Re: [abfab] AD review of draft-ietf-abfab-use-cases

"Klaas Wierenga (kwiereng)" <kwiereng@cisco.com> Mon, 23 July 2012 08:52 UTC

Return-Path: <kwiereng@cisco.com>
X-Original-To: abfab@ietfa.amsl.com
Delivered-To: abfab@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6124721F8683 for <abfab@ietfa.amsl.com>; Mon, 23 Jul 2012 01:52:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level:
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s+L0qMjGcFAv for <abfab@ietfa.amsl.com>; Mon, 23 Jul 2012 01:52:45 -0700 (PDT)
Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) by ietfa.amsl.com (Postfix) with ESMTP id 7BB7821F84F4 for <abfab@ietf.org>; Mon, 23 Jul 2012 01:52:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=kwiereng@cisco.com; l=1648; q=dns/txt; s=iport; t=1343033565; x=1344243165; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=hsNzjY3bSrlW8Am5Te7mGB5YBN8wxEZzA222dnu0r6g=; b=ipM9IPzUfyDB0FXWcYZcShs+vs360hmm7rB33Ix8ywNxjpMiFahUmcXM cuT+QU3X7ri7vscEGoGjA2mXtifczPoygomhVl+kHn1Vp84m7hR5WpxMa mj2iKSSCcIap70zPR9YjFCbQTCb2kwHMI90gblPJUTd76+AqFQVFnl+QH Q=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av8EAFYQDVCtJV2d/2dsb2JhbABFuTWBB4IgAQEBAgEBAQEBDwFbCwULAgEIGC4nCyUCBA4FIodlBgueOp8Ui00FFoVYYAOVSYEUjROBZoJf
X-IronPort-AV: E=Sophos;i="4.77,638,1336348800"; d="scan'208";a="104311958"
Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-5.cisco.com with ESMTP; 23 Jul 2012 08:52:40 +0000
Received: from xhc-rcd-x15.cisco.com (xhc-rcd-x15.cisco.com [173.37.183.89]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id q6N8qehA029235 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 23 Jul 2012 08:52:40 GMT
Received: from xmb-aln-x12.cisco.com ([169.254.7.251]) by xhc-rcd-x15.cisco.com ([173.37.183.89]) with mapi id 14.02.0298.004; Mon, 23 Jul 2012 03:52:40 -0500
From: "Klaas Wierenga (kwiereng)" <kwiereng@cisco.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Thread-Topic: [abfab] AD review of draft-ietf-abfab-use-cases
Thread-Index: AQHNZpw6M3+JbdhFI0esb+1u9jrjmZcyz1+AgAATtYCABASKAA==
Date: Mon, 23 Jul 2012 08:52:39 +0000
Message-ID: <5978D530-FAD5-48F3-B8FB-41CBE5022445@cisco.com>
References: <500993C0.7040806@cs.tcd.ie> <5009A181.8060406@sunet.se> <5009B209.3050904@cs.tcd.ie>
In-Reply-To: <5009B209.3050904@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.116.7.37]
x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19058.005
x-tm-as-result: No--35.493700-8.000000-31
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
Content-Type: text/plain; charset="Windows-1252"
Content-ID: <86DE0D5EEB1B694CA4E6E3570DA1D29D@cisco.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "<abfab@ietf.org>" <abfab@ietf.org>
Subject: Re: [abfab] AD review of draft-ietf-abfab-use-cases
X-BeenThere: abfab@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" <abfab.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/abfab>, <mailto:abfab-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/abfab>
List-Post: <mailto:abfab@ietf.org>
List-Help: <mailto:abfab-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/abfab>, <mailto:abfab-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 08:52:47 -0000

On Jul 20, 2012, at 9:31 PM, Stephen Farrell wrote:

Stephen,

> On 07/20/2012 07:20 PM, Leif Johansson wrote:
>> 
>>> 9. 3.9 seems quite far-fetched to me. Do you really expect sensors
>>> to use gss-eap?
>> 
>> I've seen a couple of examples of sensor nets built using wifi
>> hardware - sensors don't have to be small "toaster-like" objects.
> 
> Sure. I've built a number networks with nodes like that
> myself, (e.g. [1] :-) Never needed nor considered anything
> like abfab. Ours are v. small networks of course, but I've
> also never heard anyone ask for what 3.9 is selling.

ehm, I am not sure it is THAT far fetched. I would argue that in large scale sensor networks with sensors of different nature (in terms of processing power, memory, battery consumption etc.) and connecting to untrusted networks you do want an approach that has authentication agility, can operate in an environment with delegated trust and that protects authentication credentials en route…. I can think of different ways to achieve that, but I would not dismiss the abfab approach out of hand….

Klaas

> 
> But like I said, its a comment that the wg can take or
> leave, before or during IETF LC.
> 
> S.
> 
> [1] http://extremecom2012.ee.ethz.ch/papers/6-extremecom2012-Arkko.pdf
> 
>> 
>> 	Cheers Leif
>> _______________________________________________
>> abfab mailing list
>> abfab@ietf.org
>> https://www.ietf.org/mailman/listinfo/abfab
>> 
> _______________________________________________
> abfab mailing list
> abfab@ietf.org
> https://www.ietf.org/mailman/listinfo/abfab