[Lake] Re: WG Last Call: draft-ietf-lake-edhoc-impl-cons-06 (Ends 2026-05-18)

[Elsa Lopez Perez <[e-mail]>]

Hi all,

I have reviewed draft-ietf-lake-edhoc-impl-cons and I support proceeding 
with the publication of this document.

However, I would like to raise a minor point.

The document (particularly on trust policies (Section 3) and credential 
retrieval/validation in the side-processing framework (Section 4))  is 
directed towards the public-key authentication methods defined in RFC 
9528. Since the Working Group is working on standardizing EDHOC-PSK 
(draft-ietf-lake-edhoc-psk), I think it would be useful to add a brief 
scoping statement in the Introduction clarifying this.

EDHOC-PSK introduces additional implementation considerations, such as 
indistinguishable error handling of message_3 to preserve identity 
protection and resumption PSK lifecycle management. These could be 
addressed in a future revision of the document.

Best regards,

Elsa Lopez Perez

On 5/4/26 11:02, Mališa Vučinić via Datatracker wrote:
> As discussed during the IETF 125 meeting in Shenzhen, this message starts a WG Last Call for:
> draft-ietf-lake-edhoc-impl-cons-06
>
> This Working Group Last Call ends on 2026-05-18
>
> Abstract:
>     This document provides considerations for guiding the implementation
>     of the authenticated key exchange protocol Ephemeral Diffie-Hellman
>     Over COSE (EDHOC).
>
> File can be retrieved from:
>
> Please review and indicate your support or objection to proceed with the
> publication of this document by replying to this email [e-mail]
> in copy. Objections should be explained and suggestions to resolve them are
> highly appreciated.
>
> Authors, and WG participants in general, are reminded of the Intellectual
> Property Rights (IPR) disclosure obligations described in BCP 79 [1].
> Appropriate IPR disclosures required for full conformance with the provisions
> of BCP 78 [1] and BCP 79 [2] must be filed, if you are aware of any.
> Sanctions available for application to violators of IETF IPR Policy can be
> found at [3].
>
> Thank you.
>
> [1]https://datatracker.ietf.org/doc/bcp78/
> [2]https://datatracker.ietf.org/doc/bcp79/
> [3]https://datatracker.ietf.org/doc/rfc6701/
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-lake-edhoc-impl-cons/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-lake-edhoc-impl-cons-06.html
>
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-lake-edhoc-impl-cons-06
>