[Rats] Re: draft-ietf-rats-endorsements-09 ietf last call Opsdir review

Thomas Fossati <tho.ietf@gmail.com> Tue, 08 September 2026 12:19 UTC

Return-Path: <tho.ietf@gmail.com>
X-Original-To: rats@mail2.ietf.org
Delivered-To: rats@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 574A31370CF23 for <rats@mail2.ietf.org>; Tue, 8 Sep 2026 05:19:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1788869954; bh=Nz3AGsS4AACCLt92/sdrcFbZCQtFPzcgo48po7QgB5w=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=NyGLrF1iDG1UkV6QW0hAexK/kLolQlrXN7+xOlJHrJKVCQh8tvv0z6+ZwVcbQ/+e+ mYZwtACJtpFcOOXimDWP/wfLkKdtNgPzJISkJcsrlQxF/KXuyoWKfGiAHOWWxyusHT FXIiGJZW6vjos7ndY+p74fEtbjzM3f5aV1Y8Cpio=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00y_3mYGs3Pl for <rats@mail2.ietf.org>; Tue, 8 Sep 2026 05:19:13 -0700 (PDT)
Received: from mail-qk2-x10.google.com (mail-qk2-x10.google.com [IPv6:2607:f8b0:4864:34::10]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id E30591370CF0C for <rats@ietf.org>; Tue, 8 Sep 2026 05:19:13 -0700 (PDT)
Received: by mail-qk2-x10.google.com with SMTP id d75a77b69052e-52fb2802b7bso7022831cf.3 for <rats@ietf.org>; Tue, 08 Sep 2026 05:19:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1788869953; cv=none; d=google.com; s=arc-20260327; b=KOLUXLYmLG2fhGwsZsBX/aTpWNZrTUODaIKEsC+xfZGfgzCib8xfp+/7/YBPmYZCre YNJc5IXR0ENQ1Ibep7hfkzGgQWF6gN1/gVB88kGnXZNMuc/uiYen21kwWDiez8hOmLVl fMC2/yqgoOxkYgaLdzS0GiU2BjhjtrHdzUegC5ltMM24/HejgjzxNTdlLHCq/t5ukDH9 H94KGNDEeP3WeoY9+gRWV8syU2Up33pwvDh6c/oxiTBHk98vC9XgAMNYKRFFjPOuVvil 5aPHNY+uY8I9SwxmsBlVciFAOnuBLVxo7nhkuJBTsll34IK1yj7o+4/vGqJH8RbhoM3w ClWg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=Nz3AGsS4AACCLt92/sdrcFbZCQtFPzcgo48po7QgB5w=; fh=4MNJTo8uM6Dm3oIT1tb8pBPra558QxZchjmXHkz+EC4=; b=P4v2xgo3ycU6+YG9AzcIVnXyFEDE/p0UHXnh6lzAPkcb9+ri7ioFcgSfkk1/LR/UN3 YmrPM3nHGJvtnm9NEOy1ajU8kuAB1aX6ujlUaWHIeLz2Ujwy85SUYEB3z3bgcbyULwKU lVrcjdiDapnvlGqGsu++UEyLoFNXzzUPp9S/krlBitUUqXvkAXr7twN5oqGWUsZHkcac h5NC3+20+6fKq+nWZ+jN1WK0GZU87gUX4/HnWaGlx4mcQiQss75WmMZTCxs3b1TkxDzw /lMWDmXhK67gH4W2mTQMHTNMH5mUAS+LvXzVnW4voMpVFqkH5WU4AgGglT8APzwQudvB Zsrw==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1788869953; x=1789474753; darn=ietf.org; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:from:to:cc:subject :date:message-id:reply-to:content-type; bh=Nz3AGsS4AACCLt92/sdrcFbZCQtFPzcgo48po7QgB5w=; b=Kfx4d94psaElWRRZhYYqRaIe9thKpwCTfyKB7ACRY5LQ1wkL3spnBuLBdd7KKMEo0D 4hiTyjHuNiFHyPc/SWcVXncp5VQzujZgEKCiBYj+QOv2r75HLUcEgNjSZ6bs8ilAEz5t KKLCFzXHTZuP9ayVnh0WbGteZ/5x5W3Ui36q/PezzD9SGKd/pPR+2YZLr0LYjvOhmavF fI5WaszE8Sa8cIM5MquyQy9KyKr5K7sy8QWp3xWMwKGLEtY6TyIrzLTguIvzt3P4GFF0 4BYnoYtnfxL8mlSWQiglWlzPBeu72XtEJzfIwxYLwIoO65VDv+Ji3qYB4Q8Jt/OtRmwn iu5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788869953; x=1789474753; h=content-transfer-encoding:content-type:cc:to:subject:message-id :date:from:in-reply-to:references:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=Nz3AGsS4AACCLt92/sdrcFbZCQtFPzcgo48po7QgB5w=; b=n71Y/UR4rWo1xYdkEfS1EHWtKZZnQb/hoCuobnmo5wmC7Sotq4EfeZ9WaaFDcuzpbP Sk69zsFzCDYDX06wFS8K0FEdWgy6zNuhj34hmGDRFyQaJr9UgDvG2NyYjB8lLI1KKQab WDkKCqns3ySWaEgVoWVkzt7fXwVpOA7YK4b03+9QSzLFXAJTWj7ETpD2TstPS47sXq4O d1OxjkmgBCXv0cr68iI6zpL5wiaGzxzOztAKGbtBLcVSKcVEr0T0BHp9iZoY49/uNfJM y/u8f7uEMhaaTJBVIpzCU7vZpIl7ae6FjCo8HRdzRUHf9RF0Do0NCbewj0fbG/sqxOI/ x3Dg==
X-Forwarded-Encrypted: i=1; AKwUvBx9jxlimHvrRdaXQcSJ3KuXnYqqtDEPnPg/ZKidSO7KCHycyX3vRFOm3BqRQdnA2TDl6Jpj@ietf.org
X-Gm-Message-State: AFuF++knC1XPPK2hFoJZjA6qFDtKyzSHej+k24Lq0hwwOmvG19Jo5P4k aa0Lzs/5EDo0vBG9lbWtoVp2sJcvpCTpcDS3dt1yCCeh2NDdaXAwTfisFYRxcFvon6h5kX+i9gj jp/8h7CkkRYSoADDGW1Pod6ZGZbJeQQI=
X-Gm-Gg: AYBFou2h4QEtEUQLn7BEF0YZCur4wBGmcM9zq19SxQkzVse2uO5cKxe78Qkkwz+Im09 Z6fmCGDeuG7bHexkrqi8xLYNisx/FEoSXhMSSkw21kY7tlvi0US9jmRFVn7CPB3o/Zj7v35qDos Z2h4l5jrhalk5486at+3ZJjJIZqdr0mqsELlHYP+GanRy/yEM/RRZk6J1GxWxSyeJeETD+dZdMC gpqxPikeWJsUbp5nkMEzEdSySqVWgE2ER8NECb+ePgqYWwP1u4fbe81yR8qhLjLyECQIDekR+JZ oiqr/i3VmiDsBq6ayDWzRqe5rJL6rTD6y2cgvjcWOt1qtrJB3KLz+oSHW8mCNmMV72atTj4QNs0 l2mDv2Rc4B6UeMODz2pXO+BGqbfwNmMFjP8HvCBJCS5bQ2C297OgGf8Hyo50=
X-Received: by 2002:a05:6214:4c03:b0:910:45f4:ac3e with SMTP id 6a1803df08f44-91045f4ac49mr154299176d6.2.1788869948704; Tue, 08 Sep 2026 05:19:08 -0700 (PDT)
MIME-Version: 1.0
References: <178873892107.568814.3153573559886095444@dt-datatracker-9769b79f-xztnc>
In-Reply-To: <178873892107.568814.3153573559886095444@dt-datatracker-9769b79f-xztnc>
From: Thomas Fossati <tho.ietf@gmail.com>
Date: Tue, 08 Sep 2026 14:18:57 +0200
X-Gm-Features: AcwNN1VPlhYRs8OUN8qWYgq-3cGkK_IjI6p59QhrwiB9nfGGW4n4NTB7E_k9O3Q
Message-ID: <CAObGJnOovOZfKXYz+7Jc-m3VNaubL5ZyqC8RG5DyuS5CJ1popA@mail.gmail.com>
To: Jen Linkova <furry13@gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: H2BGV3OLQ3NB32QHYKROFENXOVNY645Y
X-Message-ID-Hash: H2BGV3OLQ3NB32QHYKROFENXOVNY645Y
X-MailFrom: tho.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: ops-dir@ietf.org, draft-ietf-rats-endorsements.all@ietf.org, last-call@ietf.org, rats@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: draft-ietf-rats-endorsements-09 ietf last call Opsdir review
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/18BGcF_ve1b9AV8krbAbiAVhkTU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

