search

core-wg / oscore-key-update

Other
0 stars 0 forks source link

Considerations on "active rekeying" #73

Closed rikard-sics closed 1 year ago

rikard-sics commented 1 year ago

Make it clear that peers can do "active rekeying" and trigger KUDOS whenever they want.

It can be about the peer using the OSCORE Security Context to send a request and at that point noticing it has expired, or reached the key usage limits. But it can also be that a peer has a separate thread monitoring the state of its contexts and automatically triggers a rekeying when needed (or using a callback method called on expiration/reaching the limits)

rikard-sics commented 1 year ago

(Based on feedback from Rafa Marin-Lopez)