Re: [Lake] WGLC for draft-ietf-lake-reqs-01

[Michael Richardson <[e-mail]>]

Stephen Farrell <[e-mail]> wrote:
    > The authors have asked to start a WGLC for the requirements
    > document. [1] This mail is to start that. The deadline for
    > comments is March 19th in order to give the authors time to
    > prepare for discussion at the upcoming IETF meeting. Since

Hi, it is my understanding that we do not plan to publish this document, so I
guess maybe this is better called a WG Consensus Call?  :-)

I have read the document again from beginning to end today.
I haven't read Stephen's review yet.

In reading the AKE Frequency section a thought occured to me.
Is the NVRAM/storage requirement of the AKE important?
In the 6tisch zero-touch situation (including 6tisch-minimal-security, where
we do not use an AKE), there is a need to keep the resulting OSCORE context
alive long term because there is a need to rotate the network keys
(and sometimes the 2-byte address).
[ draft-ietf-6tisch-minimal-security-15 section 8.2 ]

That's just the infrastructure usage of OSCORE.
The device also performs some application, and that application may need one
or more contexts to remain "live" to continue.  I thought we had some text
somewhere about resumption as well.  I'm not sure what to do with this
thought, maybe this belongs in section 2.10?

Overall, the document is "good enough".

--
Michael Richardson <[e-mail]>, Sandelman Software Works
 -= IPv6 IoT consulting =-