[Anima] BRSKI-AE #4 Trust relation between registrar-agent and registrar

"Fries, Steffen" <steffen.fries@siemens.com> Fri, 12 March 2021 12:09 UTC

From: "Fries, Steffen" <steffen.fries@siemens.com>
To: "anima@ietf.org" <anima@ietf.org>
Thread-Topic: BRSKI-AE #4 Trust relation between registrar-agent and registrar
Thread-Index: AdcXNGcNkjrbAkbGTJiHOg2WPoXwkQ==
Date: Fri, 12 Mar 2021 12:09:34 +0000
Message-ID: <b271add21a234befbf481284fdbf0737@siemens.com>
Accept-Language: en-US, de-DE
Content-Language: en-US
msip_labels: MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Enabled=true; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SetDate=2021-03-12T12:09:32Z; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Method=Standard; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_Name=restricted-default; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ActionId=a030ca2e-9047-4c49-9035-5fce1f681de5; MSIP_Label_a59b6cd5-d141-4a33-8bf1-0ca04484304f_ContentBits=0
document_confidentiality: Restricted
x-originating-ip: [144.145.220.66]
x-tm-as-product-ver: SMEX-14.0.0.1158-8.6.1012-26024.007
x-tm-as-result: No-10--13.330000-8.000000
x-tmase-matchedrid: 7A6GU0Gm5XEXfmJvMkpJAZW2sEHNJAAn7xTEU85S9ZaY4WcYQvQk40pl /9BUBA/Yy5JfHvVu9Iv5ih3vHFgxg3pCbysIZKfzLb6XLHjqIvQYv4PCknmy9R0WcJq8YkZGE8y 1lAEMreiD5J8KjbO0ayc5aFljLyodzkovv0N3yYBAsKvFfIYYch9J5bZqJbIJYjzB3tJbO8u6fn Xe9tOx5u9FCyScBaYaPWK4LjUFUKhhhL+8zADGa1+24nCsUSFNjaPj0W1qn0Q7AFczfjr/7F1kM QiGd6uoKoj+dgwDJZRQY6L72zoBvMuCTzqvUV5HqGIjCmGWUBo=
x-tm-as-user-approved-sender: No
x-tm-as-user-blocked-sender: No
x-tmase-result: 10--13.330000-8.000000
x-tmase-version: SMEX-14.0.0.1158-8.6.1012-26024.007
x-tm-snts-smtp: 08111410B4672CD4266B9D82CDFC32E9945E0EFAB96FE3709B8F25FB2A98042A2000:8
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima/RufCWSWTaTNbzNTnGyARdqwtCVI>
Subject: [Anima] BRSKI-AE #4 Trust relation between registrar-agent and registrar
X-BeenThere: anima@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Autonomic Networking Integrated Model and Approach <anima.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima>, <mailto:anima-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima/>
List-Post: <mailto:anima@ietf.org>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima>, <mailto:anima-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 12 Mar 2021 12:09:41 -0000

Hi, 

based on the discussion during the ANIMA session this week, we would like to discuss some open issues related to BRSKI-AE. 
They are also available under https://github.com/anima-wg/anima-brski-async-enroll/issues

Issue #4: Trust relation between registrar-agent and registrar (use case 2 in the draft)
It is proposed to assume an already available LDevID on the registrar-agent (former pledge-agent), as it is considered to be a site/domain component. This LDevID can be provided by a prior BRSKI run or by other means.
The registrar-agent uses this LDevID for (D)TLS client authentication at the protected registrar endpoints.

Any objection or thoughts?

Best regards
Steffen

--
Steffen Fries
Siemens AG

[Anima] BRSKI-AE #4 Trust relation between regist… Fries, Steffen