[Last-Call] Re: draft-ietf-lamps-csr-attestation-29 ietf last call Artart review

Hannes Tschofenig <hannes.tschofenig@gmx.net> Mon, 19 October 2026 17:40 UTC

Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id CFBB546; Mon, 19 Oct 2026 17:40:32 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=gmx.net header.s=s31663417 header.b="YsM/n8W2"; spf=pass (mx.ietf.org: domain of hannes.tschofenig@gmx.net designates 212.227.15.19 as permitted sender) smtp.mailfrom=hannes.tschofenig@gmx.net; dmarc=pass (policy=quarantine) header.from=gmx.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.net; s=s31663417; t=1792431626; x=1793036426; i=hannes.tschofenig@gmx.net; bh=lMyheVgFWB0odju7iQO6YeKMxeLbKe2A4dUlgY6XkIs=; h=X-UI-Sender-Class:Message-ID:Date:MIME-Version:Subject:To:Cc: References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding:cc:content-transfer-encoding: content-type:date:from:message-id:mime-version:reply-to:subject: to; b=YsM/n8W2SWeZBHM6daJb9DJBPXHaFnhBeDeJ/W2xA1rmDSAnhCgnrngpVz0HbZby lenQmqqDi+lxlj6dh6fhedaCWL8d/5ZinC8qmupYIgtp8NcpZ3VhXeaV+8LiZwLN1 yGLhS4UIRYAerJTrjpIW0er+EjY5FADqPGyx8co3GGOgntmkpXcvoSjGBLHzAtQR/ IZmIUdsh/a0F9Up0btMQJ4j/Kz8CRDTlSOW8zVfuYhiUP8DZes9ksiBy1VfG0L9t+ 2CmIGdogOsqbtj3QzquKJwuRWgJqVly6Isi5wJUZfZ42nd17P51nRxx+aoVJiq54Z DCK+nquCzCgjuXeMzg==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx005 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MhD6W-1wepZL3UTi-00oCrs; Mon, 19 Oct 2026 19:40:25 +0200
Message-ID: <3ada68ed-7cc1-4538-bd46-0c396321309e@gmx.net>
Date: Mon, 19 Oct 2026 19:40:27 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Sean Turner <sean+ietf@sn3rd.com>, art@ietf.org
References: <178926453261.390265.16542425488183466209@dt-datatracker-597c8c8754-4t7c8>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
In-Reply-To: <178926453261.390265.16542425488183466209@dt-datatracker-597c8c8754-4t7c8>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:IQaQGLnSH5dMsLgFm+wf7coAsx2ELvHMAlO65vfn6/YXMBJ2BeP QUqEojuoxPji5XIaA6mUST+OqNd8Hk+wvY9OHes7El7PfBitExP5bsAt6Jh3j2pmhSBpF1g tAgLbc+2MordrKEXqrCO41j7eP3U0WHkt77X23GIU1xsBeX4w+IKwF9/O9sP/fAM5paTWXX awh8o+M7QVzzADjballUA==
