Re: [lamps] Mirja Kühlewind's No Objection on charter-ietf-lamps-04-01: (with COMMENT)

"Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com> Thu, 05 December 2019 12:29 UTC

Return-Path: <hendrik.brockhaus@siemens.com>
X-Original-To: spasm@ietfa.amsl.com
Delivered-To: spasm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E05F120041; Thu, 5 Dec 2019 04:29:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=siemens.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lgqRPpSyeJ_9; Thu, 5 Dec 2019 04:29:17 -0800 (PST)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70078.outbound.protection.outlook.com [40.107.7.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C49E120013; Thu, 5 Dec 2019 04:29:17 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MzPbfyF1e/aXvgmFll8V3UZP5oGil/n5fum8L4RpQiEwSIR+Sl0tS62OT1Yj0B28ENkZSO+pegKyeYdIVKFII6esWpzpm2X1LpGvYAxsE/KiPj5EGi7Ysepj3NGZoAWzoia583A8zkVlqFHx3cWvNSnXKcSwJWnhaPQghe9PbE0IlJqpsPqJtWQ2z0RudOMEITBWf+o2JlxsrbelWKvgdSNbfsFLEQ/QfuvrBLp/g0ARlhXIwHdyUTfZcetqHvu28az5vk4ncEbjB+//xxw3aUDJq1ufI27sFPfR4wwZUYbFtfN32ROhPhRM/IKmg94YCXioZrvRPkRsOCEs+3eWAg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0pydllry50q1r+qdB8xdRXrO4jnkS6RnfO1CpA2zbe8=; b=dSt7Jog/PsGun3FVKLEjkN2zEiF2r4XjA0HPzFk94U+qZ93kXcCxjstbaRWCS5z2EFcsDNP5GZCeIMGSJDW4ZhDk59dDKSSlCE797NG1HISqFH0IxM+XOxYH4L+74OClpYd02n3dLUEQCjBkNg0uvJqszLSTdAORj5MhDQx3Zr10WhBaplEbsa+QlyuFgYt0bov2b3PMkcG88TCKmvUVCLV3uilj9vg6GePB7NBJjSNMtxixhJVvgnxcwVEp9d3LitW6DgsUNgUE0vxL6pL5/KtofptoccKrrkvm3i9nENL3qBtyR3CmahNl7LJplb9+UPagr4dhcZ+QJXm8m/qfhg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=siemens.onmicrosoft.com; s=selector1-siemens-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0pydllry50q1r+qdB8xdRXrO4jnkS6RnfO1CpA2zbe8=; b=gYIWJ3ltOWpNgYFHOpqlITVMMRi0bU2FxxfKQQukl/gUo46U5DRz70w+L0+ePUJ+Pqyrveqm8odvOMOVGl9BLPHLw5qBz/H7Tb8cM9P0HMzP9v8wcoxmbh4ic+ucyuozVKGSbQfRCUS3GX/8DvaisfKHW1mqEQccQJT6bU4ytlA=
Received: from DB7PR10MB2411.EURPRD10.PROD.OUTLOOK.COM (20.176.238.95) by DB7PR10MB2059.EURPRD10.PROD.OUTLOOK.COM (52.134.97.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2516.13; Thu, 5 Dec 2019 12:29:14 +0000
Received: from DB7PR10MB2411.EURPRD10.PROD.OUTLOOK.COM ([fe80::e1f3:8a6c:f50f:f207]) by DB7PR10MB2411.EURPRD10.PROD.OUTLOOK.COM ([fe80::e1f3:8a6c:f50f:f207%7]) with mapi id 15.20.2516.014; Thu, 5 Dec 2019 12:29:14 +0000
From: "Brockhaus, Hendrik" <hendrik.brockhaus@siemens.com>
To: Mirja Kühlewind <ietf@kuehlewind.net>, The IESG <iesg@ietf.org>
CC: "spasm@ietf.org" <spasm@ietf.org>, "lamps-chairs@ietf.org" <lamps-chairs@ietf.org>
Thread-Topic: [lamps] Mirja Kühlewind's No Objection on charter-ietf-lamps-04-01: (with COMMENT)
Thread-Index: AQHVq1SdpaUWKFwVDU+OAxnbCYuY9qerdQtw
Date: Thu, 05 Dec 2019 12:29:14 +0000
Message-ID: <DB7PR10MB2411107229A695EFAEFDEA2EFE5C0@DB7PR10MB2411.EURPRD10.PROD.OUTLOOK.COM>
References: <157554078098.16478.1397974597271236050.idtracker@ietfa.amsl.com>
In-Reply-To: <157554078098.16478.1397974597271236050.idtracker@ietfa.amsl.com>
Accept-Language: de-DE, en-US
Content-Language: de-DE
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=hendrik.brockhaus@siemens.com;
x-originating-ip: [195.145.170.177]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: 8faaa834-8798-4a00-a9c5-08d7797ebd94
x-ms-traffictypediagnostic: DB7PR10MB2059:
x-microsoft-antispam-prvs: <DB7PR10MB2059729B0A7D44C8DD30C25BFE5C0@DB7PR10MB2059.EURPRD10.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 02426D11FE
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(136003)(366004)(39860400002)(346002)(376002)(199004)(189003)(5660300002)(99286004)(74316002)(305945005)(2906002)(76176011)(7696005)(52536014)(66446008)(66556008)(81156014)(66946007)(66476007)(64756008)(71190400001)(71200400001)(81166006)(9686003)(224303003)(76116006)(8936002)(4326008)(186003)(102836004)(11346002)(6506007)(14454004)(25786009)(478600001)(86362001)(33656002)(316002)(110136005)(54906003)(55016002)(26005); DIR:OUT; SFP:1101; SCL:1; SRVR:DB7PR10MB2059; H:DB7PR10MB2411.EURPRD10.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: siemens.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: GgujvquZCy72LOjAgj1Z3rcfvqCsoUU+IvUKA6vMme3QeTWbyp98RxRX1L2AyJguVxHkCWTXMNttiuulQ4BQFxHIHsIuGyaVLf7uHe60NpZA6mG2nCKMEMD3VixTjbisB7TIbemnW/7nyG1rPPdPhtV0PpWBgye416flPtxBFLANv0U6bJ9OUh5x57kX3voJGdQPQC2QgEzz4L9Yvia/Rsjus3RbUCQMmtdNxw1Pyne8sMKy3RM+ujeu0+PtXocSrKI1eZTJXaPSqnFvKhBI6DScgHs71A9I/kPnB9vfq4MtxM8+r3xKZaee6uuJNhtvvgbOK1A1GHVr256+rAmQIQbLkRu8m5OY2xodtVgF/7rzp11vdpY2v1e/iIbKOuf8R4ch9zS+cmOqygNgmB6ibnXsxbPhWC5lGIGifYJ628p76JxARMeeegsNATNjjwe1
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: siemens.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 8faaa834-8798-4a00-a9c5-08d7797ebd94
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Dec 2019 12:29:14.8452 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 9M0J1XL3637uIsml1HRG3Z9wIgimU05vAahSZ9gjGx0ukquHCe/qC5LiU07Kan7E2c9Ue2hXayBhLDT05kfQuV0LIc22618xXzHA0lMcPs8=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR10MB2059
Archived-At: <https://mailarchive.ietf.org/arch/msg/spasm/O6Z95_vVX_HHMwmPeZC-1p-YmSc>
Subject: Re: [lamps] Mirja Kühlewind's No Objection on charter-ietf-lamps-04-01: (with COMMENT)
X-BeenThere: spasm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "This is a venue for discussion of doing Some Pkix And SMime \(spasm\) work." <spasm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/spasm>, <mailto:spasm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/spasm/>
List-Post: <mailto:spasm@ietf.org>
List-Help: <mailto:spasm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/spasm>, <mailto:spasm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Dec 2019 12:29:19 -0000

