2Fs aWJyaTt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZh bWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVs NQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K QGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJn aW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0K PC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0Rjcy Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+UkFUUyBpcyBzY2hlZHVsZWQgdG8gbWVldCAxNjsx MC0xODoxMCBDRVQgb24gVGh1cnNkYXkgTWFyIDI4PHN1cD50aDwvc3VwPi4mbmJzcDsgV2hpbGUg d2UgYXJlIGF3YWl0aW5nIHRvIGhlYXIgaWYgd2UgbWVldCBhcyBhIGZvcm1hbCB3b3JraW5nIGdy b3VwIG9yIEJvRiB3ZSBjYW4gc3RpbGwgcHJvY2VlZCB0byBmb3JtdWxhdGUgYW4gYWdlbmRhLiZu YnNwOyBBcyBzdWNoLA0KIGhlcmUgYXJlIHNvbWUgcHJlbGltaW5hcnkgYWdlbmRhIGl0ZW1zOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8dWwgc3R5bGU9 Im1hcmdpbi10b3A6MGluIiB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFw aCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkdpdmVuIHRoZSBjdXJyZW50IGNoYXJ0ZXIsIGRpc2N1 c3MgaG93IHRoZSBjdXJyZW50IGluZGl2aWR1YWwgZHJhZnRzIGZpdA0KPG86cD48L286cD48L3Nw YW4+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDow aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij5EZWZpbmUgbWlsZXN0b25lcyBmb3IgdGhlIHdvcmtpbmcgZ3JvdXA8bzpwPjwvbzpwPjwvc3Bh bj48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBp bjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PkRlZmluZSBhIHdheSBmb3J3YXJkIGJhc2VkIG9uIG1pbGVzdG9uZXMgYW5kIGRyYWZ0IGRpc2N1 c3Npb248bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29s b3I6YmxhY2siPlBsZWFzZSBzZW5kIGFueSBhZ2VuZGEgcmVxdWVzdHMsIGluY2x1ZGluZyByZXF1 ZXN0ZWQgdGltZSBhbmQgcHJlc2VudGVyLCB0bzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNr Ij48YSBocmVmPSJtYWlsdG86cmF0cy1jaGFpcnNAaWV0Zi5vcmciPnJhdHMtY2hhaXJzQGlldGYu b3JnPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2FybSBy ZWdhcmRzLCBOYW5jeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_FDA7C5DA4DA04C09A3949FAEF59B7CB5ciscocom_-- From nobody Thu Mar 7 01:49:07 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1328B1313C9 for ; Thu, 7 Mar 2019 01:48:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1551952128; bh=KHXGsb674mSSPlxidX4/B81kg/q0Pue9Giy2FbOED5U=; h=From:To:Cc:Subject:Date; b=SUFonOz/VXq6l+r7ZH+FnpbLxfIkqofzE1j6Iee4PicnA59UEx1PNBaG5Aj2inZV7 +u0x94qYD5Y54hEbqqPJIOHFFtZgBIGi5e57Wj/jNwVIqcEH0ATGcKp9GQRIq5jrLw ix+Py7wf2P7qABBdp1FRldJVS7mLQmQ7/XfsTT3E= X-Original-To: rats@ietf.org MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Datatracker on behalf of Adam Roach To: "The IESG" Cc: rats-chairs@ietf.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <155192647099.13706.16065441153993445039.idtracker@ietfa.amsl.com> Date: Wed, 06 Mar 2019 18:41:10 -0800 Archived-At: Subject: [Rats] Adam Roach's No Objection on charter-ietf-rats-00-02: (with COMMENT) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Mar 2019 09:48:53 -0000 Adam Roach has entered the following ballot position for charter-ietf-rats-00-02: No Objection When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-rats/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Nit: There appears to be the standard line-wrapping damage we get whenever we try to enter charters containing bulleted lists without blank lines between the bullets: * operational state and measurements of steps which led to the operational state, or * other factors that could influence trust decisions. From nobody Thu Mar 7 08:16:15 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6DB731313FD for ; Thu, 7 Mar 2019 08:16:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mit.edu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id woL20_ppMW1n for ; Thu, 7 Mar 2019 08:16:12 -0800 (PST) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-eopbgr810118.outbound.protection.outlook.com [40.107.81.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 282A212865E for ; Thu, 7 Mar 2019 08:16:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=A1F5/YvwN6jKUsNMyd/WACOcI1NPzxfWkan2sJ3p3is=; b=o5tvk341IQc/PUoeRgRq5V7MuKecMCfY0Cisz7Lbt5SCygLQ1ZzSOmJY9Y+Qy1WL2cCDpASRMhttNfV41fSu+g/8t7WlsW3JDztSZ2COWMs8yFf6fJuJHXxCIxLwyTKf/QhXjvMW94a6YKusZOeefnrTPnDdaDUbZjBFF3thmFs= Received: from SN2PR01CA0041.prod.exchangelabs.com (2603:10b6:804:2::51) by DM5PR01MB3290.prod.exchangelabs.com (2603:10b6:3:fd::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.16; Thu, 7 Mar 2019 16:16:00 +0000 Received: from DM3NAM03FT011.eop-NAM03.prod.protection.outlook.com (2a01:111:f400:7e49::205) by SN2PR01CA0041.outlook.office365.com (2603:10b6:804:2::51) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1686.16 via Frontend Transport; Thu, 7 Mar 2019 16:16:00 +0000 Authentication-Results: spf=pass (sender IP is 18.9.28.11) smtp.mailfrom=mit.edu; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=bestguesspass action=none header.from=mit.edu; Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates 18.9.28.11 as permitted sender) receiver=protection.outlook.com; client-ip=18.9.28.11; helo=outgoing.mit.edu; Received: from outgoing.mit.edu (18.9.28.11) by DM3NAM03FT011.mail.protection.outlook.com (10.152.82.88) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1643.13 via Frontend Transport; Thu, 7 Mar 2019 16:16:00 +0000 Received: from kduck.mit.edu (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id x27GFvV6008751 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Thu, 7 Mar 2019 11:15:59 -0500 Date: Thu, 7 Mar 2019 10:15:57 -0600 From: Benjamin Kaduk To: Message-ID: <20190307161556.GZ9824@kduck.mit.edu> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:18.9.28.11; IPV:CAL; SCL:-1; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(39860400002)(396003)(136003)(376002)(346002)(2980300002)(189003)(199004)(26826003)(1076003)(4744005)(2906002)(46406003)(33656002)(478600001)(23726003)(88552002)(336012)(246002)(106002)(97756001)(16586007)(36906005)(476003)(106466001)(786003)(316002)(356004)(2351001)(426003)(956004)(53416004)(58126008)(47776003)(126002)(5660300002)(8676002)(14444005)(75432002)(50466002)(104016004)(8936002)(486006)(86362001)(7696005)(26005)(305945005)(186003)(6916009)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR01MB3290; H:outgoing.mit.edu; FPR:; SPF:Pass; LANG:en; PTR:outgoing-auth-1.mit.edu; MX:1; A:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: ec63cc99-bc05-4166-4c61-08d6a3183061 X-Microsoft-Antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600127)(711020)(4605104)(4608103)(4709054)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060); SRVR:DM5PR01MB3290; X-MS-TrafficTypeDiagnostic: DM5PR01MB3290: X-Microsoft-Exchange-Diagnostics: 1; DM5PR01MB3290; 20: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 X-Microsoft-Antispam-PRVS: X-Forefront-PRVS: 096943F07A X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; DM5PR01MB3290; 23:zdI/irtc8cWbLf1UcyCT19biDu4AM23WvT2yEqETt?= =?us-ascii?Q?PPskJPJGhSIGhdYpqMlP3Mqx1zsx/fXv+Z5LAFxFHxZWBMiHM5PNfAto/XQO?= =?us-ascii?Q?k1ZuRTY69pHSds80OHEWHMZjNRw+THe8kHKON2NO4sfQSGV46xtBFBhx6xov?= =?us-ascii?Q?3CtutJPDMVNt7QnDkvhbn9hJFyqspazp/Vjz9B+LopZAweeLeUQsBHZSUDR/?= =?us-ascii?Q?U1oJwL23f2WV4msAHCtPfU2R+4l/eRqLFFlPxtZviVE6SRNK7vHNF4B+ZrKz?= =?us-ascii?Q?BJWFBoqTl8MxMaBTFbFsdWkjS3E6/ieqj0GTSzC49VxQ+pWC9LT+DqFjeIgi?= =?us-ascii?Q?uhP8fsSbVp5kSoWZnYQkk9vAI3L+fXayrWFJzRQPzMNfyvJmJ197CanjFzew?= =?us-ascii?Q?NGjLX8LWwc3mUSl7F6hBT2DFIh4rwreeZH367sfb1e8odqUNYxxGb3srJiEo?= =?us-ascii?Q?b+Ks61Ggaju7LsNpE3mWjCqnOSC7vXai/9GXvUHLs9QS9J8cwJDwkhNkz7bZ?= =?us-ascii?Q?lZXRkNOOtvyt1bTJW0qpekyxyLpSsJvPcTFGFmudc7yrvZjleWbKHprUHMl5?= =?us-ascii?Q?EQzVTB4QONYHpbhkE5uN2YJNo3JTTdnXrLzWGhFjwOANbVOs5JyXj86iw/QC?= =?us-ascii?Q?WgXuJBKcBy9oxLP6YAN+5lpTZG3xkFz5htaiKcqlR53u6Aes1MvOt5cLCvak?= =?us-ascii?Q?0wHFHc/3FiH4P1gCmay2jjLekgBhPtWKa0tapvotTK/hdpLduuUpkcNX3LnU?= =?us-ascii?Q?GtFCzvxDlmp9pdS3fcondXXwxuf/FhSqjQW4IzAKpttTdwI3FSc1Ixfmu+E+?= =?us-ascii?Q?JJCglTC9tAVp1tZm+NbRrOYa/S29GBPDeJiL+jN/KjDNEEeXtPX15nVSkQL8?= =?us-ascii?Q?Z8vY29FHH9S+AQG9CYexCBcX7PS2FrZswrLKDuhQ2uHWvWJyAZ90xFDQA6B3?= =?us-ascii?Q?+XKodnbR0hw2NdiEm3GEl883/kueV9nKbneOmFS1nBDICSx8stigNT7R3hvB?= =?us-ascii?Q?Et1EGd2MbvvDHvBix0pafM3xZIw691ZF760G7uvb5YrPzSlMgkXTJxw6FnTv?= =?us-ascii?Q?jrt0vnurb8oIXktglOfNrSQ8oFRy9b75vMAwu/3E2v9pCRNwQ=3D=3D?= X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: ZCrgojnwiF+fSHg5oEaaDZQoxKAaVGUUidrkwIPAItxmIr/F1h2JyM1RYLkl2tvZoJ6WfpArAFNNyGTtSccjFGfJvDPm7fCTaSwUJMAmY18WOno/kriLi56PPj2IaSBEIB44b/qHXc4w0q/6CDOC2cO4TsgDytKk0+RPVn1+v5qYbK7Nw71TEDS5n9Yzh/AR7LF8eR4LP4GS5SQNd/vdTENsNu/6VYqWKGNSMUt7pRsyvVaUA9WnBYW9HwqlGM3O99rJMV/bd2OGlEEaQFCevzgAzL0i1C1PAyypzbgZoTiKzp3/5JjARvjxsrFzQ4jWw096tUJCOB0ncNfUUAhGCFYJ0uEq8NBOgLz1RApeMfFCcDQNwMjovsVoRSvzc6Svg1smTShunX8Oe7smBoPu/944OOkUlOEQlTQm+6fVXno= X-OriginatorOrg: mit.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Mar 2019 16:16:00.3147 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ec63cc99-bc05-4166-4c61-08d6a3183061 X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64afd9ba-0ecf-4acf-bc36-935f6235ba8b; Ip=[18.9.28.11]; Helo=[outgoing.mit.edu] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR01MB3290 Archived-At: Subject: [Rats] welcome new RATS WG and new chairs X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Mar 2019 16:16:14 -0000 Everyone, It is with great pleasure that I can report that the IESG formally approved RATS as a WG at today's telechat, and we will be meeting in Prague as a WG. I am also pleased to announce that we have two new co-chairs to replace Roman, who will be stepping down as chair to step up as Security Area Director. Please welcome Kathleen Moriarty and Ned Smith, who will join Nancy as co-chairs for the new WG. I look forward to a productive session in Prague! -Ben From nobody Thu Mar 7 11:59:33 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 385B51310F0; Thu, 7 Mar 2019 11:59:13 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.93.0 Auto-Submitted: auto-generated Precedence: bulk Cc: rats@ietf.org, rats-chairs@ietf.org, The IESG MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <155198875322.5377.13783028392555492168.idtracker@ietfa.amsl.com> Date: Thu, 07 Mar 2019 11:59:13 -0800 Archived-At: Subject: [Rats] WG Action: Formed Remote ATtestation ProcedureS (rats) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Mar 2019 19:59:14 -0000 A new IETF WG has been formed in the Security Area. For additional information, please contact the Area Directors or the WG Chairs. Remote ATtestation ProcedureS (rats) ----------------------------------------------------------------------- Current status: BOF WG Chairs: Kathleen Moriarty Nancy Cam-Winget Ned Smith Roman Danyliw Assigned Area Director: Benjamin Kaduk Security Area Directors: Eric Rescorla Benjamin Kaduk Mailing list: Address: rats@ietf.org To subscribe: https://www.ietf.org/mailman/listinfo/rats Archive: https://mailarchive.ietf.org/arch/browse/rats/ Group page: https://datatracker.ietf.org/group/rats/ Charter: https://datatracker.ietf.org/doc/charter-ietf-rats/ Introduction ========== In network protocol exchanges, it is often the case that one entity (a relying party) requires evidence about the remote peer (and system components [RFC4949] thereof), in order to assess the trustworthiness of the peer. Remote attestation procedures (RATS) enable relying parties to establish a level of confidence in the trustworthiness of remote system components through the creation of attestation evidence by remote system components and a processing chain towards the relying party. A relying party can then decide whether to consider a remote system component trustworthy or not. To improve the confidence in a system component's trustworthiness, a relying party may require evidence about: * system component identity, * composition of system components, including nested components, * roots of trust, * assertion/claim origination or provenance, * manufacturing origin, * system component integrity, * system component configuration, * operational state and measurements of steps which led to the operational state, or * other factors that could influence trust decisions. While domain-specific attestation mechanisms such as Trusted Computing Group (TCG) Trusted Platform Module (TPM)/Trusted Software Stack (TSS), Fast Identity Online (FIDO) Alliance attestation, and Android Keystore attestation exist, there is no interoperable way to create and process attestation evidence to make determinations about system components among relying parties of different manufactures and origins. Goals ===== This WG will standardize formats for describing assertions/claims about system components and associated evidence; and procedures and protocols to convey these assertions/claims to relying parties. Given the security and privacy sensitive nature of these assertions/claims, the WG will specify approaches to protect this exchanged data. While a relying party may use reference, known, or expected values or thresholds to assess the assertions/claims, the procedures for this activity are out of scope for this WG (without rechartering). The working group will cooperate and coordinate with other IETF WGs such as TEEP, SUIT, and SACM, and work with organizations in the community, such as the TCG and the FIDO Alliance, as appropriate. The WG will also evaluate prior work such as NEA and proprietary attestation technologies like the Android Keystore. Program of Work ============== The working group will develop standards supporting interoperable remote attestation procedures for system components. The main deliverables are as follows: 1. Specify use cases for remote attestation (to document and achieve WG consensus but not expected to be published as an RFC). 2. Specify terminology and architecture that enable attestation techniques. The architecture may include a system security model for the signing key material and involve at least the system component, system component provider, and the relying authority. 3. Standardize an information model for assertions/claims which provide information about system components characteristics scoped by the specified use-cases. 4. Standardize data models that implement and secure the defined information model (e.g., CBOR Web Token structures [RFC8392], JSON Web Token structures [RFC7519]). 5. Standardize interoperable protocols to securely convey assertions/claims. From nobody Mon Mar 11 08:32:23 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02D53131190 for ; Mon, 11 Mar 2019 08:32:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mTpDPoHRylnz for ; Mon, 11 Mar 2019 08:32:14 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80079.outbound.protection.outlook.com [40.107.8.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A51CE1310E2 for ; Mon, 11 Mar 2019 08:32:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SqsK0F6VnGp0siXs/+TMgZAJMT1PBcezJcDIkK6KoG4=; b=U7T/Mp3YvznCvUREqW0/TiTGLpXWH5I+SMCKD8OpWxZtq+aV8U5RS1ztfWtz29Bj5XMo7nNU5sbOcVXrYYIUD+DWEXHIScCi9JGvZzY0iV23eJpSlhTyBz+zTjwbioa5aR44U+f4513ItCC0vNhGl+f/w5XU5+8wF9jFOplubEE= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1439.eurprd08.prod.outlook.com (10.167.210.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.16; Mon, 11 Mar 2019 15:32:11 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::dd0a:bfcc:b6ce:8d65]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::dd0a:bfcc:b6ce:8d65%11]) with mapi id 15.20.1686.021; Mon, 11 Mar 2019 15:32:11 +0000 From: Hannes Tschofenig To: "rats@ietf.org" Thread-Topic: Platform Security Architecture (PSA) Attestation Token Thread-Index: AdTYH2Kmr+gOKdOYTUWkSc1GyJqIJQ== Date: Mon, 11 Mar 2019 15:32:11 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.123.154] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 04685677-f8fc-49c2-40fb-08d6a636bace x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1439; x-ms-traffictypediagnostic: VI1PR0801MB1439: x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1439; 20:fEwBxW+J6GOewmN9ok7vTyHAOEnRSK5BPHlVCriN9Zqkd4zOKzlJf41TOKvvinSychOdot2H05yM1ndgkVZHg97mlSs29RslLYoujPFoUL0RjGS2ipGYCy77Ri7kyro8huP0NfZ4CHB6ez0nFrpv1Ezuds2Ed3T5iBvYqwPUtPU= x-microsoft-antispam-prvs: x-forefront-prvs: 09730BD177 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(39860400002)(136003)(366004)(396003)(189003)(199004)(40434004)(5640700003)(105586002)(25786009)(53936002)(316002)(1730700003)(966005)(6916009)(81156014)(81166006)(8676002)(71190400001)(71200400001)(6506007)(5660300002)(6436002)(99286004)(102836004)(6306002)(54896002)(55016002)(66066001)(9686003)(52536013)(106356001)(7696005)(7736002)(86362001)(14444005)(68736007)(5024004)(26005)(74316002)(256004)(2351001)(3846002)(2906002)(33656002)(790700001)(186003)(2501003)(15650500001)(10710500007)(72206003)(14454004)(6116002)(7110500001)(97736004)(2420400007)(478600001)(8936002)(476003)(486006)(13710500001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1439; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: DV38LvLRaV5WekHvlqeY+qXpTs0dVv6xT2HRV1L4hIgK+tRo8dHxhyDOXFQWssmwju2I/ucr6KC948Vj9/1AThWwRZOJAbDI+2GnAy4yzYV1NhKYfEFve1NdDviRPu8S3dZnkSx49aNe8clYGWr//4CK5Vwx8+pLU6yWD8okDbGrJgiB9u9F92rR2uTjxX+6o0SO6xLPfmupqCK4Uyw/lJty9eXrhfztBnPHj8y6mpKKdT50VtpEwT2tZt1mXuYrurItWhE2D8EHLFXS+odahVDD8hg6Z9NF7tyo6Mux1vr0NnneXZcRVr3Y8WudOKk+6RbGMK87VUTPLaGDCdz+brWdJ9bzPioL+K1ZiJeCjmhs4e1GqoLl5K0uDihLepyxLTBlNT5MHG2WLjVzEDW7GfivXaA5al9/YD6arafRFC0= Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB211264592D17E2C09E36FEC6FA480VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 04685677-f8fc-49c2-40fb-08d6a636bace X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Mar 2019 15:32:11.0396 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1439 Archived-At: Subject: [Rats] Platform Security Architecture (PSA) Attestation Token X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2019 15:32:21 -0000 --_000_VI1PR0801MB211264592D17E2C09E36FEC6FA480VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dear friends of attestation tokens, as mentioned in the conference call earlier this year we have implemented t= he Entity Attestation Token (EAT) [0] functionality. The Platform Security = Architecture (PSA) [1] describes how to design and implement secure IoT pro= ducts and contains, among other things, a number of APIs for use with the n= ew Arm v8-M architecture. The attestation API is where we implemented the f= unctionality described in the draft I published today [2], which is part of= Arm Trusted Firmware M [3]. Our intention with this draft is to illustrate how we use the EAT token and= what claims we utilize. We also provide running code that can be deployed = on IoT devices today. We are looking forward to feedback and plan to upgrad= e to a future version of the EAT token as standardization in the RATS worki= ng group advances. Ciao Hannes (on behalf of the authors) References: [0] "Entity Attestation Token", https://tools.ietf.org/html/draft-mandyam-e= at-01 [1] "Platform Security Architecture", https://www.arm.com/why-arm/architect= ure/platform-security-architecture/psa-resources [2] https://www.ietf.org/id/draft-tschofenig-rats-psa-token-00.txt [3] "Trusted Firmware M", http://git.trustedfirmware.org/trusted-firmware-m= .git/ IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB211264592D17E2C09E36FEC6FA480VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Dear friends of attestation tokens,

