Draft: draft-ietf-rats-architecture

Commentary: harmonized phrasing in the terminology section -roles are finally roles and changed Terminology item format 
 This sentence : creates a bit of cognitive dissonance . In the Terminology section , the Endorser , Ref - val Provider , RP Owner and Verifier Owner are defined as " entities " , however , they do n't include any of the roles ( Verifier , RP , Attester ) . 
 That is a weirdly persistent bug that we have to squash once and for all . Attester ,  ,  , RVP , RP , RP Owner , and   are all roles . Roles are instantiated by entities , which is the term we now use under the premisethat the well - established and understood term principal is to hard to understand for a reader ( sry , got a bit rant'y here ) . I think I all the changes that fixes this issue to a PR that was abandoned at the end . It seems we missed to rescue my corresponding changes from that PR , though . Can anybody provide a pointer to these changes ? Otherwise we have to dig that up in the next meeting .
Paragraph (version A):
A role performed by an entity (typically a device) whose Evidence
must be appraised in order to infer the extent to which the
Attester is considered trustworthy, such as when deciding whether
it is authorized to perform some operation.  Produces: Evidence.
Paragraph (version A):
A role performed by an entity that depends on the validity of
information about an Attester, for purposes of reliably applying
application specific actions.  Compare /relying party/ in RFC4949.
Consumes: Attestation Results.
Paragraph (version A):
A role performed by an entity that appraises the validity of
Evidence about an Attester and produces Attestation Results to be
used by a Relying Party.  Consumes: Evidence, Reference Values,
Endorsements, Appraisal Policy for Evidence; Produces: Attestation
Results.
Paragraph (version A):
An entity (typically an administrator), that is authorized to
configure Appraisal Policy for Attestation Results in a Relying
Party.  Produces: Appraisal Policy for Attestation Results.
Paragraph (version A):
An entity (typically an administrator), that is authorized to
configure Appraisal Policy for Evidence in a Verifier.  Produces:
Appraisal Policy for Evidence.
Paragraph (version A):
An entity (typically a manufacturer) whose Endorsements help
Verifiers appraise the authenticity of Evidence.  Produces:
Endorsements.
Paragraph (version A):
An entity (typically a manufacturer) whose Reference Values help
Verifiers appraise Evidence to determine if acceptable known
claims have been recorded by the Attester.  Produces: Reference
Values.
Paragraph (version A):
A piece of asserted information, often in the form of a name/value
pair.  Claims make up the usual structure of Evidence.  Compare
/claim/ in RFC7519.
Paragraph (version A):
A secure statement that an Endorser vouches for the integrity of
an Attester's various capabilities such as Claims collection and
Evidence signing Used By: Verifier; Produced By: Endorser.
Paragraph (version A):
A set of Claims generated by an Attester to be appraised by a
Verifier.  Evidence may include configuration data, measurements,
telemetry, or inferences.  Used By: Verifier; Produced By:
Attester.
Paragraph (version A):
The output generated by a Verifier, typically including
information about an Attester, where the Verifier vouches for the
validity of the results.  Used By: Relying Party; Produced By:
Verifier.
Paragraph (version A):
A set of rules that informs how a Verifier evaluates the validity
of information about an Attester.  Compare /security policy/ in
RFC4949.  Used by: Verifier; Produced by: Verifier Owner.
Paragraph (version A):
A set of rules that direct how a Relying Party uses the
Attestation Results regarding an Attester generated by the
Verifiers.  Compare /security policy/ in RFC4949.  Used by:
Relying Party; Produced by: Relying Party Owner.
Paragraph (version B):
A role performed by an entity (typically a device) whose Evidence
must be appraised in order to infer the extent to which the
Attester is considered trustworthy, such as when deciding whether
it is authorized to perform some operation.
Paragraph (version B):
A role performed by an entity that depends on the validity of
information about an Attester, for purposes of reliably applying
application specific actions.  Compare /relying party/ in RFC4949.
Paragraph (version B):
A role performed by an entity that appraises the validity of
Evidence about an Attester and produces Attestation Results to be
used by a Relying Party.
Paragraph (version B):
A role performed by an entity (typically an administrator), that
is authorized to configure Appraisal Policy for Attestation
Results in a Relying Party.
Paragraph (version B):
A role performed by an entity (typically an administrator), that
is authorized to configure Appraisal Policy for Evidence in a
Verifier.
Paragraph (version B):
A role performed by an entity (typically a manufacturer) whose
Endorsements help Verifiers appraise the authenticity of Evidence.
Paragraph (version B):
A role performed by an entity (typically a manufacturer) whose
Reference Values help Verifiers appraise Evidence to determine if
acceptable known Claims have been recorded by the Attester.
Paragraph (version B):
A piece of asserted information, often in the form of a name/value
pair.  Claims make up the usual structure of Evidence and other
RATS artifacts.  Compare /claim/ in RFC7519.
Paragraph (version B):
A secure statement that an Endorser vouches for the integrity of
an Attester's various capabilities such as Claims collection and
Evidence signing.
Paragraph (version B):
A set of Claims generated by an Attester to be appraised by a
Verifier.  Evidence may include configuration data, measurements,
telemetry, or inferences.
Paragraph (version B):
The output generated by a Verifier, typically including
information about an Attester, where the Verifier vouches for the
validity of the results.
Paragraph (version B):
A set of rules that informs how a Verifier evaluates the validity
of information about an Attester.  Compare /security policy/ in
RFC4949.
Paragraph (version B):
A set of rules that direct how a Relying Party uses the
Attestation Results regarding an Attester generated by the
Verifiers.  Compare /security policy/ in RFC4949.
Paragraph (version A):
A set of values against which values of Claims can be compared as
part of applying an Appraisal Policy for Evidence.  Reference
Values are sometimes referred to in other documents as known-good
values, golden measurements, or nominal values, although those
terms typically assume comparison for equality, whereas here
Reference Values might be more general and be used in any sort of
comparison.  Used By: Verifier; Produced By: Reference Value
Provider.
Paragraph (version B):
A set of values against which values of Claims can be compared as
part of applying an Appraisal Policy for Evidence.  Reference
Values are sometimes referred to in other documents as known-good
values, golden measurements, or nominal values, although those
terms typically assume comparison for equality, whereas here
Reference Values might be more general and be used in any sort of
comparison.