Re: [Rats] Same claim in Evidence and Results (was Re: Second attempt at early allocation of CWT Labels (PR #152))

"Smith, Ned" <ned.smith@intel.com> Tue, 22 February 2022 20:31 UTC

Return-Path: <ned.smith@intel.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 421673A1429 for <rats@ietfa.amsl.com>; Tue, 22 Feb 2022 12:31:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.671
X-Spam-Level:
X-Spam-Status: No, score=-2.671 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.576, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=intel.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id chCxQSTY5YJa for <rats@ietfa.amsl.com>; Tue, 22 Feb 2022 12:31:01 -0800 (PST)
Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81BFF3A1428 for <rats@ietf.org>; Tue, 22 Feb 2022 12:31:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1645561861; x=1677097861; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=Tl9ZHS4kJnt0aDPe52P1vYR5MVxzOeVM4VIl4NIxSJs=; b=Wq65CFGiCNVfLnkvKTQzNs5y5utXdP5waCZnopQ2oYITJKxaqh0yxXD+ ZK7dgUYuscBPyOnsTbikHD1xC27X0Cm9egEuh7sijQOCZdBO3NTAvh2tx 8+Mc4j5R6jxzIfsNPEXPHQjHke0YzLtRT0dDnXUpmZafwCfUNHNfTCqXc ahPMWQJ47ax7iH/1ayqt5NtZHDaIZHd76n5/sfXmwXT3NPuNuCWX1jHZ4 W5zMnvgyRi3CuUs1JEYTG2kt82Qu1Zb3ND4+sYUuSe5lEEHiC+Iixn3Ug AcetVQ2VFkRtNgqg0qEC6CZQCTY+mDr7xCEjmg6binVXloUU1SLLqL85r g==;
X-IronPort-AV: E=McAfee;i="6200,9189,10266"; a="239192891"
X-IronPort-AV: E=Sophos;i="5.88,389,1635231600"; d="scan'208";a="239192891"
Received: from orsmga007.jf.intel.com ([10.7.209.58]) by orsmga101.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 22 Feb 2022 12:30:45 -0800
X-ExtLoop1: 1
X-IronPort-AV: E=Sophos;i="5.88,389,1635231600"; d="scan'208";a="532380896"
Received: from fmsmsx604.amr.corp.intel.com ([10.18.126.84]) by orsmga007.jf.intel.com with ESMTP; 22 Feb 2022 12:30:44 -0800
Received: from fmsmsx608.amr.corp.intel.com (10.18.126.88) by fmsmsx604.amr.corp.intel.com (10.18.126.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.20; Tue, 22 Feb 2022 12:30:44 -0800
Received: from FMSEDG603.ED.cps.intel.com (10.1.192.133) by fmsmsx608.amr.corp.intel.com (10.18.126.88) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.20 via Frontend Transport; Tue, 22 Feb 2022 12:30:44 -0800
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (104.47.57.168) by edgegateway.intel.com (192.55.55.68) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2308.20; Tue, 22 Feb 2022 12:30:43 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Pekv0gO6P7SObGYA4sIL3wcj/aY3CevD7sFnRmeOwfrVJvzm8XOBfRbqwgb7rlKSU5vsuE2jphM1AHKTdg9qPN1w52YwtsWN9/duyhNhMz/d0CUw9FwWxm1jFnDa0YePY2QS8XKpBxdjh0L41fBTxMTT53BL95FIC2PUr987o07GgzBk2QmbUIcJnRU9vyOk2PkkjPBD+OIiICiqYuo0NxZ6eqkT6N1RIJsDng/EyGJT3KoHzcBKRNze7kDcHIfaTKJCI4trZ/dib/S1/bfis+YnXE4tQqf/DCU7wktMfBoMWnJGznC/dYVt9tANLb5tWdcE7ZHGBm8nYiMHEf2umg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Tl9ZHS4kJnt0aDPe52P1vYR5MVxzOeVM4VIl4NIxSJs=; b=WPhynj/nenkUeMJAX2Sy9hdBQvDHpdN+hdAJLB0J0NdfisI17gmZYvQlpKKNBX2OkyJpZyifxODErvPf7O0r35XCPbLMUpcZuI8q0OtpJj70uaMLsLaeWgXmkVclPh7+R7aoVHo4wPRVNdL94SAQV45hNe1RJRLpTaQuyR9x6f0P9FNq8PWfuMH/VH1ax0um0JcPZ2E6E0RQ4+1LOXe4Ib6LQbSsf+jHZ7kAuvumF1ZkKMZxmB3ynq//9b865VcBMaZ5MEnUlTKd9z3zP2wxbrbefIiCJiFHG8R5+rIFg/LgzXAlbxm6qHBlirPkUHycUvwgFEisyEZOwvzm698Jlw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none
Received: from SJ0PR11MB5184.namprd11.prod.outlook.com (2603:10b6:a03:2d5::5) by MN2PR11MB4613.namprd11.prod.outlook.com (2603:10b6:208:26d::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4995.17; Tue, 22 Feb 2022 20:30:42 +0000
Received: from SJ0PR11MB5184.namprd11.prod.outlook.com ([fe80::5cab:988d:9002:8251]) by SJ0PR11MB5184.namprd11.prod.outlook.com ([fe80::5cab:988d:9002:8251%5]) with mapi id 15.20.4975.011; Tue, 22 Feb 2022 20:30:42 +0000
From: "Smith, Ned" <ned.smith@intel.com>
To: Laurence Lundblade <lgl@island-resort.com>, Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
CC: "rats@ietf.org" <rats@ietf.org>
Thread-Topic: Same claim in Evidence and Results (was Re: [Rats] Second attempt at early allocation of CWT Labels (PR #152))
Thread-Index: AQHYJf/BnZumjZrCOUeGAbiGey/M/Kyd71uAgAHpBwD//44UAIAAiLoA//9/CACAAIgUAIAACMuA//+E64A=
Date: Tue, 22 Feb 2022 20:30:42 +0000
Message-ID: <7CFE7304-4F9B-47D2-A899-29AFBF6FD82A@intel.com>
