Re: [Suit] SUIT rechartering: proposed text

Dave Thaler <dthaler@microsoft.com> Fri, 23 July 2021 18:03 UTC

Return-Path: <dthaler@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D877F3A10BE for <suit@ietfa.amsl.com>; Fri, 23 Jul 2021 11:03:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.552
X-Spam-Level:
X-Spam-Status: No, score=-2.552 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.452, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2_Zcvrp1yH90 for <suit@ietfa.amsl.com>; Fri, 23 Jul 2021 11:03:12 -0700 (PDT)
Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2133.outbound.protection.outlook.com [40.107.236.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABF2C3A10C0 for <suit@ietf.org>; Fri, 23 Jul 2021 11:03:12 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d9vAFu363w1GRwjmRMUAqAVBJCP6VjwdiKLNztayM3ufi2tRJO86ErvNHaIeNl15l5/5r6woLjfZmvt+8LnEF0sAwI/mgl8p6NqhpVg4Dsje+RRXtiD17d+hbxBey5uRwRHo6ORNN5VJ6WFceYJeKDaW4x8aQ2mq404BTYsq1w+wu935EWRBwIhEORiTF0yw4nuy6DLkrcOITNLS1LBQUhU5FnKdJ4AhxBTOTYLcgv/Rhu+yqv0ntFuKWv1xNllh5vaj7YwhsC8a4YQT3odZTzVDEQS7lnbEkGfbIC2Cjm5xe8cLuJ6C2wujChQxSG8kgEMt/NN9nBxm/4/cZF3g1Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HNFOtBMLDZs+1ZgGHyk6e6lHecm39dFcj5UXDTfoUBE=; b=jXnoqMnUhmPNOM9UiY+pFzlgE0JE7m+28MHRWGbn6+M/YoFYO7ceAQ0OXfuAfq7n+uIH1apMb/K9jtQEAtCJ08UVM/bije+lz27g48ww3lkmXwiy3oi+oREUUuX56XLLABrq3afCX7WtouAQNFVvUFF+xj07W6YgcfWbV/zYwP9hczGhW1s5p4mQrgKPf8RwnJB/N/iUrp+ar/xIxcGlL49eVYicYOKpliCfZ6o3K9AwX+4YqJXSwe4YlCf3MUXWaRgbv4RVtA373aE4BHiW+rxlW+UblMepIk5oTK/tXl4NZddB6Wr9Cv7q4DqR4Up+gtwdatk9EnhNi23DaRk0fQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HNFOtBMLDZs+1ZgGHyk6e6lHecm39dFcj5UXDTfoUBE=; b=hIuatUTMy7Fc9L7dX7bkVk/S0pML1KgIK+DJnsrjym7BnxcGp6Z96HOUS01zxnV+Nth1mIUpOyscQ2deVsPtMp5MlfJPjfheASGGhSmAMeXN7Aoj2fyeh4squqjbSW3yoXDmE7DtNbxFGZa+bix0zGw0Ftv1CLrt33d7uJr9tz8=
Received: from SN6PR2101MB0943.namprd21.prod.outlook.com (2603:10b6:805:4::20) by SN6PR2101MB1712.namprd21.prod.outlook.com (2603:10b6:805:54::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4373.2; Fri, 23 Jul 2021 18:03:04 +0000
Received: from SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::d42:87d8:46b3:2cbc]) by SN6PR2101MB0943.namprd21.prod.outlook.com ([fe80::d42:87d8:46b3:2cbc%7]) with mapi id 15.20.4373.002; Fri, 23 Jul 2021 18:02:58 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: Russ Housley <housley@vigilsec.com>
CC: suit <suit@ietf.org>
Thread-Topic: [Suit] SUIT rechartering: proposed text
Thread-Index: AQHXBIFCYdPbq2i4MU2UU0mwBdcWBqpbCE+AgABX+ACA5UScAIAAD0qAgABJdoCABbIAYIAGOtmAgATJPsCAABq0AIAAAB+w
Date: Fri, 23 Jul 2021 18:02:58 +0000
Message-ID: <SN6PR2101MB0943498331533D38580A741CA3E59@SN6PR2101MB0943.namprd21.prod.outlook.com>
References: <66D84CE5-22E6-44F0-8239-8A5832326219@arm.com> <3E7D5E5B-03EE-4EDD-A951-FB119F72DDE8@arm.com> <16339.1613515194@localhost> <E4B87013-1498-463F-98C0-5FF13344C3EA@arm.com> <6FC3F38A-B067-4180-ACD9-A121162EA459@vigilsec.com> <26718.1626138395@localhost> <MN2PR09MB4841BA0A0CC978E70A09A509F0119@MN2PR09MB4841.namprd09.prod.outlook.com> <67F117E7-28F2-45F3-BC4C-AC8116BCB69F@vigilsec.com> <SN6PR2101MB0943178F1E627E78A1343AE8A3E59@SN6PR2101MB0943.namprd21.prod.outlook.com> <50B65F80-808D-4591-9D4D-2346796DA204@vigilsec.com>
In-Reply-To: <50B65F80-808D-4591-9D4D-2346796DA204@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=96b90988-ded9-42cb-89c9-8d58ee196b1c; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2021-07-23T17:54:28Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=microsoft.com;
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 0d2ef641-14f8-4612-7d5b-08d94e041ad6
x-ms-traffictypediagnostic: SN6PR2101MB1712:
x-microsoft-antispam-prvs: <SN6PR2101MB171255184C223B80EE9FBC4EA3E59@SN6PR2101MB1712.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:2887;
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SN6PR2101MB0943.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(33656002)(52536014)(76116006)(66446008)(64756008)(55016002)(186003)(66556008)(8990500004)(8936002)(38100700002)(122000001)(71200400001)(508600001)(26005)(316002)(66476007)(9686003)(10290500003)(5660300002)(82950400001)(66946007)(8676002)(82960400001)(86362001)(6506007)(4326008)(53546011)(83380400001)(4744005)(7696005)(6916009)(2906002)(38070700004); DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_SN6PR2101MB0943498331533D38580A741CA3E59SN6PR2101MB0943_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SN6PR2101MB0943.namprd21.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 0d2ef641-14f8-4612-7d5b-08d94e041ad6
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2021 18:02:58.4467 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ElbKj1y80dfWzbxtnb4GGW7XuArpaV/+I+29dCZR7qvVn46e7loktOj3avLaTEs8Y22sAmV2n6Cc96t7lUd2UIHGS48esabnw2rKKNAvvIY=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR2101MB1712
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/x9MpHdxRWnDvkr-t2nI3hfEXsAc>
Subject: Re: [Suit] SUIT rechartering: proposed text
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Jul 2021 18:03:18 -0000

Agree with those fixes.
Thanks Russ.

From: Russ Housley <housley@vigilsec.com>
Sent: Friday, July 23, 2021 10:54 AM
To: Dave Thaler <dthaler@microsoft.com>
Cc: suit <suit@ietf.org>
Subject: Re: [Suit] SUIT rechartering: proposed text

Dave:


> …
> The SUIT WG document deliverables are:
> * A SUIT manifest format specification using CBOR.
> * A firmware encryption specification for use with SUIT manifests.
> * A secure for IoT device to reporting on firmware update status.

I can’t parse the above bullet, maybe a word missing right before “for IoT device”?

Yep, that is messed up.  How about:

   * A secure method for an IoT device to report on firmware update status.


 > * A set of claims related for attesting to firmware update status.

Remove “related”.

Yep.

Russ