I-D Action: draft-pala-eap-creds-07.txt

internet-drafts@ietf.org Wed, 03 June 2020 20:28 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-pala-eap-creds-07.txt
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <159121609864.12875.12242388721846023660@ietfa.amsl.com>
Date: Wed, 03 Jun 2020 13:28:18 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/i-d-announce/64IlqKrWHSReNehRgDECSv-X6AU>

A New Internet-Draft is available from the on-line Internet-Drafts directories.


        Title           : Credentials Provisioning and Management via EAP (EAP-CREDS)
        Author          : Massimiliano Pala
	Filename        : draft-pala-eap-creds-07.txt
	Pages           : 45
	Date            : 2020-06-03

Abstract:
   With the increase number of devices, protocols, and applications that
   rely on strong credentials (e.g., digital certificates, keys, or
   tokens) for network access, the need for a standardized credentials
   provisioning and management framework is paramount.  The 802.1x
   architecture allows for entities (e.g., devices, applications, etc.)
   to authenticate to the network by providing a communication channel
   where different methods can be used to exchange different types of
   credentials.  However, the need for managing these credentials (i.e.,
   provisioning and renewal) is still a hard problem to solve.

   EAP-CREDS, if implemented in Managed Networks (e.g., Cable Modems),
   could enable our operators to offer a registration and credentials
   management service integrated in the home WiFi thus enabling
   visibility about registered devices.  During initialization, EAP-
   CREDS also allows for MUD files or URLs to be transferred between the
   EAP Peer and the EAP Server, thus giving detailed visibility about
   devices when they are provisioned with credentials for accessing the
   networks.  The possibility provided by EAP-CREDS can help to secure
   home or business networks by leveraging the synergies of the security
   teams from the network operators thanks to the extended knowledge of
   what and how is registered/authenticated.

   This specifications define how to support the provisioning and
   management of authentication credentials that can be exploited in
   different environments (e.g., Wired, WiFi, cellular, etc.) to users
   and/or devices by using EAP together with standard provisioning
   protocols.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-pala-eap-creds/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-pala-eap-creds-07
https://datatracker.ietf.org/doc/html/draft-pala-eap-creds-07

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-pala-eap-creds-07


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

I-D Action: draft-pala-eap-creds-07.txt internet-drafts