From: "Fries, Steffen" <steffen.fries@siemens.com>
To: "anima@ietf.org" <anima@ietf.org>
Thread-Topic: Update on draft-ietf-anima-brski-prm-13.txt, was RE: New Version
 Notification for draft-ietf-anima-brski-prm-13.txt
Thread-Index: AQHaztH9HZnq4x4lRkCExjCIwY7OCLHoBriQgAaZJ/A=
Date: Tue, 9 Jul 2024 16:40:50 +0000
Message-ID: 
 <DB9PR10MB6354A9E9F701CA297FBA40BDF3DB2@DB9PR10MB6354.EURPRD10.PROD.OUTLOOK.COM>
References: 
 <172018042130.1351411.7064307168106181847@dt-datatracker-5f88556585-g8gwj>
 <DB9PR10MB6354BC718CB7187FACFC49ADF3DF2@DB9PR10MB6354.EURPRD10.PROD.OUTLOOK.COM>
In-Reply-To: 
 <DB9PR10MB6354BC718CB7187FACFC49ADF3DF2@DB9PR10MB6354.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
msip_labels: 
 MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ActionId=52c1eb2a-a949-4392-8599-55e3b157966b;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ContentBits=0;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Enabled=true;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Method=Standard;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Name=restricted;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SetDate=2024-07-05T11:55:07Z;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;
authentication-results: dkim=none (message not signed)
 header.d=none;dmarc=none action=none header.from=siemens.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DB9PR10MB6354:EE_|PAVPR10MB6888:EE_
x-ms-office365-filtering-correlation-id: 7cbe0628-ca77-469c-6045-08dca035e4aa
x-ms-exchange-atpmessageproperties: SA
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: 
 BCL:0;ARA:13230040|366016|4022899009|1800799024|376014|38070700018;
x-microsoft-antispam-message-info: 
 =?us-ascii?Q?IZP7Fq/12ofhn5kb9vpo5M4VzVYsKZmnkkyV0sIr1DT8xUyxd+tar58gp4vj?=
 =?us-ascii?Q?Jg/qYHFZNFHIUFaq+qETIl3AjpmnLp9At6NY0WtmikgLaLSYqmnqNUmQIkAT?=
 =?us-ascii?Q?kvdUPy8heCBBEtPBffGcDBCDZTBGK2DExopu9prv7XimdJJxbDTTq+I+Hg9e?=
 =?us-ascii?Q?VkeFn9Octk6dQLpD6ydV/JbusjLZGo4YDSgOY7Dq9QLWv/hDbrtuGQ9CaskP?=
 =?us-ascii?Q?8yEuyqjq85tyTAqfOonCIheJwXbI0SjT5LsLcOAqPJavrhXcaVfQtnFYKyMq?=
 =?us-ascii?Q?9d7V2iOCcOz7ywsFPzd1OgPhr9EpcvljLv0diJhnFXFWLJUrbkWebE18potF?=
 =?us-ascii?Q?fvME+tIcXvOeSrflf7OlSoywbV/sGCTB04BIOyQsZ00D1NLrt5+UkdtD6ZAo?=
 =?us-ascii?Q?p5JkHwhCXdZBRLui71ZvAweu4NjvQXd+HDbdqixtsVn4UrPmARzod+mMiDKl?=
 =?us-ascii?Q?c7LjeXrS2/qAdd/72KyBcrqdU9D98edvdttNoJ6nN3CVV9leR1FU/os+ONJ3?=
 =?us-ascii?Q?GzCMlO78546KkT4AjZ5bd4MPYTv64EbhACgrqDsDjMVRIAZ4q2wwf5wyRYkG?=
 =?us-ascii?Q?ssVH0Al3uwHaZ5Zik7hQ4Vlx8+LhpVufr1EF7hF1724ZOeTbaA8CVEKfvdz3?=
 =?us-ascii?Q?+dfODrXT5yU/Z0nMeygjyU9KthG7zYa8Vqi3pM5ZAxmgJ3xrub2gJ5TRkv2s?=
 =?us-ascii?Q?BYuVYo7HkZz0r7qxA6MAUMzwBkKN8fg7GsUGyg8WxNAd9TqZHyMGZBBgKMrQ?=
 =?us-ascii?Q?7mHWScC66nB0zuuXcyTY7jZoLl1g3RBr6ROK8fz2nQgBDOXUeRZpSuRgHGw3?=
 =?us-ascii?Q?+/eu/FtsiHpvbIBuCSD01S7u3VE+TXhP1M0Ktrp9BXZUp5FZNGa9IqBMxy0/?=
 =?us-ascii?Q?xTtKd0IYLddQTpGR87JvoslWEiTU5HItElyC2isw6DElWnh6f0M48qu/2LmP?=
 =?us-ascii?Q?MJ6v8Hy52H2f0+9bwYkA2jGxdls7IM7XE4wq4yfrkB0p2Wk/A26YxeHahC46?=
 =?us-ascii?Q?FbEvFjAQSjFQYPzvphhFR6XbCa9R0/kgguog0PXPnVNP2aBKL//5swvZxHsV?=
