Re: [secdir] SecDir Review of draft-ietf-ace-usecases

[Stefanie Gerdes <[e-mail]>]

Hi Adam,

Thank you for your comments.

On 10/12/2015 04:02 PM, Adam Montville wrote:
> 
> While the draft does mention “configuration”, the context is more about ensuring flexibility of expressing access permissions.  I’m not sure if this draft requires something like the following, but it would be beneficial for downstream operational processes to explicitly support endpoint posture assessment.  This could be done by providing an explicit posture-related interface.  Such a requirement could be alluded to in the Security Considerations section.  On the other hand, this may be something addressed by CoAP and other drafts.

The draft focuses on listing use cases and resulting authorization
problems. Therefore, all items listed in the sections 3.2, 3.3 and 3.4
derive from the problems summary sections. We tried very hard to steer
clear of listing solutions for these problems while still providing
useful guidance for solution developers. Thus, the draft does not
provide details on where configuration data might be coming from.
Therefore, we would rather not include this comment.

We will fix the Nits that you pointed out.

Thanks
Steffi