diff --git a/draft-lenders-core-dnr.html b/draft-lenders-core-dnr.html index 960ab56..5cc38a1 100644 --- a/draft-lenders-core-dnr.html +++ b/draft-lenders-core-dnr.html @@ -1036,7 +1036,7 @@
Object Security: Application-layer based object encryption within CoAP based on OSCORE -[RFC8613]. OSCORE can be either used as an alternative or in addition to transport security. -EDHOC [I-D.ietf-core-oscore-edhoc] is used to establish the encryption context between two hosts and OSCORE-ACE -[citation?] can be used for authentication of a server.¶
+[RFC8613]. OSCORE can be either used as an alternative or in addition to transport security.¶ ++OSCORE keys are not usable indefinitely and need to be set up, +for example through an EDHOC key exchange [I-D.ietf-core-oscore-edhoc], +which may use credentials from trusted authorization server (AS) +as described in the ACE EDHOC profile [I-D.ietf-ace-edhoc-oscore-profile]. +As an alternative to EDHOC, +keys can be set up by such an AS as described in the ACE OSCORE profile [RFC9203].¶