 =?us-ascii?Q?przMZwPxvgOLw66ad4PkFcD+fY3uSQaVsrpy/zIlYWE22ROpkv2eQPIqrp9i?=
 =?us-ascii?Q?jCuWRYFYYHTSHGfs/5zBJ7OjtGnN3J7PODB74kWuQB7htZm0OonzmOXMNYIh?=
 =?us-ascii?Q?GtzHCnNpC1zV8vheZ+rd/0yXo6GGwsC5DA9XrfPf4wO1ZW7m9JRSgwPqwnw1?=
 =?us-ascii?Q?L3YiNZjZV3A/hI69YSG/ty9ZkAnm0L7tPSalXsWep+CdCt5A2kS3Pw6SXeFQ?=
 =?us-ascii?Q?2jqMVNL7n71xuG9SHACI7kF3SrnG3xYI9LeCdMOyFT4k/Q=3D=3D?=
x-forefront-antispam-report: 
 CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB9PR10MB6354.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(4022899009)(1800799024)(376014)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?us-ascii?Q?qPtaXmDjL2lc701xoVVn+/qMjX7taV0dT66yBxznXOTyA0DPgvR2p54Kl+yC?=
 =?us-ascii?Q?DdxvWMxwFouqj9TJ9YZ+TX8lMhRCPqB4kf3TZBU7fcjB9meljDq+TC2gwMif?=
 =?us-ascii?Q?boCMIi3O+wkyVlJFeM6/hrfFmb4KmRViNWtJ6dLD/xHxgQphKV9/3p7I+hBT?=
 =?us-ascii?Q?HWk7Y3uKOAZdK2Ngb63IPxbpo++d3cz5lTnck56jCoXPbUGVMBBVb43oAKke?=
 =?us-ascii?Q?WtGepAWZ21UgPWAH1qP4dYfSvOBwXcQpbCOcZuMRBVKBoPnseCeepK5zaMOh?=
 =?us-ascii?Q?HtIvTMj9mCgvj/tOyIP8RyBlvqi6Ep6oX3GckXaYVrzAO649ie/g12kBGiY+?=
 =?us-ascii?Q?NmBuQxaOJuPEBJi11ht3NYRbFyJgZRvAI6ZA33+C/LjtRveM4SPodpt9F6F8?=
 =?us-ascii?Q?1+UuhTSaQ8O7ab7YYcQYqDSOGUSdo9h90lOW0Zqyfl2LZt3zk+EPdTLdJe7m?=
 =?us-ascii?Q?7C8djoC7L6FvHIQQ3Gzv3nnjfXFyjo343F7SPyslladNB2E0aa6JVdAcpTei?=
 =?us-ascii?Q?skj4YlT/q9m5lJLN/t0FqCN1Vnbly/OhVKxwoL7T2BRvbYkudr+033R5dIYh?=
 =?us-ascii?Q?BPCIB8jx4cm6bQRUWlWIrly1J3MoUTaXgGXP+LFsV65VJiJfnwhj4PXGj/bI?=
 =?us-ascii?Q?s3NI+WsJvnF6L2Se/wrnV3LxJG0tCo+yztuV6zzxmbnsqBJl4E6c1ykdRYFr?=
 =?us-ascii?Q?l03B8tbZS+nPDjfG0RYevNGUPgx/MmkSz37m8XIzSfeMqIyZcXGXAef5gT7e?=
 =?us-ascii?Q?jV4Ic+qjQcP1AjG438R57p4aTwZTS5yFtQVrs8+GLg0bnIp8YtGVbXSc8Ohz?=
 =?us-ascii?Q?h6SARjgdFBF36D6uu5m0pAhNXdMdJJAUV6KhjwhD3XU6jiJHB+Iel/czSQr3?=
 =?us-ascii?Q?6MUgE4mTn0emTx44r21glaMNM45AkUZ8rc9A4OY+LAICqy42ePubRyszWH2O?=
 =?us-ascii?Q?IKe8Yhj5MGoGmC6KttJftvAYOIVGo/RziHbpEIRxsjyONrzwEpTq4vhDgWMA?=
 =?us-ascii?Q?VoCK6SvX8xMzvSnLB2xHmYFRgPQrCAx853IfLReKjvMDhj5eHgCi4RjovUJp?=
 =?us-ascii?Q?bv2F86En3363yz29OlasjDwtQ7EK6REhCVkrr7JBxt43R4FTfKL0wrTWYRJy?=
 =?us-ascii?Q?juz24LoJ1Ua9b5Uiozia9U+pf6hYq9ImHq7F1CUniarhC6XEmQ9e9Z2TS7fk?=
 =?us-ascii?Q?1DnvNx7fUNUEeKOK+ykatpYaCeixczvabhhUSygJPFQV8Fi+zCSI0UWkc/Gw?=
 =?us-ascii?Q?/7Z9AsihxrpwgFfB2QZYIIJ4JMeqncCdySuerY/h3JoqlRNSGpkZXq3Xrnl3?=
 =?us-ascii?Q?H9um73yqqepDvV+zChE6Og/B54EeMbaG7c0qpP0LN7wgqeG7/2QLeRpuTabt?=
 =?us-ascii?Q?4Yon9l3L/yhv4rzKF1sVEhpA/ImdxCjYGMNaW3D8hI7C1+EAXY+Qen8M6ktl?=
 =?us-ascii?Q?/HM/5F4uvb7XqQf0xtmGemfrjNd4Q6Tyl8VlFDUPczudNzaW2RwkLhQ7uQpL?=
 =?us-ascii?Q?UsKq8VXLBMpY8Og7guhsRlugPhVtnO68BVphfKDrTKb/xT1NK2Yhrf5rV3Hb?=
 =?us-ascii?Q?w/CLZr22WsxI+aFZKDI+1tGJf5ntVznNGKIE7TDnd5xZaCQamoMeaxBJ0huV?=
 =?us-ascii?Q?iQ=3D=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: siemens.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DB9PR10MB6354.EURPRD10.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 7cbe0628-ca77-469c-6045-08dca035e4aa
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jul 2024 16:40:50.9833
