search

ietf-teep / architecture

TEEP architecture draft
5 stars 9 forks source link

Indicate the possibility to terminate TLS in the TEE #222

Closed hannestschofenig closed 2 years ago

hannestschofenig commented 3 years ago

6.2. TEEP Broker Implementation Consideration

[...]

> Model: A B C ... > > TEE TEE TEE > +----------------+ | | | > | TEEP | Agent | | | Agent > | implementation | | | | > +----------------+ v | | > | | | > +----------------+ ^ | | > | TEEP/HTTP | Broker | | | > | implementation | | | | > +----------------+ | v | > | | | > +----------------+ | ^ | > | HTTP | | | | > | implementation | | | | > +----------------+ | | v > | | | > +----------------+ | | ^ > | TCP or QUIC | | | | Broker > | implementation | | | | > +----------------+ | | | > REE REE REE > > Figure 5: TEEP Broker Models I am wondering if TLS could be included into the TEE. It is correct that I do not envision TCP being in the TEE. [Hannes] This can be done and is done regularly. I think we should update the figure to include this option since it is very common.
dthaler commented 3 years ago

It's model C. Simplest change would be to change "HTTP" to "HTTP(S)". Also keep in mind that these are just examples.

dthaler commented 3 years ago

Fixed in draft -15