Re: [Rats] [Last-Call] Intdir telechat review of draft-ietf-rats-eat-21

"lgl island-resort.com" <lgl@island-resort.com> Tue, 05 September 2023 20:02 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A0D3C151996; Tue, 5 Sep 2023 13:02:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.908
X-Spam-Level:
X-Spam-Status: No, score=-6.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XYnHLWRa1Ebg; Tue, 5 Sep 2023 13:02:57 -0700 (PDT)
Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12on2135.outbound.protection.outlook.com [40.107.237.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BAFAC151073; Tue, 5 Sep 2023 12:59:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=h26qdPMJ73az82Sg+DGg4KlmRxIPGLG2ngorAtsLqHVFPtDxjrchG6mFIqnhFJYgDG3KX6gfiNkQGX5sreHbhTKueAE7t7upxdVA7ldcz/JkgyhVrEYlWpMLnBTSPT4BamnU3Lckdg9ljw9BkjYL4n61+4u+sXNV7J7REMyzYnIKcYrxo+fcSPBJhW9Rdjb34BiKp7dO/SSFeGoYX5fJ6Qd7QLf8yPWwJK2alrEGZnC4jqbxo0dBgqsSJKqUeSSrSjN8CUuxzGDx/thcafKyFqTNKtkdHhGgViGV0VauxHfPUaDYsIvnCGcohd3qmN7hzhr1LBiNHGyboWf9u7kvrw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=2Ds9Q0yoTVFVAQwuKcEH6TQTc55kgqu027dN71I+4PY=; b=RCXQhdRBQWtTzZvditext9nVO3jq6Ktamo1mm5SqT45KXNkJyncgPMr9hKyuy9Em6IOmrhMA5gpxmK5C06eRmuO4U3YztoKOehZN55qZG2B80C+Qfe38UnctjzeTT9V5BUbsOY6TQFzoXc/p7nAlqAsRfVVDErcuu4gJGjt+SlErt5oUciRCymM0QdcU8ovTBU27u3S6HOKfvIcR831jZQuDwxZJedAgLxcz/P/0H8R82n++tWiYMV9vq6R49qeWipLbbFIU4VFM0NiMvplCCT6lK5mD95jAKVR2IcHz7KfVzQ5uhX+MAS0vCeiVak23tFkDS53p8YiBc9THEPIkrQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=island-resort.com; dmarc=pass action=none header.from=island-resort.com; dkim=pass header.d=island-resort.com; arc=none
Received: from PH7PR22MB3092.namprd22.prod.outlook.com (2603:10b6:510:13b::8) by SA1PR22MB3780.namprd22.prod.outlook.com (2603:10b6:806:33d::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6745.33; Tue, 5 Sep 2023 19:59:26 +0000
Received: from PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::f317:e4d1:7e1e:3934]) by PH7PR22MB3092.namprd22.prod.outlook.com ([fe80::f317:e4d1:7e1e:3934%3]) with mapi id 15.20.6745.030; Tue, 5 Sep 2023 19:59:26 +0000
From: "lgl island-resort.com" <lgl@island-resort.com>
To: Haoyu Song <haoyu.song@futurewei.com>
CC: "int-dir@ietf.org" <int-dir@ietf.org>, "draft-ietf-rats-eat.all@ietf.org" <draft-ietf-rats-eat.all@ietf.org>, "last-call@ietf.org" <last-call@ietf.org>, "rats@ietf.org" <rats@ietf.org>
Thread-Topic: [Last-Call] Intdir telechat review of draft-ietf-rats-eat-21
Thread-Index: AQHZ4CeZttnTCHL0Ak+Ce+5xWTw50bAMppWA
Date: Tue, 05 Sep 2023 19:59:25 +0000
Message-ID: <8F0B7E08-9524-41D5-8922-3E8B8F4A8E47@island-resort.com>
References: <169393884613.30037.10568711888766281@ietfa.amsl.com>
In-Reply-To: <169393884613.30037.10568711888766281@ietfa.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=island-resort.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PH7PR22MB3092:EE_|SA1PR22MB3780:EE_
x-ms-office365-filtering-correlation-id: e2c3b207-0b8f-4dd5-e970-08dbae4a9b51
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: /rCifQ306QcqKpv5A7bMf4xEcHtAb2m3zKjMoV+PnNkoiVDGV0K/xsuzfkBNg+uznAo1g7XXPwGnALLipDda+c6d4qde8dhUz30BV2yCX4lYgwZ91oT/QErwjcNBNraLkKCwoojcPHItQxcyjwkJIHeiE+Bxt29tMUho6Bo0Xo8kcxYmOSAnj/WZUKQDP3IvVCOcCeaJGTZa+Tbn3uinE0V1EiwZiCNJm67lYaxHGT75lbsxLrEtgKEPoDR8fHpw8HvNrAyor4TD/y2YNvK8HMT76Wr1LSpbAqKfCoX0fM/Io/uIq6x7s+q+CG1RDfitJu4GzdpbJB58nh+IYS8jiTteb+UZpNqHeyAPoDWBScLrWBTzSYYlvISw4o/ZBqD7u9b060eWMt2YZYm2c8tSEbY9QN0AvVdGX4Flm7bGaZdW8cLpsoHikHjR2yWLMypZtYYUJvSptaSI2r6ttxCP4lwGic0xekHKst/KQvL+WUwMi3z9o7wR3t/XMlUJfqbb4/j9+tViGm1CpOOvnsNyvinF+1c6576ngNerQa9pkho8CECKUF7ziBd6JTgCknG6fx2neQRYJEPDiWGNSfjEFOJgGsl+i0xROu9ykSBQzFmamsS00DJB9IFK1pxw9lLRssJe+a2i4fJR4zaxvhEYmQ==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PH7PR22MB3092.namprd22.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(376002)(39830400003)(346002)(396003)(366004)(136003)(1800799009)(186009)(451199024)(122000001)(6506007)(6486002)(71200400001)(6512007)(83380400001)(966005)(2906002)(66574015)(2616005)(478600001)(26005)(41300700001)(66556008)(64756008)(6916009)(316002)(54906003)(66446008)(66476007)(66946007)(76116006)(4326008)(8936002)(8676002)(5660300002)(166002)(38070700005)(38100700002)(33656002)(86362001)(53546011)(36756003)(45980500001); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_8F0B7E08952441D589223E8B8F4A8E47islandresortcom_"
MIME-Version: 1.0
X-OriginatorOrg: island-resort.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH7PR22MB3092.namprd22.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e2c3b207-0b8f-4dd5-e970-08dbae4a9b51
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Sep 2023 19:59:25.9539 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: ad4b5b91-a549-4435-8c42-a30bf94d14a8
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: stqLoSE95arlh1QqwOY9Pp6btr6LHs/0fZsFyARmOfu6iKkU6uQ5rBlxK+nR44JyYcSzZ9nijfnklcDaUEjUxQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR22MB3780
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/d2t9mZCXmsSUftWVhEeB944h6Lo>
Subject: Re: [Rats] [Last-Call] Intdir telechat review of draft-ietf-rats-eat-21
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Sep 2023 20:02:58 -0000

