Re: [core] WGA call for draft-tiloca-core-oscore-capable-proxies

Göran Selander <goran.selander@ericsson.com> Mon, 02 October 2023 15:28 UTC

Return-Path: <goran.selander@ericsson.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9A32C13AE24 for <core@ietfa.amsl.com>; Mon, 2 Oct 2023 08:28:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.108
X-Spam-Level:
X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W9-LBVWrdq_8 for <core@ietfa.amsl.com>; Mon, 2 Oct 2023 08:28:44 -0700 (PDT)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on2044.outbound.protection.outlook.com [40.107.14.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 572ECC14068D for <core@ietf.org>; Mon, 2 Oct 2023 08:28:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=oCOgn5ITxzgSSK6kb8XQh0eU9GIbAol0tSPmyjhMPEhkG23/S5kZQJA2JxOIE35WKBS4eTYqF9avsqTueZa2TdRbIbmu3trCsoiWxDBEvUFntL2GyV6EmM34617E1lTzYTuGPoHwHCtP1WOnA+S1QgOcDCCCURE2bYezHXvM7imNQLAcUwL/QuQ6/G0TUiZTrqwTXs7QeRBnM5ignXhrQtpQsVC7IDJ/Y/WqubgUk3wHWREtpYjCh4n5Y4bdpbHwBzRcy87s49uEkXLySX5we/j2OOo+qqrND9vFJubAvEMgPXeTgh7DHvB1TfrWdf+UDUsa2sTwVXbvAKDAWUzRxw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=BSVw6zAVCSOCVG2TOtP4yX/6nbqgomdbT87+ay5Vx7o=; b=Eo+cuVYDxFgnF0m3ZUWFCN2FC0BIJNqXwmAL822YlGd/aMAnb266/r3JlOg4GySfdnT2+AUGCuDLKUanK0KBKvml9Luz4LiLb7s91Gd+W9m9trGbHvllA2asP1TXZYjNoJOtyDuto+V/K+taxeanstLj5U5AudSn/DpGOua2LLYfYLyJeWejrLuxWM+iqjPzyKSbpWdsmER44+nvcB0cHhm+66PmnF1B7Lr7CgY5TjOrrZ4RnHdeP6sE8vbIBppNBA9m6iVtJ3IH4ce8kG7hy8V4J0b4Qsr4m6ijLqOMCTyOfk3E+ngp0DmsJn0aOMRVpR14TE1lW17+7iOY3hJUQQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BSVw6zAVCSOCVG2TOtP4yX/6nbqgomdbT87+ay5Vx7o=; b=VDZfdEf18iYnhnLskfXzDhNbDzwmxjhvBVWiryGk5YDqEdWNSdFUavvHB1aJOh3AGsm6iUV2bvB2XsRUtdD353V2vqKZCtnrG7t4JQt49j/Rg6fORCTces4uPypiENBvBxuHy4EM4ftiAt9mFS/yqdvAryWzYEUSlTH+BLQENSs=
Received: from PAXPR07MB8844.eurprd07.prod.outlook.com (2603:10a6:102:24a::19) by AM7PR07MB6884.eurprd07.prod.outlook.com (2603:10a6:20b:1bb::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6838.21; Mon, 2 Oct 2023 15:28:40 +0000
Received: from PAXPR07MB8844.eurprd07.prod.outlook.com ([fe80::b794:71e5:df86:cced]) by PAXPR07MB8844.eurprd07.prod.outlook.com ([fe80::b794:71e5:df86:cced%4]) with mapi id 15.20.6813.027; Mon, 2 Oct 2023 15:28:40 +0000
From: Göran Selander <goran.selander@ericsson.com>
To: Jaime Jiménez <jaime@iki.fi>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] WGA call for draft-tiloca-core-oscore-capable-proxies
Thread-Index: AQHZ8HClpSOfPPXO3EapN4B6mWnpvbA2oW2Y
Date: Mon, 02 Oct 2023 15:28:40 +0000
Message-ID: <PAXPR07MB8844C817181DE3AD37076BB1F4C5A@PAXPR07MB8844.eurprd07.prod.outlook.com>
References: <bf2523d4-e241-c00f-0b41-0f6ae7b51cbb@fastmail.com>
In-Reply-To: <bf2523d4-e241-c00f-0b41-0f6ae7b51cbb@fastmail.com>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PAXPR07MB8844:EE_|AM7PR07MB6884:EE_
x-ms-office365-filtering-correlation-id: 0e213d6b-0c49-4c84-33ba-08dbc35c415b
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PAXPR07MB8844.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(39860400002)(136003)(346002)(376002)(366004)(396003)(230922051799003)(1800799009)(186009)(64100799003)(451199024)(66574015)(316002)(66946007)(64756008)(66556008)(66446008)(26005)(110136005)(76116006)(66476007)(83380400001)(122000001)(9686003)(55016003)(71200400001)(38100700002)(33656002)(86362001)(6506007)(7696005)(38070700005)(53546011)(82960400001)(966005)(478600001)(166002)(2906002)(8936002)(8676002)(41300700001)(52536014)(5660300002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: ekNDC7D+KzpioxzpgeHCKRrjDTFVdit21ckrCVw3lR1hseAPVqeXy7niO6Yw6BFxGUlwEYb2XK8HWfpAoAbx45nGKK8IzJWRPAJpSvfxEOcp4aLUrXCgFjHWRWZ9tx/JpOmnXQAof5H2kRttZgOT5N/HwsIz2d8DPKMFdQe9q2n5m9YBoqzJZ0vUlj2yQa005tIXdoGVsv8uN15K6/bgSzJJyNxjmEp9XbtTiJ+E8nTKhFIJcztkQycZtwVmfRZ2sX12vfeFIERGhjmfn5s7FW6X0hNl6UBTYY0FEZTr56h4r0HMj9uJnKfcx9xLwAKvAUQNi47qM84cMfM1yauERuUZJHRFA/tBOnNepF32vZERyChqgpOXoHgF6JV7lzIi/LJkLKNvcJGnK3B4MqOYNOFMAiWKZH41NrvjpyNCacGGFwiKRnOXJjcHggm7PETbIcwbFChRRtx7jDRMF5ZA+rY6EYzfuffTBtur9Q9lSmZvj33mjbUB/LXHzgjkGNhOda8JP6I/MxVsvrCi/cmcuE7TLXTXKRYNXbO8SmcLmjwklrQm6st27xZxb2o573NWpYWPg4Q7QXVUEwW3ELxLVjd+te93LAsyrRNsgkcz90YaNXxUZgDa3A57LyvtZZTt2sA5iLk85WzyYASA9GaritQF60US2ogozuYcChLWUo6tAwgFEwHl3HOU5neAOyCoBS3T6NMLM/F4IvIh8ogCb8d4iORrokhLBqd5tdDfrBZbtDQkkI6DHFOUGQV8pR3t0dKXShPbwkBI2EFZhErJRAzmBgjQfzBxjuHLxy7YTC0yGymh32tnRIWTg4RR7Vkf5O5BECVx34rfbwPpG3YOTrRuwvCXNS+G+o8Orqr9T3oPVyyNGKNACoNIMlNVxAGubbIX4E3awPRqqK/+zo2DLau/Wh+pYHhyIjzv9Qeo1qG+RkeSlGXnR47kC/0S5JB9d9RX0efeB/3IUvgmkP6h9NIeVXQpaO0Q++pNnxCdP6DnDvMZCB9FOsb7ombLvT4wiPMXipE75bJmTzxkVKKflMNKx57dyWamVbQ9FAQBZJCy0G7+MlcZyMuLvcK1Yz2+iAhDyATwLdxUQTadIcdQyvdDSxsTKJzxK9/rnskUnvD7h1UAK6g6GGIOijsCn89HKtSghmQTiSn2ew7QLZfKphPV9EBVxEMrsNy8HZT5gWaUdPyoVIu1469+D9KUfu61leRSvwCXZ2W8N944yJh/YTFDai2rlYB6T3N4X4lVFSYvGqk5DGe3aQUvbOYBRHG6ljuEof9coS1+N74+TI59BsMewhDzXRaaYO05fBG3uJ7ntjuxfKXaL3IcBfmMBJFIb4A+Np0EZJjjaOOns9ZY5rvSNNlb8O4dledEbnRTtbD279KXMMfsI/ZwEycfYR4JOBsHdU2tFz64ZxgWw6vyMyyWgKjm6L0z9UxoM9pWGcVHtHMWPzTqcWTo9Od/DI648hp4SfuAsMgQUqbdgHqMyE4jXqyegUjFSQ2osWPvN2rVZpPH+NpqRjyhB1GKbIzSBfIJgRgMsfKHqfl8HpKkojCbzRrdn8YOnJizbb+YiE6FMk+5ykFmn6b9bluzRAEAQLrBLWaFUgQ+8E3yAopoHeH8hU9Y45yfAipYpGJL1ys=
Content-Type: multipart/alternative; boundary="_000_PAXPR07MB8844C817181DE3AD37076BB1F4C5APAXPR07MB8844eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PAXPR07MB8844.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0e213d6b-0c49-4c84-33ba-08dbc35c415b
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Oct 2023 15:28:40.3845 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: k7UcE32AY3oFdh9lBUlOcA+JxsCVYR+Qx2zPR/GaVGrnKCKaAT4qg3Z+AYlEzVdh80TM+rSqih+qf/VJoTz3IQRAdBiDLklqN/aXPKA9ZOw=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR07MB6884
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/-O2quc5GrhD6kUc2bctIaawTc44>
Subject: Re: [core] WGA call for draft-tiloca-core-oscore-capable-proxies
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Oct 2023 15:28:49 -0000

I support adoption.

This draft is a missing building block, for example, to secure communication to groups of CoAP devices in practice. Unless you always send directly the group members, you need the intermediary device to check that the request is allowed before forwarding to the group; and unless you want to implement multiple security protocols, this is the way to go.

Göran

From: core <core-bounces@ietf.org> on behalf of Jaime Jiménez <jaime@iki.fi>
Date: Tuesday, 26 September 2023 at 13:57
To: core@ietf.org <core@ietf.org>
Subject: [core] WGA call for draft-tiloca-core-oscore-capable-proxies

Dear CoRE WG,

We would like to initiate the call for adoption on draft-tiloca-core-oscore-capable-proxies. The draft presents a stable mechanism to allow also proxies to use OSCORE, which especially enables them to enforce authorization before forwarding an incoming request.

https://datatracker.ietf.org/doc/draft-tiloca-core-oscore-capable-proxies/

During the meeting, there were no objections to adoption, and the proposal was met with approval (6 votes). We would like to confirm this now on the mailing list. Please let us know if you support adopting this draft. The call for adoption will last a couple of weeks, ending on the 10th of October.

BR,

--

Jaime Jiménez