Hi Mirja

Thank you for your comment. You are perfectly right, the wording "theses environments" is quite vague.

> 
> ----------------------------------------------------------------------
> COMMENT:
> ----------------------------------------------------------------------
> 
> It's not fully clear to me what is meant with "these environments". I guess
> something with constraint devices...? Would be nice to be at least slightly more
> concrete to make the charter less ambiguous/less open-ended.
> 

As pointed out in the introduction of the I-D the CMP profile addresses machine-to-machine use cases and focusses on maximum automation of certificate management of such machine end entities as well as further communication of the involved PKI management entities.
-----------------------------snip-----------------------------
2.  Introduction

   This document specifies PKI management operations supporting machine-
   to-machine and IoT use cases.  The focus lies on maximum automation
   and interoperable implementation of all involved PKI entities from
   end entities (EE) through an optional Local Registration Authority
   (LRA) and the RA up to the CA. [...]
-----------------------------snip-----------------------------

I am happy to change the proposed charter text accordingly to make it more clear. Would this wording be better?
-----------------------------snip-----------------------------
3. The Certificate Management Protocol (CMP) is specified in RFC 4210,
and it offers a vast range of certificate management options.  CMP is
currently being used in many different industrial environments, but it
needs to be tailored to the specific needs of such machine-to-machine 
scenarios and communication among PKI management entities.  The
LAMPS WG will develop a "lightweight" profile of CMP to more efficiently
support of these environments and better facilitate interoperable
implementation, while preserving cryptographic algorithm agility.  In
addition, necessary updates and clarifications to CMP will be specified
in a separate document.  This work will be coordinated with the LWIG WG.
-----------------------------snip-----------------------------

Hendrik