Hi Haoyu,

Quick questions / answers below. Others to follow.

LL


On Sep 5, 2023, at 11:34 AM, Haoyu Song via Datatracker <noreply@ietf.org> wrote:

Reviewer: Haoyu Song
Review result: Ready with Issues

This review is done as requested by the Internet Area Directorate. Document
editors and WG chairs should treat these comments just like any other last-call
comments.

The document needs an introduction or references to the background and related
work pertaining to the problem domain. Without understanding the status quo and
the state-of-the-art solutions, it’s difficult to evaluate what the proposed
framework has improved and the value of it compared to the existing solutions.

Was the RATS architecture document, RFC 9334<https://datatracker.ietf.org/doc/html/rfc9334>, insufficient for the background you were seeking? It is referenced early in the document to provide this background.


More than 30% of the document content is in the appendix. Are these topics
considered non-essential and can be ignored? How do the authors plan to treat
these materials in the published RFC?

We put the appendices in so they will be published with the document. We think they are all useful. Note that RFC 8446, TLS 1.3 has a similar proportion.


P8 “The claims set includes a nonce or some other means to assure freshness.”
Should these means be explained in more detail? The concept and mechanisms are
not obvious to readers.

The document supplies a set of claims and profiles for EAT. As long as EAT is
motivated as necessary in real use cases, I don’t see a reason to block the
advance of this document.

Some editorial suggestions:
Acronyms should be spelled out on first use. It’s better to also provide
references. This applies to all the acronyms throughout the draft (e.g., TEE,
CDDL, COSE, JOSE, ...)

P9 “For example, measurements in evidence may be compared to reference values
[and?] the results of which are represented as a simple pass/fail in
attestation results.”



--
last-call mailing list
last-call@ietf.org
https://www.ietf.org/mailman/listinfo/last-call