Re: [atoca] New Version Notification for draft-barnes-atoca-escape-01.txt

[Richard Barnes <[e-mail]>]

Dear ATOCA,

In order to respond to the chairs' call for candidate alert format documents, we have put together a revision of draft-barnes-atoca-escape.  As you may recall from earlier versions, ESCAPE uses S/MIME to wrap a CAP document, in order to add authentication for alert originators (digital signature and "alert token").  

The changes from -00 are largely to add more explanatory text, and clarify a few things technically. We haven't translated the whole thing to JOSE (yet).  Mostly, our hope is that in reading the new version, you'll be able to envision how these secure alerts can be used to build an overall alerting system.  For example, they highlight some of the things that a discover / metadata protocol might need to provide (e.g., public keys for authorities).

Comments very welcome.  There's even a list of open questions at the front!

Thanks a lot,
--Richard



On Sep 10, 2012, at 11:38 PM, [e-mail] wrote:

> 
> A new version of I-D, draft-barnes-atoca-escape-01.txt
> has been successfully submitted by Richard Barnes and posted to the
> IETF repository.
> 
> Filename:	 draft-barnes-atoca-escape
> Revision:	 01
> Title:		 Encoding of Secure Common Alert Protocol Entities (ESCAPE)
> Creation date:	 2012-09-11
> WG ID:		 Individual Submission
> Number of pages: 17
> URL:             http://www.ietf.org/internet-drafts/draft-barnes-atoca-escape-01.txt
> Status:          http://datatracker.ietf.org/doc/draft-barnes-atoca-escape
> Htmlized:        http://tools.ietf.org/html/draft-barnes-atoca-escape-01
> Diff:            http://www.ietf.org/rfcdiff?url2=draft-barnes-atoca-escape-01
> 
> Abstract:
>   Recipients of emergency alerts need to be able to verify that an
>   alert they receive was issued by an authorized source.  The Common
>   Alerting Protocol (CAP) provides a standard way of encoding alert
>   information, but does not provide any security features that would
>   support authentication of alert originators.  This document describes
>   a security wrapper for Common Alerting Protocol objects to allow
>   alerts to be signed by alert originators.
> 
>   Please send feedback to the [e-mail] mailing list.
> 
> 
> 
> 
> The IETF Secretariat
>