Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt

Thomas Fossati <Thomas.Fossati@arm.com> Fri, 03 July 2020 09:20 UTC

Return-Path: <Thomas.Fossati@arm.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 765323A0B4A for <rats@ietfa.amsl.com>; Fri, 3 Jul 2020 02:20:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tsGP3lt6; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tsGP3lt6
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 04x7_dZiEcyw for <rats@ietfa.amsl.com>; Fri, 3 Jul 2020 02:20:52 -0700 (PDT)
Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10078.outbound.protection.outlook.com [40.107.1.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BE0D3A0B4B for <rats@ietf.org>; Fri, 3 Jul 2020 02:20:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GwkClJFq4Pnb31bzm7DqUFoF2hAGZB4+k+6RlrEKPAc=; b=tsGP3lt6AurlTqLADNblD+UPi7dktrO3nt/lzeYR1r8Lbd4IzFwezI93rYHGwxmeMpx4qjGt/bo/uYrTrTSpQlePzrTLHC+dVTufQ/hMZjsIguv0k+gv/BjSA2VsKDRc90DFeOJ7JkMMhygF2YyPE0E+Ilpn+NWUtfSRCVovmyc=
Received: from AM7PR04CA0017.eurprd04.prod.outlook.com (2603:10a6:20b:110::27) by AM5PR0801MB2003.eurprd08.prod.outlook.com (2603:10a6:203:4a::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.21; Fri, 3 Jul 2020 09:20:49 +0000
Received: from AM5EUR03FT038.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:110:cafe::84) by AM7PR04CA0017.outlook.office365.com (2603:10a6:20b:110::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23 via Frontend Transport; Fri, 3 Jul 2020 09:20:49 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT038.mail.protection.outlook.com (10.152.17.118) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Fri, 3 Jul 2020 09:20:48 +0000
Received: ("Tessian outbound 8239f48e56bd:v62"); Fri, 03 Jul 2020 09:20:48 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: 9a33f7d06c1491cc
X-CR-MTA-TID: 64aa7808
Received: from bd18a0b6d839.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 904B8422-9141-40C9-91BA-326512525A44.1; Fri, 03 Jul 2020 09:20:43 +0000
Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id bd18a0b6d839.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 03 Jul 2020 09:20:43 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jSzozNpfwdAmB+ZOL1MqxkDC1+/WJc7yEU6xxApsMd5+zvpUZM95/HO3jfucm96v/BQaNoDMHQwCVWL/AoiGVohxvkyFyefPveRo1LG/4E4yIG69jXrulo+3in/nuVteXY48EfoNm3N4WrMMjcH6fA+TrDcfFtns+hNVfCR7jQuIdmQ8naDYxlZxYZ2p8dU57Cl0FJ5CMFnMhtLJs36GigLci6X/mob25xd2VNejhzWTHJzt4hMrXH4JxVuSWBYsNxRd68HILGtbEdm7f33jpm6CGU2z4iGTt/hy1iGh39WtH9XQJMpHm/NA1CXCKWkvY76fI63csRHBJQfo3bHI8Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GwkClJFq4Pnb31bzm7DqUFoF2hAGZB4+k+6RlrEKPAc=; b=EgmdOc6ssZ17fqRroTJ894VX8GVSJR6lMPV4e9bgzZdAml/PnCoSt221j782QkNMhkR4l/pJPKDJUN3r+uxmJRUS+wlOyoCWNaeJi9i2srhQF9GUoqyX6gvypiVRN7SfiFkpOkTWvkY8inpdCe9+3mnsBykP1hOuO6Lpby4MFn3H5gQ+f+oTmReXIes7urWzts5qqhZFdisHtA1gOUk9EJ4xP3TINIWVBqizfOvVPk5Qok0YHVL69fl+gEtEsf1vd2IimcqUaQ67XbbgJsONWvGqiagS9M9TnRn9AMKsi5Ftsg3Nm37zVZ1WijM87AxKHuMiaMoWkx9jHh7unq071g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GwkClJFq4Pnb31bzm7DqUFoF2hAGZB4+k+6RlrEKPAc=; b=tsGP3lt6AurlTqLADNblD+UPi7dktrO3nt/lzeYR1r8Lbd4IzFwezI93rYHGwxmeMpx4qjGt/bo/uYrTrTSpQlePzrTLHC+dVTufQ/hMZjsIguv0k+gv/BjSA2VsKDRc90DFeOJ7JkMMhygF2YyPE0E+Ilpn+NWUtfSRCVovmyc=
Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM7PR08MB5399.eurprd08.prod.outlook.com (2603:10a6:20b:104::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24; Fri, 3 Jul 2020 09:20:41 +0000
Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.028; Fri, 3 Jul 2020 09:20:41 +0000
From: Thomas Fossati <Thomas.Fossati@arm.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>, "rats@ietf.org" <rats@ietf.org>
CC: Thomas Fossati <Thomas.Fossati@arm.com>
Thread-Topic: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt
Thread-Index: AQHWQNlFdH/OqKSRhkWewqKHNl+chKjVRQwAgB8syQCAAGecAIAA7BAA
Date: Fri, 03 Jul 2020 09:20:41 +0000
Message-ID: <771640C9-97FF-4F02-8E09-7D23255CAAE7@arm.com>
References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> <1640.1593720946@localhost>
In-Reply-To: <1640.1593720946@localhost>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.38.20061401
Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com;
x-originating-ip: [217.140.99.251]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 2a29c512-9151-4b3e-b011-08d81f325fbe
x-ms-traffictypediagnostic: AM7PR08MB5399:|AM5PR0801MB2003:
x-ms-exchange-transport-forked: True
X-Microsoft-Antispam-PRVS: <AM5PR0801MB2003B476500F0AD42288C99F9C6A0@AM5PR0801MB2003.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000;
x-forefront-prvs: 045315E1EE
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 5Ts0JaSgEV0m9TFOjvUQwkfnoOyOzZLuuk6BzaT1lr7ZIqo9y6U6rLV5yWpC2HFGXL9sImTSgrF2wnqQyKtwUXIC5BGHXDzC024rb/ZstXlBrtMatTePXSxoVV/1K/J2DGLMV1Dg58LdD+XACdmH8STsaD50B2CuQQNnf5NelmMyYPrVsfzUo0/+Yc//bwNrjS8BipO0vUiMNAZN8UwqAJwoAGOQQj/p+a/mQ9yzkPaPo4oS0FOlPYYszGWzNTrUzww/7z1LQl98yfho/1OOvxrHKD9HHhbvN/gJjeIJyj/JbtDxCe3JJBhEHqu67sDjpSxtHzw4DLNne9EC92W3Bg==
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(376002)(366004)(39860400002)(346002)(2906002)(15650500001)(86362001)(6486002)(5660300002)(66946007)(83380400001)(8936002)(8676002)(76116006)(66476007)(91956017)(53546011)(6506007)(66446008)(66556008)(64756008)(36756003)(6512007)(186003)(26005)(4326008)(2616005)(316002)(110136005)(33656002)(478600001)(71200400001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: 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
Content-Type: text/plain; charset="utf-8"
Content-ID: <B591A9F3DF44EF48BCE233CAA87E5EFA@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR08MB5399
Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT038.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(376002)(39860400002)(346002)(136003)(46966005)(70586007)(26005)(2616005)(6506007)(356005)(70206006)(36756003)(110136005)(6486002)(83380400001)(316002)(186003)(82310400002)(81166007)(53546011)(8676002)(36906005)(8936002)(4326008)(478600001)(5660300002)(33656002)(82740400003)(336012)(86362001)(2906002)(15650500001)(6512007)(47076004); DIR:OUT; SFP:1101;
X-MS-Office365-Filtering-Correlation-Id-Prvs: 10b502c5-9888-4db7-4360-08d81f325b74
X-Forefront-PRVS: 045315E1EE
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 5S+b7d4PhPD6q/pyJGkL6y9Y0Zo5zdS1944C4ms5+c6P+NjhTyUf58ezgfOTkL+i9nwhFjtid0iORYRrwScXLqlpA3w4qR6JdJNpj9Vj2sZWoCtyWvSB47RTVofrWI7Iwz58nlrD7P9JQhXG8uBoAR8mzscs24s8M6Eme2NjrI/AA4ka7mN+plyYisFSpdMD9IcT3TCJlXC3uLmXORIR2xk3r2uNG0fTJzxC0MQLI7Pxl8EkldJ2nRWQtq2KV1h+IUkMtUnTjvFQ2wj8wdZTaor/u663i5NqGhFab6d1my9kYnfNjHG4d57MP/vObRjKFOSLpj5vkHtlDzjmm4uMvPF04tOo/z0hHKMEUoE17Ys+tEVApVFEpJatMQIdrkOrNCe6JKI3BKqGYajXYB76Ag==
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2020 09:20:48.7463 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 2a29c512-9151-4b3e-b011-08d81f325fbe
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT038.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB2003
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/UfAGTcnH4VloD4sW47EgUFDCgI8>
Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Jul 2020 09:20:55 -0000

