[Ace] Fwd: New Version Notification for draft-tiloca-ace-oscore-gm-admin-01.txt

Marco Tiloca <marco.tiloca@ri.se> Tue, 10 March 2020 17:37 UTC

Return-Path: <marco.tiloca@ri.se>
X-Original-To: ace@ietfa.amsl.com
Delivered-To: ace@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E50FA3A1652 for <ace@ietfa.amsl.com>; Tue, 10 Mar 2020 10:37:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, MSGID_FROM_MTA_HEADER=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=risecloud.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eLEr4e3VkEcl for <ace@ietfa.amsl.com>; Tue, 10 Mar 2020 10:37:48 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130057.outbound.protection.outlook.com [40.107.13.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 088D53A1126 for <ace@ietf.org>; Tue, 10 Mar 2020 10:37:46 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZazylssEt3hOpkrQwZuAbBizGNh0XoyEwAYx3D+b2LCOuQ2uMQpC53ZSzR2TiDqsOauzYrGQVS8S0FMXoM230/2dHcYzXhl4YEjhFnfnU3IgieojdxLavOwfGYKr2IvdO+l/ssVqAdY6q5mOAYFhUiZ19fk4vf2/PSafTUZ3SeC0AWsWpdxy9UDdYBf+Orc0mzc/sPfjZzMZlkDfc1ZnszJ+TQanBglMIchWSVMQ4ffFEHs5WvvQyLRFAzGvkoozpqNdZNOSesKFGZF4i1Waf3D9dj3eTpUUZEgEzY10mi/Hdo82ykoZv8pi0wjh428UnRFUPfoNjCj+4kvJRTkI6Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=C94ZhjMmsVcHM9EBv7SL1H640WTKkUQIR9RRiHj3d2U=; b=XyhS0y4qewlc68nqFZKQ12dDj2fYDeqERm4ERKkTjF6kzdopijFaNCCIh28K6/S0lmFAWLzNqBRfbRA8nEfPyuvOg+bvyLuMwlWSXBiGLXi5HMK6wy49kz7h9UYqLSXzKpmjHrKL5d17evk0VdKkEKlWk/lXcEck2xNre1U8nL0vT177BoJvPBWmAjQJVTrVjOrYDgjs7woXtpjxMBU5Y5mMLpAccqTR4h1uJWeII/8LspvrWuJmH7vBsZN0LPjI42hMMcb1s1mxYpL7teVsbOeIpDfR1i7dqtzrEojdHGxdQkgMd5yseRcWQntof9dxyZQFNU4qyCgi/eABbEHmpw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ri.se; dmarc=pass action=none header.from=ri.se; dkim=pass header.d=ri.se; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=RISEcloud.onmicrosoft.com; s=selector1-RISEcloud-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;bh=C94ZhjMmsVcHM9EBv7SL1H640WTKkUQIR9RRiHj3d2U=; b=Nm5fLXCdzl1tEpDpOAEjSFmnQIgYGQEHeNI/cCHm57+ivZe1vdogNjZw1ytqwRJ6rhoGh57Mk2/zb20J+bzMlTxBSsYXDZOTISbuzFeMrn+bn8wN5BV591AAZ+gqMlcgstWmT24me3OUIx05dQCYvn6/jKb5cpfVo9OvflCRlgQ=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=marco.tiloca@ri.se;
Received: from VI1P189MB0398.EURP189.PROD.OUTLOOK.COM (10.165.195.159) by VI1P189MB0285.EURP189.PROD.OUTLOOK.COM (10.165.198.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2793.17; Tue, 10 Mar 2020 17:37:42 +0000
Received: from VI1P189MB0398.EURP189.PROD.OUTLOOK.COM ([fe80::80e4:7dc7:7d4e:c9cb]) by VI1P189MB0398.EURP189.PROD.OUTLOOK.COM ([fe80::80e4:7dc7:7d4e:c9cb%4]) with mapi id 15.20.2793.013; Tue, 10 Mar 2020 17:37:42 +0000
References: <158378156595.5519.2043367416496970941@ietfa.amsl.com>
To: Ace Wg <ace@ietf.org>
From: Marco Tiloca <marco.tiloca@ri.se>
Autocrypt: addr=marco.tiloca@ri.se; prefer-encrypt=mutual; keydata= mQENBFSNeRUBCAC44iazWzj/PE3TiAlBsaWna0JbdIAJFHB8PLrqthI0ZG7GnCLNR8ZhDz6Z aRDPC4FR3UcMhPgZpJIqa6Zi8yWYCqF7A7QhT7E1WdQR1G0+6xUEd0ZD+QBdf29pQadrVZAt 0G4CkUnq5H+Sm05aw2Cpv3JfsATVaemWmujnMTvZ3dFudCGNdsY6kPSVzMRyedX7ArLXyF+0 Kh1T4WUW6NHfEWltnzkcqRhn2NcZtADsxWrMBgZXkLE/dP67SnyFjWYpz7aNpxxA+mb5WBT+ NrSetJlljT0QOXrXMGh98GLfNnLAl6gJryE6MZazN5oxkJgkAep8SevFXzglj7CAsh4PABEB AAG0Nk1hcmNvIFRpbG9jYSAobWFyY28udGlsb2NhQHJpLnNlKSA8bWFyY28udGlsb2NhQHJp LnNlPokBNwQTAQgAIQUCWkAnkAIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRDuJmS0 DljaQwEvCACJKPJIPGH0oGnLJY4G1I2DgNiyVKt1H4kkc/eT8Bz9OSbAxgZo3Jky382e4Dba ayWrQRFen0aLSFuzbU4BX4O/YRSaIqUO3KwUNO1iTC65OHz0XirGohPUOsc0SEMtpm+4zfYG 7G8p35MK0h9gpwgGMG0j0mZX4RDjuywC88i1VxCwMWGaZRlUrPXkC3nqDDRcPtuEGpncWhAV Qt2ZqeyITv9KCUmDntmXLPe6vEXtOfI9Z3HeqeI8OkGwXpotVobgLa/mVmFj6EALDzj7HC2u tfgxECBJddmcDInrvGgTkZtXEVbyLQuiK20lJmYnmPWN8DXaVVaQ4XP/lXUrzoEzuQENBFSN eRUBCACWmp+k6LkY4/ey7eA7umYVc22iyVqAEXmywDYzEjewYwRcjTrH/Nx1EqwjIDuW+BBE