Re: [Ace] bringing draft-selander-ace-ake-authz to ACE?

2020-09-09 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Michael Richardson Sent: Wednesday, September 9, 2020 8:32 AM To: ace@ietf.org Subject: Re: [Ace] bringing draft-selander-ace-ake-authz to ACE? Göran Selander wrote: > We have been working on lightweight procedures for an IoT device to

Re: [Ace] draft-ietf-ace-oauth-authz-35 - unauthorized AS address, DoS, and privacy

2020-09-09 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Stefanie Gerdes Sent: Wednesday, September 9, 2020 4:12 AM To: ace@ietf.org Subject: Re: [Ace] draft-ietf-ace-oauth-authz-35 - unauthorized AS address, DoS, and privacy Hi John, On 09/09/2020 11:36 AM, John Mattsson wrote: >>> As currently

Re: [Ace] AS discovery in draft-ietf-ace-oauth-authz-35

2020-09-08 Thread Jim Schaad
In any event, if the AS is not one that the client believes that it has some type of security context to, then it does not seem to be a huge issue. If C does not trust AS, then it should not be talking to it however it makes that decision. We currently do not support the four corner model in the

Re: [Ace] Assignment of OSCORE Sender and Recipient IDS - was RE: Review of draft-ietf-ace-oscore-profile

2020-09-08 Thread Jim Schaad
Hey John, comments in line commented with JLS2 -Original Message- From: John Mattsson Sent: Tuesday, September 8, 2020 12:34 AM To: Jim Schaad ; ace@ietf.org Subject: Re: Assignment of OSCORE Sender and Recipient IDS - was RE: [Ace] Review of draft-ietf-ace-oscore-profile Hi Jim, I

Re: [Ace] Review of draft-ietf-ace-oscore-profile

2020-09-08 Thread Jim Schaad
John, I am wondering if this is really the document that should be dealing with this collision problem. A number of the collisions that might occur are going to be out of the ACE scope and a more general discussion of the problem should probably occur in a BIS version of the CoRE OSCORE

[Ace] Assignment of OSCORE Sender and Recipient IDS - was RE: Review of draft-ietf-ace-oscore-profile

2020-09-07 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of John Mattsson Sent: Saturday, September 5, 2020 5:51 AM To: ace@ietf.org Subject: [Ace] Review of draft-ietf-ace-oscore-profile Major comment --- - Asignment of OSCORE Sender and Recipient IDs I think the specified mechanism

[Ace] Agenda for next monday

2020-09-01 Thread Jim Schaad
The chairs need to start building the agenda for next Monday. If you want to be on it then you need to let us know. We are more interested in seeing items which need to have decisions made than summaries of what has been done. Topic Presenter Expected Time Jim

Re: [Ace] OSCORE Profile IANA questions

2020-08-31 Thread Jim Schaad
-Original Message- From: Francesca Palombini Sent: Monday, August 31, 2020 5:53 AM To: Ace Wg Cc: ace-cha...@ietf.org Subject: OSCORE Profile IANA questions Hi all, I have two quick questions concerning IANA actions to be done for the OSCORE profile: 1) The framework (-params)

Re: [Ace] [COSE] Gap in registration of application/cwt?

2020-08-27 Thread Jim Schaad
From: Laurence Lundblade Sent: Thursday, August 27, 2020 1:06 PM To: Jim Schaad Cc: Ace Wg ; cose Subject: Re: [Ace] [COSE] Gap in registration of application/cwt? In a CBOR thread it became clear (to me anyway) that in the context of CBOR a “tag" is not a prefix, badge, ident

Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-06

2020-08-17 Thread Jim Schaad
From: Cigdem Sengul Sent: Monday, August 17, 2020 2:25 PM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-06 Hello Jim, I understand that it's an optimization to improve message delay. I wonder also

Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-06

2020-08-17 Thread Jim Schaad
From: Cigdem Sengul Sent: Monday, August 17, 2020 10:45 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-06 I've got that from MQTT v5 spec: If a Client sets an Authentication Method

Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-06

2020-08-17 Thread Jim Schaad
From: Cigdem Sengul Sent: Monday, August 17, 2020 8:50 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-06 Hello Jim, Responses inside. On Sat, Aug 15, 2020 at 10:50 PM Jim Schaad mailto:i

[Ace] Review of draft-ietf-ace-mqtt-tls-profile-06

2020-08-15 Thread Jim Schaad
Section 2.2.3 - /Clean Start to 0/Clean Start to 0, specify the previous session number/ - I think it should be stated that the session number is provided, which is what the state is associated with. Section 2.2.4 - Last sentence. There is a difference between the connect and re-auth flows in

Re: [Ace] [COSE] Gap in registration of application/cwt?

