[Ace] Questions for the IETF#90 Meeting

[Hannes Tschofenig <[e-mail]>]

To me there appear to be four questions for the group:

1) Are there requirements/use cases that allow anything other than the
OAuth/Kerberos design pattern?

Partially the answer should come from the use case document.

2) Should the design re-use existing work or should the design start
from scratch?

This is more a question of taste / preference but will obviously have a
huge impact on the subsequent work in the group.

3) Should the design be based on symmetric or asymmetric crypto?
  (or both?)

We have various documents that talk about this issue, for example
draft-seitz-ace-design-considerations-00 and
draft-seitz-ace-problem-description-01

4) How to address cross-domain support in the initial protocol design?
Is it a feature that can be added later easily?

draft-gerdes-ace-actors-01 talks about this aspect.

If we could get an answer to these questions during the meeting that
would be good step forward.

Ciao
Hannes

PS: One question that has been answered by all document in the same way
at the moment is about the use of DTLS. Currently, everyone seems to be
focused on using DTLS everywhere. There would be alternative approaches
as well.