 

as mentioned in the conference call earlier this yea= r we have implemented the Entity Attestation Token (EAT) [0] functionality.= The Platform Security Architecture (PSA) [1] describes how to design and i= mplement secure IoT products and contains, among other things, a number of APIs for use with the new Arm v8-M archite= cture. The attestation API is where we implemented the functionality descri= bed in the draft I published today [2], which is part of Arm Trusted Firmwa= re M [3].

 

Our intention with this draft is to illustrate how w= e use the EAT token and what claims we utilize. We also provide running cod= e that can be deployed on IoT devices today. We are looking forward to feed= back and plan to upgrade to a future version of the EAT token as standardization in the RATS working group adva= nces.

 

Ciao

Hannes

(on behalf of the authors)

 

References:

[0] "Entity Attestation Token", https://to= ols.ietf.org/html/draft-mandyam-eat-01

[1] "Platform Security Architecture", http= s://www.arm.com/why-arm/architecture/platform-security-architecture/psa-res= ources

[2] https://www.ietf.org/id/draft-tschofenig-rats-ps= a-token-00.txt

[3] "Trusted Firmware M", http://git.trust= edfirmware.org/trusted-firmware-m.git/

 

 

 

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB211264592D17E2C09E36FEC6FA480VI1PR0801MB2112_-- From nobody Tue Mar 12 15:03:27 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 311B21279A4 for ; Tue, 12 Mar 2019 15:03:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2CjYpQ3NCqZv for ; Tue, 12 Mar 2019 15:03:22 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650093.outbound.protection.outlook.com [40.107.65.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61965131111 for ; Tue, 12 Mar 2019 15:03:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bAGXmkcABSt8LV3n+cF0k/bpN2HAF7lFl6HGJjdQYaI=; b=QuNsC+OusJCSwFPOlh8xZw1wHdYLuZ7wO2Om+PyiGH/jIiv/SsV14h5ubpMtRb4SXflaXtHIO9MNclekGFUpyxQiIelfJSnZqw6vqKzJF3T9cIm3yFxhzJ6LiFUR+frwKgC0iG8tXygm7ZfCJKNl6t4KfD09yRd1BFK7VjHTt/g= Received: from MW2PR00MB0396.namprd00.prod.outlook.com (52.132.148.160) by MW2PR00MB0426.namprd00.prod.outlook.com (52.132.149.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1741.0; Tue, 12 Mar 2019 22:03:19 +0000 Received: from MW2PR00MB0396.namprd00.prod.outlook.com ([fe80::2dc2:12da:f67f:9f4b]) by MW2PR00MB0396.namprd00.prod.outlook.com ([fe80::2dc2:12da:f67f:9f4b%7]) with mapi id 15.20.1743.000; Tue, 12 Mar 2019 22:03:19 +0000 From: Anthony Nadalin To: "rats@ietf.org" Thread-Topic: draft-richardson-rats-usecases-00 comments Thread-Index: AdTZH2WW+rxmtagrSLqGRlNOUrYHUw== Date: Tue, 12 Mar 2019 22:03:19 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2001:4898:80e8:1:8da0:d937:3d47:2787] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 6d60fec9-18f4-4663-82c5-08d6a7368991 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:MW2PR00MB0426; x-ms-traffictypediagnostic: MW2PR00MB0426: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 09749A275C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(136003)(396003)(366004)(189003)(199004)(7696005)(6506007)(99286004)(25786009)(102836004)(1240700005)(10290500003)(74316002)(486006)(6346003)(46003)(476003)(2906002)(478600001)(53936002)(316002)(2351001)(22452003)(54896002)(9686003)(6306002)(55016002)(6436002)(7736002)(86362001)(14454004)(86612001)(5640700003)(8936002)(33656002)(8676002)(6116002)(106356001)(81156014)(105586002)(81166006)(790700001)(71190400001)(71200400001)(5660300002)(2501003)(186003)(6916009)(68736007)(8990500004)(10090500001)(4744005)(97736004)(256004)(52536013)(1730700003); DIR:OUT; SFP:1102; SCL:1; SRVR:MW2PR00MB0426; H:MW2PR00MB0396.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=tonynad@microsoft.com; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: UkqnZHfoqHazewfB9DpqVLB1kNaYyfYJRaAWysoTXUJZ2ubTgU/8MVwSToIGHzt8PCICBn2B0QpEIlzL+FR6N/nZQmnEdPvf9G0elmTcoEjlPyP/Ww8X6afaQIBtLZ/wkrTLE+kADhM/bddEzY5Zahk9ELMYAqF54tmtfk4xZnPiHNM/Elx0i7bQHkXjNFnD8/Hpl9KpMlu81WN7mkXiIfNX5JrmZS2DHaxL5CRQjbJBSF4SlYzzZYTfjPNoDbkO9ZX/D0jrb1l9DsoyuxP/064+FE9b8SJHLqDBrCX80DjbSma/1MHivtZECmD7SnewpXO34rrXrQ4/2RKETijxFdF7serRKSl1ZXgQgoAEugm72fHUW3tW5ONhcsBD8iscJqP1kXlZCayv9V7WgmsM9R86yNAfxrFeK1yZQ/cGxAw= Content-Type: multipart/alternative; boundary="_000_MW2PR00MB03963ABEB87211AD28A16240A6490MW2PR00MB0396namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6d60fec9-18f4-4663-82c5-08d6a7368991 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2019 22:03:19.5632 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW2PR00MB0426 Archived-At: Subject: [Rats] draft-richardson-rats-usecases-00 comments X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2019 22:03:25 -0000 --_000_MW2PR00MB03963ABEB87211AD28A16240A6490MW2PR00MB0396namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The section on FIDO usecase (5.3) is out of date, as in FIDO/W3C there are = many attestation formats that are acceptable from devices, the major concer= n that we have is the privacy issues as most all the attestation formats le= ad to potential collusion in one form or the other. The JS API is now the W= 3C WebAuthentication API that is a recommendation now, this is no longer in= FIDO. I would be happy to send edits to this section. --_000_MW2PR00MB03963ABEB87211AD28A16240A6490MW2PR00MB0396namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The section on FIDO usecase (5.3) is out of date, as= in FIDO/W3C there are many attestation formats that are acceptable from de= vices, the major concern that we have is the privacy issues as most all the= attestation formats lead to potential collusion in one form or the other. The JS API is now the W3C WebAuthentic= ation API that is a recommendation now, this is no longer in FIDO. I would = be happy to send edits to this section.

