Re: [Rats] Call for adoption (after draft rename) for Yang module draft

Laurence Lundblade <lgl@island-resort.com> Wed, 06 November 2019 19:44 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED79D1200C7 for <rats@ietfa.amsl.com>; Wed, 6 Nov 2019 11:44:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CnaIj06vGnsk for <rats@ietfa.amsl.com>; Wed, 6 Nov 2019 11:44:06 -0800 (PST)
Received: from p3plsmtpa06-09.prod.phx3.secureserver.net (p3plsmtpa06-09.prod.phx3.secureserver.net [173.201.192.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 451B2120130 for <rats@ietf.org>; Wed, 6 Nov 2019 11:44:06 -0800 (PST)
Received: from [10.122.0.182] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id SRDoi8733tXT2SRDpi74Mc; Wed, 06 Nov 2019 12:44:05 -0700
From: Laurence Lundblade <lgl@island-resort.com>
Message-Id: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_22AE0FDF-4386-43BE-8AAC-0D4EBC5EB76E"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Wed, 06 Nov 2019 11:44:03 -0800
In-Reply-To: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com>
Cc: "rats@ietf.org" <rats@ietf.org>
To: "Nancy Cam-Winget (ncamwing)" <ncamwing@cisco.com>
References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com>
X-Mailer: Apple Mail (2.3445.104.11)
X-CMAE-Envelope: MS4wfBA9GFVVTfQj7I5zlwtbWHAHhCVjgiawIJcXxWozZNCnKhn0o1Z8uW48nDEPJa9M69gH7oI9H3b+upcTkOGpZiQ/My72kTRUCp4Ikq/HJJP2jwNG052x FMY3E+4x4eMuhCBxt+uFsZ3K1vtWL7Hg0tDv+f4PLvuKSzRvoJjHndEmfkzK+EDQCgrNZDwYuHY41A==
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/1UA2eVSRbX1Ci19qBF9cEH5f5e8>
Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote Attestation Procedures <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Nov 2019 19:44:10 -0000

I think we have accepted that this WG will do standardization for / around the following attestation token formats (aka attestation evidence formats):
EAT (lots of detailed work in IETF to define)
JWT
CWT
(possibly also ASN.1 / X.509)
TCG (fixed years ago by the TCG)
TPM 1.2 signed Quote
TPM 2 signed Audit Session

I think any conveyance protocol we work on MUST carry all of these. I don’t think this is hard. If it were hard I wouldn’t say this.

To adopt the YANG module, I think it should be modified to carry EAT/JWT/CWT and retain its name. It can still have the other TPM-specific stuff in it for use when in TPM mode, but it should have an EAT mode too.

LL


> On Nov 5, 2019, at 2:54 PM, Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com> wrote:
> 
> All,
> Thanks for the feedback and responses received thus far on the https://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/ <https://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/>
> draft.  
>  
> There  was consensus that the focus of the draft is more about TPM based attestations so the draft should be modified accordingly.  A suggested title would be “Yang Module for TPM based Remote Attestations”, the file, once adopted, would be renamed to draf -rats-tpm-yang-module
>  
> With this proposed update, this is a call for adoption for that draft with the modified name.  We would like to close the confirmation by the Friday of the IETF 106, e.g. Friday Nov 22 EOD (IETF time).  If you have objections on adopting the draft, please state your rationale as well.
>  
> Warm regards, 
>                 Nancy 
> _______________________________________________
> RATS mailing list
> RATS@ietf.org <mailto:RATS@ietf.org>
> https://www.ietf.org/mailman/listinfo/rats <https://www.ietf.org/mailman/listinfo/rats>