[Rats] RIV document

Guy Fedorkow <gfedorkow@juniper.net> Fri, 18 September 2020 13:32 UTC

Return-Path: <gfedorkow@juniper.net>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 097C63A07EF for <rats@ietfa.amsl.com>; Fri, 18 Sep 2020 06:32:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.803
X-Spam-Level:
X-Spam-Status: No, score=-4.803 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.695, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=HA8+e6BE; dkim=pass (1024-bit key) header.d=juniper.net header.b=SIszsdSR
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id loOpeZIfdamy for <rats@ietfa.amsl.com>; Fri, 18 Sep 2020 06:32:13 -0700 (PDT)
Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE5393A0825 for <rats@ietf.org>; Fri, 18 Sep 2020 06:32:13 -0700 (PDT)
Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 08IDVXmG005600 for <rats@ietf.org>; Fri, 18 Sep 2020 06:32:12 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : content-type : mime-version; s=PPS1017; bh=qTM6keRo2g2WlABnqfTS8B0DcHoEUkWY9euOgEOBI2M=; b=HA8+e6BERiSyX1t9wJsdVpeRC6MH1CL31Q9kt/6mZRsLKJAL+71k/JQkezpXY00E2bla EpT4EG5fUDKj8tMsplb7kSGHKzwiuBtberSNmgXlTUOlTREpKft3ghB6GYq9a7uCYfCC 7Ou/iR3VrHrqdaZQprOOBY0kKNPIKG8h5UzSnhgmS9VjoL33GXQRu0IZPL9ns06mlplz nQ7VNkubyvc544vkzgFCPJREU1ht9cglqQjA9f/Cb75HVQW/kjICk6vJ6F7Qsest374l 4h1yZgU2cgRLhjXsyp8wg75n0CUUZ6S9PygJuCyMHsV9zZ42KBgeCaGxdgd4nnVZC4t9 xQ==
Received: from nam12-bn8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2170.outbound.protection.outlook.com [104.47.55.170]) by mx0b-00273201.pphosted.com with ESMTP id 33k5pywkgu-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <rats@ietf.org>; Fri, 18 Sep 2020 06:32:12 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=H+sLx14gIi/bAyRI018rAIlchNs08OWFZXV7CxWGJ8nVgO4rYb7AhCKRlKfKkxhNx+OR16yo/u7HJ+szJHfMEDpTbVpKYsbazzLupV0MWq+SnkDqO+HaSdcZjd/YjwBDwnImktOtiPH/thvzv6s3yHAoQmLTbRcZtn057cCqu4KepVZ57BgsMK5oQA/xTBZnIxJFVFXSmi/0rFOVlAmi5DzE0w830zUsBCyixnkuzyotZ/RNYCp5ReLhRh4bDgkuVfA0qCuaAjFqVIWfWH1wLbMlgIGsDqBToUnVdVOE8N2OpFo9X5edfxsqhsS4v8KDwHbGUkfpNDYtpYx2zdx9lw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qTM6keRo2g2WlABnqfTS8B0DcHoEUkWY9euOgEOBI2M=; b=RGHaEQ4/tYyjZzUu1+wYb9e4pAVN32Y20O6w9ITynWxMDyGFbozPgcvg3MlO84rI1CL+cwr4Je62Xu9L4un9HpxWgmc229jxpsSwQjV3aL6CSQL+x2whtHcdXMELVuz02l8NnCh24t4RcF2Kz0E6xVUKk7SOdlMvYfo2E8C/E3xvXaA19uLmmcj1JTzDjp9a8s3CTAgGw9+8BIJz0U9hDIyC4lVguflotouRU69+hVBussmIBDolNaQK+DYi1syhZFquFp1RkOCddA7PUUJYmuPTNZBjR1kmmIR5/eggee+1b4u/cStisDRVvOkZHsq7k86QpZtM2pKRcLWsIyoPHg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qTM6keRo2g2WlABnqfTS8B0DcHoEUkWY9euOgEOBI2M=; b=SIszsdSRK35ivIcEIDiTorXpRxBRfHncW9dxe8qvOw4B6LAuA6qmHNYN6zqAUP23hwmcNOAQ9OW0GkWcaoqO8HPmm0AqGN75jIW4zhBtAZtUnuQ9uOmyQkPnpPI9ccQEIco2/8rQLNbGmJ00yf9DYULVBizp6VNk7+YEBPb2W0A=
Received: from DM6PR05MB6889.namprd05.prod.outlook.com (2603:10b6:5:204::22) by DM5PR05MB3305.namprd05.prod.outlook.com (2603:10b6:4:3e::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3412.4; Fri, 18 Sep 2020 13:32:09 +0000
Received: from DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::951c:3bee:1ef0:7e1c]) by DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::951c:3bee:1ef0:7e1c%2]) with mapi id 15.20.3412.008; Fri, 18 Sep 2020 13:32:09 +0000
From: Guy Fedorkow <gfedorkow@juniper.net>
To: "rats@ietf.org" <rats@ietf.org>
CC: William Bellingrath <wbellingrath@juniper.net>, Mark Baushke <mdb@juniper.net>
Thread-Topic: RIV document
Thread-Index: AdaNv5yZZOuZCm9dRlyjNL8qUJvPPg==
Date: Fri, 18 Sep 2020 13:32:09 +0000
Message-ID: <DM6PR05MB6889A3C2FC26CD488F63CD63BA3F0@DM6PR05MB6889.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
dlp-product: dlpe-windows
dlp-version: 11.5.0.60
dlp-reaction: no-action
msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-09-18T13:32:07Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=6d58270a-030b-47d0-bb3c-b9758287aab1; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
x-originating-ip: [24.61.11.4]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 142c3be3-e6f8-48a9-a8f1-08d85bd73e64
x-ms-traffictypediagnostic: DM5PR05MB3305:
x-ld-processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr,ExtFwd
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <DM5PR05MB330585FE46252D82660F1730BA3F0@DM5PR05MB3305.namprd05.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: hdTQqPU9olRgwO6+PF9W75pfZ5c/W2pCsBA8fCx4zTerSNNWRC+rdYJImYeZpuB1lZRJ/z1mN45QdXNcJQn8loprst8dA1fUBQN5XUEDmUyqY5mSFKP7DTnZk4zpcc8ocfUN64Ojd2xxO0hi+qqG9nT86EvJ53pdeQV2ePKrA0xQx0VfIkuJVXT+8PycDVss0aionvsx1acWgx3jNSSg9gq2k0a4+yATc6IlaJ0XhSENgr/MIJ23Kdm3G8bc63/B0aO9v2qKEfaiag9Rh9ZH2oIyY4Z2bsFZMi3JxzGdNXWcpGz/VKJjWTfIZpdZ2rbQDpX6/GLJFSu67ytaCW7+0WMSBCjBPtHNKlGAcJ9xka2WMx8m4LBU+9nZQkPf3+DSfUN0NCp5DLYOQ7ZUemEN9HAoXJQ7+dDYcqq6N9hfx4HiBIogXgprjP4pi+J4BW3o
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR05MB6889.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(346002)(136003)(376002)(396003)(366004)(8676002)(52536014)(5660300002)(4744005)(166002)(26005)(6506007)(3480700007)(7696005)(86362001)(54906003)(55016002)(2906002)(9686003)(76116006)(6916009)(7116003)(107886003)(66446008)(478600001)(66476007)(966005)(4326008)(316002)(186003)(8936002)(66946007)(64756008)(66556008)(71200400001)(33656002); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: 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
Content-Type: multipart/alternative; boundary="_000_DM6PR05MB6889A3C2FC26CD488F63CD63BA3F0DM6PR05MB6889namp_"
MIME-Version: 1.0
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DM6PR05MB6889.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 142c3be3-e6f8-48a9-a8f1-08d85bd73e64
X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Sep 2020 13:32:09.4456 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CGh9r3wI9JfkCi028ifEA/q+kpHbvqE6Po1B7tOrhwgaJqIA6N07TsCcfZyDyVpyCmlaJZtl1oPrbNDaWVvcOg==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR05MB3305
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-09-18_14:2020-09-16, 2020-09-18 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 bulkscore=0 mlxscore=0 malwarescore=0 suspectscore=0 adultscore=0 mlxlogscore=798 impostorscore=0 lowpriorityscore=0 spamscore=0 clxscore=1011 priorityscore=1501 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2006250000 definitions=main-2009180109
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/i_pviIKwXQsUvMbN-W2NH9Z0xnk>
Subject: [Rats] RIV document
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Sep 2020 13:32:15 -0000

We've posted a new copy of the RIV document, including extensive comments from Dave Thaler, Ned and others.

https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/

I don't think there's been any substantial change, but the document now includes normative MUST and SHOULD statements.

I'd like to propose moving this to WG Last Call, so if there are more comments or concerns, please speak up!

You can see the diffs as we addressed these comments on github.

Thanks
/guy





Juniper Business Use Only