--_000_MW2PR00MB03963ABEB87211AD28A16240A6490MW2PR00MB0396namp_-- From nobody Tue Mar 12 20:27:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 331B612788C for ; Tue, 12 Mar 2019 20:27:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LpBgyTN6pU_A for ; Tue, 12 Mar 2019 20:27:43 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CE8312705F for ; Tue, 12 Mar 2019 20:27:43 -0700 (PDT) Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2:56b2:3ff:fe0b:d84]) by tuna.sandelman.ca (Postfix) with ESMTP id 433F93808A; Tue, 12 Mar 2019 23:27:25 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 045A3ACA; Tue, 12 Mar 2019 23:27:42 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 01EF783B; Tue, 12 Mar 2019 23:27:42 -0400 (EDT) From: Michael Richardson To: Anthony Nadalin cc: "rats\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Mar 2019 03:27:45 -0000 --=-=-= Content-Type: text/plain Anthony Nadalin wrote: > The section on FIDO usecase (5.3) is out of date, as in FIDO/W3C there are > many attestation formats that are acceptable from devices, the major concern > that we have is the privacy issues as most all the attestation formats lead > to potential collusion in one form or the other. The JS API is now the W3C > WebAuthentication API that is a recommendation now, this is no longer in > FIDO. I would be happy to send edits to this section. That would be wonderful, THANK YOU! It's a -00 afterall, and the goal is to tease out what might be old/nonsensical/etc. so that we can get to the bottom of things :-) (I thought I did say that it all became the WebAuthentication API...) -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlyIeK0ACgkQgItw+93Q 3WWV9ggAmy8Uqym5GIVl8y+U3R5npnMEkK/lfSCdRVf8sGONQNE0kSddupSKHXL+ 30d8LW4+DdOgYmf5JPHEQRRWSUxFjnUTDHQUqAOKoywYloo1clFLGnhJTkPQlqKQ 2mVTKbUwbmEy6/JErDqFsdwbNZdatf5uOU6TE7sEvDo7aAuN00n374K9WV5fMdix Rr0iCqQSR/1or3RJLDSBH67irwUJyszW+g0DpcZx3QpXKbKkC/dK8ov0ATJHVRmE 3P1V9YzMpbevIY6jn5aVuOdxfSvC6w4XJ80bjO6YuBWD3IPrhjeTdPNaI4qyXYNe LfCkbe9fCknxX8dfx+yAFkDj94R6Iw== =98i7 -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 20 12:00:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E00C0131241 for ; Wed, 20 Mar 2019 12:00:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uijKYC0SSEZ3 for ; Wed, 20 Mar 2019 12:00:47 -0700 (PDT) Received: from p3plsmtpa11-04.prod.phx3.secureserver.net (p3plsmtpa11-04.prod.phx3.secureserver.net [68.178.252.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE0351312B0 for ; Wed, 20 Mar 2019 12:00:40 -0700 (PDT) Received: from [192.168.1.82] ([76.192.164.238]) by :SMTPAUTH: with ESMTPSA id 6gS6h2lxpv4SW6gS8hR02z; Wed, 20 Mar 2019 12:00:40 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <12503.1552447661@localhost> Date: Wed, 20 Mar 2019 12:00:38 -0700 Cc: Anthony Nadalin , "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <219648D6-188A-429D-A13F-ED6155DE9016@island-resort.com> References: <12503.1552447661@localhost> To: Michael Richardson X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfDQoS1iD5lsUi1Rgn+2hhsNBWxI9DbyU9Cxjfo0YFI2ihOFW7J4VlmtKIu19B7NJ3SP3S/GDs6MspqE1h+BiNxIUF3tnCnw0Ej6ffbm7/8Xj7h62Gshx g2YdqDfNiBrYVdHwaQ35i8ubZNYyEtjHFgdaDesQMidg0Kc0/iYFdwGE0RUF0EPbqS4tMhWWap0DU86YiQrX515V5RHgevz0RYHNOCPRHW11rTW1gQY4ruEs hR0zxPw5dhFYCY4z6+pbzw== Archived-At: Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2019 19:00:58 -0000 The way I=E2=80=99d approach the FIDO use case is to say that the = relying party wants to to have the HW/SW implementation that did the = biometric check strongly identified (attested). This is to make sure = that the end user is not using some short cut or hacked, or insecure = implementation that is not checking the biometric properly.=20 FIDO allows a bunch of attestation formats now because there is no = broadly common attestation format, something I hope we will remedy. It = will take some years of course=E2=80=A6 I don=E2=80=99t know that it is necessary to dig into all the different = formats that FIDO allows. Agree with Tony that solving the privacy issue in a broad standard way = will be really helpful for lots of use cases (also some use cases = don=E2=80=99t have a privacy issue). LL > On Mar 12, 2019, at 8:27 PM, Michael Richardson = wrote: >=20 >=20 > Anthony Nadalin wrote: >> The section on FIDO usecase (5.3) is out of date, as in FIDO/W3C = there are >> many attestation formats that are acceptable from devices, the major = concern >> that we have is the privacy issues as most all the attestation = formats lead >> to potential collusion in one form or the other. The JS API is now = the W3C >> WebAuthentication API that is a recommendation now, this is no longer = in >> FIDO. I would be happy to send edits to this section. >=20 > That would be wonderful, THANK YOU! > It's a -00 afterall, and the goal is to tease out what might be > old/nonsensical/etc. so that we can get to the bottom of things :-) >=20 > (I thought I did say that it all became the WebAuthentication API...) >=20 > -- > Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- >=20 >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Wed Mar 20 12:05:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40D431310CC for ; Wed, 20 Mar 2019 12:05:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZrA88r9WJUu2 for ; Wed, 20 Mar 2019 12:05:39 -0700 (PDT) Received: from p3plsmtpa09-06.prod.phx3.secureserver.net (p3plsmtpa09-06.prod.phx3.secureserver.net [173.201.193.235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1878F1200B3 for ; Wed, 20 Mar 2019 12:05:39 -0700 (PDT) Received: from [192.168.1.82] ([76.192.164.238]) by :SMTPAUTH: with ESMTPSA id 6gWshoad5dwXW6gWvhLSm0; Wed, 20 Mar 2019 12:05:37 -0700 From: Laurence Lundblade Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Wed, 20 Mar 2019 12:05:34 -0700 References: <12503.1552447661@localhost> To: Michael Richardson , "rats@ietf.org" In-Reply-To: <12503.1552447661@localhost> Message-Id: <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfA12Er/2vnRjCSMB5ZPyP+UaraaTDBPz0jTu437Hq/lNrtwfJ/iRHBHAEx/wuxSRHvvYsvyIwHfgUF/Nw4CoupxaqT8xk67OkCaPyncuQeaprp9SGRtq tc2QfVMlvWwse/A4Ibupm+tjDMXXLrqveklrOJM7R0aZ4uONZXMswSeNVdGxpZfDdiH1PpNujeMVIxYex7pN6aU0p7OE/p0s0Vw= Archived-At: Subject: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2019 19:05:40 -0000 Just briefly, The TCG use case seems more like a description of technology than a use = case.=20 There is the Cisco / Network Function use case that is oriented around = the list of SW components and measurement of them. Eric Voit is the man = for that I think. Henk and a few others were also into it. I also think there is at least one IoT use case. Maybe it is one with = very many sub use cases. The main issue there is on boarding devices to = an IoT management platform that have been drop-shipped or sent straight = to the consumer or such. LL From nobody Wed Mar 20 12:19:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8EE891310FB for ; Wed, 20 Mar 2019 12:19:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.012 X-Spam-Level: X-Spam-Status: No, score=-0.012 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HAP4zLB7dx91 for ; Wed, 20 Mar 2019 12:19:49 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650098.outbound.protection.outlook.com [40.107.65.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6AAC1288AB for ; Wed, 20 Mar 2019 12:19:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jN/ilEnO+UL2WMrTAbkPZYrfDLmBeELEbJCViqSec44=; b=AW6hAAJDjq2IC1ysp1L4ZqeM9SWbnei4jhXOxByBSAghMlgj22Of4/NWVa4c8Oz5uc9EnjUqGJpDDcr0YJWCmMJrNJMyoF8b0Y1TOhtLdhkwhq8IacqhvetmyRbtRMaoXc3EeQSMGXtN3tz4/eZI6SNKwLuo/OApnyF7jReToac= Received: from BL0PR00MB0387.namprd00.prod.outlook.com (52.132.20.29) by BL0PR00MB0420.namprd00.prod.outlook.com (52.132.21.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1767.0; Wed, 20 Mar 2019 19:19:43 +0000 Received: from BL0PR00MB0387.namprd00.prod.outlook.com ([fe80::a9ee:1dc:30c5:78c7]) by BL0PR00MB0387.namprd00.prod.outlook.com ([fe80::a9ee:1dc:30c5:78c7%3]) with mapi id 15.20.1767.000; Wed, 20 Mar 2019 19:19:43 +0000 From: Anthony Nadalin To: Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] draft-richardson-rats-usecases-00 comments Thread-Index: AdTZH2WW+rxmtagrSLqGRlNOUrYHUwALVFSAAYCfcgAAAJwofQ== Date: Wed, 20 Mar 2019 19:19:43 +0000 Message-ID: References: <12503.1552447661@localhost>, <219648D6-188A-429D-A13F-ED6155DE9016@island-resort.com> In-Reply-To: <219648D6-188A-429D-A13F-ED6155DE9016@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [107.77.221.217] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 52ccba90-fb60-4f4b-c32e-08d6ad690233 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:BL0PR00MB0420; x-ms-traffictypediagnostic: BL0PR00MB0420: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:639; x-forefront-prvs: 098291215C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(366004)(346002)(396003)(39860400002)(136003)(199004)(189003)(52536014)(7696005)(256004)(5660300002)(105586002)(106356001)(316002)(22452003)(606006)(14454004)(229853002)(10290500003)(71190400001)(71200400001)(8936002)(53936002)(9686003)(6306002)(55016002)(68736007)(236005)(6436002)(6246003)(25786009)(966005)(54896002)(478600001)(486006)(76176011)(102836004)(53546011)(86612001)(4326008)(6346003)(26005)(6506007)(33656002)(99286004)(186003)(7736002)(81166006)(8676002)(81156014)(86362001)(10090500001)(110136005)(66066001)(74316002)(446003)(3846002)(6116002)(11346002)(2906002)(476003)(97736004)(8990500004); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR00MB0420; H:BL0PR00MB0387.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=tonynad@microsoft.com; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam-message-info: yMBMYXDyQ1Krq+8UHFCwKJrXHGEBYC/E63EOoJpwaa8osCoBGvnp/f5nYTcIkjlYu/spcJZpxwFzK2mwSiriA6H7nAFqUm6UZt4BhZK3cX/kKLnrBUfuEW/1C96gu9noRjJ5Ep4AWfYnUva1UldYKWZzZLUOM1KyGbtGxezu9b1mNsbQpt5ltmIe1JONTk+u6w9xQA8g5r6jaa8e7CXuZ+L4KyC2zsBDjuaZihAnkma9XYFqBBW/RnZSBe4AsqYsxdATNr8Z27JCT3sMdOp9eo6xvLyWkYt/IftPXQaQLyls822wBOV7e0OxPagbMpPqsjSKxEaHqP+4u0ZTjZ3Y9ISu8lrWjI3bnRRZFeR/bOMJspNb8fLIfq2+YSd7J6IUXEGODxZCKxa5c638AOhfUnPK4c+M3UvQVmAffO3JYDI= Content-Type: multipart/alternative; boundary="_000_BL0PR00MB03871C11F00D270BB1A7BE10A6410BL0PR00MB0387namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 52ccba90-fb60-4f4b-c32e-08d6ad690233 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Mar 2019 19:19:43.7842 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR00MB0420 Archived-At: Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2019 19:19:52 -0000 --_000_BL0PR00MB03871C11F00D270BB1A7BE10A6410BL0PR00MB0387namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable And in the FIDO case we don't need a transport as it's carried in the W3C W= ebAuthn and FIDO CTAP protocols Get Outlook for Android ________________________________ From: Laurence Lundblade Sent: Wednesday, March 20, 2019 8:00:38 PM To: Michael Richardson Cc: Anthony Nadalin; rats@ietf.org Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments The way I=92d approach the FIDO use case is to say that the relying party w= ants to to have the HW/SW implementation that did the biometric check stron= gly identified (attested). This is to make sure that the end user is not us= ing some short cut or hacked, or insecure implementation that is not checki= ng the biometric properly. FIDO allows a bunch of attestation formats now because there is no broadly = common attestation format, something I hope we will remedy. It will take so= me years of course=85 I don=92t know that it is necessary to dig into all the different formats t= hat FIDO allows. Agree with Tony that solving the privacy issue in a broad standard way will= be really helpful for lots of use cases (also some use cases don=92t have = a privacy issue). LL > On Mar 12, 2019, at 8:27 PM, Michael Richardson w= rote: > > > Anthony Nadalin wrote: >> The section on FIDO usecase (5.3) is out of date, as in FIDO/W3C there a= re >> many attestation formats that are acceptable from devices, the major con= cern >> that we have is the privacy issues as most all the attestation formats l= ead >> to potential collusion in one form or the other. The JS API is now the W= 3C >> WebAuthentication API that is a recommendation now, this is no longer in >> FIDO. I would be happy to send edits to this section. > > That would be wonderful, THANK YOU! > It's a -00 afterall, and the goal is to tease out what might be > old/nonsensical/etc. so that we can get to the bottom of things :-) > > (I thought I did say that it all became the WebAuthentication API...) > > -- > Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i= etf.org%2Fmailman%2Flistinfo%2Frats&data=3D02%7C01%7Ctonynad%40microsof= t.com%7C036e72240d664c971e4508d6ad666949%7C72f988bf86f141af91ab2d7cd011db47= %7C1%7C1%7C636887052703477437&sdata=3DcJOWJx7QKyLqZOBxLQEWFj0SQX9eZ1AUU= wdsEPxRtEY%3D&reserved=3D0 --_000_BL0PR00MB03871C11F00D270BB1A7BE10A6410BL0PR00MB0387namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
And in the FIDO case we don't need a transport as it's carried in the W3C W= ebAuthn and FIDO CTAP protocols

From: Laurence Lundblade = <lgl@island-resort.com>
Sent: Wednesday, March 20, 2019 8:00:38 PM
To: Michael Richardson
Cc: Anthony Nadalin; rats@ietf.org
Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments
 
The way I=92d approach the FIDO use case is to say= that the relying party wants to to have the HW/SW implementation that did = the biometric check strongly identified (attested). This is to make sure th= at the end user is not using some short cut or hacked, or insecure implementation that is not checking the biometr= ic properly.

