[Suit] Re: I-D Action: draft-ietf-suit-trust-domains-11.txt

[Brendan Moran <[e-mail]>]

FWIW, I have responses to all the remaining ballot positions with comments queued up to send as soon as we publish the next version that includes https://github.com/suit-wg/suit-multiple-trust-domains/pull/75

Brendan

From: Brendan Moran <[e-mail]>
Date: Monday, 21 July 2025 at 15:06
To: Brendan Moran <[e-mail]>, Deb Cooley <[e-mail]>
Cc: Tschofenig, Hannes <[e-mail]>, [e-mail] <[e-mail]>, Ken Takayama <[e-mail]>, [e-mail] <[e-mail]>, [e-mail] <[e-mail]>, Dave Thaler <[e-mail]>
Subject: [Suit] Re: I-D Action: draft-ietf-suit-trust-domains-11.txt
Hi Hannes,

Thank you for your latest set of changes. I think these look much better.

@Deb Cooley<mailto:[e-mail]> what do you think?

Brendan

From: Brendan Moran <[e-mail]>
Date: Monday, 21 July 2025 at 08:56
To: Deb Cooley <[e-mail]>
Cc: Tschofenig, Hannes <[e-mail]>, [e-mail] <[e-mail]>, Ken Takayama <[e-mail]>, [e-mail] <[e-mail]>, [e-mail] <[e-mail]>, Dave Thaler <[e-mail]>
Subject: [Suit] Re: I-D Action: draft-ietf-suit-trust-domains-11.txt
I have all the changes ready to go in a PR. We just need to decide
what to do about the introduction. I would welcome any feedback on
that.

