Subject: [core] FW: Adoption call for draft-tschofenig-uta-tls13-profile-04

From: Hannes Tschofenig <[email-masked]>
Date: Fri, 15 May 2020 11:40:43 +0000

I believe that the adoption call for the TLS 1.3 profile for IoT is relevant to this group.
Your support on the UTA list is appreciated!

-----Original Message-----
From: Hannes Tschofenig
Sent: Friday, May 15, 2020 1:39 PM
To: Valery Smyslov <[email-masked]>; [email-masked]
Cc: [email-masked]; Thomas Fossati <[email-masked]>
Subject: RE: Adoption call for draft-tschofenig-uta-tls13-profile-04

Thanks, Valery for starting the call for adoption.

Let me provide a bit of context for those who weren't able to attend the virtual interim meeting*.

RFC 7925 provided profiles for IoT devices concerning the use of TLS and DTLS 1.2. These profiles are used today in deployments and other SDOs are referencing that RFC for their IoT protocol specifications.

While there were many aspects to consider in 1.2 there are far fewer in 1.3 because the TLS 1.3 specification was only finished mid 2018 and the DTLS 1.3 RFC is about to get finalized now. However, there are two areas were definitely need to say something about 1.3 usage in IoT environments, namely
* Algorithm recommendations (because those are different than the algorithms used on the web), and
* the use of 0-RTT in IoT protocols like CoAP and MQTT.

In addition to those points there are some recommendations that would be helpful to cover in  draft-tschofenig-uta-tls13-profile-04, which are relevant for 1.2 as well as 1.3, such as the use of alternative certificate formats (using CBOR encoding). This was a point raised by John. Other aspects include the use of CIDs and how they relate to CoAP and CoAP Observe, the use of "unlimited" certificate lifetime for certificates that are part of the root of trust on those devices, and there are more items in the slide deck*.

The participants at the call asked for the scope to be restricted to TLS/DTLS and not to focus on cTLS because it would otherwise take longer to complete this work.

I believe this work is useful for the IoT community since TLS/DTLS is used by all major IoT device management providers.

Ciao
Hannes

(*): Slides presented at the virtual interim meeting are here:
https://datatracker.ietf.org/meeting/interim-2020-uta-01/materials/slides-interim-2020-uta-01-sessa-tlsdtls-profiles-for-the-internet-of-things

-----Original Message-----
From: Valery Smyslov <[email-masked]>
Sent: Friday, May 15, 2020 9:53 AM
To: [email-masked]
Cc: [email-masked]; Hannes Tschofenig <[email-masked]>; Thomas Fossati <[email-masked]>
Subject: Adoption call for draft-tschofenig-uta-tls13-profile-04

Hi,

during the last  virtual interim meeting the
draft-tschofenig-uta-tls13-profile-04
was discussed. The authors of the draft asked for its adoption by the WG and a quick poll during the meeting indicated that participants were in favor of the adoption.

This message starts a two weeks call for adoption of the
draft-tschofenig-uta-tls13-profile-04 draft to confirm the results we saw at the meeting.
The call will end up 30 May 2020. Please send your opinions to the list before this date.

Please if possible include any reasons supporting your opinion. If you support this adoption, please indicate whether you are ready to review this draft if it becomes a WG document.

Regards,
Leif & Valery.

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.