On 11/05/2017 09:18, Martin Thomson wrote:
> On 11 May 2017 at 05:25, Michael Richardson <[email protected]> wrote:
>> GRASP does not stand alone.
>
>
> I have to assess the document on its own merits. As already
> established, there are no normative dependencies on any sort of key
> management.
>
> That this work has been done suggests that perhaps a small change to
> the structure of this and other documents could be made to rectify the
> problem.
The ACP will now be a normative reference for GRASP. It's the ACP whose
trust model depends on the security bootstrap, which will therefore need
to be a normative reference for the ACP.
How trust is established when there is no ACP is explicitly out of scope,
see section 3.5.2.1.
Brian
_______________________________________________
Anima mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/anima