FIDO allows a bunch of attestation formats now because there is no broadly = common attestation format, something I hope we will remedy. It will take so= me years of course=85

I don=92t know that it is necessary to dig into all the different formats t= hat FIDO allows.

Agree with Tony that solving the privacy issue in a broad standard way will= be really helpful for lots of use cases (also some use cases don=92t have = a privacy issue).

LL

> On Mar 12, 2019, at 8:27 PM, Michael Richardson <mcr+ietf@sande= lman.ca> wrote:
>
>
> Anthony Nadalin <tonynad=3D40microsoft.com@dmarc.ietf.org> wrote= :
>> The section on FIDO usecase (5.3) is out of date, as in FIDO/W3C t= here are
>> many attestation formats that are acceptable from devices, the maj= or concern
>> that we have is the privacy issues as most all the attestation for= mats lead
>> to potential collusion in one form or the other. The JS API is now= the W3C
>> WebAuthentication API that is a recommendation now, this is no lon= ger in
>> FIDO. I would be happy to send edits to this section.
>
> That would be wonderful, THANK YOU!
> It's a -00 afterall, and the goal is to tease out what might be
> old/nonsensical/etc. so that we can get to the bottom of things :-) >
> (I thought I did say that it all became the WebAuthentication API...)<= br> >
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Softwa= re Works
> -=3D IPv6 IoT consulting =3D-
>
>
>
> _______________________________________________
> RATS mailing list
> RATS@ietf.org
> https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Frats&amp;data=3D02%7C01%7Ctonynad%40micros= oft.com%7C036e72240d664c971e4508d6ad666949%7C72f988bf86f141af91ab2d7cd011db= 47%7C1%7C1%7C636887052703477437&amp;sdata=3DcJOWJx7QKyLqZOBxLQEWFj0SQX9= eZ1AUUwdsEPxRtEY%3D&amp;reserved=3D0

