Subject: [Suit] Claims Section in SUIT Architecture Draft

From: Hannes Tschofenig <[email-masked]>
Date: Thu, 17 Sep 2020 06:59:48 +0000

Hi all,

we recently received reviews of the SUIT architecture draft and those suggest various improvements of the text.

In this email I am going to propose to merge the content of the claims section in the architecture draft, see https://tools.ietf.org/html/draft-ietf-suit-architecture-11#section-4, with the manifest text in Section 6 - https://tools.ietf.org/html/draft-ietf-suit-architecture-11#section-6.

The reasons are the following:

Bob Briscoe suggested to change the layout of Section 6 and to use a tabular representation. This means that decisions that have to be made are next to the answers with the fields in the manifest. For example, a question like "Has the firmware been corrupted?" will then be next to the answer "Protect the manifest using cryptographic information, such as digital signatures or message authentication codes (MACs).".

In a nutshell, Section 6 becomes a very high-level summary of the information model draft.

The second reason is that the term claim is a bit overloaded. The SUIT manifest draft uses the term claim in context of delegated authorization. In the SUIT manifest draft we use a different term for the information described in Section 4 and Section 6, namely commands. Commands are either conditions or directives whereby conditions have no side effects.

I think this merge will improve readability.

Are there any objections?

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.