%% You should probably cite draft-lear-iotops-deep-thoughts-on-onboarding instead of this I-D. @techreport{lear-iotops-onboard-intr-00, number = {draft-lear-iotops-onboard-intr-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-lear-iotops-onboard-intr/00/}, author = {Eliot Lear}, title = {{Discovering And Accessing Software Bills of Materials}}, pagetotal = 7, year = 2021, month = feb, day = 22, abstract = {With various onboarding methods being built out, one aspect that has been overlooked is the trust relationship between the deployment and the manufacturer. This document asks questions about how that trust should be established, and how it can be leveraged.}, }