oMLRZOHCgmjo6HRmWIutcYVCt9ieokultkor9BBoQVPiI+Tp51Op02ifkGcrEQNZi7q3fmOt hFZwZ6NJnUbA2bycaKZ8oClvDCQj6AjEydBPnS73UaEoDsqsGVjZwChfOMg5OyFm90QjpIw8 m0uDVcCzKKfxq3T/z7tyRgucIUe84EzBuuJBESEjK/hF0nR2LDh1ShD29FWrFZSNVVCVu1UY ZLAayf8oKKHHpM+whfjEYO4XsDpV4zQ15A+D15HRiHR6Adf4PDtPM1DCwggjABEBAAGJAR8E GAECAAkFAlSNeRUCGwwACgkQ7iZktA5Y2kPGEwf/WNjTy3z74vLmHycVsFXXoQ8W1+858mRy Ad0a8JYzY3xB7CVtqI3Hy894Qcw4H6G799A1OL9B1EeA8Yj3aOz0NbUyf5GW+iotr3h8+KIC OYZ34/BQaOLzdvDNmRoGHn+NeTzhF7eSeiPKi2jex+NVodhjOVGXw8EhYGkeZLvynHEboiLM 4TbyPbVR9HsdVqKGVTDxKSE3namo3kvtY6syRFIiUz5WzJfYAuqbt6m3TxDEb8sA9pzaLuhm fnJRc12H5NVZEZmE/EkJFTlkP4wnZyOSf/r2/Vd0iHauBwv57cpY6HFFMe7rvK4s7ME5zctO Ely5C6NCu1ZaNtdUuqDSPA==
X-Forwarded-Message-Id: <158378156595.5519.2043367416496970941@ietfa.amsl.com>
Message-ID: <cc718d57-396e-6615-2dd7-b0bd267cb7e0@ri.se>
Date: Tue, 10 Mar 2020 18:37:40 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.4.1
In-Reply-To: <158378156595.5519.2043367416496970941@ietfa.amsl.com>
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="TBzlAobJlNA1pmQtbewtfAwCYSXi3c1MS"
X-ClientProxiedBy: HE1PR1001CA0005.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:3:f7::15) To VI1P189MB0398.EURP189.PROD.OUTLOOK.COM (2603:10a6:802:35::31)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from [10.8.1.2] (185.236.42.41) by HE1PR1001CA0005.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:3:f7::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2793.16 via Frontend Transport; Tue, 10 Mar 2020 17:37:41 +0000
X-Forwarded-Message-Id: <158378156595.5519.2043367416496970941@ietfa.amsl.com>
X-Originating-IP: [185.236.42.41]
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: b4747efc-8bc5-4a47-9074-08d7c519bc33
X-MS-TrafficTypeDiagnostic: VI1P189MB0285:
X-Microsoft-Antispam-PRVS: <VI1P189MB02852DECC872FE88BD14B62D99FF0@VI1P189MB0285.EURP189.PROD.OUTLOOK.COM>
X-MS-Oob-TLC-OOBClassifiers: OLM:9508;
X-Forefront-PRVS: 033857D0BD
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(136003)(39860400002)(366004)(346002)(376002)(189003)(199004)(2616005)(15650500001)(66946007)(31696002)(86362001)(478600001)(235185007)(5660300002)(66476007)(66556008)(8936002)(8676002)(44832011)(81156014)(2906002)(81166006)(966005)(52116002)(31686004)(66574012)(6916009)(186003)(956004)(26005)(16526019)(6486002)(36756003)(16576012)(33964004)(21480400003)(316002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1P189MB0285; H:VI1P189MB0398.EURP189.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
Received-SPF: None (protection.outlook.com: ri.se does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-MS-Exchange-AntiSpam-MessageData: c50ULxePJn28DqVVDqq4ZORd3yyTa5AylnV1QN+pNf7j7Z8biDykJvPg8SK0YX4ZEJg3zy7w6yQYNNsFP6kt+E+5mKISG+0aFqw1xXGjAI8LZ3/Fb74TSQWiTFrdwAyFINiLOnMzrs1fEr1RiZMoiQ==
X-OriginatorOrg: ri.se
X-MS-Exchange-CrossTenant-Network-Message-Id: b4747efc-8bc5-4a47-9074-08d7c519bc33
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Mar 2020 17:37:42.0313 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 5a9809cf-0bcb-413a-838a-09ecc40cc9e8
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: r4eNFaKmM2DCa98bXY11IIPV/05ljoJoqYIQWqnTxx6MYLF/hD38p0eJQEthaM5hqnvZB6pUsTIxOGyAFU5gfA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1P189MB0285
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/PTv1sdvJt55zazAlT6XOt8aYyKw>
Subject: [Ace] Fwd: New Version Notification for draft-tiloca-ace-oscore-gm-admin-01.txt
X-BeenThere: ace@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ace>, <mailto:ace-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ace/>
List-Post: <mailto:ace@ietf.org>
List-Help: <mailto:ace-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ace>, <mailto:ace-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Mar 2020 17:37:51 -0000

