Re: [dispatch] Secure Credential Transfer Charter & BoF

[Matthew Byington <[e-mail]>]

Hello everyone,

Happy Friday. 

We have created a set of slides that endeavors to answer some of the questions that have come up on this mailing list distribution.

I am going to attach the slides in PDF format to this email - I hope that works for everyone to be able to open them.

These are the slides that we will use to guide the BoF discussion. We will of course have additional color to add in the BoF discussion verbally but hopefully these are helpful in written format for now.

Note that these slides are *not* final yet, but as promised I wanted to get some additional information to everyone ASAP given the feedback we received on this thread around timing.

I also wanted to take a moment to thank everyone for their feedback thus far.

By the way, @Mark, I too share your concern of waking up early - totally get it. When we presented at IETF 112 last year I had to get up at 3 AM for that and needless to say, many cups of coffee were consumed.

The slides contain detail around the assumptions, requirements, use cases, and problem statement.



Hope everyone has a great weekend.

Thanks!
Matt

> On Jan 27, 2022, at 9:01 AM, Matthew Byington <[e-mail]> wrote:
> 
> Hi Eric, Lucas,
> 
> Thank you very much for the feedback. It is really valuable to me as I am navigating IETF and BoFs in general to learn and better my understanding of how these things should work.
> 
> Mark/Eric/Richard thank you as well for your input on timing and the fact that it is not being held at IETF week. I will circle back with Francesca to discuss, but I’m personally really looking forward to discussing the topic with the broader community sooner than IETF 113 so that we can continue the discussion.
> 
> Eric/Lucas - I will type up some supplemental material in addition to the draft and charter that we published earlier this week to the mailing lists and I will respond here with that material by EOD tomorrow (Friday Jan 28) describing the problem statement in additional detail.
> 
> In addition to responding here I’ll post it on our GitHub so that it is available to folks who aren’t on this list.
> 
> Thanks,
> Matt
> 
>> On Jan 26, 2022, at 7:04 PM, Eric Rescorla <[e-mail] <mailto:[e-mail]>> wrote:
>> 
>> At this point I'm going to repeat my ask  (in my review when this was DISPATCHED) for some document which describes the problem and the assumed constraints.
>> 
>> This protocol has a number of features which seem surprising, and without understanding the context it is essentially impossible to determine whether those are necessary or misfeatures.
>> 
>> It would be extremely helpful if you posted this with sufficient time for people to read this *prior* to the BoF, say in the next week or so.
>> 
>> -Ekr
>> 
>> 
>> On Wed, Jan 26, 2022 at 6:08 PM Lucas Pardue <[e-mail] <mailto:[e-mail]>> wrote:
>> Either way, there's not really much detail to help prepare for the BoF. With it being two weeks away I'd expect to see an agenda at least.
>> 
>> Cheers,
>> Lucas
>> 
>> On Thu, Jan 27, 2022 at 1:39 AM Richard Barnes <[e-mail] <mailto:[e-mail]>> wrote:
>> I have the opposite concerns from Eric and Mark.  Holding a BoF outside the IETF week means less competition for peoples' attention.  And in the era of easy, high-quality conferencing, it's ridiculous to delay work for months on the basis that we can only get the right group of people together three weeks a year.
>> 
>> +1 for virtual BoFs
>> 
>> --Richard
>> 
>> On Wed, Jan 26, 2022 at 7:22 PM Eric Rescorla <[e-mail] <mailto:[e-mail]>> wrote:
>> I share Mark's concerns about this BoF. Is there a reason this wasn't held during IETF week?
>> 
>> -Ekr
>> 
>> 
>> On Wed, Jan 26, 2022 at 4:17 PM Mark Nottingham <[e-mail] <mailto:[e-mail]>> wrote:
>> I'm a little surprised to hear this. 
>> 
>> Holding BoFs during IETF weeks gives them elevated visibility during a period when IETF folks have already reserved their attention and time for IETF matters. Scheduling one out of an IETF week means that people need to accommodate it in their schedules, not only for the event but also for preparation work. 