Hi Michael,

On 02/07/2020, 21:16, "Michael Richardson" <mcr+ietf@sandelman.ca> wrote:
> Hi, thank you for the draft.  (Please expect some pendantry on how to
> say this is a REST based interface.  I don't think it matters what you
> write, someone will say you wrote it wrong)
>
> Some things that jumped out at me:
> > strong authenticity.
>
> I don't know what this means.  I think that we went to some lengths in
> the architecture to say that we were evidence of trustworthiness.  The
> paragraph that follows, which deals with assurance, seems much better.
> Maybe just omit the first paragraph :-)
>
> "are the three RATS actors" <- we never use "actors" in the
> architecture.  Some said we should, but we didn't go there.  We used
> "roles"... which I agree are things that actors portray.
>
> I suggest: The three RATS roles of the attester (A), the relying party
> (RP) and the verifier (V) are protrayed by three principal actors.
>
> I scanned through the rest of the document.  I didn't check your math,
> as I would really need to be in implementation mindset to do that.  I
> feel that there is perhaps some unexplained/implicit knowledge around
> the if= that I might not have understood the first time.

Thanks for the comments, I've made tickets for them with a -01
milestone.

> In this thread you offered to do a tutorial/walkthrough.  I won't say
> no to that, but I want to say that if the document needs a
> tutorial/walkthrough to be understood, then the document needs some
> changes.
> So, do that walkthrough, but with the idea not of explaining
> things, but of getting feedback on the explanation so that you can
> make the document better.

We want to strike a balance between rigour and readability and the
signal we are not making a good job on the latter is loud and clear :)

I've looked into Henk's Reference Interaction Models doc and it looks
like we could take inspiration from that for reshaping the interaction
diagrams.  I'm going to give that a stab.

cheers!



IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.