On Sun, Jul 13, 2025 at 10:17 PM Deb Cooley <[e-mail]> wrote:
>
> Obviously this has already sat around for some time, a little longer won't hurt.  The publication window opens on 21 July.  If you get these issues resolved, and discuss Hannes' ideas about the intro, then you can nudge me (I'll be in meeting mode) and I'll approve the announcement.
>
> Deb
>
> On Sun, Jul 13, 2025 at 4:37 PM Brendan Moran <[e-mail]> wrote:
>>
>> Thank you for all the support. I’m afraid that I won’t be able to post updates before the 17th; I am away from my computer until then. I’m happy to address Gorry, Gunther, Paul and Roman’s concerns then.
>>
>> Hannes, if you were interested in helping some, that would be very much appreciated.
>>
>> Best Regards,
>> Brendan
>>
>> On Sun, 13 Jul 2025 at 19:01, Deb Cooley <[e-mail]> wrote:
>>>
>>> I'm all about 'getting it right'. vs 'doing it over'.  But aren't the dependencies a result of different trust domains? In other words, dependencies are signed by different authorities, which in my mind translates to different trust domains.
>>>
>>> I don't mind an addition to the introduction to stitch all these ideas together. We already had comments that showed some disconnects in how it all fits together.   But I'd be careful to touch this lightly, otherwise we will have to put it back through the IESG.
>>>
>>> Deb
>>>
>>> On Sun, Jul 13, 2025 at 10:15 AM Tschofenig, Hannes <[e-mail]> wrote:
>>>>
>>>> Hi Deb, Brendan, Ken,
>>>>
>>>>
>>>>
>>>> I have reviewed the document as well and I have a suggestion for improvement: I would recommend changing the title of the document to “Software Update for the Internet of Things (SUIT) Manifest Extensions for Dependency Handling”. The reason is that the entire document is about dependency management – not about trust domains.
>>>>
>>>>
>>>>
>>>> This also means that the introduction needs to be re-written. Currently the introduction does not match the content of the rest of the document.
>>>>
>>>>
>>>>
>>>> I am happy to write a proposal, if the group believes this is the right approach for the document.
>>>>
>>>>
>>>>
>>>> Ciao
>>>> Hannes
>>>>
>>>>
>>>>
>>>> PS: The examples in the appendix also need a description since otherwise nobody will understand what is going on.
>>>>
>>>>
>>>>
>>>> From: Deb Cooley <[e-mail]>
>>>> Sent: Saturday, July 12, 2025 7:46 PM
>>>> To: [e-mail]; Brendan Moran <[e-mail]>; Ken Takayama <[e-mail]>
>>>> Cc: [e-mail]; [e-mail]; Dave Thaler <[e-mail]>
>>>> Subject: [Suit] Re: I-D Action: draft-ietf-suit-trust-domains-11.txt
>>>>
>>>>
>>>>
>>>> This is soooo close.  Just a couple of things that need to be fixed.
>>>>
>>>>
>>>>
>>>> Gorry, Gunter, Paul and Roman all made comments on this draft, and while it appears that the authors have addressed most of their concerns, I don't see replies to their comments.  In some cases, you may just be explaining what something means, without a change to the draft.  For example, there are some specific technologies used as examples - Arm TrustZone and Intel's  SGX, which may have been confusing to some.
>>>>
>>>>
>>>>
>>>> (Gunter) Section 1, bullets:  There is a mix of first word uppercase letters, and first word lowercase letters.  Pick one.  If you choose uppercase letters, I suspect that a '.' at the end would be appropriate.
>>>>
>>>>
>>>>
>>>> (Gunter) Section 2:  Add Dependency Manifest and/or Dependent Manifest.
>>>>
>>>>
>>>>
>>>> Section 2, second bullet:  Nit:  Mani/Manifest?
>>>>
>>>>
>>>>
>>>> (Gunter with my spin) Section 3, last paragraph:  Your use of 'lockstep' appears to be different than what I think of (two processors move from instruction to instruction in 'lockstep').  Consider adding this to the definitions, and I believe the process is described in Section 5.3 (at least there is no occurrence of the word 'lockstep' in Section 5.4).
>>>>
>>>>
>>>>
>>>> (Gorry) Section 5.6, table 1:  This would be better with a caption.  Something like 'added or modified commands'.
>>>>
>>>>
>>>>
>>>> Section 10:  RFC 9124 should be Normative, no?
>>>>
>>>>
>>>>
>>>> In general, the use of uppercase vice lowercase is confusing to me.  Enough that I'm happy to leave it to the Editor to sort out.  Be prepared for those questions....  Examples:  Software, Recipient, Components, Payload.
>>>>
>>>>
>>>>
>>>> Let me know what the plan is.  We are currently in the I-D submission blackout window, so when you are ready to push a new version, you will have to send it to me and I'll send it to the Secretariat for publication.  [also, I leave on Wed, 16 July for Madrid, so it all gets more complicated from that day.]
>>>>
>>>>
>>>>
>>>> Deb
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> On Tue, Jul 8, 2025 at 2:42 AM <[e-mail]> wrote:
>>>>
>>>> Internet-Draft draft-ietf-suit-trust-domains-11.txt is now available. It is a
>>>> work item of the Software Updates for Internet of Things (SUIT) WG of the
>>>> IETF.
>>>>
>>>>    Title:   Software Update for the Internet of Things (SUIT) Manifest Extensions for Multiple Trust Domain
>>>>    Authors: Brendan Moran
>>>>             Ken Takayama
>>>>    Name:    draft-ietf-suit-trust-domains-11.txt
>>>>    Pages:   38
>>>>    Dates:   2025-07-07
>>>>
>>>> Abstract:
>>>>
>>>>    A device has more than one trust domain when it enables delegation of
>>>>    different rights to mutually distrusting entities for use for
>>>>    different purposes or Components in the context of firmware or
>>>>    software update.  This specification describes extensions to the
>>>>    Software Update for the Internet of Things (SUIT) Manifest format for
>>>>    use in deployments with multiple trust domains.
>>>>
>>>> The IETF datatracker status page for this Internet-Draft is:
>>>> https://datatracker.ietf.org/doc/draft-ietf-suit-trust-domains/
>>>>
>>>> There is also an HTMLized version available at:
>>>> https://datatracker.ietf.org/doc/html/draft-ietf-suit-trust-domains-11
>>>>
>>>> A diff from the previous version is available at:
>>>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-suit-trust-domains-11
>>>>
>>>> Internet-Drafts are also available by rsync at:
>>>> rsync.ietf.org::internet-drafts
>>>>
>>>>
>>>> _______________________________________________
>>>> Suit mailing list -- [e-mail]
>>>> To unsubscribe send an email to [e-mail]

_______________________________________________
Suit mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.