>> 
>> Holding such a BoF virtually compounds that -- especially when there has been ZERO consultation with the broad community about timing. E.g, if I wanted to attend this BoF, I'd need to be up before 4am.
>> 
>> The icing on the cake, though, is announcing it with only two weeks' notice -- a period of time shorter than many vacations.
>> 
>> As a result, I have very little confidence that this BoF will reflect community consensus and input. Of course, you will confirm consensus on lists, etc., but holding the BoF in such a limited forum taints the outcome.
>> 
>> IESG, this is a horrible precedent and while I won't specifically argue to cancel or delay this BoF, I do expect you to be much more thoughtful about these issues.
>> 
>> Cheers,
>> 
>> 
>> > On 26 Jan 2022, at 12:00 pm, Matthew Byington <mbyington=[e-mail] <mailto:[e-mail]>> wrote:
>> > 
>> > Hi Eric,
>> > 
>> > My understanding is that the BoF will be handled virtually (not in-person). It has also been scheduled outside of the normal IETF week.
>> > 
>> > The BoF is working-group forming, yes.
>> > 
>> > Matt
>> > 
>> >> On Jan 25, 2022, at 11:38 AM, Eric Rescorla <[e-mail] <mailto:[e-mail]>> wrote:
>> >> 
>> >> Can you clarify what the status of a "virtual BoF" is, here? I.e., is this in lieu of an actual BoF at the next IETF? Is this WG forming?
>> >> 
>> >> -Ekr
>> >> 
>> >> 
>> >> On Tue, Jan 25, 2022 at 11:36 AM Matthew Byington <mbyington=[e-mail] <mailto:[e-mail]>> wrote:
>> >> Hi there,
>> >> 
>> >> I wanted to send an email out communicating an upcoming virtual BoF meeting scheduled for Thursday February 10th.
>> >> 
>> >> This is a follow-on to the initial presentation at IETF week 112 given last year.
>> >> 
>> >> I am posting the information below to a few different IETF mailing lists, so apologies if you receive duplicate notifications on the subject.
>> >> 
>> >> A big “thank you” to Francesca for helping us to get this scheduled and organized.
>> >> 
>> >> Latest draft:
>> >>      https://www.ietf.org/archive/id/draft-secure-credential-transfer-03.html <https://www.ietf.org/archive/id/draft-secure-credential-transfer-03.html>
>> >> 
>> >> Charter:
>> >>      https://github.com/dimmyvi/secure-credential-transfer/blob/main/charter.md <https://github.com/dimmyvi/secure-credential-transfer/blob/main/charter.md>
>> >>      
>> >> BoF Request:
>> >>      https://datatracker.ietf.org/doc/bofreq-secure-credential-transfer-bof-request/ <https://datatracker.ietf.org/doc/bofreq-secure-credential-transfer-bof-request/>
>> >>      
>> >> Virtual BoF (Francesca is finalizing this schedule still, but this is the proposed date and time):
>> >>      Thursday February 10th 17:00-19:00 UTC (https://www.worldtimebuddy.com/?qm=1&lid=2673730,5,8,100&h=2673730&date=2022-2-10&sln=18-20&hf=1 <https://www.worldtimebuddy.com/?qm=1&lid=2673730,5,8,100&h=2673730&date=2022-2-10&sln=18-20&hf=1>)
>> >> 
>> >> Mailing list:
>> >>      https://www.ietf.org/mailman/listinfo/secret <https://www.ietf.org/mailman/listinfo/secret> 
>> >> 
>> >> Thanks,
>> >> Matt
>> >> _______________________________________________
>> >> dispatch mailing list
>> >> [e-mail] <mailto:[e-mail]>
>> >> https://www.ietf.org/mailman/listinfo/dispatch <https://www.ietf.org/mailman/listinfo/dispatch>
>> > 
>> > _______________________________________________
>> > dispatch mailing list
>> > [e-mail] <mailto:[e-mail]>
>> > https://www.ietf.org/mailman/listinfo/dispatch <https://www.ietf.org/mailman/listinfo/dispatch>
>> 
>> --
>> Mark Nottingham   https://www.mnot.net/ <https://www.mnot.net/>
>> 
>> _______________________________________________
>> dispatch mailing list
>> [e-mail] <mailto:[e-mail]>
>> https://www.ietf.org/mailman/listinfo/dispatch <https://www.ietf.org/mailman/listinfo/dispatch>
>> _______________________________________________
>> dispatch mailing list
>> [e-mail] <mailto:[e-mail]>
>> https://www.ietf.org/mailman/listinfo/dispatch <https://www.ietf.org/mailman/listinfo/dispatch>
>