Re: [Ace] Last Call: <draft-ietf-ace-wg-coap-eap-09.txt> (EAP-based Authentication Service for CoAP) to Proposed Standard

Dan Garcia Carrillo <garciadan@uniovi.es> Thu, 25 January 2024 10:19 UTC

Return-Path: <garciadan@uniovi.es>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA98DC17C8B0; Thu, 25 Jan 2024 02:19:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.91
X-Spam-Level:
X-Spam-Status: No, score=-6.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=unioviedo.onmicrosoft.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S_sju6YEcCar; Thu, 25 Jan 2024 02:19:10 -0800 (PST)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on2059.outbound.protection.outlook.com [40.107.14.59]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33EACC14CF12; Thu, 25 Jan 2024 02:19:08 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DTJyHn2Sgv/ecgPDJDYGpxzqZTR4PZzLa+0NsFQq2zUNdbu7MRDw+btUYCojVXw7LixwFu+rzsugfc+1MopXDh1WQQ9dXN+HL+qkjIHuLQ1rEMyOA0j4vYuDkiXui7MTOEauKYZGw7QQXoQwMgbeZlRBkDqJ9lUoz7HxAy/cuFlh0EfmU8dXkgpSghrQnO0+1RVX0oTFZVH+qQR0k/8mYztHWCgro4oeYLUFrl/EA0jbYDFt7dUsYxWICveudBrcWj2ifrEUeaq6jaOcIDVsvqsvs2qqlchLLK8uR3tGiXc72Foo4rkZs7m6LlM3TWYK9FIgT1FbyfdSM0RhhthyRw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=QB5J3f0rPBROSgd8f3mdTY3uBZk9O1JsP3T9GwHYlag=; b=TpJrPOS+Ba2U7A1AMWUKNahadVlR0NCXW6aUnr3tIjZQQIt9EVsL50jN0FC6VT0k/DBvMtHZ5fzAEnv1UpdMaixnRsW7BpayvlqNRP8nZMJqXKt8F/zSIy4mxH7L5krdYvav+BoQBY0ut+D1oVvZCp0khlKcouTn4LJOOw/Sv9OzBbXzDJKEVcTWtXm135K+nsxQiX1uHOEbAEXTRzx/6lkI//xKj8dAJpnOz+Pp5JAqL8fT6wFsYmA4Ve4SFtWyDvU2/yH/FPXDhYkQQMZdaGE1VvWowgAy9506hib5HdP9A2oB2jsdyrrOzD/gSxE3aI/yaoHDSRv0OKLYAX+6NQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=uniovi.es; dmarc=pass action=none header.from=uniovi.es; dkim=pass header.d=uniovi.es; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=unioviedo.onmicrosoft.com; s=selector2-unioviedo-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QB5J3f0rPBROSgd8f3mdTY3uBZk9O1JsP3T9GwHYlag=; b=CsjpJW8AEbrnKGL+ROEnbGJ0YEkcVo6Cy7B/O0SSPbZ7MVYRxFdPaE0QeI231bQlaCqr4Bim43e13bDdyPYqAUAXS44ZgrY5a3DfGK1TKqnUFem5YqINtL+FNNUcZNVNT5oo8NIBfnVAJKPTMRuRJKJ3Q82B5YgENEzAfCxARTE=
Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=uniovi.es;
Received: from AS4PR08MB8093.eurprd08.prod.outlook.com (2603:10a6:20b:588::18) by AS2PR08MB9342.eurprd08.prod.outlook.com (2603:10a6:20b:599::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.22; Thu, 25 Jan 2024 10:19:05 +0000
Received: from AS4PR08MB8093.eurprd08.prod.outlook.com ([fe80::6790:fd23:1f81:c189]) by AS4PR08MB8093.eurprd08.prod.outlook.com ([fe80::6790:fd23:1f81:c189%6]) with mapi id 15.20.7228.026; Thu, 25 Jan 2024 10:19:05 +0000
Content-Type: multipart/alternative; boundary="------------z0h0plATg44DDqkoHkgz2MP1"
Message-ID: <99b9584f-ed13-43f8-9f08-bcdca209c4a2@uniovi.es>
Date: Thu, 25 Jan 2024 11:19:03 +0100
User-Agent: Mozilla Thunderbird
Reply-To: garciadan@uniovi.es
Cc: garciadan@uniovi.es, ace@ietf.org, draft-ietf-ace-wg-coap-eap@ietf.org
To: Carsten Bormann <cabo@tzi.org>, last-call@ietf.org
References: <170501480038.5638.2337929237136473785@ietfa.amsl.com> <267FED70-6DBD-47E0-9029-143C183065E9@tzi.org>
Content-Language: en-GB
From: Dan Garcia Carrillo <garciadan@uniovi.es>
Organization: Universidad de Oviedo
In-Reply-To: <267FED70-6DBD-47E0-9029-143C183065E9@tzi.org>
