[Rats] LAMPS Attestation Freshness
Hannes Tschofenig <hannes.tschofenig@gmx.net> Thu, 09 July 2026 12:08 UTC
Return-Path: <hannes.tschofenig@gmx.net>
X-Original-To: rats@mail2.ietf.org
Delivered-To: rats@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 59392113E1030 for <rats@mail2.ietf.org>; Thu, 9 Jul 2026 05:08:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1783598905; bh=tD3c7kWmvMGkbWPVe0sUg50gdHfnWHOCA9MHGpMqmJY=; h=Date:To:From:Subject; b=SaJvWcPyKuRSXE2FkBvVPTVtateLFil0Df9Gy/CRa+VHTYnr0Tyu3ZmNJygMcJFzR ymjSECp/KQAqZMyGuu9kj+LdTTOZhc6r96nSk6OnjS/0xALJZaEg0tVf2GK5kIO1Dp xt28U5qQSzp1nCVAZNjshOX8uhj14eXcVSQV1Zgk=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.795
X-Spam-Level:
X-Spam-Status: No, score=-2.795 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmx.net
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id muSo8BwLym9B for <rats@mail2.ietf.org>; Thu, 9 Jul 2026 05:08:24 -0700 (PDT)
Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id B09FF113E102B for <rats@ietf.org>; Thu, 9 Jul 2026 05:08:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmx.net; s=s31663417; t=1783598897; x=1784203697; i=hannes.tschofenig@gmx.net; bh=tD3c7kWmvMGkbWPVe0sUg50gdHfnWHOCA9MHGpMqmJY=; h=X-UI-Sender-Class:Message-ID:Date:MIME-Version:To:From:Subject: Content-Type:Content-Transfer-Encoding:cc: content-transfer-encoding:content-type:date:from:message-id: mime-version:reply-to:subject:to; b=s1u7tlx/sGfGbPHNIFyIO3kdCcbSqCZ8efXgtPUtEUKbLJRYbnPW8s9w0f1N6L9u klOqjRcIsVb0TkTlfvRRUN/Ws0H7WvV29434NGyIbxU3SOsV1URFr/p6224HzS7yy C9pFXwDxyE2bHaRJwiNAe/r6t1znA3Q8KSu1nCB+UNVX/hS4k9yJWD1+jIKUQys66 8+/0Vure3o/Zh0xNawwru496t69t+bZLsYhLz4lTADAlT4ieKKyEK0DLWRyLhhAWY +qhAIUa3L8jSJy7srxm2UTObS4OmVlzxGnBI0R7O6feyRoMElYpw95JgU8rsYHF9i ZMQEZxlK5AAkGXZPuQ==
X-UI-Sender-Class: 724b4f7f-cbec-4199-ad4e-598c01a50d3a
Received: from client.hidden.invalid by mail.gmx.net (mrgmx104 [212.227.17.168]) with ESMTPSA (Nemesis) id 1MxDkm-1x1XOC3qbg-00uRgH for <rats@ietf.org>; Thu, 09 Jul 2026 14:08:16 +0200
Message-ID: <aaf104df-eeaa-4ea3-a6a1-ea12fdf9bdfe@gmx.net>
Date: Thu, 09 Jul 2026 14:08:16 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
To: rats <rats@ietf.org>
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:rHTxe2apxn075UjzZfkmF68dGJQHD3SkcepR7Z6z55IdeLNBo1h Iy/GX7eObhmWF3mqUa5N9jxMsazV4zt/lPoMOd49yJPO7KLonk7iZWve21W0OWIPrxOgKqy bJP//P/M3Akz873P95GyLkr3TeTqUmFmimxiDbT3SCFlKekNaoEqMa8eSS4WVYsA67+cLHl Wt9pUtm08jFcd6ocAQCCg==