 --_000_BL0PR00MB03871C11F00D270BB1A7BE10A6410BL0PR00MB0387namp_-- From nobody Fri Mar 22 04:46:02 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 145E0130EC7 for ; Fri, 22 Mar 2019 04:46:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.357 X-Spam-Level: X-Spam-Status: No, score=-0.357 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_06_12=1.543, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18AkHBXc2-C9 for ; Fri, 22 Mar 2019 04:45:59 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89CC8130EC3 for ; Fri, 22 Mar 2019 04:45:59 -0700 (PDT) Received: from dooku.sandelman.ca (ipv6.dooku.sandelman.ca [IPv6:2607:f0b0:f:6::1]) by relay.sandelman.ca (Postfix) with ESMTPS id D34691F483; Fri, 22 Mar 2019 11:45:57 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 4F3083FA7; Thu, 21 Mar 2019 21:58:21 -0400 (EDT) From: Michael Richardson To: Laurence Lundblade cc: "rats\@ietf.org" In-reply-to: <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> Comments: In-reply-to Laurence Lundblade message dated "Wed, 20 Mar 2019 12:05:34 -0700." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Thu, 21 Mar 2019 21:58:21 -0400 Message-ID: <6495.1553219901@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 11:46:01 -0000 --=-=-= Content-Type: text/plain Laurence Lundblade wrote: > The TCG use case seems more like a description of technology than a use > case. yes, I was given a document in progress, and I felt it was very difficult to determine what the use case was exactly. I also felt it was important to write something down to ferret out the target. But, in particular what I saw was that it was more about attesting to the integrity of physical systems in an enterprise rather than, for instance, attesting to absense of holes for video to escape into. I gather you did not get this from my text, so I will attempt to improve it. > There is the Cisco / Network Function use case that is oriented around > the list of SW components and measurement of them. Eric Voit is the man > for that I think. Henk and a few others were also into it. > I also think there is at least one IoT use case. Maybe it is one with > very many sub use cases. The main issue there is on boarding devices to > an IoT management platform that have been drop-shipped or sent straight > to the consumer or such. Are there documents you can refer me to? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlyUQTwACgkQlUzhVv38 QpCmZAgAmqYPygODc6Fh61AnztzRCcL6/X6r0hXLNdiGerEU5zuO3cXh0/i5wpR+ kpbcGVtaKw/A44IosvOlPJcxhglkAJfsGDcNjFbQG7YJFaIk0Mt9qFg1r+6wDbSP n9nVKE4v0kkqIMMosgOIkizjTd79OAe3QlKcV1tNdFRDQ3I+qwjpm5WwhLvS5HV/ tR8on+0t9U+Eu1BbU4MNCF1UxJIFMrEPlGWo5rV3QX/xaVZwwCrJy54gaQQpQzv9 h0WJta8rtOiymtQ4ee+lm1hBxD9XR7Vo9gFmP4rlWo+ApzoFD5fWQC7+GeZm7HaG lDcK1oGwecg0ykMCtUvXNdkQHGb4xw== =LSLL -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Mar 22 14:01:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40258131581 for ; Fri, 22 Mar 2019 14:01:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WtE3jtCshA9J for ; Fri, 22 Mar 2019 14:01:55 -0700 (PDT) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9D1713157D for ; Fri, 22 Mar 2019 14:01:54 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Mar 2019 14:01:54 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.60,256,1549958400"; d="scan'208";a="216693052" Received: from orsmsx103.amr.corp.intel.com ([10.22.225.130]) by orsmga001.jf.intel.com with ESMTP; 22 Mar 2019 14:01:53 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.11]) by ORSMSX103.amr.corp.intel.com ([169.254.5.129]) with mapi id 14.03.0415.000; Fri, 22 Mar 2019 14:01:53 -0700 From: "Smith, Ned" To: Michael Richardson , Laurence Lundblade , "Heldt-Sheller, Nathan" CC: "rats@ietf.org" Thread-Topic: [Rats] More use cases for draft-richardson-rats-usecases-00 Thread-Index: AQHU30/xj2BiBGEziUKa7njbv8kyH6YXXCyAgAD8bgA= Date: Fri, 22 Mar 2019 21:01:53 +0000 Message-ID: References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> In-Reply-To: <6495.1553219901@dooku.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.17.0.190309 x-originating-ip: [10.254.102.70] Content-Type: text/plain; charset="utf-8" Content-ID: <15C325AD0E8A6E4C8E0D7AF14FE7BB18@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Mar 2019 21:01:56 -0000 SSdtIGF3YXJlIHRoYXQgdGhlIE9wZW4gQ29ubmVjdGl2aXR5IEZvdW5kYXRpb24gKE9DRikgaGFz IGltcGxlbWVudGVkIGFuIElvVCBvbmJvYXJkaW5nIHVzZSBjYXNlLiBQb3NzaWJseSBpdCBtYWtl cyBzZW5zZSB0byByZWZlcmVuY2Ugb25lIG9mIHRoZWlyIGRvY3VtZW50cz8NCi1OZWQNCg0K77u/ T24gMy8yMi8xOSwgNzo0NiBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIE1pY2hhZWwgUmljaGFyZHNv biIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgbWNyK2lldGZAc2FuZGVsbWFu LmNhPiB3cm90ZToNCg0KICAgIA0KICAgIExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1y ZXNvcnQuY29tPiB3cm90ZToNCiAgICAgICAgPiBUaGUgVENHIHVzZSBjYXNlIHNlZW1zIG1vcmUg bGlrZSBhIGRlc2NyaXB0aW9uIG9mIHRlY2hub2xvZ3kgdGhhbiBhIHVzZQ0KICAgICAgICA+IGNh c2UuDQogICAgDQogICAgeWVzLCBJIHdhcyBnaXZlbiBhIGRvY3VtZW50IGluIHByb2dyZXNzLCBh bmQgSSBmZWx0IGl0IHdhcyB2ZXJ5IGRpZmZpY3VsdA0KICAgIHRvIGRldGVybWluZSB3aGF0IHRo ZSB1c2UgY2FzZSB3YXMgZXhhY3RseS4NCiAgICBJIGFsc28gZmVsdCBpdCB3YXMgIGltcG9ydGFu dCB0byB3cml0ZSBzb21ldGhpbmcgZG93biB0byBmZXJyZXQgb3V0IHRoZSB0YXJnZXQuDQogICAg DQogICAgQnV0LCBpbiBwYXJ0aWN1bGFyIHdoYXQgSSBzYXcgd2FzIHRoYXQgaXQgd2FzIG1vcmUg YWJvdXQgYXR0ZXN0aW5nIHRvDQogICAgdGhlIGludGVncml0eSBvZiBwaHlzaWNhbCBzeXN0ZW1z IGluIGFuIGVudGVycHJpc2UgcmF0aGVyIHRoYW4sIGZvciBpbnN0YW5jZSwNCiAgICBhdHRlc3Rp bmcgdG8gYWJzZW5zZSBvZiBob2xlcyBmb3IgdmlkZW8gdG8gZXNjYXBlIGludG8uDQogICAgSSBn YXRoZXIgeW91IGRpZCBub3QgZ2V0IHRoaXMgZnJvbSBteSB0ZXh0LCBzbyBJIHdpbGwgYXR0ZW1w dCB0byBpbXByb3ZlIGl0Lg0KICAgIA0KICAgICAgICA+IFRoZXJlIGlzIHRoZSBDaXNjbyAvIE5l dHdvcmsgRnVuY3Rpb24gdXNlIGNhc2UgdGhhdCBpcyBvcmllbnRlZCBhcm91bmQNCiAgICAgICAg PiB0aGUgbGlzdCBvZiBTVyBjb21wb25lbnRzIGFuZCBtZWFzdXJlbWVudCBvZiB0aGVtLiBFcmlj IFZvaXQgaXMgdGhlIG1hbg0KICAgICAgICA+IGZvciB0aGF0IEkgdGhpbmsuIEhlbmsgYW5kIGEg ZmV3IG90aGVycyB3ZXJlIGFsc28gaW50byBpdC4NCiAgICANCiAgICAgICAgPiBJIGFsc28gdGhp bmsgdGhlcmUgaXMgYXQgbGVhc3Qgb25lIElvVCB1c2UgY2FzZS4gTWF5YmUgaXQgaXMgb25lIHdp dGgNCiAgICAgICAgPiB2ZXJ5IG1hbnkgc3ViIHVzZSBjYXNlcy4gVGhlIG1haW4gaXNzdWUgdGhl cmUgaXMgb24gYm9hcmRpbmcgZGV2aWNlcyB0bw0KICAgICAgICA+IGFuIElvVCBtYW5hZ2VtZW50 IHBsYXRmb3JtIHRoYXQgaGF2ZSBiZWVuIGRyb3Atc2hpcHBlZCBvciBzZW50IHN0cmFpZ2h0DQog ICAgICAgID4gdG8gdGhlIGNvbnN1bWVyIG9yIHN1Y2guDQogICAgDQogICAgQXJlIHRoZXJlIGRv Y3VtZW50cyB5b3UgY2FuIHJlZmVyIG1lIHRvPw0KICAgIA0KICAgIC0tDQogICAgTWljaGFlbCBS aWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29y a3MNCiAgICAgLT0gSVB2NiBJb1QgY29uc3VsdGluZyA9LQ0KICAgIA0KICAgIA0KICAgIA0KICAg IA0KDQo= From nobody Sat Mar 23 01:55:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC941127AC2 for ; Sat, 23 Mar 2019 01:55:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWyY_1wWHsBj for ; Sat, 23 Mar 2019 01:55:51 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D8C612785F for ; Sat, 23 Mar 2019 01:55:51 -0700 (PDT) Received: from lhreml705-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 94142503F92B64403CDA for ; Sat, 23 Mar 2019 08:55:49 +0000 (GMT) Received: from DGGEMM404-HUB.china.huawei.com (10.3.20.212) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 23 Mar 2019 08:55:49 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.21]) by DGGEMM404-HUB.china.huawei.com ([10.3.20.212]) with mapi id 14.03.0415.000; Sat, 23 Mar 2019 16:55:44 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: Michael Richardson , Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] More use cases for draft-richardson-rats-usecases-00 Thread-Index: AQHU30/w+KeEvHV4r0SWcPzBrYhUNKYWYLeAgAKMmCA= Date: Sat, 23 Mar 2019 08:55:43 +0000 Message-ID: References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> In-Reply-To: <6495.1553219901@dooku.sandelman.ca> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.220.65.77] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?gb2312?b?tPC4tDogIE1vcmUgdXNlIGNhc2VzIGZvciBkcmFmdC1y?= =?gb2312?b?aWNoYXJkc29uLXJhdHMtdXNlY2FzZXMtMDA=?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Mar 2019 08:55:56 -0000 SGkgTWljaGFlbCwNCk1heWJlIHlvdSBjYW4gcmVmZXJlbmNlIHRvIHRoaXM6DQpodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTAzL21hdGVyaWFscy9zbGlkZXMtMTAzLXJhdHMt Y29tcHJvbWlzZS10cnVzdHdvcnRoeS12aXNpYmlsaXR5LWluLXdvcmtpbmctc3lzdGVtcy0wMA0K DQotLS0tLdPKvP7Urbz+LS0tLS0NCreivP7IyzogUkFUUyBbbWFpbHRvOnJhdHMtYm91bmNlc0Bp ZXRmLm9yZ10gtPqx7SBNaWNoYWVsIFJpY2hhcmRzb24NCreiy83KsbzkOiAyMDE5xOoz1MIyMsjV IDk6NTgNCsrVvP7IyzogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+ DQqzrcvNOiByYXRzQGlldGYub3JnDQrW98ziOiBSZTogW1JhdHNdIE1vcmUgdXNlIGNhc2VzIGZv ciBkcmFmdC1yaWNoYXJkc29uLXJhdHMtdXNlY2FzZXMtMDANCg0KDQpMYXVyZW5jZSBMdW5kYmxh ZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4gd3JvdGU6DQogICAgPiBUaGUgVENHIHVzZSBjYXNl IHNlZW1zIG1vcmUgbGlrZSBhIGRlc2NyaXB0aW9uIG9mIHRlY2hub2xvZ3kgdGhhbiBhIHVzZQ0K ICAgID4gY2FzZS4NCg0KeWVzLCBJIHdhcyBnaXZlbiBhIGRvY3VtZW50IGluIHByb2dyZXNzLCBh bmQgSSBmZWx0IGl0IHdhcyB2ZXJ5IGRpZmZpY3VsdCB0byBkZXRlcm1pbmUgd2hhdCB0aGUgdXNl IGNhc2Ugd2FzIGV4YWN0bHkuDQpJIGFsc28gZmVsdCBpdCB3YXMgIGltcG9ydGFudCB0byB3cml0 ZSBzb21ldGhpbmcgZG93biB0byBmZXJyZXQgb3V0IHRoZSB0YXJnZXQuDQoNCkJ1dCwgaW4gcGFy dGljdWxhciB3aGF0IEkgc2F3IHdhcyB0aGF0IGl0IHdhcyBtb3JlIGFib3V0IGF0dGVzdGluZyB0 byB0aGUgaW50ZWdyaXR5IG9mIHBoeXNpY2FsIHN5c3RlbXMgaW4gYW4gZW50ZXJwcmlzZSByYXRo ZXIgdGhhbiwgZm9yIGluc3RhbmNlLCBhdHRlc3RpbmcgdG8gYWJzZW5zZSBvZiBob2xlcyBmb3Ig dmlkZW8gdG8gZXNjYXBlIGludG8uDQpJIGdhdGhlciB5b3UgZGlkIG5vdCBnZXQgdGhpcyBmcm9t IG15IHRleHQsIHNvIEkgd2lsbCBhdHRlbXB0IHRvIGltcHJvdmUgaXQuDQoNCiAgICA+IFRoZXJl IGlzIHRoZSBDaXNjbyAvIE5ldHdvcmsgRnVuY3Rpb24gdXNlIGNhc2UgdGhhdCBpcyBvcmllbnRl ZCBhcm91bmQNCiAgICA+IHRoZSBsaXN0IG9mIFNXIGNvbXBvbmVudHMgYW5kIG1lYXN1cmVtZW50 IG9mIHRoZW0uIEVyaWMgVm9pdCBpcyB0aGUgbWFuDQogICAgPiBmb3IgdGhhdCBJIHRoaW5rLiBI ZW5rIGFuZCBhIGZldyBvdGhlcnMgd2VyZSBhbHNvIGludG8gaXQuDQoNCiAgICA+IEkgYWxzbyB0 aGluayB0aGVyZSBpcyBhdCBsZWFzdCBvbmUgSW9UIHVzZSBjYXNlLiBNYXliZSBpdCBpcyBvbmUg d2l0aA0KICAgID4gdmVyeSBtYW55IHN1YiB1c2UgY2FzZXMuIFRoZSBtYWluIGlzc3VlIHRoZXJl IGlzIG9uIGJvYXJkaW5nIGRldmljZXMgdG8NCiAgICA+IGFuIElvVCBtYW5hZ2VtZW50IHBsYXRm b3JtIHRoYXQgaGF2ZSBiZWVuIGRyb3Atc2hpcHBlZCBvciBzZW50IHN0cmFpZ2h0DQogICAgPiB0 byB0aGUgY29uc3VtZXIgb3Igc3VjaC4NCg0KQXJlIHRoZXJlIGRvY3VtZW50cyB5b3UgY2FuIHJl ZmVyIG1lIHRvPw0KDQotLQ0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4u Y2E+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgIC09IElQdjYgSW9UIGNvbnN1bHRpbmcgPS0N Cg0KDQoNCg== From nobody Sat Mar 23 13:06:10 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27185129AB8 for ; Sat, 23 Mar 2019 13:06:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WXd5FnWHOr5q for ; Sat, 23 Mar 2019 13:06:06 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 631E91200B3 for ; Sat, 23 Mar 2019 13:06:06 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:128::aef]) by relay.sandelman.ca (Postfix) with ESMTPS id 8C1201F45E; Sat, 23 Mar 2019 20:06:04 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 6610239DE; Sat, 23 Mar 2019 16:06:03 -0400 (EDT) From: Michael Richardson To: Hannes Tschofenig cc: "rats\@ietf.org" In-reply-to: References: Comments: In-reply-to Hannes Tschofenig message dated "Mon, 11 Mar 2019 15:32:11 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Sat, 23 Mar 2019 21:06:03 +0100 Message-ID: <25160.1553371563@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] Platform Security Architecture (PSA) Attestation Token X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Mar 2019 20:06:08 -0000 --=-=-= Content-Type: text/plain Hannes Tschofenig wrote: > Dear friends of attestation tokens, (That's an interesting claim you have have there :-) > as mentioned in the conference call earlier this year we have > implemented the Entity Attestation Token (EAT) [0] functionality. The > Platform Security Architecture (PSA) [1] describes how to design and > implement secure IoT products and contains, among other things, a > number of APIs for use with the new Arm v8-M architecture. The > attestation API is where we implemented the functionality described in > the draft I published today [2], which is part of Arm Trusted Firmware > M [3]. I tried to include your documents into my use case draft. I felt that you were trying to address some specific set of use cases, and while you are are building an architecture for others to use, I thought that perhaps you had a non-infinite set of use cases. I did not wind up including anything specific as I ran out of time. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlyWkasACgkQlUzhVv38 QpCDJgf/fpQc6YtZIEZuxnkfHX+DOtIBey+qMI2T2Bair2agHVltyoI054n7ANk3 GT7QAe1jIlyJwi/qHAmpFAD1MfRuqGAnkWOkKKItIVe92/13x9I+rhN0HvihQwRb 2VHkgfA2+7ns0GRW61yGuRIuqMTfRUYMtiaPqJTYSul1vJ6vPN/32HkrvcmQOfMu t7MD4Y4t1GeqqGKlXpTVppVm5G2jSt+pru5IsSOYHSIQ8mbD82yPSU7yuwtbRrNv t9t3D1j0xVVcHJK61vVWK9qy7Rk/DWVmQkCg0i8jE2ve67ZqPvbZWSqzPHn9HfU7 pA+JKeA0XN2ZmP9At8s7LLRdW37H7w== =CaoV -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Mar 24 12:33:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB52A120091; Sun, 24 Mar 2019 12:32:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NlPfGVT05YBK; Sun, 24 Mar 2019 12:32:54 -0700 (PDT) Received: from mga03.intel.com (mga03.intel.com [134.134.136.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0E0212006E; Sun, 24 Mar 2019 12:32:52 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by orsmga103.