Re: [EAT] [Rats] Rats and EAT

Hi all,

sometimes - and this might be a purely subjective perception - the fact 
that "concise" or IoT target solutions "seem" to violate a very curious 
requirement poses - please mind - a somehow surprising strong "impact":

The encoding data in motion is not (directly) human readable.

Wrt to Yaron's comment: this assumption should not be a valid reason for 
not to apply concise & scalable technologies in other scopes (aka bigger 
things) than constrained-nodes environments.

Maybe there are very valid reasons not to apply IoT solutions to "bigger 
things" domains - and that would be very important to understand better 
- but taking into account the t2t philosophy, I am hopeful that there is 
no actual reason not to aspire to that.

Viele Grüße,

Henk

On 07/15/2018 08:50 AM, Yaron Sheffer wrote:
> On 12/07/18 19:20, Laurence Lundblade wrote:
>> On Jul 11, 2018, at 5:46 PM, Michael Richardson 
>> <mcr+ietf@sandelman.ca> wrote:
>>>
>>> Laurence Lundblade <lgl@island-resort.com> wrote:
>>>> NEA is oriented around network management, trying to track the security
>>>> posture of devices in an enterprise's network. EAT is broadly targeted
>>>> at establishing trust between entities, often consumer devices (phones,
>>>> refrigerators, cars...) and servers/services (online banking, IoT
>>>> services, enterprise authentication…).
>>> That's a surprising claim that EAT is going to broker trust between 
>>> my phone
>>> and my refrigerator.    Will it do this via third parties, or directly?
>> This is not any direct goal of EAT. Let me say it better:
>>
>> EAT is broadly targeted at providing some basis for establishing trust 
>> in scenarios like this:
>>   - An online banking website trusting the phone and app used to show 
>> account balance
>>   - A Fortune 500 corp trusting the phone and web browser to allow 
>> access to corp data
>>   - An IoT backend trusting some refrigerators that it is to provide 
>> service to (e.g. shopping, milk expiration…)
>>
>> Maybe someday EAT will be part of a phone-fridge trust solution, but 
>> one step at a time.
>>
> I don't see how in this day and age we can consider a solution that 
> covers IOT and phones but not other devices that run an operating 
> system, such as laptops and servers.
> 
> So maybe NEA was too complex or ambitious, and we should scale these 
> ambitions down. But desktops and servers, both physical and virtual, 
> should be in scope.
> 
> Thanks,
>      Yaron
> 
> _______________________________________________
> EAT mailing list
> EAT@ietf.org
> https://www.ietf.org/mailman/listinfo/eat