X-Spam-Flag: NO
UI-OutboundReport: notjunk:1;M01:P0:2vViWa8ttm0=;Ra6OLhnr7T3p+rVgPA2Fslmlcz6 VwA8+mCO+zSFRRN9l1WX6lQwgRj/dkIk+FH8qtXCGgsgA62dilEMEux9xfPe5Gndhm+OSXNjd qpMQuiTdcZqA+QKLAKgPwT9deLzroVRGpj5AUR4u1saAGqSjcqQHLRg/WXwLnqClyDwMn7/2f bmHaPf6g8sMaN1zKdrrkqQ3a8ziMdvWLcwVOqGUkjnBinO4cuZSurLD8Fj4rHT8s2+mH/B1NC CiwV4NW+JjBctlskdTO+MOTZ9kCQOqubeyGne5S6C4567UiATFpQbhNGB62Ewt9TLTWZgozRA rUNI8FhzgzYJpbXKLSfaSFe5tKUWad3rRQxQKOsTPwEwUTbh4+GI3X2Gs80qt0FKl2F2ckkcP rdIY9i+iCar4vNKilc/IuYTrxSOYBFturomkYf664ZdclbB+wNlrAigmEWd43FfWVkbj7WhIs DvyBqzdWPp66jcSLoPVIT10icyW6SXy84/XC+mD9O+OY9iKQbxXggSSA0EVVJ+8QL6833qEo2 fyDJx20aKje0RpRFyqtJbwm4MJRjOyUkKU9rNQKx5XBg8OH+XgspzL36pDZGJJBcx641HdDhH lg5WKJ0VJ4Xr5ZuaLMvhFUkuYzQebWAsWLxu6PPf0YbSij4/BKHmo1LQ94XGSHqKW04czpK8M TX1sGcWSpeJGVve8fePtzDvaUVB3M0aZuQPm9zXT5ZFgcXJgypN7A/OjjG/7KpTv2pQhjb+WR LKqaxU0mW93G16BIpGRCE4q3evoF1doQJh5Z0i7SM2HQopS5w5Qsd5lHFASbht1wRaTByQ3XT MVDpVx+jpVRV2PL6GIrmLOKTovDleSVkbpLCKdjim00o/1ZXoV3PX8JxS3rgOtsGL68qDPQy0 7kZLHzFYYkSdR/O42DtIp7xwWZIUBriDZ0v0GpJJwU3HiF74YOzcnFRGbNHyHXPbUiIW2XBdZ UzUSXvIm0cAnluZGytg7PXoNxaBr9omTNibUnqEPCIhdjwJv/wc+dK94YjqlNlev0uzHhBDu9 7bGuDbrjK7qyS4IApfjnBKbVQ1J9I4S0LTOieVqWbjbHkM8ge+bwl0/wCHE1qq3THFCZNr9JA ftMPdO1GP4KoypdvTzD5swktTwp9KjcOq04TMFukq4GtukyHLMbEJnCdk5WXZDS3Pw5mhauQH Qja+UFuCwPQ3SRzMHnxaosNgPYS83fv4xxDFd9YTMArY92s6CYgaQsj3W4zXKgHhRyQu7G2l1 nGhDxkXna6uB2ouyXZHidsUW2u/xLa3sURTPFCtk5sYoW8memLnQSG1CfQVoDRXhkRwDWDdK7 4ysqlP7Icf1kjgKUTQ4gTULaah4hvku+IHbAdaO7xMHG4BiiJQY8ig4I2yNsMCxit3/WpvRDj /ShoNoUoipVhacmRUuUECHNclVGCGcc3TQ0Khef+2Kk6Y9Mxzsq+ARpPsaS+1oWRAK1XPRzjR ZY4M7GfU7AYsIaF8kfP6FRv1sfWgxsavG0tkq4DMhS2WPa9K0/1uW7pPR/QZPDyRcVzrRpyT8 LbuMAo0ov0milqPJimY6W1KyYjpZYCvpPIE+Qe/yJPYYNlFLdvUWvNTGiXixwRKAODDf9D9jU Aj1rNLefSvp1v3nplCKUwXsjEiOSmvOuUXFOdjPqzOLBRQ+D2okqK+m9xZUbrz2bkCwdfDovd plLnRdRy9Ygz28eFXPRWHlUTleiUdriLLTtWRy8ukLiZbOc5NUoXxoxw7fg7Dz67VJqvjfqVP BCB2JQGYW8/MwQGELuCA/qu1DJ2an9zGLX98XiFnAlkIcqy0B5vvkRJgUJu28aEZoUjwGQy0z l55D8nIbxiS78INwJxE7OkOWQmYvXH6tq/3GiuUaMlaACPYrZSINEl86mDh4d/YSioZ4poWSe