[OPSAWG] MUD URLs in QR codes

Michael Richardson <mcr+ietf@sandelman.ca> Fri, 27 December 2019 20:21 UTC

Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: opsawg@ietfa.amsl.com
Delivered-To: opsawg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FF891200E5 for <opsawg@ietfa.amsl.com>; Fri, 27 Dec 2019 12:21:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4F-qQg7oDrS4 for <opsawg@ietfa.amsl.com>; Fri, 27 Dec 2019 12:21:54 -0800 (PST)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDD0912006F for <opsawg@ietf.org>; Fri, 27 Dec 2019 12:21:54 -0800 (PST)
Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 5F5F83897B for <opsawg@ietf.org>; Fri, 27 Dec 2019 15:21:42 -0500 (EST)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 77176188F for <opsawg@ietf.org>; Fri, 27 Dec 2019 15:21:53 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: opsawg@ietf.org
In-Reply-To: <157747775630.30053.5347103002138442020.idtracker@ietfa.amsl.com>
References: <157747775630.30053.5347103002138442020.idtracker@ietfa.amsl.com>
X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha256"; protocol="application/pgp-signature"
Date: Fri, 27 Dec 2019 15:21:53 -0500
Message-ID: <32315.1577478113@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/opsawg/_ZzqcY1sFUjfhq395q-ipyRoWeI>
Subject: [OPSAWG] MUD URLs in QR codes
X-BeenThere: opsawg@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: OPSA Working Group Mail List <opsawg.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/opsawg>, <mailto:opsawg-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/opsawg/>
List-Post: <mailto:opsawg@ietf.org>
List-Help: <mailto:opsawg-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/opsawg>, <mailto:opsawg-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Dec 2019 20:21:56 -0000

internet-drafts@ietf.org wrote:
    > A new version of I-D,
    > draft-richardson-opsawg-securehomegateway-mud-02.txt has been
    > successfully submitted by Michael Richardson and posted to the IETF
    > repository.

URL:            https://www.ietf.org/internet-drafts/draft-richardson-opsawg-securehomegateway-mud-02.txt
Status:         https://datatracker.ietf.org/doc/draft-richardson-opsawg-securehomegateway-mud/
Htmlized:       https://tools.ietf.org/html/draft-richardson-opsawg-securehomegateway-mud-02
HTML:           https://www.ietf.org/id/draft-richardson-opsawg-securehomegateway-mud-02.html

After a few false starts over the last year, I've completed the bulk of the text.
I have split this work off from the "smarkaklink" text that some of you may
have seen as it is stand-alone.

I have reached out for a few other MUD experts to ask if they will co-author.
I hope to ask OPSAWG to process this document, if it has enough support.

There are two items which I've said the document will deal with, but which it
does not currently do:

} A issue addressed by this document is the question of whether and
} when the MUD file should be specific to a specific version of the device
} firmware.

This is just text.

} The third issue is that an intermediary (ISP, or third-party security
} service) may want to extend or amend a MUD file received from a manufacturer.
} In order to maintain an audit trail of changes, a way to encode the previous
} MUD URL and signature file (and status) is provided. (FOR DISCUSSION)

This is new mechanism, which probably belongs in another document.

-- 
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        |    IoT architect   [
]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [