Re: [secdir] [Anima] Secdir last call review of draft-ietf-anima-bootstrapping-keyinfra-16

["Joel M. Halpern" <[e-mail]>]

That answer seems to imply that if the MASA is down before I try to 
transfer my device, and if the MASA is still down when the recipient 
tries to get my device working, it won't work.

Which seems to mean that once a MASA goes down permanently, any new can 
not get a device reliant on that MASA to work.

Seems a pretty severe limitation.

Yours,
Joel

On 9/30/18 3:58 PM, Brian E Carpenter wrote:
> On 2018-10-01 07:52, Randy Bush wrote:
>> christian,
>>
>> a stunning review as usual.  but i have two questions which you kind of
>> finessed.  they are simple binary, i.e. yes/no, questions that the end
>> user, to whom the IETF is ultimately responsible, really cares about.
>>
...
>> if the manufacturer's servers go down, either permanently or even for
>> a day, can i give/sell the device i have purchased to a third, well
>> fourth i guess, party, at my whim and seamlessly unencumbered?
> 
> There are two conditions for it to work as I understand:
> 1) The device ID is added to the list of devices acceptable to the
> registrar in its new network.
> AND
> 2) That registrar is able to contact the MASA.
> 
> Alternatively - see the previous point. If you had previously obtained
> a voucher in advance, you could include it with the device. Just as
> you might write the hard disk password on a yellow sticky when
> selling a laptop in a garage sale.
> 
>      Brian