huwTSxotfj34ixoVfAwMtGBmW4OwxNiRxn1RXE1QVCrtzlVMKk0PG8Gpt5PU9PZQq15NZm2qB 6gosOmdvDTAltjY411juM6whbZ+S3sA1KX8QZGRyl1OtOqlhKo05jrCk7tX14WOJyiC9KQUCD zzecxmFpzM6xBxn921Q8/MvcW7EYwoZlu4XSKI6X8xj3C1H8SALSpqdPr5i9VQUIM9vb2yryc iqDtxGDsxbCDUP6431Blz8qmcFr9lFxHYyuszwT0j//UGBluDeUBsl2bUzV9kjLfjdyWx4DnB Pxi1/l+BLtwJqsEr0lVGOZRjYc7Ql4DQWTkWDGRIgGInLjj70yXM0xhvD0qMvIyBmg8X9tbJ2 b941PcggtUE26QW4D8Ggn0NL3UuVTFGh0kxzz4xYg8q2yq2qYOghAFgLj+7UEwCHGnKo6j27E OKQUK9De+42aHCTif30HcfymtSTuYWqsk517Py1aXrcmy6ENFaevDJfVQ+UpYS02aSTTe5uJ7 JzJQR1woHPAUtCRvXVLhcAduc4LAKshyC/Rl8l9XKKOag01Z4pBAYCUERZ2Zmk7vLBtA2DFR+ 1WxVbr1iPdBZseSV38aPu4sgICSIaZmqqFYrdV0OukszzZwrKMLbLdkhRkcTAXvivDCx0g9wA mhPHqJBJhbnZtRCA8P4vrbu5DkJpgL+t+jM03jJ4wJgyXdqhPe2QhYpju7biJ5o6W/9tYogR4 aTvAu3Q2exXFIaOpoNQd21gYG8SQ/tpBmGwqiEFZOEd63dY6Wr6Zi3fptP7aEoBahc+uQ461J +mnBc75gcZz1IcvzIk76EoHfeXpsKgAPWKAG5ejzqa/rCmr6M1tzGzvIWDvQ3LgkAayymfC3C yZiWgGeGmNhYddgV6m3g0aaPnGCpK6GuXiTIZOXuYQ3++RbuaKMh03gLts5rq2uB1rKkJGstJ Su694dnY94ZX1R/ToQq0RhqmWzZzsOeXPU223p1pCHhNoa9g0dm1SnNYj0ZeUY8LYBAU3PdIP 0hNZ3d1JuvPkFacFVBHaZPRpdXYgz/kM1mw+DjpPN3Ke6nLHm9TzW1qtjKygX9fL/ff6hwFbK 9P+yhX2FhcNaYmZ06CK5QUGheVzSxn+eyFcn4qd3mZAp1Ac+R5iBME9b1zApm/bsgSAoCwqOP Z6H3E6q+9BjwFAsTw+n+twm7dJKWruMfQotoZSZ/XVslY4ywou7UqWkc4pGdm+ziZnF91C7/r bmqrGdY1aCN2sPuD4QC3HSrqCdahWpHE5ydUIydUZToRXI7RID+IHam5V+tbJQLIglpKVPbrX 31/atVYwxP+jh/LAxUfFkbL9LRDqFaFz4estj7CCTl1FwkRmSZexTAdWFHjFI+89C1knctW2c 8Jaf0R4swMBdo7wIoqOAXvHlz6rSXxRsnRWXJqdVY2573/XoOEhxEqaeruc9ff74oEcXJZM/F JtgqflWv+1eVNJZ7QBmX8+gNMV5GooJheIONIYRGs4AN5tw4ZLrMxR2vM+C0k+yZ2XBiVFWuM z5fXPmlMTCQyX8MPQS60n6rDzMW/VEC0yKu4brimqBkhqQql0TFnezv5V3OdEqBKFo6cPHlCo S5Qg58Ty/N6sArf+30Wi5/NZPDj18F7hAOrUEaitgeqqtRCmRdUXog1AwKv5hwb8xWcIKBezb JAYkGON3ihcHeFobsMs/9h0pHWheo1qWhJiy/pmNza40LGyGiwEx+lqntcXymLAwLg11o8sI5 YhmwbHtG5MNo11G93nHa7HBrRf87OeFQ5seVw+jkBVd5wjA1YeqCVOV2M3LCsbK850zQ7y5X0 rNcxEIKgAr9qjRfaC9LP0Xs11fmMDCHxus5JeuvAI51FPkWgitePhYAXYUFCYP5PcZTWYXHK6 w9AjAV4+jLJMndKGNSoFQQQaMG1rBnfkJ3zNo42Ugw8+5+LtqWp+Ezk+LX561t/ETMVIRAyMC 0/qEM5bwfp2oUFt00NhKbX0vHpFq012MvaAOhpKGGLeS3/jGZ9FKLi6WR+3Tip3VepiyBtRiy 4lbUFF6OMlBF+mt/XOLKINcelnkwKLQhr30+IBPgYKV7MXERooLLEyL0X5R4dIGI/F1PtMAiK