IETF Logo Mail Archive

[Rats] Re: Security considerations of remote attestation (RFC9334)

Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de> Sun, 17 November 2024 13:43 UTC

Return-Path: <muhammad_usama.sardar@tu-dresden.de>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0396C14F617 for <rats@ietfa.amsl.com>; Sun, 17 Nov 2024 05:43:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.404
X-Spam-Level:
X-Spam-Status: No, score=-4.404 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=tu-dresden.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8a2-LCxUqZjR for <rats@ietfa.amsl.com>; Sun, 17 Nov 2024 05:43:52 -0800 (PST)
Received: from mailout3.zih.tu-dresden.de (mailout3.zih.tu-dresden.de [141.30.67.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B99CBC14F602 for <rats@ietf.org>; Sun, 17 Nov 2024 05:43:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tu-dresden.de; s=dkim2022; h=In-Reply-To:From:References:To:Subject: MIME-Version:Date:Message-ID:Content-Type:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=H738LrYcHGWZhocdmyQnr94uEQiLViFkOJhfaKuHJ04=; b=Y0UlR9OdYIYbVspYyYEn4QrID2 RNoAu2j+QL3ADv5t0asoaoB5ceowNoWbnI2Z2N/sPOQOd5P/9nQFRE/IDM3k5M3js/b+z9B4fH+tP xNmudQB1KQ9+/cK6/YPz2ZwNleglaH2EsWN1ifCxAI/T8+D2TKU/WsEQksGGiKWroyHqUAbZ/iH1d f5M3xZk+vCV9jZFeG2KejUTniVVQq5toKg0cOiBz5CVQ70UkyyzUepngTfktlbSmGJbL5OjZ5SxFw AKxM6f/RalzC+2fHIXTW9iXZ8XlugH/dNgY3MDsFRng8/sh6WdRtPoD7VmMG84YVvAC3fCPVOG3aT nC9cMjDQ==;
Received: from [172.26.35.111] (helo=msx.tu-dresden.de) by mailout3.zih.tu-dresden.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from <muhammad_usama.sardar@tu-dresden.de>) id 1tCfZ6-005k4r-VX; Sun, 17 Nov 2024 14:43:49 +0100
Received: from msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) by MSX-T311.msx.ad.zih.tu-dresden.de (172.26.35.111) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.39; Sun, 17 Nov 2024 14:43:36 +0100
Received: from [192.168.1.2] (77.13.21.213) by msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Sun, 17 Nov 2024 14:43:36 +0100
Content-Type: multipart/alternative; boundary="------------sHR9pfBXd4QFGyexLXd90pKv"
Message-ID: <0ceaf9c4-b1e9-4394-9bf3-2b8089f4e09a@tu-dresden.de>
Date: Sun, 17 Nov 2024 14:43:35 +0100
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: Michael Richardson <mcr+ietf@sandelman.ca>, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, rats <rats@ietf.org>
References: <4ffdd034-05ec-4565-9cad-b40ff82f83fc@tu-dresden.de> <2cdf749b-311b-4db8-ae1e-c99deffa3737@gmail.com> <CAHAF5K3vGFqNginQYcfVArCBa3F5sw0da7DiqKg1b7-eAhKFEg@mail.gmail.com> <CA+1=6ycHiqJ=BcU5w2yMQwQEFTJDN-TT7TEuaoBqVRUiymACYA@mail.gmail.com> <CAHbuEH454+1+DefLyi+nLgLwO19ks=TwM5fk-zeChBUqB4J2bg@mail.gmail.com> <16769.1731685904@obiwan.sandelman.ca>
Content-Language: en-US
From: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
In-Reply-To: <16769.1731685904@obiwan.sandelman.ca>
X-ClientProxiedBy: msx-l317.msx.ad.zih.tu-dresden.de (172.26.34.117) To msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139)
X-TUD-Virus-Scanned: mailout3.zih.tu-dresden.de
Message-ID-Hash: MV7ZTPK374SJYX6LTYVAN4SKC4EXTSOV
X-Message-ID-Hash: MV7ZTPK374SJYX6LTYVAN4SKC4EXTSOV
X-MailFrom: muhammad_usama.sardar@tu-dresden.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: Security considerations of remote attestation (RFC9334)
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/DIUw4pMXPBB1W6pjQoiyS-gBV_U>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

On 15.11.24 16:51, Michael Richardson wrote:

> At a future point, we might do 9334bis, but I see such a document at least 5 years in the future.

I think we have to understand how the consumers are using RFC9334. The 
editors of RFC9334 are generous enough to let the vendors sell their 
broken solutions and to let the regulatory bodies design broken 
governance documents by putting RFC9334 stamp on it for 5 more years. 
But unfortunately, I am not that generous!


Dear chairs,

I would like to ask for an advance slot for the next 5 years!

Topic title: We need RFC9334bis!

Presenter: Muhammad Usama Sardar

Duration: I estimate to have 5 hours of stuff to talk about the 
ambiguities and flaws in RFC9334. Normalizing it over three meetings 
each year, I would like to ask for 20 minutes slot for each meeting.

Regards,

Usama

v2.45.0 | Report a Bug | By Email | System Status