Comments (5)
Page 9: we consider it always unidirectional, and don't find a case where we need bidirectional support. A TEEP Agent inside TEE doesn't call back and out to TEEP Broker inside a REE.
On IoT, let me ask our peers for input. @hannestschofenig how do you think about IoT device type that can apply the TEEP?
Page 27: we think of a group public key in a verifier to confirm that a list of devices are recognized in an attestation flow. A class can be a general device group name that the Verifier understands. At times, this can be a group ID for a set of devices that associate with an EPID public key, say, "EPID Group ID 1".
from architecture.
Ming writes:
Page 27: we think of a group public key in a verifier to confirm that a list of devices are recognized in an attestation flow. A class can be a general device group name that the Verifier understands. At times, this can be a group ID for a set of devices that associate with an EPID public key, say, "EPID Group ID 1".
Perhaps add an informative reference to draft-ietf-rats-daa as an example?
from architecture.
On IoT device class that TEEP can fit, we authors discussed and consider the following:
There is no clear spec from RFC 7228 to say which classes of IoT devices may fit. We will not specify it and leave such recommendation to the adopters. And the TEEP allows any code as long as the capacity fits.
from architecture.
Added the following changes about comment 3 for page 27:
"In some use cases it may be sufficient to identify
only the class of the device, for example, a DAA Issuer's group public key ID when the attestation uses DAA,
see {{I-D.ietf-rats-daa}}."
from architecture.
Added Ines's confirmation on the fixes: https://mailarchive.ietf.org/arch/msg/teep/qxYx2E2_Z8oHEegnf7FFZ7BTAhA/
from architecture.
Related Issues (20)
- [Hackathon] How does Agent get unneeded TA list HOT 2
- Obsolete paragraph in intro HOT 1
- Do we want an "applicability statement"? HOT 1
- TEE OS HOT 2
- Indicate the possibility to terminate TLS in the TEE HOT 2
- Figure 4 - Improve readability HOT 1
- Clarification regarding Data Protection HOT 4
- wordsmithing on description of protections for personalization data HOT 4
- Insufficient description for compromised TAM HOT 1
- Intdir review comment: device user in complete sentence
- intdir review comment: TEEP diagram label consistency HOT 1
- Intdir comments: TAM trust by public key elaboration with constraints HOT 1
- Intdir Review comments: TEEP broker triggering and frequency to TAM calls
- Paul Kyzivat GENART review HOT 1
- Russ Housley ARTART review HOT 1
- Benjamin M. Schwartz SECDIR review HOT 7
- Lars Eggert GEN-AD Review HOT 4
- Robert Wilton Review Comments HOT 5
- Roman Danyliw Review Comments HOT 16
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from architecture.