Last Call: <draft-ietf-ace-key-groupcomm-oscore-18.txt> (Key Management for Group Object Security for Constrained RESTful Environments (Group OSCORE) Using Authentication and Authorization for Constrained Environments (ACE)) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Thu, 11 September 2025 14:46 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-ace-key-groupcomm-oscore-18.txt> (Key Management for Group Object Security for Constrained RESTful Environments (Group OSCORE) Using Authentication and Authorization for Constrained Environments (ACE)) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <175760196558.995436.15966206193407915091@dt-datatracker-f7c8fdcb7-pjx77>
Date: Thu, 11 Sep 2025 07:46:05 -0700
Message-ID-Hash: BKTHB44DAD3QAZE6OZCV3GXXDTGUZ5CF
CC: ace-chairs@ietf.org, ace@ietf.org, draft-ietf-ace-key-groupcomm-oscore@ietf.org, paul.wouters@aiven.io, rikard.hoglund@ri.se
Reply-To: last-call@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/P1N30IK39WcmDNg_j6rdLmZ6jf0>

The IESG has received a request from the Authentication and Authorization for
Constrained Environments WG (ace) to consider the following document: - 'Key
Management for Group Object Security for Constrained RESTful
   Environments (Group OSCORE) Using Authentication and Authorization
   for Constrained Environments (ACE)'
  <draft-ietf-ace-key-groupcomm-oscore-18.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2025-09-25. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   This document defines an application profile of the Authentication
   and Authorization for Constrained Environments (ACE) framework, to
   request and provision keying material in group communication
   scenarios that are based on the Constrained Application Protocol
   (CoAP) and are secured with Group Object Security for Constrained
   RESTful Environments (Group OSCORE).  This application profile
   delegates the authentication and authorization of Clients, which join
   an OSCORE group through a Resource Server acting as Group Manager for
   that group.  This application profile leverages protocol-specific
   transport profiles of ACE to achieve communication security, server
   authentication, and proof of possession for a key owned by the Client
   and bound to an OAuth 2.0 access token.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-ace-key-groupcomm-oscore/



No IPR declarations have been submitted directly on this I-D.

Last Call: <draft-ietf-ace-key-groupcomm-oscore-1… The IESG