[Suit] Re: I-D Action: draft-ietf-suit-trust-domains-11.txt
Deb Cooley <debcooley1@gmail.com> Sat, 12 July 2025 17:46 UTC
Return-Path: <debcooley1@gmail.com>
X-Original-To: suit@mail2.ietf.org
Delivered-To: suit@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id C3E14434F74C; Sat, 12 Jul 2025 10:46:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.848
X-Spam-Level:
X-Spam-Status: No, score=-1.848 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CKdix4g1WY-P; Sat, 12 Jul 2025 10:46:08 -0700 (PDT)
Received: from mail-pg1-x535.google.com (mail-pg1-x535.google.com [IPv6:2607:f8b0:4864:20::535]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 3D14C434F745; Sat, 12 Jul 2025 10:46:05 -0700 (PDT)
Received: by mail-pg1-x535.google.com with SMTP id 41be03b00d2f7-b3220c39cffso3180238a12.0; Sat, 12 Jul 2025 10:46:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1752342364; x=1752947164; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=csiKoScc5VYS9xW91Q7CyN6ycRzc6T77oUJgDIdaMto=; b=RQQRA1UFXrZCCJF5rBpShKQDdbYDA6+COs5V579dm7KlTTtZad5T8Mj4aMIRa4Q82d 42CKG2/zEuUQHn+wMdNcKQsJUo8/2u98ln6faVlIaQ2Gj3gsoVxPT5lriZWwE5/2r0At ga8LIjFukhhAbM1jpM26X3KOr1E+znliI62DO8eGsjkABqMj8SmP4dH30RpI3u05+mD5 qZ3NAc8ddL2wgjJdfdJFonOdIJ1GZhaWPrA2F5AA6IZ3n3OXMjCGAcG2RVQh1f24ZHia NsKQRsC/QxI8CLCzEOSPIiK4yjHoZSBxuPL2e4hlF7q/oCEcKoUQpH/adZWoevzPvdbY aeVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752342364; x=1752947164; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=csiKoScc5VYS9xW91Q7CyN6ycRzc6T77oUJgDIdaMto=; b=eOtGvMEZXpLDQmyIfcoHzXlZyLDD9JqSAK++opqb/8tqb8JUliL+1/O2Mm4ew8rR0K z3U+QDgYKut2v8UR79cWMZjGApzyWv9EhSUltlQCwK/ip7YqTo155rVv2A6bNRPwyKxc 75TSfst/IMBtko1DJlnrMfv4CzJ343pG/DQnWzgmKPlI/XYAKbYxSR1GtxI7+31HMsq0 h5nJupaNOphScTGyG2eS7Xd1J+1mvGqdLC+0W+wpZMYDJQWUpCYhqZld5qpaYZddgfQ9 5jBlF+uaBs8fSjAA3AOmLZ4IhIkNSEduREXGKbi80/4uxXCDzfJRLgRqi7EKKOP7gxvR MPAQ==
X-Forwarded-Encrypted: i=1; AJvYcCXAuHL+vTTmMsgx7m2ghO1np0wGTmhPs/7ZSqPem3QIBpnsHprAvYu65i9fayfxXNzh54phecOppRbEXw==@ietf.org
X-Gm-Message-State: AOJu0YwDpOBgJntwtXWggQOOQC3+PPvcgkbLhpf8P3v6Dd+antoH74Yc JrBb8MAK9sqYQdyfhteStdWS48xIuxItNXOOT51MIMe4GaY9Q/YE1PWEf9Qh4gl9KvmlhuMx2rf yrucN16MwO8v3tqRHVbuzGpkUWlWJ/PS52lE=
X-Gm-Gg: ASbGncvScOLAskAZbh39OIPK7OeZSq9H/xyGQ1+e1z20C7pyNxTtuXno+GY3G5tobHx aJfiv5I+HJWooGPUlF40e1DeG9SuYh60OiE9gj3FbzIPaBs26sMjeT6q5HZrQahN6FE4QrLXcSE mJ0ZksCGdT1IEvmJ/Nno5UzMpq6icAU5Ds08qSh31nI5q8mCzd/Lgk5bWOBrNlbAabhgRMVLflK C+TDWJbE8NNQYcXt7wd3Moc3BKvyC/UKzhsm10s
X-Google-Smtp-Source: AGHT+IGfH3AVt6J7v/MmIOGVPn6XJGAT4NGeHqgzgCIUz2bzAw2HQZ/eSegieKs5GC1iUxL35rcv3P5cJ+45Kix2yZk=
X-Received: by 2002:a17:90b:3c0e:b0:311:cc4e:516f with SMTP id 98e67ed59e1d1-31c4f5c1e77mr9844479a91.31.1752342363573; Sat, 12 Jul 2025 10:46:03 -0700 (PDT)
MIME-Version: 1.0
References: <175195695500.1952754.18220346047216016152@dt-datatracker-6fcb845cd4-p6tkq>
In-Reply-To: <175195695500.1952754.18220346047216016152@dt-datatracker-6fcb845cd4-p6tkq>
From: Deb Cooley <debcooley1@gmail.com>
Date: Sat, 12 Jul 2025 13:45:48 -0400
X-Gm-Features: Ac12FXxPEacjaCmSqEYmbxNvSHhWykY2CA3LiZIhtGtT_CEdN2G_rP3Q3QBdx7s
Message-ID: <CAGgd1Oe7AQEeT4KsLxafOwrDRPSiO=aWJmTsN6nA392yegEDxg@mail.gmail.com>
To: draft-ietf-suit-trust-domains.authors@ietf.org, Brendan Moran <brendan.moran.ietf@gmail.com>, Ken Takayama <ken.takayama.ietf@gmail.com>
Content-Type: multipart/alternative; boundary="0000000000001b11c80639bf0011"
Message-ID-Hash: VHPG5XFSABKQNCKAGQNP56YQA3TLTFNW
X-Message-ID-Hash: VHPG5XFSABKQNCKAGQNP56YQA3TLTFNW
X-MailFrom: debcooley1@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-suit.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: suit@ietf.org, suit-chairs@ietf.org, Dave Thaler <dthaler1968@gmail.com>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Suit] Re: I-D Action: draft-ietf-suit-trust-domains-11.txt
List-Id: Software Updates for Internet of Things <suit.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/gGENSLG-cLW1TzFcIvaovjLywA8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Owner: <mailto:suit-owner@ietf.org>
List-Post: <mailto:suit@ietf.org>
List-Subscribe: <mailto:suit-join@ietf.org>