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Mar 2019 12:32:51 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.60,256,1549958400"; d="scan'208,217";a="331589056" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by fmsmga005.fm.intel.com with ESMTP; 24 Mar 2019 12:32:50 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.11]) by ORSMSX105.amr.corp.intel.com ([169.254.2.119]) with mapi id 14.03.0415.000; Sun, 24 Mar 2019 12:32:37 -0700 From: "Smith, Ned" To: "rats@ietf.org" CC: "rats-chairs@ietf.org" Thread-Topic: RATS WG note taker voluneers Thread-Index: AQHU4nhWSKgX8wS+t0G70pwycggggQ== Date: Sun, 24 Mar 2019 19:32:36 +0000 Message-ID: <4DA47E2A-F56A-4423-AC68-2CD179004505@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.17.0.190309 x-originating-ip: [10.249.45.8] Content-Type: multipart/alternative; boundary="_000_4DA47E2AF56A4423AC682CD179004505intelcom_" MIME-Version: 1.0 Archived-At: Subject: [Rats] RATS WG note taker voluneers X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Mar 2019 19:33:00 -0000 --_000_4DA47E2AF56A4423AC682CD179004505intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIFJBVFMgV0cgY2hhaXJzIGFyZSBzb2xpY2l0aW5nIDIgbm90ZSB0YWtlcnMgZm9yIHRoZSBS QVRTIFRodXJzZGF5IEFmdGVybm9vbiBTZXNzaW9uIElJICgxNjoxMCAtIDE4OjEwKQ0KDQpJZiBp bnRlcmVzdGVkIHBsZWFzZSByZXNwb25kIGJ5IGVtYWlsaW5nIHJhdHMtY2hhaXJzQGlldGYub3Jn PG1haWx0bzpyYXRzLWNoYWlyc0BpZXRmLm9yZz4NCg0KVGhhbmtzIQ0KUkFUUyBDaGFpcnMNCg== --_000_4DA47E2AF56A4423AC682CD179004505intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <4CDDA884D1AA0C45A8B45223947F9B4B@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkhlbHZldGlj YU5ldWU7DQoJcGFub3NlLTE6MiAwIDUgMyAwIDAgMCAyIDAgNDt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxp bmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0 aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBp bjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+ DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRG NzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGUgUkFUUyBXRyBjaGFpcnMgYXJlIHNvbGlj aXRpbmcgMiBub3RlIHRha2VycyBmb3IgdGhlIFJBVFMgVDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWU7Y29sb3I6YmxhY2siPmh1cnNk YXkgQWZ0ZXJub29uIFNlc3Npb24gSUkgKDE2OjEwIC0gMTg6MTApPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTpIZWx2ZXRpY2FOZXVlO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWU7Y29sb3I6YmxhY2siPklmIGludGVyZXN0ZWQg cGxlYXNlIHJlc3BvbmQgYnkgZW1haWxpbmcNCjxhIGhyZWY9Im1haWx0bzpyYXRzLWNoYWlyc0Bp ZXRmLm9yZyI+cmF0cy1jaGFpcnNAaWV0Zi5vcmc8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTpIZWx2ZXRpY2FOZXVlO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYU5ldWU7Y29sb3I6YmxhY2siPlRoYW5rcyE8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWU7Y29sb3I6YmxhY2siPlJBVFMgQ2hhaXJzPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_4DA47E2AF56A4423AC682CD179004505intelcom_-- From nobody Sun Mar 24 15:22:17 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 958F91201CB for ; Sun, 24 Mar 2019 15:22:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zyEm_XBVBTEb for ; Sun, 24 Mar 2019 15:22:09 -0700 (PDT) Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E772120185 for ; Sun, 24 Mar 2019 15:22:07 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga107.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Mar 2019 15:22:07 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.60,256,1549958400"; d="scan'208,217";a="158006256" Received: from orsmsx102.amr.corp.intel.com ([10.22.225.129]) by fmsmga001.fm.intel.com with ESMTP; 24 Mar 2019 15:22:07 -0700 Received: from orsmsx153.amr.corp.intel.com (10.22.226.247) by ORSMSX102.amr.corp.intel.com (10.22.225.129) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sun, 24 Mar 2019 15:22:06 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.11]) by ORSMSX153.amr.corp.intel.com ([169.254.12.88]) with mapi id 14.03.0415.000; Sun, 24 Mar 2019 15:22:06 -0700 From: "Smith, Ned" To: "rats@ietf.org" Thread-Topic: Jabber scribe Thread-Index: AQHU4pADeCon+xdCUUGKUyNgS8NLHg== Date: Sun, 24 Mar 2019 22:22:06 +0000 Message-ID: <82EEEAA6-EE17-46C6-939F-6C51E4D3E3CA@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.17.0.190309 x-originating-ip: [10.249.46.222] Content-Type: multipart/alternative; boundary="_000_82EEEAA6EE1746C6939F6C51E4D3E3CAintelcom_" MIME-Version: 1.0 Archived-At: Subject: [Rats] Jabber scribe X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Mar 2019 22:22:17 -0000 --_000_82EEEAA6EE1746C6939F6C51E4D3E3CAintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIGNoYWlycyB3b3VsZCBsaWtlIHRvIHRoYW5rIFN0ZXBoZW4gQmFuZ2hhcnQgZm9yIHZvbHVu dGVlcmluZyB0byBiZSBvdXIgSmFiYmVyIHNjcmliZSBmb3IgdGhlIFJBVFMgV0cgc2Vzc2lvbi4N Cg0KV2Ugc3RpbGwgbmVlZCAyIHZvbHVudGVlciBub3RlIHRha2Vycy4g4pi6DQoNClRoYW5rcywN ClJBVFMgY2hhaXJzDQo= --_000_82EEEAA6EE1746C6939F6C51E4D3E3CAintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <8BFBACD40F524B47946D1518039E7D6D@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQXBwbGUgQ29sb3IgRW1vamkiOw0KCXBh bm9zZS0xOjAgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAu TXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtY29tcG9z ZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXpl OjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2Lldv cmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAy NiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hh cGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+ DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5n PSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29y ZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij5UaGUgY2hhaXJzIHdvdWxkIGxpa2UgdG8gdGhhbmsNCjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjpibGFjayI+U3RlcGhlbiBCYW5naGFydDwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+IGZvciB2b2x1bnRlZXJpbmcgdG8gYmUgb3Vy IEphYmJlciBzY3JpYmUgZm9yIHRoZSBSQVRTIFdHIHNlc3Npb24uDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPldlIHN0aWxsIG5lZWQgMiB2b2x1bnRlZXIgbm90 ZSB0YWtlcnMuDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDsiPuKYujwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5UaGFua3MsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlJBVFMgY2hhaXJzPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_82EEEAA6EE1746C6939F6C51E4D3E3CAintelcom_-- From nobody Sun Mar 24 23:32:32 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D33F412035F for ; Sun, 24 Mar 2019 23:32:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 38Wei0CGtyz1 for ; Sun, 24 Mar 2019 23:32:30 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F24DF120353 for ; Sun, 24 Mar 2019 23:32:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5906; q=dns/txt; s=iport; t=1553495549; x=1554705149; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=PLaTmqImw8fxYTIMuFnQudv/wzbKCoBUzCn2FeoHtI0=; b=TAxk4OLUb557SVKbvBD+7xdFW8EN9CDFJjI+WDeNBknf0WG8XVw0iSI5 PedJbfVXVHqqc7vgqPlHZ4cZZfNRtImlbaMmxIsXVeuQZjn7XI/Y5KyXo NS+1Do+mRSoOXSB0gDj/GGuk/KMCRHGmev60IfMu0UrV8issoEgMbw+lI 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ADAACIdZhc/5JdJa1jGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBUQQBAQEBAQsBgQ6BAmiBAycKhASIHI0tkkOFd4F7DQE?= =?us-ascii?q?BhGwCF4RpIjQJDQEBAwEBCQEDAm0ohUoBAQEEIwpcAgEIEQQBASsCAgIwHQg?= =?us-ascii?q?CBAESCIMbgRFkrU+BL4oogS8BizEXgUA/gRGDEj6HToJXA4xwhB+HRoxBCQK?= =?us-ascii?q?TLyGTfosckyoCERWBLh84gVZwFYMnkEtBMY40gR8BAQ?= X-IronPort-AV: E=Sophos;i="5.60,256,1549929600"; d="scan'208,217";a="535841140" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 25 Mar 2019 06:32:04 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id x2P6W4fe006891 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 25 Mar 2019 06:32:04 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 25 Mar 2019 02:32:03 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1473.003; Mon, 25 Mar 2019 02:32:03 -0400 From: "Eric Voit (evoit)" To: "Smith, Ned" , "rats@ietf.org" Thread-Topic: Jabber scribe Thread-Index: AQHU4pADeCon+xdCUUGKUyNgS8NLHqYb45tQ Date: Mon, 25 Mar 2019 06:32:03 +0000 Message-ID: References: <82EEEAA6-EE17-46C6-939F-6C51E4D3E3CA@intel.com> In-Reply-To: <82EEEAA6-EE17-46C6-939F-6C51E4D3E3CA@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.109.210] Content-Type: multipart/alternative; boundary="_000_cc16437fbbad4823a4bc2b6fe08051feXCHRTP013ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: rcdn-core-10.cisco.com Archived-At: Subject: Re: [Rats] Jabber scribe X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Mar 2019 06:32:32 -0000 --_000_cc16437fbbad4823a4bc2b6fe08051feXCHRTP013ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBjYW4gdGFrZSBub3Rlcy4NCg0KRXJpYw0KDQpGcm9tOiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0 Zi5vcmc+IE9uIEJlaGFsZiBPZiBTbWl0aCwgTmVkDQpTZW50OiBTdW5kYXksIE1hcmNoIDI0LCAy MDE5IDY6MjIgUE0NClRvOiByYXRzQGlldGYub3JnDQpTdWJqZWN0OiBbUmF0c10gSmFiYmVyIHNj cmliZQ0KDQpUaGUgY2hhaXJzIHdvdWxkIGxpa2UgdG8gdGhhbmsgU3RlcGhlbiBCYW5naGFydCBm b3Igdm9sdW50ZWVyaW5nIHRvIGJlIG91ciBKYWJiZXIgc2NyaWJlIGZvciB0aGUgUkFUUyBXRyBz ZXNzaW9uLg0KDQpXZSBzdGlsbCBuZWVkIDIgdm9sdW50ZWVyIG5vdGUgdGFrZXJzLiDimLoNCg0K VGhhbmtzLA0KUkFUUyBjaGFpcnMNCg== --_000_cc16437fbbad4823a4bc2b6fe08051feXCHRTP013ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkgRW1vamkiOw0KCXBhbm9z ZS0xOjIgMTEgNSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1z b05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0 eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVt YWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0i Izk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkkgY2FuIHRha2Ugbm90ZXMuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5FcmljPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUx IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkZyb206PC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+IFJBVFMgJmx0O3JhdHMtYm91bmNlc0BpZXRmLm9yZyZn dDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+U21pdGgsIE5lZDxicj4NCjxiPlNlbnQ6PC9iPiBTdW5k YXksIE1hcmNoIDI0LCAyMDE5IDY6MjIgUE08YnI+DQo8Yj5Ubzo8L2I+IHJhdHNAaWV0Zi5vcmc8 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW1JhdHNdIEphYmJlciBzY3JpYmU8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+VGhlIGNoYWlycyB3b3VsZCBsaWtlIHRvIHRoYW5rDQo8c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPlN0ZXBoZW4gQmFuZ2hhcnQ8L3NwYW4+IGZvciB2b2x1bnRlZXJpbmcgdG8gYmUgb3Vy IEphYmJlciBzY3JpYmUgZm9yIHRoZSBSQVRTIFdHIHNlc3Npb24uDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPldlIHN0aWxsIG5lZWQgMiB2b2x1bnRlZXIgbm90 ZSB0YWtlcnMuDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+4pi6PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPlRoYW5rcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+UkFUUyBjaGFpcnM8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_cc16437fbbad4823a4bc2b6fe08051feXCHRTP013ciscocom_-- From nobody Wed Mar 27 11:24:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF326120360 for ; Wed, 27 Mar 2019 11:24:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2vjaYfYmgy7f for ; Wed, 27 Mar 2019 11:24:56 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F0B4120329 for ; Wed, 27 Mar 2019 11:24:56 -0700 (PDT) Received: from dooku.sandelman.ca (cst-prg-34-242.cust.vodafone.cz [46.135.34.242]) by relay.sandelman.ca (Postfix) with ESMTPS id A78CB1F45B; Wed, 27 Mar 2019 18:24:53 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 084B41560; Wed, 27 Mar 2019 19:19:43 +0100 (CET) From: Michael Richardson To: Laurence Lundblade cc: Anthony Nadalin , "rats\@ietf.org" In-reply-to: <219648D6-188A-429D-A13F-ED6155DE9016@island-resort.com> References: <12503.1552447661@localhost> <219648D6-188A-429D-A13F-ED6155DE9016@island-resort.com> Comments: In-reply-to Laurence Lundblade message dated "Wed, 20 Mar 2019 12:00:38 -0700." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Wed, 27 Mar 2019 19:19:43 +0100 Message-ID: <14288.1553710783@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Mar 2019 18:24:58 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Laurence Lundblade wrote: > The way I=E2=80=99d approach the FIDO use case is to say that the rel= ying party > wants to to have the HW/SW implementation that did the biometric check > strongly identified (attested). This is to make sure that the end user > is not using some short cut or hacked, or insecure implementation that > is not checking the biometric properly. My changes based upon your comments: {{fidosignature}}, but these have been combined into the W3C document {{fido_w3c}} specification. =2DThis specification is very much focused on authenticating user from devi= ces with =2Dhumans attached to them. +The FIDO use case involves a relying party that wants to have the HW/SW +implementation does a biometric check on the human to be strongly attested. (Still looking for some pointers to *attestion* parts of the Android KeySto= re.) =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlybvr4ACgkQlUzhVv38 QpDVowf9GnQWf5xsoh+Rjb0A0QE5XWALVYUFDXM6YWaHCcP3yI0WzxNHrL0Ck6dl HU3uFrov+XtSEd9WTW927K28WcwsDH+GOKLcx8QtPXjRktXQ9ewslSqGGQw2U77r xWpzGsaMB8haZGR6McOi94hmRguk4ItrAhANYzsDIko1aXfky8qv2lv6K6z55I8y JC1ZMeptEM6qMAFu3IUrWh/1ffpeAcWlgoTw0ToKPKBJOiV5DK1mAH4TqA8SNklB AQmSwtTWK6gZO5UdlsaWdHD9crIf5gCZlGvd6gWDFE7Dk7SbcINb86lGAVMU9q+u wuz52wyiGqrBx+ihG2VBXGxpJDouUA== =lKqy -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 27 11:29:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CCF712032D for ; Wed, 27 Mar 2019 11:29:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K07nv82rFFhL for ; Wed, 27 Mar 2019 11:29:55 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12BCB120255 for ; Wed, 27 Mar 2019 11:29:54 -0700 (PDT) Received: from dooku.sandelman.ca (cst-prg-34-242.cust.vodafone.cz [46.135.34.242]) by relay.sandelman.ca (Postfix) with ESMTPS id 644BA1F45B; Wed, 27 Mar 2019 18:29:53 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 548162854; Wed, 27 Mar 2019 19:20:57 +0100 (CET) From: Michael Richardson To: Anthony Nadalin cc: Laurence Lundblade , "rats\@ietf.org" In-reply-to: References: <12503.1552447661@localhost>, <219648D6-188A-429D-A13F-ED6155DE9016@island-resort.com> Comments: In-reply-to Anthony Nadalin message dated "Wed, 20 Mar 2019 19:19:43 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Wed, 27 Mar 2019 19:20:57 +0100 Message-ID: <14494.1553710857@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] draft-richardson-rats-usecases-00 comments X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Mar 2019 18:29:57 -0000 --=-=-= Content-Type: text/plain Anthony Nadalin wrote: > And in the FIDO case we don't need a transport as it's carried in the > W3C WebAuthn and FIDO CTAP protocols Noted: +FIDO does provides a transport in the form of the WebAuthn and FIDO CTAP protocols. