[Rats] Re: When to use profile in media-type vs. as an EAT claim
"Smith, Ned" <ned.smith@intel.com> Thu, 19 December 2024 17:40 UTC
Return-Path: <ned.smith@intel.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16F73C1D876E for <rats@ietfa.amsl.com>; Thu, 19 Dec 2024 09:40:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.248
X-Spam-Level:
X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.148, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=intel.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4_5WRUbOaoEF for <rats@ietfa.amsl.com>; Thu, 19 Dec 2024 09:40:40 -0800 (PST)
Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.16]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 215AEC1E0D7C for <rats@ietf.org>; Thu, 19 Dec 2024 09:40:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1734630040; x=1766166040; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=r9aRzzt1CXxT5gw2LOIdu33QP0SAwH2ePCwob0CZZ1U=; b=bb4g+UftT9MrWdAzatP14oQ53QgvosIH1N72ocZLluwqZltasScn4Pqd 2b+0Sv9evt7Cr+snckcheAXxZpOLaEGkTojUt7/ICXNSphp1HsIACmsko jeVBPGcbxSPxjI856Sw8SeBYLXURwHQLdwslsaJ1R0CpO4VYFyRpj+FqE ePsgYz6TDTdHTVKw9X0ASmy775ddv2CrVypJ7EXooywTY5bU1q8bCFe86 ylcX2h7YCqVcJz3eRhJaDTEqAJwAF8XgaKGCNTvMuPfpQVi1uRxbbmrEO lKmU3JhTPHKt3PAfeq93kceWv7SFTRfY01GTD+OZJzUWfDdpKZys1CEhB w==;
X-CSE-ConnectionGUID: KeezDed0SE6MsxhZOPswZA==
X-CSE-MsgGUID: EWWFPZX5Q2S3/aFgofZJCQ==
X-IronPort-AV: E=McAfee;i="6700,10204,11291"; a="35306360"
X-IronPort-AV: E=Sophos;i="6.12,248,1728975600"; d="scan'208,217";a="35306360"
Received: from orviesa006.jf.intel.com ([10.64.159.146]) by orvoesa108.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 19 Dec 2024 09:40:40 -0800
X-CSE-ConnectionGUID: R9kdzlXoSliVbVQ/6hsytQ==
X-CSE-MsgGUID: 6DLx+QH0QAi6yhhqWR87iw==
X-ExtLoop1: 1
X-IronPort-AV: E=Sophos;i="6.12,248,1728975600"; d="scan'208,217";a="98321753"
Received: from orsmsx603.amr.corp.intel.com ([10.22.229.16]) by orviesa006.jf.intel.com with ESMTP/TLS/AES256-GCM-SHA384; 19 Dec 2024 09:40:39 -0800
Received: from orsmsx603.amr.corp.intel.com (10.22.229.16) by ORSMSX603.amr.corp.intel.com (10.22.229.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.44; Thu, 19 Dec 2024 09:40:39 -0800
Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by orsmsx603.amr.corp.intel.com (10.22.229.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.44 via Frontend Transport; Thu, 19 Dec 2024 09:40:39 -0800
Received: from NAM02-BN1-obe.outbound.protection.outlook.com (104.47.51.42) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.44; Thu, 19 Dec 2024 09:40:38 -0800
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=DB5+M71QW1qW8nTARaQbYOcemP8rz3eg3LZ22/d/BwnBVR+GskQ3iyK8svYTt3hYa/HJt3TU3KIOes3Xg20QqwxWsBxm/9MDBTRc73mCG6fbNisofBMw66/kh3ceaMZLJRw1rU4CvqmbdUd+3mUO6tozIEFsNRoS+Fi9YHNejgoDANTd2ov0QLus2GeRjdVaOl6IofwpddxCbK3n9FHY2SetJnlN+UPjcaUs7vs6+BCYsK7ZeetQgt9C+MDWQ0LCyMHmasQ7uGM0uVxl7iIdqIytQJvdjv9UiGTGyVDSqs1UHJTop1I6U46KNev74ukElgtqi7dmNvMXff818R0KBg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tbXQrJrLUFzHBQSYPQKjGjdBd7eHzCtiS6nvZEPqDok=; b=t6lbojrdF5gOsXUBShI7z2HmtbhxZaMtgPxcLUabDc3N/QG4R15ZKoRvz4iRNA+H7speu3BYFppDFI5qNwx6jvseh+DECtXZ8O0iV9SxVPFSryxTk5OxjSMC8/3Zr6sVXoSTZPp0N7jawCKwSP+XNva1BfMHLYGJfA3CVM8o/7q6Y5tUh5ma9UbqHcXVztSFBzlKPG57QppT8oXcM5KBC0TQZMEVpkx5ZeqcY+hJmDL/NNK6ppmh7/gYzUBw3zdCAtLT+CoStEsOyFapIcBImeGFVXTOxKL8IfP9bVEUilpZNwiZVhi+mCP1njUTpYmfHyHFZUllmZ+rPN0EMX4P2A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none
Received: from CO1PR11MB5169.namprd11.prod.outlook.com (2603:10b6:303:95::19) by SJ2PR11MB7672.namprd11.prod.outlook.com (2603:10b6:a03:4cd::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8251.20; Thu, 19 Dec 2024 17:40:36 +0000
Received: from CO1PR11MB5169.namprd11.prod.outlook.com ([fe80::9bf0:5425:d055:42b7]) by CO1PR11MB5169.namprd11.prod.outlook.com ([fe80::9bf0:5425:d055:42b7%6]) with mapi id 15.20.8272.005; Thu, 19 Dec 2024 17:40:36 +0000
From: "Smith, Ned" <ned.smith@intel.com>
To: Thomas Fossati <thomas.fossati@linaro.org>
Thread-Topic: [Rats] When to use profile in media-type vs. as an EAT claim
Thread-Index: AQHbUWujb28F4Gu6c0ON1MT32iy7LrLsbckAgAFmem4=
Date: Thu, 19 Dec 2024 17:40:36 +0000
Message-ID: <CO1PR11MB51691963CA5F31117BDD88AFE5062@CO1PR11MB5169.namprd11.prod.outlook.com>
References: <CO1PR11MB516952D60311B55DD16A8B4EE5052@CO1PR11MB5169.namprd11.prod.outlook.com> <CA+1=6yfd0_h5ySqXCNgz=GmgwFqmQXDuow=T=MFCg1R7P2SkDw@mail.gmail.com>
In-Reply-To: <CA+1=6yfd0_h5ySqXCNgz=GmgwFqmQXDuow=T=MFCg1R7P2SkDw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: CO1PR11MB5169:EE_|SJ2PR11MB7672:EE_
x-ms-office365-filtering-correlation-id: 1b48d69d-a8f7-42e4-2913-08dd20543f20
