diff --git a/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.html b/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.html index df61b86..110ec66 100644 --- a/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.html +++ b/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.html @@ -2476,7 +2476,7 @@

When receiving the authentication credential of a Client in the 'client_cred' parameter of a Join Request (see Section 4.3.1.1) or of an Authentication Credential Update Request (see Section 4.9.1.1), the KDC is not expected to check that the authentication credential indicates the role(s) that the Client can have or has in the group in question. When preparing a Join Response, the KDC can decide about including or not the 'peer_roles' parameter depending on the specific set of authentication credentials specified in the 'creds' parameter of that Join Response.

  • -

    'peer_identifiers', MUST be present if 'creds' is also present, otherwise it MUST NOT be present. This parameter is a CBOR array of n elements, with n the number of authentication credentials included in the 'creds' parameter (at most the number of members in the group). The i-th element of the array specifies the node identifier that the group member associated with the i-th authentication credential in 'creds' has in the group. In particular, the i-th array element is encoded as a CBOR byte string, with value the node identifier of the group member.

    +

    'peer_identifiers', MUST be present if 'creds' is also present, otherwise it MUST NOT be present. This parameter is a CBOR array of n elements, with n the number of authentication credentials included in the 'creds' parameter (at most the number of members in the group). The i-th element of the array specifies the node identifier that the group member associated with the i-th authentication credential in 'creds' has in the group. In particular, the i-th array element is encoded as a CBOR byte string, with value the node identifier of the group member. The specific format of node identifiers of group members is specified by the application profile (REQ25).

  • 'group_policies', with value a CBOR map, whose entries specify how the group handles specific management aspects. These include, for instance, approaches to achieve synchronization of sequence numbers among group members. The elements of this field are registered in the "ACE Groupcomm Policies" registry. This specification defines the three elements "Sequence Number Synchronization Methods", "Key Update Check Interval", and "Expiration Delta", which are summarized in Figure 12. Application profiles that build on this document MUST specify the exact content format and default value of included map entries (REQ20).

    @@ -4684,7 +4684,7 @@

    REQ24: Specify how the communication is secured between Client and KDC. Optionally, specify transport profile of ACE [RFC9200] to use between Client and KDC (see Section 4.3.1.1).

  • -

    REQ25: Specify the format of the identifiers of group members (see Section 4.3.1).

    +

    REQ25: Specify the format of the identifiers of group members (see Section 4.3.1 and Section 4.4.1).

  • REQ26: Specify policies at the KDC to handle ids that are not included in 'get_creds' (see Section 4.4.1).

    diff --git a/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.txt b/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.txt index 7a239de..27b9690 100644 --- a/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.txt +++ b/zaheduzzaman-sarker-review/draft-ietf-ace-key-groupcomm.txt @@ -1761,7 +1761,9 @@ Table of Contents identifier that the group member associated with the i-th authentication credential in 'creds' has in the group. In particular, the i-th array element is encoded as a CBOR byte - string, with value the node identifier of the group member. + string, with value the node identifier of the group member. The + specific format of node identifiers of group members is specified + by the application profile (REQ25). * 'group_policies', with value a CBOR map, whose entries specify how the group handles specific management aspects. These include, for @@ -4811,7 +4813,7 @@ A.1. Mandatory-to-Address Requirements use between Client and KDC (see Section 4.3.1.1). * REQ25: Specify the format of the identifiers of group members (see - Section 4.3.1). + Section 4.3.1 and Section 4.4.1). * REQ26: Specify policies at the KDC to handle ids that are not included in 'get_creds' (see Section 4.4.1).