Re: [Rats] Call for adoption of draft-birkholz-rats-reference-interaction-model

Your distinction between reference and generic makes sense.  Some text can be added explaining that. For example “the flows in the document are descriptive, not prescriptive; actual protocol flows may be different as along as they achieve the same results”. 

I suspect that mobile apps using the whole Web API development paradigm that use Android Attestation will have interesting flows that are dictated by the app, the layers in the web/app SW libraries and stack, how AWS/Azure/... works and so on. But they should still achieve in effect what is laid out in the reference interaction model.

I support adoption.

LL

> On Aug 18, 2020, at 5:40 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
> 
> Hi Laurence,
> 
> there is a slight difference between 'generic' and 'reference' (at least from my PoV).
> 
> Yes, 'these' are THE *reference* interaction models for all of RATS - that hopefully also accommodate all FIDOs (at least that was the intent).
> 
> Meanwhile, each reference interaction model is probably always specific to a subset of RATS use cases - which is intentional.
> 
> If a use case - or better: solution I-D - uses a specialization or derivate of a reference interaction model (because it describes something new) that can be easily elaborated on by using the reference models as... well a reference.
> 
> More generalization or more abstraction of course makes the models fit "better" to bigger sets of use cases, but it also removes the value they add. For example, if a solution does not require an Authentication Secret ID to be conveyed, then it can now simply refer to the concept and highlight why the contribution does not need that baggage.
> 
> As a result, I think I would neither call them "THE models" nor would I attempt to generalize them more. They are simply "THE reference models" that help with placing emerging solutions in the landscape of the exiting ecosystem (which is notoriously hard to do, typically).
> 
> I am not sure, if my reply was helpful or not, though :-)
> 
> Viele Grüße,
> 
> Henk
> 
> On 14.08.20 20:32, Laurence Lundblade wrote:
>> Henk and others, can you comment on how this relates to FIDO, Android Attestation, ARM PSA Token and such?
>> It seems that a decision has to be taken as to whether this is:
>> - THE generic interaction model for all of RATS in which case FIDO, Android and such have to fit into it
>> - One interaction model specific to a subset of RATS use cases
>> I did a quick read and it seems like FIDO, Android and such could fit. But it seems a commitment one way or the other is needed up front. If it is THE model, then the work to make sure it is fully generic needs to be done. People (not just me) will have to review it to see if it fits all attestation use cases. If it doesn’t there will be writing to do.
>> Right now it seems framed as THE interaction mode (abstract, introduction sections). Are the authors committing to this as THE Rats interaction model?
>> I think this needs to be clear before the document is adopted.
>> LL
>>> On Aug 12, 2020, at 1:25 PM, Nancy Cam-Winget (ncamwing) <ncamwing=40cisco.com@dmarc.ietf.org <mailto:ncamwing=40cisco.com@dmarc.ietf.org>> wrote:
>>> 
>>> Hello RATs members,
>>> At our IETF 108 session we discussed the draft:
>>> https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/
>>> There was interest in the discussion on the adoption of the topic, but ran out of time to get consensus on “where” these interaction models should be documented.  Further, Henk started an email thread prior to our session to get a sense of interest and where these models would best be described.
>>> Given those results, there seemed to be a preference to keep the document as a standalone draft that describes all models.
>>> Thus, this is a Call for Adoption of the draft-birkholz-rats-reference-interaction-model to serve as the starting point for a standalone draft that describes all models.  If you have reservations for documenting interaction models, or for such a document to be a standalone draft to describe all of them please respond to the mail list and provide rationale for your concerns.
>>> The call for adoption will end on Aug 28.
>>> Best, Nancy (on behalf of the RATs chairs)
>>> _______________________________________________
>>> RATS mailing list
>>> RATS@ietf.org <mailto:RATS@ietf.org>
>>> https://www.ietf.org/mailman/listinfo/rats
>> _______________________________________________
>> RATS mailing list
>> RATS@ietf.org
>> https://www.ietf.org/mailman/listinfo/rats