UI-OutboundReport: notjunk:1;M01:P0:lt7Vxj1Pfr0=;2VDxRAFgz5o2UusnqymMCEhICIG 1iOkNS5vY4XXsawigJ6Jpg9jsijBZiIIKRZ+cBGj9W1cnkP8DfRk/77qCD+74R67EL1r4zyys 8wwXDXM4L6Ns4SZ6+xp86n6nSOR8ovJeipJ2x/O+msc6bsNZZJPDVsSwsFS/Ue7G1Bf0Jp/+m iXhUmmBolljArb4KkpsNCXYLKbI5v9Y+7iR0gYBy2FNT+qZqovx3E4U6aLDEKl+rU51FtM8ac RgeBMjCjNJ4zuDF1h6t9X+jcNYnBxMEw38HL2fTXceUXYD0pzJcvdAJRKybrf54OoyF08M3Go PifKM9PQIaYcxPFoSEfLsdPNsRhJwiiX5EbGwW9Lvosj0PI4M9Xc+7+Q4/TUGitXwJXK1DELf B6bTFR6k+NWtttJGCQIQbwrfogrVZ76MYOPh6dqfEc4TPnMlLwCt9wtvTav71253zpDMBn6DX CHfxsW4s9jkv4te7v/I6tNJ+zPBYJ3Elv6j1edFRABj/QhT9gy+xdKJidVmxGNDkPOoxgkXPD BKPaGdt+VZpxhkhUB4fkWSmf58fhZX0vSD4oU3gxDaTsKCY/0fLNTMM/mmkB3mbWviyYCDftI fVhwsuKoXnRdN0i4IhkhriLjh961OPoCBPazj3swb+AC4BCXjVd6CjL8TGF5Jx5tnwReIGIwB UGzVVtNIcmMWTo81gKV8438IqHwfBvAw7O3p7uYMOwnoIC3AxT40zq32CXnPN2gUd4JVkBm0N IbruvAIfYmXIQ6PwkHLdNYfIygJeQhKxMOsgeuO04iQWwyxLVWykdDOk4Al0QVi8L25uc/61R 9BXzHQ8rXczvSelj/6AarVtv/ycFS68jUjSVC60U//CP7Y+JAub7N3EOV9vBa792pgWbRmFyW Y87FiNB6zc6rhvkJvhj1iRaTfwt0pJXcJEs7uSwR9wnhqTNJK6WY2uZoF4ZRpZ88akVPxNerd RQzrzaAtg/uFmRDZtq5fc0lXA07IPbaqaCkgmskWR3EY2FF/bu9G3B2gBlfKniWIFNADkvMUT V+hQOKTBh6lUZZn9mBlIxFkmx9jBJTUeqMGf40YVoz0WtLrPVgqDuhRqbPRUfNvuKqDfypzL9 tHDLcMuLjTuIDpyMMhhfnSdPbcSNOAPLVl5Z8xrgeAo/wTMfBKVyvLQoAF6gEUdydMbcY+okD r2kreYozCwkM9j4y10128/TcEC1jX2woi6VkaUbhvkwxUTt+TIk3OJKn+MNhWUa4CZHRHI+UN ZGZB+F+UMNz/RCen4Z1Qcf40cc4DgyZHcl5pZ0FrRY7ivdO5iofrrI/WGUJPDAAEhIYbZ9bwo vs0J03kyzkcXz5FC6rv4Ebnhy5nwdZh2ZrOU6trSG/4wjOjM8ybelSprvn6vLq403lUX5mLnp JcM2O/wClXQY/aSU3x3w2bHIdvqEddouYgHlLbwj7LV4dr0bfAzOazKyWJfMmdScHm296uOVL A07nQIMYkl6WC9g1NpNTbSu+HGWtBYlXDBB14N2lvAZvyXKXdB+qLD+/5hLQZ+X9L22WP1v/g lBAWZ0k/tfkO6PzECzC5gcGpQ7Rlt1T4wskEwGKQN71KivgRqrHmVvh9Z1MNV8Dcbke5q9R0E 73NG6HMfc5iOBcyrF2L7pngWe3Ad0PtHCMsfWYhmC2Zbnqm9IDWh0r1Axg/IZDYzLoBsypQVf WNZ1IJbcd7WwFLUtcBFHBkKm9VXNQeNtialGtiE+aZT0Vuax1Bg1OHw2U0x/GOa1QBMGjUTae VLXSNX2aekqt7ABuQ9pKQ0fYd2yM9CLQLIyo/IRdV2eLc5BEX/qucQCOKcJNW3hPoxFvrWhn5 1yMo8wv6JLOYd8Exh2/ch2rQPgaDW8CpTq/LkZXXmEcO34feOgE29bpZ9SEsDzEahlHtF3HZd 9wXl82jv68PimoMa6trXifaRTaDJ7CSs/XjsfiKe64Gh6t41bv+LiB0sV8HEdjKrQeeexpXwX SrMRCXN3D/7RDNOLpGZ2OxXJHJhho3raQ6SkEiX3mT9ssbUBIn0rrpgxICvFNraMT9VUZ9kQJ SrrYlafGlaPSujrqB7lLS8AtoxeqvDpVFP6itgc543soApaUA+zerAKQeCQszyn2cG1h+xR/X