Re: [Rats] Attestation Results for Connectivity

Thomas Fossati <Thomas.Fossati@arm.com> Mon, 26 April 2021 18:49 UTC

Return-Path: <Thomas.Fossati@arm.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7376E3A2CAA for <rats@ietfa.amsl.com>; Mon, 26 Apr 2021 11:49:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=JWhZHN47; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=JWhZHN47
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XrNdCEyzL9PI for <rats@ietfa.amsl.com>; Mon, 26 Apr 2021 11:49:45 -0700 (PDT)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150075.outbound.protection.outlook.com [40.107.15.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 395403A2CA7 for <rats@ietf.org>; Mon, 26 Apr 2021 11:49:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZsNS4qVlU72KMAOsRpxcmvOM76Zipwmc5eWnU1l6g1A=; b=JWhZHN47Jn9ZH1o0d2HBBexmih8HgxM3QHg+ze7PD17zndaP0eUEe3vmC74iISOcTLM4NWbMax6zDdofZjHch3o7pAV/ztjDnKxO6yxz8Pj7zSqTlc2OUdiAzCEV/hVItMcvFm+FU3Nn/M3sij4xWjEPeC5+SRsNGHF/u+y62PE=
Received: from DB7PR03CA0092.eurprd03.prod.outlook.com (2603:10a6:10:72::33) by AM4PR0802MB2130.eurprd08.prod.outlook.com (2603:10a6:200:61::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4065.22; Mon, 26 Apr 2021 18:49:40 +0000
Received: from DB5EUR03FT046.eop-EUR03.prod.protection.outlook.com (2603:10a6:10:72:cafe::15) by DB7PR03CA0092.outlook.office365.com (2603:10a6:10:72::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4065.22 via Frontend Transport; Mon, 26 Apr 2021 18:49:40 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT046.mail.protection.outlook.com (10.152.21.230) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4065.21 via Frontend Transport; Mon, 26 Apr 2021 18:49:40 +0000
Received: ("Tessian outbound 4ee49f77c636:v90"); Mon, 26 Apr 2021 18:49:40 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: a47520ca8980ccd1
X-CR-MTA-TID: 64aa7808
Received: from c8dd4d5d7e2d.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id B753FD84-7B94-4025-9692-E919A58193A8.1; Mon, 26 Apr 2021 18:49:29 +0000
Received: from EUR04-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id c8dd4d5d7e2d.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 26 Apr 2021 18:49:29 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=E8ToyRnCkr5fX4U93PWSiIzRpObYwOBfLU9oIHuCMGMMQDPkfaZFnVMHaZ+EfB+Fmv+CxqJRJ4/XrHW0VJePJrp7kVljlOuyYVaXRa4t3147syQFJ6Z0Z0XveaaueEYuBSu1xhmsIeGiWmud5m8DLaMJfBiJuHdhfQ5fIdn86GuHVMiRubY0aWztjVBd4ihaGza7tsvHatHdjsaZ9rCrxwLahRHJYWphxwcWQaxm8jpWw3fpIUAC/vgr0zU3UzWt2K0B+uDdEWWBwmYskBc7Uggr1hUSMe4Tx2qyXL0vlQmKmPTlP4KI+pKWantVhRs6W00ziNVFupqQuPn/klfpWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZsNS4qVlU72KMAOsRpxcmvOM76Zipwmc5eWnU1l6g1A=; b=Ghes6Qgbr0+HRCaU5h+G8gr97SArDTzWwsCiAPMc6EvWDix66/afRD5E/6Mc+FFwGWKWeY8V4JGLF/8WQcpNbA6LjwE9DW/OKM568GzraohejpBblV5osDhuoPwsYwEaGS5M1inYdyOrS8B7F8fx8YWNhFGnayz7OaUwIXWKtvDWolL0nN4YtO3uBwK6FcI0VYGwEx292MpZQ7DBWmzdNjgbM1Z4q+LHI0m+l38sQNVPn/9ALk2hQKcvDU9log3l1wCDEjCjoDixLhWz3xZ7DJT+APxe6KDOu2iih88HuYfhRer53BHEkcww09CwNIo+BN0OPnNYcWNT70+dyFbNhQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ZsNS4qVlU72KMAOsRpxcmvOM76Zipwmc5eWnU1l6g1A=; b=JWhZHN47Jn9ZH1o0d2HBBexmih8HgxM3QHg+ze7PD17zndaP0eUEe3vmC74iISOcTLM4NWbMax6zDdofZjHch3o7pAV/ztjDnKxO6yxz8Pj7zSqTlc2OUdiAzCEV/hVItMcvFm+FU3Nn/M3sij4xWjEPeC5+SRsNGHF/u+y62PE=
Received: from DB9PR08MB6524.eurprd08.prod.outlook.com (2603:10a6:10:251::8) by DB6PR0801MB1928.eurprd08.prod.outlook.com (2603:10a6:4:71::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4065.25; Mon, 26 Apr 2021 18:49:18 +0000
Received: from DB9PR08MB6524.eurprd08.prod.outlook.com ([fe80::e9e7:ea3a:3bca:5b3c]) by DB9PR08MB6524.eurprd08.prod.outlook.com ([fe80::e9e7:ea3a:3bca:5b3c%7]) with mapi id 15.20.4065.027; Mon, 26 Apr 2021 18:49:18 +0000
From: Thomas Fossati <Thomas.Fossati@arm.com>
To: "rats@ietf.org" <rats@ietf.org>
CC: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>, Thomas Hardjono <hardjono@mit.edu>, "Scarlata, Vincent R" <vincent.r.scarlata@intel.com>, Thomas Fossati <Thomas.Fossati@arm.com>, "Eric Voit (evoit)" <evoit@cisco.com>
Thread-Topic: Attestation Results for Connectivity
Thread-Index: Adc6vyX7FkhIWsfsStOCm1vuFlVj/AAFhfSA
Date: Mon, 26 Apr 2021 18:49:18 +0000
Message-ID: <60E7A6FC-B607-42D4-BDAD-F8C9699991CC@arm.com>
References: <BYAPR11MB3125D582622D87EA0C968CCBA1429@BYAPR11MB3125.namprd11.prod.outlook.com>
In-Reply-To: <BYAPR11MB3125D582622D87EA0C968CCBA1429@BYAPR11MB3125.namprd11.prod.outlook.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.48.21041102
Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
x-originating-ip: [82.12.10.179]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-Correlation-Id: 34bff64a-06cd-457a-dec1-08d908e40cac
x-ms-traffictypediagnostic: DB6PR0801MB1928:|AM4PR0802MB2130:
x-ms-exchange-transport-forked: True
X-Microsoft-Antispam-PRVS: <AM4PR0802MB21304998A47FA85F712A45599C429@AM4PR0802MB2130.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:4303;OLM:8882;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9PR08MB6524.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(366004)(396003)(346002)(136003)(39850400004)(26005)(5660300002)(66946007)(8676002)(53546011)(6506007)(76116006)(122000001)(6486002)(71200400001)(3480700007)(186003)(86362001)(83380400001)(66476007)(33656002)(2616005)(6916009)(2906002)(8936002)(966005)(54906003)(4326008)(316002)(66556008)(64756008)(66446008)(38100700002)(478600001)(6512007)(91956017)(36756003)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <0CB866A084867F43BB6672DBC1278BB4@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB1928
Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT046.eop-EUR03.prod.protection.outlook.com
X-MS-Office365-Filtering-Correlation-Id-Prvs: 190af4c6-e15c-490e-0418-08d908e3ff7d
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(396003)(346002)(376002)(136003)(39850400004)(36840700001)(46966006)(36860700001)(53546011)(6506007)(54906003)(2906002)(4326008)(70206006)(47076005)(316002)(34020700004)(107886003)(36756003)(82310400003)(478600001)(186003)(86362001)(26005)(3480700007)(6512007)(966005)(2616005)(336012)(6486002)(82740400003)(83380400001)(5660300002)(8936002)(8676002)(81166007)(6916009)(70586007)(33656002)(356005); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Apr 2021 18:49:40.7797 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 34bff64a-06cd-457a-dec1-08d908e40cac
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT046.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2130
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/7K5OPlCuAgPDCiz1Gz9JhXWv0ts>
Subject: Re: [Rats] Attestation Results for Connectivity
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Apr 2021 18:49:50 -0000

