[6lowapp] Security and Commissioning

[Cullen Jennings <[e-mail]>]

Consider one of the use cases several people have discussed. You  
install a new light. You install a new light switch. Now, how do you  
bind them together in the type of deployments where you want security?

One way or another we need to meet the requirements of BCP 61. For  
many BOFs, how they will BCP 61 is fairly obvious and no one worries  
about it. However, for this BOF, it is not obvious. To get to a WG, I  
think we need to have enough of a sketch of how we are going to do the  
security that we can convince the security folks that we are not  
insane and that we will be able to meet the requirements of BCP 61 in  
the protocols developed. This duckling imprint approach was a stawman  
approach to this but it may be totally  useless and not what we want  
to in which case we should promptly eject it from the charter.

The question is, what are we going to do? Ideas? Can someone sketch  
out at the back of a cocktail napkin level enough of an idea on the  
one or more ways we want to deal wit this? If we agree on that I can  
do my best to figure out how to get that into the charter in a way  
that convinces the security people that they don't have to show up and  
say No.