Re: [Suit] SUIT rechartering: proposed text

Ira McDonald <blueroofmusic@gmail.com> Tue, 10 August 2021 16:30 UTC

Return-Path: <blueroofmusic@gmail.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA94E3A1497 for <suit@ietfa.amsl.com>; Tue, 10 Aug 2021 09:30:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vwL0JTqgMlzr for <suit@ietfa.amsl.com>; Tue, 10 Aug 2021 09:30:48 -0700 (PDT)
Received: from mail-ua1-x930.google.com (mail-ua1-x930.google.com [IPv6:2607:f8b0:4864:20::930]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42BDB3A148C for <suit@ietf.org>; Tue, 10 Aug 2021 09:30:33 -0700 (PDT)
Received: by mail-ua1-x930.google.com with SMTP id x21so4854859uau.0 for <suit@ietf.org>; Tue, 10 Aug 2021 09:30:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=dkQFtdfox3K9xENjSnX6AXMrlO11po57gy7azu9qbEM=; b=Hmt67egNm3CanE6iMvdsQvt3PDhRohiMSfZm3vUk7FS+t9yGMRrIQ1qyzKazKYeoBM 2IwgkmaPQsXFIILOhArW6vwQ1kCKa52GaHLc/uGV4CPh3g8pn2gsEIrSdGCj+p/cCWS4 uUgFVqgcM7b/NNDIXi+ZtcSi6GItKjvdXe5ju59waIyXaLPlnGczpxooDgDuyXruGy5r lKRwNZ3mBTASj2RDWcVYuU37xvyjVHDcdTq7MMb2uJwEZzRxidPuVOuwDscsSSetYks5 E1jftrF/8y8SJZeb5xhxvzsRMLZIL0SLRZZR/AW5gbgd5exTRkUreYyjpfF+laDATEJX 0HZw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=dkQFtdfox3K9xENjSnX6AXMrlO11po57gy7azu9qbEM=; b=Jfo2qZ0OnmSerb8fVdhUBGOSPNE+PM16T9lJVoWW56OA7P88lQY4I4qCeo8MPKLJzm fF3bBNhyVKTCwuZ8BNsdRn0m7JZOdop/qJyntV+jqbyODOhD3UeWX7bqpEFKxpY7cwGw tBvafelA78sUN3Os6jFXoNzERH93exLCD+sOHeIm5G7UekrkaQ0lWbNl56eT2z0tdad9 WYlRYET+HQbnaQageRKdoOGud6agrjZAn1eSHuCWyR+2oH+X/KwpLAforC/AUNvE+iPW Pxw/xmQIZcdm71B8yP9PcW5cL7fYxj63MyruzR5RVfCvLoeY5EGqDfK7i6FArex9tBn0 hTUw==
X-Gm-Message-State: AOAM5329o8o3ZTxeBtc8SnXFd9kqHhdA4eHETaiv660dkaZRh55Ck2ld K4kUsuSkN9jpOGr7bD9GSjdPsNgoCOXQ7qAZzNA=
X-Google-Smtp-Source: ABdhPJwrfQS9waKTfoZfDs3TUWS/Dy9TCntQ4gmoFY4P+MZX7uM9W7mHVi1JmPR6dFkNq/5vI6nRk8/M/9EySTp2XxA=
X-Received: by 2002:a9f:3e4c:: with SMTP id c12mr21976461uaj.75.1628613030906; Tue, 10 Aug 2021 09:30:30 -0700 (PDT)
MIME-Version: 1.0
References: <66D84CE5-22E6-44F0-8239-8A5832326219@arm.com> <3E7D5E5B-03EE-4EDD-A951-FB119F72DDE8@arm.com> <16339.1613515194@localhost> <E4B87013-1498-463F-98C0-5FF13344C3EA@arm.com> <6FC3F38A-B067-4180-ACD9-A121162EA459@vigilsec.com> <26718.1626138395@localhost> <MN2PR09MB4841BA0A0CC978E70A09A509F0119@MN2PR09MB4841.namprd09.prod.outlook.com> <67F117E7-28F2-45F3-BC4C-AC8116BCB69F@vigilsec.com> <SN6PR2101MB0943178F1E627E78A1343AE8A3E59@SN6PR2101MB0943.namprd21.prod.outlook.com> <50B65F80-808D-4591-9D4D-2346796DA204@vigilsec.com> <1944E3C3-9348-4574-AE26-4133BFD932B0@vigilsec.com> <CH2PR21MB1464AC4D50A932EC45A3B369A3EF9@CH2PR21MB1464.namprd21.prod.outlook.com> <3944F4E6-9644-4D23-9DB0-B0AC0490AB51@vigilsec.com> <A460F3FC-0EC6-4B8F-9D8C-D40AC841E602@arm.com> <20192.1628612087@localhost>
In-Reply-To: <20192.1628612087@localhost>
From: Ira McDonald <blueroofmusic@gmail.com>
Date: Tue, 10 Aug 2021 12:30:04 -0400
Message-ID: <CAN40gSsvPrnMzUrQASo7nmJJKYGjNm=GNtOd9v9+a7Ni1waCCQ@mail.gmail.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>, Ira McDonald <blueroofmusic@gmail.com>
Cc: Brendan Moran <Brendan.Moran@arm.com>, suit <suit@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000002f0ffb05c9370590"
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/58DbsUFwFTD0-N70Tw-KM8Gns40>
Subject: Re: [Suit] SUIT rechartering: proposed text
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Aug 2021 16:31:02 -0000

Hi,

I suggest that SUIT indeed has potentially much wider utility
than just the initial firmware of an embedded device.

Without displacing other vendor and consortia based software
update solutions, I suggest that SUIT could be used to update
software modules (after initial firmware) in a target device.

Having spent the last two years as a US invited expert in the
ISO 24089 Road Vehicles: Software Update project and the
last eight years addressing OTA firmware/software update
for the automotive industry, I suggest that SUIT has quite a
few advantages over many of the other solutions that were
adapted from the mobile phone industry.

I believe that it would be unfortunate for the SUIT charter to
imply or explicitly say that it's not suitable for the automotive
industry.

Cheers,
- Ira


On Tue, Aug 10, 2021 at 12:16 PM Michael Richardson <mcr+ietf@sandelman.ca>
wrote:

>
> Brendan Moran <Brendan.Moran@arm.com> wrote:
>     > I’m slightly concerned by one paragraph:
>
>     >>> The SUIT WG does not aim to create a standard for a generic
>     >>> application software update mechanism, but instead the SUIT WG is
>     >>> focusing on firmware development practices in the embedded
>     >>> industry. Software update solutions that target updating software
>     >>> other than the firmware binaries (e.g., applications) are also out
> of
>     >>> scope.
>
>     > This is a concern because, in the manifest format, we say that the
>     > primary goal is firmware update, but it’s still usable for software
>     > update. If this paragraph of the charter remains as-is, then the
>     > manifest format appears to go counter to the charter. I would argue
>     > that this paragraph appears to prohibit the development of support
> for
>     > TEEP.
>
> We weren't aiming for software update, but it turns out that we hit the
> mark.
>
> The paragraph, as Russ says, is left over from before.
> The important part about it is that if SUIT Manifest format was found
> lacking
> in some way as a "generic application software update", that wouldn't be
> considered a bug.
>
>
> --
> Michael Richardson <mcr+IETF@sandelman.ca>   . o O ( IPv6 IøT consulting )
>            Sandelman Software Works Inc, Ottawa and Worldwide
>
>
>
>
> _______________________________________________
> Suit mailing list
> Suit@ietf.org
> https://www.ietf.org/mailman/listinfo/suit
>