Subject: Re: [Secdispatch] EDHOC Summary

From: John Mattsson <[email-masked]>
Date: Tue, 9 Apr 2019 15:42:41 +0000

Cool, I once worked at a nuclear power plant for a short period. ALARA is an excellent term that definitely makes sense in many Constrained-Node Networks, I think you should consider adding it to RFC7228bis.

The term ALARP (As Low As Reasonably Possible) is a similar very commonly used law and engineering term for all type of risk management, not only nuclear.

But for LPWAN over LoRaWan and 6TiSCH, the current requirement regarding message sizes are very concrete.

John

Carsten Bormann <[email-masked]> wrote:

Or 18.5 mbit/s (yes, millibits).

Millibit networks is one of the scenarios where ALARA(*) as a design objective does make sense — there is no hard design limit, but actual security will need to compete with less security, and ALARA helps actual security stay competitive.

Grüße, Carsten

(*) ALARA: “As low as reasonably achievable", a term stolen from nuclear engineering.