2020-08-15 Thread Jim Schaad
From: Laurence Lundblade Sent: Saturday, August 15, 2020 10:58 AM To: Jim Schaad Cc: cose ; Ace Wg Subject: Re: [Ace] [COSE] Gap in registration of application/cwt? On Aug 14, 2020, at 3:35 PM, Jim Schaad mailto:i...@augustcellars.com> > wrote: From: La

Re: [Ace] [COSE] Gap in registration of application/cwt?

2020-08-14 Thread Jim Schaad
From: Laurence Lundblade Sent: Friday, August 14, 2020 1:59 PM To: Jim Schaad Cc: Ace Wg ; cose Subject: Re: [COSE] Gap in registration of application/cwt? Here’s a series of scenarios that I think are legal CWT. These are allowed by RFC 8392, right? 1) Explicitly tagged

Re: [Ace] [COSE] Gap in registration of application/cwt?

2020-08-10 Thread Jim Schaad
From: COSE On Behalf Of Laurence Lundblade Sent: Monday, August 10, 2020 1:25 PM To: Ace Wg ; cose Subject: [COSE] Gap in registration of application/cwt? It doesn’t seem clear what the CBOR tagging requirements are when application/cwt is used to indicate a message is a CWT. This

Re: [Ace] IETF 108 tentative agenda and presentations (Daniel Migault)

2020-07-24 Thread Jim Schaad
> -Original Message- > From: Ace On Behalf Of Panos Kampanakis > (pkampana) > Sent: Friday, July 24, 2020 7:05 AM > To: Brockhaus, Hendrik ; Benjamin Kaduk > ; Michael Richardson > Cc: Mohit Sahni ; steffen.fr...@siemens.com; > ace@ietf.org > Subject: Re: [Ace] IETF 108 tentative

Re: [Ace] Review of ietf-ace-key-groupcomm-07

2020-07-23 Thread Jim Schaad
From: Francesca Palombini Sent: Thursday, July 23, 2020 4:59 AM To: Jim Schaad ; draft-ietf-ace-key-groupc...@ietf.org Cc: Ace@ietf.org Subject: RE: Review of ietf-ace-key-groupcomm-07 Hi Jim, Thanks for your reply! Comments inline. Francesca On 16 July 2020 at 23:01:47

Re: [Ace] Gen-ART Last Call review of draft-ietf-ace-dtls-authorize-12

2020-07-19 Thread Jim Schaad
> -Original Message- > From: Paul Kyzivat > Sent: Sunday, July 19, 2020 1:24 PM > To: draft-ietf-ace-dtls-authorize@ietf.org > Cc: General Area Review Team > Subject: Gen-ART Last Call review of draft-ietf-ace-dtls-authorize-12 > > I am the assigned Gen-ART reviewer for this

Re: [Ace] Review of ietf-ace-key-groupcomm-07

2020-07-16 Thread Jim Schaad
> -Original Message- > From: Francesca Palombini > Sent: Tuesday, July 14, 2020 2:25 PM > To: Jim Schaad ; draft-ietf-ace-key- > groupc...@ietf.org > Cc: ace@ietf.org > Subject: Re: Review of ietf-ace-key-groupcomm-07 > > Hi Jim, > > Thank you so much

[Ace] Working Group Adoption Call for draft-bormann-core-ace-aif

2020-07-15 Thread Jim Schaad
I had been holding off doing an adoption call waiting for a formal request to adopt it. However, given that this is now a dependency for three different WG documents I think we need to do this now. Adoption call for https://datatracker.ietf.org/doc/draft-bormann-core-ace-aif/ This document

Re: [Ace] 4.01 Get A Token From There, discovery-/form-driven applications and tokens opaque to the client

2020-07-14 Thread Jim Schaad
> -Original Message- > From: Ace On Behalf Of Christian Amsüss > Sent: Monday, July 13, 2020 8:12 AM > To: ace@ietf.org > Subject: [Ace] 4.01 Get A Token From There, discovery-/form-driven > applications and tokens opaque to the client > > Hello ACE, > > piecing together parts of the

[Ace] Agenda for IETF 108

2020-07-13 Thread Jim Schaad
We are collecting agenda items for IETF 108. We have a 100 minute slot at the meeting and I am sure that it will be overflowing. If you want to be on the agenda please let the chairs know. Please include the following data in your agenda request: 1. The document(s) that the presentation

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-07-01 Thread Jim Schaad
> -Original Message- > From: Olaf Bergmann > Sent: Wednesday, July 1, 2020 1:25 AM > To: Jim Schaad > Cc: 'Benjamin Kaduk' ; 'Carsten Bormann' ; > ace@ietf.org; draft-ietf-ace-dtls-authorize@ietf.org > Subject: Re: [Ace] AD review of draft-ietf-ace-dtls-aut

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-06-30 Thread Jim Schaad
> -Original Message- > From: Benjamin Kaduk > Sent: Tuesday, June 30, 2020 9:25 AM > To: Carsten Bormann > Cc: Olaf Bergmann ; draft-ietf-ace-dtls- > authorize@ietf.org; ace@ietf.org > Subject: Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09 > > On Tue, Jun 30, 2020 at