R7M9NaD1nJrrtvKVLW4jh/38qgY6/w2eamu1shEEjPnoaZ7eCm56GxTVUgI17YbW2hGy27pWh tms5O/8Owpz+yCw9dExuTe1rZYenUq5atUsLZIiEU2FbKgpuKrbgX7YNqMyt3WP/Ti/UyVk7s xT3uxSScnUyPv4qTmYZe9fEVqQv9vfo7wKJhqOUsQTY/oWFj49GPukXeJTFM78laBtpizHPZ1 r4r85NS0E8zPegBA6BQevtGPJXwmpMF89ToJ1AfIONt5ZUGjDXD6EPTSusyAP6W6vKHNSsTM/ DRqo5wY6z57xBrXj80HfjNVVMBGCbDeaYjTrOHtg+KzqKaohL/GbxLE2bKrqBDKZAgWtqgsf/ hLB2HAjdiMzHOKxzD54EQ8QXB3C0yXLd3LsQpcu7PlyWh+ohlomSmdFTMgePZ0r+DhXshOlaY yAlA3bAqvAHpf9DL6HRjdLeCFldt87LNAmuMs9znC+PHSombmv6ZI/h/hjTNXSQ8hRs5SRPEo i6IQJ+1pGgk6T2eepsd7jbnB3lDDaB3XKMutQ5Gy1y1kSN9F/yUOSCM5fWH3yb4Z+Row31mHP jYdQXO74m4ky7sriWUpr+Bn8AM7jXLUfhRN62ofdhY84GWjsujc2egbgi1GxzxFe6zO13wIqB 7SmTxJ1Iv2Vm4fVkdL4MryOieZ+8PSQ6Vkh2YrFOae39XyrbQzp76o+H7D5RI06mZaHT/8hnz N+2mZGBQZrF/Y9LW0kh3IFODRCpqyNPNMFGyCk0AtnHlAYi7vI6PMbA2LxQ1EaSWa47+ixnaE XWElNeTwN3qgjRSxzMPfE81Cawo605BjwIc8zkquac42WkrR7kYx8xr9bNtaHrzbaINl/24tI xjU+xBvGF9lyaX568PBI9/iGXwmEZPPe23GeAwcb2mWvqqcHhLWsNXtYX13JfoXdDtSGsnbFR X2WmEDS2eMFLruP3dmbUS2AHL9YKsiJ6n1X7zpvnz8wjy5jffLERm7zyqYmrgQjRejgGMqhc7 gpRDCjUPD4Li/RzNLotysEQ5uzfIrNveAcqpYxRLoHsoe+xwSSLBLutg5IBvyZe7BD5CCO+8M mOwyAayRLl0tSYGvnhEwqe36LqghCEfngaKtU3GOjjb8rrZ4QvfzgdSca5R84rjXdgoAbrlI/ TPMtG58b9un3GjwWrVwAUJq6oWWyfqVznay8/Ey1xFV1umkbcMiBjypBICztxeUW7DGRU2d9Q Jy/eFdY+uzuGX58v/R0dnKk7UzLAnIAHIvpD4cpnDZrloL4ypjqugjOkh/HJ5ScZ+Ok6y285U FSkLcLafven1EDh5i9qig+eG5vQpH0ul5EPEvFe/bUYcIRTNkhE4J8EtFzf7kTAlsDbWVpcgA szYP997ag22+KXL+5nPwMVJnSH/LidMQxSV4YXenjVyfoirjyeW4wH230lf4GCI+u3cIlte/P QiXWkiTZZ99wgod05KMtR7pvcdlLwcoeB4esLEobqcyPapBNstgdfRV96/zZHbgQQzMrGcaG5 ep04owbUP4yNq+FUPiRy4f+pnEhqeD7FCsgQQXhCWEXD7AGBZnsXtPuUFA7VQSx8RSHkynGM2 5EPT1c078kVysVqUE5qmRBIsrqfKJL4M225C7kOMluD/ZusmThvySqQ5sFBqk+jk2egxE+6aU 50dCMBFTuYIxgKzInOnlyn+0SiSAY5tUAmwipYOkmpduS4UK6p3Dxh1icIOKLt5Mmx9vwcxJ/ FlRyvfDpVwCdfR7pmzNxzTQuIvXdRo6XX4WX9Oz30BxIFEFvmK+cisK8y1qSNoj9GNMJK4MLR KlS05gme81B/mtwh9mAK2YqFPQYdN2URNIl4noGoLuCnhzXaxTewFy37IL/Tr+daDlwgs86X+ ZcU8LkQvsruWM9HkHx+UqI7Azpz5TA9zeWP3fMnjtmFc+zuKrY7pJrHGLloSOqo5FxT2kQ2Rm X0TPPGPzbIwiEsC0sJko97F+HiniVKa8DkMeKG543CcT9WkwIlV+6DphrRloTwzvc0t3ztL1s guKxcvO/jK+lPbOh1jQqGFfzbrD5xqtCEziGWGem+Iff3ok39Pe8PGFYp3n4UrGzek361dvAn JMIIb9TxNZ1yUoFsvCexKZcJcQBDqOVhYIJrTLcySyAZuqdkSky6zLxgzNjVpprRQ+013bHJe iD/ZGSevSwneat9D+VD8EdlxHAppZH68tYy2kSZ7Ti5dapl3PWKRC9mfvTuxLEYZlh70j45OW