Re: [Ace] I-D Action: draft-ietf-ace-oscore-profile-04.txt

Francesca Palombini <francesca.palombini@ericsson.com> Mon, 08 October 2018 15:06 UTC

Return-Path: <francesca.palombini@ericsson.com>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB125130EFF for <ace@ietfa.amsl.com>; Mon, 8 Oct 2018 08:06:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.757
X-Spam-Level:
X-Spam-Status: No, score=-4.757 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.456, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=G0gIfQ46; dkim=pass (1024-bit key) header.d=ericsson.com header.b=OtfnSCG8
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n7s6vnT9xHZE for <ace@ietfa.amsl.com>; Mon, 8 Oct 2018 08:06:32 -0700 (PDT)
Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C929130EE3 for <ace@ietf.org>; Mon, 8 Oct 2018 08:06:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1539011189; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=Ofz4hE+8p0yJWXvFEDR7H6ttQt7LR62C4VhN93fcpXY=; b=G0gIfQ46ieGLs2vxGEWD2bJ6B9gFPwyD7VO7aywCHxuyZX6lluUDEfi2rcmUosPr 6SGRuWSpevAXmgDQN8BpHayqirxgaNB5uSTpoYgtYN1mOBCEefRQvqGgMCCpzBv0 DACx7mSGUITU9213vVQP+sOGid1+KCCtRmWAZD1xweY=;
X-AuditID: c1b4fb30-fe1ff700000055da-ad-5bbb7275bc68
Received: from ESESBMB505.ericsson.se (Unknown_Domain [153.88.183.118]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 10.2C.21978.5727BBB5; Mon, 8 Oct 2018 17:06:29 +0200 (CEST)
Received: from ESESSMB502.ericsson.se (153.88.183.163) by ESESBMB505.ericsson.se (153.88.183.172) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Mon, 8 Oct 2018 17:06:29 +0200
Received: from EUR03-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB502.ericsson.se (153.88.183.163) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Mon, 8 Oct 2018 17:06:28 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ofz4hE+8p0yJWXvFEDR7H6ttQt7LR62C4VhN93fcpXY=; b=OtfnSCG8n3catZkMUNrUvmuAIIiwU2HI0RalQDTaeDDQsvlg+yRHx8p3BXSeqGe5Sqm7bL2/PZiFJOza+l2ujWJUuA/LtIwDf8ak8Wim/5AJA5a7W7aHr8wQiepbeggBlJsbAF5MuW5oFL4s4tNT/GsPdOLet7CqqRqTyZQRsEM=
Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com (10.168.188.140) by HE1PR0701MB1785.eurprd07.prod.outlook.com (10.167.246.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1228.9; Mon, 8 Oct 2018 15:06:27 +0000
Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::c05a:fd61:6104:51e5]) by HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::c05a:fd61:6104:51e5%6]) with mapi id 15.20.1228.020; Mon, 8 Oct 2018 15:06:27 +0000
From: Francesca Palombini <francesca.palombini@ericsson.com>
To: "ace@ietf.org" <ace@ietf.org>
CC: "draft-ietf-ace-oscore-profile@ietf.org" <draft-ietf-ace-oscore-profile@ietf.org>
Thread-Topic: [Ace] I-D Action: draft-ietf-ace-oscore-profile-04.txt
Thread-Index: AQHUXxgGhvMeF9GWAEmeU9q/RlH2uaUVlE+A
Date: Mon, 8 Oct 2018 15:06:27 +0000
Message-ID: <73AE80B5-BE34-47EB-8DB4-1F488A4CF9A9@ericsson.com>
References: <153901088355.16293.13681871563765179196@ietfa.amsl.com>
In-Reply-To: <153901088355.16293.13681871563765179196@ietfa.amsl.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com;
x-originating-ip: [192.176.1.87]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; HE1PR0701MB1785; 6:QeSCELgGjBLaQMDtcR4WmE5TfMdxkxq5gdUJWX02T8fzsIOAO291GOpkYqV1c17LFZ4d7JzaYeHXIpwYBrsAEEC83bT7yXDpUbWZ4bLO9ep68XFSNbpt++LV9RTo60HCPulvhdgAIK13/wPcTRa8NWYQWhCTM2yjqJqRYboCGuJhbOsEGBZ9vmO7/hCu1rpy92NihcJET5avRLzmNLpyXo6cCgOrAAW6/3o6uaIMY7hB2Jeq/wIKJnJG5ov+uKe+xUHMc3ApxYpAfhVbEEoowUVSURu35gYw9iqagt3+LNn5//RoFO5D2UQF8H1ttqK30eRUoT3z5Aiddxf6TZiiT02UvdXfcOzYPMOAzU99mrclUjUx/hlG0Z0vXXddq66BUNyIP3GkugtEcZ6Ta+1QmO0waQ+k3ppUeTOeIBYUxbmajPeNAlr5z9zJPT3DvJJUk5n5+eI9kZO8eN6TTr6vKA==; 5:yqUJLehEIIoTvLnj/j/7UemCh/L8okg2Pwh0YDgYVqXoXXddJ9SSAzRduXrrOnphRCU5EMrr4FVFJjSLZwv9N6SLM4gjeMEaRqXntp2W6j7ffWcMud5qCN2dASiq6nRMlN9fM4f1WVBZk8U9KjvNcrQMVxVVwMHOMQrG4wH43TY=; 7:IltGqUve3hEkdFh/q/evN6Fz5y3uiVY/RgAaJyQ806THKV9CtWlcnctHPq4jWtAXwEiEYNMW8d7M/ibXEad5rDe9vxWdDkVhUYQz2KzVd7QPy80BhLAnZ+dtdcrqAJrXJwqQY9T0EKqzMth9Hwg7LFjHDwe3RYS6rCdDuV5WfeFn2gEVPGoK8GcturwrfVP7/kfXO8KvkSQHNqobviof3JNuVzyTVvLUhNkNtGdUXyvfuSuk3cR4bhxPzr2aey7I
