[Rats] Clarifications around Endorsements scope

Thomas Fossati <Thomas.Fossati@arm.com> Fri, 30 July 2021 10:01 UTC

Return-Path: <Thomas.Fossati@arm.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 266423A2452 for <rats@ietfa.amsl.com>; Fri, 30 Jul 2021 03:01:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=V5dfsvhI; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=V5dfsvhI
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U3uJxLpVpH6O for <rats@ietfa.amsl.com>; Fri, 30 Jul 2021 03:01:48 -0700 (PDT)
Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30080.outbound.protection.outlook.com [40.107.3.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D52993A244D for <rats@ietf.org>; Fri, 30 Jul 2021 03:01:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tPMZuC3baeqR+XFZVs3u7AUSofVxjpykZ2LPtZxStNY=; b=V5dfsvhIyitFg8p40836h2fcKLSrSoijlRqHdcfwWKGdrpUR+dWeO2Rt/4CJvRQ5+s7u0Gj+9T06o1JK6ZRDZblyLtjdiVmvY3bJU2UD30UrcuUDmydKu8SWAiw/x1hr8528vlzgRFd/+LXWAweAcqSj/d2afMoqYHQpCSThwBE=
Received: from AM6PR01CA0061.eurprd01.prod.exchangelabs.com (2603:10a6:20b:e0::38) by PAXPR08MB7188.eurprd08.prod.outlook.com (2603:10a6:102:20a::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.18; Fri, 30 Jul 2021 10:01:42 +0000
Received: from AM5EUR03FT031.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:e0:cafe::e) by AM6PR01CA0061.outlook.office365.com (2603:10a6:20b:e0::38) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.18 via Frontend Transport; Fri, 30 Jul 2021 10:01:42 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT031.mail.protection.outlook.com (10.152.16.111) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.18 via Frontend Transport; Fri, 30 Jul 2021 10:01:41 +0000
Received: ("Tessian outbound 1e4fcc40c873:v100"); Fri, 30 Jul 2021 10:01:41 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: e5aa96b947215927
X-CR-MTA-TID: 64aa7808
Received: from f5df5b1e56b0.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id ED72997D-C6DC-4C3B-A216-830BA564BBC9.1; Fri, 30 Jul 2021 10:01:30 +0000
Received: from EUR01-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id f5df5b1e56b0.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 30 Jul 2021 10:01:30 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RCDPOa149GAALXWgyp8DDnFOzrAW443F2LTzO3lyOSgEIkbVwEqOCD9iHV+lSSg4GK3STnAsnVWO1j1L3LqJ2GHCSlmXeyQtAUqMUV829B/sD07vlEMLcA1Ko2wpCWsMMZ/pLwt2JF9mIOciDkOMcPlE4vhZFqV51dkusRE/w6FnFfJRu6WQapDgWESUVMz+HvCRn1PuyEooBkuej6AjdcZnIIP33v5Vrn2CAMDBEDvn7j3eQwRQ8UgQPXUl4ByUnYJXvEo6RG/byK/zQpyRo7LR6TKYJ7VTgNb57ItmRk/d+9GW4T9ecK/wb/OG92KLlLN6rL0nT5e8guHHEE129w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tPMZuC3baeqR+XFZVs3u7AUSofVxjpykZ2LPtZxStNY=; b=dyds7o4D9LP3u+WLmQQ0HU3AI7CpaGdyINBSdMb1maTMy1kypX778mCuWSfNGvBUCFVHWFTluzIbiSRcKab0c6Ly1ZsuUb8b5VtiCTMRlG1FeId/4vwUmCimSVxbfFgXR3nUj3HXde+Q3HTFn5ToVF9+i/Vkr7ARz+OoPwEsu8YazzESokUVDnvh7ZTFFFenKehdylYrOdxT5aLlgI3qX0fATe1iynwgfjDIqpSQ1MKX9pPoxf0Ti8pLSQIok7AB94aGXD+XPhR9K/sD42b14+Z5tUMQm6XHWme51gvreh1MdP+4f+5dDIX8zh6D2QZxf/ZjwPre6AnIlANE5OI9Yw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tPMZuC3baeqR+XFZVs3u7AUSofVxjpykZ2LPtZxStNY=; b=V5dfsvhIyitFg8p40836h2fcKLSrSoijlRqHdcfwWKGdrpUR+dWeO2Rt/4CJvRQ5+s7u0Gj+9T06o1JK6ZRDZblyLtjdiVmvY3bJU2UD30UrcuUDmydKu8SWAiw/x1hr8528vlzgRFd/+LXWAweAcqSj/d2afMoqYHQpCSThwBE=