Hello ACE,

We have submitted an updated version of draft-tiloca-ace-oscore-gm-admin

https://tools.ietf.org/html/draft-tiloca-ace-oscore-gm-admin-01

The document describes a RESTful interface on the OSCORE Group Manager
(resource server), intended for an Administrator (client) to create and
delete OSCORE groups, as well as set, retrieve and update their
configuration.

This interface is aligned and consistent with the other RESTful
interface on the Group Manager used in [1] and rather intended for
joining nodes and current group members.

This update is especially about:

1) Addressing the review at [2] from Jim (thanks!)

2) Redesigned and extended interface and resource representation, as a
group-collection of group-configurations.

3) Side effects of group reconfiguration or deletion.

4) Examples both in CBOR and in CoRAL.

Comments are very welcome.

Best,
/Marco

[1] https://tools.ietf.org/html/draft-ietf-ace-key-groupcomm-oscore
[2] https://mailarchive.ietf.org/arch/msg/ace/DhAI3fdLB_qf3jF_9oQlqVivdyE/


-------- Forwarded Message --------
Subject: 	New Version Notification for
draft-tiloca-ace-oscore-gm-admin-01.txt
Date: 	Mon, 09 Mar 2020 12:19:25 -0700
From: 	internet-drafts@ietf.org
To: 	Marco Tiloca <marco.tiloca@ri.se>, Klaus Hartke
<klaus.hartke@ericsson.com>, Peter van der Stok
<consultancy@vanderstok.org>, Rikard Hoeglund <rikard.hoglund@ri.se>,
Francesca Palombini <francesca.palombini@ericsson.com>




A new version of I-D, draft-tiloca-ace-oscore-gm-admin-01.txt
has been successfully submitted by Marco Tiloca and posted to the
IETF repository.

Name: draft-tiloca-ace-oscore-gm-admin
Revision: 01
Title: Admin Interface for the OSCORE Group Manager
Document date: 2020-03-09
Group: Individual Submission
Pages: 27
URL:
https://www.ietf.org/internet-drafts/draft-tiloca-ace-oscore-gm-admin-01.txt
Status: https://datatracker.ietf.org/doc/draft-tiloca-ace-oscore-gm-admin/
Htmlized: https://tools.ietf.org/html/draft-tiloca-ace-oscore-gm-admin-01
Htmlized:
https://datatracker.ietf.org/doc/html/draft-tiloca-ace-oscore-gm-admin
Diff: https://www.ietf.org/rfcdiff?url2=draft-tiloca-ace-oscore-gm-admin-01

Abstract:
Group communication for CoAP can be secured using Group Object
Security for Constrained RESTful Environments (Group OSCORE). A
Group Manager is responsible to handle the joining of new group
members, as well as to manage and distribute the group key material.
This document defines a RESTful admin interface at the Group Manager,
that allows an Administrator entity to create and delete OSCORE
groups, as well as to retrieve and update their configuration. The
ACE framework for Authentication and Authorization is used to enforce
authentication and authorization of the Administrator at the Group
Manager. Protocol-specific transport profiles of ACE are used to
achieve communication security, proof-of-possession and server
authentication.



Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat