Re: [Secdispatch] Request for discussion of Concise IDs in Prague

Carsten Bormann <cabo@tzi.org> Sun, 17 March 2019 20:49 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: secdispatch@ietfa.amsl.com
Delivered-To: secdispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52CBF130E8B for <secdispatch@ietfa.amsl.com>; Sun, 17 Mar 2019 13:49:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hvx8A-gsiGds for <secdispatch@ietfa.amsl.com>; Sun, 17 Mar 2019 13:49:31 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5636C12788F for <secdispatch@ietf.org>; Sun, 17 Mar 2019 13:49:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id x2HKnMSK025898; Sun, 17 Mar 2019 21:49:27 +0100 (CET)
Received: from client-0073.vpn.uni-bremen.de (client-0073.vpn.uni-bremen.de [134.102.107.73]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 44Mryp27Khz1Bp8; Sun, 17 Mar 2019 21:49:22 +0100 (CET)
Content-Type: multipart/signed; boundary="Apple-Mail=_B5C4A80C-F33E-49A2-8345-4F25F78562B8"; protocol="application/pgp-signature"; micalg="pgp-sha256"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <16027.1552855304@localhost>
Date: Sun, 17 Mar 2019 21:49:21 +0100
Cc: secdispatch@ietf.org
X-Mao-Original-Outgoing-Id: 574548559.6304359-14ecb1d70c1e9157645e81dbb26b6189
Message-Id: <D7EB64FE-4E2A-40BF-90FD-795B65AF4125@tzi.org>
References: <B55C574A-8C20-45AD-9213-C00F942F4518@tzi.org> <16027.1552855304@localhost>
To: Michael Richardson <mcr+ietf@sandelman.ca>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdispatch/EEUIvi_pIxvv0DKC0Iv4Yr8YjFI>
Subject: Re: [Secdispatch] Request for discussion of Concise IDs in Prague
X-BeenThere: secdispatch@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Dispatch <secdispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdispatch/>
List-Post: <mailto:secdispatch@ietf.org>
List-Help: <mailto:secdispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Mar 2019 20:49:34 -0000

On Mar 17, 2019, at 21:41, Michael Richardson <mcr+ietf@sandelman.ca> wrote:
> 
> Carsten Bormann <cabo@tzi.org> wrote:
>> A side discussion and meeting(*) was held a while ago to determine a
>> good solution; this side meeting came up with ACE and CORE as two
>> leading candidates: ACE because it already did CWT (which, however,
>> already was a bit of an odd addition to its charter), and CORE,
>> because it is interested in having such a profile available and has
>> the requirements (but is not itself a security area WG).
> 
> I had asked why not CBOR WG, and it might be useful to share your answer.

The CBOR WG is really more concerned with the integrity of the CBOR standard itself and with the CDDL notation for structural interoperability (“syntax”).  Concise IDs are an application of CWTs and COSE, which are in turn an application of CBOR.  Concise IDs are much closer to the applications that the CoRE WG is looking at, than to features and functions of CBOR (or CDDL).

In the end, of course, the parties interested will come to whatever WG that runs the process; I would just imagine that with CoRE (and possibly ACE) quite a few of the interested parties would already be there, and the WG as a whole will be more in a position to provide its collected expertise in this area.

Grüße, Carsten