[sacm] Proto-consensus - Removal of references to TNC's IF-IMV and IF-IMC specifications.

["Schmidt, Charles M." <[e-mail]>]

Hello all,

Between the discussions at IETF 95 and the virtual interim yesterday, there
appears to be "in room" consensus on a few proposed updates and expansions
to SWID M&A. As no IETF consensus is complete without mailing-list
consensus, I'm sending out messages on each point of proto-consensus.  

Item 1: Remove references to TNC's IF-IMV and IF-IMC specifications
The current SWID M&A specification references TNC's IF-IMV and IF-IMC
specifications. While both of these specification have been approved by the
Trusted Computing Group board for transfer to the IETF, we are going to hold
off on that delivery since these specifications 1) are long, 2) somewhat
peripheral to the vulnerability assessment scenario on which we are
currently focusing, and 3) there has been a major recent document dump and
we don't want people more overwhelmed than they are. In the meantime, since
these references are not critical to the specification, it was felt that we
should just remove them to avoid normative references to external
specifications as much as possible.

Both IF-IMV and IF-IMC are referenced with regard to interface functions
that are defined in those specifications. The purpose of naming those
specific interface functions is to describe how the identity of components
on the endpoint and the policy server are captured. This component identity
information is already conveyed between the communicants over the PB-TNC
messages over which SWID M&A communicates. In effect the text will change
from "collect the component identity as conveyed in the PB-TNC message by
using IF-IMC/IMV function XYZ to get the PB message information" to "collect
the component identity as conveyed in the PB-TNC message". The net effect is
the same - we just don't recommend a specific, named interface function.

Any concerns about this or can we call this consensus?

Charles