IETF Logo Mail Archive

[T2TRG] Re: I-D Action: draft-irtf-t2trg-security-setup-iot-devices-06.txt

Ari Keränen <ari.keranen@ericsson.com> Wed, 28 January 2026 07:48 UTC

Return-Path: <ari.keranen@ericsson.com>
X-Original-To: t2trg@mail2.ietf.org
Delivered-To: t2trg@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 59013AE2AB72 for <t2trg@mail2.ietf.org>; Tue, 27 Jan 2026 23:48:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ericsson.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uRuKqDB02SRA for <t2trg@mail2.ietf.org>; Tue, 27 Jan 2026 23:48:17 -0800 (PST)
Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 12161AE2AB6B for <t2trg@irtf.org>; Tue, 27 Jan 2026 23:48:16 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=VciibSfXxRAX2gnv6eiFVZ2dk61HXAYtyA9Ev28slC0IV7vdkG05ZiPz+FXHz68/B44lJ4AatOTV/X15S0zHJerERdyBwEPynCineMoFpykK6+M2D75lYkKIXoiYkucUEEw3JatvJPQGfdGzzSyi1er/udVmmnxeYsuqsFI+s+/YXIDV6GGRjnOJPyrASL5mBhCxdbtS4f8/sB4D99xRbtuir54sphxyssDAGtGYsFDVPBjteW2NeHpoScbFp1AL0SornvzZuEs9OxA/SS0kzpQ5eN3KBDA2s/0/NZt/SWcvHxo8I7AaKeKxTd9EhYu2apHeJNJOTBfZZDtgrEAp6Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=G9roKhOlNM/oaWfRsqJ2W2VULPwwwW8b4LaMJpVj5Jk=; b=QW7vXt7bEIRl1LcqnSsjtXVGO/rSb1ENMd/gVl6PpF3HmBNw2g1fhaPGWcBp5uP4mESNQ4s6HoY9vHrSeztq7c4KqDJomEQzHhYRAnklwfnpKzeHBCB6Y3sore/jOkg9T9+PkUZ6qBX8s1bN+2PLSZ9HFtvJcV7DtiF4FGbSvRRhKcab9EiRn56ShwbxMsmugZ4D1BLIgs89jNEhaRurMFH7wo0xve3duRe/Y0XjHnRYffEPVdBUTSlMrvMGpGJOUQqhWR4WzJNa1l3ryJIstAE8/ihsc6fu0xNzO8CPld4JKBNpZdzGvCaOcuCRyMagtTVst/OOluBKvZSZrbl33A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=G9roKhOlNM/oaWfRsqJ2W2VULPwwwW8b4LaMJpVj5Jk=; b=kdDAR9+7BNitMKEzAUAGNMKAa1Bn2yUcG6GUhOEJmXoLO4do8cJqtuqgkJGTlkheWLGzTyAlTmPN3hv6Z/4SdFypuKJ2xle+gQ8GeSruWmEsGfDDdavJK7u186VNaizh6EITysDgT9woFeWn2iWYd2HJ6UDrLRl2y0wZ4sglM2VbbUyLdY76bWLyaFvAqNSTqU/somJJEgOf1cm98jhLiKus4xJ7cihdi27PRMbaErFrsRkfKCo9mxmvK76Mp+IoxwwD77Sd6ZNw5thEXu2BjPksh4iC1T4oST0mLRylDA2oHeb2u/XEwTGM9ON5813u/KdC0Y74weF5XDVmqTgFYw==
Received: from DB9PR07MB7994.eurprd07.prod.outlook.com (2603:10a6:10:2ac::10) by GVXPR07MB12139.eurprd07.prod.outlook.com (2603:10a6:150:31a::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9520.12; Wed, 28 Jan 2026 07:48:15 +0000
Received: from DB9PR07MB7994.eurprd07.prod.outlook.com ([fe80::a1dc:7cc3:fbc6:d828]) by DB9PR07MB7994.eurprd07.prod.outlook.com ([fe80::a1dc:7cc3:fbc6:d828%5]) with mapi id 15.20.9542.010; Wed, 28 Jan 2026 07:48:14 +0000
From: Ari Keränen <ari.keranen@ericsson.com>
To: Mohit Sethi <mohit@iki.fi>, "t2trg@irtf.org" <t2trg@irtf.org>
Thread-Topic: [T2TRG] Re: I-D Action: draft-irtf-t2trg-security-setup-iot-devices-06.txt
Thread-Index: AQHch8u0bKKu39UzuUCPtIRxiFE1WbVnQ/qC
Date: Wed, 28 Jan 2026 07:48:14 +0000
Message-ID: <DB9PR07MB79947BF7406D58ED8CAF35668591A@DB9PR07MB7994.eurprd07.prod.outlook.com>
References: <176866561323.315801.10789131021839469477@dt-datatracker-865585c994-4fgh4> <51bee3f4-4939-489e-8059-e2b5cd0dc482@iki.fi>
In-Reply-To: <51bee3f4-4939-489e-8059-e2b5cd0dc482@iki.fi>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DB9PR07MB7994:EE_|GVXPR07MB12139:EE_
x-ms-office365-filtering-correlation-id: 6ed74563-34cd-4956-7b50-08de5e4197f1
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|10070799003|7053199007|13003099007|38070700021|8096899003;
