Re: [Suit] RFC 9124 on A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices

[Dave Thaler <[e-mail]>]

Thanks to the authors and the WG for making this happen!

-----Original Message-----
From: Suit <[e-mail]> On Behalf Of Russ Housley
Sent: Friday, January 14, 2022 12:06 PM
To: Brendan Moran <[e-mail]>; Hannes Tschofenig <[e-mail]>; Birkholz, Henk <[e-mail]>
Cc: suit <[e-mail]>
Subject: Re: [Suit] RFC 9124 on A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices

Congratulations for finally getting this across the finish line!

Russ


> On Jan 14, 2022, at 2:52 PM, [e-mail] wrote:
> 
> A new Request for Comments is now available in online RFC libraries.
> 
> 
>        RFC 9124
> 
>        Title:      A Manifest Information Model for Firmware Updates
>                    in Internet of Things (IoT) Devices
>        Author:     B. Moran,
>                    H. Tschofenig,
>                    H. Birkholz
>        Status:     Informational
>        Stream:     IETF
>        Date:       January 2022
>        Mailbox:    [e-mail],
>                    [e-mail],
>                    [e-mail]
>        Pages:      40
>        Updates/Obsoletes/SeeAlso:   None
> 
>        I-D Tag:    draft-ietf-suit-information-model-13.txt
> 
>        URL:        https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rfc-editor.org%2Finfo%2Frfc9124&amp;data=04%7C01%7Cdthaler%40microsoft.com%7Cf96ef53dbe624279a5b808d9d7994f3a%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637777875748657569%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=ZSNCE7EzogKfau%2BYyiY3mZy0PXlZ%2B0onAZxUvE65ngU%3D&amp;reserved=0
> 
>        DOI:        10.17487/RFC9124
> 
> Vulnerabilities with Internet of Things (IoT) devices have raised the 
> need for a reliable and secure firmware update mechanism that is also 
> suitable for constrained devices. Ensuring that devices function and 
> remain secure over their service lifetime requires such an update 
> mechanism to fix vulnerabilities, update configuration settings, and 
> add new functionality.
> 
> One component of such a firmware update is a concise and 
> machine-processable metadata document, or manifest, that describes the 
> firmware image(s) and offers appropriate protection. This document 
> describes the information that must be present in the manifest.
> 
> This document is a product of the Software Updates for Internet of Things Working Group of the IETF.
> 
> 
> INFORMATIONAL: This memo provides information for the Internet community.
> It does not specify an Internet standard of any kind. Distribution of 
> this memo is unlimited.
> 
> This announcement is sent to the IETF-Announce and rfc-dist lists.
> To subscribe or unsubscribe, see
>  
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> ietf.org%2Fmailman%2Flistinfo%2Fietf-announce&amp;data=04%7C01%7Cdthal
> er%40microsoft.com%7Cf96ef53dbe624279a5b808d9d7994f3a%7C72f988bf86f141
> af91ab2d7cd011db47%7C1%7C0%7C637777875748707548%7CUnknown%7CTWFpbGZsb3
> d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7
> C3000&amp;sdata=FE6VKecLe6i298%2FePP%2F25TjJfxT5VnqgHFLuggT0IYM%3D&amp
> ;reserved=0
>  
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail
> man.rfc-editor.org%2Fmailman%2Flistinfo%2Frfc-dist&amp;data=04%7C01%7C
> dthaler%40microsoft.com%7Cf96ef53dbe624279a5b808d9d7994f3a%7C72f988bf8
> 6f141af91ab2d7cd011db47%7C1%7C0%7C637777875748707548%7CUnknown%7CTWFpb
> GZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0
> %3D%7C3000&amp;sdata=ibG67dInPVrBoAvfnxOzIyL1sMAi8tB6Vlhz7tEZBHg%3D&am
> p;reserved=0
> 
> For searching the RFC series, see 
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> rfc-editor.org%2Fsearch&amp;data=04%7C01%7Cdthaler%40microsoft.com%7Cf
> 96ef53dbe624279a5b808d9d7994f3a%7C72f988bf86f141af91ab2d7cd011db47%7C1
> %7C0%7C637777875748707548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAi
> LCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=OOy8dk
> sSNRdqtcCZDuFxTh3ETlftzRkGMvRmfDHSiyA%3D&amp;reserved=0
> For downloading RFCs, see 
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> rfc-editor.org%2Fretrieve%2Fbulk&amp;data=04%7C01%7Cdthaler%40microsof
> t.com%7Cf96ef53dbe624279a5b808d9d7994f3a%7C72f988bf86f141af91ab2d7cd01
> 1db47%7C1%7C0%7C637777875748707548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4
> wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sda
> ta=DhuHsxm1hwZ%2Bpp%2B2rD5%2BbdF4h37tfSfilkUnQ1HaQb0%3D&amp;reserved=0
> 
> Requests for special distribution should be addressed to either the 
> author of the RFC in question, or to [e-mail].  
> Unless specifically noted otherwise on the RFC itself, all RFCs are 
> for unlimited distribution.
> 
> 
> The RFC Editor Team
> Association Management Solutions, LLC
> 
> _______________________________________________
> IETF-Announce mailing list
> [e-mail]
> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> ietf.org%2Fmailman%2Flistinfo%2Fietf-announce&amp;data=04%7C01%7Cdthal
> er%40microsoft.com%7Cf96ef53dbe624279a5b808d9d7994f3a%7C72f988bf86f141
> af91ab2d7cd011db47%7C1%7C0%7C637777875748707548%7CUnknown%7CTWFpbGZsb3
> d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7
> C3000&amp;sdata=FE6VKecLe6i298%2FePP%2F25TjJfxT5VnqgHFLuggT0IYM%3D&amp
> ;reserved=0

_______________________________________________
Suit mailing list
[e-mail]
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsuit&amp;data=04%7C01%7Cdthaler%40microsoft.com%7Cf96ef53dbe624279a5b808d9d7994f3a%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637777875748707548%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=2YIYRzdtTtZRnIxstUAJgBK4mHCZh8GIQrc43HmEc80%3D&amp;reserved=0