Re: [Anima] Brian/anima: trust notion of ASA communications

[Michael Richardson <[e-mail]>]

Toerless Eckert <[e-mail]> wrote:
    > I just got reminded through ongoing ACP spec review about something that
    > would be good to write into the appropriate ASA spec, but not sure which
    > one:

    > One of the fundamental problems we have to solve longer term is how we
    > can establish better than "Any ANI peer is equally trusted" notion.

I agree.
But, at this point, all the ANI peers are equal.

None do anything special yet... Once we have protocol(s) that can do
something different, then we need to figure out what the requirements for
that protocol.

Putting the trusted-to-do-foo bit into the certificate is probably unwise.

It seems that in an autonomic network that there ought to be a service that
can be used to ask, "should I trust node FOO to do X?".
That could be the (cmc)RA or another node so designated.
It seems that GRASP can pretty much do all of this.

COSE can be used to sign answers.
That is probably a thing we need to add.

    > I think DINRG is working in this direction, but have failed to track.
    > Maybe there is a way to collaborate on this, aka: see if/when they might
    > have output we could think to adopt/leverae.

I don't know what they are doing either.

    > Right now we expect objective announcements from any node to be equally
    > trustworthy and decide on selecting one only on announced parameters
    > (also subject to equal trust) and network parameter comparison.
    > And of course, this goes beyond trust into performance vetting by
    > others and so on.

At some level, if you are looking for resource X, and some node can provide
X, and it works and does what you need... then maybe it is reasonable to
trust it.

--
Michael Richardson <[e-mail]>, Sandelman Software Works
 -= IPv6 IoT consulting =-