Re: [Drip] [Internet]Re: Comments on Re: I-D Action: draft-ietf-drip-arch-16.txt

Thanks Bob, see reply inline. 

On 10/31/21, 2:42 PM, "Tm-rid on behalf of Robert Moskowitz" <tm-rid-bounces@ietf.org on behalf of rgm@labs.htt-consult.com> wrote:

    Continuing with Sec 5.

    All is good IMO in sec 5.

    Sec 6.

    Para 2:

    Would a reader know what "offline or online" mean?  This is the first 
    and only use of both terms.  So we need to actually define them here.

    Also I do not think Broadcast RID needs to send messages that 
    authenticate all the way to the root.  This is rarely done in other 
    protocols.  Having something signed by the HDA and the HDA's HHIT,HI is 
    necessary, but sufficient along with access to a cache of the rest of 
    the hierarchy.  Similar to web browser CA root cache and DNS root cache.

    so

        An optimization of different DRIP Authentication Messages allows an
        Observer, without Internet connection (offline) or with (online), to be
        able to validate a UAS DRIP ID in real-
        time.  First is the sending of Broadcast Attestations (over
        DRIP Link Authentication Messages) containing the relevant registration
        of the UA's DRIP ID in the claimed Registry.  Next is
        sending DRIP Wrapper Authentication Messages that sign over
        both static (e.g. above registration) and dynamically changing data
        (such as UA location data).  Combining
        these two sets of information an Observer can piece together a chain
        of trust and real-time evidence to make their determination of the
        UAs claims.

Shuai/ Implemented as suggested . Please let me know if anyone has different option. 

    Sec 7

    In 1.3, we used: Surveillance Supplemental Data Service Provider

    We should follow through with that class of SDSP here or drop it in 1.3.

    And in 7.2 perhaps:

        A CS-RID SDSP should appear (i.e. present the same interface) to a
        Net-RID SP as a Net-RID DP.  A CS-RID SDSP aggregates and processes
        (e.g., estimates UA location using including using multilateration when
        possible) information collected by CS-RID Finders.

Shuai/ Implemented as suggested. However, we will update 1.3, so added a reminder in " Editor-note-8: double check above paragraph after editor-note-1 is resolved."

    Sec 8.

    One of the ways in which DRIP can enhance [F3411-19] with

Shuai/ Implemented as suggested

    ============

    And that completes my review.

    Bob

    -- 
    Tm-rid mailing list
    Tm-rid@ietf.org
    https://www.ietf.org/mailman/listinfo/tm-rid