Protocol Action: 'Admin Interface for the OSCORE Group Manager' to Proposed Standard (draft-ietf-ace-oscore-gm-admin-16.txt)

The IESG <iesg-secretary@ietf.org> Fri, 13 March 2026 03:06 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Protocol Action: 'Admin Interface for the OSCORE Group Manager' to Proposed Standard (draft-ietf-ace-oscore-gm-admin-16.txt)
Auto-Submitted: auto-generated
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <177337121943.2534359.2838367247579582094@dt-datatracker-5477d56788-kn86m>
Date: Thu, 12 Mar 2026 20:06:59 -0700
Message-ID-Hash: X64SZSJJQ7PJWNZXB3XXN7BIHEYACYTN
CC: The IESG <iesg@ietf.org>, ace-chairs@ietf.org, ace@ietf.org, draft-ietf-ace-oscore-gm-admin@ietf.org, paul.wouters@aiven.io, rfc-editor@rfc-editor.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/EqKpqCLsmWKi7w0cuCAYUFuLHrQ>

The IESG has approved the following document:
- 'Admin Interface for the OSCORE Group Manager'
  (draft-ietf-ace-oscore-gm-admin-16.txt) as Proposed Standard

This document is the product of the Authentication and Authorization for
Constrained Environments Working Group.

The IESG contact persons are Paul Wouters and Deb Cooley.

A URL of this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-ace-oscore-gm-admin/




Technical Summary

   Group communication for the Constrained Application Protocol (CoAP)
   can be secured using Group Object Security for Constrained RESTful
   Environments (Group OSCORE).  A Group Manager is responsible for
   handling the joining of new group members, as well as for managing
   and distributing the group keying material.  This document defines a
   RESTful admin interface at the Group Manager that allows an
   Administrator entity to create and delete OSCORE groups, as well as
   to retrieve and update their configuration.  The ACE framework for
   Authentication and Authorization is used to enforce authentication
   and authorization of the Administrator at the Group Manager.
   Protocol-specific transport profiles of ACE are used to achieve
   communication security, proof of possession, and server
   authentication.

Working Group Summary

There was broad agreement and good feedback of the Directorate reviews.

Document Quality

   I am not aware of implementations yet, but it seems likely the usual suspects
   will implement.
   A media type is already assigned:
   https://www.iana.org/assignments/media-types/application/ace-groupcomm+cbor

Personnel

   The Document Shepherd for this document is Tim Hollebeek. The
   Responsible Area Director is Paul Wouters.

Protocol Action: 'Admin Interface for the OSCORE … The IESG