Authentication and Authorization for Constrained Environments (ace)

The ACE working group met on Monday in the first session.

The CWT document has gone to the RFC Editor since the last meeting and the associated POP CWT draft is expected to progress to the IESG before Montreal.

The WG adopted the EST over CoAP draft after some heavy modifications with some of the work going to the ANIMA group.

During the week there has been a start at getting some interop testing done with the OAuth framework using the DTLS profile which has started to show some promise.  We are going to try to have a couple of virtual interop events over the next couple of months with the goal of having enough by Montreal to be able to be comfortable with going to WGLC then.  As part of this work we will need to look at getting the OSCORE profile tested as well.

There were some non-working (future work) presented dealing with group messaging authorization scenarios that was presented where some re-factorization work had been done to combine pieces that are common between the two drafts.

The WG then has some discussions on a key establishment protocol EDHOC with comparison of message sizes and numbers between that proposal and using TLS to do key establishment transporting the TLS messages inside of CoAP.  While the two protocols have similar results under the UDP scenario, they have different results when looking at the 6TiSH world where packets are restricted in size.

The ACE working group met on Monday in the first session.

The CWT document has gone to the RFC Editor since the last meeting and the associated POP CWT draft is expected to progress to the IESG before Montreal.

The WG adopted the EST over CoAP draft after some heavy modifications with some of the work going to the ANIMA group.

During the week there has been a start at getting some interop testing done with the OAuth framework using the DTLS profile which has started to show some promise.  We are going to try to have a couple of virtual interop events over the next couple of months with the goal of having enough by Montreal to be able to be confortable with going to WGLC then.  As part of this work we will need to look at getting the OSCORE profile tested as well.

There were some non-working (future work) presnted dealing with group messaging authorization senerios that was presented where some re-factorization work had been done to combine pieces that are common between the two drafts.

The WG then has some discussions on a key establishment protocol EDHOC with comparison of message sizes and numbers between that propsoal and using TLS to do key establishment transporting the TLS messages inside of CoAP.  While the two protocols have similar results under the UDP scenerio, they have different results when looking at the 6TiSH world where packets are restricted in size.

Changed milestone "Submit "Authentication and Authorization Solution" specification to the IESG for publication as a Proposed Standard.", set due date to November 2018 from September 2016

The ACE WG meet on Tuesday.

At the meeting presentations were given on all of the existing working group documents and several related documents.

The CWT draft is currently in last call and is expected to progress to the IESG before the end of the year.  The related CWT Proof-of-possession document is thought to be in reasonable state and should be able to go into WGLC before Prague.

The main OAuth Framework document has undergone some heavy edits.  The current goal is to try and have a hackathon event at London and if that works well to revise the document if necessary and then go into WGLC.

Two profile documents where then presented.  One for DTLS and one for OSCORE.  The OSCORE draft has formally been adopted as a working group document.  Both of these documents use the framework and describe how to establish secure connections between the client and resource server.  Both of these documents need the framework document to progress before they can.

A presentation was given on a group joining document to support group multicast security.  The document needs to be harmonized with the PubSub draft before the chairs would look at making it a working group document.

A presentation was given on the use of EST over CoAP, the chairs and AD have decided that the current charter allows for this work and the intention is to issue a WG last call in the next month.

The final item was a discussion of a group communication document for lighting where only symmetric keys are used for security and only group authentication is supported.  Following a long discussion there were several hums taken where the WG indicated that it would be interested in such a document where all elements in the group have the same privilege level.  The chairs and AD are going to meet to determine the path forward.

Changed milestone "Submit "Authentication and Authorization Solution" specification to the IESG for publication as a Proposed Standard.", set due date to September 2016 from May 2016, added draft-ietf-ace-oauth-authz to milestone

Changed milestone "Submit  "An Architecture for Authorization in Constrained Environments" to the IESG for publication as a Informational RFC.", set due date to May 2016 from March 2016, added draft-ietf-ace-actors to milestone, removed draft-gerdes-ace-actors from milestone

Changed milestone "Submit "Authentication and Authorization Solution" specification to the IESG for publication as a Proposed Standard.", set due date to May 2016 from March 2016

Changed milestone "Submit  "An Architecture for Authorization in Constrained Environments" to the IESG for publication as a Informational RFC.", set due date to March 2016 from December 2015

Changed milestone "Submit  "An Architecture for Authorization in Constrained Environments" to the IESG for publication as a Informational RFC.", set state to active from review, accepting new milestone

Changed milestone "Submit "Authentication and Authorization Solution" specification to the IESG for publication as a Proposed Standard.", set due date to March 2016 from July 2015

Changed milestone "Optionally, submit "Use cases and Requirements" document to the IESG for publication as an Informational RFC.", set due date to September 2015 from April 2015, added draft-ietf-ace-usecases to milestone

Changed milestone "Submit "Use cases and Requirements" as a WG item.", set due date to October 2014 from July 2014, resolved as "Done", added draft-ietf-ace-usecases to milestone