It could always turn out that one of the objections is instantly recognized by the entire group as a fatal flaw in "foo" and the group will then turn to a discussion of the merits (and demerits) of "bar" instead.

ADMA

Raven

The device must fetch the Trusted Component Binary in another connection after receiving an Update message

Hence, depending on the freshness mechanism in use, the TAM may need to store data (e.g., a nonce) for some time.

Since the word "key" is mainly used in its other meaning, as a cryptographic key, this specification uses the term "label" for this usage as a map key.

While the TEEP protocol does not require use of EAT, use of EAT is encouraged and Section 4.3

Example 1: Having one SUIT Manifest pointing to a URI of a Trusted Component Binary

when

When an Entity Attestation Token is used

(RFC-editor: upon RFC publication, replace URI above with "https://www.rfc-editor.org/info/rfcXXXX" where XXXX is the RFC number of this document.) It MUST be present if the attestation-payload parameter is present and the format is not an EAT in CWT format with the profile defined below in Section 5.

The TAM SHOULD set an expiration time for each token and MUST ignore any messages with expired tokens. The TAM MUST expire the token value after receiving the first response containing the token value and ignore any subsequent messages that have the same token value.

This is an issue that can be solved by tooling.

Whether to re-use the standardized manifest format that was used during the initial firmware retrieval process or whether it is better to use a different format for the secure boot- specific meta-data depends on the system design.

It is likely that one of the CPUs will be considered a master, and will direct the other CPU to do the upgrade.

Another configuration consists of a similar architecture to the previous, with a single CPU. However, this CPU supports a security partitioning scheme that allows memory (in addition to other things) to be divided into secure and normal mode.

turns

contain

trick phone companies

identity theft

? suit-manifest-mud => SUIT_Digest

To enable this, we add a MUD url to SUIT along with a subject-key identifier, according to [RFC7093], mechanism 4 (the keyIdentifier is composed of the hash of the DER encoding of the SubjectPublicKeyInfo value).

At the time of onboarding, devices report their manifest in use to the MUD manager.

A certificate created for use with network access authentication is typically not signed by the entity that wrote the software and configured the device, which leads to conflation of local network access rights with rights to assert all network access requirements.

unprotected

trust the device to report a correct URL

functionality

IEEE 802.1X whereby the URL to the MUD file would be contained in the certificate used in an EAP method.

than

MAY not be able

A Replicator MAY not offer a Point for every interface available on the system.

another definition of bootstrapping

If these conditions are not met, or if it cannot validate the chain of trust to a known trust anchor, the MUD manager MUST cease processing the MUD file until an administrator has given approval.

o permissive a set of rules in the otherwise-legitimate MUD File. A manufacturer SHOULD employ secure development best practices to take reasonable steps to insure that their devices behave correctly at least up to the point that they are shipped and that their web services follow all BCPs.

The MUD URI is a very visible and important part of MUD that is best done correctly from the start, for once it is embedded in an IoT device,

If a device manufacturer chooses to update a MUD-enabled device's firmware, the manufacturer may update the MUD URI to a new one.

the

From a security standpoint, it is better to have several URIs with more granular security profiles than it is to have a very few URIs with "catch-all" (and thus more open) security profiles.

available

The service which returns the MUD file will not be responsible for any security policy enforcement, as that is the job of the network which contains the devices themselves

(i.e., there is no per-serial-number version of the MUD URI)

IPv6 AD

(the switch to which the bulb in connected, for example)

If that request has a MUD URI in it, equipment in the network (not necessarily the DHCP server) can use that URI to retrieve the device's MUD file from the MUD file server.

retrieval