Hi all,
we have just submitted a first version of the coap_dtls profile for the
ACE framework. The protocol is straight-forward: It basically relies on
the access tokens that have been uploaded to the /authz-info endpoint,
independent whether RPK mode or PSK mode is used.
For PSK mode, the access token also can be transmitted in the
psk_identity field to save the extra POST message to /authz-info (but
retaining the same semantics).
There is also a git repository at [1] and an Editor's copy of the
current version at [2]. A big Thank You to Martin Thomson for the
excellent i-d-template [3]!
[1] https://github.com/obgm/ace-dtls-profile
[2] https://obgm.github.io/ace-dtls-profile/
[3] https://github.com/martinthomson/i-d-template
As always, comments are welcome.
Grüße
Olaf
--- Begin Message ---
A new version of I-D, draft-gerdes-ace-dtls-authorize-00.txt
has been successfully submitted by Olaf Bergmann and posted to the
IETF repository.
Name: draft-gerdes-ace-dtls-authorize
Revision: 00
Title: Datagram Transport Layer Security (DTLS) Profile for
Authentication and Authorization for Constrained Environments (ACE)
Document date: 2016-10-31
Group: Individual Submission
Pages: 17
URL:
https://www.ietf.org/internet-drafts/draft-gerdes-ace-dtls-authorize-00.txt
Status:
https://datatracker.ietf.org/doc/draft-gerdes-ace-dtls-authorize/
Htmlized: https://tools.ietf.org/html/draft-gerdes-ace-dtls-authorize-00
Abstract:
This specification defines a profile for delegating client
authentication and authorization in a constrained environment by
establishing a Datagram Transport Layer Security (DTLS) channel
between resource-constrained nodes. The protocol relies on DTLS for
communication security between entities in a constrained network. A
resource-constrained node can use this protocol to delegate
management of authorization information to a trusted host with less
severe limitations regarding processing power and memory.
Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.
The IETF Secretariat
--- End Message ---
_______________________________________________
Ace mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ace
