Re: [Roll] home-building-requirements section 7.1

peter van der Stok <> Mon, 24 November 2014 07:17 UTC

Return-Path: <>
Received: from localhost ( []) by (Postfix) with ESMTP id 96C181A1AB9 for <>; Sun, 23 Nov 2014 23:17:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id xBI2rx7gA6ap for <>; Sun, 23 Nov 2014 23:17:50 -0800 (PST)
Received: from ( []) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 6CBD21A1A73 for <>; Sun, 23 Nov 2014 23:17:50 -0800 (PST)
Received: from ([]) by with ESMTP id KKHn1p00D4NtgTm01KHnAd; Mon, 24 Nov 2014 08:17:48 +0100
Received: from [2001:983:a264:1:64eb:3bd9:ee99:d867] by with HTTP (HTTP/1.1 POST); Mon, 24 Nov 2014 08:17:47 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Content-Transfer-Encoding: 7bit
Date: Mon, 24 Nov 2014 08:17:47 +0100
From: peter van der Stok <>
To: Michael Richardson <>
Organization: vanderstok consultancy
In-Reply-To: <>
References: <>
Message-ID: <>
X-Sender: (tiHEUjjAvgelfiF2xIs4WWI+LDUH3wYT)
User-Agent: XS4ALL Webmail
Cc:,, Anders Brandt <>
Subject: Re: [Roll] home-building-requirements section 7.1
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To:, Routing Over Low power and Lossy networks <>
List-Id: Routing Over Low power and Lossy networks <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 24 Nov 2014 07:17:52 -0000

HI Michael,

thanks for the encouragement.
Concerning bootstrap and security in general. Many things are going on 
and there are two approaches to this document:
1) a conservative one; restrict to what exists and is is proven to work
2) leaving the doubt that exists today.

For the moment I like to leave the doubt, because in 5 years, what is 
sure today will not be implemented is my conviction

Concerning switching on/off:
That is SDO stuff; KNX , BACnet , etc... are preparing additional 

What are enrollment tools?


Michael Richardson schreef op 2014-11-23 22:16:
> I am very pleased with the document; I hope the WG is reading it, and 
> is
> also happy with it.
> In secton 7.1 you mention use of PANA to secure new nodes.
> The reference seems very hesistant, and the DTLS relay is just kind of
> thrown in.   Can you make this recommendation more concrete? Or remove 
> it.
> If it's PANA, I assume EAP is involved, and so what what EAP methods 
> should
> be used?
> I think that, having read this document, I ought to be able to create a
> light-bulb or light switch --- I think that I can make it function in 
> the
> network, but I don't think it will use the same enrollment tools at 
> all, and
> I'd sure like to change that.  I don't mind being really really 
> specific
> here: I encourage it.
> I also don't know what protocol to use for turning lights on/off, but I
> acknowledge that is out of scope for the ROLL WG to specify.  Perhaps 
> there
> is an informative reference I missed.
> I think that unless you have a specific way to use the DTLS relay, you 
> should
> remove the reference -- it doesn't help anyone trying to implement an
> interoperable device.