Re: [Suit] SUIT rechartering: proposed text

"Waltermire, David A. (Fed)" <david.waltermire@nist.gov> Sat, 24 July 2021 12:00 UTC

Return-Path: <david.waltermire@nist.gov>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 414E93A3883 for <suit@ietfa.amsl.com>; Sat, 24 Jul 2021 05:00:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.163
X-Spam-Level:
X-Spam-Status: No, score=-3.163 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.452, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_GOV_DKIM_AU=-0.612, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z2NEQfMoXGKL for <suit@ietfa.amsl.com>; Sat, 24 Jul 2021 05:00:50 -0700 (PDT)
Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02on2124.outbound.protection.outlook.com [40.107.91.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B11C53A3882 for <suit@ietf.org>; Sat, 24 Jul 2021 05:00:50 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=g00TrsHCbPE28jJ/pdHr5K4F5V5YHcTuZqRyRAT+Aricubmcyu++n8udDP8ItCikmvPLyL9DS+V4nCCgK+G3lv07mprc+a8bj61/zQM9zoPqEUuLpWeH063sxN0duftZGsr7ptCuuxmzBGgyihEqGpPpmGaZNcjvdyCCTYTaobDCu5uRc9lN/ceX8DzK7KAR7PUga3O0APyFa0oy/yihvrX5e/JrsMrkknfAiFHhb/OCagGfCnyO8N2K7VjaAB89QhQXHtHqlRyR9vsufIq1uCGGkuY0Fc/XRcjIY9pHYIUzPzONSatdYaYIKubmkCYnhbCaooiNyddAQe/9gAi6lg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1AZNtyxxuWNJX1M3cS880Vci07zW3TRzDLH5hfc0JMA=; b=E34p96o/bAv/DWVzzPkOi7BnULTpzey81PKBrS2/zySmilLF6bkqX1w+HhRpveVHcf2zAAE+5RfEuHOFQM3tdkSayi+5M1DlO9/msi0FShergW9NJOuq5xZy7zwvPP9A3kmkb/j5Ic9XX0bGOlZoMWbTcdndxuR2DnbyXzKnpusaWzRXH17rk1hsrddvp61zdL6BnMHJ8FGY525fHoDEwq8V97z37X5wbYl3oHH/Gh4u/rbSwHnQ7o5u3oGgv0nSPDKLG9DYGe56qCywF3Q7cK6jN9BwIazTd5Mn8w2CXPMtKg5jkfN8SBGv55mdII4dhgPg6KUTdenRVbm+q4NafA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1AZNtyxxuWNJX1M3cS880Vci07zW3TRzDLH5hfc0JMA=; b=bn5tKaYCaqP7rmiAQy0nonqPlK51okUZXm4QLoOFBiYbQs+/sbgGdbho3YFw1y1iaTKuT3AvdJs6I8aOjkLmhJw2NTZQE70biBcVZ44rVrzc8GyJVh8R7Dsru+ntN/zr6Nl9eECVIudvG5Fck3457buCX4bB2G1rszuuiqzvcgc=
Received: from MN2PR09MB4841.namprd09.prod.outlook.com (2603:10b6:208:21e::21) by MN2PR09MB5194.namprd09.prod.outlook.com (2603:10b6:208:222::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4352.24; Sat, 24 Jul 2021 12:00:48 +0000
Received: from MN2PR09MB4841.namprd09.prod.outlook.com ([fe80::9d9a:a3fa:70b6:975e]) by MN2PR09MB4841.namprd09.prod.outlook.com ([fe80::9d9a:a3fa:70b6:975e%4]) with mapi id 15.20.4352.029; Sat, 24 Jul 2021 12:00:48 +0000
From: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
To: Dave Thaler <dthaler=40microsoft.com@dmarc.ietf.org>, Russ Housley <housley@vigilsec.com>
CC: suit <suit@ietf.org>
Thread-Topic: [Suit] SUIT rechartering: proposed text
Thread-Index: AQHXBIFCYdPbq2i4MU2UU0mwBdcWBqpbCE+AgABX+ACA5UScAIAAD0qAgABJdoCABbIAYIAGOtmAgATJPsCAABq0AIAAAB+wgAEvhWg=
