Subject: [saag] RATs report for IETF 110

From: "Nancy Cam-Winget (ncamwing)" <[email-masked]>
Date: Wed, 10 Mar 2021 23:23:37 +0000

RATs met at the Tuesday March 9 Session I and Wednesday March 10 Session II

Both sessions had full agendas to discuss status of current and proposed drafts.

A brief summary and status:

https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/

- Draft is ready for shepherd writeup but has dependencies (informative references) to several drafts, one of which is still to be adopted by the WG.

- Under consideration is to package this draft with the “charra” draft as they are related

Kathleen Moriarty presented “Automation at Scale: remote attestation sets”

- Discussion on how to scale posture assessment for devices, users and systems at scale

https://datatracker.ietf.org/doc/draft-ietf-rats-architecture/

- version 10 posted to address several comments. Remaining issue to discuss revolve around reference values and freshness.

- 3 styles of freshness were discussed: synchronized clocks, nonces and “handles” (like epoch)

- No conclusion to the uses and preferences was reached; discussion will continue on the mail list

https://datatracker.ietf.org/doc/draft-ietf-rats-reference-interaction-models/

- Draft continues to mature with a new implementation on Github; there are still some issues to be addressed.

https://datatracker.ietf.org/doc/draft-birkholz-rats-tuda/

- Time-based unidirectional attestation review of this draft, now in version 4.

- Request for adoption was made, but more review/feedback is needed.  Request for feedback will be solicited on the mail list before adoption call is placed.

https://datatracker.ietf.org/doc/draft-birkholz-rats-suit-claims/

- Draft defines trustworthiness vectors based on the trusted path routing, but focuses on claims applicable to SUIT

https://datatracker.ietf.org/doc/draft-birkholz-rats-uccs/

- Draft defines use cases for using unprotected CWT claims

- Request for adoption: 14 in favor, 2 against

https://datatracker.ietf.org/doc/draft-ietf-rats-yang-tpm-charra/

- Updates based on comment are in version 5 based on several reviews including early Yang doctor’s review

- Chair to issue WGLC and include Yang doctor review

https://datatracker.ietf.org/doc/draft-birkholz-rats-network-device-subscription/

- Defines event driven subscription; will wait for “charra” draft to proceed before putting this draft for adoption call

https://datatracker.ietf.org/doc/draft-chen-rats-usecase/

- Present use cases to address vTPM, multi-TPM and other considerations

- Discussion of goal for this draft: to augment use cases (which will not be published) or to clarify its purpose and intent

- Author is encourage to present these questions and clarifications to the mail list

https://datatracker.ietf.org/doc/draft-ietf-rats-eat/

- Updates to version 9 and progress provided

- Discussion of EAT profiles and if there should be guidelines

- Discussion of software descriptions in EAT: CoSWID, SUIT, CoMID.  General preference is to allow for claims to contain CoSWID for specific purposes or have claims for a single claim for evidence CoSWID and allow multiple CoSWIDs via EAT submodules

- Discussion of UEID permanence as FIDO relies on a “global UID” which will need clarifications in EAT; use of 802.1AR was raised and to be reviewed.  The discussion will continue on the mail list.

Agenda did not allow Chairs to review milestones which will be taken to the mail list.

Best, Nancy