References: <AM6PR08MB43254A236E44B49C1DCD9F8C8E369@AM6PR08MB4325.eurprd08.prod.outlook.com> <4706A62A-DA9F-4FA7-9E65-B27748D3F408@island-resort.com> <c2ea51c0-baeb-14cf-1d32-40b2995bd1ce@sit.fraunhofer.de> <4DABED4B-01F0-4678-8974-DC914BC170C5@island-resort.com> <e8b0895b-e3d9-0e33-e4a2-7d5e8b5ecc5e@sit.fraunhofer.de> <F1D075F6-1704-4B04-B127-9BB590C38004@intel.com> <a2c808b6-e8e9-ff73-b834-8772c5d0c365@sit.fraunhofer.de> <543A724D-C060-43AC-82C6-489D57A898D2@island-resort.com> <C50E82F7-B9FE-48F3-9BF2-2BC05B2A9D51@intel.com> <38794864-746D-43B2-A707-CB992AC197C2@island-resort.com> <61D2495E-E070-4C26-AF02-BE2ABCAAE897@intel.com> <E42B0CEB-2778-4AAF-ABCB-CCDC86286C94@island-resort.com> <5173ED99-D220-4D1A-9E26-7DCA39180A7D@intel.com> <ae5bb667-79f8-469e-09de-12df104d697f@sit.fraunhofer.de> <F5868DD0-D8BC-41EE-9DE8-9E3608F5137E@island-resort.com>
In-Reply-To: <F5868DD0-D8BC-41EE-9DE8-9E3608F5137E@island-resort.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/16.58.22021501
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: eaaa7763-3f27-4759-6869-08d9f6423260
x-ms-traffictypediagnostic: MN2PR11MB4613:EE_
x-microsoft-antispam-prvs: <MN2PR11MB4613BA5175CB0C4C50066799E53B9@MN2PR11MB4613.namprd11.prod.outlook.com>
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SJ0PR11MB5184.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(366004)(38070700005)(82960400001)(2616005)(186003)(5660300002)(26005)(122000001)(6512007)(38100700002)(8936002)(86362001)(2906002)(316002)(66556008)(71200400001)(83380400001)(36756003)(66476007)(91956017)(66446008)(76116006)(64756008)(110136005)(66946007)(53546011)(6506007)(6486002)(33656002)(8676002)(508600001)(4326008)(45980500001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: YSz00tqQYWivPCGrWnuG4dFHZsMCJXsIqRFWrhnjtXKp7YgpwP1g+qLSNgg6UL1DpYkJ1pTDM2W4GhHi0xO0gUF9K7FJhL1ED07Z9WRzm3HDftzjr95+vD2jWdKJCfIh5XaRzx2QL6MLmck1VA5hcbXgCYVof3UED5G511Znub6WlPlKn0QIw2yn/u9wxcWp2LEVd8/l46RmCdV0V3guS8WV1Nx6Bku60TK465JM2JZUEOMGFizaSJPZUYykd+Qkvm46pZn6OiT717PpupdGjZxZPpgHA6NsEhCNyKMAmNQKS+T9R2Sp2rnzrZqVI7hphp82oXK0uQUeceXt4ZxVuO2kO4v/M+CcdQW5dgMfz865yuEEA3dc/oupzP2Y/CdQSYjb2I6HtcaTNrlpiWKfLBkbw4rA89Fkhxh3A2TBgmNr4Ac/yrZqrUsgj81z66XbQKjd0gCA7auHagZ3O9cWkuch1NFsMBpsiblZyQU4CXpu0cRFy0TgoIfC8O5Whx3+IHrIz73A3hzkhp4dPrOyo/3Lkqxuuj6fbdObFAZHWCBxVX5hBrihoj9YkVyzaf9Y4s/chpEM/SiHg7V71dmLNs5uxdh0ZYONB+5gpJnPJdD3Gv+Yi9hcPoLN6FVdCQY/Ho93GCh2nDYZcV9aEVC04YHmWXDSrsKxvi/KQXhgarwNkvTEoygu+qjYJmtuxv62FizfXg8Oa/X1MAaTg+o1yTpzILSGH21DjBg/u//TIBcfhlZl21xU7NieIvUpH92xN0B4VQyxv/wsUgHv1enKOkFrNs6jVrdloNtQkJ5myogd7tdIaHDIPieIZRGiP0vdzKiDFYN+/pf1Pe0hvLiMEforCXfNquOweVZhj0H+HKPCFsHZ9BIQDMlDa5XwFgoyiufMOdTSl0Mh6dmxfdXyrpi2u9AgJONGD1uqz8zxTwKjD0UkH0EGAf8dhefgURqnuKksF8fhG1Z/51wuPwWMQCZ5fqIXUSJOKouigqIKtRmlb9jzhHHrl0uXOhLzpi2YURgA0QAsOjS/zb4FJzR9v5Bnv53GSoP6AQwN/+zWrmTVeDB1uDROQvBfiU0l0ERiaVRNxShliCLuImi/U0jyA1OjJlyIZhVlQ+VHGBeNaiC/BpiulN/AtvEeMdnxDkUZ/hUuxSVhiGQvGVeEhYd/XXLaSjHRxJ6iOP7GTitwmDOk6Eh+kK76ySA5KziAQ6KnjuZM3M0CIZxFSevbRhL7+JXAuC6aPODfJHl0wVk+2BMFLQeqzcU9hU9NtkkePRI5lcaGX+vCLpQJdDpd+NtdpjcRENQlToCWFwGqs/8sPM8lNj6gU/m3Uz23aGv/zOZ3/iGrsQmehbBRekyeDYWO11mHy5Fa0oTuIxFPQX+NTEvsHL5AYSsiFYYdvqB7LcPZDmBLp8rnOtTdkLlNpkOE4Rk3ch2N0udX5uoHSvxgrE1f72b5HkxyFvg0Q3MFPDmFq/EhgE9ut3h2smj8utsEiVVYe85UzPyyk/MdMfu7H44hTgXKRyPzU4Igd+779bx0M5eFo3NFbtdvCnNftRQKcb4PVobSng+GCBSN+RZDAcVUWU934sPfqADNRSLkJo9tPgKxs39tw2xrcojlWtY0euIqlSdo5HDas+mkWDGMYOk=
Content-Type: text/plain; charset="utf-8"
Content-ID: <8FA3F4FEE67B9540B30FEFC6669F7D99@namprd11.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SJ0PR11MB5184.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: eaaa7763-3f27-4759-6869-08d9f6423260
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Feb 2022 20:30:42.2308 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: GTxwEEP4RBqhPclDZL7K7PqgH2TNdEPhzghSVBNiC9163+RLtNTJDKjWylaI+UtNoKRyxIXJxZCcAHokdjBFrA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4613
X-OriginatorOrg: intel.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/ak0hNUWmdXBCIv04yw-bnXtnDlg>
Subject: Re: [Rats] Same claim in Evidence and Results (was Re: Second attempt at early allocation of CWT Labels (PR #152))
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Feb 2022 20:31:06 -0000

