[core] Using SVCB with OSCORE/EDHOC

[Christian Amsüss <[e-mail]>]

Hello OSCORE and EDHOC authors,
(limiting this to CoRE as it's not about EDHOC itself but how it's used
with CoAP)

processing DNS-over-CoAP reviews has sent me down the rabbit hole of
SVCB[1]. These records' main purpose is to advertise alternative
services, similar to SRV (thus overlapping with what [2] is doing for
CoAP, but that's not the point here).

That record can also transport data for setting up Encrypted Client
Hello and choosing the right TLS ALPN, and that is information similar
to what EDHOC (or other OSCORE bootstrappers) can utilize. Furthermore,
they are used in DNR[3] to advertise local services with extra
information (which currently[4] enforce the use of ALPNs). Had that
format been around when RD's RDAO[5] was specified, we might have used
it instead of the plain address. Starting DTLS is relatively
straightforward from these options because it frequently uses PKIX;
starting EDHOC from there could be done the same way, but might be done
more efficiently eg. by announcing the server's CCS. Properties of
oscore-edhoc[6] might be relevant.

I don't have a full plan here, but I think there might be value in
looking into how SVCB records and OSCORE/EDHOC can be combined, both
directly for DNS-over-CoAP and for other applications -- and would like
to explore these with the group.

Let's see if there's something useful in this! Apart from list
discussions, I'm also around in gather.town for most of the current
meeting.
BR
c

[1]: https://datatracker.ietf.org/doc/draft-ietf-dnsop-svcb-https/
[2]: https://datatracker.ietf.org/doc/draft-ietf-core-transport-indication/
[3]: https://datatracker.ietf.org/doc/draft-ietf-add-dnr/
[4]: https://mailarchive.ietf.org/arch/msg/core/yFHfHUHDDwh0HANDJEqj_TmkiMc
[5]: https://www.rfc-editor.org/rfc/rfc9176.html#name-resource-directory-address-
[6]: https://www.ietf.org/archive/id/draft-ietf-core-oscore-edhoc-07.html#name-web-linking

-- 
To use raw power is to make yourself infinitely vulnerable to greater powers.
  -- Bene Gesserit axiom