Skip to content

Commit 4c1e6ef

Browse files
committed
feat: fixed some capitalization of terminology
1 parent 6a2d005 commit 4c1e6ef

1 file changed

Lines changed: 11 additions & 7 deletions

File tree

draft-ietf-anima-rfc8366bis.md

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -177,8 +177,8 @@ Since {{RFC8366}} was written, the pattern is to publish YANG modules as two doc
177177
This allows the YANG module to be updated without replacing all of the context.
178178
This document does not follow that pattern, but future updates may update only the YANG.
179179

180-
This document also introduces an experimental mechanism to support future extensions without requiring the YANG module to be replaced.
181-
This includes both new IETF Standard mechanisms, as well as a facility for manufacturer private extensions.
180+
This document introduces a mechanism to support future extensions without requiring the YANG module to be replaced.
181+
This includes both a new IETF standard mechanism for extensions modeled after the mechanism present in {{?RFC8520}}, as well as a facility for manufacturer private extensions.
182182

183183
The lifetimes of vouchers may vary.
184184
In some onboarding protocols, the vouchers may include a nonce restricting them to a single use, whereas the vouchers in other onboarding protocols may have an
@@ -190,7 +190,8 @@ this document include: {{ZERO-TOUCH}}, {{SECUREJOIN}}, {{BRSKI}} and {{cBRSKI}}.
190190

191191
# Terminology
192192

193-
This document uses the following terms:
193+
This document uses and defines the following terms.
194+
They are used in this document and related documents.
194195

195196
(Voucher) Artifact:
196197
: Used throughout to represent the voucher as instantiated in the form
@@ -200,12 +201,14 @@ Bootstrapping:
200201
: The process where a Pledge obtains cryptographic key material to identify
201202
and trust future interactions within a specific domain network. Based on imprinted
202203
key material provided during the manufacturing process (see: Imprint).
204+
This term was used in {{RFC8366}}, but has been supplanted by the term Onboarding.
203205

204206
Domain:
205207
: The set of entities or infrastructure under common administrative
206208
control.
207209
The goal of the onboarding protocol is to enable a Pledge to
208210
join a domain and obtain domain specific security credentials.
211+
This term is not related to the similiar DNS term.
209212

210213
Imprint:
211214
: The process where a device obtains the cryptographic key material to
@@ -241,8 +244,9 @@ Malicious Registrar:
241244
Onboarding:
242245
: Onboarding describes the process to provide necessary operational data to a Pledge
243246
and to complete the process of bringing the Pledge into an operational state.
244-
This data may be configuration data, or also application-specific cryptographic
247+
This data may include configuration data, but specifically deals with application-specific cryptographic
245248
key material (application-specific security credentials).
249+
Since {{RFC8366}}, this term has replaced the term Bootstrapping.
246250

247251
Owner:
248252
: The entity that controls the private key of the trust anchor conveyed by the voucher.
@@ -255,7 +259,7 @@ Pledge:
255259
manufacturer.
256260

257261
Registrar:
258-
: See join registrar.
262+
: See Join Registrar. This term is not related to term DNS Registrar {{?RFC9499}}.
259263

260264
TOFU (Trust on First Use):
261265
: When a Pledge makes no security decisions but rather simply
@@ -295,7 +299,7 @@ domain. The specific information a voucher provides is influenced by the
295299
onboarding use case.
296300

297301
The voucher can convey the following information to
298-
the join registrar and Pledge:
302+
the Join Registrar and Pledge:
299303

300304
Assertion Basis:
301305
: Indicates the method that protects
@@ -375,7 +379,7 @@ Ownership Audit Voucher:
375379
Ownership ID Voucher:
376380
: Named after inclusion of the Pledge's CN-ID or DNS-ID within the
377381
voucher. The MASA service mitigates a MiTM registrar by identifying
378-
the specific registrar (via WebPKI) authorized to own the Pledge.
382+
the specific Registrar (via WebPKI) authorized to own the Pledge.
379383

380384
Bearer Voucher:
381385
: A Bearer Voucher is named after the inclusion of a registrar ID

0 commit comments

Comments
 (0)