anima-wg / anima-brski-prm

ANIMA BRSKI Pledge in Responder Mode

anima-wg/anima-brski-prm Issues

"domain/site" terminology definition and consistent usage
Closed 8 months ago5
discovery of registrar with BRSKI-PRM function set
Closed 8 months ago15
"elaborate on the 5 verification steps"
Closed 8 months ago18
product-serial-number for discovery
Closed 8 months ago9
Need to add IANA registration for brski-pledge
Closed 9 months ago2
Security Considerations - Misuse of Registrar-Agent Credentials
Closed 9 months ago7
Security Considerations - nonce explanation
Closed 9 months ago6
"registrar-agent signatures" check consistent use
Closed 9 months ago5
Inconsistency in the description of assertion level of "agent-proximity"
Closed a year ago3
Clarify option to use alternative voucher formats besides JSON-in-JWS
Closed a year ago1
Clarify how MASA determines "pinned-domain-cert" for Voucher issuance
Closed a year ago1
mDNS and discovery of many nodes
Closed a year ago4
Include text related to TLS library issues
Closed a year ago11
Privacy Considerations - complete?
Closed a year ago1
Concept of second signature on voucher
Closed a year ago2
use of www.example.com in pledge URL
Closed a year ago3
we lost the agent-signed-data
Closed a year ago4
CDDL usage
Closed a year ago3
"raises the question why we're not using https between pledge and registrar-agent" - in Privacy Considerations
Closed a year ago1
status reply for "factory-default"
Closed a year ago2
"Figure 22: Example of pledge-status response" - example text
Closed a year ago2
"pledge-status response" - handling
Closed a year ago2
replicated text from RFC8995 for status information?
Closed a year ago2
"Pledge-Status - Trigger" - Naming
Closed a year ago2
certificate revokation by registrar, in case of failure
Closed a year ago2
"6.3.4. Pledge: Enrollment Response Processing"
Closed a year ago2
"6.3.3. Pledge: Wrapped-CA-Certificate(s) Processing" - rewrite
Closed a year ago2
interruption in the process to supply resp. objects - how does it restart ?
Closed a year ago2
"Representation of pledge enroll status telemetry" add negative example
Closed a year ago2
pledge voucher status telemetry - excerpt of a useful error message
Closed a year ago3
use of registrar endpoints for responder vs. initiator mode
Closed a year ago4
wrong order or miswritten verification steps?
Closed a year ago3
misleading: "voucher [RFC8366] and the certificate [RFC5280]."
Closed a year ago1
Figure 14: "supply CA certificates" versus "supply CAcerts (optional)"
Closed a year ago3
"optionally CA certificates." - explanation
Closed a year ago2
special meaning for possession
Closed a year ago2
nonceless voucher acceptance
Closed a year ago2
PER processing errors
Closed a year ago4
Necessity for new registrar enrollment endpoint
Closed a year ago2
Naming: agent-proximty vs. agent-invited (or similar)
Closed a year ago3
IDevID certificate chain in PVR
Closed a year ago3
Available information on registrar-agent
Closed a year ago5
pledge/registrar recognition based on credential
Closed a year ago1
Clarify re-enrollment support in BRSKI-PRM
Closed a year ago4
Additional text to explain usage of agent-signed data
Closed a year ago3
pledge discovery using GRASP?
Closed a year ago14
Clarification of YANG A/B/C/D experiment
Closed a year ago1
what is the threat for registrar-agent mis-use
Closed 2 years ago4
misuse of mDNS (9.4)
Closed 2 years ago3
pledge-status responses are cumullative right?
Closed 2 years ago2