Re: [core] Bootstrap in draft-ohba-core-eap-based-bootstrapping and draft-garcia-core-security

Hi Behcet, 

I agree with you that the term "bootstrapping" is not very helpful.

There are three cases: 

a) Key Distribution and Key Derivation

Here an existing keying material is used to derive other keying material or to use securely distribute keying material. 
draft-ohba-core-eap-based-bootstrapping and 

b) Bootstrapping (in terms of operating systems procedures)

See description in http://en.wikipedia.org/wiki/Bootstrapping_%28computing%29

draft-garcia-core-security seems to refer to this aspect, I believe. 

c) Establishing initial keying material in a leap of faith style. 

Example: Bluetooth pairing protocol
http://tools.ietf.org/html/draft-pritikin-ttimodel-01 also discusses these aspects. 
Here the terms used are imprinting, pairing, enrollment, and introduction are used to describe 

Ciao
Hannes

On Jul 12, 2011, at 8:08 PM, Behcet Sarikaya wrote:

> Hi all,
>  It seems that the word bootstrapping has been used and overused in so many 
> drafts (including draft-ohba-core-eap-based-bootstrapping and 
> draft-garcia-core-security) and I suggest that we clarify this.
> 
> Colin had a draft on 
> Initial Configuration of Resource-Constrained Devices
> called draft-oflynn-6lowapp-bootstrapping submitted on Jan. 2010 in which he 
> defined bootstrapping ashow to initially    configure the network.
> 
> Later on we continued this work on where Colin left 
> indraft-sarikaya-core-sbootstrapping.
> 
> I think that the definition Colin gave to bootstrapping is the right one. It 
> matches with the historical use of bootstrapping in computers: you bootstrap 
> your computer to initially configure it by a physical action (pressing a button) 
> which loads a small record to the memory which when executed bootstraps (brings 
> the whole OS to the memory) the system.
> 
> Regards,
> 
> Behcet
> _______________________________________________
> core mailing list
> core@ietf.org
> https://www.ietf.org/mailman/listinfo/core