Re: [Id-event] IETF 100 draft agenda

Adam Dawes <adawes@google.com> Tue, 31 October 2017 07:21 UTC

Return-Path: <adawes@google.com>
X-Original-To: id-event@ietfa.amsl.com
Delivered-To: id-event@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E30301BF914 for <id-event@ietfa.amsl.com>; Tue, 31 Oct 2017 00:21:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.711
X-Spam-Level:
X-Spam-Status: No, score=-0.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o8VCncNiVIFJ for <id-event@ietfa.amsl.com>; Tue, 31 Oct 2017 00:20:59 -0700 (PDT)
Received: from mail-yw0-x234.google.com (mail-yw0-x234.google.com [IPv6:2607:f8b0:4002:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60B431BF911 for <id-event@ietf.org>; Tue, 31 Oct 2017 00:20:59 -0700 (PDT)
Received: by mail-yw0-x234.google.com with SMTP id w5so13876154ywg.11 for <id-event@ietf.org>; Tue, 31 Oct 2017 00:20:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=apPkXHkDmEoh3EnyNYvUQI+5pHYuYpD5og1BMfFpKPM=; b=BrD82AsNrQRnbVTRkyburLErl84fVGTjQdsm/PhjaT4RTwgNQjrR3JLzBtG1GYpYyT oYcCI05oFZTg/qeTMqPB3OrYwyYZJDCqb/Wd8wKWX9Erth0MOOb2CYxS/M5PdYlNG5zD cENv74HSpyHIlA/N2BvblwqS+kXblv0mOSwFVoRvUE5aD1s9p8Y0LXdiSJ5daaEXY9Bj YfRSz1J525V5BN60yAPAwL6aTGM7X7gL13fAsiCAjO0udj0OevAXzTCyOYiLrB8XKXlK qHJr0yxBVOh+PT9F8zm5enhAlmI+AoEaV8QZmtVRdSFUVIOayp1fg6FTXOfq0B4Hbvz4 ljAQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=apPkXHkDmEoh3EnyNYvUQI+5pHYuYpD5og1BMfFpKPM=; b=ij1hpwUw43lexGov2oK5Hw3OAA9N6GQVs09EfgVBBRfrYwLGwyfdSB4+3hrDnEZMpN 4vyRzDppQkwfDhUSr5nRc/NAr1qJ99J6rLRkZEtbDrTTsPIA/4/vS/5Z6qM9z63MWpQe 8lyCYE7zosF035XzTh8s9xPb2dNACNHwBXXZvYXZlFyDlbQC1K5qaW3HfUmJ+WrfXI0X u+eCyKBH7qi2Att5ucIJucmJyXI++Lkh8Bv3uwQ3uoljur1L8cIBtDSn3d5ppAGFDPay 63Pp1kclGHfS6cEfrwTRnNM6u/4OK8mSz4Jl23GsY2ON0EED4njtD7LEiQW8u/5CRieX YFag==
X-Gm-Message-State: AMCzsaX+Xv44obh1hZODyIUms2Of4aLzJMFaqKlNeWywX0vmMTxC3zWi fOp0p9DzsOs73rnFEYeMucMYilUW3sW1Jax80/oxfg==
X-Google-Smtp-Source: ABhQp+Qafg29zhDG6JO1TELOWkFkg6/YJkSjn/oQ8XfKdo4I1bBkN+PTybyGCMQz7HN4RoRKSkHG1SAw8OD/mrAGi4I=
X-Received: by 10.129.175.12 with SMTP id n12mr628524ywh.151.1509434458152; Tue, 31 Oct 2017 00:20:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.37.4.3 with HTTP; Tue, 31 Oct 2017 00:20:57 -0700 (PDT)
In-Reply-To: <CAD9ie-tJZPo0pKPqXndugaWdzy7az9fhZcDJHGapG78jh5FofQ@mail.gmail.com>
References: <CAD9ie-u-P2Cs=yetVAiHDLvUPXkzfuVOYpZV41wQAPd_5RjS5w@mail.gmail.com> <67C37F1B-B6F2-4F00-AF39-CF9C526236A0@oracle.com> <CAD9ie-tJZPo0pKPqXndugaWdzy7az9fhZcDJHGapG78jh5FofQ@mail.gmail.com>
From: Adam Dawes <adawes@google.com>
Date: Tue, 31 Oct 2017 00:20:57 -0700
Message-ID: <CAOJhRMZiyZ5c=GX0gz4JSjWEtvRA_quMijTBcZSz_3tw7x+3sw@mail.gmail.com>
To: Dick Hardt <dick.hardt@gmail.com>
Cc: "Phil Hunt (IDM)" <phil.hunt@oracle.com>, Mike Jones <michael.jones@microsoft.com>, Annabelle Richard <richanna@amazon.com>, SecEvent <id-event@ietf.org>, Marius Scurtescu <mscurtescu@google.com>
Content-Type: multipart/alternative; boundary="f403045ede84b149b0055cd2984a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/id-event/UYQw8Mw-TNP2accqsVj9SfDS2U0>
Subject: Re: [Id-event] IETF 100 draft agenda
X-BeenThere: id-event@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "A mailing list to discuss the potential solution for a common identity event messaging format and distribution system." <id-event.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/id-event>, <mailto:id-event-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/id-event/>
List-Post: <mailto:id-event@ietf.org>
List-Help: <mailto:id-event-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/id-event>, <mailto:id-event-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Oct 2017 07:21:03 -0000

Thanks for sending out the agenda.