Re: [Ace] Extended REST model comment

2020-06-30 Thread Jim Schaad
> -Original Message- > From: Carsten Bormann > Sent: Tuesday, June 30, 2020 8:35 AM > To: Jim Schaad > Cc: draft-bormann-core-ace-...@ietf.org; ace@ietf.org > Subject: Re: [Ace] Extended REST model comment > > On 2020-06-30, at 16:43, Jim Schaad wrote: > &

[Ace] Extended REST model comment

2020-06-30 Thread Jim Schaad
In trying to formalize a policy for the RD testing, I ended up with something that I think needs to be noted in this section. There is a difference between the following statements: Access is granted to resources created by the client. Access is granted to resources that could have been created

[Ace] Review of ietf-ace-key-groupcomm-07

2020-06-25 Thread Jim Schaad
* Section 1 para 1 - I have a vague memory of deciding that we were going to become CBOR only with this document per the argument from Carsten. I did not find this in the minutes so this could easily be some other document that I am thinking of. * Section 2 - I have a problem with Figure 1 in

[Ace] Review of draft-bormann-core-ace-aif-08

2020-06-23 Thread Jim Schaad
This is a clean review so the last one most likely still applies. * From my review of the group comm document. There needs to be an easy way to talk about a single entry in the array of all permissions. Some times you only want to ask for one thing and not deal with permissions for any other

Re: [Ace] AIF as discussed today (Re: I-D Action: draft-bormann-core-ace-aif-08.txt)

2020-06-23 Thread Jim Schaad
> -Original Message- > From: Ace On Behalf Of Francesca Palombini > Sent: Tuesday, June 23, 2020 6:45 AM > To: Carsten Bormann ; Ace Wg > Cc: Marco Tiloca > Subject: Re: [Ace] AIF as discussed today (Re: I-D Action: draft-bormann-core- > ace-aif-08.txt) > > Hi Carsten, > > Thanks

Re: [Ace] IANA considerations for authz-info RT

2020-06-22 Thread Jim Schaad
That corresponds to what I expected to see. > -Original Message- > From: Ace On Behalf Of Carsten Bormann > Sent: Monday, June 22, 2020 8:56 AM > To: ace@ietf.org > Subject: [Ace] IANA considerations for authz-info RT > > Marco and I still have to do the bike shedding on the actual name

[Ace] Minutes Posted

2020-06-22 Thread Jim Schaad
I have posted the minutes for the meeting today. If you want to make any change let me know. Jim ___ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace

[Ace] AIF followup comment

2020-06-22 Thread Jim Schaad
Francesca, Cigdem, One of the things that you might want to consider as part of you problem with adapting to AIF is that the profile may want to re-define the bit string so that instead of using the CoAP request codes, you use your set of options allowing for a tighter encoding. Jim

[Ace] FW: Review draft-ietf-ace-mqtt-tls-profile-05

2020-06-08 Thread Jim Schaad
Let's see if I can get the mailing list right this time -Original Message- From: Jim Schaad Sent: Monday, June 8, 2020 3:02 PM To: 'draft-ietf-ace-mqtt-tls-prof...@ietf.org' Cc: 'c...@ietf.org' Subject: Review draft-ietf-ace-mqtt-tls-profile-05 * Style Issue. "Abbreviations s

[Ace] Review draft-tiloca-ace-oscore-gm-admin-01

2020-06-07 Thread Jim Schaad
* Does 'joining_path' contain the path or the full URI to the joining resource. Is it possible for the Group Manager Administration to be on a different server (or via a different address) from the Group Manager itself? Path tends to me to say only path. * Section 2.3.2.1 - I think it makes more

Re: [Ace] "default value" for authz-info endpoint

2020-06-01 Thread Jim Schaad
We should make sure to keep draft-tiloca-core-oscore-directory in mind for this. It has a relation link defined for the Authorization server. Jim -Original Message- From: Ace On Behalf Of Carsten Bormann Sent: Monday, June 1, 2020 7:52 AM To: Seitz Ludwig Cc: Benjamin Kaduk ;

[Ace] FW: Webex meeting invitation: ACE interim 07

2020-05-27 Thread Jim Schaad
END:VTIMEZONE BEGIN:VEVENT ORGANIZER;CN=Jim Schaad;SENT-BY="mailto:daniel.miga...@ericsson.com":mailto:a ce-cha...@ietf.org ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=ace@ietf.o rg:mailto:ace@ietf.org ATTACH:CID:39118A2BE2F7CD4294B45129D13A735D@namprd15.prod.o

[Ace] Review on draft-bormann-core-ace-aif-07

2020-05-25 Thread Jim Schaad
* Section 2 - I would like more clarification on the subject as being derived implicitly from the armor and is a single entity rather than multiple entities. If we think that we want to do multiple subjects then that needs to be discussed. * Section 2.1 - The model does not current deal with

