Re: [Ace] I-D Action: draft-ietf-ace-oscore-profile-14.txt

Francesca Palombini <francesca.palombini@ericsson.com> Mon, 14 December 2020 15:46 UTC

Return-Path: <francesca.palombini@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DD3A3A100C for <ace@ietfa.amsl.com>; Mon, 14 Dec 2020 07:46:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.202
X-Spam-Level:
X-Spam-Status: No, score=-0.202 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W6Kk_osb9vGk for <ace@ietfa.amsl.com>; Mon, 14 Dec 2020 07:46:20 -0800 (PST)
Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60057.outbound.protection.outlook.com [40.107.6.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42C823A100A for <ace@ietf.org>; Mon, 14 Dec 2020 07:46:19 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JvPhsgYVSk0lAIy69ehLNZ2WfEL+lxTGS42INaaxa/sbbkGd9R+O6mmU29kQMmeLJ1ZO9BihKRQC2X/dtKg9P9x7vE1wqFmQSJF2u0Lt7Ayaxm1h8Qw7l8soJ3qG6B1RXOfW72vLrm8llY8nd6U2oONI92tZ50tb950mqQwjKS9BSbBr6I61PzxwvxydhcG+0EFuk+lg4TaYsMw+gNgSdHNaQt+W/ibTSuKXOzpOoZfZWT1GY7Ys9JPdeIvpC0FznnnzgYqXG+LAdPOzGooxIUtcfu3lIh2VMOpODJ4EtiRWpqN1bF2tPHSwoc6ibSCxT8vLMGVatHghj4Qa9+PS2g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Z8+8KMZPqgbbgJ4uibHyMlpezDsoqmSY/rdq3YvCw1U=; b=DNIRKu0scB27/mDiDGOdIVZcY7ih5LY3Neg0bGF3vqkzwx2biZPxKlXGTgXkAGWtbvFxJTkajmkHxaBYRTbMAtlFtxKPOKMOLSTg/BPuLaaHfNgl8BCZ+XIPiGh7mobFMjK5Af6FbSM7vsd95O/wF1ODiPIJixJEYiAiCNH/u/6hnlGTXancvi8qVa/9ARnlk1DVUglwyAac+xrZN04OPR5x0SWWIMB1hEAzBLFAFVinUbqsDV3g6hJvPAkyj+2eWlRn24p+2n3dlRiivp6fbvRYgZzbU9jr7zYfRtIqlRZN0NJChuEWCeOH7CHskbU3AZ3QTs/L/Ss0f1KsdV1KWg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Z8+8KMZPqgbbgJ4uibHyMlpezDsoqmSY/rdq3YvCw1U=; b=rIDNx7Ja0YPtVancl46ta5uLCjVjNDJ8NOCbytVoeyi15CNJDizDNnOScQoyS46vysi0wnlw3ITjs2JCyJHjerTNBSnd5j/JaTEj4vIizxqkdwcv5OUrSOTkD8LtWkTcBZHZ0ApB1bOAh/RmSmZ0p/zelnaAaMCUfoZdyhLw694=
Received: from VI1PR07MB4477.eurprd07.prod.outlook.com (2603:10a6:803:74::33) by VI1PR07MB4368.eurprd07.prod.outlook.com (2603:10a6:802:5c::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.9; Mon, 14 Dec 2020 15:46:18 +0000
Received: from VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::4957:ef58:c6d5:9aa2]) by VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::4957:ef58:c6d5:9aa2%6]) with mapi id 15.20.3676.015; Mon, 14 Dec 2020 15:46:17 +0000
From: Francesca Palombini <francesca.palombini@ericsson.com>
To: Benjamin Kaduk <kaduk@mit.edu>
CC: "ace@ietf.org" <ace@ietf.org>
Thread-Topic: [Ace] I-D Action: draft-ietf-ace-oscore-profile-14.txt
Thread-Index: AQHW0fX/km93Yz6f80i7eO56+sm9o6n2bCaAgABMmoCAABScgA==
Date: Mon, 14 Dec 2020 15:46:17 +0000
Message-ID: <07C849A7-2821-4FAE-A5F5-817195C5B03F@ericsson.com>
References: <160793569464.18419.15019250928855569100@ietfa.amsl.com> <1752F003-99AA-47F6-9B1A-9B493F07DC7D@ericsson.com> <20201214153231.GE64351@kduck.mit.edu>
In-Reply-To: <20201214153231.GE64351@kduck.mit.edu>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.43.20110804
authentication-results: mit.edu; dkim=none (message not signed) header.d=none;mit.edu; dmarc=none action=none header.from=ericsson.com;
x-originating-ip: [2001:1ba8:147a:c100:b9e3:8294:872b:37d3]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 3d9c1ef1-f60d-47fa-4aa1-08d8a047658a