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlybvwgACgkQlUzhVv38 QpDiJggAqKJw8WH70B2sH5g6sG7KMGEqCdTIp8M+K+2qtD+wbTp4Aq4Co/jgqHxn pfkRsTnPrkmHUD0F3l1Az2XrCZDZjIGoR4kDf+agj+IVZlYDMfgbFHsTwLzsV2b3 DsVctPJ5RsbRpnXWcioQSNROxYIs9SNB3gTXxQ2QowICRSZ3vZKM3XuYWVljn8Nw 1VffkpF/tznjM6dFQJwGB4QE8fh9BcRE/hzeRF81SoizlauswZvGwaceacgFPfTC /fUAV3dHdr6sXdYmabcdTlDvyvn5llmcvDvT0YhYAh5Pnj2NFmz2lfYTTPtXh3oV uVVY9CmY9fTbiPtMfT64ivxEmUCNCw== =B57y -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 27 15:23:27 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7553912001E for ; Wed, 27 Mar 2019 15:23:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A6bg77cRBJne for ; Wed, 27 Mar 2019 15:23:21 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F9A012008D for ; Wed, 27 Mar 2019 15:23:07 -0700 (PDT) Received: from dooku.sandelman.ca (cst-prg-34-242.cust.vodafone.cz [46.135.34.242]) by relay.sandelman.ca (Postfix) with ESMTPS id A2A601F45B; Wed, 27 Mar 2019 22:23:03 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 256F91D84; Wed, 27 Mar 2019 23:23:06 +0100 (CET) From: Michael Richardson To: "Smith\, Ned" cc: Laurence Lundblade , "Heldt-Sheller\, Nathan" , "rats\@ietf.org" In-reply-to: References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> Comments: In-reply-to "Smith, Ned" message dated "Fri, 22 Mar 2019 21:01:53 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Wed, 27 Mar 2019 23:23:06 +0100 Message-ID: <507.1553725386@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Mar 2019 22:23:27 -0000 --=-=-= Content-Type: text/plain Smith, Ned wrote: > I'm aware that the Open Connectivity Foundation (OCF) has implemented > an IoT onboarding use case. Possibly it makes sense to reference one of > their documents? -Ned https://openconnectivity.org/specs/OCF_Security_Specification_v1.0.0.pdf Is this this document you are thinking of? There is mention in a blog of a 2.0, but I haven't found it yet. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlyb98kACgkQlUzhVv38 QpADGwf/f7M55dQaOnSraNC6DK8FadnBuMA91walx3Dgy5wXl9g4jwCp7bdGAGD3 JHQCD1+40eE0QicIzIoDZMhbq4ZAd5eiWwTlDsUtKSP47M7CuREDRQ1SljofMoLc 7OsaVKBIq6grF5UBgd5vyRJiXJqSqFJDhO/iMXFBJsPOYcVG7XjJZxDTTkcllcR9 TzRdV9St0QZBO/5oz0peDBzUC7NsO153XNHn30+ZvjqE/Bp131oaifLPTNNKBmiM JjDpc7wt12qk+u/7bphwRfLiPY3SZ8yZShfF8UEA7hgm84wRTAwJb3nUNkNOlIdh t2X4mkXgZxYE+hIvST6bUHG1mMTcqA== =kj3r -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 27 15:33:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AC8E12036A for ; Wed, 27 Mar 2019 15:33:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 84qPlJWDEly9 for ; Wed, 27 Mar 2019 15:33:46 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7105120308 for ; Wed, 27 Mar 2019 15:33:14 -0700 (PDT) Received: from dooku.sandelman.ca (cst-prg-34-242.cust.vodafone.cz [46.135.34.242]) by relay.sandelman.ca (Postfix) with ESMTPS id CEE431F45B; Wed, 27 Mar 2019 22:33:12 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id E8F561D84; Wed, 27 Mar 2019 23:33:16 +0100 (CET) From: Michael Richardson To: "Xialiang \(Frank\, Network Standard & Patent Dept\)" cc: Laurence Lundblade , "rats\@ietf.org" In-reply-to: References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> Comments: In-reply-to "Xialiang (Frank, Network Standard & Patent Dept)" message dated "Sat, 23 Mar 2019 08:55:43 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Wed, 27 Mar 2019 23:33:16 +0100 Message-ID: <1624.1553725996@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] =?utf-8?b?562U5aSNOiAgTW9yZSB1c2UgY2FzZXMgZm9yIGRyYWZ0?= =?utf-8?q?-richardson-rats-usecases-00?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Mar 2019 22:33:51 -0000 --=-=-= Content-Type: text/plain "Xialiang (Frank, Network Standard & Patent Dept)" wrote: > Hi Michael, Maybe you can reference to this: > https://datatracker.ietf.org/meeting/103/materials/slides-103-rats-compromise-trustworthy-visibility-in-working-systems-00 Okay, I think that this is the TCG use case, so I think the -01 will have it covered. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlyb+iwACgkQlUzhVv38 QpCVIAf/f3BrOt5mirapM8K4Gdso1HNiyL9aFGXCJB6mz2vPEnz+P3LzQTPrGqJE FC9896sazB7zUrtgh5X6SHR4ruHrPCTjU7U9kiYq4tvnNnn63eVDarhR+1w08/Hr J3UkMFj8zp/4/oFhTtt//hjgeM5DTngVZRCjS46LO2DiaxM/9Gj7B2IJqP4OqIq0 f97XZMf0muAk81UrKL/ix04lAK3N34oZJTWymlhu4dTz5WIcPgvb0ZaNyFh/tHcC KkblqdiyHEuzo37X6MGutZPvhQf3LZGdpcWcNKh2soj23Al0An16L33ZEZaOfNdd eC0r+CYQqUiNp8yJIi+7PhaYobgz+A== =TT8l -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Mar 28 00:43:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 664C6120170 for ; Thu, 28 Mar 2019 00:43:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fabypiXixWgL for ; Thu, 28 Mar 2019 00:43:30 -0700 (PDT) Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AED0712031F for ; Thu, 28 Mar 2019 00:43:29 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Mar 2019 00:43:28 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.60,278,1549958400"; d="scan'208";a="331437316" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by fmsmga006.fm.intel.com with ESMTP; 28 Mar 2019 00:43:28 -0700 Received: from orsmsx151.amr.corp.intel.com (10.22.226.38) by ORSMSX110.amr.corp.intel.com (10.22.240.8) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 28 Mar 2019 00:43:28 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.11]) by ORSMSX151.amr.corp.intel.com ([169.254.7.9]) with mapi id 14.03.0415.000; Thu, 28 Mar 2019 00:43:27 -0700 From: "Smith, Ned" To: Michael Richardson CC: Laurence Lundblade , "Heldt-Sheller, Nathan" , "rats@ietf.org" Thread-Topic: [Rats] More use cases for draft-richardson-rats-usecases-00 Thread-Index: AQHU30/xj2BiBGEziUKa7njbv8kyH6YXXCyAgAD8bgCACDVrAIAArVGA Date: Thu, 28 Mar 2019 07:43:27 +0000 Message-ID: <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> In-Reply-To: <507.1553725386@dooku.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.17.1.190326 x-originating-ip: [10.249.32.212] Content-Type: text/plain; charset="utf-8" Content-ID: <2DCEC1DB5B2D7A4E94E858B54065CC78@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2019 07:43:33 -0000 WWVzLCBwbHVzIHRoaXMgaHR0cHM6Ly9vcGVuY29ubmVjdGl2aXR5Lm9yZy9kcmFmdHNwZWNzL29j ZjIuMC9DUl9TZWNXR19CXzE2NjdfMjMzMV9TUF9Db21tb25fSW5mcmEucGRmIHdoaWNoIGRlc2Ny aWJlcyBwcm9maWxlcyBmb3IgZGlmZmVyZW50IHR5cGVzIG9mIGF0dGVzdGF0aW9uIGNoZWNraW5n IHRoYXQgbWF5IGluY2x1ZGU6DQoxKSBtZmcgaW5zdGFsbGVkIGF0dGVzdGF0aW9uIGtleSAvIGRl dmljZUlEICh4LjUwOSBjZXJ0IGJhc2VkKQ0KMikgVENHIHBsYXRmb3JtIGNlcnRpZmljYXRlIGNv bnRhaW5pbmcgaGFyZGVuaW5nIC8gcXVhbGl0eSBjcml0ZXJpYSBzdXBwbGllZCBieSAzcmQgcGFy dHkgdmFsaWRhdGlvbiBlbnRpdGllcw0KMykgU2VjdXJpdHkgYW5kIHNwZWMgY29tcGxpYW5jZSBz dGF0dXMgY2hlY2tpbmcgYnkgT0NGIHZhbGlkYXRpb24gZW50aXR5DQo0KSBFbnJvbGxtZW50IG9m IGEgbG9jYWwgZGV2aWNlSUQgY3JlZGVudGlhbCBmb3IgdXNlIHBvc3Qgb25ib2FyZGluZy4NCjUp IFRMUyAvIENvQVBzIGFzIGEgY29udmV5YW5jZSBwcm90b2NvbA0KDQrvu79PbiAzLzI3LzE5LCAx MToyMyBQTSwgIk1pY2hhZWwgUmljaGFyZHNvbiIgPG1jcitpZXRmQHNhbmRlbG1hbi5jYT4gd3Jv dGU6DQoNCiAgICANCiAgICBTbWl0aCwgTmVkIDxuZWQuc21pdGhAaW50ZWwuY29tPiB3cm90ZToN CiAgICAgICAgPiBJJ20gYXdhcmUgdGhhdCB0aGUgT3BlbiBDb25uZWN0aXZpdHkgRm91bmRhdGlv biAoT0NGKSBoYXMgaW1wbGVtZW50ZWQNCiAgICAgICAgPiBhbiBJb1Qgb25ib2FyZGluZyB1c2Ug Y2FzZS4gUG9zc2libHkgaXQgbWFrZXMgc2Vuc2UgdG8gcmVmZXJlbmNlIG9uZSBvZg0KICAgICAg ICA+IHRoZWlyIGRvY3VtZW50cz8gIC1OZWQNCiAgICANCiAgICBodHRwczovL29wZW5jb25uZWN0 aXZpdHkub3JnL3NwZWNzL09DRl9TZWN1cml0eV9TcGVjaWZpY2F0aW9uX3YxLjAuMC5wZGYNCiAg ICANCiAgICBJcyB0aGlzIHRoaXMgZG9jdW1lbnQgeW91IGFyZSB0aGlua2luZyBvZj8NCiAgICAN CiAgICBUaGVyZSBpcyBtZW50aW9uIGluIGEgYmxvZyBvZiBhIDIuMCwgYnV0IEkgaGF2ZW4ndCBm b3VuZCBpdCB5ZXQuDQogICAgDQogICAgLS0NCiAgICBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitJ RVRGQHNhbmRlbG1hbi5jYT4sIFNhbmRlbG1hbiBTb2Z0d2FyZSBXb3Jrcw0KICAgICAtPSBJUHY2 IElvVCBjb25zdWx0aW5nID0tDQogICAgDQogICAgDQogICAgDQogICAgDQoNCg== From nobody Thu Mar 28 03:05:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE4EF120267 for ; Thu, 28 Mar 2019 03:05:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8JyS6N5XS5NE for ; Thu, 28 Mar 2019 03:05:53 -0700 (PDT) Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E545120264 for ; Thu, 28 Mar 2019 03:05:52 -0700 (PDT) Received: by mail-wm1-x332.google.com with SMTP id a184so2915910wma.2 for ; Thu, 28 Mar 2019 03:05:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=r+mdGv4sIs+n1hPlocSSm66J7N6o76FOhWOKFhCMfFA=; b=vevBsQUAt3hmklmuMzUtclJZDFAEI/FsMuHslISgiRH4WxKOC6g7vaF+UUIpjxng0J 9XPVVIZQRJ1bslnRCOAfO0qMPUTJ7sFPviCjmCRO8ZGTK6q4g6d2zRPCWQ0iyasMiJdJ PnREv/L/lJ+CDBJtv8ryqFsSs73tdj9BWfIUtJezsdjj+5lpu7Z0oq/dDcffJpZVJSsO +HbUqEFF5tVBFbGxkit9qY8mIN2ytsHoJ8t4J1Ipt/9vnaSMC0cCxmN3e7Hwu+K6VVRB 0iLg438pKaA+qHNLwjVMTo3tm83VLPFy6X7EsZ7ojcTwA272dh9CDVpzZ4bfSLpoOG67 neXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=r+mdGv4sIs+n1hPlocSSm66J7N6o76FOhWOKFhCMfFA=; b=oJb1vbUwb3VwhDb1CkeHNNNYwLnrijZFAxhGvwq6/HZCkq48juzqdw7GLuKLwpUfTl D2kHmINSaGe1aKcnA5zHupTa/9IiDu0ElaIL02kK20IY/QKDjAX0b8F9uA11zAebnGZU 97847qx5TUgSeUNevc4uU7uFnfAJDaw/obp+OnJ+jQUCNgc85ikLbf5cU9okuzrsttYE WNChYRKsVKzO5+lSEFxSfiakleyiL+3KPPiqj+wLWJcvHyr1Wvaxd1yEvmpmTrZOQLBc cbjkoU8J76uzbXZu/GKkRTtqiGlt2kNPdeQ3roej7IJh3APewQJ6ebRXkgTmbScZfq24 MyvQ== X-Gm-Message-State: APjAAAWH4+BlPGz3TOjJEJ6hplMyJvWixpncA/RVq8xETRRdMTG1BWBe Hm9umHc76DG3eYbimZReRBfekfYeNYI= X-Google-Smtp-Source: APXvYqzt2XtPmWbYY4uK+EBivWtbFYAEPWRTJjxBpMIf6FECJNrbnZm2ujLoaOKPdTW7+7IB/2J9xQ== X-Received: by 2002:a1c:7706:: with SMTP id t6mr15622991wmi.141.1553767550662; Thu, 28 Mar 2019 03:05:50 -0700 (PDT) Received: from ?IPv6:2001:67c:1232:144:f875:4cdc:dd36:7588? ([2001:67c:1232:144:f875:4cdc:dd36:7588]) by smtp.googlemail.com with ESMTPSA id i28sm48990363wrc.32.2019.03.28.03.05.48 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 28 Mar 2019 03:05:49 -0700 (PDT) To: rats@ietf.org From: Anders Rundgren Message-ID: <7f445336-4d11-b573-1e29-ddffa47b6e20@gmail.com> Date: Thu, 28 Mar 2019 11:05:46 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: [Rats] Another take on Remote Attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2019 10:05:58 -0000 Hi RATS, This is a FYI only posting.  Quite some time ago at the Office of CTO of RSA Security I started to play with remote attestation. After leaving RSA I came up with a scheme based on attested session keys enabling a bunch of pretty cool features: - Offloading JSON and BASE64 encoding/decoding, Networking and UI to the REE - API and response aggregation/pipe-lining - User interaction inside of the protocol - Provisioning of complex structures in a stepwise fashion - Virtual namespace eliminates need for explicit key IDs - Atomic multiphase provisioning - Credential management with issuer isolation - High-level human-readable MAC-protected API talking binary to primitive TEEs All of this has been applied to a Secure Key Store/Provisioning Protocol powering a universal "Wallet" scheme I am currently working on.  Yes, JSON canonicalization is (of course) also a part of the plot :-) I'm not a cryptographer so it is quite possible that the actual attestation step (DH+Auth) is not the best possible but the list above is for real. https://cyberphone.github.io/doc/security/keygen2.html#Sample_Run https://priorart.ip.com/IPCOM/000215433 Anders From nobody Thu Mar 28 05:33:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D57771202EB for ; Thu, 28 Mar 2019 05:33:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LHqBLjN--k1s for ; Thu, 28 Mar 2019 05:33:41 -0700 (PDT) Received: from p3plsmtpa12-07.prod.phx3.secureserver.net (p3plsmtpa12-07.prod.phx3.secureserver.net [68.178.252.