Re: [Anima-bootstrap] Can the proxy add information during bootstrap?

peter van der Stok <stokcons@xs4all.nl> Thu, 14 April 2016 07:33 UTC

Return-Path: <stokcons@xs4all.nl>
X-Original-To: anima-bootstrap@ietfa.amsl.com
Delivered-To: anima-bootstrap@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 717A812D0AF for <anima-bootstrap@ietfa.amsl.com>; Thu, 14 Apr 2016 00:33:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.621
X-Spam-Level:
X-Spam-Status: No, score=-2.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AIoRD_9vJpRe for <anima-bootstrap@ietfa.amsl.com>; Thu, 14 Apr 2016 00:33:43 -0700 (PDT)
Received: from lb1-smtp-cloud6.xs4all.net (lb1-smtp-cloud6.xs4all.net [194.109.24.24]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A84BC12D546 for <anima-bootstrap@ietf.org>; Thu, 14 Apr 2016 00:33:41 -0700 (PDT)
Received: from webmail.xs4all.nl ([194.109.20.195]) by smtp-cloud6.xs4all.net with ESMTP id i7Ze1s00F4CYHle017Ze2y; Thu, 14 Apr 2016 09:33:38 +0200
Received: from 2001:983:a264:1:4485:aa13:582f:cefd by webmail.xs4all.nl with HTTP (HTTP/1.1 POST); Thu, 14 Apr 2016 09:33:38 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Date: Thu, 14 Apr 2016 09:33:38 +0200
From: peter van der Stok <stokcons@xs4all.nl>
To: Toerless Eckert <eckert@cisco.com>
Organization: vanderstok consultancy
Mail-Reply-To: consultancy@vanderstok.org
In-Reply-To: <20160413155545.GQ21173@cisco.com>
References: <5c12b5d6940d4970bd3c0ad4c94b4696@XCH-RCD-006.cisco.com> <14252.1460506458@obiwan.sandelman.ca> <570D96FE.1000105@gmail.com> <20160413004957.GH21173@cisco.com> <18364.1460552457@obiwan.sandelman.ca> <20160413155545.GQ21173@cisco.com>
Message-ID: <326b5cfeb4a696b0600f0043b2ee54a3@xs4all.nl>
X-Sender: stokcons@xs4all.nl (u9YczWxFcmDH+toQLko5VaFJgocG5F4A)
User-Agent: XS4ALL Webmail
Archived-At: <http://mailarchive.ietf.org/arch/msg/anima-bootstrap/y3iusfHLRnZKKkug1_PX82LrRAg>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, anima-bootstrap@ietf.org
Subject: Re: [Anima-bootstrap] Can the proxy add information during bootstrap?
X-BeenThere: anima-bootstrap@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: consultancy@vanderstok.org
List-Id: Mailing list for the bootstrap design team of the ANIMA WG <anima-bootstrap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima-bootstrap/>
List-Post: <mailto:anima-bootstrap@ietf.org>
List-Help: <mailto:anima-bootstrap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Apr 2016 07:33:45 -0000

> Consider the operator in the NOC sits on a console with a GUI saying
> "Device XXX (destined for location X) has connected in location Y". 
> Enroll ?
> Yes, he could always enrol, but then there is more work afterwards in 
> for
> example quarantining or changing target configs for the device.
> 
Yes, this is possible,
but many questions pop up:
what is the granularity of the location: room, exact coordinate.
and why burden the manufacturer, it seems more an operational 
responsibility.
What about moving these things around?

why not a installer attribute to the certificate, or an end-user, or 
anything else?

Personally I am not too happy about such specifics.
I can imagine that additional customer/installation related attributes 
can be added, but Being too specific about their use is IMO one step too 
far.

Peter