x-ms-traffictypediagnostic: VI1PR07MB4368:
x-microsoft-antispam-prvs: <VI1PR07MB4368057619B4F761D5ED79DC98C70@VI1PR07MB4368.eurprd07.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB4477.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(366004)(376002)(346002)(396003)(39860400002)(966005)(66946007)(66556008)(66476007)(4001150100001)(186003)(2616005)(2906002)(53546011)(6512007)(33656002)(66446008)(8676002)(76116006)(91956017)(316002)(6486002)(8936002)(5660300002)(44832011)(71200400001)(4326008)(478600001)(6916009)(6506007)(66574015)(36756003)(86362001)(64756008)(83380400001)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: =?utf-8?B?WExQajA2ZURJcFpxTHMvdVJOR1BPTEpobDViTXFIbDBBL085QkRRTnVkK1RL?= =?utf-8?B?dUV3R3JZU2FhczBuSXM0MXJZQlhlRmVlQVMxVGcxR1FnY01OYzlRR2FZa0Mx?= =?utf-8?B?T0pESnNYVDNuc1pUSWJjVUt6dDZweVFTUlVBc3E5QTJMdFlSaG5aOTRqMVhX?= =?utf-8?B?aEZxNXBGNGU0K25BNVR6QXdnZW10OTF4Zzh5angxcmhFVFNKYWFaVEFyUWFF?= =?utf-8?B?bnlHQXJuZkdoUDFRaDF0eDVzM1J5KzNyT0JKd296UGxCSmpKRmIrbmZ5c1lw?= =?utf-8?B?TnhTTUtXQTRZUGRrRDBMa1U0M01YZVpRV0wySGEyWndLM0FHU2p3eW54OUY0?= =?utf-8?B?UktxZk56cGhLQVNxb3piWG9ZNkkzRXJIZWFuYVFiMDZOazYxb1dxbTcxZXdn?= =?utf-8?B?UlF4dTJrWEhrN2pKRnZ1VXhoeTVKOUppZE1LZDdneTMyL0ZPam9VODhxTkFo?= =?utf-8?B?T1E5eXRRNmhhdTh6NmpLVE9zRXhsb0dsOUZHaU93M2FVSHJYY3BrKzZCNGlF?= =?utf-8?B?cXAxQktOK2ozcjBSOEMwcE9NMjIwTWpSaS91ZC9PWGtaRlR2eXM5bk8wODJi?= =?utf-8?B?MkFERnpoRmhHVFdHSm9pNk8rT3FmVDhnYmFmU1dENkRuLzBOclhEWDUwZUZi?= =?utf-8?B?TDNRSXhlTjFnUHZKMVpGeFQ1bXZUTlR3MGtZRmhXWTNLVThBVFBhV2NQenA0?= =?utf-8?B?SnFGSHFadVRrVlJ3RkFUckZPalYzT2YvTGcwL1VKWFRvQWFwWDF5YVgwN2hl?= =?utf-8?B?WUd6V2k1Yys4STNqY01GMitVaDFtVXdlR25UR3NJUnlxQjJNTGUrTGVFSGhK?= =?utf-8?B?V05zTEd5WC9EL3dhUTNjWUtjRmxuZ1JSNVI2a3YvQXl3Z0wzUWlwYmVXN0RG?= =?utf-8?B?Qk85QjQ5Z0I1LzhBQXUxb2grRitRMnN4UEwvSmFhSU5KMEU1a1d4Qkd3N3hn?= =?utf-8?B?NVpwR1NxTlRCMVdOMVRJWTBZVk1Zd0Yzdzl4VmJhdzE0RlB6MGsrR2JoM29S?= =?utf-8?B?dnN3S0Y5dFZSYVc2U1NISGdaVkdUVFl1MzhDRHRuQnBFcGpvMUtGb2JNaml5?= =?utf-8?B?QStOVGN5UHNjRVA3ckJiSDN6MDVuUnA3R2doNWFLOE5HMzVLQXB0UWlrZXZO?= =?utf-8?B?ZmpObGNHMnlFVmlxY0ZSeklyUVVMQ3B3alB2Vk5NazJYZUV4Ulk1SWduenBw?= =?utf-8?B?UFVRTW1VY2F1VlhMUFRtS0pNNDhOQXlwVG05SHk0bFd2V0EyVGZDdnc1UXFZ?= =?utf-8?B?WFkrVTdmbkNUSWVqdGNFK3JBb2gzcDJHcmlTR1dJQ2RFVmZmUVYwZmZHTlg0?= =?utf-8?B?RG4zbldkcktHNzRYTisyZ082LzIxMGtLdEwrRG5zYTduVjFINWNwSWFpUnRp?= =?utf-8?B?bk5wT0hSekF5L0ZQTmZRd0hlSXA2aDIvS01iRWdWY1Q2NG5CVjUzaUViVkI4?= =?utf-8?Q?siyYa0Oj?=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-ID: <17F72D634F397244A9A267FCE13EF78B@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: VI1PR07MB4477.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3d9c1ef1-f60d-47fa-4aa1-08d8a047658a
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Dec 2020 15:46:17.8529 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: szmfedD93Ff3xnGm2u/t5PFzUzMnJ6uDAIJZpiYDdXCL/N8119chYryDNvgVzcGYD1mvOMD/t8/cmQQx4KcNBbRsTqhLm2aENOsHaAFuuA0rEUxnVGDY6LrB6+AP4sb4
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB4368
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/LtFzch_y7iJjWW4O-EzVjyC60MI>
Subject: Re: [Ace] I-D Action: draft-ietf-ace-oscore-profile-14.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Dec 2020 15:46:22 -0000

