Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2021-01-13 Thread Dan Garcia
Hi Benjamin, Thank you for your suggestion. Your comment is relevant. In fact, we wrote some time ago an article regarding our initial design, and we perform a comparison with other network layer based EAP lower-layer (https://www.mdpi.com/1424-8220/16/3/358) We compared focusing EAP

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2021-01-12 Thread Benjamin Kaduk
Hi Dan, Sorry to reply to such an old message... On Sat, Dec 12, 2020 at 06:36:53PM +0100, Dan Garcia Carrillo wrote: > Hi Mališa, > > > El 11/12/2020 a las 19:45, Mališa Vučinić escribió: > > > > Hi Dan, > > > > Thanks for the clarification regarding minimal-security. The points > > that you

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-12 Thread Dan Garcia Carrillo
, Michael Richardson , EMU WG , "c...@ietf.org WG (c...@ietf.org)" , "ace@ietf.org" *Cc: * *Subject: *Re: [core] [Ace] Proposed charter for ACE (EAP over CoAP?) Hi Mališa, My intention was not to turn this conversation into a criticism of your work. “deficiencies” was not

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-11 Thread Mališa Vučinić
etf.org WG (c...@ietf.org)" , "ace@ietf.org" Subject: Re: [core] [Ace] Proposed charter for ACE (EAP over CoAP?) As you comment , draft-ietf-6tisch-minimal-security - offers minimal security and has several deficiencies that can be solv

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-11 Thread Dan Garcia Carrillo
ot;ace@ietf.org" *Subject: *Re: [core] [Ace] Proposed charter for ACE (EAP over CoAP?) As you comment , draft-ietf-6tisch-minimal-security - offers minimal security and has several deficiencies that can be solved by using EAP and AAA infrastructures. ___

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-10 Thread Mališa Vučinić
" Subject: Re: [core] [Ace] Proposed charter for ACE (EAP over CoAP?) As you comment , draft-ietf-6tisch-minimal-security - offers minimal security and has several deficiencies that can be solved by using EAP and AAA infrastructures. ___

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-10 Thread Dan Garcia
 Hi Michael, "/1) .../" For onboarding a new device, where there is no connectivity after authentication, you propose to use 802.1X, which is an EAP lower layer. EAP over CoAP is in fact a proposal for a application level EAP lower layer that overcomes the limitation that 802.1X works on an

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-09 Thread Michael Richardson
Dan Garcia wrote: > EAP can be used in the context of IoT for authentication. But, to what end? 1) If it is onboarding a new device, then there is no connectivity until after authentication. so you can't use CoAP, you have to use 802.1x, or some equivalent, or create a system such

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-09 Thread Carsten Bormann
On 2020-12-09, at 14:28, Christian Amsüss wrote: > > follow CoRE best practices Indeed; for instance, we “RESTified” documents in ACE before (and they not just became ideologically correct, but also plain better). Grüße, Carsten signature.asc Description: Message signed with OpenPGP

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-09 Thread Alexander Pelov
Dear all, I support the inclusion of EAP-over-CoAP to the charter. We've done work on this particular item in the past, and we've identified the need for it in many places.. but unfortunately the draft didn't have a proper "home" and things never advanced much. Use-cases we've seen include

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-09 Thread Dan Garcia
 Hi Michael, EAP can be used in the context of IoT for authentication. To transport EAP from the IoT device we need a light EAP lower-layer. This would be CoAP. Morover, according to EAP key management framework, keys are exported to protect the link and the EAP lower-layer itself. So yes,

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-07 Thread Michael Richardson
Could someone point to a use case for "EAP over CoAP" please? Is the goal to key an OSCORE context, or what? -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works|IoT architect [ ] m...@sandelman.ca

Re: [Ace] [core] Proposed charter for ACE (EAP over CoAP?)

2020-12-07 Thread Göran Selander
+1. (The recently updated ACE charter should cover this work.) Göran On 2020-12-03, 20:03, "core" wrote: Hi, I think it is important to have EAP on top of CoAP, as Dan said it fit well with the last charter item. Laurent On Thu, Dec 3, 2020 at 2:20 PM Daniel Migault