Received: from DB9PR08MB6524.eurprd08.prod.outlook.com (2603:10a6:10:251::8) by DB6PR0802MB2342.eurprd08.prod.outlook.com (2603:10a6:4:86::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.18; Fri, 30 Jul 2021 10:01:29 +0000
Received: from DB9PR08MB6524.eurprd08.prod.outlook.com ([fe80::9d07:3b88:9775:9347]) by DB9PR08MB6524.eurprd08.prod.outlook.com ([fe80::9d07:3b88:9775:9347%8]) with mapi id 15.20.4331.035; Fri, 30 Jul 2021 10:01:28 +0000
From: Thomas Fossati <Thomas.Fossati@arm.com>
To: "rats@ietf.org" <rats@ietf.org>
CC: Thomas Fossati <Thomas.Fossati@arm.com>
Thread-Topic: Clarifications around Endorsements scope
Thread-Index: AQHXhSndFzS3Pmn19EmYkAErOZBQvA==
Date: Fri, 30 Jul 2021 10:01:28 +0000
Message-ID: <7F564CFE-FF77-4FAC-9C05-D15C15838B63@arm.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.51.21071101
Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-Correlation-Id: a39515a1-4c41-4a1c-d6c6-08d9534107c7
x-ms-traffictypediagnostic: DB6PR0802MB2342:|PAXPR08MB7188:
x-ms-exchange-transport-forked: True
X-Microsoft-Antispam-PRVS: <PAXPR08MB71887F8D129FBE640BC7DAEA9CEC9@PAXPR08MB7188.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:8882;OLM:10000;
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9PR08MB6524.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(366004)(39850400004)(346002)(376002)(396003)(6512007)(86362001)(6916009)(4326008)(64756008)(316002)(33656002)(6486002)(2906002)(71200400001)(8936002)(8676002)(38070700005)(186003)(6506007)(91956017)(76116006)(3480700007)(36756003)(478600001)(66556008)(66946007)(66476007)(66446008)(122000001)(83380400001)(5660300002)(26005)(38100700002)(2616005)(966005)(45980500001); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: HJJ3dCSI17eb4lhf0ywFXu2JCi9GuM51GYarB9yq76Fhe9dp/szeXWGxXXlzgwwyICPZoNjk1qCfXwenMsJkV5qM5dN1hc8aI3mOi7WyiaSgmIy3Ehioy4H6togAw8ncFuVrJf+kz1oKqsRxaa15FVFHYP1nJm9hbsFOs6OZjLGvCJlmVIwI5u4+MDicQwMbvpytatDNTfVlgRuH4Qa3g/zqS/zS56OI0wo2HasctK+H5+Vytc++McFx0vR8jkfh0Cg1ZNAwPqERFFwk2bC5/mWFcb/ilYL3CWReb9xeMINAnzR8uMETrHOuNskGawHXt6MiHhierrV1x3m8L+3sIhg98jaaXl26coe1lpLia3NNGm2mk3otVjfA0e11+nQcoTfvfFsSMTpCCahFWhfKk3FffhgDMFZF4QvMvG6FMYMu7sxRimtUnp/r8PsH0BAZD8Qj/udgIzHg8w1otthQMb4UBUOix/n++B31anLIJOpuQ2GiPO9nk6M60EaCLRbFTgFtAMQowgOdgmT9DMFPDQreO+prCKp06c7wWOpcgN/Ugqpy5JM5Sxr13Px4kNd2PBAo0roN6B6UD+ZWLRpYK8n5KmaT4PF/xxe22g/PKKZxylqUn3D289vHcKf6AURBhNK19qEPV08azgyE+w3wGxkcQfTOnoT/+ihL72QmOSGwG1gPjEmfYfGmebXlBmzXkm/FkkzVAfe7Gzmbx040aciAuBk7yINvBWK35o0ZrMKZ+/ynmXHCNScUpBAYYdlH4XAXb93gDbYwBZR+iBckjl+ieCklQoFT1d87DCcY8l/5naFQWxQGJLQdXV4hf8xwY/FRZsAaej1AMCBQG6k7BdiOODatLdURnHbgmpey3Eeed+mI+fRNUhGJtcrkOIyRLIpGpVviyEPKZRcDVc66GSI40vPE0aoH9IkohlchciYEqxGJCqHQ86lDQ5x4iFfZiovFJ04oDN63i0Swo5BOZsLSu6V+j9V3EWEwZDZ+s+umF0lm11F5vqhj21S5ZVM5ypE6QqthBrTCTheQ46uFvLy2UatmKDr0lDoFpalyC75Kv2sKGKnwBkR5SjOUuboWiWpxQ6uHbtsQ7DMLGGweZX37W8JKbtw4rnr8vZbdz17T3B7jrUGdJ8E326jzS6OprExxc/dbhk6bwe45eXus3FVR2gyL9do0gRGocojEHC04yP9Y9ZnqG4xn3U4+MiXShdobguQn4LWWSLaPrj46NFqj2dxUun/sTlQl9D/kPJBmWpVA/+zNludndvmzZSbysjzMyaIWHMv6ejTWqRXlxJ3zedR2wT3Jc1q+uS8ILcb0OEc8eVaqXPLuVFG+3cXxeT0Cb7uzNWQu9p89coDEew==
Content-Type: text/plain; charset="utf-8"
Content-ID: <3A059FB4C9880D4EBEE0577836A74C32@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0802MB2342
Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT031.eop-EUR03.prod.protection.outlook.com
X-MS-Office365-Filtering-Correlation-Id-Prvs: 50e63abb-1a4c-4c98-70d5-08d95340ffbd
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(136003)(39850400004)(346002)(396003)(376002)(36840700001)(46966006)(356005)(478600001)(2616005)(26005)(6916009)(33656002)(5660300002)(966005)(336012)(36756003)(82740400003)(186003)(81166007)(6486002)(8936002)(36860700001)(82310400003)(6512007)(8676002)(316002)(6506007)(3480700007)(83380400001)(70206006)(47076005)(70586007)(2906002)(86362001)(4326008); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jul 2021 10:01:41.7592 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a39515a1-4c41-4a1c-d6c6-08d9534107c7
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT031.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR08MB7188
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/XSwlwi80ql4JBo1ThK4KdE-A6ak>
Subject: [Rats] Clarifications around Endorsements scope
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Jul 2021 10:01:53 -0000

Hi all,

Before I go on holiday and my memory is fully reset :-)

During the session yesterday there was a bit of back and forth on jabber
[0] about the scope of endorsements.

It looks like the ARCH phrases the term [1] and illustrates it [2] in a
way that has led people to believe that an endorsement is only scoped to
an instance.

Personally, I think this is a limitation that serves no purpose other
than creating a gap in the conceptual modelling provided by the ARCH -
exemplified by our inability to give a proper name to the DLOA thing -
and I'd like to see it clarified that the definition of endorsement is
orthogonal to the cardinality of the (sub)set of Attesters to which it
applies.

cheers!

PS: I shall note that the CoRIM/CoMID information model builds on the
assumption that endorsements can have instance, class and even "group"
(e.g., an anonymity set) scope.

[0] https://jabber.ietf.org/jabber/logs/rats/2021-07-29.html#20:57:54.659809
[1] https://www.ietf.org/archive/id/draft-ietf-rats-architecture-12.html#section-4.2-1.4.1
[2] https://www.ietf.org/archive/id/draft-ietf-rats-architecture-12.html#name-endorsements












IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.