Re: [Secdispatch] DANE IOT proposed outcome

Thanks Elliott for this summary.

We will start a discussion on the iot-onboarding list.

Shumon.

On Mon, Nov 16, 2020 at 5:55 AM Eliot Lear <lear=40cisco.com@dmarc.ietf.org>
wrote:

> Thanks to Shumon for presenting the DANE use case for IOT.
>
> We discussed taking this to the iot-onboarding@ietf.org list as there
> were a number of rather big open issues that people wanted to discuss.
>
> We also discussed a non-WG forming BOF to look at, as Ted put it, the
> broader context for onboarding.  To give people a feel for the sort of
> related work that is available, here are a list of related activities:
>
>
>    - draft-ietf-anima-bootstrapping-keyinfra (BRSKI) is a
>    request/response mechanism that uses RFC 8366 vouchers to introduce devices
>    and network infrastructure.
>    - Intel’s SDO provides an application level introduction using
>    vouchers as well.  This work has been taken up by the FIDO alliance.
>    - The Wifi Alliance has Device Provisioning Protocol (DPP) which does
>    not attach to a global name space prior to provisioning having occurred,
>    but does represent a minimum case (just public keys).
>    - draft-friel-eap-tls-eap-dpp borrows from DPP, intended mostly for
>    wired use, where DPP is focused on 802.11 networks.
>    - There are a number of BRSKI related drafts by Owen as well, relating
>    to cloud-based registrars.
>    - There is also work by Michael Richardson and Peter Van Der Stock on
>    constrained vouchers.  That work is taking place in ACE.
>
>
> Understanding the landscape might help us understand where DANE fits in.
>
> Regards,
>
> Eliot
> _______________________________________________
> Secdispatch mailing list
> Secdispatch@ietf.org
> https://www.ietf.org/mailman/listinfo/secdispatch
>