Re: [Anima] BRSKI-AE document split discussion

2021-09-03 Thread Michael Richardson
t...@cs.fau.de wrote: > plant would often want to have a combination of both scenarios: > The manufacturing plant might prefer to not be connected to the > Internet (== scenario 1) AND pledges want to be of the type defined > via Scenario 2. Will we be able to avoid normative

[Anima] anima - New Meeting Session Request for IETF 112

2021-09-03 Thread IETF Meeting Session Request Tool
A new meeting session request has just been submitted by Toerless T. Eckert, a Chair of the anima working group. - Working Group Name: Autonomic Networking Integrated Model and Approach Area Name: Operations and Management Area Session

Re: [Anima] BRSKI-AE document split discussion

2021-09-03 Thread t...@cs.fau.de
Michael: For the joint picture that shows the async points both in the frontent (pledge) as well as backend (Registrar) together, which document should that go into ? I am mostly worried that we understand how the case where you have both async points toether will work. Cheers Toerless On

Re: [Anima] [lamps] rollover of CA

2021-09-03 Thread Michael Richardson
Ryan Sleevi wrote: rs> I mean, there's rs> https://datatracker.ietf.org/doc/html/rfc4210#section-4.4, but that's rs> more or less unsupported, and would strongly recommend against it: rs> the _key_ rollover creates vast issues with implementations. That's the section I was

Re: [Anima] BRSKI-AE document split discussion

2021-09-03 Thread Fries, Steffen
Hi Toerless, hi Michael > -Original Message- > From: Michael Richardson > Sent: Freitag, 3. September 2021 19:09 > > t...@cs.fau.de wrote: > > plant would often want to have a combination of both scenarios: > > The manufacturing plant might prefer to not be connected to the >

Re: [Anima] [lamps] RFC8994/8995 requirements for CSRattr

2021-09-03 Thread Dan Harkins
  Hello, On 9/3/21 10:00 AM, Michael Richardson wrote: I'm unclear if CMP allows for a standardized way to override the CSR contents, or if it simply provides more authority for the RA to create a new CSR of its own.   Well not really override, more like augment. As I understand it, the

[Anima] kinds of trust relationships in IoT networks (was Re: [lamps] rollover of CA)

2021-09-03 Thread Michael Richardson
Eliot Lear wrote: > I think the issue is that RFC 7030 references RFC 4210.  And > enterprises may indeed roll their CAs for a myriad of reasons, not the > least of which could be mergers, mishandled private keys, and planned > changes,.  So some advice may be needed here, if

Re: [Anima] BRSKI-AE document split discussion

2021-09-03 Thread Michael Richardson
t...@cs.fau.de wrote: > For the joint picture that shows the async points both in the frontent > (pledge) as well as backend (Registrar) together, which document should > that go into ? I think that this is fluid question. > I am mostly worried that we understand how the case

Re: [Anima] [lamps] RFC8994/8995 requirements for CSRattr

2021-09-03 Thread Michael Richardson
I'm unclear if CMP allows for a standardized way to override the CSR contents, or if it simply provides more authority for the RA to create a new CSR of its own. While I would also prefer to enhance the RA/CA protocol, I'm not entirely keen on mechanisms that break the original PoP. Anyway, we

Re: [Anima] [lamps] RFC8994/8995 requirements for CSRattr

2021-09-03 Thread Michael Richardson
{Trimming massive CC to just lists} Dan Harkins wrote: >> While I would also prefer to enhance the RA/CA protocol, I'm not >> entirely keen on mechanisms that break the original PoP. >   Agreed, but keep in mind that the CA has no idea whether the > challengePassword field is