[IPP] Updated draft of IPP Job Save Password posted for review

[Kennedy, Smith (Wireless & Standards Architec)]

Hi Mike,

I know everybody hates it when I do this but I've edited the March 11 draft to hopefully resolve most of the issues raised. New draft and -rev copies to the last two revisions here:

https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313.pdf <https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313.pdf> 
https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313.odt <https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313.odt> 
https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180311.pdf <https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180311.pdf> 
https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180311.odt <https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180311.odt> 
https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180205.pdf <https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180205.pdf> 
https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180205.odt <https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180313-rev-20180205.odt> 

Whenever we review this, this most recent update will hopefully let us focus on the unresolved issues:

> - Section 4.1.6 (and this is probably an errata for IPP Scan and IPP INFRA as well): access-x509-certificate is insufficient by itself for authentication - you need the private key as well to do the signing (to prove that you "own" the certificate...) Probably need to say that the printer obtains the signing key through an out-of-band means.
> 
> Overall I think the draft is shaping up, although my gut says we still need to frame/document the scope and usage a little more - right now I can see how this would provide credentials for the save process but not how it requires those credentials for the reprint use case.

Isn't that a printer implementation question if the credential is acquired out of band of IPP? HP historically hasn't been interested in that use case but I can imagine that might be a factor in complex printing topologies, where the output device and the Printer object don't reside on the same device.

Smith

/**
    Smith Kennedy
    Wireless & Standards Architect - IPG-PPS
    Standards - IEEE ISTO PWG / Bluetooth SIG / Wi-Fi Alliance / NFC Forum / USB-IF
    Chair, IEEE ISTO Printer Working Group
    HP Inc.
*/



> On Mar 12, 2018, at 7:48 AM, Michael Sweet <msweet at apple.com> wrote:
> 
> Smith,
> 
> Some quick feedback after looking at the new draft:
> 
> - Abstract: The wording here seems a little redundantly redundant. :)
> 
> - Sections 4.1.3 and 4.1.5: RFC updates - 7616 for Digest and 7617 for Basic.
> 
> - Section 4.1.6 (and this is probably an errata for IPP Scan and IPP INFRA as well): access-x509-certificate is insufficient by itself for authentication - you need the private key as well to do the signing (to prove that you "own" the certificate...) Probably need to say that the printer obtains the signing key through an out-of-band means.
> 
> - Section 5.1: Not sure how to use this attribute; we don't have its equivalent for IPP Scan or INFRA.
> 
> - I think we'll need to add an Additional Semantics section to briefly say that job-save-accesses gets copied to the Job Object but not returned as a Job attribute.
> 
> - Section 16: Should say more about protecting the values of job-save-accesses in transit and at rest.
> 
> Overall I think the draft is shaping up, although my gut says we still need to frame/document the scope and usage a little more - right now I can see how this would provide credentials for the save process but not how it requires those credentials for the reprint use case.
> 
> 
>> On Mar 11, 2018, at 11:24 PM, Kennedy, Smith (Wireless & Standards Architec) <smith.kennedy at hp.com> wrote:
>> 
>> Greetings,
>> 
>> I have just posted a new draft of IPP Job Save Password:
>> 
>>  https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180311.pdf
>>  https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180311.odt
>>  https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180311-rev.pdf
>>  https://ftp.pwg.org/pub/pwg/ipp/whitepaper/tb-savepassword-20180311-rev.odt
>> 
>> This draft refactors the proposed attributes as per the discussion back in December 2017 and that we further briefly discussed at the February 2018 F2F.
>> 
>> Cheers,
>> 
>> Smith
>> 
>> /**
>>   Smith Kennedy
>>   Wireless & Standards Architect - IPG-PPS
>>   Standards - IEEE ISTO PWG / Bluetooth SIG / Wi-Fi Alliance / NFC Forum / USB-IF
>>   Chair, IEEE ISTO Printer Working Group
>>   HP Inc.
>> */
>> 
>> 
>> 
>> _______________________________________________
>> ipp mailing list
>> ipp at pwg.org
>> https://www.pwg.org/mailman/listinfo/ipp
> 
> _________________________________________________________
> Michael Sweet, Senior Printing System Engineer
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pwg.org/pipermail/ipp/attachments/20180314/e58be0e7/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4241 bytes
Desc: not available
URL: <http://www.pwg.org/pipermail/ipp/attachments/20180314/e58be0e7/attachment.p7s>