[Last-Call] Opsdir last call review of draft-ietf-rats-architecture-21
Joe Clarke via Datatracker <email@example.com> Mon, 12 September 2022 20:03 UTC
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B771BC1522B6; Mon, 12 Sep 2022 13:03:50 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
From: Joe Clarke via Datatracker <firstname.lastname@example.org>
Cc: email@example.com, firstname.lastname@example.org, email@example.com
Reply-To: Joe Clarke <firstname.lastname@example.org>
Date: Mon, 12 Sep 2022 13:03:50 -0700
Subject: [Last-Call] Opsdir last call review of draft-ietf-rats-architecture-21
List-Id: IETF Last Calls <last-call.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/last-call>, <mailto:email@example.com?subject=unsubscribe>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/last-call>, <mailto:firstname.lastname@example.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Sep 2022 20:03:50 -0000
Reviewer: Joe Clarke Review result: Has Nits Sorry for being late to this. I was asked to review this document on behalf of the OPS DIR. Overall, I found the document well-written, though dense. It does describe a high-level architecture for remote attestation, and I tried to divine what impact this architecture might have on operators. I had some initial confusion (for example, what endorsements are provided in the ROM example), and I think moving Section 4 up closer to the beginning will help the reader set some of that initial context. Operator-wise I was a bit concerned about what some of the process might mean for troubleshooting and overall system performance. For example, the TLS handshake verification, if implemented would add more parties and more time as it's verified (if I understand that correctly). That said, I debated about whether it's useful to raise it as an issue here or later on when such implementation is defined. If here, I think expanding on the desire operators might have for remote attestation and the considerations it presents on overall system understanding might be useful. On the security front, I'm not an expert, but I was expecting to see something about any risks with combining roles such as Attester and Verifier on the same system. Maybe there aren't any, but that hybrid example got me thinking what would be the risk if the system doing my background check also evaluated the data. On the nits front: Section 3: You have a "Section Section 4" double word. === Section 5.1: Double "the" === Section 8.4 You have a "section Section 11" double word.
- [Last-Call] Opsdir last call review of draft-ietf… Joe Clarke via Datatracker