Date: Sat, 24 Jul 2021 12:00:48 +0000
Message-ID: <vdfq3kaclya78m117fpb0dta.1627128047031@email.android.com>
References: <66D84CE5-22E6-44F0-8239-8A5832326219@arm.com> <3E7D5E5B-03EE-4EDD-A951-FB119F72DDE8@arm.com> <16339.1613515194@localhost> <E4B87013-1498-463F-98C0-5FF13344C3EA@arm.com> <6FC3F38A-B067-4180-ACD9-A121162EA459@vigilsec.com> <26718.1626138395@localhost> <MN2PR09MB4841BA0A0CC978E70A09A509F0119@MN2PR09MB4841.namprd09.prod.outlook.com> <67F117E7-28F2-45F3-BC4C-AC8116BCB69F@vigilsec.com> <SN6PR2101MB0943178F1E627E78A1343AE8A3E59@SN6PR2101MB0943.namprd21.prod.outlook.com> <50B65F80-808D-4591-9D4D-2346796DA204@vigilsec.com>, <SN6PR2101MB0943498331533D38580A741CA3E59@SN6PR2101MB0943.namprd21.prod.outlook.com>
In-Reply-To: <SN6PR2101MB0943498331533D38580A741CA3E59@SN6PR2101MB0943.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none;dmarc.ietf.org; dmarc=none action=none header.from=nist.gov;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 55775372-0d85-4b6f-3b52-08d94e9aad19
x-ms-traffictypediagnostic: MN2PR09MB5194:
x-microsoft-antispam-prvs: <MN2PR09MB5194A7E1EBA68409CAF82938F0E69@MN2PR09MB5194.namprd09.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:2887;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: RW/68d2cSYjXy4amRz40MMPfS18JHogbUXLv3orpwkKP96wg02XczSDTzuYTzm0NR2J+eoK9BdGxPii3chI6oEGE+UtTI3aTMkFXxKKI6oWvRube+PI1dtsHyGz0TBOgtv7x7EHsdx17YNRunkR58YG6KLOQKWeOMXNOborsChSvbVjTjCE6Vi8VVjz4Gs41OiK0yvNFICEO3+faDTt7PzWDRKJXakPVjn0FAq60xoPq23U+1Kvpf/1t34DFVIRO+z4X3WNeNLFYOSO4T9kE+XgPdxXEefibPgRNlOtwPsnbVPvG4Jol3KWoEls9xjCtqZs6sNz/PSMr5HdB8+LHNDgr5ISE+Vow0Q9GwjO7YLFaMkpz0ripmuS1WwQ/FvIGX+KiAY1pfUjUGe5Vm8F3rWyioLYqQvmcH4LS2npa9pBnyElxbQFNgyiOFrJ5wzaByygy3ImnbEkN7uRPxt9lZvXHLWATudubLkZMnVlFTm9Z6JJVvEQmg/5d0+bLYofIVSHJxuWQoqqLmk/LH3Cxd9NyMrVvpFVnhqwwtw2W7XQIdxtMzCmXzjiUMMhlN89jNYTD8M6oSgDFnu6lRVDf0goyekCWk4QuN6XovApozFlL3V4aBEl5sm+b0Epju2hnDXOEB4WnzELWqki/SJiBD1EjUc9J7iKPdH3WT+d/CBfsspr59KzixmnPGIVV9r+ksHJJOkbY3CNsxSNrC8luxg==
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR09MB4841.namprd09.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(396003)(366004)(39860400002)(136003)(66476007)(9686003)(66946007)(66446008)(38100700002)(66556008)(6486002)(64756008)(6512007)(76116006)(122000001)(53546011)(83380400001)(6506007)(186003)(4326008)(8676002)(71200400001)(5660300002)(45080400002)(8936002)(110136005)(2906002)(86362001)(478600001)(316002)(38070700004); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 