Re: [Drip] Update on RATS in DIME

"Card, Stu" <stu.card@axenterprize.com> Fri, 05 August 2022 12:01 UTC

Return-Path: <stu.card@axenterprize.com>
X-Original-To: tm-rid@ietfa.amsl.com
Delivered-To: tm-rid@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34FE1C13CCDE for <tm-rid@ietfa.amsl.com>; Fri, 5 Aug 2022 05:01:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=axenterprize.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJ9dUOpZPgp2 for <tm-rid@ietfa.amsl.com>; Fri, 5 Aug 2022 05:01:13 -0700 (PDT)
Received: from mail-ej1-x62d.google.com (mail-ej1-x62d.google.com [IPv6:2a00:1450:4864:20::62d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19647C15C53B for <tm-rid@ietf.org>; Fri, 5 Aug 2022 05:01:12 -0700 (PDT)
Received: by mail-ej1-x62d.google.com with SMTP id dc19so4574202ejb.12 for <tm-rid@ietf.org>; Fri, 05 Aug 2022 05:01:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=axenterprize.com; s=google; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc; bh=skFfyvTSt0UkIA95UTrDvqRa8kWCzvTkRVWo21FZrcg=; b=UzhXLPJI5ViEasgF/w86gWaZt1+Dj6h0spPDg/qeMEDdkWmkn4P9jPkDDt5AAEwTDP kPfwNlV9fnrIJRwDVvQyV3g4Al97qBCloVYSr0Ee90fwkD+BHTtZOCHCJazxLa8x8nR8 lzw2bo4HuWQoYTgXJUIlSfx85fqxnER7Aj1SA=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc; bh=skFfyvTSt0UkIA95UTrDvqRa8kWCzvTkRVWo21FZrcg=; b=PAJhZf5290liXlv8jka3ziPTTp2HVTH3GF1ASqCe29nrZonjLjJaVCthVFqX8yuvcI 9XkZnu/LHXXJj23tXeFX+7AdqZNnJJxDi20O4LLifM574DNZYHa3pgTcRt3MfEOIUXhn ezWu6t4t1tgLaIM5otPFOt9x/jRFPp4/1mPr0cLSIDQ1wD30HofBu/5uwb9QY4vWbAOr iS8QYorcKWwfchqckKXoemeUWsup1PawfJfDuL5EekgRvyzhyPF4+r7r3qZr5cs51lNk vix2NRFPY7sH4QyxElKltcfvF7SJg3QqMpR9At57ma+lZhOEWU9cx441DzFhsIJ7MsMA IH+g==
X-Gm-Message-State: ACgBeo1QjCB/OcCEAC54E/7yPAjeS7Od2d8hUCoA4a2bAsTvzdQo424Y u8PlZXhp+dleF5EIHVmaDqZXKc2Y8gGcnA/mtdU/4EGRTG0=
X-Google-Smtp-Source: AA6agR4FQTQU3/uDbJSyYM82vh6+Iq9jwDPheldoHYDW7PNYYkOJiU2eDHBJED0tQmYIAy3e+oQsWTsdLWCuJ9R7rWA=
X-Received: by 2002:a17:907:7637:b0:730:6a9b:148f with SMTP id jy23-20020a170907763700b007306a9b148fmr5286623ejc.273.1659700871175; Fri, 05 Aug 2022 05:01:11 -0700 (PDT)
MIME-Version: 1.0
References: <SN6PR13MB2446B4AED170F64A6110E77D889E9@SN6PR13MB2446.namprd13.prod.outlook.com>
In-Reply-To: <SN6PR13MB2446B4AED170F64A6110E77D889E9@SN6PR13MB2446.namprd13.prod.outlook.com>
From: "Card, Stu" <stu.card@axenterprize.com>
Date: Fri, 05 Aug 2022 08:00:59 -0400
Message-ID: <CAKM0pYM2GOoBi2A5u=bFK2SoJA3P9XXoE844bjx-EmD1L9y40w@mail.gmail.com>
To: tm-rid@ietf.org
Content-Type: multipart/alternative; boundary="000000000000dc4d0105e57d3858"
Archived-At: <https://mailarchive.ietf.org/arch/msg/tm-rid/PZyO40jRjH6UKzBPZfYWs_JL0IA>
Subject: Re: [Drip] Update on RATS in DIME
X-BeenThere: tm-rid@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Drone Remote Identification Protocol <tm-rid.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tm-rid>, <mailto:tm-rid-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tm-rid/>
List-Post: <mailto:tm-rid@ietf.org>
List-Help: <mailto:tm-rid-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tm-rid>, <mailto:tm-rid-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Aug 2022 12:01:17 -0000

I think the Background-Check model supports initially _registering_ a DRIP
Entity Tag (DET) / Hierarchical Host Entity Tag (HHIT), where the DRIP
Entity Management Agent (DIME) may need to rely on some Evidence /
Endorsements by other entities.

I think the Passport model supports an entity (typically a UA) later
_using_ a DET/HHIT along with Endorsements signed by the DIME.

OTOH it has been almost 2 weeks since the hackathon and my recollection of
Dave Thalers flip charts mapping DRIP entities & interactions onto RATS may
be wrong.

Generally I believe normalizing DRIP terminology at least and processes at
best to leverage RATS will help our smaller WG take advantage of work by a
larger WG that addresses some common needs and has undergone more extensive
review.

Thanks Adam!

On Fri, Aug 5, 2022, 00:36 Adam Wiethuechter <
adam.wiethuechter@axenterprize.com> wrote:

> This is something I think I forgot to mention during the DRIP WG meeting
> at 114 and figured get it down in writing and maybe reignite some
> discussion here on the list.
>
> For those out of the loop seeing we are removing the term "registrar" and
> replacing it with DRIP Identity Management Entity (DIME). This is a
> high-level entity name in the registration process that has multiple
> logical components.
>
> During the 114 Hackathon we had a very good discussion with Dave Thaler
> and Henk Birkholz about some high-level usage of RATS in the DRIP
> registration process which was being further nailed down.
>
> Dave gave a very quick but good explanation of RATS, the entities,
> artifacts and two primary models: Passport and Background-Check.
>
> All at the table (myself, Dave, Henk, Tim Mesker, Frank Cona, Michael
> Palage, and Stu Card) agreed that RATS could easily fit into the
> architecture but required that the terminology we are using in DRIP may
> need to be realigned for better understanding. We agreed that the
> Background-Check model was more in line with the current registration
> process and directly aligned roles drafted to easily take on RATS roles.
>
> With arch-26 the original terms of Assertion and Attestation were reformed
> to align with RATS and are now Evidence and Endorsement, respectively.
> Both, along with Claims, use RATS Arch. definitions as their foundation.
>
> With the proposed DRIP registration draft rework (a dry run incoming in
> the next week) a supplemental document to define how RATS fit within the
> DIME process could easily be made. Effectively in a RATS model of a DIME
> the existing Attestations we are using during the process (now called
> Endorsements) would be sent in the messages for RATS interactions and
> processed and the appropriate logical entity in the path.
>
> Is there any strong opposition to this way of doing things if RATS were a
> supplemental way of performing registration?
>
> --------
> 73,
> Adam T. Wiethuechter
> Software Engineer; AX Enterprize, LLC
> --
> Tm-rid mailing list
> Tm-rid@ietf.org
> https://www.ietf.org/mailman/listinfo/tm-rid
>