[Rats] Re: qualifying "confidential computing" (was: Re: Re: Threat model and properties for remote attestation)

Ned Smith IETF <ned.smith.ietf@outlook.com> Fri, 14 August 2026 15:42 UTC

Return-Path: <ned.smith.ietf@outlook.com>
X-Original-To: rats@mail2.ietf.org
Delivered-To: rats@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 02AE0129DB3F0 for <rats@mail2.ietf.org>; Fri, 14 Aug 2026 08:42:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1786722143; bh=tNNO5ggBYxx9WqIa41GXsIWurWvXD9wPUgxpRjvM//c=; h=From:To:CC:Subject:Date; b=pO4zkiWd3jgsQoH5yRLZMsIUokFXBtK8h+OmeBnI+sMgD7A3qZMEw1zfGKLtJOAWf ltoIt3E+pxNaYam8L/eW1BxUSWUeo2vg/KeUPtU0nsTpJSfOimN2iaH3EEaGE1QZeA Th1Zst9wepWvY9URaBzonjVVcHz1qTa6u9/hBSjo=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.096
X-Spam-Level:
X-Spam-Status: No, score=-1.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=outlook.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 38gvqjrzAYHQ for <rats@mail2.ietf.org>; Fri, 14 Aug 2026 08:42:22 -0700 (PDT)
Received: from BN8PR05CU002.outbound.protection.outlook.com (mail-eastus2azolkn19011036.outbound.protection.outlook.com [52.103.12.36]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A3F19129DB3EB for <rats@ietf.org>; Fri, 14 Aug 2026 08:42:22 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=xAFd/JXbUE+jJG/osi37/kFOrLd7JAOlT2QKvETrTc/+0FF+SVHmmkmvzlMxXFrX1QG8bmvwZe/18OL8HA11y2HqKoaGI++ntdtztiDNRy3uuPznPA61SOhw2RnIrQc16aa7VF/aiQ7p7VsrujV88OaQRShBxak58g3+R/TPs0twea3ebfApqMFojX0JAEJBhm8JAkZJpIGjqeo7LZaLNNidkhRjDbhqJRHkFB0/xj30LEA311MrBMZY/37lBVhL1KvpAk4/tlXXVfCbIrxjKCP/j/BCmzdxS1+wVps7cbwpt0Whxo8CD7ZVFTDU9hM3XqMtPtEaOk6vgL21cRC3ww==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tNNO5ggBYxx9WqIa41GXsIWurWvXD9wPUgxpRjvM//c=; b=Z97WOfkbYHnwgHGuhH4A3RPC1MEyLxMw2R4PYHvOV+YdIjDftiMVq0g+iWY9LzmrLOu27jecsDMzW0BG7SQli+i/q5JIeCGmdV08servB5+7hG2CeGkqxvPq6bLfDLXLvi0eJjx3HZB1n+gpYKj9hkyxytkBbHMbVIGX4l2TkTYkeqgjmki8si04kpj30CvyymZBts7eYHU3AXI3qgkFA1vp3Wo1drSg1+7M0q0l2TRB8xYUXnDInpuwm6WFPbVjrXBnqRJUr+U6wolIozc7ClBsNx66xrAh/xjrio/1Qo8ftYRQaluUdBl6t591MIZ4GtZl6LdgMadK23lD0vB2tQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tNNO5ggBYxx9WqIa41GXsIWurWvXD9wPUgxpRjvM//c=; b=XjokxhIVFtnejH13DEh/iY/zW6u2/0EBt66rt5HEehfTmYUrqXdROHyj07CmnAOWLgi3T2cCQDLZJap5PuAHcjE9DxFpILRUPndFF7sS2IszqqkJkOmF5RZ4kLTvF8TRmXWl5bLVNTIywW+Go6Zn7r8eMTBTWnJrwKOT1IP/r+aTJc99hszcRjEYl21OU7sLiOaIRrdrvQazkoMUI+WXwm7TiCmdnt6aFKHHLwbLdcXlWrvBMdFJ1eE7I6zxbyyTt+ekpNDnL3HZS3ke+GkA4gJjLA7ZrhofC7eUvHZoosICJOgKubQsKdc4N17QLeqrZ09aUC/hmCkehwzCExsTZQ==
Received: from SN6PR04MB4816.namprd04.prod.outlook.com (2603:10b6:805:b3::10) by DSVPR04MB10081.namprd04.prod.outlook.com (2603:10b6:8:45d::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.13; Fri, 14 Aug 2026 15:42:14 +0000
Received: from SN6PR04MB4816.namprd04.prod.outlook.com ([fe80::4547:8547:fbe1:f6d9]) by SN6PR04MB4816.namprd04.prod.outlook.com ([fe80::4547:8547:fbe1:f6d9%6]) with mapi id 15.21.0315.014; Fri, 14 Aug 2026 15:42:14 +0000
