Subject: Re: [Rats] Fwd: New Version Notification for draft-moriarty-attestationsets-02.txt

From: Guy Fedorkow <[email-masked]>
Date: Tue, 6 Jul 2021 16:38:43 +0000

Hi Kathleen,
  Thanks for taking up this topic.
  Do you have a sense for how it interacts with https://datatracker.ietf.org/doc/html/draft-voit-rats-attestation-results ?
  Both seem to desire to provide a "summary format" of attestation results, allowing a relying party to make an assessment of the status of a device without having to know so many details.
  I believe in Eric's draft, the assumption is that the Verify uses all the available tools to determine the state of the device in question, then generates a 'Trustworthiness Vector' giving a summary of the answer.  The relying party can then inspect and validate the one structure, signed by the verifier, without having to understand  the reams of PCRs, logs, reference measurements and all the rest.
  Does this sound anything like what you'd want to achieve with Attestation Sets?

  Thanks
/guy

Juniper Business Use Only
From: RATS <[email-masked]> On Behalf Of Kathleen Moriarty
Sent: Tuesday, May 4, 2021 2:30 PM
To: [email-masked]
Subject: [Rats] Fwd: New Version Notification for draft-moriarty-attestationsets-02.txt

[External Email. Be cautious of content]

Greetings!

This version adjusts the introduction per feedback from Michael Richardson when in review for WG adoption.

Feedback welcome!

Thank you,
Kathleen
---------- Forwarded message ---------
From: <[email-masked]<mailto:[email-masked]>>
Date: Tue, May 4, 2021 at 2:28 PM
Subject: New Version Notification for draft-moriarty-attestationsets-02.txt
To: Kathleen M. Moriarty <[email-masked]<mailto:[email-masked]>>

A new version of I-D, draft-moriarty-attestationsets-02.txt
has been successfully submitted by Kathleen M. Moriarty and posted to the
IETF repository.

Name:           draft-moriarty-attestationsets
Revision:       02
Title:          Scalable Remote Attestation for Systems, Containers, and Applications
Document date:  2021-05-04
Group:          Individual Submission
Pages:          7
URL:            https://www.ietf.org/archive/id/draft-moriarty-attestationsets-02.txt<https://urldefense.com/v3/__https:/www.ietf.org/archive/id/draft-moriarty-attestationsets-02.txt__;!!NEt6yMaO-gk!VVhakexq9KfCh40xNl3j_P1lLyIKJBpsrTeF3RnoJPIM_89oUyQryFKqAsD7yZjQB88$>
Status:         https://datatracker.ietf.org/doc/draft-moriarty-attestationsets/<https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/draft-moriarty-attestationsets/__;!!NEt6yMaO-gk!VVhakexq9KfCh40xNl3j_P1lLyIKJBpsrTeF3RnoJPIM_89oUyQryFKqAsD7tO4jHRQ$>
Htmlized:       https://datatracker.ietf.org/doc/html/draft-moriarty-attestationsets<https://urldefense.com/v3/__https:/datatracker.ietf.org/doc/html/draft-moriarty-attestationsets__;!!NEt6yMaO-gk!VVhakexq9KfCh40xNl3j_P1lLyIKJBpsrTeF3RnoJPIM_89oUyQryFKqAsD7PT_hahc$>
Htmlized:       https://tools.ietf.org/html/draft-moriarty-attestationsets-02<https://urldefense.com/v3/__https:/tools.ietf.org/html/draft-moriarty-attestationsets-02__;!!NEt6yMaO-gk!VVhakexq9KfCh40xNl3j_P1lLyIKJBpsrTeF3RnoJPIM_89oUyQryFKqAsD7xDSDLR4$>
Diff:           https://www.ietf.org/rfcdiff?url2=draft-moriarty-attestationsets-02<https://urldefense.com/v3/__https:/www.ietf.org/rfcdiff?url2=draft-moriarty-attestationsets-02__;!!NEt6yMaO-gk!VVhakexq9KfCh40xNl3j_P1lLyIKJBpsrTeF3RnoJPIM_89oUyQryFKqAsD7ybIPfGQ$>

Abstract:
   This document establishes an architectural pattern whereby a remote
   attestation could be issued for a complete set of benchmarks or
   controls that are defined and grouped by an external entity,
   preventing the need to send over individual attestations for each
   item within a benchmark or control framework.  This document
   establishes a pattern to list sets of benchmarks and controls within
   CWT and JWT formats for use as an Entity Attestation Token (EAT).

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org<https://urldefense.com/v3/__http:/tools.ietf.org__;!!NEt6yMaO-gk!VVhakexq9KfCh40xNl3j_P1lLyIKJBpsrTeF3RnoJPIM_89oUyQryFKqAsD7WtgFqoM$>.

The IETF Secretariat

--

Best regards,
Kathleen