[Ace] Re: [Anima] should I-D Action: draft-ietf-lamps-rfc7030-csrattrs-21.txt update rfc9148

Toerless Eckert <tte@cs.fau.de> Thu, 08 May 2025 16:11 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: ace@mail2.ietf.org
Delivered-To: ace@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 1DD9E2674D92; Thu, 8 May 2025 09:11:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1NT38mjfm6XN; Thu, 8 May 2025 09:11:16 -0700 (PDT)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [131.188.34.40]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 1FFD02674D8B; Thu, 8 May 2025 09:11:15 -0700 (PDT)
Received: from faui48e.informatik.uni-erlangen.de (faui48e.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:51]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTPS id 4ZtcZ85X7Fz1R8Yx; Thu, 8 May 2025 18:11:12 +0200 (CEST)
Received: by faui48e.informatik.uni-erlangen.de (Postfix, from userid 10463) id 4ZtcZ84l9Jzl0T2; Thu, 8 May 2025 18:11:12 +0200 (CEST)
Date: Thu, 08 May 2025 18:11:12 +0200
From: Toerless Eckert <tte@cs.fau.de>
To: Michael Richardson <mcr+ietf@sandelman.ca>
Message-ID: <aBzXoBC0EZU2lXP7@faui48e.informatik.uni-erlangen.de>
References: <174670512923.1130889.15175426048702780435@dt-datatracker-58d4498dbd-6gzjf> <1360700.1746705543@dyas>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <1360700.1746705543@dyas>
Message-ID-Hash: CY75I3CAD6YJOECSDBDQX2Y6WZYIEDSN
X-Message-ID-Hash: CY75I3CAD6YJOECSDBDQX2Y6WZYIEDSN
X-MailFrom: eckert@i4.informatik.uni-erlangen.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ace.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: spasm@ietf.org, Deb Cooley <debcooley1@gmail.com>, ace@ietf.org, iesg@ietf.org, anima@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ace] Re: [Anima] should I-D Action: draft-ietf-lamps-rfc7030-csrattrs-21.txt update rfc9148
List-Id: "Authentication and Authorization for Constrained Environments (ace)" <ace.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/HqtzxSS_fIXzLRfQGFBaPnC6mAM>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Owner: <mailto:ace-owner@ietf.org>
List-Post: <mailto:ace@ietf.org>
List-Subscribe: <mailto:ace-join@ietf.org>
List-Unsubscribe: <mailto:ace-leave@ietf.org>

I think yes, but i think to justify the update header for rfc9148,
this CSRattr draft would need a short new section to justify it, e.g.:

| 3.4 Update to RFC9148
| 
| The updates to EST in this document equally apply when using
| CoAP as a transport as described in RFC9148. This document therefore
| adds the following paragraph after the second paragraph
| of RFC9148, Section 1.
| 
| EST over CoAP as specified in this document applies unchanged
| to RFC7030 updated by THISRFC. Hence, all references to RFC7030 in
| this document are assumed to indicate RFC7030 updated by THISRFC.
|
| THISRFC also becomes a new mandatory reference to RFC9148

Cheers
    toerless

On Thu, May 08, 2025 at 12:59:03PM +0100, Michael Richardson wrote:
> 
> internet-drafts@ietf.org wrote:
>     > Title:   Clarification and enhancement of RFC7030 CSR Attributes definition
> 
> Oops, something I meant to mention but we kept getting dragged back into the
> weeds, and maybe belonged in the Shepherd write up:
> 
> RFC9148, EST-coaps: Enrollment over Secure Transport with the Secure Constrained
>                           Application Protocol
> 
> This document puts 7030 over COAPS, and uses /csrattrs (as /att).
> It doesn't change CSRATTRS in any way, and someone implementing RFC9148 ought
> to be reading 7030, and updates to 7030.
> 
> But, should this document explicitely update 9148 as well?
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
>  -= IPv6 IoT consulting =-                      *I*LIKE*TRAINS*
> 
> 
> 



-- 
---
tte@cs.fau.de