>From our perspective, there are two important issues that are blocking
implementation and I think it would be very helpful to shift the agenda a
bit so we have more time to discuss these. It would be very beneficial to
implementors if we could resolve these issues so we can finish our services
and start to receive operational feedback on the specs.

   - Management API resolution. We have two approaches (Phil's
   <https://tools.ietf.org/html/draft-hunt-secevent-stream-mgmt-00>  and
   Marius/Annabelle's
   <https://datatracker.ietf.org/doc/draft-scurtescu-secevent-event-stream-mgmt-api/>).
   The management API is the key to being able to scale our implementation and
   start interop with multiple providers. Perhaps Phil and Marius/Annabelle
   can each provide a summary of their drafts and we can have try to reach
   consensus.
   - Single/multiple event per SET
   This is currently being discussed on list and within RISC working group.
   It would be helpful to also nail this down to free up our engineers to
   build this right the first time instead of making a guessing and having the
   community later choose differently.

In addition, but less critically, we'd like to propose the following topics
too:

   - "toe" SET attribute
   - authorization header for push delivery
      - receiver configures full authorization header as static/bearer
      header
   - composite subject claim defined in SET
      - present RISC approach as example


On Mon, Oct 30, 2017 at 2:39 PM, Dick Hardt <dick.hardt@gmail.com> wrote:

> Hey Phil, Thanks! I'll slot you in for the SET slot. Let's see if one of
> the other authors will do the Delivery.
>
> On Mon, Oct 30, 2017 at 2:32 PM, Phil Hunt (IDM) <phil.hunt@oracle.com>
> wrote:
>
>> Dick,
>>
>> I believe Mike won't be able to make the monday meeting. so Mike and I
>> are working on a presentation for the current state of set that I will do.
>>
>> Not much has happened with delivery other than removing verify event
>> (because that was going in control plane). I can do that very quickly.
>>
>> I do have concerns about config on control planes and delivery streams
>> when firewalls are involved. I will include a couple of slides on this that
>> may be important to control plane discussion.
>>
>> I can do my control plane ID draft proposal after marius/annabelle's. It
>> will be similar to the deck we discussed at the amazon hq f2f.
>>
>> Phil
>>
>> On Oct 30, 2017, at 2:09 PM, Dick Hardt <dick.hardt@gmail.com> wrote:
>>
>> Here is the draft agenda. Mike, Phil, Marius, Annabelle - please let me
>> know who is presenting what where it is xxx
>>
>> Thanks!
>>
>> Here are the documents we will be discussing:
>>
>> https://datatracker.ietf.org/doc/draft-ietf-secevent-delivery/
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Ddelivery_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=Uluwi3dKSdNUwdiLtSP9giOhZid7jXJ9EYVbh2QL6vs&s=X8effseMjaVrorik11cxrRI-bs3SnJC8dZrtyE_Frzc&e=>
>> https://datatracker.ietf.org/doc/draft-ietf-secevent-token/
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_doc_draft-2Dietf-2Dsecevent-2Dtoken_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=Uluwi3dKSdNUwdiLtSP9giOhZid7jXJ9EYVbh2QL6vs&s=Bhsx1KCP0LaIZS2Ds3UTMnMSAoCVbo24WpxlSgTwW3M&e=>
>> https://datatracker.ietf.org/doc/draft-scurtescu-secevent-ev
>> ent-stream-mgmt-api/
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_doc_draft-2Dscurtescu-2Dsecevent-2Devent-2Dstream-2Dmgmt-2Dapi_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=Uluwi3dKSdNUwdiLtSP9giOhZid7jXJ9EYVbh2QL6vs&s=mcaEERiRwA93hAlqRNn-7upsprLemACARBfCG88a_KY&e=>
>> https://datatracker.ietf.org/doc/draft-hunt-secevent-stream-mgmt/
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__datatracker.ietf.org_doc_draft-2Dhunt-2Dsecevent-2Dstream-2Dmgmt_&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=na5FVzBTWmanqWNy4DpctyXPpuYqPkAI1aLcLN4KZNA&m=Uluwi3dKSdNUwdiLtSP9giOhZid7jXJ9EYVbh2QL6vs&s=bqT3s9Srdn6iMJDjWvSk_nZL7qud6yrBD6LH5Qr09cA&e=>
>>
>> /Dick
>>
>> -----
>> IETF 100 Singapore
>> Bras Basah Monday Nov 13, 2017, 13:30 - 15:30
>>
>> Agenda Setting                          Dick Hardt (chair)        13:30 -
>> 13:40
>> Security Event Token (SET)              xxx                       13:40 -
>> 14:00
>> SET Delivery using HTTP                 xxx                       14:00 -
>> 14:20
>> Chair Slides on Managment APIs          Dick Hardt (chair)        14:20 -
>> 14:30
>> Management API for SET Event Streams    xxx                       14:30 -
>> 14:50
>> SET Stream Managment and Provisioning   Phil Hunt                 14:50 -
>> 15:10
>> Management API Discussion               Dick Hardt (chair)        15:10 -
>> 15:20
>> AOB                                     Dick Hardt (chair)        15:20 -
>> 15:30
>>
>>
>>
>>
>
>
> --
> Subscribe to the HARDTWARE <http://hardtware.com/> mail list to learn
> about projects I am working on!
>
> _______________________________________________
> Id-event mailing list
> Id-event@ietf.org
> https://www.ietf.org/mailman/listinfo/id-event
>
>


-- 
Adam Dawes | Sr. Product Manager | adawes@google.com | +1 650-214-2410