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 
 eaySL5E8Zi8T2SdFQoLHdk9Cr0EnHzljW0lKBc5IRyeCGNd2nPMV07t8ti7jpr7m5iyxrfshmbXaXWc5Jo7aZhaGdWrFgWwDD7Zaglo0D84=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAVPR10MB6888
Message-ID-Hash: H5BNIQXIG4ZZRLSTWWSWTV6FHNEJZW53
X-Message-ID-Hash: H5BNIQXIG4ZZRLSTWWSWTV6FHNEJZW53
X-MailFrom: steffen.fries@siemens.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; header-match-anima.ietf.org-0;
 nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size;
 news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc4
Precedence: list
Subject: =?utf-8?q?=5BAnima=5D_Update_on_draft-ietf-anima-brski-prm-13=2Etxt=2C_was_R?=
 =?utf-8?q?E=3A_New_Version_Notification_for_draft-ietf-anima-brski-prm-13?=
 =?utf-8?q?=2Etxt?=
List-Id:  Autonomic Networking Integrated Model and Approach <anima.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/anima/h0uSlhd17eoeTqOmCvsRuILBT3Q>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima>
List-Help: <mailto:anima-request@ietf.org?subject=help>
List-Owner: <mailto:anima-owner@ietf.org>
List-Post: <mailto:anima@ietf.org>
List-Subscribe: <mailto:anima-join@ietf.org>
List-Unsubscribe: <mailto:anima-leave@ietf.org>

Hello all,

We just had the ANIMA design team meeting and I realized I submitted an int=
ermediate version and not the final one addressing all comments discussed a=
nd resolved in the Shepherd review. As the IETF draft cutoff was yesterday =
and I realized it just now, I will resubmit this version in the week of the=
 IETF meeting.
The correct version, which should have been submitted is available on the A=
NIMA github under: https://github.com/anima-wg/anima-brski-prm. There is a =
text and an HTML version available. If you want to have a look then please =
use this version. Consequently the Shepherd writeup can be provide once the=
 correct version s available in data tracker.

What we also discussed during the design team meeting today is an update of=
 the two new IANA consideration sections 9.2 and 9.3 to better match the re=
quired format. This will be updated in the version 14.

So again, sorry for submitting the wrong version. Hope that did not cause c=
onfusion.

Best regard
Steffen




> -----Original Message-----
> From: Fries, Steffen <steffen.fries=3D40siemens.com@dmarc.ietf.org>
> Sent: Friday, July 5, 2024 2:01 PM
> To: anima@ietf.org
> Subject: [Anima] FW: New Version Notification for draft-ietf-anima-brski-=
prm-13.txt
>
> Hello all,
>
> We just posted an updated version of BRSKI-PRM.
> The draft  includes several changes resulting specifically from the last =
part of the
> detailed Shepherd review (big thanks to Matthias), which improved structu=
re and
> readability.
>
> Here is the list of main changes from IETF draft 12 -> IETF draft 13:
> - Deleted figure in Section "Request Artifact: Pledge Voucher-Request Tri=
gger
> (tPVR)" for JSON representation of tPVR, as it has been replaced by CDDL
> - Updated reason-content description in status response messages (enroll-=
status,
> voucher-status, and status-response.
