Re: [Ace] draft-ietf-ace-mqtt-tls-profile-03

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Fri, 28 February 2020 10:07 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 194053A1517 for <ace@ietfa.amsl.com>; Fri, 28 Feb 2020 02:07:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=w9eW2pyp; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=w9eW2pyp
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EnWHjEwDFhZP for <ace@ietfa.amsl.com>; Fri, 28 Feb 2020 02:07:48 -0800 (PST)
Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20057.outbound.protection.outlook.com [40.107.2.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 159FF3A1515 for <ace@ietf.org>; Fri, 28 Feb 2020 02:07:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8ZSKlLSkbAAxXSt+HMYw78yjRkqNJ31N+vFnvcjN2x0=; b=w9eW2pyp/v9MGvIphTzK3QYdOEMIVmAkRueUBDyBVTgRcd8dLWTEp9UJdeeGXxxv8Jj9MbrDvgHMgExF8QTnEd9OM4gCjQxOIr/Ui5QlE5q0NF+fT+jstGa75jeZdLuQCBK5QvgDzujwLA14zxwgVXBifElpsDX2Zar+9bL7PgQ=
Received: from VI1PR08CA0223.eurprd08.prod.outlook.com (2603:10a6:802:15::32) by DB8PR08MB5018.eurprd08.prod.outlook.com (2603:10a6:10:e2::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2750.21; Fri, 28 Feb 2020 10:07:44 +0000
Received: from VE1EUR03FT004.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e09::205) by VI1PR08CA0223.outlook.office365.com (2603:10a6:802:15::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2772.15 via Frontend Transport; Fri, 28 Feb 2020 10:07:44 +0000
Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT004.mail.protection.outlook.com (10.152.18.106) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2772.15 via Frontend Transport; Fri, 28 Feb 2020 10:07:44 +0000
Received: ("Tessian outbound 0420f1404d58:v42"); Fri, 28 Feb 2020 10:07:44 +0000
X-CR-MTA-TID: 64aa7808
Received: from 27df4a43891c.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 0727F0E7-4192-43FF-AF92-2DDCD7A5D612.1; Fri, 28 Feb 2020 10:07:38 +0000
Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 27df4a43891c.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 28 Feb 2020 10:07:38 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QgHzW725SejAAjm1dX0j1KZ1DrFtwJGpA8PiTlURkjdkPT+bJjGWhzxddoUv7WM2MZWlgXI0oHRUp9U44qfGZT/sz6bD9S/FpSy1JWNn/ArQEdLa8AtMgLsy4DuVjIHRdjHoZZsylqZt2K5y6dgN8PKcOGahfl0vV+Gni6/y8m6OA6cG2kXAdSinb3hl2f//AepE23ujaB88+I+UjG5h9dj2fZHwqv6/2zVQIposzjiIMMNBsa0iWq40dscD9Rq5vGA928sDrXROAc2kRHoAGwlXh6AQikzSZjHKw7Mat4Z5o15CglEqXuWBRjhulKMxyXZheWfJl2+xOXgHZNT8pw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8ZSKlLSkbAAxXSt+HMYw78yjRkqNJ31N+vFnvcjN2x0=; b=DtjvvNGkLxFgesZhXmN3clHCQAy4PtUiwbv5Lz0Lzq8GKQk1Fk4udStvalfTgZnMSBIdkETZLJzIfhixWk9stpkQKNiEVNRHiwCmveYNS/JYtInH2IfaQzueTUPWCIVhk6Gg4I1ZczaBDRYuk7fiuIDXHACl69WIPqxiVPXufLNOEmZpUOn4ogMdfa/Q6GqezKw9dx1ejMv6lD6juyuq46SEyD9Eq0rF6ncALA8TcBHT26Mx1ilSp7n9cYUnO5eC3q2JVhaiYbh7r0ke9Sslv1/55MpIEh6roxwPEHe84U3IR7hA6N0MB2vlMtqDsU5OWX04BOAhxSXRN0qQnEblbQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8ZSKlLSkbAAxXSt+HMYw78yjRkqNJ31N+vFnvcjN2x0=; b=w9eW2pyp/v9MGvIphTzK3QYdOEMIVmAkRueUBDyBVTgRcd8dLWTEp9UJdeeGXxxv8Jj9MbrDvgHMgExF8QTnEd9OM4gCjQxOIr/Ui5QlE5q0NF+fT+jstGa75jeZdLuQCBK5QvgDzujwLA14zxwgVXBifElpsDX2Zar+9bL7PgQ=
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (20.178.23.205) by AM0PR08MB3618.eurprd08.prod.outlook.com (20.177.109.223) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2772.14; Fri, 28 Feb 2020 10:07:37 +0000
Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::2159:870b:25df:e612]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::2159:870b:25df:e612%5]) with mapi id 15.20.2772.018; Fri, 28 Feb 2020 10:07:37 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Cigdem Sengul <cigdem.sengul@gmail.com>
CC: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: [Ace] draft-ietf-ace-mqtt-tls-profile-03
Thread-Index: AdXrwPKVlOWry/rCSraJ6rVcwUtPZQAJFd8AAFsSKHAAMo6agAAAuhVQ
Date: Fri, 28 Feb 2020 10:07:37 +0000
Message-ID: <AM0PR08MB37160FD0F8B34F8C1470EE82FAE80@AM0PR08MB3716.eurprd08.prod.outlook.com>