I asked for clarification about what attestation roles' perspectives were assumed when describing the various claims. This was because there is language that suggests Endorser / RVP roles were considered. There is language that suggests RP, Verifier and Attester roles are considered too. But it isn't clear that all roles are considered for all claims. 

I suggested that if the goal was not to consider all roles for all claims, that the claims be described based on a least common denominator assumption. That is, only wording that is true for all roles would be included. It is a bit of a trick question in that you have to consider all roles in order to know what attributes will be common. It also means anything that is specific to a role or nuanced would not be included so as to avoid special case descriptions. 
 
That means, terminology that is aimed at manufacturers, relying party, verifier, attester should be removed or clearly identified as informative. My guess is the result will be that the CDDL most closely captures normative expression and most everything else is informative. 

On 2/22/22, 11:51 AM, "Laurence Lundblade" <lgl@island-resort.com> wrote:

    Absolutely do not want to expand the EAT doc to cover Endorsement and Reference Values in any way, but maybe another draft might make use of some stuff that is in EAT.

    Ned suggested it, not me. :-)

    LL


    > On Feb 22, 2022, at 11:19 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
    > 
    > You are kidding, right?
    > 
    > On 22.02.22 20:12, Smith, Ned wrote:
    >> Maybe that’s a good idea. Maybe it’s not. Not sure yet. :-)