Re: [Rats] looking for better terms -- request for bike shed discussion

"Smith, Ned" <ned.smith@intel.com> Tue, 07 January 2020 21:43 UTC

Return-Path: <ned.smith@intel.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 375DF1200E7 for <rats@ietfa.amsl.com>; Tue, 7 Jan 2020 13:43:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.22
X-Spam-Level:
X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FhB1_Uj8Isvx for <rats@ietfa.amsl.com>; Tue, 7 Jan 2020 13:43:42 -0800 (PST)
Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49CE91207FE for <rats@ietf.org>; Tue, 7 Jan 2020 13:43:42 -0800 (PST)
X-Amp-Result: SKIPPED(no attachment in message)
X-Amp-File-Uploaded: False
Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jan 2020 13:43:41 -0800
X-ExtLoop1: 1
X-IronPort-AV: E=Sophos;i="5.69,407,1571727600"; d="scan'208";a="253980281"
Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by fmsmga002.fm.intel.com with ESMTP; 07 Jan 2020 13:43:41 -0800
Received: from orsmsx115.amr.corp.intel.com (10.22.240.11) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 7 Jan 2020 13:43:41 -0800
Received: from orsmsx109.amr.corp.intel.com ([169.254.11.176]) by ORSMSX115.amr.corp.intel.com ([169.254.4.94]) with mapi id 14.03.0439.000; Tue, 7 Jan 2020 13:43:41 -0800
From: "Smith, Ned" <ned.smith@intel.com>
To: "Schönwälder, Jürgen" <J.Schoenwaelder@jacobs-university.de>, Laurence Lundblade <lgl@island-resort.com>
CC: Michael Richardson <mcr+ietf@sandelman.ca>, "rats@ietf.org" <rats@ietf.org>
Thread-Topic: [Rats] looking for better terms -- request for bike shed discussion
Thread-Index: AQHVxXQlCbKWYp19fkKQpfqMAhzvLqff7LMAgAAExoD//8qrAA==
Date: Tue, 07 Jan 2020 21:43:40 +0000
Message-ID: <C7744481-277D-477A-8B0A-F7DC9F4CC273@intel.com>
References: <26979.1578413051@localhost> <6291CF16-BBDC-4A12-A0C0-FDFBAB494A31@island-resort.com> <20200107165432.zmpm6yilgr6fogrh@anna.jacobs.jacobs-university.de>
In-Reply-To: <20200107165432.zmpm6yilgr6fogrh@anna.jacobs.jacobs-university.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.20.0.191208
x-originating-ip: [10.24.10.200]
Content-Type: text/plain; charset="utf-8"
Content-ID: <E2EFEAE1538AAE4DA13125ED16BEB0A0@intel.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/63cvUZtVGDyYPxPzWP3XRWzPR6I>
Subject: Re: [Rats] looking for better terms -- request for bike shed discussion
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote Attestation Procedures <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Jan 2020 21:43:45 -0000

It may be helpful to note that the Attester may not be the same as the environment that measures. In some cases it is the same but not in all cases. The Attester contains both (1) and (2) so it seems we don't want to overload (1) or (2) with a term that is the superset of both. 

If there is consensus terminology for either (1) or (2) then we only need to change one of them. 

The analogy to CC seems somewhat apropos as attestation could be described as the partial automation of a (manual) certification process. Indeed, the result of CC evaluation could be a claim in a manifest or certificate issued by an Endorser. The Verifier likely would expect to find an overlap between the ToE and the "Attested Environment".

-Ned


On 1/7/20, 8:54 AM, "RATS on behalf of Schönwälder, Jürgen" <rats-bounces@ietf.org on behalf of J.Schoenwaelder@jacobs-university.de> wrote:

    Attesterr and target have also been my first thought...
    
    /js
    
    On Tue, Jan 07, 2020 at 08:37:28AM -0800, Laurence Lundblade wrote:
    > How about (1) “attester" and (2) “target" or “subject”? 
    > 
    > Currently the EAT draft roughly uses “entity” and “submodule” for (2), but only roughly because it doesn’t distinguish between (1) and (2).
    > 
    > Attestation is not certification, but somewhat similarly Common Criteria certification uses “target of evaluation”.
    > 
    > LL
    > 
    > > On Jan 7, 2020, at 8:04 AM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
    > > 
    > > 
    > > None of us have been happy with the confusion due to the alliterative
    > > terms "Attesting Environment"(1) and "Attested Environment"(2)
    > > 
    > > We agree that (1) *measures* (2).
    > > 
    > > We think that we could keep one of the terms (1) or (2) if we could come with
    > > a different enough term for the other.  There is an issue open:
    > >  https://github.com/ietf-rats-wg/architecture/issues/14
    > > 
    > > I asked Google, "What is a person who measures", and the answer it gave me
    > > was "surveyor".  There was criticism of this term because it sounds too
    > > active. (To "survey" in the civil engineering sense is quite active)
    > > 
    > > What do you think?
    > > 
    > > https://www.thesaurus.com/browse/surveyor?s=t
    > > 
    > > assessor
    > > cartographer
    > > measurer
    > > land surveyor
    > > mapmaker
    > > topographer
    > > 
    > > 
    > > https://www.thesaurus.com/browse/survey?s=t
    > > 
    > > includes a bunch of interesting words, some of which we use already:
    > > 
    > > assess
    > > canvass
    > > check
    > > check out
    > > estimate
    > > evaluate
    > > examine
    > > inspect
    > > look over
    > > observe
    > > overlook
    > > oversee
    > > review
    > > scan
    > > supervise
    > > appraise
    > > assay
    > > case
    > > contemplate
    > > measure
    > > plan
    > > plot
    > > prospect
    > > rate
    > > read
    > > reconnoiter
    > > research
    > > scope
    > > size
    > > study
    > > summarize
    > > superintend
    > > valuate
    > > value
    > > view
    > > check over
    > > check up
    > > give the once over
    > > look upon
    > > set at
    > > size up
    > > stake out
    > > test the waters
    > > 
    > > 
    > > 
    > > 
    > > --
    > > Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
    > > -= IPv6 IoT consulting =-
    > > 
    > > 
    > > 
    > > _______________________________________________
    > > RATS mailing list
    > > RATS@ietf.org
    > > https://www.ietf.org/mailman/listinfo/rats
    > 
    > _______________________________________________
    > RATS mailing list
    > RATS@ietf.org
    > https://www.ietf.org/mailman/listinfo/rats
    
    -- 
    Juergen Schoenwaelder           Jacobs University Bremen gGmbH
    Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany
    Fax:   +49 421 200 3103         <https://www.jacobs-university.de/>
    _______________________________________________
    RATS mailing list
    RATS@ietf.org
    https://www.ietf.org/mailman/listinfo/rats