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|376014|7053199007|8096899003|38070700018;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO1PR11MB5169.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(7053199007)(8096899003)(38070700018);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_CO1PR11MB51691963CA5F31117BDD88AFE5062CO1PR11MB5169namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: CO1PR11MB5169.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1b48d69d-a8f7-42e4-2913-08dd20543f20
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2024 17:40:36.4755 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 5xc6oy+vnEpNIxb0ZdUGsjp8Wh+xhQQ2axA+JL4R9kLvULkwNftwJ3uE9/saqQlH6jZPeDW4R2lwSDir3kPKtA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR11MB7672
X-OriginatorOrg: intel.com
Message-ID-Hash: C5RQPAN7J3S6NTDV4UPRB26FJBJE4LTO
X-Message-ID-Hash: C5RQPAN7J3S6NTDV4UPRB26FJBJE4LTO
X-MailFrom: ned.smith@intel.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "rats@ietf.org" <rats@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: When to use profile in media-type vs. as an EAT claim
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/rOONTWPGTPmhhOTmZia-r4iqvys>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>
> To be clear, we are talking about an EAT- and CoRIM-based Measurements formats, correct? That’s my mental context, but in theory, any media-type / C-F could appear in the EAT.Measurements or a CMW.cbor-record. Some may include profile information, but some won’t. If not, then you must look to other sources like EAT.profile or CoRIM.profile. But if parser architecture REQUIRES profile information in different stages (and the different sources of profile information feed different parser stages) then it seems the optionality of profiles whether as an extension to a media-type or as an EAT claim or a RIM statement are not optional (even though the data model describes them as such). My concern is that the parser architecture isn’t defined anywhere, so there is no concrete way to determine whether the profile semantics we are discussing are correct. -Ned From: Thomas Fossati <thomas.fossati@linaro.org> Date: Wednesday, December 18, 2024 at 12:06 To: Smith, Ned <ned.smith@intel.com> Cc: rats@ietf.org <rats@ietf.org> Subject: Re: [Rats] When to use profile in media-type vs. as an EAT claim Hi Ned, On Wed, 18 Dec 2024 at 17:51, Smith, Ned <ned.smith@intel.com> wrote: > The EAT draft defines a profile claim that qualifies various aspects of what a parser might expect to have to parse in terms of which claims and other restrictions/additions to enveloped payloads. > > The CMW draft anticipates there will be media types that include profile information as an optional parameter to the media type definition. > > The EAT Measurements claim relies on a content-format (media type) to indicate what content follows in the Measurements payload. > > If a media type with profile is defined, To be clear, we are talking about an EAT- and CoRIM-based Measurements formats, correct? > then the content-format/content-ID value will be different based on the profile value (I think). Yes. > If so, then there is the possibility that the Content-format value in Measurements claim will already include profile information. > > Hence, inclusion of the profile claim seems redundant. Not really, the EAT Measurement claim is very similar to type&value CMWs, where the outer type is used to dispatch the raw value to the handler. The higher the typing precision, the more efficient the routing. If the dispatch is coarse-grained, the handler must do two passes: one to extract the profile, and another to parse the payload accordingly. > My question is what is the expected behavior if the profile claim is populated, but the content-format doesn’t use a profile specific form? The parser does two passes over the measurement claim. > Will parsers be expected to process this the same way as if the profile claim was omitted and the profile specific content-format form is used? I believe the parser only does a single pass in this case. cheers, t
- [Rats] When to use profile in media-type vs. as a… Smith, Ned
- [Rats] Re: When to use profile in media-type vs. … Thomas Fossati
- [Rats] Re: When to use profile in media-type vs. … Smith, Ned
- [Rats] Re: When to use profile in media-type vs. … Smith, Ned
- [Rats] Re: When to use profile in media-type vs. … lgl island-resort.com
- [Rats] Re: When to use profile in media-type vs. … Thomas Fossati
- [Rats] Re: When to use profile in media-type vs. … lgl island-resort.com
- [Rats] Re: When to use profile in media-type vs. … Thomas Fossati
- [Rats] Re: When to use profile in media-type vs. … lgl island-resort.com
- [Rats] Re: When to use profile in media-type vs. … Smith, Ned
- [Rats] Re: When to use profile in media-type vs. … Thomas Fossati
- [Rats] Re: When to use profile in media-type vs. … Smith, Ned
- [Rats] Re: When to use profile in media-type vs. … Thomas Fossati