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: 01ed27dd-52e9-4b65-3cb5-08d62d2f9f0f
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:HE1PR0701MB1785;
x-ms-traffictypediagnostic: HE1PR0701MB1785:
x-microsoft-antispam-prvs: <HE1PR0701MB1785CDDC8F108A68612F83DD98E60@HE1PR0701MB1785.eurprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(192374486261705)(158342451672863)(120809045254105);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231355)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123560045)(20161123562045)(201708071742011)(7699051); SRVR:HE1PR0701MB1785; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB1785;
x-forefront-prvs: 081904387B
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(376002)(346002)(39860400002)(396003)(366004)(189003)(199004)(53754006)(33656002)(5250100002)(8936002)(2501003)(68736007)(81156014)(8676002)(99286004)(316002)(36756003)(66066001)(3846002)(6246003)(6116002)(7736002)(450100002)(25786009)(4326008)(97736004)(81166006)(1730700003)(86362001)(2906002)(44832011)(2616005)(476003)(486006)(2900100001)(5660300001)(305945005)(82746002)(6436002)(71200400001)(11346002)(229853002)(83716004)(6486002)(2351001)(256004)(14444005)(105586002)(66574009)(71190400001)(106356001)(6916009)(14454004)(6506007)(102836004)(478600001)(76176011)(26005)(53936002)(966005)(5640700003)(6306002)(6512007)(186003)(446003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0701MB1785; H:HE1PR0701MB2746.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: dJ5s/lIRMKJ8fX4f6eQw2kwSQQh4VydZ2ujMnzQpVvBKcX5dUMwOfkv3fgfoLilbTsp2QacR9BGU5NS+eiqIiNBuRn6kVWFRUdhQYqw/AB9IPVqU9x2a6LPy7491CV/NJmyYXI+YsDvcWYhCwV8+yTck1kS9O7Du89fJ9B1WyvQ+crYKxLqzgo4J/NSUMOW+kfCJjy6wYqvDae7isBaLSfMqrbU97PEnoL1uvhpyLURQA5S1jZyiEINEzxyczJEXFuwkO1TF9xAAN9uATapnzWHWqgJvE3eMAzyizDSJBxDXGqPVl7atwak1kwdLL9GOT1JkaMmqZOir6C/ApoW2fJbsOsn+CeEvJWylxp0uikA=
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <307B1D9DEBE6E842847E6CE38E7C3751@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 01ed27dd-52e9-4b65-3cb5-08d62d2f9f0f
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2018 15:06:27.3701 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB1785
X-OriginatorOrg: ericsson.com
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmphleLIzCtJLcpLzFFi42KZGbG9TLe0aHe0wdzHohbfv/UwWzzd1sHs wOSxZMlPpgDGKC6blNSczLLUIn27BK6MN2sOsBackayY+WUbawPjD4kuRk4OCQETifkTDrN0 MXJxCAkcZZRoOnSOFcL5yiixfMZlVpAqIYHFTBIzTzqCJFgEJjBLHP28iB0iMZ1J4tesAoiO p4wSs1b+BkuwCdhIXHj4Hqibg0NEQFHi+qNEkDCzQLjEv/cHWUBsYQFniQePp7OB2CICLhI/ Dt2FKjeS2N1sCRJmEVCROHqiC6ycV8Beor99NRtIiRBQ+f4l+SAmp4CrxN4L0SAVjAKyEl8a VzNDLBKXuPVkPhPEjwISS/acZ4awRSVePv7HClGfLHHldh87yBgJAQWJJX8lIUpkJS7N72aE sA+wS0w4LwBh60p8mDoVaoyvxKu9HeBgkxA4ySjx/9RtqAYdiXn7HkMV5Us8WX2BHcKOlbjY 1wx1j5zEqt6HLBMYjWYhOXUW0BnMApoS63fpQ5geEpPvW0FUKEpM6X7IPgscDIISJ2c+YVnA yLqKUbQ4tTgpN93ISC+1KDO5uDg/Ty8vtWQTIzBtHNzy22AH48vnjocYBTgYlXh4O+J3Rwux JpYVV+YeYpTgYFYS4RXdvitaiDclsbIqtSg/vqg0J7X4EKM0B4uSOK+F3+YoIYH0xJLU7NTU gtQimCwTB6dUA6PlxyizFv6FtwJXfz5TxbJus8DLzU/uFokkPSufs46TwWam2fc9fr/L2P5f 3fRy8yJ7sfa7PJIKCz6fO7xW+4v5yYvaKyZ1nPX8rFrgtqN15u173oeKDiRdXDhlu3bepYNT VrTstzk1Y2JX+5W9xzSVWcsa9k5Pu6p2W8y1K0tIc2nQGy+u8pMPlViKMxINtZiLihMBUNR/ +RcDAAA=
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/OMbuJOnFwNzQRseUJDOJmFUyeYM>
Subject: Re: [Ace] I-D Action: draft-ietf-ace-oscore-profile-04.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Oct 2018 15:06:44 -0000

