Subject: [Rats] RIV and the RATS architecture

From: Guy Fedorkow <[email-masked]>
Date: Thu, 31 Oct 2019 19:26:55 +0000

Hi Dave,
  Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-architecture-00.
  Do you have a view as to how the TPM-based attestation described in RIV would fit with the proposed categorization?
https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-00

  It doesn't seem to be a passport, since the attester only provides raw evidence, not a pre-approved passport
  It doesn't seem to be a background check, as it's the verifier that collects and analyzes the evidence.

  I'm not sure it matters to RIV, as we haven't drawn much distinction between the relying party and the verifier...  As you say, if they're on the same machine, the distinction is almost moot.  And if they're not, I think the communication is out of scope for RIV (if not for RATS).  But it would be good ensure the architecture and the applications of it actually do fit together...

  Thanks
/guy

Juniper Business Use Only