Re: [Suit] SUIT Architecture document review

Hi Micheal,
hi thread,

at Kathleen's keynote address in TCG, the "not new" notion that SUIT 
refers to (S)oftware was raised, which - to the audience - seemed to be 
in contradiction with the content being produced.

That said, in theory the SUIT manifest could be used to update basically 
things of any size - not only constrained nodes. But I agree with your 
point that this is just a "title" problem. There are solutions, such as 
package systems,  in place that would require a quite more complex and 
elaborate attestation infrastructure and that is not the scope SUIT is 
targeting, I think.

m2c: wrt to number of secrets and endorsements that would have to be 
maintained per device we also want to be as minimalist as we can be 
while remaining feasible, I think.

Viele Grüße,

Henk

On 16.10.19 16:04, Michael Richardson wrote:
> 
> Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
>      > [Hannes] When you say “larger systems” what do you mean? There are
>      > Windows, Linux and mobile devices out there that already have a
>      > perfectly fine software update mechanism and we are not trying to
>      > replace it with this work. For those devices that run regular operating
>      > systems the lightweight design of the software update mechanism is
>      > apparently less of a concern compared to the design of a firmware
>      > update mechanism for low end IoT devices, as you have witnessed in the
>      > discussions on this list. When you say “large system” are you then
>      > referring to a system that runs Windows, Linux or something similar or
>      > do you have some other system in mind?
> 
> I believe that it would be applicable to Things based upon things that look
> the RPI, running Android IoT or OpenWRT.  While there are package systems, a
> random assortment of packages is undesireable, and can not easily be attested
> to.
> 
> This is what I think that Kathleen is talking about.
> 
> 
> --
> Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
>   -= IPv6 IoT consulting =-
> 
> 
> 
> 
> _______________________________________________
> Suit mailing list
> Suit@ietf.org
> https://www.ietf.org/mailman/listinfo/suit
> 