[Lake] Re: WG Last Call: draft-ietf-lake-app-profiles-04 (Ends 2026-06-02)

Elsa Lopez Perez <elsa.lopez-perez@inria.fr> Tue, 26 May 2026 14:15 UTC

Return-Path: <elsa.lopez-perez@inria.fr>
X-Original-To: lake@mail2.ietf.org
Delivered-To: lake@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 13968F53EF2B; Tue, 26 May 2026 07:15:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1779804957; bh=vJgB13+gLfGuGk7tJHwqbevX8QMBOETfUPKmP93l5mE=; h=Date:Subject:To:References:From:In-Reply-To; b=TCytwAdavIAfcx10FA+P/iEjtPKRlYzxPCshpOKc/zHQ7xsoWVwJIp/H9angSLpDs TSAJ/Q8ctY8dCBzQK4XAVVwavnA+fjFttF2dNos7SEXqF0JGbt51QMUFo9cxLRL7wA qtxxOlawmfOZo3PwepcP1AJNHEOmINGytQX+hCr8=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.398
X-Spam-Level:
X-Spam-Status: No, score=-4.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=inria.fr
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m1HKcOx-Pf0z; Tue, 26 May 2026 07:15:56 -0700 (PDT)
Received: from mail2-relais-roc.national.inria.fr (mail2-relais-roc.national.inria.fr [192.134.164.83]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id D6411F53EF07; Tue, 26 May 2026 07:15:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inria.fr; s=dc; h=message-id:date:mime-version:subject:to:references:from: in-reply-to:content-transfer-encoding; bh=cwmwGiuHY6nGmcqcN4t+CQpa/EbUgQCH6BU1IYjHj9s=; b=CTcnfUpshppC7wSYCicSRwW+1Gjyx9G0jU4nhFfg0Rn+W8Z1VNfu7C+I uO0IxEYVbBaZHDWG7Bmx7VzKvbuLRb7MgQ9XnPbpvLqq74hg/OTIlvpt4 ExF0KdQ0Ad/DR+PJn19W9B9xyd3+QA7et+/x3MdSh/KVkwu87aXMSvIPt c=;
X-CSE-ConnectionGUID: ELSwwKd4Rh62TCFKjjXi4w==
X-CSE-MsgGUID: wokpZjymQhSlThKRFst9Xg==
Authentication-Results: mail2-relais-roc.national.inria.fr; dkim=none (message not signed) header.i=none; spf=SoftFail smtp.mailfrom=elsa.lopez-perez@inria.fr; dmarc=fail (p=none dis=none) d=inria.fr
X-IronPort-AV: E=Sophos;i="6.24,169,1774306800"; d="scan'208";a="278296356"
Received: from dynamic-078-054-034-168.78.54.pool.telefonica.de (HELO [192.168.1.96]) ([78.54.34.168]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 26 May 2026 16:15:34 +0200
Message-ID: <9079b95c-ff82-4501-8f90-adfac6b5b2aa@inria.fr>
Date: Tue, 26 May 2026 16:15:28 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: draft-ietf-lake-app-profiles@ietf.org, lake-chairs@ietf.org, lake <lake@ietf.org>
References: <177918251707.659690.4519691046419577095@dt-datatracker-7688897f84-l74h4>
Content-Language: en-US
From: Elsa Lopez Perez <elsa.lopez-perez@inria.fr>
In-Reply-To: <177918251707.659690.4519691046419577095@dt-datatracker-7688897f84-l74h4>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Message-ID-Hash: BVJXJET7UH4VBTHN7WX2RAINR6QXFTLY
X-Message-ID-Hash: BVJXJET7UH4VBTHN7WX2RAINR6QXFTLY
X-MailFrom: elsa.lopez-perez@inria.fr
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Lake] Re: WG Last Call: draft-ietf-lake-app-profiles-04 (Ends 2026-06-02)
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/Fv0W_YstOf1EtYhz2DSGLWv9Ivg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

Hi all,

I have reviewed the document and support progressing it towards 
publication. A few comments:

- Same as was already mentioned by Yuxuan, the app_prof name and label 
means three different things depending on the context. Maybe it would be 
worth clarifying it or using a different name.

- EDHOC-PSK resumption introduces two new EDHOC Exporter Labels 
(TBD2/TBD3) with default output lengths. Is app-profiles' 
exporter_out_len intended to cover these? Moreover, is "supports PSK 
resumption" meant to be an advertisable profile capability?

Thanks for the work!

BR,

Elsa



On 5/19/26 11:21, Mališa Vučinić via Datatracker wrote:
> As discussed during the IETF 125 in Shenzhen, this message starts a WG
> last call for  draft-ietf-lake-app-profiles-04.
>
> This Working Group Last Call ends on 2026-06-02.
>
> Abstract:
>     The lightweight authenticated key exchange protocol Ephemeral Diffie-
>     Hellman Over COSE (EDHOC) requires certain parameters to be agreed
>     out-of-band, in order to ensure its successful completion.  To this
>     end, application profiles specify the intended use of EDHOC to allow
>     for the relevant processing and verifications to be made.  In order
>     to ensure the applicability of such parameters and information beyond
>     transport- or setup-specific scenarios, this document defines a
>     canonical, CBOR-based representation that can be used to describe,
>     distribute, and store EDHOC application profiles.  Furthermore, in
>     order to facilitate interoperability between EDHOC implementations
>     and support EDHOC extensibility for additional integrations, this
>     document defines a number of means to coordinate the use of EDHOC
>     application profiles.  Finally, this document defines a set of well-
>     known EDHOC application profiles.
>
> File can be retrieved from:
>
> Please review and indicate your support or objection to proceed with the
> publication of this document by replying to this email keeping lake@ietf.org
> in copy. Objections should be explained and suggestions to resolve them are
> highly appreciated.
>
> Authors, and WG participants in general, are reminded of the Intellectual
> Property Rights (IPR) disclosure obligations described in BCP 79 [1].
> Appropriate IPR disclosures required for full conformance with the provisions
> of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
> Sanctions available for application to violators of IETF IPR Policy can be
> found at [3].
>
> Thank you.
>
> [1] https://datatracker.ietf.org/doc/bcp78/
> [2] https://datatracker.ietf.org/doc/bcp79/
> [3] https://datatracker.ietf.org/doc/rfc6701/
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-lake-app-profiles/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-lake-app-profiles-04.html
>
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lake-app-profiles-04
>