MbfHd5BIbeVm3TBV1sNNSl2pkD+X1F4gteS3sOLCf5sTx30X6NJNhM5cF4f0Z0g5EdNH+eOMT hP/eSluC1mPLFou39+UWokTQg97NX2G78qoHpfJInsR7/O4yYxFjz8/zd0bHGkVyGiK+AN681 gdqaxBB8bhDTB7J//VX4rfztbfzDTAViVbub3FkerSrbUBnSDxGRc5ii4FD82Ehtg7EL4A7TS VG+vEuRxuRlEFOB4dwUrRdokQcSNdCZhKbYFgsxx5Gwblv9vlRl9ahsOJVqpv/lkzdZXAZdve BxitGhZe9UYQlUqEa95MaHdw3Trqu4OgW2yrSx+nm/efCLOlSSeyfNQ1Nr9gmrLA0IhHLDqQq XPDbtusETYFyrXzyGJhJtaLbWwoNwR24rSFLTJFZr+gHrHjNTAtKZdNcn0mVhOHu+IpgdaQLJ rUKy03ZGvbOBl90zx8rSUr3cZ7ELWmuw9dHDE7b+obddgHK8r8RGOkz3EEJP+Vm3hvWDf/Jkv Y13Ha+/8IFVdC5rx816baKIlXZ6pO86MazDcPMfi5M0qos1VPieTjPwcGmTncG6oeVlrGHelq XWAPaAYj1EdU9hw06UAwB9m1bCLL42VH5KuWv2CTSHwgFhDSfxYKiPy1An9etPixSATHOExHW RbeR5dJd9RPyXDrbiHTBE/cieceY5RMU2SSrLKrjMWKw4GnfNDM6e7Pp2ebMOxGdjTGnwebHD VdiHPTP9JuBlo1rQxGj7O6KggYHSKzVWhm73llRIrielETvgvJRn6o3ldLhrQkebrThO7o5wu qNOOVbIjeouGEKPUVsEjAvErayJu5WF1/1jfZe5ryEVt4vPjffBZV7MnMkQxHJ+S7a5rQivk8 CFIQDk5blVO+lfKqk2ouAqZJcX3kF0HAUbgfWFin4nmDAb6ioWv8i0o0c/wQFL1yCUYDGfiAY 26l3OM8/TyBBn/iBBTK4uIKwICTutRuWaf59z/+GPtPViAP4eXUrHaKByAiiDOhZRBRczq5cl hydn9g85NLSuf+fb+i/c5wNZ8NtdowFZEC+FbgnSAwPwM7GV4FoVgzxeLDj1QcY0y4q/fchVM 6n2iNRPjkegrD5JE1x1rDj/TZC0cEJk2v1siKcufTPzQuAsLTjpbYEOSMbEijCIaOHhda7tKi enLUE1adlQm5DgA==
Message-ID-Hash: 3KGKBO62QIAHFY23ULPWNYXPQ3MDNXUM
X-Message-ID-Hash: 3KGKBO62QIAHFY23ULPWNYXPQ3MDNXUM
X-MailFrom: hannes.tschofenig@gmx.net
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] LAMPS Attestation Freshness
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/G2yQGuC4oGzUxHaDwWP8FuFT__c>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>
Hi all! The CSR attestation draft made good progress this year in the IETF LAMPS group and it is now in IESG review. This progress unblocked the work on the LAMPS freshness draft, which offers a nonce exchange over a certifiate management protocol (such as EST). We have made a substantial update to https://datatracker.ietf.org/doc/draft-ietf-lamps-attestation-freshness/ and would like to hear your feedback. To make it easier to provide feedback, we have put slides together (which will also be presented at the LAMPS meeting at IETF 126). You can find them here: https://github.com/lamps-wg/lamps-attestation-freshness/blob/main/slides/freshness-ietf126.pdf On behalf of the authors, thanks for your time and interest. Ciao Hannes
- [Rats] LAMPS Attestation Freshness Hannes Tschofenig