Re: [Iotops] WG Adoption Call on draft-moran-iot-nets-02

I have no objection to the adoption of this document, but I would like to see the discussion also cover protection of data at rest in the IoT device.  Currently, it talks about "information in transit on the networks or stored in the IoT application or in the Cloud."  However, the protections for data at rest are not really covered in the subsections that follow.

This document is highly aligned with ENISA.  It mentions a NIST document, but it ignores other sources of reasonable requirements, such as https://ctiacertification.org/program/iot-cybersecurity-certification/.  I think that pulling together a superset of the requirements (as long as they are not in conflict) would be a real service to the community.

Russ

> On Mar 2, 2023, at 7:34 AM, Alexey Melnikov <alexey.melnikov@isode.com> wrote:
> 
> Dear IOTOPS participants,
> 
> This message starts a 3 week call for Working Group Adoption of "A summary of security-enabling technologies for IoT devices" (draft-moran-iot-nets-02 <https://datatracker.ietf.org/doc/draft-moran-iot-nets/>)
> 
> ending on Thursday, March 23rd.
> 
> 
> Please reply to this email with your support (or lack thereof) and especially any substantive comments you may have. When including comments, please consider whether or not they need to be resolved before document adoption by the WG.
> 
> Alternatively you can email chairs directly at <iotops-chairs@ietf.org>.
> 
> 
> Best Regards,
> 
> Alexey,
> For the IOTOPS co-chairs,
> 
> -- 
> Iotops mailing list
> Iotops@ietf.org
> https://www.ietf.org/mailman/listinfo/iotops