Re: [Ace] AIF as a suggestion in key-groupcomm; AIF in MQTT

2020-05-18 Thread Jim Schaad
That is not an issue. If you ask for adoption, we can adopt any draft with any name. -Original Message- From: Ace On Behalf Of Carsten Bormann Sent: Monday, May 18, 2020 9:12 AM To: Ace Wg Subject: Re: [Ace] AIF as a suggestion in key-groupcomm; AIF in MQTT On 2020-05-18, at 17:21,

[Ace] Interim minutes

2020-05-18 Thread Jim Schaad
I have posted the minutes - review and comment as appropriate. ___ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace

Re: [Ace] Update of access rights

2020-05-18 Thread Jim Schaad
As I said, I have not fully thought it out. A better way to state this might be - this token uses the same key as rather than implying overriding. -Original Message- From: Olaf Bergmann Sent: Sunday, May 17, 2020 11:32 PM To: Jim Schaad Cc: 'Francesca Palombini' ; 'Ace Wg' Subject

Re: [Ace] Update of access rights

2020-05-17 Thread Jim Schaad
I have not had a chance to think this out and get all of the implications right, but my understanding is that what we were trying to avoid was having the same secret key/public key present on the RS in more than one token. This simplifies what the RS needs to do. However, I am now under the

Re: [Ace] Fwd: Authentication and Authorization for Constrained Environments (ace) WG Virtual Meeting: 2020-05-18

2020-05-16 Thread Jim Schaad
Agenda has been uploaded to the meeting. Note that the list of upcoming meetings seems to have changed it’s set of links and for me is not giving a jabber room link nor a WebEx link. Information on both can be found in the agenda. Jim From: Ace On Behalf Of Daniel Migault Sent:

Re: [Ace] draft-ietf-ace-oauth-authz

2020-05-05 Thread Jim Schaad
-Original Message- From: Michael Richardson Sent: Tuesday, May 5, 2020 11:07 AM To: Jim Schaad ; 'Ace' Subject: Re: [Ace] draft-ietf-ace-oauth-authz Jim Schaad wrote: > I have much the same problem. While a client could find an AS which > would authenticate the cli

Re: [Ace] draft-ietf-ace-oauth-authz

2020-05-05 Thread Jim Schaad
is an AS. Jim From: Ace On Behalf Of Peter van der Stok Sent: Tuesday, May 5, 2020 12:26 AM To: Benjamin Kaduk Cc: Jim Schaad ; Olaf Bergmann ; 'Ace' Subject: Re: [Ace] draft-ietf-ace-oauth-authz HI all, I agree about the authorization/trust problem. My request concerns something more

Re: [Ace] draft-ietf-ace-oauth-authz

2020-05-05 Thread Jim Schaad
on the back side. Getting trust in a local AS seems to be a bootstrapping problem. Jim -Original Message- From: Carsten Bormann Sent: Monday, May 4, 2020 10:38 PM To: Jim Schaad Cc: Benjamin Kaduk ; Olaf Bergmann ; Peter van der Stok ; peter van der Stok ; Ace Subject: Re: [Ace] draft

Re: [Ace] draft-ietf-ace-oauth-authz

2020-05-04 Thread Jim Schaad
as well put in a name for the AS as well. I suppose you could get by with a shared secret but that does not seem to be a good way to build up the system. Jim -Original Message- From: Benjamin Kaduk Sent: Monday, May 4, 2020 9:09 PM To: Olaf Bergmann Cc: Peter van der Stok ; Jim Schaad

Re: [Ace] draft-ietf-ace-oauth-authz

2020-04-30 Thread Jim Schaad
What do you expect to see? By default a client needs to know that something is an AS and have a key to interact with that AS. Jim From: Ace On Behalf Of Peter van der Stok Sent: Wednesday, April 29, 2020 11:57 PM To: Ace Subject: [Ace] draft-ietf-ace-oauth-authz Hi authz

[Ace] Minutes have been uploaded

2020-04-15 Thread Jim Schaad
I have uploaded minutes to the Datatracker. Please review and comment with corrections. Jim ___ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace

Re: [Ace] Scheduling additional interim meetings

2020-04-14 Thread Jim Schaad
Reminder - If you want to have input on when the next two meetings are going to be, you need to fill out the doodle poll. Jim -Original Message- From: Ace On Behalf Of Jim Schaad Sent: Tuesday, April 7, 2020 8:51 PM To: ace@ietf.org Subject: [Ace] Scheduling additional interim meetings

[Ace] Scheduling additional interim meetings

2020-04-07 Thread Jim Schaad
Daniel and I would like to schedule two additional interim meetings to occur in May and June. I have created a doodle poll for the times that I know that I am available and would like to get people to fill it in. The poll has options for May dates in it. The June dates would be 4 weeks later so

