[Rats] Re: Éric Vyncke's No Objection on draft-ietf-rats-msg-wrap-21: (with COMMENT)

Thomas Fossati <thomas.fossati@linaro.org> Thu, 27 November 2025 11:03 UTC

Return-Path: <thomas.fossati@linaro.org>
X-Original-To: rats@mail2.ietf.org
Delivered-To: rats@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id ABE3991A4D1B for <rats@mail2.ietf.org>; Thu, 27 Nov 2025 03:03:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VN7jHIpsFwsS for <rats@mail2.ietf.org>; Thu, 27 Nov 2025 03:03:51 -0800 (PST)
Received: from mail-lj1-x236.google.com (mail-lj1-x236.google.com [IPv6:2a00:1450:4864:20::236]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 2A02691A4D0F for <rats@ietf.org>; Thu, 27 Nov 2025 03:03:51 -0800 (PST)
Received: by mail-lj1-x236.google.com with SMTP id 38308e7fff4ca-37a56a475e8so8452621fa.3 for <rats@ietf.org>; Thu, 27 Nov 2025 03:03:51 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; t=1764241430; x=1764846230; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=eTUBK0NMTzT3nblsG7V2OJY9tG203NaZKh4fTqr62c0=; b=KDQb0/g8hWq4Dr5FG/6dWcblHiEocEEIIhm2ADzzWCsAJk2akdWee9Kt9BiKPX+ZII PCu879wT99Jh41BMVf0hVxr/iHSNqoV1dJb4M0gpHjPiYA75EEEBKeYPg2rqk7kP2+/w A6Q2eZbdCNpVK4RAT6cMxsfQuBiSEWB+qtDFVABqnrd9FYGP+94y0k4bWr71Zxez74lL 08vj9Q9fgUafbWBgGz77OuTVgZSWCeZ/Mh9VH2ZdEKeC8H9Gc2sTbLCn32u/Cwhv2KBz Qo25KIRgCJqMsv80YqqfmZ/G+blAG8AlSTAnP+5tIgJecbF1Wv8zj8Mt0fM2WRlapibj iqEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764241430; x=1764846230; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=eTUBK0NMTzT3nblsG7V2OJY9tG203NaZKh4fTqr62c0=; b=G32Fd6iz/mMEgnOeM5cLb8Y5zyJR8tP7yoGgRWNSjkKltmRekhYGmIYgHizjAmNTJe nW0uVI9QOOM2+bNkOfsjSIRoKK3JC88Y8R5DQb3aW3S8q6U+cG4BD8sKaj8VTaSiFvTH w9phi0+u7w/WgAlxrMIMIf/e8UfQ0g4uYp1+iO13mf93r5PVoPu5cf+2DT+oE5yGk4P7 cSf9v9zw7sx+YdFms7BPllRPrBLWwuQ4D7TsyzueDGNNUUHM70AY6q2PEdCaAEWXWbif Supv3a8ASp6u1pDosOGGrU+E3n4/Y75/Rh6PTYoB6SlTkSbbHjs5U+S4IaAatN5rfXfy z7vw==
X-Forwarded-Encrypted: i=1; AJvYcCUX7Mtx790WuzQ6Bd1Nf1/mZ9krpciNJN5gVhBQFhpofqs0VpY3MYSQXJRUkBAljJE21alk@ietf.org
X-Gm-Message-State: AOJu0YxlSZ5PMZAiltibXj77Q0xJFc4vwcW/+aPSs63VA2tFbfOe/BIK LcKhp/EgMZlMSTeuEjLkyMyP7dPWuIb53fONDZRdkThJcYQ3FdJYBpms1EHcEuvBFGT+wXDokUX 7e49CvhTudGwp2Aw+azKWuKMq2ZixqcbGkU5ro6+JVA==
X-Gm-Gg: ASbGncsdO71U0k+E53nJ77NCyAjR4HU9SYQA7iV8Q0bXiIhM7CLv5h3VZKB2ecPsOOe cvHj3cP9rmBpyvWD6qdjG29xEwK5DUqYy6648fBS35JmCIOAi5qZXXFXbr4MSsmT5mynlLfes4z 7lThy8c5EZeYfVJTvVnx2/MU9CJey5UVmQo+fSniBrvo7/qjEdp0jpgHoy0Qc+CO3vEY6WdBBcE khkU9IkJz5eG7QBlUYYC/U6mycnjSrlQOsCjl8IYx04CI0oEwzmL/BGhvHKsXXNVmUypApFAYmT 1Ht9uq+MV9yIBzItEMroOF4hl16aq7Oque/XE2p12w4zUE6F0c9XyWF9lovBjFM17S0knZdvQWV 6yfj6uVgbmV2XiVG98J5bAhkV7fqSLj6hkKBYxyI0GHC1NA3tL2rciEh5mXl1/pbHxoa4LQ==
X-Google-Smtp-Source: AGHT+IF/u6yQGEkqxLeD6exoRA4anX07ApTGD2fyoRw0QlHfTNlUfJZRUaJyzsnIMvS9OfoQobIOPLYTL9ZkK9XMRis=
X-Received: by 2002:a2e:8717:0:b0:37a:8acb:a052 with SMTP id 38308e7fff4ca-37cd918c61cmr63858621fa.10.1764241429650; Thu, 27 Nov 2025 03:03:49 -0800 (PST)
MIME-Version: 1.0
References: <176417648354.2673345.18395683217571145721@dt-datatracker-5bd94c585b-wk4l4>
In-Reply-To: <176417648354.2673345.18395683217571145721@dt-datatracker-5bd94c585b-wk4l4>
From: Thomas Fossati <thomas.fossati@linaro.org>
Date: Thu, 27 Nov 2025 12:03:32 +0100
X-Gm-Features: AWmQ_bnbnOmFo89zBjBTUF6F3BWzJsY82tx4KnM2tcSc58lpVrofxD7_ZRLPsLU
Message-ID: <CA+1=6ycx=zUjDexuo3OOyD9X-dqLiXDjSo_jk6B6E1HJsBsGoQ@mail.gmail.com>
To: Éric Vyncke <evyncke@cisco.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-ID-Hash: 33Q3IXCXM2FUGFUF3XGF723XG26WORLF
X-Message-ID-Hash: 33Q3IXCXM2FUGFUF3XGF723XG26WORLF
X-MailFrom: thomas.fossati@linaro.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: The IESG <iesg@ietf.org>, draft-ietf-rats-msg-wrap@ietf.org, rats-chairs@ietf.org, rats@ietf.org
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: Éric Vyncke's No Objection on draft-ietf-rats-msg-wrap-21: (with COMMENT)
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/KdESAPmZNv-4N4Dc6bzNrlX6gfQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