From: Ned Smith IETF <ned.smith.ietf@outlook.com>
To: Manu Fontaine <Manu@hushmesh.com>, Thomas Fossati <tho.ietf@gmail.com>
Thread-Topic: [Rats] Re: qualifying "confidential computing" (was: Re: Re: Threat model and properties for remote attestation)
Thread-Index: AQHdLAMxoNoz5UGNEEi6if1YMB4lOw==
Date: Fri, 14 Aug 2026 15:41:54 +0000
Message-ID: <SN6PR04MB4816FEA3B54F9FB75E2C43BCC6DA2@SN6PR04MB4816.namprd04.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SN6PR04MB4816:EE_|DSVPR04MB10081:EE_
x-ms-office365-filtering-correlation-id: 1c4bdeb5-968b-4263-f251-08defa1a9d25
x-microsoft-antispam: BCL:0;ARA:14566002|24121999003|31061999003|51005399006|22091999003|15080799012|25010399006|8062599012|5062599005|19110799012|8060799015|19101099003|440099028|3412199025|102099032|40105399003|17031999003|2607281247196008;
x-microsoft-antispam-message-info: 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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_SN6PR04MB4816FEA3B54F9FB75E2C43BCC6DA2SN6PR04MB4816namp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SN6PR04MB4816.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 1c4bdeb5-968b-4263-f251-08defa1a9d25
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Aug 2026 15:42:14.5687 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DSVPR04MB10081
Message-ID-Hash: KQNNOAIRUZ3FFWX5MN2RZZPDTW4Y3AJ6
X-Message-ID-Hash: KQNNOAIRUZ3FFWX5MN2RZZPDTW4Y3AJ6
X-MailFrom: ned.smith.ietf@outlook.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: rats <rats@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: qualifying "confidential computing" (was: Re: Re: Threat model and properties for remote attestation)
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/84deGF14c7jSX4nqUVNC9RFfuzc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

>increases the trust boundary of a TEE (for instance, with unverifiable trust dependencies)
Is there an example of this in RATS drafts / RFCs?


On 8/13/26, 12:46 PM, "Manu Fontaine" <Manu@hushmesh.com> wrote:

Thanks Thomas. I understand, which is why I stopped participating actively. In the meantime, any standardized CC interface or protocol that implicitly increases the trust boundary of a TEE (for instance, with unverifiable trust dependencies) inherently degrades the CC business value proposition from the start.

Thanks,
Manu

On Thu, Aug 13, 2026 at 3:18 PM Thomas Fossati <tho.ietf@gmail.com<mailto:tho.ietf@gmail.com>> wrote:
Hey Manu,

On Thu, Aug 13, 2026 at 9:05 PM Manu Fontaine <Manu@hushmesh.com<mailto:Manu@hushmesh.com>> wrote:
> Standardizing CC [...]

While CC is obviously a very relevant use case, RATS is not chartered
for standardising confidential computing.
RATS is chartered to ensure that use cases with a stake in remote
attestation (including confidential computing) have standardised
interfaces on which to build their added value.

cheers!
--
Thomas