[Lake] Re: WG Last Call: draft-ietf-lake-authz-08 (Ends 2026-09-22)

GABRIEL LOPEZ MILLAN <gabilm@um.es> Mon, 21 September 2026 14:09 UTC

Received: from AM0PR83CU005.outbound.protection.outlook.com (mail-westeuropeazlp170100001.outbound.protection.outlook.com [IPv6:2a01:111:f403:c201::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id EF9EB31; Mon, 21 Sep 2026 14:09:53 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=um.es header.s=selector1 header.b=JCaknGKV; arc=pass ("microsoft.com:s=arcselector10001:i=1"); dmarc=pass (policy=none) header.from=um.es; spf=pass (mx.ietf.org: domain of gabilm@um.es designates 2a01:111:f403:c201::1 as permitted sender) smtp.mailfrom=gabilm@um.es
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Lb+xzMOq7/vPYymXXxz9nRHlTXeeDzRFQDzlkS/eRFHfbg1iA4B4bPE4IkZyc8znvD7+A1N0P2oH6xcqTahwKmAUdVzmd1OjdURMVrVd7PE9YcmRvgbFWfzb2ql+Thc+r79oytX1RZe51gMUQfyTLYl8fseJJTyFGqOQ9O4Rx09orIym+T/8GNSwCXRS+eavBQM4xUbhjYFff79y+70lUIxPh/Ux3a9lxGfNQRs1RHzwD8Sxwdy9Z+JQ4aRYXswNeyMMaxQwTgwPf82g1Alc4lBoF+HX6f7WgKwdTk/AcoyuCt0sxHPBn/RcNqmo5gVtBFyxs6guL9ZuvrAOBtrKIg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=l3VSurhjdCFPLoUsPsuMiFnpDNObkUxuLillchmAAJw=; b=egNnxRtmlyQ/GwXw02pHznIw9PIfmMNYQzDrjwL2eq/7dREa7LwMvqb5Tb8VZcrg6aqolqZqpn/iAPldcxvGmOaWcuZ10NR5DsKMK/k+vbW4qRQnMyr1WZVrqCs4ogx2w4CjIXQZzqib3RfaSFztJz5A4yl0GjdYitAXaRGsrACUQY4Iy76LU4Nwf+YuBZUNm8Ihd3REaL0OaGZnM9yK8ZICkO/RNDjn3eVm1jt9wawkcdhtOBH0kc2XNp+M8LAYax6cuD9ht7duK517dQHTp9lnNX7/duZ10ulQHReVTr1YEJ0Xygfi+UL7Eu5Zqbu8eS+jS7qCdF26E3SrhVAWxw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=um.es; dmarc=pass action=none header.from=um.es; dkim=pass header.d=um.es; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=um.es; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l3VSurhjdCFPLoUsPsuMiFnpDNObkUxuLillchmAAJw=; b=JCaknGKVPrgFG3p70a+1gJw1cG3Dmv/yyOY1GVbSjCagHgTOsSKcVsT9J91RPp/f78SiVwQxkadQgrEovYgTKVOQJ6hO3EjjUuW3s6iWc3aBHva8LWavovpqPAbbP8xbRQhsVHJHvPsp1O4MnhkwpTxWL1o9mEbSL5kYPK2V2YokhXu4/HUoNzSBczjdprsVh1B0RqrgwwogfyAtnLxyTelsU1BBKEA/bHhAEcuSs9jN7I/7tlpPtM54GHq2BmJT/xSN5zU93aXQlpV7T6OPbCUoeCi+W+EZR1m5bEy7xqLbJjq9RKRmX9RdOnQPLuOL73IyNiuSw/1WhlkA7awnhA==
Received: from AS8PR08MB9018.eurprd08.prod.outlook.com (2603:10a6:20b:5b0::19) by DBAPR08MB5783.eurprd08.prod.outlook.com (2603:10a6:10:1a3::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.13; Mon, 21 Sep 2026 14:09:45 +0000
Received: from AS8PR08MB9018.eurprd08.prod.outlook.com ([fe80::2366:d7ea:5330:7f86]) by AS8PR08MB9018.eurprd08.prod.outlook.com ([fe80::2366:d7ea:5330:7f86%5]) with mapi id 15.21.0451.012; Mon, 21 Sep 2026 14:09:45 +0000
From: GABRIEL LOPEZ MILLAN <gabilm@um.es>
To: Renzo Navas <renzoefra@gmail.com>, "draft-ietf-lake-authz@ietf.org" <draft-ietf-lake-authz@ietf.org>, "lake-chairs@ietf.org" <lake-chairs@ietf.org>, "lake@ietf.org" <lake@ietf.org>
Thread-Topic: [Lake] WG Last Call: draft-ietf-lake-authz-08 (Ends 2026-09-22)
Thread-Index: AQHdP7NShAFygKTP/0WQfoz/Nrp+LbbZIzfr
Date: Mon, 21 Sep 2026 14:09:45 +0000
Message-ID: <AS8PR08MB901839BB28CC8D86D1381239D6842@AS8PR08MB9018.eurprd08.prod.outlook.com>
References: <178888650661.959507.7185336967836241082@dt-datatracker-9769b79f-xztnc>
In-Reply-To: <178888650661.959507.7185336967836241082@dt-datatracker-9769b79f-xztnc>
Accept-Language: es-ES, en-US
Content-Language: es-ES
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS8PR08MB9018:EE_|DBAPR08MB5783:EE_
x-ms-office365-filtering-correlation-id: f846ecc3-5948-4d57-52b7-08df17e9fd40
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|786006|4022899009|376014|1800799024|366016|19092799006|10067099003|11063799006|3023799007|4133799003|6133799003|8096899003|18002099003|22082099003|56012099006|13003099007|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS8PR08MB9018.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(786006)(4022899009)(376014)(1800799024)(366016)(19092799006)(10067099003)(11063799006)(3023799007)(4133799003)(6133799003)(8096899003)(18002099003)(22082099003)(56012099006)(13003099007)(38070700021);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_AS8PR08MB901839BB28CC8D86D1381239D6842AS8PR08MB9018eurp_"
MIME-Version: 1.0
X-OriginatorOrg: um.es
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS8PR08MB9018.eurprd08.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f846ecc3-5948-4d57-52b7-08df17e9fd40
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Sep 2026 14:09:45.2861 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 0aba6521-ce52-44d7-b06c-c6016ff2c30b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ZPZt2vLN4605UAcvyAqVssVrAa+eCGKUfsC9nz4y0EM+3bNUMD1YeXl7Eb8TcpH1
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR08MB5783
X-Spamd-Bar: --
Message-ID-Hash: IIVVZXYLP5JWPZ43YL25BDEMGZCYPAFF
X-Message-ID-Hash: IIVVZXYLP5JWPZ43YL25BDEMGZCYPAFF
X-MailFrom: gabilm@um.es
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: GABRIEL LOPEZ MILLAN <gabilm@um.es>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Lake] Re: WG Last Call: draft-ietf-lake-authz-08 (Ends 2026-09-22)
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/JECKrouqWFdu200sID-doAscj1I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

