Re: [Anima] Adam Roach's Discuss on draft-ietf-anima-bootstrapping-keyinfra-22: (with DISCUSS and COMMENT)

Adding such scope text, along with the mechanism to get the needed 
credentials, would be fine with me.
Joel

On 7/15/2019 6:28 PM, Brian E Carpenter wrote:
> Joel,
> 
> I'd be happy with that as long as there is a scope statement that makes
> it clear to the reader.
> 
> Regards
>     Brian
> 
> On 16-Jul-19 09:42, Joel M. Halpern wrote:
>> I would probably go a step further than Adam.  Protecting the device so
>> a thief can not use it in the thiefs' own network seems to me to be
>> something that we should not be trying to achieve.  An active non-goal.
>> It is not our problem.  And trying to achieve it has the implications
>> that lead to this whole discussion about the original manufacturer
>> controlling who can resell / re-buy the device.  While manufacturers may
>> like that, it does not seem to be something we should get involved in.
>> At all.
>>
>> Yours,
>> Joel
>>
>> On 7/15/2019 5:10 PM, Adam Roach wrote:
>>> On 7/15/19 3:38 PM, Brian E Carpenter wrote:
>>>> On 15-Jul-19 16:45, Joel M. Halpern wrote:
>>>>> I presume I am missing something basic.
>>>>> I have tried to follow this discussion, as it seems to be about a
>>>>> critical aspect of whether the BRSKI work is acceptable.
>>>>>
>>>>> I have assumed that what we needed is the ability for a buyer, who has
>>>>> physical possession of the device, and possibly some simple (non
>>>>> cryptographic) credentials provided by the seller to force the device to
>>>>> reset what it thinks it is part of, and to emit in some accessible form
>>>>> the information the buyer needs to be able to make this device part of
>>>>> his network, using his authentication servers, etc.
>>>> Yes, but *not* a solution that works if the device is stolen.
>>>
>>>
>>> I'm actually a little ambivalent with respect to this use case. For the
>>> kind of devices that the document purports to be targeting, I would
>>> imagine that theft is in the range of parts-per-thousand (or lower) as
>>> compared to things like post-bankruptcy liquidation. If you can fix the
>>> first without ruining the second, great.
>>>
>>> /a
>>>
>>
>> _______________________________________________
>> Anima mailing list
>> Anima@ietf.org
>> https://www.ietf.org/mailman/listinfo/anima
>>