Re: [Dtls-iot] IP Addresses in Certificates

[Hannes Tschofenig <[e-mail]>]

Hi Michael,

could you explain the idea behind draft-richardson-6tisch-idevid-cert?

I don't see how it relates to Stephen's request to add a description on
how to use IP addresses in certificates for the DTLS/TLS IoT profiles
draft.

Ciao
Hannes

On 08/05/2015 09:41 PM, Michael Richardson wrote:
> 
> Stephen Farrell <[e-mail]> wrote:
>     > On 05/08/15 15:54, Hannes Tschofenig wrote:
>     >> Hi Stephen, reading through this issue again I believe you could help
>     >> us further explain what we could recommend in the document.
> 
>     > Assuming that it'd be a bunch of work to recommend how to best handle
>     > certificates for devices that will only ever have a bogon IP address, I
>     > guess the best for now is to just say that that work is not (yet) done
>     > and hence this document makes no recommendation.
> 
>     > Seem ok? (And yes it could be that the current text on that is just
>     > fine, I didn't go look back right now)
> 
> okay, but we need to do this work for ANIMA, and other places.
> 
> I wrote:
>   http://datatracker.ietf.org/doc/draft-richardson-6tisch-idevid-cert/
> 
> But elsewhere in this thread I mentioned a current killer-app need for
> this is with service processors (ILOM/iDRAC/...) which seldom have anything
> other than a rfc1918 dhcp address, and really, the browser location bar
> should show the end user the vendor and mac address of the unit, not the IP
> address.
> 
> 
> --
> Michael Richardson <[e-mail]>, Sandelman Software Works
>  -= IPv6 IoT consulting =-
> 
> 
>