Re: [Emu] Question for draft-ietf-emu-tls-eap-types-03

2021-07-01 Thread Tim Cappalli
Device identifiers, how certificates get provisioned, their contents, and where the keys are stored don’t seem in scope for this TLS-based EAP types spec. This seems like more of a BCP thing or a topic for MADINAS IMO. From: Eliot Lear Sent: Thursday, July 1, 2021 10:09 AM

Re: [Emu] Question for draft-ietf-emu-tls-eap-types-03

2021-07-01 Thread Eliot Lear
Hi Alan, On 01.07.21 15:23, Alan DeKok wrote: TEAP is one solution, but I don't think everyone is going to move to TEAP overnight. It would be nice to have solutions for existing (and deployed) EAP methods. Perhaps I lost the plot, but what do you propose? Eliot OpenPGP_signature

Re: [Emu] Question for draft-ietf-emu-tls-eap-types-03

2021-07-01 Thread Carolin Baumgartner
On 7/1/21 3:23 PM, Alan DeKok wrote: On Jun 30, 2021, at 9:52 AM, Eliot Lear wrote: I think we have to be a bit careful about using the term "TPM". What we care about are trust anchors, credentials, and operations on those. Those objects might be stored in TPMs, but it seems to me that

Re: [Emu] Question for draft-ietf-emu-tls-eap-types-03

2021-07-01 Thread Alan DeKok
On Jun 30, 2021, at 9:52 AM, Eliot Lear wrote: > I think we have to be a bit careful about using the term "TPM". What we care > about are trust anchors, credentials, and operations on those. Those objects > might be stored in TPMs, but it seems to me that the protocol does not need > to be