[Secret] Questions and comments on tigress charter

[Jim Fenton <[e-mail]>]

I guess I missed the deadline on the call for consensus on the charter, but I have some questions and comments nonetheless. I’m referencing charter-ietf-tigress-00-06 as currently shown on Datatracker.

When I read through the use cases (giving someone temporary use of my car or letting the cat sitter in my home) I immediately thought of this as an authorization problem. I would normally solve this by giving the public key of the delegated user’s credential to the car or house and telling the car or house to accept that credential for some period of time. Or I might authenticate to the hotel and tell them to accept my spouse’s credential. The flow described in the charter is more complicated, and I assume there’s a good reason for that but I don’t understand what it is.

The charter also refers to a credential authority, but doesn’t explain anything about it. In the case of the cat sitter, what credential authority is there for my home? This is clearer in the hotel room key example (where presumably the credential authority is the hotel or hotel chain?) but that isn’t the general case here.

I missed the previous BOF but would like to understand the motivation for this WG better.

-Jim