> - Updated CDDL source code integration to allow for automatic verificatio=
n
> - Reordered description in Section 7.3 and in Section 7.2 to better match=
 the order
> of communication and artifact processing.
> - Updated CDDL for the request-enroll trigger in Figure 13 according to t=
he
> outcome of the interim ANIMA WG meeting discussions on April 19, 2024
> - Included statement in Section 7.2.2 for using the advanced created-on t=
ime from
> the agent-signed-data also for the PER, when the pledge has no synchroniz=
ed
> clock
> - updates examples in Annex 1, 2, 4 to match prototypes
> - updated RVR to contain idevid-issuer as described in RFC 8995 in Sectio=
n 7.3.2
>
> We will provide a status update during the ANIMA WG session of the upcomi=
ng
> IETF meeting.
>
> Best regards
> Steffen
>
>
> -----Original Message-----
> From: internet-drafts@ietf.org <internet-drafts@ietf.org>
> Sent: Friday, July 5, 2024 1:54 PM
> To: Michael C. Richardson <mcr+ietf@sandelman.ca>; Eliot Lear
> <lear@cisco.com>; Michael Richardson <mcr+ietf@sandelman.ca>; Fries, Stef=
fen
> (T CST) <steffen.fries@siemens.com>; Werner, Thomas (T CST SEA-DE)
> <thomas-werner@siemens.com>
> Subject: New Version Notification for draft-ietf-anima-brski-prm-13.txt
>
> A new version of Internet-Draft draft-ietf-anima-brski-prm-13.txt has bee=
n
> successfully submitted by Steffen Fries and posted to the IETF repository=
.
>
> Name:     draft-ietf-anima-brski-prm
> Revision: 13
> Title:    BRSKI with Pledge in Responder Mode (BRSKI-PRM)
> Date:     2024-07-05
> Group:    anima
> Pages:    103
> URL:
> https://www.ietf.org/
> %2Farchive%2Fid%2Fdraft-ietf-anima-brski-prm-
> 13.txt&data=3D05%7C02%7Csteffen.fries%40siemens.com%7C1431de9f9423476d2d
> 8208dc9cea42f9%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C63855
> 7777159494528%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjo
> iV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=3DDnuM%
> 2FshKEPAqP%2FsTnR3VIyJajS%2BBSXWhMzyhV4qTizs%3D&reserved=3D0
> Status:
> https://datatracker.i/
> etf.org%2Fdoc%2Fdraft-ietf-anima-brski-
> prm%2F&data=3D05%7C02%7Csteffen.fries%40siemens.com%7C1431de9f9423476
> d2d8208dc9cea42f9%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C63
> 8557777159507726%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ
> QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=3DBQt
> KdcGNlA2RIqavl4Pscj88xanfIbDtDcYQ6RXEwvI%3D&reserved=3D0
> HTMLized:
> https://datatracker.i/
> etf.org%2Fdoc%2Fhtml%2Fdraft-ietf-anima-brski-
> prm&data=3D05%7C02%7Csteffen.fries%40siemens.com%7C1431de9f9423476d2d8
> 208dc9cea42f9%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C638557
> 777159516517%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoi
> V2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=3DxzKtAGY
> lsRZKe3BurTyFYIlmdMVS1Jhkd5xEGUgTc0s%3D&reserved=3D0
> Diff:
> https://author-/
> tools.ietf.org%2Fiddiff%3Furl2%3Ddraft-ietf-anima-brski-prm-
> 13&data=3D05%7C02%7Csteffen.fries%40siemens.com%7C1431de9f9423476d2d82
> 08dc9cea42f9%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7C6385577
> 77159523824%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV
> 2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=3D0ouldhBn8
> z%2Bv4Tl0IZqspv%2Byru48sFi%2BMo7i3fkG2zg%3D&reserved=3D0
>
> Abstract:
>
>    This document defines enhancements to Bootstrapping a Remote Secure
>    Key Infrastructure (BRSKI, RFC8995) to enable bootstrapping in
>    domains featuring no or only limited connectivity between a pledge
>    and the domain registrar.  It specifically changes the interaction
>    model from a pledge-initiated mode, as used in BRSKI, to a pledge-
>    responding mode, where the pledge is in server role.  For this, BRSKI
>    with Pledge in Responder Mode (BRSKI-PRM) introduces a new component,
>    the Registrar-Agent, which facilitates the communication between
>    pledge and registrar during the bootstrapping phase.  To establish
>    the trust relation between pledge and registrar, BRSKI-PRM relies on
>    object security rather than transport security.  The approach defined
>    here is agnostic to the enrollment protocol that connects the domain
>    registrar to the domain CA.
>
>
>
> The IETF Secretariat
>
>
> _______________________________________________
> Anima mailing list -- anima@ietf.org
> To unsubscribe send an email to anima-leave@ietf.org