IETF Logo Mail Archive

Re: [6tisch-security] [Anima-bootstrap] 6tisch join -01 documented posted

Michael Richardson <mcr+ietf@sandelman.ca> Mon, 14 November 2016 07:44 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: 6tisch-security@ietfa.amsl.com
Delivered-To: 6tisch-security@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC4541296CE; Sun, 13 Nov 2016 23:44:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G7Jduf5Q5deG; Sun, 13 Nov 2016 23:44:33 -0800 (PST)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86D501296CD; Sun, 13 Nov 2016 23:44:33 -0800 (PST)
Received: from dooku.sandelman.ca (s2001067c037001280a1196fffe0181e0.v6.meeting.ietf.org [IPv6:2001:67c:370:128:a11:96ff:fe01:81e0]) by relay.sandelman.ca (Postfix) with ESMTPS id 0437E1F8EE; Mon, 14 Nov 2016 07:44:31 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 505E31937; Mon, 14 Nov 2016 02:44:25 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
to: 6tisch-security <6tisch-security@ietf.org>, anima-bootstrap <anima-bootstrap@ietf.org>
In-reply-to: <5562.1479107882@dooku.sandelman.ca>
References: <20351.1476971471@obiwan.sandelman.ca> <0343d14c-5b18-b821-c9ad-d77fb7dae490@gmail.com> <12808a8a-5de1-c6cb-3f96-945573041ee4@gmail.com> <24910.1479078501@dooku.sandelman.ca> <efb2a1b9-a5b2-9e38-abd5-1c8031d9f1cd@gmail.com> <5562.1479107882@dooku.sandelman.ca>
Comments: In-reply-to Michael Richardson <mcr+ietf@sandelman.ca> message dated "Mon, 14 Nov 2016 16:18:02 +0900."
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
Date: Mon, 14 Nov 2016 16:44:25 +0900
Message-ID: <9356.1479109465@dooku.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/6tisch-security/rJ-nq-t7SQcAay15IZl7zB0hdUI>
Subject: Re: [6tisch-security] [Anima-bootstrap] 6tisch join -01 documented posted
X-BeenThere: 6tisch-security@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Extended Design Team for 6TiSCH security architecture <6tisch-security.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/6tisch-security>, <mailto:6tisch-security-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/6tisch-security/>
List-Post: <mailto:6tisch-security@ietf.org>
List-Help: <mailto:6tisch-security-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/6tisch-security>, <mailto:6tisch-security-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 07:44:35 -0000

<#secure method=pgpmime mode=sign>

to add to my own message:

Michael Richardson <mcr+ietf@sandelman.ca> wrote:
    mcr> BRSKI-CoAP lets us do the *ENROLLMENT* over CoAP, not the discovery.

    mcr> These are the interactions, and I will try to give some names to the various
    mcr> interactions in a future document, but suggestions most welcome.

...

    mcr> 4) pledge <-> Registrar.
    mcr> in ANIMA, this is pledge---TCP/HTTPS---> Registrar (RFC7030)

It is here that https://datatracker.ietf.org/doc/draft-pritikin-coap-bootstrap/
applies, letting us actually run EST(RFC7030) over CoAP. Calling it BRSKI
over CoAP is perhaps slightly misleading, and yet slightly more correct,
because the document isn't a general EST over CoAP, but BRSKI specific.


--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [

v2.23.0 | Report a Bug | By Email