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B17A1202E6 for ; Thu, 28 Mar 2019 05:33:41 -0700 (PDT) Received: from dhcp-95db.meeting.ietf.org ([31.133.149.219]) by :SMTPAUTH: with ESMTPSA id 9UDyhknp7ZCuP9UDzhXTEG; Thu, 28 Mar 2019 05:33:40 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> Date: Thu, 28 Mar 2019 13:33:37 +0100 Cc: Michael Richardson , "Heldt-Sheller, Nathan" , "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> To: "Smith, Ned" X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfPFodqOR5yxcbb0IzUsiQyCRUmGbUDx4iQfxJ/ELJx0aNbHQ4MCZI/2KPKuIyXpngiAlzM+z17ozfXEqjfs2IHMMVWipDYB88IpfYB2xohvJnR2fvn6l oX6iWKjJ2GCA2dPFyghwnIbFxQtIFwBDbJAy9nCv65T1Br04cZPUEwbTN9V4zATqjcPhuRZ17DrMosHx2a3atcAkViznI2MCWlr5H6J9/ikLOVN8/o+nE298 ajLoajhqZYyespVh3dVe1JZj220ud7+B+5mz2whNor226EHoVXm8vnIZ25GO1Bpk Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2019 12:33:46 -0000 Here=E2=80=99s a starting point for Android Attestation = https://developer.android.com/training/articles/security-key-attestation Includes around 20 claims about a key pair and the device that stores it = as X.509 v3 extensions. LL From nobody Thu Mar 28 05:41:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F178B1202CF for ; Thu, 28 Mar 2019 05:41:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cgEG7Qxp-cxi for ; Thu, 28 Mar 2019 05:41:41 -0700 (PDT) Received: from mail-qt1-x836.google.com (mail-qt1-x836.google.com [IPv6:2607:f8b0:4864:20::836]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 292AD120260 for ; Thu, 28 Mar 2019 05:41:41 -0700 (PDT) Received: by mail-qt1-x836.google.com with SMTP id x12so22809695qts.7 for ; Thu, 28 Mar 2019 05:41:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:message-id:thread-topic:references :in-reply-to:mime-version:content-transfer-encoding; bh=MDIngkre+LNjMN/ys0PDh/SDul6dYsNoaNayYQc6SAI=; b=Qb4n6WPIw1QJ9dcmgZ/n9F1jg0goKca2+2Ogvy59tcx92FiIQDl7HWCnNLu2NOB6BL sEEf59yFnDyCOWvUQ/v1sHnbRoXYiCdtYYe0dvfvxXR4YzE99NGCBrhWJhkZydacjuZ0 Z5EjEZSIImCAyv7asjfo6GLcX9tXAVPU+6fsQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=MDIngkre+LNjMN/ys0PDh/SDul6dYsNoaNayYQc6SAI=; b=HXOyT0ixEBVushrb+8sGqfVg6is9ufxUfmWSA+KGkSRYwtTau6NuXm1tQ0nsXqF51M SFW6P/fjgdj17IYBiy/2bvqS2iEkYp2z0gp/S0WCRqfkybkkCqpk6AGEbD9LIZE2fxDK hhkYHg27x8lVjegi9EDyFJUApSBHGuvEMACBhm7A4cyiVyyDtamP9R5SBKklfiDTdcty z9dSl1QP7+IzxEUbpH00q1L0FcWRMw7HLOLesrsUU7IrbdllI0N0EJoxd9t81oQgMLqL UOTlb3KYP3+eJ9f1oulvYpdQGaJPMmicwrw3ui3AYI8/Kz0zIkxF+j7blUCYiANxQZYW GENQ== X-Gm-Message-State: APjAAAVWC9Ea3uI85EqdujwO6g9aGPHfxPCmTSmjr04/EvgX5sbI5Fsc b9OZhYxqOin/Ngj9MT4lBKne6vRQLUo= X-Google-Smtp-Source: APXvYqzvT3Ju+IcmPHCzp3iH9VtKV2FMwW0Lwr8Dhf8c28X+HfN7pG5zw7XfKs+go80XP/eyDWY2bA== X-Received: by 2002:ac8:2b3c:: with SMTP id 57mr24619257qtu.372.1553776900047; Thu, 28 Mar 2019 05:41:40 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-114-43.washdc.fios.verizon.net. [108.28.114.43]) by smtp.googlemail.com with ESMTPSA id y5sm14606859qkl.73.2019.03.28.05.41.37 for (version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 28 Mar 2019 05:41:38 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Thu, 28 Mar 2019 08:41:33 -0400 From: Carl Wallace To: "rats@ietf.org" Message-ID: Thread-Topic: [Rats] More use cases for draft-richardson-rats-usecases-00 References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> In-Reply-To: <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2019 12:41:43 -0000 Example attestations from Android devices, Yubikey devices and Surface Pro virtual smart cards can be found here: https://github.com/Purebred/SampleAttestations. These are accompanied by SCEP requests that include the attestations and the resulting certificates. The attestations were generated and used as part of issuing device and end user certificates where the public key was the focus of the attestation. The Android and Yubikey attestations take the form of X.509 certificates (packaged as certs-only SignedData). The Surface Pro attestations take the form of CMC requests. On 3/28/19, 8:33 AM, "RATS on behalf of Laurence Lundblade" wrote: >Here=E2=80=99s a starting point for Android Attestation >https://developer.android.com/training/articles/security-key-attestation > >Includes around 20 claims about a key pair and the device that stores it >as X.509 v3 extensions. > >LL > > >_______________________________________________ >RATS mailing list >RATS@ietf.org >https://www.ietf.org/mailman/listinfo/rats From nobody Sat Mar 30 04:03:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90092120189 for ; Sat, 30 Mar 2019 04:03:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VcQE42lESt8N for ; Sat, 30 Mar 2019 04:03:32 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97F46120163 for ; Sat, 30 Mar 2019 04:03:32 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [89.248.140.11]) by relay.sandelman.ca (Postfix) with ESMTPS id 59A4C1F45B; Sat, 30 Mar 2019 11:03:30 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 407BA343E; Sat, 30 Mar 2019 12:03:35 +0100 (CET) From: Michael Richardson To: Laurence Lundblade cc: "Smith\, Ned" , "Heldt-Sheller\, Nathan" , "rats\@ietf.org" In-reply-to: <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> Comments: In-reply-to Laurence Lundblade message dated "Thu, 28 Mar 2019 13:33:37 +0100." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Date: Sat, 30 Mar 2019 12:03:35 +0100 Message-ID: <19361.1553943815@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Mar 2019 11:03:35 -0000 Laurence Lundblade wrote: > Here=E2=80=99s a starting point for Android Attestation > https://developer.android.com/training/articles/security-key-attestat= ion > Includes around 20 claims about a key pair and the device that stores > it as X.509 v3 extensions. perfect, thank you. From nobody Sat Mar 30 04:04:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5703120163 for ; Sat, 30 Mar 2019 04:04:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B-tdB3RZp9WD for ; Sat, 30 Mar 2019 04:04:47 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C664A120026 for ; Sat, 30 Mar 2019 04:04:46 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [89.248.140.11]) by relay.sandelman.ca (Postfix) with ESMTPS id 85B411F45B; Sat, 30 Mar 2019 11:04:45 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 7C9B1343E; Sat, 30 Mar 2019 12:04:50 +0100 (CET) From: Michael Richardson To: Carl Wallace cc: "rats\@ietf.org" In-reply-to: References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> Comments: In-reply-to Carl Wallace message dated "Thu, 28 Mar 2019 08:41:33 -0400." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Sat, 30 Mar 2019 12:04:50 +0100 Message-ID: <19652.1553943890@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Mar 2019 11:04:49 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Carl Wallace wrote: > Example attestations from Android devices, Yubikey devices and Surface > Pro virtual smart cards can be found here: > https://github.com/Purebred/SampleAttestations. These are accompanied > by SCEP requests that include the attestations and the resulting > certificates. The attestations were generated and used as part of > issuing device and end user certificates where the public key was the > focus of the attestation. The Android and Yubikey attestations take t= he > form of X.509 certificates (packaged as certs-only SignedData). The > Surface Pro attestations take the form of CMC requests. I think that seeing the examples is very useful to extract common pieces. Do you think it's useful to include some in the use case document? =2D-=20 Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlyfTVIACgkQlUzhVv38 QpDQGQf/Ve02eKpGWx3DH+SnqVl1Yh7mBbTuMNNYwcs91IKb5wSfodeZDUPfiqB0 cE9uGYX/jEUwlit0xUHbplJfTxKHE17nS0FFb7dyZ9kmjwtKgF9uYXnup3bg8ZuX xkG2irxUJ9WGyyH86vTIVrDszSwKXeZ5PXOz9BVYfNovKuw7bwprXcscbkaV6njg QS0zFBfC70WEry3+YfMztFWeNCgn1kaOmZfBzaRfP8N5if1HxXudhyZwKNfq7wQJ ZMVKidEjV5P0V9+6W4mHQc5pqzA31YLnnPUrAPh1ntJ6MKAM68pFS96nsgj5HgOc aPk5N3C22UYtMfgbOoBVtzZG8ClDwQ== =wK0U -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Mar 30 09:03:27 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90EE012020A for ; Sat, 30 Mar 2019 09:03:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q-2ZzwiML-kE for ; Sat, 30 Mar 2019 09:03:24 -0700 (PDT) Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89292120203 for ; Sat, 30 Mar 2019 09:03:24 -0700 (PDT) Received: by mail-qk1-x72e.google.com with SMTP id c1so3202064qkk.4 for ; Sat, 30 Mar 2019 09:03:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=EVQqecUHW6fdF33wQGsUoa5WAUEuWihRNwxzuNQt6hk=; b=mNbNG3B0oFh2W1rqrby8BZNGzlFZtGoPFypXubHnUUwh5xp2LyjXAnCL0cJmPezh/H MZwPIYpnu4WAP4ayMC/F5JqgTgqCq4ekpzhOk85kii9viH22vBgr5IESRlIyQ8tZ65o4 iVmu9apjzcZaeyIqRT7/8Eif5KN08IBzta7yQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=EVQqecUHW6fdF33wQGsUoa5WAUEuWihRNwxzuNQt6hk=; b=C5c0kK9dlIeAT/Ddo1keFzHTCKheZFGFhUWUg4+K9gjX6ssdRZZnbsxhBp8ds3Gf+Y x5HBJ7vPvrqgYsF32zlAqrPgpUkYmMWmoskdQ8xUxh34PA6jeKh1mBtI8HQclOf638GC esd05OAim88VhBf5/I6C1kSp4qyc5++DKNUQACzrWue6SWfkE/7+HgITbewwjeOxO6+h NdfXI7aeHcc2K8AYUm3if/VkkHfGsykOIEm7ltmhZ8osDpMlYIapKn/X6PxqarCoMQTT pvKtZWyN27QTOpAU6vpNmqPNuk0CZTgU0uFT109Ztn2tUWcoUaZ9Te+ONsauOYwsimiZ GODQ== X-Gm-Message-State: APjAAAXHVUlTxktPLKAa/dIUAVO4J9bmWjngsZwANKX5Y+cXho5552VW wC/NorhtPJW8loobzbiQ8zWxhhbmWTs= X-Google-Smtp-Source: APXvYqwV6iWwE+mNlIo/HUdbAf1iMuT/TuC9W96sJqDE3q9g5cnYbFJujwCKVPa4ogz/QBIV3JXBwg== X-Received: by 2002:a37:4b03:: with SMTP id y3mr2488428qka.260.1553961803453; Sat, 30 Mar 2019 09:03:23 -0700 (PDT) Received: from [192.168.1.180] (pool-108-28-114-43.washdc.fios.verizon.net. [108.28.114.43]) by smtp.googlemail.com with ESMTPSA id b24sm2336076qtr.51.2019.03.30.09.03.21 (version=TLS1 cipher=AES128-SHA bits=128/128); Sat, 30 Mar 2019 09:03:22 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Sat, 30 Mar 2019 12:03:13 -0400 From: Carl Wallace To: Michael Richardson CC: "rats@ietf.org" Message-ID: Thread-Topic: [Rats] More use cases for draft-richardson-rats-usecases-00 References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> <19652.1553943890@dooku.sandelman.ca> In-Reply-To: <19652.1553943890@dooku.sandelman.ca> Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 30 Mar 2019 16:03:27 -0000 Makes sense to me to capture current artifacts. Maybe in an appendix to the use cases draft. On 3/30/19, 7:04 AM, "Michael Richardson" wrote: > >Carl Wallace wrote: > > Example attestations from Android devices, Yubikey devices and >Surface > > Pro virtual smart cards can be found here: > > https://github.com/Purebred/SampleAttestations. These are >accompanied > > by SCEP requests that include the attestations and the resulting > > certificates. The attestations were generated and used as part of > > issuing device and end user certificates where the public key was >the > > focus of the attestation. The Android and Yubikey attestations take >the > > form of X.509 certificates (packaged as certs-only SignedData). The > > Surface Pro attestations take the form of CMC requests. > >I think that seeing the examples is very useful to extract common pieces. >Do you think it's useful to include some in the use case document? > >-- >Michael Richardson , Sandelman Software Works > -= IPv6 IoT consulting =- > > > From nobody Sun Mar 31 00:01:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5EF01200B6 for ; Sun, 31 Mar 2019 00:01:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4i7vzhRdzDmt for ; Sun, 31 Mar 2019 00:01:08 -0700 (PDT) Received: from mail-wr1-x42f.google.com (mail-wr1-x42f.google.com [IPv6:2a00:1450:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49838120171 for ; Sun, 31 Mar 2019 00:01:08 -0700 (PDT) Received: by mail-wr1-x42f.google.com with SMTP id k11so7696638wro.5 for ; Sun, 31 Mar 2019 00:01:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=p5IY/H/N2pA1c+cq6GHPWdRScXwln9K7crdEipkadac=; b=cI/jA0iw9kOyoHkjOsXmtBnfYNxo+tgM+wHsRBI9b8d47MxLF12hQ6L7iLSQNLos0r N4h5/sUZ59z+TYMuuLILEHFf6YmXTdzoBWImajl9FJzzOvhCltUELrN89kFyIZNjz3Y+ eebBwAL1+g8lfFEBZ9KOXm8OVhZ+OkSKxq6MpOJw2JjHDWAJJgguqe8pWYC5GzHPi5Wb 6SyLjtVVFSLTgWT4I/Je/JpIFib9oFSu2JAMtqTnlr63vrVnpU3OdSMROVjDv6UEUqAr F+Mpv6ZkrWsFq3H2R9C2FUBVOPNM2wdCKnt6FUM+aAzunYD5UB80/nlGGKFJnC4XybUo ceGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=p5IY/H/N2pA1c+cq6GHPWdRScXwln9K7crdEipkadac=; b=KeX3rp8gKSRlvIpuubE3YlWYj0nKTtl8wmoIYNs2RHc69MlGqHuzzRS8cZ7Q7H8hX3 qLDndEO4775Ps9GDUVmzJR2A+RvB5AlA6gOyHEPaUjTuhnGTRr3lsy+S/Tj3K25g/Dow RcQfCU4INTe317B/S9XHnoJIfXjfi8zE2IELQVbVlXK4YyQemzQDuc4iEUVq12taPSaE aYqirtj7Ddgmj4fng20RVrYJT7sQnf1gQ/SwqmzqlSWkkB1zDLJ7LIQhuEPiXJwAtw6G rH2P0+rmjf//8fdVEAE1Bd3AVNqfKP4v8U10o9baJEaniLkC8+Kvykw0/Pem38DbfQed tDug== X-Gm-Message-State: APjAAAW42tbyEWDk/wDm+/i+etSeiTcOtm9m27l5ZLGRGH+qsDjU2o/z ka/+Z2cF+9ZY8/5zTz+ueBEh15NY X-Google-Smtp-Source: APXvYqx0ZzkgKinbNEVvLLEF81b9Fcpzzr2A+ENJFYnFsDHFmifJiO3Q6/50d+Tv3kq5uE/PWGo9Mg== X-Received: by 2002:a5d:6682:: with SMTP id l2mr35352727wru.33.1554015666076; Sun, 31 Mar 2019 00:01:06 -0700 (PDT) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id j3sm15689173wre.51.2019.03.31.00.01.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 31 Mar 2019 00:01:04 -0700 (PDT) To: Carl Wallace , Michael Richardson Cc: "rats@ietf.org" References: <12503.1552447661@localhost> <58E37DB5-098C-4387-9A52-4AECD0F69F25@island-resort.com> <6495.1553219901@dooku.sandelman.ca> <507.1553725386@dooku.sandelman.ca> <24C0968B-32B0-4EF1-99C8-61D3F0955BA1@intel.com> <793F9A34-050F-4914-AF4B-08C072730A06@island-resort.com> <19652.1553943890@dooku.sandelman.ca> From: Anders Rundgren Message-ID: <79ccb2d7-09a3-913d-f47d-1e702a23b341@gmail.com> Date: Sun, 31 Mar 2019 09:00:59 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Rats] More use cases for draft-richardson-rats-usecases-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 31 Mar 2019 07:01:11 -0000 On 2019-03-30 17:03, Carl Wallace wrote: > Makes sense to me to capture current artifacts. Maybe in an appendix to > the use cases draft. For completeness you should consider mentioning that there are two quite different platform attestation concepts: - Static: FIDO, Android, and current TEEP architecture - Session based: Used by some smart card schemes and SKS/KeyGen2 (https://github.com/ietf-teep/architecture/issues/52) > > On 3/30/19, 7:04 AM, "Michael Richardson" wrote: > >> >> Carl Wallace wrote: >> > Example attestations from Android devices, Yubikey devices and >> Surface >> > Pro virtual smart cards can be found here: >> > https://github.com/Purebred/SampleAttestations. These are >> accompanied >> > by SCEP requests that include the attestations and the resulting >> > certificates. The attestations were generated and used as part of >> > issuing device and end user certificates where the public key was >> the >> > focus of the attestation. The Android and Yubikey attestations take >> the >> > form of X.509 certificates (packaged as certs-only SignedData). The >> > Surface Pro attestations take the form of CMC requests. >> >> I think that seeing the examples is very useful to extract common pieces. >> Do you think it's useful to include some in the use case document? >> >> -- >> Michael Richardson , Sandelman Software Works >> -= IPv6 IoT consulting =- >> >> >> > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats >