Re: [core] Conclusion -- Endpoint Client Name / Endpoint Name in RD draft
Hannes Tschofenig <Hannes.Tschofenig@arm.com> Mon, 07 May 2018 14:16 UTC
Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36F541252BA for <core@ietfa.amsl.com>; Mon, 7 May 2018 07:16:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VdXfI-XWtLyO for <core@ietfa.amsl.com>; Mon, 7 May 2018 07:16:53 -0700 (PDT)
Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20044.outbound.protection.outlook.com [40.107.2.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A35A61205D3 for <core@ietf.org>; Mon, 7 May 2018 07:16:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=p5ho7RwcUtNNAcAISBzvMkbl/bRsm3bigr97/RMmddg=; b=KQMWpPAObJSpWfcsEavp7QocYzRMsgbV1LFXSrxKbyY2r8xyChY/RVd9469J3WTvVvzyzxkWVj742NCFIYoBWRVzSUw7gog2yVcfl8ho68syefv5OF33MWI6QLp8UZSeHvunq8H9wZRECahPvPIBQnc6T56b7V+a3jzdmOodHmA=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1598.eurprd08.prod.outlook.com (10.167.211.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.735.18; Mon, 7 May 2018 14:16:49 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::4004:973e:4b3:ef88]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::4004:973e:4b3:ef88%18]) with mapi id 15.20.0735.018; Mon, 7 May 2018 14:16:49 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Mohit Sethi <mohit.m.sethi@ericsson.com>, "core@ietf.org" <core@ietf.org>
Thread-Topic: [core] Conclusion -- Endpoint Client Name / Endpoint Name in RD draft
Thread-Index: AdPmCfncz1IX5t6GRJaeO0C+mMHM9QAAOSUAAADDndA=
Date: Mon, 07 May 2018 14:16:49 +0000
Message-ID: <VI1PR0801MB21121FAE34CE76841CF6DBE1FA9B0@VI1PR0801MB2112.eurprd08.prod.outlook.com>
References: <VI1PR0801MB2112B9A4410DA3EDE39183BEFA9B0@VI1PR0801MB2112.eurprd08.prod.outlook.com> <bd85e420-c6ce-3e87-406a-4cd5a4fafaa6@ericsson.com>
In-Reply-To: <bd85e420-c6ce-3e87-406a-4cd5a4fafaa6@ericsson.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.121.75]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1598; 7:N2Dx53wHzm7IfNYA+xsAqugPZmVNo0shnicLgA5QHyAGUOfLqwhBvTJQ4X1t/9Y7GztVc7eye/CORYnOEGqfKO+Je0t9/lGQ5xVWl7iSVJAiO6Th7VnTvnf9qNFtVm0csNg91lz4oM6hKbAUSIHf0qwZtNjhM7cswpPV+FrsnCpM1yA/YQ5Z9wj/xvac0OUFl4eUapMmC3GpKmL2TJAQCnG0VtLIo1pSL2VMi1lHI+o7O8pj0GVq8TLjEDiajIVW
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1598;
x-ms-traffictypediagnostic: VI1PR0801MB1598:
x-microsoft-antispam-prvs: <VI1PR0801MB159876922FC5DD86C836616EFA9B0@VI1PR0801MB1598.eurprd08.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(37575265505322)(28532068793085)(192374486261705)(21748063052155);
x-ms-exchange-senderadcheck: 1
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231254)(944501410)(52105095)(10201501046)(93006095)(93001095)(3002001)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:VI1PR0801MB1598; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1598;
x-forefront-prvs: 066517B35B
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39860400002)(376002)(39380400002)(396003)(346002)(40434004)(53754006)(189003)(199004)(76176011)(54896002)(25786009)(110136005)(229853002)(33656002)(66066001)(7696005)(5660300001)(478600001)(2900100001)(72206003)(966005)(486006)(7736002)(476003)(186003)(345774005)(316002)(26005)(6306002)(74316002)(55016002)(3280700002)(236005)(106356001)(105586002)(9686003)(2501003)(6506007)(53546011)(5250100002)(5890100001)(2906002)(59450400001)(6436002)(3660700001)(68736007)(11346002)(99286004)(53936002)(102836004)(6246003)(8676002)(81156014)(606006)(3846002)(446003)(8936002)(97736004)(86362001)(14454004)(81166006)(790700001)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1598; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: dhfbdsqpaGRHpmeXVQu9/KJogHhDGF/R2RjfafX/N4OyOOGxdKn8VCIL6gzZP9YGNFD3+vZ2xvx5+HxZdMZsyNfmprqsZS2lkvLm8VW27PuadtSkiQcOs5afHnBZvW/ulFZEz3iVAX7PmruCRU55ZPABXaHbiOacbiNY0qFZbjFOyWsbqCafE6m0J6Tasg+j
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21121FAE34CE76841CF6DBE1FA9B0VI1PR0801MB2112_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 46238f91-a501-4ee9-4a98-08d5b4252cac
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 46238f91-a501-4ee9-4a98-08d5b4252cac
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 May 2018 14:16:49.8290 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1598
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/2-BBSm6x5KYsbxOVwi0aJUknJds>
Subject: Re: [core] Conclusion -- Endpoint Client Name / Endpoint Name in RD draft
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 May 2018 14:16:55 -0000
I was referring to this functionality: https://tools.ietf.org/html/draft-ietf-core-resource-directory-13#section-5.3.2 From: Mohit Sethi [mailto:mohit.m.sethi@ericsson.com] Sent: 07 May 2018 15:54 To: Hannes Tschofenig; core@ietf.org Subject: Re: [core] Conclusion -- Endpoint Client Name / Endpoint Name in RD draft Hi Hannes, Thank you for summarizing the discussion on this important topic thus far. Could you also very briefly explain what does third-party provisioning mean for you? --Mohit On 05/07/2018 04:50 PM, Hannes Tschofenig wrote: Hi all, I hope that all the discussion around the endpoint name / endpoint client name have helped to make you think about the security implications of sending an unauthenticated identifier. I would like to come to a conclusion and here is my attempt. Since we the RD document also defines the third party provisioning I would suggest to make the endpoint name optional in the draft. I would also encourage the chairs to find out whether the third party provisioning is actually something in this group has gained some experience with. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. _______________________________________________ core mailing list core@ietf.org<mailto:core@ietf.org> https://www.ietf.org/mailman/listinfo/core IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
- Re: [core] Conclusion -- Endpoint Client Name / E… Jim Schaad
- Re: [core] Conclusion -- Endpoint Client Name / E… Peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… Jim Schaad
- Re: [core] Conclusion -- Endpoint Client Name / E… Peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… Mert Ocak
- [core] Conclusion -- Endpoint Client Name / Endpo… Hannes Tschofenig
- Re: [core] Conclusion -- Endpoint Client Name / E… Mohit Sethi
- Re: [core] Conclusion -- Endpoint Client Name / E… Hannes Tschofenig
- Re: [core] Conclusion -- Endpoint Client Name / E… Kovatsch, Matthias
- Re: [core] Conclusion -- Endpoint Client Name / E… Mohit Sethi
- Re: [core] Conclusion -- Endpoint Client Name / E… Ludwig Seitz
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… Hannes Tschofenig
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… Hannes Tschofenig
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… Kovatsch, Matthias
- Re: [core] Conclusion -- Endpoint Client Name / E… Hannes Tschofenig
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok
- Re: [core] Conclusion -- Endpoint Client Name / E… peter van der Stok