Re: [Ace] [Cwt-reg-review] [IANA #1158953] Requested review for IANA registration in draft-ietf-ace-oauth-authz (cwt - CBOR Web Token Claims)

2020-03-23 Thread Jim Schaad
AM To: Jim Schaad ; 'Seitz Ludwig' ; 'Mike Jones' ; 'Chuck Mortimore' Cc: chuck.mortim...@visa.com; cwt-reg-rev...@ietf.org; draft-ietf-ace-oauth-au...@ietf.org; drafts-expert-rev...@iana.org; ace@ietf.org Subject: RE: [Ace] [Cwt-reg-review] [IANA #1158953] Requested review for IANA

[Ace] Congestion control needs to be included

2020-03-23 Thread Jim Schaad
I had a weird weekend trying to get coverage testing up for my Observe implementation and in the process found out that it had not implemented the required congestion control. As part of this I had to go back and do a careful read of RFC 7641 to get things right in my code and following that I

Re: [Ace] [Cwt-reg-review] [IANA #1158953] Requested review for IANA registration in draft-ietf-ace-oauth-authz (cwt - CBOR Web Token Claims)

2020-03-21 Thread Jim Schaad
No you should not need to make any changes in the document. This will be taken care of by the RFC Editor. Jim From: Ace On Behalf Of Seitz Ludwig Sent: Saturday, March 21, 2020 3:35 AM To: Mike Jones ; Chuck Mortimore ; hannes.tschofe...@arm.com Cc: chuck.mortim...@visa.com;

[Ace] Missing role

2020-03-18 Thread Jim Schaad
There is a missing role/functionality that needs to be added to the document. "proxy signature checker" has the ability to get the public keys associated with the different members of the group but does not get any access to the symmetric keying material Jim

[Ace] FW: Review of draft-ietf-ace-key-groupcomm-oscore-05

2020-03-15 Thread Jim Schaad
Forgot to cc the group -Original Message- From: Jim Schaad Sent: Sunday, March 15, 2020 1:48 PM To: 'draft-ietf-ace-key-groupcomm-osc...@ietf.org' Subject: Review of draft-ietf-ace-key-groupcomm-oscore-05 * Introduction: In para 2, the second sentence needs to be re-written. If you

[Ace] Review for draft-ietf-ace-key-groupcomm-05

2020-03-13 Thread Jim Schaad
Here is a new review - the sooner you ask about anything that is unclear the more likely I will remember what I was referring to. Jim * In figure 4: The CDDL is not correct. "2*role" should be "2*role:tstr" or role should be defined as a separate item * Section 3.2 - The third to last

[Ace] Using OAuth and ACE-OAuth with MQTT

2020-03-10 Thread Jim Schaad
Hannes, This is going to be a long email and I hope that I do not get too many things wrong in the process of getting it written up. So the question that you raised is can the current MQTT profile use the existing OAuth and ACE-OAuth protocols. My assertion is that the answer is yes and I will

Re: [Ace] Comments on the MQTT draft

2020-03-09 Thread Jim Schaad
From: Cigdem Sengul Sent: Monday, March 9, 2020 5:35 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: Comments on the MQTT draft Hello Jim, Comments inline. Yes, I can see this can be problematic but this was to avoid the broker keeping

Re: [Ace] Comments on the MQTT draft

2020-03-08 Thread Jim Schaad
From: Cigdem Sengul Sent: Sunday, March 8, 2020 3:30 PM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: Comments on the MQTT draft Hello Jim, Comments inline. On Sun, Mar 8, 2020 at 7:04 PM Jim Schaad mailto:i...@augustcellars.com> > wro

[Ace] Planning for the Vancouver Meeting

2020-03-08 Thread Jim Schaad
It appears that the logistics for the upcoming meeting in Vancouver are going to be more complicated than is normal. To start with at the present time it appears that neither of the chairs are going to be physically present for the meeting. Please let the chairs know if you desire to do a

[Ace] Comments on the MQTT draft

2020-03-08 Thread Jim Schaad
1. I want to verify that the following is the desired statement: There is a strong preference that TLS not use PSK for authentication. This follows from the recommendation to use TLS:Anon-MQTT:ace for the authentication option. I have no problems with this statement, I just want to be sure

Re: [Ace] [Rats] [Cbor] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT?

2020-03-06 Thread Jim Schaad
From: Laurence Lundblade Sent: Friday, March 6, 2020 7:38 AM To: Henk Birkholz Cc: Jim Schaad ; Smith, Ned ; Michael Richardson ; r...@ietf.org; ace@ietf.org; c...@ietf.org Subject: Re: [Rats] [Cbor] [Ace] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT? So

Re: [Ace] [Cbor] [Rats] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT?

