Re: [SCITT] Call for adoption - SCITT Architecture

Dick Brooks <dick@reliableenergyanalytics.com> Mon, 14 November 2022 20:54 UTC

Return-Path: <dick@reliableenergyanalytics.com>
X-Original-To: scitt@ietfa.amsl.com
Delivered-To: scitt@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19671C14F743 for <scitt@ietfa.amsl.com>; Mon, 14 Nov 2022 12:54:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.895
X-Spam-Level:
X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=messagingengine.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bVpuRdErFH6f for <scitt@ietfa.amsl.com>; Mon, 14 Nov 2022 12:54:00 -0800 (PST)
Received: from wforward3-smtp.messagingengine.com (wforward3-smtp.messagingengine.com [64.147.123.22]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E8C7C14F740 for <scitt@ietf.org>; Mon, 14 Nov 2022 12:54:00 -0800 (PST)
Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailforward.west.internal (Postfix) with ESMTP id 63F5A1AC2872; Mon, 14 Nov 2022 15:53:57 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Mon, 14 Nov 2022 15:53:58 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:date:feedback-id:feedback-id:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1668459236; x= 1668545636; bh=Tt81tBsFS+oBdssPmC7Yz8UiOp3xkeOQf9mx4TeCGmY=; b=j agsJGgri3x6XHR60C69I+QC8oKM0LxwASPBmalamUIWbcVzAFnIbdqoycglF03TH ST/0NKFxZU+txSQaVQEtnG2QiyzL9AhokN57X4P9twryVG53phUba5PZljaqluO2 ANxi2bWuWaT6t2RhE+YkFggg3YVKrtpUrCaqx7XKGsaUAnbfh+yic439qR6Hmx+2 KICbFyDATSjkJsxg6WntyyGkHAFUHXhhpDqv6uSa9v0eTGnAYWB8ctoAr/ko+7Fm j5+H9MyxyrCnLchX265xB5BSpCkhh2TZEG1V0tqzxrnVnGWI/drTc/85nff58Fgc 9MIUuOru14pnRtLtrW3iQ==
X-ME-Sender: <xms:5KpyY4U9anGppApbCKk4zJYBPZaNtIrL9n34leIEsGovpw7goifdlg> <xme:5KpyY8nLExJ-6Mv3mjC7V-v9WRHIQ7pLjPlZSLM-GDTvYFlTb1_XmdvHUuBqQ4G6_ tkzbDx84n5qw-QFqQ>
X-ME-Received: <xmr:5KpyY8ayMJ7W3lJTJhJzErxOdedJAz_oAf7wJBfrEjQ6EE1H0KnuyJc>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvgedrgedvgdduudeiucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurheprhfhvfhfjgfuffhokfggtgfgofhtsehtqhhgtddvtdejnecuhfhrohhmpedf ffhitghkuceurhhoohhkshdfuceoughitghksehrvghlihgrsghlvggvnhgvrhhghigrnh grlhihthhitghsrdgtohhmqeenucggtffrrghtthgvrhhnpeevtedugeffhfekkeehteet gfdtkeevteekgfeljeeggeeguddthfejiefgvefgieenucffohhmrghinheprhgvlhhirg gslhgvvghnvghrghihrghnrghlhihtihgtshdrtghomhdpihgvthhfrdhorhhgpdgvihhn phhrvghsshifihhrvgdrtghomhenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpeguihgtkhesrhgvlhhirggslhgvvghnvghrghihrghnrghlhiht ihgtshdrtghomh
X-ME-Proxy: <xmx:5KpyY3VuxeJNosXB3Cn-p7toNnfVO7jOlgP1u3fsRs0XFou8czzZtA> <xmx:5KpyYynqbHXtEkgg4D2jcBEWcxCXkXyRxN4Iansr3Obnud6PLrfeSA> <xmx:5KpyY8clc8a2trcBwcEXr_8aMt606Cv0MXIHRjmLA3_csWiZ9oHjqg> <xmx:5KpyY2vzTZhCND0M0Yq8WtRYI3cxSyNX3O0cW86YGoNnVuojyHak2NOeffk>
Feedback-ID: i57d944d0:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 14 Nov 2022 15:53:56 -0500 (EST)
Reply-To: dick@reliableenergyanalytics.com
From: Dick Brooks <dick@reliableenergyanalytics.com>
To: "'Smith, Ned'" <ned.smith@intel.com>, 'Eliot Lear' <lear@lear.ch>, 'Hannes Tschofenig' <Hannes.Tschofenig@arm.com>, scitt@ietf.org
References: <DBBPR08MB591573B5A97DADD9F0EEC2E9FA059@DBBPR08MB5915.eurprd08.prod.outlook.com> <3d32726d-03e0-7c29-1e2b-e911bab44a60@lear.ch> <94AABEC5-939A-48EB-B589-AAE7EDEA9F6B@intel.com> <12ca01d8f86a$7c644ec0$752cec40$@reliableenergyanalytics.com> <178BA8FA-6B63-451B-A56F-ED1F75B9E3B8@intel.com>
In-Reply-To: <178BA8FA-6B63-451B-A56F-ED1F75B9E3B8@intel.com>
Date: Mon, 14 Nov 2022 15:53:54 -0500
Organization: Reliable Energy Analytics LLC
Message-ID: <12fd01d8f86b$3641a310$a2c4e930$@reliableenergyanalytics.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQEyw+s6Pycbh79xnBTGy5A8fET3GgH5x8diAipAIogAqKjtRwEwxonQr1tiqKA=
Content-Language: en-us
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/I9lJIcstw-xzWtyCaq2VYJY8fHg>
Subject: Re: [SCITT] Call for adoption - SCITT Architecture
X-BeenThere: scitt@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scitt>, <mailto:scitt-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt/>
List-Post: <mailto:scitt@ietf.org>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scitt>, <mailto:scitt-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Nov 2022 20:54:05 -0000

