Re: [Anima-bootstrap] DRAFT minutes up to 2016-09-13

Brian E Carpenter <brian.e.carpenter@gmail.com> Thu, 15 September 2016 20:13 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: anima-bootstrap@ietfa.amsl.com
Delivered-To: anima-bootstrap@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC01012B0CB for <anima-bootstrap@ietfa.amsl.com>; Thu, 15 Sep 2016 13:13:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.7
X-Spam-Level:
X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8jhWT-Prbf3Y for <anima-bootstrap@ietfa.amsl.com>; Thu, 15 Sep 2016 13:13:07 -0700 (PDT)
Received: from mail-pf0-x232.google.com (mail-pf0-x232.google.com [IPv6:2607:f8b0:400e:c00::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C0A112B023 for <anima-bootstrap@ietf.org>; Thu, 15 Sep 2016 13:13:07 -0700 (PDT)
Received: by mail-pf0-x232.google.com with SMTP id p64so19882287pfb.1 for <anima-bootstrap@ietf.org>; Thu, 15 Sep 2016 13:13:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:cc:from:organization:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=P3DqH4EriRJnlLeUpHR6742wOrUeFs+9ufw9V5wCCTc=; b=VkBBs8n9sryQzFXbnk4M6E6VEwXGu3YzwH9lOzP2zPD2n7TUehn8IcME0Dr0y4UePa sFQqBphrqhv5pdwpoWZ5efL0y0K2SobCoXUCwUQZMyAaVIJ/lKWRJpyTzEDXfVrmhGFD 5HuSPSWcJn9YLRmByoInxSUiVDbn9WwOWaZ6I10O93+UgyTyQsH71wbCY3r8iphS7YUQ 7937dHo1dLrDV2tbUUv7C19MBicf5ySbZG1m5K/LUeAtqT0fw8dziVawwf1XqxI6i5YQ Y1xy0Xm0rhRmwUQQHEafZw88NkG9QiIhARVOmiJYailtaWIkRtZ5/xoZg81upLytEDyQ s0Sw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=P3DqH4EriRJnlLeUpHR6742wOrUeFs+9ufw9V5wCCTc=; b=TykyBwPnusPlsWarcTltxbRMBO2Nir88u/skWhPlYMxzc5auCKPhdN0FlPJ6obRq37 6iqGYHd3B2XsFRw5i8gEeJ7/7L3SiCyW7hY4PhEtQ3IXt1tKLo5P8t+ZQnPJsiwDbVw5 TKDSF4RAR+77qcX0JW9y2G6KHzXnJEWFQdmk/C0DMLTeNtEjnjeqOy1fFn6wqTwWPgMz egOm1RlyMNNb8tH5AJnAQjy29piB3KNi5fQHHQP7MU6OkyaFiLQuCxmlsTwmrrjNyclf b86O4uN+S02ia1gaYbXXd/0yMA1v4aE4WMu9+9TCcnddm1t1YWB6U/nnKtBuyeymjstQ CliQ==
X-Gm-Message-State: AE9vXwN5Htk2bjdhIoyx+P1aHrRQNUYRvzkGd+S+eDIszs74GX9MfQAyTwGYGDTMgyHwKg==
X-Received: by 10.98.93.204 with SMTP id n73mr17386765pfj.87.1473970386514; Thu, 15 Sep 2016 13:13:06 -0700 (PDT)
Received: from [192.168.178.23] ([118.148.71.236]) by smtp.gmail.com with ESMTPSA id gm1sm1145030pac.2.2016.09.15.13.13.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 15 Sep 2016 13:13:05 -0700 (PDT)
To: Michael Richardson <mcr+ietf@sandelman.ca>
References: <10796.1473897911@obiwan.sandelman.ca> <1521461d-b050-8dcb-fd75-de846fa23a85@gmail.com> <28340.1473902714@obiwan.sandelman.ca> <05ae8cf7-3924-c5f0-e65b-fcf18a4e0b6d@gmail.com> <11222.1473943775@obiwan.sandelman.ca>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <82575003-5339-c171-5cbb-1db8e4006f2f@gmail.com>
Date: Fri, 16 Sep 2016 08:13:10 +1200
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0
MIME-Version: 1.0
In-Reply-To: <11222.1473943775@obiwan.sandelman.ca>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima-bootstrap/PQNBSDTmGQGVjcnobJlFKDf983o>
Cc: anima-bootstrap <anima-bootstrap@ietf.org>
Subject: Re: [Anima-bootstrap] DRAFT minutes up to 2016-09-13
X-BeenThere: anima-bootstrap@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Mailing list for the bootstrap design team of the ANIMA WG <anima-bootstrap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima-bootstrap/>
List-Post: <mailto:anima-bootstrap@ietf.org>
List-Help: <mailto:anima-bootstrap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 15 Sep 2016 20:13:09 -0000

On 16/09/2016 00:49, Michael Richardson wrote:
> 
> Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>     >> Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>     >> >> I) The ANIMA cast list is as follows:
>     >> >> i) pledge is TCP-initiator, TLS-client, HTTP/EST client.
>     >> >> ii) registar is TCP-responder, TLS-server, EST server.
>     >>
>     >> > Where's the proxy in that? And didn't we say we'd also have a COAP option?
>     >>
>     >> The proxy is in between, but doesn't provide functions above layer-3ish.
>     >> I ommited it for clarity :-)
> 
>     > OK. But layer 4 probably - it seems likely that we would terminate a TLS
>     > session at the proxy and make another one between the proxy and the
>     > registrar. (That's the bit I *didn't* model in my Python demos.)
> 
> No, we don't want to do that for a number of reasons:

So, accepting those reasons, if (for example) we do the first
suggestion in draft-richardson-anima-state-for-joinrouter-01:

"3.1.  method 1: Circuit Proxy method

   In response to discovery, the circuit proxy would return a link-local
   address on the joining router.  The joining router would have a TCP
   (or UDP/CoAP) port open on that interface.  It would accept
   connections on that port, and would turn around and create a new TCP
   connection to the registrar."

Can TLS just ride over such a relayed TCP connection?

And so on for the other models in anima-state-for-joinrouter. I do
think this needs to be resolved before we can say the model is complete.

  Brian

> 
> In no particular order:
> 
> 1) The proxy isn't trusted, and doesn't know how to trust the pledge.
> 
>    While it has a local domain certificate, it has no knowledge about the
>    Manufacturer Installed Certificate (the IDevID) that the pledge provides.
> 
>    The pledge has no way to trust the proxy: this is what the ownership
>    voucher is for (and causes us some challenge to get right), and I don't
>    think we want to extend the trust conveyed by the ownership voucher to the
>    network operator, transitively, to all of the operators' machines.
> 
> 2) The proxy may not have resources to terminate a possibly large number of TLS
>    connections.  We want to make being a proxy as inexpensive as possible,
>    particularly given that this function (along with the rest of the ACP
>    processing) likely resides on a control plane CPU.
> 
> 
> 
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>ca>, Sandelman Software Works
>  -= IPv6 IoT consulting =-
> 
> 
>