IETF Logo Mail Archive

Re: [Anima-bootstrap] Scope question

"Michael Behringer (mbehring)" <mbehring@cisco.com> Sun, 19 July 2015 15:18 UTC

Return-Path: <mbehring@cisco.com>
X-Original-To: anima-bootstrap@ietfa.amsl.com
Delivered-To: anima-bootstrap@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACB7C1A8F3F for <anima-bootstrap@ietfa.amsl.com>; Sun, 19 Jul 2015 08:18:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.511
X-Spam-Level:
X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4BX3ys4lyErD for <anima-bootstrap@ietfa.amsl.com>; Sun, 19 Jul 2015 08:18:15 -0700 (PDT)
Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B3D61A8AB6 for <anima-bootstrap@ietf.org>; Sun, 19 Jul 2015 08:18:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=879; q=dns/txt; s=iport; t=1437319095; x=1438528695; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=Tj3Mg7PmU/cNJ7w0J7WQuDvtq0Tw0Isyyv9YMQoKx58=; b=coQHMQbgO9XEMdRLkR2tBSjLRo8uKNwppkKj0gVSubIHRu6CgvIPtMFq yJKOKYKe8OmZGtS+IW0gOHcyuv1a8s3MQwCcpnKNYrCLTkQFkAgtrhRnu X5cUnyDWpbUblR9HlJf07qnC6NRGqfhq2f2uQea4Zf+kfqjecslk7jtp6 o=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A0AeAwDCvqtV/4UNJK1TCYMTgT0Gu18Jh2wCgRs4FAEBAQEBAQGBCoQjAQEBBDpLBAIBCBEEAQELFAkHMhQJCAIEARIIiCbHJgEBAQEBAQEBAQEBAQEBAQEBAQEBGItMhCoDKDgGgxGBFAEElFIBpScmg3xvgQRDgQQBAQE
X-IronPort-AV: E=Sophos;i="5.15,503,1432598400"; d="scan'208";a="12979356"
Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-5.cisco.com with ESMTP; 19 Jul 2015 15:18:15 +0000
Received: from xhc-rcd-x01.cisco.com (xhc-rcd-x01.cisco.com [173.37.183.75]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t6JFIE4u025979 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Sun, 19 Jul 2015 15:18:14 GMT
Received: from xmb-rcd-x14.cisco.com ([169.254.4.42]) by xhc-rcd-x01.cisco.com ([173.37.183.75]) with mapi id 14.03.0195.001; Sun, 19 Jul 2015 10:18:14 -0500
From: "Michael Behringer (mbehring)" <mbehring@cisco.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>, "anima-bootstrap@ietf.org" <anima-bootstrap@ietf.org>
Thread-Topic: [Anima-bootstrap] Scope question
Thread-Index: AQHQt3syqJl/2MPkKkWdKxyAWCZwIp3N8YEAgBTqngA=
Date: Sun, 19 Jul 2015 15:18:14 +0000
Message-ID: <3AA7118E69D7CD4BA3ECD5716BAF28DF2300D45B@xmb-rcd-x14.cisco.com>
References: <5599BF13.60405@gmail.com> <4529.1436144074@sandelman.ca>
In-Reply-To: <4529.1436144074@sandelman.ca>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.61.90.64]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/anima-bootstrap/71EBs-ocdDLtX6yEPAVJeQBLLgA>
Subject: Re: [Anima-bootstrap] Scope question
X-BeenThere: anima-bootstrap@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Mailing list for the bootstrap design team of the ANIMA WG <anima-bootstrap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima-bootstrap/>
List-Post: <mailto:anima-bootstrap@ietf.org>
List-Help: <mailto:anima-bootstrap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 19 Jul 2015 15:18:16 -0000

> -----Original Message-----
> From: Anima-bootstrap [mailto:anima-bootstrap-bounces@ietf.org] On
> Behalf Of Michael Richardson
> Sent: 06 July 2015 02:55
> To: anima-bootstrap@ietf.org
> Subject: Re: [Anima-bootstrap] Scope question
[...]
>     > 2. Is the scope limited to physical nodes? Or in other words, do
>     > entities like virtual machines or ASAs inherit credentials from the
>     > physical node containing them?
> 
> While I would expect ASAs running on a node to have some kind of access to
> the hosts credentials, but we should consider possibility that we need to
> issue additional (transitive) credentials to individual ASAs.

Hmmm... Can you expand on that? So far I'm thinking of a node (virtual or real) to have an identity, and an ASA in my mind is like an application. When would we need a cert for an ASA? 
 
Michael

v2.23.0 | Report a Bug | By Email