x-microsoft-antispam-message-info: oFXJlshyUk1G+HlmJ7xDOsuDIYAd+2MFwD3ULn8o6xIQE2pl+040bSusRmAZ1H9Ud5h6X9n2lt3m9LaR9w6/zleMj+OxGZP/dfJ+XRqK8sPjFVywAyqcxOvPkWqxFLFy9+w0ujq2/3b6g7tMPLyVrUw3MUIFG7zIpOC0VvcT+vMvlrV436pD+6SG6XnOyxBrvMJOO/FWIKtf0JXQP9yH88X/wUTOnCA5fdsPYstNcnpkEHVMjprtQoXw5xe9l5jFOiKQ31QfsGJQSE5BBZC/KabL41ePRymjf5PagErYBdQRM9Z4ISlRKCEMZ41WJZUlH1ffDDORxARQQUdAVPmazM7sNOJFTe3fUd/OEd2TaVwChZYlLPRCHTtdkRv2OMrk7/dMVqJfnJTpnuZ/sARyvRIeEhPQMz7D8ZoUR2shOAa8oalH/KMtXwTgTXGppfubiLO+9w7/TyWwzW7noZ9/mV7Rtr+x4o+TNSggNW7i6PNrvIDffV5tqaCfnvielBMqj313qZ7yv5kTvrUoYMjbfu14+JYgfb9lupoRFd0op1NSVp3bfVxmioz6n3rzEEb8zCxuDXy1jUvILfzlqmoejWwtP1nA9cqlM1EwBmwco5cMeVcFCnm00W7/ZeC5WWt/SOYsnI1KvgTzrA9wwIlB4CEALnTIdbS/AFkoe7OhbVpsgoxCxDgTMUiHHUE/TX9L4SnY73Nt1J+iZnrO5JmamnlAbHkcGRwD4Tn+rRnrPHhqqbH1Tl+VNxmTE2fRwssbKBeQ2Rs6fY6LpqhCv42hQ5sTe/fq2wlVc9U2IMph/nOtt1ivpFFF0lC5hkQTGdP0LVltiHtOBEUFhJCdL9ydRyG/WmL0PZaCdwCiqJhrGO/32xjq9aiL51reGdmWsZigBcuxSairRNM0nwTqv4jFV+t/HrdPyIkwbBMFJKvosVjAdpO36nQRRdOnvEc6SwZ/yNwF+1PrW5wl8xYHQyorFCRWirk6xxYpNdedQ9+4mXAI6HEbjV/F179S4INoJo/2MJNE+aELcV9ie5fUMJAXUKWwrlwemxHSAlJ5OAwHqfix9MhDvZQ/fVunddIuRf2Yo2/sEooqjI+MiGRR1iBzs+xprGbA7KfYohS42n5/oDZtSckD0W9kiOHhxt99PpkQWR6wIubWPJUZApja1iAC8mzyADJGjxniWLM4Lj7TyIDThQdo8GF323ZTvpoFdki8wRSKOvG3+RooJ4kd3ciZwQFa1PHgWfaJBG5AiPRJWhed707y3zQSW7XWeDn9yMAl5E443GX24cSlW/9CpAW4qbfV1CgWrRTK0Ba2dHBdcawrLBld+AqC1lXNGrbyI2Gx3jZ7HIOW715Lo0CA8PW+VphPXX4vCz7GCc0O/TtlV0nIBwbSSlTvvqDpFt40Y4HgCL99MUuFgG89Gc0g4BBPwIxPSjTcFu71E5glzhWW2s6ujiYGZ3+XZ7jNOzCjWZkthR96t7cIBs8PoLxWS8GZBc/Cu8yDgvvLUuPzjQfvIB8pxLsGpHuzwI2VsVZupVvCHHOSCRf/r6SU7GAfMeaxMVyAoN2yaZ80jqTiLLsEqN6WlSEvm13OCZWrXEF8mQXjp/7E5dFr6EslkPdM3pnQ3XsLFSb02j1KXgzw2pmL0bU=
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB9PR07MB7994.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(10070799003)(7053199007)(13003099007)(38070700021)(8096899003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: tFgAbhjJuKKxSoBOor4qPJNITu/FNcBJTnI=
Content-Type: multipart/alternative; boundary="_000_DB9PR07MB79947BF7406D58ED8CAF35668591ADB9PR07MB7994eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DB9PR07MB7994.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 6ed74563-34cd-4956-7b50-08de5e4197f1
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jan 2026 07:48:14.7838 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: GFby4FV7GoeGuPZXuupscc5p2hoYiOG+uqYhqn0NgYqADCqkQpMcY1RLHinVqPntBqWVpQJRFWIx0iMASva+qmWU553YOeqJ0n/ST+2mTqE=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR07MB12139
Message-ID-Hash: U2CDZK6L7EOKYKIVNHZK54Q4SBR4MZXI
X-Message-ID-Hash: U2CDZK6L7EOKYKIVNHZK54Q4SBR4MZXI
X-MailFrom: ari.keranen@ericsson.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-t2trg.irtf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [T2TRG] Re: I-D Action: draft-irtf-t2trg-security-setup-iot-devices-06.txt
List-Id: IRTF Thing-to-Thing Research Group <t2trg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/t2trg/9va_81D8Z652SuZe1wcvCI0M8tc>
List-Archive: <https://mailarchive.ietf.org/arch/browse/t2trg>
List-Help: <mailto:t2trg-request@irtf.org?subject=help>
List-Owner: <mailto:t2trg-owner@irtf.org>
List-Post: <mailto:t2trg@irtf.org>
List-Subscribe: <mailto:t2trg-join@irtf.org>
List-Unsubscribe: <mailto:t2trg-leave@irtf.org>

