Subject: [EAT] Welcome to the EAT mailing list

From: Laurence Lundblade <[email-masked]>
Date: Thu, 24 May 2018 16:43:52 +0000

Welcome to the Entity Attestation Token (EAT) mailing list. We've got an individual draft submitted (draft-mandyam-eat) that outlines the proposal, and we're hoping to gauge interest here for a BoF meeting in Montreal.

Eat Purpose: 

An Entity Attestation Token (EAT) is a signed list of claims about an entity created by the entity and sent from entity to a server or service. The definition of entity is intentionally broad and includes devices like a mobile phone, an IoT device, a WiFi router and other. The claims that might be made about the device are also relatively broad. The COSE signing format is used to accommodate many signing algorithms to be able to cover a wide range of devices. The server receiving the EAT will typically use it to decide if it trusts the entity in general or if it is willing to process a particular transaction originating from the device.

List discussion:

- General concept of a common / general purpose attestation token format for device, entities, nodes
- Use cases 
- Use of CBOR to represent claims
- Use of COSE to identify algorithms, key IDs, signed data
- Need to support a broad array of signing schemes and keys (e.g. EPID, IEEE IDevID…) 
- Claims (but note that all claims are to be optional)

LL