List-Unsubscribe: <mailto:suit-leave@ietf.org>
This is soooo close. Just a couple of things that need to be fixed. Gorry, Gunter, Paul and Roman all made comments on this draft, and while it appears that the authors have addressed most of their concerns, I don't see replies to their comments. In some cases, you may just be explaining what something means, without a change to the draft. For example, there are some specific technologies used as examples - Arm TrustZone and Intel's SGX, which may have been confusing to some. (Gunter) Section 1, bullets: There is a mix of first word uppercase letters, and first word lowercase letters. Pick one. If you choose uppercase letters, I suspect that a '.' at the end would be appropriate. (Gunter) Section 2: Add Dependency Manifest and/or Dependent Manifest. Section 2, second bullet: Nit: Mani/Manifest? (Gunter with my spin) Section 3, last paragraph: Your use of 'lockstep' appears to be different than what I think of (two processors move from instruction to instruction in 'lockstep'). Consider adding this to the definitions, and I believe the process is described in Section 5.3 (at least there is no occurrence of the word 'lockstep' in Section 5.4). (Gorry) Section 5.6, table 1: This would be better with a caption. Something like 'added or modified commands'. Section 10: RFC 9124 should be Normative, no? In general, the use of uppercase vice lowercase is confusing to me. Enough that I'm happy to leave it to the Editor to sort out. Be prepared for those questions.... Examples: Software, Recipient, Components, Payload. Let me know what the plan is. We are currently in the I-D submission blackout window, so when you are ready to push a new version, you will have to send it to me and I'll send it to the Secretariat for publication. [also, I leave on Wed, 16 July for Madrid, so it all gets more complicated from that day.] Deb On Tue, Jul 8, 2025 at 2:42 AM <internet-drafts@ietf.org> wrote: > Internet-Draft draft-ietf-suit-trust-domains-11.txt is now available. It > is a > work item of the Software Updates for Internet of Things (SUIT) WG of the > IETF. > > Title: Software Update for the Internet of Things (SUIT) Manifest > Extensions for Multiple Trust Domain > Authors: Brendan Moran > Ken Takayama > Name: draft-ietf-suit-trust-domains-11.txt > Pages: 38 > Dates: 2025-07-07 > > Abstract: > > A device has more than one trust domain when it enables delegation of > different rights to mutually distrusting entities for use for > different purposes or Components in the context of firmware or > software update. This specification describes extensions to the > Software Update for the Internet of Things (SUIT) Manifest format for > use in deployments with multiple trust domains. > > The IETF datatracker status page for this Internet-Draft is: > https://datatracker.ietf.org/doc/draft-ietf-suit-trust-domains/ > > There is also an HTMLized version available at: > https://datatracker.ietf.org/doc/html/draft-ietf-suit-trust-domains-11 > > A diff from the previous version is available at: > https://author-tools.ietf.org/iddiff?url2=draft-ietf-suit-trust-domains-11 > > Internet-Drafts are also available by rsync at: > rsync.ietf.org::internet-drafts > > > _______________________________________________ > Suit mailing list -- suit@ietf.org > To unsubscribe send an email to suit-leave@ietf.org >
- [Suit] I-D Action: draft-ietf-suit-trust-domains-… internet-drafts
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Deb Cooley
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Tschofenig, Hannes
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Deb Cooley
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Brendan Moran
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Deb Cooley
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Hannes Tschofenig
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Deb Cooley
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Brendan Moran
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Brendan Moran
- [Suit] Re: I-D Action: draft-ietf-suit-trust-doma… Brendan Moran