On Wednesday, October 5, 2016 5:34 PM, Brian E Carpenter wrote:

> I think people need to go and read draft-ietf-netconf-zerotouch
> and draft-ietf-anima-bootstrapping-keyinfra. 

Another useful draft is draft-winfaa-intarea-broadcast-consider. It was
precisely motivated by the use of unique identifiers in device specific
broadcast protocols. UUID kind of fall in that category.

> Then explain how we
> could ever bootstrap a trustworthy network without some sort of
> unique bitstring per device (in practice, an 802.1AR-2009 X.509
> initial device identifier installed by the manfacturer).
> 
> That doesn't mean it needs to be visible in clear after bootstrap.

It also does not mean that the identifiers should be sent in clear text...

-- Christian Huitema



_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass

Reply via email to