[saag] Re: Interests on Initiating the standardization work related to "Zero Trust"

Hi Aijun,

I attended side meeting at 123 and gave some feedback. Could you please 
update me what you did with my feedback? Reading both of your drafts, it 
seems to have been unaddressed.

Are you aware of SEAT WG [0]? What exactly is the protocol work in your 
proposal beyond the scope of SEAT? Reading Sec. 5.3 
of draft-liu-saag-zt-problem-statement, it is unclear to me which of 
your requirements cannot be met by the protocol specified in [1*] or at 
least why it cannot be used as a basis?

Additionally, do you have a real use case that is not covered in [2*]? 
"dynamic security deployment​ in cloud-network​ environments" mentioned 
by Xuan in the thread is already in [2*]. Telecom network environment in 
draft-si-saag-zerotrust-promblem seems the same as we have in [2*]. We 
also have AI agent use case (mentioned in 
draft-liu-saag-zt-problem-statement) in [2*].

I believe there is no need to create a new list until the above 
questions are precisely clarified.

I agree with Richard that Zero Trust is basically a marketing term and 
trying to define marketing terms is not a good use of IETF time. To 
support this claim, confidential computing is often presented as "Zero 
Trust" and we showed [3] that there is HUGE trust base that you still 
have to trust in these technologies (e.g., Arm CCA and Intel TDX).

-Usama

[0] https://datatracker.ietf.org/wg/seat/about/

[1] 
https://tls-attestation.github.io/use-cases-and-properties/draft-mihalcea-seat-use-cases.html

[2] 
https://tls-attestation.github.io/exported-attestation/draft-fossati-seat-expat.html

[3] 
https://www.researchgate.net/publication/375592777_Formal_Specification_and_Verification_of_Architecturally-defined_Attestation_Mechanisms_in_Arm_CCA_and_Intel_TDX

* Apologies for mentioning the editors' drafts. We will roll out the 
updates in the corresponding drafts early next year.

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]