2020-03-06 Thread Jim Schaad
e willing to absorb that. Jim -Original Message- From: Henk Birkholz Sent: Thursday, March 5, 2020 11:35 PM To: Jim Schaad ; 'Smith, Ned' ; 'Michael Richardson' ; r...@ietf.org; ace@ietf.org; c...@ietf.org Subject: Re: [Cbor] [Ace] [Rats] RATS Entity Attestation Tokens (EAT) - to

Re: [Ace] [Rats] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT?

2020-03-05 Thread Jim Schaad
{ I found Jim's very interesting email very hard to read without good quoting, I'm repeating the important part } henk> 2.) go to ACE and ask for an "unsigned token" option, or Jim Schaad wrote: jls> I don't have a problem with this, I am

Re: [Ace] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT?

2020-03-04 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Henk Birkholz Sent: Wednesday, March 4, 2020 2:33 PM To: Jim Schaad ; r...@ietf.org; ace@ietf.org; c...@ietf.org Subject: Re: [Ace] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT? Hi Jim, I'll take a stake into my

Re: [Ace] RATS Entity Attestation Tokens (EAT) - to be a CWT or not to be a CWT?

2020-03-04 Thread Jim Schaad
Henk, Well you have definitely written a message designed to get a response from me. -Original Message- From: Ace On Behalf Of Henk Birkholz Sent: Wednesday, March 4, 2020 10:41 AM To: r...@ietf.org; ace@ietf.org; c...@ietf.org Subject: [Ace] RATS Entity Attestation Tokens (EAT) - to be

Re: [Ace] draft-ietf-ace-mqtt-tls-profile-03

2020-03-02 Thread Jim Schaad
Hannes, I am having a bit of an issue over the last paragraph below and I am not sure exactly where the boundary is supposed to be between OAuth and ACE anymore. From the comments that you made during the development of the ACE OAuth framework, there was a big effort to try and make sure that

Re: [Ace] Jim's Proposal on legal requestor

2020-02-26 Thread Jim Schaad
From: Ace On Behalf Of Marco Tiloca Sent: Wednesday, February 26, 2020 6:08 AM To: Michael Richardson ; Jim Schaad ; ace@ietf.org Subject: Re: [Ace] Jim's Proposal on legal requestor Hi! Jim, I think now I understand your idea and it makes sense to me. Some comments in line below

Re: [Ace] Jim's Proposal on legal requestor

2020-02-26 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Michael Richardson Sent: Wednesday, February 26, 2020 5:17 AM To: Jim Schaad ; ace@ietf.org Subject: Re: [Ace] Jim's Proposal on legal requestor clarifying question. Jim Schaad wrote: > I do not seem to have been doing a good

[Ace] Minutes for todays interim posted

2020-02-25 Thread Jim Schaad
I have posted up the minutes for todays interim https://datatracker.ietf.org/meeting/interim-2020-ace-04/materials/minutes-i nterim-2020-ace-04-202002251100 ___ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace

Re: [Ace] Scope question

2020-02-24 Thread Jim Schaad
-Original Message- From: Marco Tiloca Sent: Monday, February 24, 2020 2:14 PM To: Jim Schaad ; draft-ietf-ace-key-groupcomm-osc...@ietf.org Cc: 'Ace Wg' Subject: Re: Scope question Hi Jim, On 2020-02-24 19:02, Jim Schaad wrote: > I was starting to code up the encoding of sc

[Ace] Scope question

2020-02-24 Thread Jim Schaad
I was starting to code up the encoding of scope and wanted to clarify what the encoding is. The text appears to say that the encoding is: scope = [ groupId: tstr, ?[* role : any ]] I was expecting this to be more along the lines of scope = [ + scope_item ] scopeItem = [ groupId: tstr, ?[* role

Re: [Ace] [EXTERNAL] RE: Access token question

2020-02-24 Thread Jim Schaad
: Francesca Palombini Sent: Sunday, February 23, 2020 11:55 PM To: Mike Jones ; Jim Schaad ; 'Seitz Ludwig' Cc: 'Ace Wg' Subject: Re: [EXTERNAL] RE: Access token question Thanks all! Section 8.13 of the framework is exactly what I was looking for, I don’t know how I did not see it. A bit

Re: [Ace] Access token question

2020-02-21 Thread Jim Schaad
You are missing something https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-33#section-8.13 defined here From: Francesca Palombini Sent: Friday, February 21, 2020 4:37 AM To: Seitz Ludwig ; Mike Jones ; Jim Schaad Cc: Ace Wg Subject: Access token question Hi, Quick

Re: [Ace] draft-ietf-ace-key-groupcomm-oscore

2020-01-31 Thread Jim Schaad
-Original Message- From: Marco Tiloca Sent: Friday, January 31, 2020 10:32 AM To: Jim Schaad ; draft-ietf-ace-key-groupcomm-osc...@ietf.org Cc: ace@ietf.org Subject: Re: draft-ietf-ace-key-groupcomm-oscore Hi Jim, On 2020-01-31 16:46, Jim Schaad wrote: > > -Original M