Hi.

I support the adoption of this document.

Just a minor suggestion in case do you it may help.

Section 1:

"ELA enables a low message count by performing authorization and
   enrollment in parallel with authentication" --> this sentence is misleading, better something like "ELA enables a low message count by performing authorization in parallel with authentication during an enrollment process”. Does it make sense?


Best regards, Gabi.



De: Renzo Navas via Datatracker <noreply@ietf.org>
Fecha: martes, 8 de septiembre de 2026 a las 18:58
Para: draft-ietf-lake-authz@ietf.org <draft-ietf-lake-authz@ietf.org>; lake-chairs@ietf.org <lake-chairs@ietf.org>; lake@ietf.org <lake@ietf.org>
Asunto: [Lake] WG Last Call: draft-ietf-lake-authz-08 (Ends 2026-09-22)

Dear All,

This message starts a WG Last Call for: draft-ietf-lake-authz-08
as we decided at IETF 126 [0]

This Working Group Last Call ends on 2026-09-22

Abstract:
   Ephemeral Diffie-Hellman Over COSE (EDHOC) is a lightweight
   authenticated key exchange protocol intended for use in constrained
   scenarios.  This document specifies Lightweight Authorization using
   EDHOC (ELA).  The procedure allows authorizing enrollment of new
   devices using the extension point defined in EDHOC.  ELA is
   applicable to zero-touch onboarding of new devices to a constrained
   network leveraging trust anchors installed at manufacture time.

File can be retrieved from:
https://urldefense.com/v3/__https://www.ietf.org/archive/id/draft-ietf-lake-authz-08.txt__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJ7Q2n5mI$

Please review and indicate your support or objection to proceed with the
publication of this document by replying to this email keeping lake@ietf.org
in copy. Objections should be explained and suggestions to resolve them are
highly appreciated.

Authors, and WG participants in general, are reminded of the Intellectual
Property Rights (IPR) disclosure obligations described in BCP 79 [1].
Appropriate IPR disclosures required for full conformance with the provisions
of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
Sanctions available for application to violators of IETF IPR Policy can be
found at [3].

Thank you.
Renzo, for the LAKE hairs

[0] https://urldefense.com/v3/__https://datatracker.ietf.org/doc/minutes-126-lake-202607201430/__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJK7RJ2Ic$ ]
[1] https://urldefense.com/v3/__https://datatracker.ietf.org/doc/bcp78/__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJ6AQwDVk$
[2] https://urldefense.com/v3/__https://datatracker.ietf.org/doc/bcp79/__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJNln13JI$
[3] https://urldefense.com/v3/__https://datatracker.ietf.org/doc/rfc6701/__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJzYjU-_E$

The IETF datatracker status page for this Internet-Draft is:
https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-lake-authz/__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJU4bi7WY$

There is also an HTML version available at:
https://urldefense.com/v3/__https://www.ietf.org/archive/id/draft-ietf-lake-authz-08.html__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJzG65EVE$

A diff from the previous version is available at:
https://urldefense.com/v3/__https://author-tools.ietf.org/iddiff?url2=draft-ietf-lake-authz-08__;!!D9dNQwwGXtA!U3_P8Qj1WSS5yxByX2U4HBhNmfdSy3P07RYIK0Vvw0fMel67Iscv6-GeqbouVrJoD-XJy_sj_P0$

--
Lake mailing list -- lake@ietf.org
To unsubscribe send an email to lake-leave@ietf.org