Hi all,

We have just submitted an updated version of the OSCORE profile for ACE. Mainly, this version adds some examples, expands on security considerations, expands on updating rights, fixes some references and minor errors leftover and improves readability.

Thanks,
Francesca

On 2018-10-08, 17:03, "Ace on behalf of internet-drafts@ietf.org" <ace-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote:

    
    A New Internet-Draft is available from the on-line Internet-Drafts directories.
    This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF.
    
            Title           : OSCORE profile of the Authentication and Authorization for Constrained Environments Framework
            Authors         : Francesca Palombini
                              Ludwig Seitz
                              Göran Selander
                              Martin Gunnarsson
    	Filename        : draft-ietf-ace-oscore-profile-04.txt
    	Pages           : 26
    	Date            : 2018-10-08
    
    Abstract:
       This memo specifies a profile for the Authentication and
       Authorization for Constrained Environments (ACE) framework.  It
       utilizes Object Security for Constrained RESTful Environments
       (OSCORE) to provide communication security, server authentication,
       and proof-of-possession for a key owned by the client and bound to an
       OAuth 2.0 access token.
    
    
    The IETF datatracker status page for this draft is:
    https://datatracker.ietf.org/doc/draft-ietf-ace-oscore-profile/
    
    There are also htmlized versions available at:
    https://tools.ietf.org/html/draft-ietf-ace-oscore-profile-04
    https://datatracker.ietf.org/doc/html/draft-ietf-ace-oscore-profile-04
    
    A diff from the previous version is available at:
    https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oscore-profile-04
    
    
    Please note that it may take a couple of minutes from the time of submission
    until the htmlized version and diff are available at tools.ietf.org.
    
    Internet-Drafts are also available by anonymous FTP at:
    ftp://ftp.ietf.org/internet-drafts/
    
    _______________________________________________
    Ace mailing list
    Ace@ietf.org
    https://www.ietf.org/mailman/listinfo/ace