[Rats] Re: [EXTERNAL] Re: draft-fv-rats-ear-05.html

[Thomas Fossati <[e-mail]>]

Hi Greg,

On Wed, 12 Feb 2025 at 20:15, Greg Kostal <[e-mail]> wrote:
> This can be a big, potentially breaking burden on existing RP's which
> have implementation in place that cannot handle the logic to iterate
> and reason over all the appraisal claim-sets.  As an example, the
> Azure Key Vault service's "appraisal policy for attestation results "
> language grammar cannot reason over an arbitrary sized appraisal
> claim-set and reasoning over a known size N would be pretty painful
> (i.e., create duplicate policy for index 0, 1, ..., N) and potentially
> breaks internal size limits, etc.
>
> https://learn.microsoft.com/en-us/azure/key-vault/keys/policy-grammar

This is good to know, thanks. My (limited) experience is with OPA, which
is not limited in that respect.

> If EAR discussions aren't the right or best place to discuss details
> of an EAT format for composite attestation results, please ignore my
> distractions.  And hopefully point me somewhere else.  😊

On the contrary, EAR has composite attesters as first class.
Feel free to share and discuss your requirements with us :-)

cheers, t