X-ClientProxiedBy: PA7P264CA0513.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:3da::24) To AS4PR08MB8093.eurprd08.prod.outlook.com (2603:10a6:20b:588::18)
MIME-Version: 1.0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AS4PR08MB8093:EE_|AS2PR08MB9342:EE_
X-MS-Office365-Filtering-Correlation-Id: 9f615d36-f3aa-4637-895e-08dc1d8f0f57
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AS4PR08MB8093.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(39860400002)(346002)(376002)(396003)(136003)(366004)(230922051799003)(451199024)(1800799012)(64100799003)(186009)(31686004)(41300700001)(26005)(2616005)(6486002)(316002)(786003)(36756003)(33964004)(36916002)(6506007)(6512007)(478600001)(83380400001)(38100700002)(5660300002)(31696002)(2906002)(3450700001)(66476007)(66556008)(66946007)(86362001)(8936002)(8676002)(4326008)(45980500001)(43740500002); DIR:OUT; SFP:1101;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 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
X-OriginatorOrg: uniovi.es
X-MS-Exchange-CrossTenant-Network-Message-Id: 9f615d36-f3aa-4637-895e-08dc1d8f0f57
X-MS-Exchange-CrossTenant-AuthSource: AS4PR08MB8093.eurprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jan 2024 10:19:05.6085 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 05ea74a3-92c5-4c31-978a-925c3c799cd0
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: Ac/ryLrYCIGTCMKmFOdo+IEig4vAOfAIXr/+1xeJLUybYlDIX0bfTty1lGYa8G+bePCpId6tISWnaRTfyJglOg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR08MB9342
X-MS-Exchange-CrossPremises-AuthSource: AS4PR08MB8093.eurprd08.prod.outlook.com
X-MS-Exchange-CrossPremises-AuthAs: Internal
X-MS-Exchange-CrossPremises-AuthMechanism: 14
X-MS-Exchange-CrossPremises-Mapi-Admin-Submission:
X-MS-Exchange-CrossPremises-MessageSource: StoreDriver
X-MS-Exchange-CrossPremises-BCC:
X-MS-Exchange-CrossPremises-OriginalClientIPAddress: 156.35.171.42
X-MS-Exchange-CrossPremises-TransportTrafficType: Email
X-MS-Exchange-CrossPremises-Antispam-ScanContext: DIR:Originating; SFV:NSPM; SKIP:0;
X-MS-Exchange-CrossPremises-SCL: 1
X-MS-Exchange-CrossPremises-Processed-By-Journaling: Journal Agent
X-OrganizationHeadersPreserved: AS2PR08MB9342.eurprd08.prod.outlook.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/DzCDXw8D0ZkQExU1xv5jw6iMRCk>
Subject: Re: [Ace] Last Call: <draft-ietf-ace-wg-coap-eap-09.txt> (EAP-based Authentication Service for CoAP) to Proposed Standard
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Jan 2024 10:19:11 -0000

Dear Carsten,

Thank you very much for the comments.

Yes, you are correct. The content of the array contains a non-empty list 
of RFC 9052 algorithm identifiers.
There is a case, where the element representing the list is not sent, 
that is intended to signify that the default cipher suites are chosen.

We will update the figure.

Best regards.


El 12/1/24 a las 2:19, Carsten Bormann escribió:
> I have a quick question on Figure 6:
>
> This says:
>
>     CoAP-EAP_Info = {
>           ? 1 : array, ; cipher suite
>     […]
>
> for the cipher suite.
>
> I assume
>
> 	array
>
> …really should be
>
> 	[+ int/tstr]
>
> …so this can be a non-empty list of RFC 9052 algorithm identifiers?
>
> I’m not seeing an example, so I’m a bit in guessing mode here.
>
> Grüße, Carsten
>