2xveMWq/JVJsFoqvCdYYvqXdtsE/1O3IzPslObZX/MwxKWPKKxoX82jmlQ59a6T7sXcdRsZX9ldaKp/e6ZEFJNQVG8GVaMnMPOvVaaRgJ7XaqylHPVfzRg4fUxOV2/eYzVj//nAQh4g7WFSzyNEy9zPZ2TKYIecVgppWunbtu+TRs2ESRDMUc9l9zN2cLA7RJW6tgUcDk4F846HuNPSQQwxgwJkQ4dnUjMVCVp4CScodXajx1N+jMLLv+nZBzi1HK86G6e3wcQOe4Ohkn7jhpef2YDyhlSjveIQkz02scSJWhGjZ/wy7YVvOLfghlaNJs/BUZAQf2L+p3M9TaIVSCwi3SIfh20TEDi+1/Qq3mzAnt7ADqCf2BpR5q7kho1yNVi7UCYRfU1+mGV3Pov5RvY8N34Cl9iz7lvx5UyUBxygX0YDeCiP/0Rbg68bfE94XkqZ70gPAQkDW4x6O1WVy76cu4u7Z6WiNq4MGGszmz82HrNBj+7qqrINUkDDPT+Q7w06K/cOLOyzBwuoltTbGw7qAOZpkjtjSGooyZ6kyBFYMxYTuelXtYc58E6ky1cOFKMupRbQdlsqvy18bR8vQh1e1/JkJxIe0cMSCBKHI7TZWoLzsWDfKlgGQEMSo7Im0q/W4lrcpjOQMcgxS0EjA6tdjjxzFjXvGJLYLOGHbbFdkwig4MehTAOKF8BgnBDVGSOJNTR+7JxV9fQt36X9xI00SfhAOzgK7PbNTbLsLqlBlaUkLiKZoB1JH70FRymxmdPqPilZYM54u96upQZmZBteU43P2xND+6osso1RvMoqXtztrgl0j9iUHE9S62MGhV1ZGoU8g2p3kyzxRAzQnRjxCBQXxfspYEH2Ts1nluhNk2TXUSMFkp2jqd1uq34CBlGhi1nrTpAfVx/wML1OziJsqIUT+e86TC27b1eTYMBrYOwlhRE0AqVk1FnEnwmTjTRcPOWuE2/hQxPyd87eblyi0RbDmd2x/5/NRjVtxt1WD/i9W9RxG9oDSwVEADZ2la4l2UMYLZHvHuclNTTfvfjpMLDmjLOv91p/VchpTP++mSzOxFXjaAapMBodhugR3MQzsWc4pa1970u9Ue0Fj1ePvOqbdye+jHkB71Qy9BCvIIGVGeG+hI9QDfN555nfS3NJ/H2vvsXcVVxqfRFRoGaHmgPSDxaSbbv10i196dAEK1rXJ0ifUVfXYrxAnvnsbhRHTL79RsA1wgJAlpPjPAVhlnkhontha9ij8vmyx7Znusz/e1SU/QKOPyTS6RQhN75bhFmqdBhZpqsOh9+NZZDkWu2QjB/Qzy21CgXBRmumnLzzAUaNuhNq5gqd8JwXW5e4t45M/roU1/Dr8iLbdrHJKvyNSXkBSGvyitXqUk/6HHXKf6gVpLp5O75gxGRsl
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_vdfq3kaclya78m117fpb0dta1627128047031emailandroidcom_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR09MB4841.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 55775372-0d85-4b6f-3b52-08d94e9aad19
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2021 12:00:48.3567 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR09MB5194
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/fPbEWDfqkp_K4FI6RQJjZC9ZGak>
Subject: Re: [Suit] SUIT rechartering: proposed text
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 24 Jul 2021 12:00:56 -0000

The charter is looking great with these changes!

Dave

-------- Original Message --------
From: Suit <suit-bounces@ietf.org> on behalf of Dave Thaler <dthaler=40microsoft.com@dmarc.ietf.org>
Date: Fri, July 23, 2021 2:05 PM -0400
To: Russ Housley <housley@vigilsec.com>
CC: suit <suit@ietf.org>
Subject: Re: [Suit] SUIT rechartering: proposed text

Agree with those fixes.
Thanks Russ.

From: Russ Housley <housley@vigilsec.com>
Sent: Friday, July 23, 2021 10:54 AM
To: Dave Thaler <dthaler@microsoft.com>
Cc: suit <suit@ietf.org>
Subject: Re: [Suit] SUIT rechartering: proposed text

Dave:


> …
> The SUIT WG document deliverables are:
> * A SUIT manifest format specification using CBOR.
> * A firmware encryption specification for use with SUIT manifests.
> * A secure for IoT device to reporting on firmware update status.

I can’t parse the above bullet, maybe a word missing right before “for IoT device”?

Yep, that is messed up.  How about:

   * A secure method for an IoT device to report on firmware update status.


 > * A set of claims related for attesting to firmware update status.

Remove “related”.

Yep.

Russ