Hi Jen,

Thanks very much for your review!

I have made an initial attempt to address your comments.
You can view it at
https://github.com/ietf-rats-wg/rats-endorsements/pull/86/changes

Please let us know if you are happy with the proposal.
If not, feel free to suggest any changes :-)

cheers!


On Mon, Sep 7, 2026 at 1:55 AM Jen Linkova via Datatracker
<noreply@ietf.org> wrote:
>
> Document: draft-ietf-rats-endorsements
> Title: RATS Endorsements
> Reviewer: Jen Linkova
> Review result: Has Nits
>
> Hi,
>
> I have been selected as the Operational Directorate (opsdir) reviewer for this
> Internet-Draft.
>
> While these comments are primarily for the Operations and Management Area
> Directors (Ops ADs), the authors should consider them alongside other feedback
> received.
>
> - Document: draft-ietf-rats-endorsements-09
>
> - Reviewer: Jen Linkova
>
> - Review Date: Sep 7 2026
>
> - Intended Status: Informational
>
> ---
>
> ## Summary
>
> I found the document well-written and easy to understand. I am on the fence
> about whether to make it as 'Ready' or 'has nits' as I only have one comment
> (see below).
>
> ## Major Issues
>
> No major issues found.
> ---
>
> ## Minor Issues
>
> Section 2 does a good job providing a brief introduction to the RATS
> architecture (RFC 9334) for unfamiliar readers. However, it would benefit
> greatly from an explicit explanation of what Endorsements are and how they
> differ from Evidence, or at least a reference to Section 4.2 of RFC 9334.
>
> Currently, the distinction between Evidence and Endorsements is left implicit.
> (I guess it's assumed that a reader is familiar with RFC9334 but then such
> assumption would render a lot of text in this draft redundant..So IMHO it's
> worth trying to explain early in the document.
>
> Figure 1 implies that Endorsements apply only to the lowest layer, but it is
> unclear whether this is a general rule or just a specific example.
> Specifically, it would be helpful to reference or quote Section 3.4 of RFC 9334:
>
> "Normally, Claims are not self-asserted. Rather, a previous layer acts as the
> Attesting Environment for the next layer. Claims about an initial layer are
> typically asserted by an Endorser."
>
> (it might be also useful to mention that multiple Endorsements are possible and
> discussed in Section 6).
>
> Cheers, Jen Linkova
>
>


-- 
Thomas