[saag] GNAP WG report

Yaron Sheffer <yaronf.ietf@gmail.com> Tue, 27 July 2021 07:02 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FC9B3A11ED for <saag@ietfa.amsl.com>; Tue, 27 Jul 2021 00:02:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hbdoNWgFF65k for <saag@ietfa.amsl.com>; Tue, 27 Jul 2021 00:02:44 -0700 (PDT)
Received: from mail-il1-x12b.google.com (mail-il1-x12b.google.com [IPv6:2607:f8b0:4864:20::12b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 870483A11DF for <saag@ietf.org>; Tue, 27 Jul 2021 00:02:44 -0700 (PDT)
Received: by mail-il1-x12b.google.com with SMTP id y4so11279524ilp.0 for <saag@ietf.org>; Tue, 27 Jul 2021 00:02:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:message-id:thread-topic :mime-version; bh=vhWahY+cLceUN1o5sUvUwxcIoiwUj0f75bLtegsXns8=; b=UxEIzavvrh/K5eIuYifvxC5TQuABNS+KGUjVoCQC06MR1tNa4DqHzuO3e1XyvmrzVC svDCqJaWYILcxFZ/FZhkisV5Lyd9r1tCgnT1Fut5zrVCblCekBPqleW6ZIF8Sg/DN8V+ vzWmM5z6W65G/YsP+V4qrFCuuajog4IfnNY/iKGNzP7kmBEWMJ/NkflNCnQxfCWPy8ig TUBVduKnnhWwfj9rUyEOO56MvvLD042w4nfydJufqklFssC+0ThzPmS0KVWDTT0VvswG O5zlMzCUR2LOlTTukgA484aIn6nJfqp3emZWK7xhMfGlYeTAmRNokJLxLoHTWQrzUT4d a54A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:mime-version; bh=vhWahY+cLceUN1o5sUvUwxcIoiwUj0f75bLtegsXns8=; b=NNdTTUXafm+IfwvY5XQHFhOs6mqncQq1Ae5Ol/6PocezvcQh1WW2pupnv4ySYRoP+2 YF58aj/1nPJTa640xHTJ+i8FJrhQ5LGeGiz5H9bwI/a9EpG5/fpfBsklHNj+HdIvWxCf Dknl1RRXQX5NyY6FFsc4KDyB6rtK1DungQu1AX1Tjzmr+u6n2MWX2YGSIbX1YxjywpUb Onl7NHGggXje8g3H2L0q02UQqELTMzSnSy6ubuyqSFTpaRXUeINgFRlCKyeT/S5RxDe1 ++NoPXIwEDyY20I6GzXmlTUUoj6dktUJSOXnVcCmRtcFX38QkKnPxBWid3GtQnK2DHPr oEiQ==
X-Gm-Message-State: AOAM533UuYtvAbUisJqiWnh/Tox+OOfLpKWTDfy606f2qnlYhGV/N+CG iycwJPcN9XdVNOfYVbgqGfmJya8veiI=
X-Google-Smtp-Source: ABdhPJyIAupcSqdPBnsr1JF3L+vK8QMCQEq/kx01mHoV/q5R/FOlZDGOsLZswH0F3AQ6rjbWPlC/uA==
X-Received: by 2002:a05:6e02:52d:: with SMTP id h13mr16359409ils.119.1627369362461; Tue, 27 Jul 2021 00:02:42 -0700 (PDT)
Received: from [192.168.68.110] (bzq-79-181-28-50.red.bezeqint.net. [79.181.28.50]) by smtp.gmail.com with ESMTPSA id j2sm1335380ilr.80.2021.07.27.00.02.41 for <saag@ietf.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 27 Jul 2021 00:02:42 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/16.51.21071101
Date: Tue, 27 Jul 2021 10:02:40 +0300
From: Yaron Sheffer <yaronf.ietf@gmail.com>
To: "saag@ietf.org" <saag@ietf.org>
Message-ID: <6DD937FE-F87D-44D1-8D07-11860A96D156@gmail.com>
Thread-Topic: GNAP WG report
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3710224961_1754899030"
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/H1aQjECDH6PLqCSmK_W8doTnUKk>
Subject: [saag] GNAP WG report
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Jul 2021 07:02:49 -0000

GNAP met at the first session of IETF. Since the last IETF, we published two revisions of the core protocol, as well as two revisions of the Resource Server draft that was spun out of Core. We received a security attack from an academic research team and revised the protocol to mitigate it. Despite the large number of open issues on GitHub, the authors believe that the protocol is now much more solid, and we discussed a roadmap to publication. We also discussed how to encourage implementation, and what needs to happen for broader review across the community.

 

Thanks,

                Leif and Yaron