Re: [Ace] AD review of draft-ietf-ace-oscore-profile-08

2020-01-30 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Francesca Palombini Sent: Wednesday, January 29, 2020 6:43 AM To: Benjamin Kaduk ; draft-ietf-ace-oscore-prof...@ietf.org; Ace Wg Subject: Re: [Ace] AD review of draft-ietf-ace-oscore-profile-08 Hi Ben, Thank you so much for this very

[Ace] Review for draft-ietf-ace-key-groupcomm-04

2020-01-30 Thread Jim Schaad
This is not a finished review, but I wanted to get it out Jim Section 1 - last paragraph - the first sentence in this paragraph is giving me fits trying to understand it. I would suggest something, but I really don't understand it. General - Update the reference to RFC 7049 to the bis draft.

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-23 Thread Jim Schaad
and decode if there needs to be some text on encoding in a JSON environment or not. Jim From: Ace On Behalf Of Jim Schaad Sent: Sunday, January 19, 2020 3:35 PM To: 'Brian Campbell' ; 'Seitz Ludwig' Cc: 'Roman Danyliw' ; oauth-ext-rev...@ietf.org; 'Daniel Migault' ; drafts-lastc...@i

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-19 Thread Jim Schaad
Cc: Ludwig Seitz ; Roman Danyliw ; oauth-ext-rev...@ietf.org; Daniel Migault ; Jim Schaad ; Benjamin Kaduk ; ace@ietf.org; drafts-lastc...@iana.org Subject: Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params Thanks Ludwig, On Sat, Jan 11, 2020 at 8:20 AM

Re: [Ace] remarks on draft-tiloca-ace-oscore-gm-admin-00

2020-01-17 Thread Jim Schaad
-Original Message- From: Marco Tiloca Sent: Wednesday, January 15, 2020 9:21 AM To: Jim Schaad ; draft-tiloca-ace-oscore-gm-ad...@ietf.org Cc: ace@ietf.org Subject: Re: [Ace] remarks on draft-tiloca-ace-oscore-gm-admin-00 Hi Jim, Thanks for your reply, see more comments inline

Re: [Ace] draft-ietf-ace-mqtt-tls-profile - Validating a subscription is in scope

2020-01-17 Thread Jim Schaad
From: Cigdem Sengul Sent: Wednesday, January 15, 2020 4:44 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] draft-ietf-ace-mqtt-tls-profile - Validating a subscription is in scope Hello, It gets interesting when the scope is more

Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-03

2020-01-17 Thread Jim Schaad
From: Cigdem Sengul Sent: Tuesday, January 14, 2020 8:25 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] Review of draft-ietf-ace-mqtt-tls-profile-03 Thank you for this review, Jim. Responses inline. On Wed, Jan 1, 2020 at 10:33 PM Jim

Re: [Ace] draft-ietf-ace-mqtt-tls-profile - Validating a subscription is in scope

2020-01-14 Thread Jim Schaad
From: Cigdem Sengul Sent: Tuesday, January 14, 2020 6:24 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] draft-ietf-ace-mqtt-tls-profile - Validating a subscription is in scope Hello Jim, Topic filter and permission filter matching

Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params

2020-01-13 Thread Jim Schaad
; oauth-ext-rev...@ietf.org; Daniel Migault ; Jim Schaad ; Benjamin Kaduk ; ace@ietf.org; drafts-lastc...@iana.org Subject: Re: [Ace] Requested review for IANA registration in draft-ietf-ace-oauth-params Thanks Ludwig, On Sat, Jan 11, 2020 at 8:20 AM Seitz Ludwig mailto:ludwig.se

[Ace] draft-ietf-ace-mqtt-tls-profile - Validating a subscription is in scope

2020-01-12 Thread Jim Schaad
I have run across an interesting question for doing validation of subscriptions that I would like to get an opinion on. When doing a publish, there is not an issue. One simply takes the set of values in the scope field as topic filters and checks the publication topic against the set of

Re: [Ace] remarks on draft-tiloca-ace-oscore-gm-admin-00

2020-01-11 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Marco Tiloca Sent: Wednesday, January 8, 2020 8:08 AM To: Jim Schaad ; draft-tiloca-ace-oscore-gm-ad...@ietf.org Cc: ace@ietf.org Subject: Re: [Ace] remarks on draft-tiloca-ace-oscore-gm-admin-00 Hi Jim, Thanks a lot for this review! We have

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-01-09 Thread Jim Schaad
-Original Message- From: Benjamin Kaduk Sent: Thursday, January 9, 2020 1:22 PM To: Jim Schaad Cc: 'Olaf Bergmann' ; draft-ietf-ace-dtls-authorize@ietf.org; ace@ietf.org Subject: Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09 On Thu, Jan 09, 2020 at 12:52:56PM -0800

