Re: [6tisch] [6tisch-security] proposed security text for architecture draft

Michael Richardson <mcr+ietf@sandelman.ca> Mon, 17 November 2014 19:48 UTC

From: Michael Richardson <mcr+ietf@sandelman.ca>
To: yoshihiro.ohba@toshiba.co.jp
In-Reply-To: <674F70E5F2BE564CB06B6901FD3DD78B272A9AFF@TGXML210.toshiba.local>
References: <20507.1415811045@sandelman.ca> <674F70E5F2BE564CB06B6901FD3DD78B272A8EFA@TGXML210.toshiba.local> <5854.1415835364@sandelman.ca> <674F70E5F2BE564CB06B6901FD3DD78B272A9108@TGXML210.toshiba.local> <29465.1415934436@sandelman.ca> <674F70E5F2BE564CB06B6901FD3DD78B272A988F@TGXML210.toshiba.local> <2187.1415945515@sandelman.ca> <674F70E5F2BE564CB06B6901FD3DD78B272A9AFF@TGXML210.toshiba.local>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha1"; protocol="application/pgp-signature"
Date: Mon, 17 Nov 2014 14:48:30 -0500
Message-ID: <8269.1416253710@sandelman.ca>
Sender: mcr@sandelman.ca
Archived-At: http://mailarchive.ietf.org/arch/msg/6tisch/V0jpFhDPuipBn2r_uzSmV_UtU0M
Cc: 6tisch@ietf.org, 6tisch-security@ietf.org
Subject: Re: [6tisch] [6tisch-security] proposed security text for architecture draft
Precedence: list

<yoshihiro.ohba@toshiba.co.jp> wrote:
    > For 1), existing RADIUS servers can be used if EAP server is a
    > physically separated from PCE box where scalability is needed.
    > EAP-based approach can also support roaming cases where electric
    > vehicles are authenticated via smart meters.

I don't understand this: we are not looking for distributed authenetication,
we are looking for centralized authorization.

    > Support for UIM card (via EAP-SIM, EAP-AKA or a new EAP method) would
    > make 6tisch more attractive to cover certain business scenarios.

really?  WG chairs can you tell me if requiring UIM cards is an option.
If so, there is no join problem; it's already solved and Yoshihiro is right:
use EAP-SIM, followed by 6top authenticated with the EAP-SIM created
MasterKey. 

    > Please note that I do not disagree with DTLS-based approach for more
    > resource constrained device (although more work seems to be needed to

That's the only nodes which are in scope.

I don't want to boil the ocean here!

-- 
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-

[6tisch] proposed security text for architecture … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Pascal Thubert (pthubert)
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Rene Struik
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Subir Das
Re: [6tisch] [6tisch-security] proposed security … Pascal Thubert (pthubert)
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
[6tisch] (procedural) Re: [6tisch-security] propo… Rene Struik
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Pascal Thubert (pthubert)
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Pascal Thubert (pthubert)
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Rafa Marin Lopez
Re: [6tisch] [6tisch-security] proposed security … Subir Das
Re: [6tisch] [6tisch-security] proposed security … Pascal Thubert (pthubert)
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Rafa Marin Lopez
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … Michael Richardson
Re: [6tisch] [6tisch-security] proposed security … yoshihiro.ohba