oMn0SFlgqUMS5PjhrTNNHdC9EPlxbASEEAvkaL3fH0U4wHDOEqdWaZPZ5iArrAXrVM1ruXJIZ hFiLuc1eLklfoAN4zf0Fyor/uuUH+6PeNsYtPFG1k2nd3RsBM7KPqSi4VP/WpbyzKQi0o3AkU 3DS1UmSsu/19DFxkhO97paflkV6eeVq4DIe+TNk52kZNtb924wWjpJE1LOFsp4YtuhN4SuPDn eGJItc+kjGwHBMtboCwCxvhuzmsWOgS/XmAKk4E2ZrwwBbCkIMZ2ag9WPeq6ghmSxgb9fVN7I w/pNEdYVLaAqGJfECAlVP5wNUIWMBTzS6Euyn1gWvmIpu2IScvz7xBwQb1hbAHJw57KATIAc/ JrbnFGIVk8EsLevxtpTIZO2DaOn7hTy3Xep0NKt/HFVT+266ZPtFAZjMva71pmHTTemPqTCdZ 4vHrj/kMrxtiCtdCNfyUwBumPUxRO7nlEoCML/ZrG11u2GhvPGSAgmJ/6glqPZpzOBuyZjEJC 1r0JQF1ykbOPALOjTG6avWjw/vdZmYGOqvgg2+TShHOtHyZp/7mef5epMt4SD44FviPm8k+dz Dr0W5pPBOy6YK0Zntf5862YHXanNJXzCzIcEw+hZeFKRU6F24duY48L9BBF2l2MgFSzM8B44n iBvBAAmNQmki9pFaqX6UPL9WMbaJTAeMrTRYvqF5cvPQCtexEKGPZLv8AMklCzI1d+cJXw3GD orfdmBc/X4Pd8fB8eTRXu3Ko9c4iHKStfiZ0kuJgbaRDTYGLdnUKTKt2sQo7rf1xWJ3bFzSgf suQqkTGwNkASlUVaZfppsRyC9qkaPEZOiF4fYNCJLIv9uoYfUK0ADQ9LLI2jlBrFkrUfGf0n1 EVwmfEyKaPSb0eofTlMu+GTgyqCHNaaMwE1fNkygDNW11gXfNhluS+HYUu16POzbWZ1uOLxgp qLfGzv9QlpiP7YPrCV2HlgMaFgoTj6AdF+KRboM1b9hj5rl9skgxTdwsy0KHnRpLs8bOjRqK4 9gWjj86LZiz262iIrqOyRb8WvMOFWZVJEgWpokHfTBy9DvD/Z51x8F7cHAnVqSV6NSoSiAvcL EYWa+pDp6HuQrWk0DAFYDGNDWzxhx3lWJ7FjhZEu43sh5CGX5ASgA/UGMhTbUPpMdJ1yilA5j XxmaPKEDVJZaMkbFxnNeIyYRvwxuIGXS8eGM2drU0ZdBglpy4uC7dmL6mZcewf4WQpH6dCcsS W+VLmwXyR0SJWmbSsRUgvnwyk0LfVFFD30dW+1Oz3wv8eCN/z7dbHikexHHuthjN4ytobjMJZ o3sOmevWG9ogeNZKiv/3wU98TomImsGagunlm30/CoKlVcQ7tfbcUtxOqCJ8zg60/5/h7Bgcu 3Z5YMzNQ1jAO/cddx4zj4aSfa7h4XLLPizHbZQ0wKxeY/hduTYTFLW5svtGWdsWdUAVuI8BWh jxivrgVUSCUe4HInClDl31+YlbkSYBOdK6/qgcYE0RcHRjWzbyqP9yMEmtaKrHHCzEoCcQiAy wQSQJeR/j5ptluhDavv7BxDcWwAUHxd9S9UNPS1jWCnxqklTFxj7fL4DKlLJGy+9TLsWizlud sdXSXoeYx79bacrhKJcrNC7DYvrIcojwad0MGYfWBtC/LHR27YICVpy6dcxXO93MEa9w8KIR2 hFfoI4zEmZE4JPRd4ddiEZYjF/NZxRk8jbgnqyMm5saPv3i7lPDzh0IgTA+q+QIAoMVkNXYv5 qNKHhD2BKX+eQLX45Y4vnIOpxXvFxFwlka/uwcXFS1OGO1WbpuOcIm4yc+fdhYDiDCbblIUEB /whE+E2mUm2fGKDBPuHiEWzEdhcOKMNCe9xrrhpO9864V6oOtjVQoptAk5w5UTPDtUYJgvMF8 3dYVXePD8Xm449u8j3xCjsr3fz9TPfvF+XM1S6JQUwJ1RTJ/m1yCLb+0eoFzJtoZoY6t3oJ2Q g7NAfNOM9Lbn829Q+e7j4nYfKHQPvKqkOQlkJt45s7lQ/k2M3/be/5hC8xkOsZgXFJMD1X6b5 