Thanks George, yes, this is the "Security Profiles" Resource, the CR for which 
was approved just last Thursday in Prague.

The Resource is used by Onboarding Tools (OBTs) to determine the robustness 
level to which a device conforms, and isn't important to non-OBT authors 
(except as you noted insofar as it interferes with CTT testing).  I'd also 
suggest adding a R-only ACE for "anon-clear" for this Resource just to future 
proof your app, but that can also wait if you prefer.

The schema is still a work in progress and is being driven by Ned Smith (CR 
author) with help from Mitch Kettrick and a few others... I'm not sure what the 
ETA is for it to be pushed to the schema github repo.

Thanks,
Nathan

From: iotivity-dev-boun...@lists.iotivity.org 
[mailto:iotivity-dev-boun...@lists.iotivity.org] On Behalf Of Nash, George
Sent: Wednesday, March 28, 2018 3:46 PM
To: iotivity-dev <iotivity-dev@lists.iotivity.org>
Subject: [dev] Asking for information about the new oic.r.sp resource

I just pulled down the latest code from master branch and ran it against the 
CTT tool.

To my surprise we have a new resource `oic.r.sp`. The resource exists on path 
`/oic/sec/sp`. Since this is under sec I assume it has something to do with 
security. I know nothing about this new resource and was wondering if any other 
developers can point me in the right direction to find out more information.

At this point the CTT cannot find the schema for oic.r.sp which means it has 
not been checked into the repositories that the CTT tool uses for finding 
resources. This must be a resource for the 1.4 "Bangkok" release.

Looking through the log it was added with this commit.



SHA-1: faba61555c2bb2bde8db2859bb46c3643fec43e0

* Security Profile Resource Implementation

Change-Id: I6aab60b562272f0c4f34233d89c2b8884677c42a
Signed-off-by: Steven Saunders 
<s.saunders-contrac...@cablelabs.com<mailto:s.saunders-contrac...@cablelabs.com>>

I know what code was added but I don't see a reference to a jira ticket or a CR 
so I am left wondering where to find information about the `security profile 
resource`.

Can anyone point me to the documentation?

Should I post this question to the security wg?

Thanks

George Nash
_______________________________________________
iotivity-dev mailing list
iotivity-dev@lists.iotivity.org
https://lists.iotivity.org/mailman/listinfo/iotivity-dev

Reply via email to