IETF Logo Mail Archive

Re: [Atlas] Application Transport LAyer Security (ATLAS) Charter Text

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Wed, 07 February 2018 11:19 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: atlas@ietfa.amsl.com
Delivered-To: atlas@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D839F126CE8 for <atlas@ietfa.amsl.com>; Wed, 7 Feb 2018 03:19:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jc1r7b-YME1Z for <atlas@ietfa.amsl.com>; Wed, 7 Feb 2018 03:19:10 -0800 (PST)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on060d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::60d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75C75124235 for <atlas@ietf.org>; Wed, 7 Feb 2018 03:19:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=NerfkUQPT6OWC1eWZrYtCr6eX7Z1pMmU6lriG9U8MGg=; b=ZsV71Vd23NFR4divi308vF75bJ8WWJgOA+J09NS4y++nsi1g24RyLaxbxo0NcqjI+CmT9xXBYIW4i0x5gUn5MBEzA8BqzvUnmxXDmJdHMZaUtjoD7ssA7KxhoermOXTK7w+wa1AxTqcxLb/JUX8mk9xglpFRB779/2WWxOl0cjk=
Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1425.eurprd08.prod.outlook.com (10.168.5.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.464.11; Wed, 7 Feb 2018 11:19:07 +0000
Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0485.009; Wed, 7 Feb 2018 11:19:07 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Rafa Marin-Lopez <rafa@um.es>
CC: "atlas@ietf.org" <atlas@ietf.org>
Thread-Topic: [Atlas] Application Transport LAyer Security (ATLAS) Charter Text
Thread-Index: AdOTwyPirW/e5/LOQWOr6hMZrGuG4wISVqgAAATwp9AACXAVgAC6ZJngADVDggAAABkisA==
Date: Wed, 07 Feb 2018 11:19:07 +0000
Message-ID: <AM4PR0801MB2706894677C27D81B16FD295FAFC0@AM4PR0801MB2706.eurprd08.prod.outlook.com>
References: <AM4PR0801MB2706895905D2634096D4A11BFAEC0@AM4PR0801MB2706.eurprd08.prod.outlook.com> <1351441E-26C6-4E16-AD62-B06C860AE97D@um.es> <AM4PR0801MB270672FDA690903CA86EFB3FFAF90@AM4PR0801MB2706.eurprd08.prod.outlook.com> <94E9FD8C-1889-4376-B0F9-13B2E44BBA96@um.es> <AM4PR0801MB270665259B97D62CE3B56ACFFAFD0@AM4PR0801MB2706.eurprd08.prod.outlook.com> <D93CAAA0-7416-4662-807F-1AABBCC835C9@um.es>
In-Reply-To: <D93CAAA0-7416-4662-807F-1AABBCC835C9@um.es>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [88.214.162.174]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1425; 7:FppAVGgE3xrH1Yza9yhMhoYQNnOJelNYrVpy3vt7LZt7stzEysFwAfMJB2kGdoTOECLWHzbrdwcjeYApMnYD3+0aQc7JW2p07JPYRMG88cZjAkwFeKqeZo7RBTMyOEXIew3QFrWWcXRkhhVyhpYntSRhO33rN+6jLj7/abEyqbNqkppvH9VCUiQt1C3ghDjS83j+mlJU7r80NBfp+wHMIPUXHvdRlSCFN0AJq+Qas/1Hyb0hmXuq0XMexha9VcBt
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: e88ac9f9-797e-41a6-bee9-08d56e1c9a96
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1425;
x-ms-traffictypediagnostic: AM4PR0801MB1425:
x-microsoft-antispam-prvs: <AM4PR0801MB1425C2446DCD19D12006F9ACFAFC0@AM4PR0801MB1425.eurprd08.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(28532068793085)(158342451672863)(192374486261705)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231101)(2400082)(944501161)(3002001)(6055026)(6041288)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1425; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1425;
x-forefront-prvs: 0576145E86
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39860400002)(346002)(396003)(366004)(39380400002)(199004)(189003)(40434004)(52314003)(3280700002)(68736007)(81166006)(81156014)(229853002)(8676002)(9686003)(5890100001)(99286004)(55016002)(2900100001)(186003)(97736004)(8936002)(6436002)(7110500001)(54896002)(6306002)(9326002)(6916009)(2950100002)(7736002)(74316002)(106356001)(33656002)(5250100002)(5660300001)(25786009)(316002)(93886005)(66066001)(59450400001)(102836004)(2420400007)(15650500001)(86362001)(76176011)(3846002)(6506007)(6116002)(790700001)(72206003)(26005)(4326008)(478600001)(105586002)(14454004)(2906002)(6246003)(53936002)(7696005)(3660700001)(10710500007); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1425; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: 3EpthVikE3T1xZwOsK4g7vHbY1usWGhh1+8hyj1YTgpuoMvEd8/WAc6JfpT4uQBbvuUL4faa4MlanBUXfVorCA==
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706894677C27D81B16FD295FAFC0AM4PR0801MB2706_"
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e88ac9f9-797e-41a6-bee9-08d56e1c9a96
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Feb 2018 11:19:07.3409 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1425
Archived-At: <https://mailarchive.ietf.org/arch/msg/atlas/uwRKvTdvfRNDkvVZmsyjTIK8qM8>
Subject: Re: [Atlas] Application Transport LAyer Security (ATLAS) Charter Text
X-BeenThere: atlas@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Application Transport LAyer Security <atlas.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/atlas>, <mailto:atlas-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/atlas/>
List-Post: <mailto:atlas@ietf.org>
List-Help: <mailto:atlas-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/atlas>, <mailto:atlas-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Feb 2018 11:19:13 -0000

Hi Rafa,

[Rafa] Ok. But my question is: are we going to consider TLS record for application data protection?
[Rafa] Since the TLS record is used for the handshake anyway, the (constrained) device, in case of the IoT, will have the record layer implemented. Why don’t  we can re-use it for the application data protection?

It might depend on the use case what approach is better. In DTLS-SRTP, for example, it was considered better to re-use SRTP instead of the DTLS record layer due to existing hardware. Another example: For EAP-TLS used in network access the TLS record layer is only used during the handshake between the EAP peer and the EAP server but for the link layer security a different security mechanism is used instead since the endpoints are different.

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email