hBnwKHj94nRlPdu/neoUGvck87pkrXmpr2vJVE76j4X8AzrPF6MdwbNmH/Zf0nM155BnFteSi nFonq2tNx5enDL0T2rQ2MDbmZxfpd6ee3bp59RXHtiPKbSOksue29QtngYvh3Yi4rdY6iENV/ h7o7IV5DEAJ+Aq4d0AVJELw7pxYgy7yw2MoyLz1GZ0gmFYDJLUxJ40DRn+R46235/iQVJqgFS dlHszvBcLHrkx/N7PfDeYMWH0AbsCgC9bBJp6GvEp7kaZ7savqGQX2QnpzB6+NJdyEYmRcrRD qkVmM2yaNp7eHvIUWZmXQUdaQUmb/MGqbtN0v5zw480dlM5cH8qvvYFQib77fA9ujxwDPN+e9 h+0IJ5Wdw4lZrbPygUy8CCJ2yJ4wT5JSyv5zqPE5/uWfK7LndxjFxJWDNDTzetd1d3yb7+4Mo xeLb1bNRfDLnxG2aj/NAlUaGqw==
X-Spamd-Bar: ------------------------
X-Original-From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Message-ID-Hash: HDIPQUY2C3ZZ2VWQ2MN4HBODNREKV7FW
X-Message-ID-Hash: HDIPQUY2C3ZZ2VWQ2MN4HBODNREKV7FW
X-MailFrom: forwardingalgorithm@dmarc.ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: draft-ietf-lamps-csr-attestation.all@ietf.org, last-call@ietf.org, spasm@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Last-Call] Re: draft-ietf-lamps-csr-attestation-29 ietf last call Artart review
List-Id: IETF Last Calls <last-call.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/last-call/rLSQrwDzYwdDjM_xK2yvJ0KNxKg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/last-call>
List-Help: <mailto:last-call-request@ietf.org?subject=help>
List-Owner: <mailto:last-call-owner@ietf.org>
List-Post: <mailto:last-call@ietf.org>
List-Subscribe: <mailto:last-call-join@ietf.org>
List-Unsubscribe: <mailto:last-call-leave@ietf.org>

Thanks for your review, Sean!

We addressed your feedback in version -30 of the draft. Those are useful 
additions!

Ciao
Hannes


Am 13.09.2026 um 03:55 schrieb Sean Turner via Datatracker:
> Document: draft-ietf-lamps-csr-attestation
> Title: Use of Remote Attestation with Certification Signing Requests
> Reviewer: Sean Turner
> Review result: Ready with Nits
>
> I have only two nits:
>
> 1. In Section 6 2nd paragraph, where you refer to the CPS you could add an
> informative reference to [RFC3647].
>
> 2. In Section 6.2, where you reference EST and CMP you could also add  CMC
> [RFC10002] as [I-D.ietf-lamps-attestation-freshness] also includes procedures
> for CMC.
>
>