Re: [Ace] Security of the Communication Between C and RS

[Stefanie Gerdes <[e-mail]>]

Hi Hannes,

On 12/19/2018 12:36 PM, Hannes Tschofenig wrote:
> Hi Steffi,
> 
> Are you focused on token expiry or the case where a token + symmetric key has been leaked?

I am talking about the expiry of the keying material for RS that AS
provides to C.

> 
> Is the threat you are describing the case where the client uses DTLS/TLS with the RS (potentially long after a token has been presented), or the case where the client contacts the RS and presents a token?

I am worried about cases where the client communicates securely with RS,
e.g., using DTLS/TLS or object security, not about presenting the token
to RS.

Viele Grüße
Steffi