Re: [Ace] Comments on draft-ietf-ace-mqtt-tls-profile

2019-05-22 Thread Ludwig Seitz
On 22/05/2019 23:58, Jim Schaad wrote: 5. Is there an intention to provide a "standard" format for the scope field or just to leave it as ad hoc? I would be very much in favor of this, or at least provide guidelines to avoid adding to this: https://www.brandur.org/oauth-scope /Ludwig

Re: [Ace] draft-ietf-ace-mqtt-tls-profile connections

2019-05-22 Thread Ludwig Seitz
On 21/05/2019 22:35, Cigdem Sengul wrote: Thank you for your comments.  I see that we tried to cover too many options in the draft, and things got mixed up.I tried to clarify inline. * So as a client I get a token from the AS.  For the first run, assume that it has a RPK in it.

[Ace] Comments on draft-ietf-ace-mqtt-tls-profile

2019-05-22 Thread Jim Schaad
Thanks for the updates from my last message. This has helped quite a bit. 1. A discussion of the use of raw public keys rather than certificates for the server may be in order. This can refer to the same RPK issues from the current DTLS document. It may also be that this just uses normal certi