References: <AM0PR08MB371601D0F66969D7ECB504AAFAED0@AM0PR08MB3716.eurprd08.prod.outlook.com> <CAA7SwCOnY1K=b=fYYMHH57ho0rFZRmN+EuT1K7qt7qxtN3fghw@mail.gmail.com> <AM0PR08MB37165CE98F43A5AEBDA3F411FAE80@AM0PR08MB3716.eurprd08.prod.outlook.com> <CAA7SwCMVnO2-SUNyH7bDQ1jEwdbxVsL5bySG72b8GD=HH16=3g@mail.gmail.com>
In-Reply-To: <CAA7SwCMVnO2-SUNyH7bDQ1jEwdbxVsL5bySG72b8GD=HH16=3g@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 7d56ee64-dcb6-4e98-8db5-5dbb5e8fde48.1
x-checkrecipientchecked: true
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.119.84]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 4be23521-2b1b-486f-0bb5-08d7bc360dca
X-MS-TrafficTypeDiagnostic: AM0PR08MB3618:|DB8PR08MB5018:
X-Microsoft-Antispam-PRVS: <DB8PR08MB50187AFE2F04076693924A73FAE80@DB8PR08MB5018.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:9508;OLM:10000;
x-forefront-prvs: 0327618309
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(136003)(346002)(366004)(376002)(39860400002)(396003)(199004)(189003)(316002)(186003)(6506007)(26005)(66476007)(66446008)(64756008)(66556008)(66946007)(76116006)(4744005)(7696005)(52536014)(5660300002)(2906002)(33656002)(55016002)(9686003)(4326008)(86362001)(71200400001)(6916009)(478600001)(8936002)(81166006)(81156014)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR08MB3618; H:AM0PR08MB3716.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 33Z0ujy44/sLqQLZ1C6PFzU99aYGh2Tk/5A/UxPR/X+sHlVXmhwWqAMer6Yuy9FFLdplhIyAfPxuEnSwJH0OXQ5pQzmQgWC5a73VHVY8u9hbsnaX6lzYk1DgpzsiSigRhCmfvrBn5KRPRvk1UEq+f+4E4jLViKE1kLjVEbw9x9slyDd5bcrt9ssNtervykxUIYXwF3q4PhFGPXJX0RTyihxfquSwf7z0etO9ieG2V784M38QAQ6j9g8IhnxnyypxHZj3kbwfim+hLQpzkCapqNoGuYvpYsvEcDHnJjVvWGHBjQHN2xbYnzBWir3VmETOXgvHa7MWajmh2SPjUWAxjofXeEb3CFQzZ9t6+cO7JCTqr7B12T7PI0sZw31pnvky8Tljnb5hQfKogMR/Ae/4k3RV2XuGvkqf9sF3hB8fUlqGtbaEZqm78mLuY1QLqzr0
x-ms-exchange-antispam-messagedata: i38Lv/eaDDLZ1iD3oGSKASb/CLcwpDgICIVKKC34WJJ8cZbSQGr3SR5N80rHef+SQ+B2gPFBkeT745HmWJ/2Rorb0+9+qSu1/uKiy9HGggbDkrqT0ltJvJ9cep7LA3SREmhBzM2/IGpRxcTkMm4YcQ==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_AM0PR08MB37160FD0F8B34F8C1470EE82FAE80AM0PR08MB3716eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3618
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT004.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(376002)(346002)(136003)(396003)(199004)(189003)(26005)(7696005)(4326008)(478600001)(6506007)(8936002)(316002)(33964004)(36906005)(6862004)(26826003)(9686003)(81156014)(86362001)(70206006)(70586007)(356004)(8676002)(2906002)(33656002)(52536014)(55016002)(81166006)(336012)(186003)(5660300002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB8PR08MB5018; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1;
X-MS-Office365-Filtering-Correlation-Id-Prvs: c4214d11-c78c-41e1-4742-08d7bc3609e7
X-Forefront-PRVS: 0327618309
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: UdyEVt5J1wWEsC1aM3fp4LNs8/r/f/40BTPBHoR7/BNQBNOwJE7DFJHB5qasw2ndmkJvYYI7MtU6Q8BcZkj5W8UfCMIOonEVEEdleQvWpPQMCaylZNzFnZmugyS6mFrSciIad64WAJYKkWBg8o7ElIs991ZuSfwi6coRMKW8kJCbi6fsGE9ClyP4ZLBNJDDkSAa4Fe6WXfxa6qdxXs54B1IS0cQmWM75KglyXy0dAAwEJLPRvS20YHLWlD7GdJrk6UFsJXguCMhzwHOuZmQTvxVbVkAznyEDbh4m5rTbm+6i1dWwQQMYn5H1b0Jrov9xwVIxmjKAuxcDtHCPLTJgnISljN14vozxBTphtAw68OfzdkVIrFpBoD+KqZuOgCGWpQBB0DtUeSU5gYxtw+BlmVUM4JeEolvWBG+d08AA/lyZUdGSXeeRUocxCRI/dWgQ
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Feb 2020 10:07:44.0424 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4be23521-2b1b-486f-0bb5-08d7bc360dca
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR08MB5018
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/Amb4gyFkybfGtzXktdZRyv4LHlo>
Subject: Re: [Ace] draft-ietf-ace-mqtt-tls-profile-03
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 28 Feb 2020 10:07:52 -0000

  *   I plan to join. I  have been aware of the issue, but could not follow how it was planned to be resolved.
  *   I was looking at this: draft-ietf-oauth-pop-key-distribution

Yes, that’s what the group wanted to do. Now, new ideas showed up on the radar that are incompatible with that approach that offer a much tighter integration with HTTP signing.

Ciao
Hannes


IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.