Thanks, Ned.

I'll look at RATS to see if we have any overlap and if so, I'll file an IPR Disclosure.

Thanks,

Dick Brooks
  
Active Member of the CISA Critical Manufacturing Sector, 
Sector Coordinating Council – A Public-Private Partnership

Never trust software, always verify and report! ™
http://www.reliableenergyanalytics.com
Email: dick@reliableenergyanalytics.com
Tel: +1 978-696-1788

-----Original Message-----
From: Smith, Ned <ned.smith@intel.com> 
Sent: Monday, November 14, 2022 3:53 PM
To: dick@reliableenergyanalytics.com; 'Eliot Lear' <lear@lear.ch>; 'Hannes Tschofenig' <Hannes.Tschofenig@arm.com>; scitt@ietf.org
Subject: Re: [SCITT] Call for adoption - SCITT Architecture

Dick,
Yes, if its relevant. I'm not permitted to look at patent material so I can't help determine if its relevant or not.
-Ned

On 11/14/22, 12:48 PM, "Dick Brooks" <dick@reliableenergyanalytics.com> wrote:

    Ned,

    We submitted an IPR disclosure for the SAG patent, relating to SCITT. 
    https://datatracker.ietf.org/ipr/5683/

    Do you think we should do the same for RATS?

    Thanks,

    Dick Brooks

    Active Member of the CISA Critical Manufacturing Sector, 
    Sector Coordinating Council – A Public-Private Partnership

    Never trust software, always verify and report! ™
    http://www.reliableenergyanalytics.com
    Email: dick@reliableenergyanalytics.com
    Tel: +1 978-696-1788

    -----Original Message-----
    From: SCITT <scitt-bounces@ietf.org> On Behalf Of Smith, Ned
    Sent: Monday, November 14, 2022 3:04 PM
    To: Eliot Lear <lear@lear.ch>; Hannes Tschofenig <Hannes.Tschofenig@arm.com>; scitt@ietf.org
    Subject: Re: [SCITT] Call for adoption - SCITT Architecture

    Dick Brooks pointed to:
    >proprietary trust registries in use within the software supply chain today. (https://www.einpresswire.com/article/545051889/announcing-the-sag-ctr-tm-community-trust-registry-for-digitally-signed-software?r=pawKHGm9JeOss4tpbO), 
    which cites IP.

    On 11/14/22, 11:58 AM, "SCITT on behalf of Eliot Lear" <scitt-bounces@ietf.org on behalf of lear@lear.ch> wrote:

        I am in favor of adoption, and I would be willing to review the document 
        (as I have in the past).

        However...

        I would request an early IPR check.  We have had a sad record lately of 
        late disclosures.

        Eliot

        On 14.11.22 12:18, Hannes Tschofenig wrote:
        > Hi all,
        >
        > Following the positive feedback at the IETF SCITT meeting in London last week we want to start a call for adoption of the SCITT architecture document.
        >
        > Here is the document, which serves as a starting point for future work in the group:
        > https://datatracker.ietf.org/doc/html/draft-birkholz-scitt-architecture-02
        >
        > Please, provide your feedback on the mailing list by *November 28th*.
        >
        > Ciao
        > Hannes & Jon
        >
        > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
        >

    -- 
    SCITT mailing list
    SCITT@ietf.org
    https://www.ietf.org/mailman/listinfo/scitt