<shameless_plug>

Tomorrow, we are discussing this topic at the CCC Attestation SIG
meeting. Needless to say, everyone is more than welcome to join
the call.

For the details regarding agenda & zoom link, see:

https://docs.google.com/document/d/1NkiS78knPhDO0vA9ElS-bQOHNu783gGPdmTEbbOoOOU/edit?usp=sharing

cheers!

</shameless_plug>

On 26/04/2021, 18:12, "Eric Voit (evoit)" <evoit@cisco.com> wrote:
>
> We have just submitted a new draft:   Attestation Results for
> Connectivity
> https://datatracker.ietf.org/doc/draft-voit-rats-attestation-results/
>
> This draft defines reusable Attestation Result information elements.
> When these elements are offered to Relying Parties as Evidence,
> different aspects of Attester trustworthiness can be evaluated.
> Additionally, where the Relying Party is interfacing with a
> heterogenous mix of Attesting Environment and Verifier types,
> consistent policies can be applied to subsequent information exchange
> between each Attester and the Relying Party.
>
> We would be very interested in your thoughts and input!
>
> Thanks,
>
>    Eric Voit – evoit@cisco.com
>    Henk Birkholz – henk.birkholz@sit.fraunhofer.de
>    Thomas Hardjono – hardjono@mit.edu
>    Thomas Fossati – Thomas.Fossati@arm.com
>    Vincent Scarlata – vincent.r.scarlata@intel.com

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.