[Emu] FW: New Version Notification for draft-aura-eap-noob-06.txt

Aura Tuomas <tuomas.aura@aalto.fi> Wed, 03 July 2019 13:04 UTC

From: Aura Tuomas <tuomas.aura@aalto.fi>
To: "emu@ietf.org" <emu@ietf.org>
Thread-Topic: New Version Notification for draft-aura-eap-noob-06.txt
Thread-Index: AQHVMZ1dQ7UWsRluhkGym1jQqDQyt6a4181w
Date: Wed, 03 Jul 2019 13:04:32 +0000
Message-ID: <dbfdffa3fa8c4055924e812234d9eb97@aalto.fi>
References: <156215799923.14626.16059927047031828211.idtracker@ietfa.amsl.com>
In-Reply-To: <156215799923.14626.16059927047031828211.idtracker@ietfa.amsl.com>
Accept-Language: fi-FI, en-US
Content-Language: en-US
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/emu/KTPmuqMTj7s4qN7U3blgzd_70A0>
Subject: [Emu] FW: New Version Notification for draft-aura-eap-noob-06.txt
Precedence: list

Hi all!

I have updated the EAP-NOOB draft. Here is a summary of the changes: 

* The major change was to add a separate request-response pair for communicating the PeerId and peer state to the server, instead of overloading the NAI. This is in conformance with RFC 3748 section 5.1: the NAI is now used only for routing the EAP requests and for selecting the method, and the method-specific peer identifier is communicated inside the method. (Note that the example messages in the appendix have not yet been updated.)

* Rolled back a change introduced in the previous version: the Kz identifier. While this could make implementation slightly easier, it conflicted with a potential future privacy extension where the PeerId is re-randomized periodically. 

* Refactored the text so that the initial handshake part of the exchanges, which is common to all exchanges, is described in its own section. This change is in response to questions from implementors. The text now follows more closely what I expect to be the sever logic in a the typical implementation. There were also other smaller editorial clarifications, e.g. when to start using the server-assigned realm. 

Regards,
Tuomas



-----Original Message-----
From: internet-drafts@ietf.org <internet-drafts@ietf.org> 
Sent: Wednesday, July 3, 2019 3:47 PM
To: Mohit Sethi <mohit@piuha.net>; Aura Tuomas <tuomas.aura@aalto.fi>
Subject: New Version Notification for draft-aura-eap-noob-06.txt


A new version of I-D, draft-aura-eap-noob-06.txt has been successfully submitted by Tuomas Aura and posted to the IETF repository.

Name:		draft-aura-eap-noob
Revision:	06
Title:		Nimble out-of-band authentication for EAP (EAP-NOOB)
Document date:	2019-07-03
Group:		Individual Submission
Pages:		62
URL:            https://www.ietf.org/internet-drafts/draft-aura-eap-noob-06.txt
Status:         https://datatracker.ietf.org/doc/draft-aura-eap-noob/
Htmlized:       https://tools.ietf.org/html/draft-aura-eap-noob-06
Htmlized:       https://datatracker.ietf.org/doc/html/draft-aura-eap-noob
Diff:           https://www.ietf.org/rfcdiff?url2=draft-aura-eap-noob-06

Abstract:
   Extensible Authentication Protocol (EAP) provides support for
   multiple authentication methods.  This document defines the EAP-NOOB
   authentication method for nimble out-of-band (OOB) authentication and
   key derivation.  This EAP method is intended for bootstrapping all
   kinds of Internet-of-Things (IoT) devices that have a minimal user
   interface and no pre-configured authentication credentials.  The
   method makes use of a user-assisted one-directional OOB channel
   between the peer device and authentication server.

                                                                                  


Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

[Emu] FW: New Version Notification for draft-aura… Aura Tuomas