Hi Éric, thanks for the review and comments.

On Wed, 26 Nov 2025 at 18:01, Éric Vyncke via Datatracker
<noreply@ietf.org> wrote:
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
>
>
> # Éric Vyncke, INT AD, comments for draft-ietf-
> CC @evyncke
>
> Thank you for the work put into this document.
>
> Please find below some non-blocking COMMENT points/nits (replies would be
> appreciated even if only for my own education).
>
> Special thanks to Ionuț Mihalcea for the shepherd's *very* detailed write-up
> including the WG consensus *and* the justification of the intended status.

Indeed, Ionuț's work as a shepherd has been outstanding throughout the
entire process, and I would like to take this opportunity to echo your
praise.

> I hope that this review helps to improve the document,
>
> Regards,
>
> -éric
>
> ## COMMENTS (non-blocking)
>
> ### Abstract
>
> Who is the `we` ? The authors ? The WG ? The IETF ? Let's avoid the use of
> ambiguous "we" (possibly also in other places).

Addressed in https://github.com/ietf-rats-wg/draft-ietf-rats-msg-wrap/pull/260/commits/e26dcd4

> ### Section 1
>
> Some graphics with all the parties and messages will make the text easier to
> read by non-RATS readers, pretty much like firgure 6 (even with SVG!) in
> appendix A.

Addressed in https://github.com/ietf-rats-wg/draft-ietf-rats-msg-wrap/pull/260/commits/26bfd48

See https://ietf-rats-wg.github.io/draft-ietf-rats-msg-wrap/ev/draft-ietf-rats-msg-wrap.html#section-1
for the rendering.

> ### Section 3.1
>
> May I assume that CBOR encoding can discreminate between an integer and a
> string ? This is about the "type" member.

Yes.  In practice, see [1] and [2].

[1] https://github.com/veraison/cmw/blob/0879f4960b0746177930320a07f53432ab08038a/type.go#L60-L77
[2] https://github.com/veraison/rust-cmw/blob/main/src/type.rs

> s/ are registered at the time of writing,/ are registered *in this document*,/

Addressed in https://github.com/ietf-rats-wg/draft-ietf-rats-msg-wrap/pull/260/commits/ae96a0f7

> ### Section 3.1.1
>
> s/The cm-type currently has five allowed values/The cm-type as defined by this
> document has five allowed values/

Addressed in https://github.com/ietf-rats-wg/draft-ietf-rats-msg-wrap/pull/260/commits/9785925

> ### Section 4.4.2
>
> Please expand DICE at first use.

DICE originally stood for "Device Identifier Composition Engine", but
it is not expanded in the TCG documentation - in particular, in the
DICE architecture document referenced by CMW.  However, your comment
made me realise that we could replace DICE with TCG whereever we
discuss the compatibility between IETF and TCG CMWs.

See https://github.com/ietf-rats-wg/draft-ietf-rats-msg-wrap/pull/260/commits/b4d27e79

cheers, thanks!