Ah, of course, they are indeed out of sync, thank you for noticing! I am fixing it already in the github, but I am thinking of waiting for Daniel's go ahead before submitting one more version, see if he wanted to review one last time.

Francesca

On 14/12/2020, 16:32, "Benjamin Kaduk" <kaduk@mit.edu> wrote:

    Thanks, Francesca!

    It looks like the CBOR label values have gotten out of sync between Table 1
    and the prose.  (The IANA Considerations just refer to Table 1, so I think
    that Section 3.2.1 is the only thing that needs to be kept in sync.)

    -Ben

    On Mon, Dec 14, 2020 at 09:58:21AM +0000, Francesca Palombini wrote:
    > Hi all,
    > 
    > This update answers Marco's latest review (thanks Marco!), answering all comments received as WGLC.
    > 
    > Thanks,
    > Francesca
    > 
    > On 14/12/2020, 09:49, "Ace on behalf of internet-drafts@ietf.org" <ace-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote:
    > 
    > 
    >     A New Internet-Draft is available from the on-line Internet-Drafts directories.
    >     This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF.
    > 
    >             Title           : OSCORE Profile of the Authentication and Authorization for Constrained Environments Framework
    >             Authors         : Francesca Palombini
    >                               Ludwig Seitz
    >                               Göran Selander
    >                               Martin Gunnarsson
    >     	Filename        : draft-ietf-ace-oscore-profile-14.txt
    >     	Pages           : 33
    >     	Date            : 2020-12-14
    > 
    >     Abstract:
    >        This memo specifies a profile for the Authentication and
    >        Authorization for Constrained Environments (ACE) framework.  It
    >        utilizes Object Security for Constrained RESTful Environments
    >        (OSCORE) to provide communication security and proof-of-possession
    >        for a key owned by the client and bound to an OAuth 2.0 access token.
    > 
    > 
    >     The IETF datatracker status page for this draft is:
    >     https://datatracker.ietf.org/doc/draft-ietf-ace-oscore-profile/
    > 
    >     There are also htmlized versions available at:
    >     https://tools.ietf.org/html/draft-ietf-ace-oscore-profile-14
    >     https://datatracker.ietf.org/doc/html/draft-ietf-ace-oscore-profile-14
    > 
    >     A diff from the previous version is available at:
    >     https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oscore-profile-14
    > 
    > 
    >     Please note that it may take a couple of minutes from the time of submission
    >     until the htmlized version and diff are available at tools.ietf.org.
    > 
    >     Internet-Drafts are also available by anonymous FTP at:
    >     ftp://ftp.ietf.org/internet-drafts/
    > 
    > 
    >     _______________________________________________
    >     Ace mailing list
    >     Ace@ietf.org
    >     https://www.ietf.org/mailman/listinfo/ace
    > 
    > _______________________________________________
    > Ace mailing list
    > Ace@ietf.org
    > https://www.ietf.org/mailman/listinfo/ace