Re: [Anima-bootstrap] 6tisch join -01 documented posted

Brian E Carpenter <brian.e.carpenter@gmail.com> Mon, 14 November 2016 19:28 UTC

Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: anima-bootstrap@ietfa.amsl.com
Delivered-To: anima-bootstrap@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AF31129658; Mon, 14 Nov 2016 11:28:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XxmsU-wtPQV3; Mon, 14 Nov 2016 11:28:30 -0800 (PST)
Received: from mail-pg0-x22c.google.com (mail-pg0-x22c.google.com [IPv6:2607:f8b0:400e:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17E1B129610; Mon, 14 Nov 2016 11:28:29 -0800 (PST)
Received: by mail-pg0-x22c.google.com with SMTP id p66so57218998pga.2; Mon, 14 Nov 2016 11:28:29 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:from:organization:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=sJhtFMQR49d5C+1+hEGHfB+4iO8CRDtTyJ+rdFEhals=; b=sMMW+8Mi1xH0dJOBZskm2b9LBtyC+qjNISYdzacFBmNZOHji9z/pm1bW6JvQda8DAO dsyEHUT6x/KW5b+vSbuTYrV4jC3MfiN9jIWONwj3iriSnxJrhT8+qQx1+IZVoV/bUtG4 Hq7DPWXnrf2lG4rkuGikRrHJHOkCKaiY11toBNHykUFGNIB32JfLsWFJJ+OzZIwyxLXL j/y9hTZuf5wb2TjNRmthXEGb68udOfxWn0FCJsAtTfC6QawQM3Y4LtrPXnzIXQHOHQzn cR2THyb3BRrr7z0uovx8faIYhIk4MWr7HBLUxovke1XAQ893aShQz5nJwqwKYIt3gp6j eSTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-transfer-encoding; bh=sJhtFMQR49d5C+1+hEGHfB+4iO8CRDtTyJ+rdFEhals=; b=lbXDw79zFSy2TJttDBG6UaCamF29+ZwZ4SkBERyohjm7j3AoKAug+00FH0ZbzMHC8u EfR2XWSjVLb+ooYFQbDt8pQuaP/jRp5AYjEZ6xKpSPc04RahNDCe3Y6QOycSP2Jhcypu 8aUvBiMrl7jT0PzzQnftL1Nv1krhK3ks2bt3ThYxD41qU489auZuWu+7g8uKEVBn4Kit 29ZPjwvlUHxeUU0xdyuh2hDiU38AZDpSQNrfjYy/2f9laWoWKDdKQ/XO12hR/U3+Sk2b teqt5BjYHNhJM5AVlbGdY+PGcFupn+vnH4JdvgrpADCUXRwuAy648gSn5a8G3B5XPP4H l7ng==
X-Gm-Message-State: ABUngvfuEE0flPUaO9umKfZJ91GwPlizFtx9DyjqyKjsjgL77fom69REv/lTzpSqePRCsg==
X-Received: by 10.98.155.146 with SMTP id e18mr34825911pfk.45.1479151708496; Mon, 14 Nov 2016 11:28:28 -0800 (PST)
Received: from ?IPv6:2406:e007:4874:1:28cc:dc4c:9703:6781? ([2406:e007:4874:1:28cc:dc4c:9703:6781]) by smtp.gmail.com with ESMTPSA id b80sm24915955pfe.52.2016.11.14.11.28.26 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 14 Nov 2016 11:28:27 -0800 (PST)
To: Michael Richardson <mcr+ietf@sandelman.ca>, 6tisch-security <6tisch-security@ietf.org>, anima-bootstrap <anima-bootstrap@ietf.org>
References: <20351.1476971471@obiwan.sandelman.ca> <0343d14c-5b18-b821-c9ad-d77fb7dae490@gmail.com> <12808a8a-5de1-c6cb-3f96-945573041ee4@gmail.com> <24910.1479078501@dooku.sandelman.ca> <efb2a1b9-a5b2-9e38-abd5-1c8031d9f1cd@gmail.com> <5562.1479107882@dooku.sandelman.ca>
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
Message-ID: <51679334-5725-7279-cdaf-c3866d5f2bd0@gmail.com>
Date: Tue, 15 Nov 2016 08:28:25 +1300
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.4.0
MIME-Version: 1.0
In-Reply-To: <5562.1479107882@dooku.sandelman.ca>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima-bootstrap/dcSCJ7uun4shn6-_VvM-fLX8Zzs>
Subject: Re: [Anima-bootstrap] 6tisch join -01 documented posted
X-BeenThere: anima-bootstrap@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Mailing list for the bootstrap design team of the ANIMA WG <anima-bootstrap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima-bootstrap/>
List-Post: <mailto:anima-bootstrap@ietf.org>
List-Help: <mailto:anima-bootstrap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2016 19:28:31 -0000

On 14/11/2016 20:18, Michael Richardson wrote:
> 
> Brian E Carpenter <brian.e.carpenter@gmail.com> wrote:
>     >> > 3. Mini-question, is this really IPv6-specific? If not I'd prefer a
>     >> > name that flags it as an AN infrastructure objective, e.g. "AN_Join"
>     >>
>     >> okay.  The problem in 6tisch for proxy<->registrar communication
>     >> (admission control) is the TCP stack required.
> 
>     > Right. I've been assuming that a "BRSKI-COAP" method is available, and
>     > if we use GRASP Flood, no TCP is needed at the pledge side.
> 
> BRSKI-CoAP lets us do the *ENROLLMENT* over CoAP, not the discovery.

Yes, understood, my point was that since Flood is UDP, the pledge doesn't
need to do anything but listen for LL multicasts - no actual discovery
is neeeded. That seems like a bonus for pledges.

> These are the interactions, and I will try to give some names to the various
> interactions in a future document, but suggestions most welcome.
> 
> 1) pledge <-> Join Assistant (JA)
>    Discovery of JA:   mDNS and/or M_FLOOD

Is Join Assistant the agreed terminology (instead of Proxy)?
> 
> 2) Join Assistant *discovery* of Registrar
>    in 6tisch, omitted, will be provisioned
>    in ANIMA, uses GRASP M_DISCOVERY

Is it permissible for the Registrar to act as its own Join Assistant
for on-link neighbors? (I can't see why not.)

> 
> 3) Join Assistant tentative admission control (used in 6tisch, to provide
>    {optional?} "move along" feedback.).
>    6tisch, currently M_REQ_NEG/M_END over *TCP*, need to be fixed.
> 
> 4) pledge <-> Registrar.
>    in ANIMA, this is pledge---TCP/HTTPS---> Registrar (RFC7030)
>    in 6tisch-zero-touch, this is Registrar ---CoAP/DTLS--> pledge [maybe EDHOC]
>                    (CoMI: draft-ietf-netconf-keystore-00 )
>    in 6tisch-minimal-security, this is pledge-->CoAP/EDHOC--> Registrar
> 

Thanks, a useful summary.

   Brian