Re: [core] feedback on resource-directory and mirror-proxy (and base) drafts

Jari Arkko <jari.arkko@piuha.net> Tue, 27 March 2012 06:43 UTC

Message-ID: <4F71619B.1020707@piuha.net>
Date: Tue, 27 Mar 2012 08:43:39 +0200
From: Jari Arkko <jari.arkko@piuha.net>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.2) Gecko/20120216 Thunderbird/10.0.2
MIME-Version: 1.0
To: core <core@ietf.org>
References: <4F59F906.4080906@piuha.net> <6144B86F-0CAF-47E9-BE60-16647BFF22DA@tzi.org> <4F5A370A.7090308@piuha.net> <AF4A7660-2822-4167-89FE-0ACF3554DCC6@sensinode.com>
In-Reply-To: <AF4A7660-2822-4167-89FE-0ACF3554DCC6@sensinode.com>
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: Re: [core] feedback on resource-directory and mirror-proxy (and base) drafts
Precedence: list

Incidentally, as a part of our work on testing public key crypto on small devices, we also implemented an early prototype to give end-to-end security for mirror proxying. We think the approach has some appeal, given that validity can be checked at any time, through any number of proxies, can use zero-config or SSH like models, etc. Obviously this is very early work and we don't have all the pieces that we'd need to make this work fully. But nevertheless, we're putting it out for your consideration:

http://tools.ietf.org/html/draft-aks-crypto-sensors-02

(We also have some slides from the smart object security workshop about this, see http://www.arkko.com/publications/draft-aks-preso.pdf)

Jari

[core] feedback on resource-directory and mirror-… Jari Arkko
[core] RE feedback on resource-directory and mirr… matthieu.vial
Re: [core] feedback on resource-directory and mir… Carsten Bormann
Re: [core] feedback on resource-directory and mir… Carsten Bormann
Re: [core] feedback on resource-directory and mir… Jari Arkko
Re: [core] feedback on resource-directory and mir… Zach Shelby
Re: [core] feedback on resource-directory and mir… Jari Arkko