[Seat] Re: I-D Action: draft-ietf-seat-use-cases-01.txt

[tirumal reddy <[e-mail]>]

Hi all,

The latest -01 version captures the relevant threat model and security
requirements. The use-cases document is focused on defining these threats,
use cases, and security requirements. Analysis of specific protocol
mechanisms is outside the scope of this document.

As the chairs have clarified, formal analysis of external drafts, their
implementations, CVEs or publications outside the WG's active specification
work is out of scope for the SEAT discussion.

I suggest we therefore focus the discussion on whether the identified
threats and security requirements are adequately covered in the document.

Best regards,
-Tiru

On Tue, 15 Sept 2026 at 19:51, Ionut Mihalcea <[e-mail]>
wrote:

> Hello all,
>
> A new version of the use-cases draft has been published, adding the
> recently discussed attacker model. For updates to that section, please
> create new PRs or new issues in Github [1].
>
> As proposed previously [2], I plan to create a new PR to move the
> use-cases section to a templated model. When that is available I will
> provide a summary for the mailing list.
>
> Thank you,
> Ionut
>
> [1] https://github.com/ietf-wg-seat/draft-ietf-seat-use-cases
> [2]
> https://mailarchive.ietf.org/arch/msg/seat/5iQlAOciB2deQ6FukrLwoeX7zvk/
>
> *From: *[e-mail] <[e-mail]>
> *Date: *Tuesday, 15 September 2026 at 14:53
> *To: *[e-mail] <[e-mail]>
> *Cc: *[e-mail] <[e-mail]>
> *Subject: *[Seat] I-D Action: draft-ietf-seat-use-cases-01.txt
>
> Internet-Draft draft-ietf-seat-use-cases-01.txt is now available. It is a
> work
> item of the Secure Evidence and Attestation Transport (SEAT) WG of the
> IETF.
>
>    Title:   Security Goals and Use Cases for Integrating Remote
> Attestation with Secure Channel Protocols
>    Author:  Ionuț Mihalcea
>    Name:    draft-ietf-seat-use-cases-01.txt
>    Pages:   23
>    Dates:   2026-09-15
>
> Abstract:
>
>    This document outlines desirable security goals and use cases for
>    integrating remote attestation (RA) capabilities with secure channel
>    establishment protocols (e.g., TLS and DTLS).  Peer authentication in
>    such protocols establishes trust in a peer's network identifiers but
>    provides no assurance regarding the integrity of its underlying
>    software and hardware stack.  Remote attestation addresses this gap
>    by enabling a peer to provide verifiable evidence about the current
>    state of the Target Environment.  This document specifies a set of
>    essential security goals the protocol solution must have, including
>    cryptographic binding to the secure connection, evidence freshness,
>    and flexibility to support different attestation models.  It then
>    explores relevant use cases, such as confidential data collaboration
>    and secure secrets provisioning, to motivate the need for this
>    integration.  This document is intended to serve as an input to the
>    design of protocol solutions within the SEAT working group.
>
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-ietf-seat-use-cases/
>
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-ietf-seat-use-cases-01.html
>
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-seat-use-cases-01
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> Seat mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> _______________________________________________
> Seat mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
>