Re: [Rats] EAT Profiles

Michael Richardson <mcr+ietf@sandelman.ca> Fri, 16 September 2022 16:13 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBACEC1524AB for <rats@ietfa.amsl.com>; Fri, 16 Sep 2022 09:13:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vcxKyi_eeTmZ for <rats@ietfa.amsl.com>; Fri, 16 Sep 2022 09:13:31 -0700 (PDT)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3707AC14F749 for <rats@ietf.org>; Fri, 16 Sep 2022 09:13:30 -0700 (PDT)
Received: from dooku.sandelman.ca (dynamic-077-191-086-058.77.191.pool.telefonica.de [77.191.86.58]) by relay.sandelman.ca (Postfix) with ESMTPS id 79A331F480; Fri, 16 Sep 2022 16:13:28 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 04C2B1A0FCB; Fri, 16 Sep 2022 18:13:27 +0200 (CEST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
cc: "rats@ietf.org" <rats@ietf.org>
In-reply-to: <DBBPR08MB5915AC23726BF997EB9E44C4FA489@DBBPR08MB5915.eurprd08.prod.outlook.com>
References: <71934.1663019954@dooku> <DBBPR08MB5915AC23726BF997EB9E44C4FA489@DBBPR08MB5915.eurprd08.prod.outlook.com>
Comments: In-reply-to Hannes Tschofenig <Hannes.Tschofenig@arm.com> message dated "Fri, 16 Sep 2022 15:36:46 -0000."
X-Mailer: MH-E 8.6+git; nmh 1.7.1; GNU Emacs 27.1
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha512"; protocol="application/pgp-signature"
Date: Fri, 16 Sep 2022 18:13:26 +0200
Message-ID: <19805.1663344806@dooku>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/b1bARJJzYAySQiVn83xUSlNMRwU>
Subject: Re: [Rats] EAT Profiles
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Sep 2022 16:13:36 -0000

Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
    > I do not see a problem with the EAT profile in the TEEP specification.

There isn't any problem with it.
It's not *wrong* for TEEP.
I claim that TEEP is having to do too much work.
I also claim that the uncertainty created by EAT's too many options means
that libraries will be too complex and too hard to test.

    > I also have no problem with the EAT specification to define a list of
    > items to think about when creating such a profile.  I am fine with
    > having EAT leave options for profiles.

Okay, so if you want to have the option of having CBOR maps use indefinite
arrays and maps, then can give me a technical reason to pick this?

    > * Would it be useful to reference profiles by number (rather than
    > URLs)? Probably so.

It seems like we ought to have an optional registry, and if someone wants to
use a URI, then fine.
    
    > * Is it OK that the TEEP profile of EAT does not
    > mandate certain claims? Maybe it should do so, but this would be a
    > topic to discuss in TEEP not in RATS.

I agree that it's an TEEP issue.


-- 
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-