Thank you for the update, Mohit, and co-authors!

Great to see the draft getting mature towards publication. As you suggested, now would be a perfect time to get reviews from people familiar with the specific protocols.

Everyone, see the following sub-sections of the draft for your favorite technologies and please send your comments and questions to the list:


  *
2.1.  Bluetooth Mesh Provisioning
2.2.  Device Provisioning Protocol (DPP)
2.3.  Enrollment over Secure Transport (EST)
2.4.  Open Mobile Alliance (OMA) Lightweight Machine to Machine specification (LwM2M)
2.5.  Nimble out-of-band authentication for EAP (EAP-NOOB)
2.6.  Open Connectivity Foundation (OCF)
2.7.  Bootstrapping Remote Secure Key Infrastructures (BRSKI)
2.8.  Secure Zero Touch Provisioning (SZTP)
2.9.  FIDO Device Onboard (FDO)
2.10. Thread


Thanks,
Ari

From: Mohit Sethi <mohit@iki.fi>
Date: Saturday, 17. January 2026 at 18.09
To: t2trg@irtf.org <t2trg@irtf.org>
Subject: [T2TRG] Re: I-D Action: draft-irtf-t2trg-security-setup-iot-devices-06.txt


Dear T2TRG,

This a major update that completes all the protocol descriptions and contains a comparative analysis.

If you work with, or use one of the protocols covered in the section 2 of the draft, please have a look and provide comments: https://datatracker.ietf.org/doc/html/draft-irtf-t2trg-security-setup-iot-devices-06#name-table-of-contents.

If you are familiar with several of the protocols covered, please also provide feedback on the section that compares them: https://datatracker.ietf.org/doc/html/draft-irtf-t2trg-security-setup-iot-devices-06#name-table-of-contents.

--Mohit

On 1/17/26 18:00, internet-drafts@ietf.org<mailto:internet-drafts@ietf.org> wrote:

Internet-Draft draft-irtf-t2trg-security-setup-iot-devices-06.txt is now
available. It is a work item of the Thing-to-Thing (T2TRG) RG of the IRTF.

   Title:   Terminology and processes for initial security setup of IoT devices
   Authors: Mohit Sethi
            Behcet Sarikaya
            Dan Garcia-Carrillo
   Name:    draft-irtf-t2trg-security-setup-iot-devices-06.txt
   Pages:   49
   Dates:   2026-01-17

Abstract:

   This document provides an overview of terms that are commonly used
   when discussing the initial security setup of Internet of Things
   (IoT) devices.  This document also presents a brief but illustrative
   survey of protocols and standards available for initial security
   setup of IoT devices.  For each protocol, we identify the terminology
   used, the entities involved, the initial assumptions, the processes
   necessary for completion, and the knowledge imparted to the IoT
   devices after the setup is complete.

v2.46.0 | Report a Bug | By Email | System Status