[Ace] Protocol Action: 'Message Queuing Telemetry Transport (MQTT)-TLS profile of Authentication and Authorization for Constrained Environments (ACE) Framework' to Proposed Standard (draft-ietf-ace-mqtt-tls-profile-17.txt)

The IESG <iesg-secretary@ietf.org> Wed, 23 March 2022 09:50 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Cc: Daniel Migault <daniel.migault@ericsson.com>, The IESG <iesg@ietf.org>, ace-chairs@ietf.org, ace@ietf.org, daniel.migault@ericsson.com, draft-ietf-ace-mqtt-tls-profile@ietf.org, kaduk@mit.edu, rfc-editor@rfc-editor.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <164802902329.30641.4040377032841412809@ietfa.amsl.com>
Date: Wed, 23 Mar 2022 02:50:23 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/ace/wcKmPG8PzD0bFa-3oXgoWFcOou4>
Subject: [Ace] Protocol Action: 'Message Queuing Telemetry Transport (MQTT)-TLS profile of Authentication and Authorization for Constrained Environments (ACE) Framework' to Proposed Standard (draft-ietf-ace-mqtt-tls-profile-17.txt)

The IESG has approved the following document:
- 'Message Queuing Telemetry Transport (MQTT)-TLS profile of
Authentication and Authorization for Constrained Environments (ACE)
Framework'
(draft-ietf-ace-mqtt-tls-profile-17.txt) as Proposed Standard

This document is the product of the Authentication and Authorization for
Constrained Environments Working Group.

The IESG contact persons are Benjamin Kaduk and Roman Danyliw.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ace-mqtt-tls-profile/

Technical Summary

This document specifies a profile for the ACE (Authentication and
Authorization for Constrained Environments) framework to enable
authorization in an Message Queuing Telemetry Transport (MQTT)-based
publish-subscribe messaging system. Proof-of-possession keys, bound
to OAuth2.0 access tokens, are used to authenticate and authorize
MQTT Clients. The protocol relies on TLS for confidentiality and
MQTT server (broker) authentication.

Working Group Summary

This document had an uneventful journey through the WG, gathering
feedback over multiple review cycles, with progress being driven by
understanding and resolving potential issues and no major points of controversy.

Document Quality

There are at least two known implementations:
* Implementation using the HiveMQ CE is a Java-based open source MQTT broker that fully supports MQTT 3.x and MQTT 5.
https://github.com/michaelg9/HiveACEclient

The Media-Type registration was sent to the media-types list for review at
https://mailarchive.ietf.org/arch/msg/media-types/85kGXBBKaWqIoCSU5k7GrE5FRWw/
though no comments were received.

Personnel

Daniel Migault is the Document Shepherd.
Benjamin Kaduk is the Responsible AD.

[Ace] Protocol Action: 'Message Queuing Telemetry… The IESG