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-01-09 Thread Jim Schaad
-Original Message- From: Benjamin Kaduk Sent: Thursday, January 9, 2020 12:27 PM To: Jim Schaad Cc: draft-ietf-ace-dtls-authorize@ietf.org; ace@ietf.org Subject: Re: AD review of draft-ietf-ace-dtls-authorize-09 On Fri, Jan 03, 2020 at 08:36:54PM -0800, Jim Schaad wrote

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-01-09 Thread Jim Schaad
-Original Message- From: Benjamin Kaduk Sent: Thursday, January 9, 2020 12:17 PM To: Olaf Bergmann Cc: Jim Schaad ; ace@ietf.org; draft-ietf-ace-dtls-authorize@ietf.org Subject: Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09 On Thu, Jan 09, 2020 at 12:32:40PM +0100

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-01-06 Thread Jim Schaad
-Original Message- From: Ace On Behalf Of Olaf Bergmann Sent: Monday, January 6, 2020 2:03 AM To: Jim Schaad Cc: ace@ietf.org; 'Benjamin Kaduk' ; draft-ietf-ace-dtls-authorize@ietf.org Subject: Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09 Jim, Jim Schaad writes

Re: [Ace] AD review of draft-ietf-ace-dtls-authorize-09

2020-01-03 Thread Jim Schaad
-Original Message- From: Benjamin Kaduk Sent: Thursday, January 2, 2020 3:40 PM To: draft-ietf-ace-dtls-authorize@ietf.org Cc: ace@ietf.org Subject: AD review of draft-ietf-ace-dtls-authorize-09 Hi all, Some high-level remarks before delving into the section-by-section comments:

[Ace] Review of draft-ietf-ace-mqtt-tls-profile-03

2020-01-01 Thread Jim Schaad
2.2.2 - para 1, the last sentence seems to imply that the first connection to publish to authz-info is not being done over a TLS connection. But the sentence before that states that a TLS connection MUST be used for this. Perhaps s/and is expected to try reconnecting over TLS./and reconnects,

Re: [Ace] [Gen-art] Genart last call review of draft-ietf-ace-oauth-params-06

2019-12-23 Thread Jim Schaad
From: Ace On Behalf Of Seitz Ludwig Sent: Sunday, December 22, 2019 11:52 PM To: 'elwynd' ; Ludwig Seitz ; Elwyn Davies ; gen-...@ietf.org Cc: last-c...@ietf.org; draft-ietf-ace-oauth-params@ietf.org; ace@ietf.org Subject: Re: [Ace] [Gen-art] Genart last call review of

Re: [Ace] FW: [IANA #1157486] Last Call: (Authentication and Authorization for Constrained Environments (ACE) using the OAuth 2.0 Framework (ACE-OAuth)) to Proposed

2019-12-21 Thread Jim Schaad
a link from the mapping registry to the OAuth registry. Jim -Original Message- From: Ludwig Seitz Sent: Saturday, December 21, 2019 3:26 AM To: Jim Schaad ; 'Daniel Migault' Cc: ace@ietf.org; Benjamin Kaduk ; 'Roman Danyliw' Subject: Re: FW: [IANA #1157486] Last Call: (Authentication

Re: [Ace] Certificate processing for MQTT

2019-12-05 Thread Jim Schaad
From: Cigdem Sengul Sent: Thursday, December 5, 2019 2:42 AM To: Jim Schaad Cc: draft-ietf-ace-mqtt-tls-prof...@ietf.org; Ace Wg Subject: Re: [Ace] Certificate processing for MQTT Hello Jim, Thank you for your email. I am in the process of revising the document for the December

[Ace] Certificate processing for MQTT

2019-12-04 Thread Jim Schaad
I got to the point of needing to start producing and validating certificates for MQTT and started running into some questions as well as starting to pickup some odd information that this document does not point to. 1. Should probably reference the mqtt(s) URI scheme, I am however somewhat

Re: [Ace] comment on draft-ietf-ace-oauth-authz-26

2019-11-24 Thread Jim Schaad
Daniel, I don’t understand why you want to follow a different specification for the error interactions in this case. I don’t see any reason not to following [ace-oauth-authz] but using JSON for the errors. Jim From: Ace On Behalf Of Daniel Migault Sent: Friday, November 22, 2019

[Ace] Clarifications on the pub-sub keying draft

2019-11-19 Thread Jim Schaad
For those people who were on Jabber yesterday during the meeting, I made a characterization of Francesca's Pub-Sub draft which was wrong, and she did not tell me I was an idiot like she should have. When you are doing encrypted pub-sub there are three problems that need to be addressed: 1. Get

[Ace] remarks on draft-tiloca-ace-oscore-gm-admin-00

2019-11-19 Thread Jim Schaad
This is just going to be a high level review on how things are done rather than a detailed review on each line of text. 1. - Go and read that CoRE Pub-Sub update document - you know the one that Klaus and friends have not managed to get written since the model proposal was done way back when. 2.

  1   2   3   >