Pfizer ® 80% OFF

From krb-wg-archive@lists.ietf.org Tue Dec 1 07:06:18 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0E9613A67E2 for ; Tue, 1 Dec 2009 07:06:18 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -13.487 X-Spam-Level: X-Spam-Status: No, score=-13.487 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qh0WgkbSZnP6 for ; Tue, 1 Dec 2009 07:06:11 -0800 (PST) Received: from 201-67-175-235.fnsce704.dsl.brasiltelecom.net.br (201-67-175-235.fnsce704.dsl.brasiltelecom.net.br [201.67.175.235]) by core3.amsl.com (Postfix) with ESMTP id ACF213A6783 for ; Tue, 1 Dec 2009 07:06:04 -0800 (PST) From: Pfizer � Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091201150606.ACF213A6783@core3.amsl.com> Date: Tue, 1 Dec 2009 07:06:04 -0800 (PST) Pfizer ® 80% OFF

If you cannot see the images, please click here

About us Unsubscribe Forward Privacy

(c) 2001-2009 Eciz Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Tue Dec 1 08:44:02 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D21B33A67A1 for ; Tue, 1 Dec 2009 08:44:02 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Tue, 1 Dec 2009 08:43:56 -0800 (PST) Received: from pra23-b141.adsl.dial-up.cz (pra23-b141.adsl.dial-up.cz [193.179.169.141]) by core3.amsl.com (Postfix) with ESMTP id 6C2EB3A63EB for ; Tue, 1 Dec 2009 08:43:55 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091201164355.6C2EB3A63EB@core3.amsl.com> Date: Tue, 1 Dec 2009 08:43:55 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Yuwjli Inc., All rights reserved.

From ietf-krb-wg-bounces@lists.anl.gov Tue Dec 1 13:26:10 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E19A728C130 for ; Tue, 1 Dec 2009 13:26:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.462 X-Spam-Level: X-Spam-Status: No, score=-4.462 tagged_above=-999 required=5 tests=[AWL=2.137, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JlnG0ik0v5CB for ; Tue, 1 Dec 2009 13:26:09 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 376243A67D9 for ; Tue, 1 Dec 2009 13:26:09 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 910109C; Tue, 1 Dec 2009 15:26:01 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id D688794; Tue, 1 Dec 2009 15:25:58 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id D4ED080E38; Tue, 1 Dec 2009 15:25:57 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 9DDC680E34 for ; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 975EC91; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 8E4EC81 for ; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 866A88C for ; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 6E0F07CC084; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02344-02-7; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 91D317CC086 for ; Tue, 1 Dec 2009 15:25:54 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvkAAC8ZFUuAAtnEmWdsb2JhbACbdwEBAQEBCAsKBxOtU4YxiE2CL4ICBA X-IronPort-AV: E=Sophos;i="4.47,322,1257141600"; d="scan'208";a="34263673" Received: from smtp01.srv.cs.cmu.edu ([128.2.217.196]) by mailgateway.anl.gov with ESMTP; 01 Dec 2009 15:25:47 -0600 Received: from ATLANTIS.WV.CS.CMU.EDU (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nB1LPl82012876 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 1 Dec 2009 16:25:47 -0500 (EST) Date: Tue, 01 Dec 2009 16:25:47 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] Publication Request: draft-ietf-krb-wg-preauth-framework-15.txt (fwd) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov ------------ Forwarded Message ------------ Date: Tuesday, December 01, 2009 04:24:57 PM -0500 From: Jeffrey Hutzelman To: tim.polk@nist.gov Cc: jhutz@cmu.edu, iesg-secretary@ietf.org Subject: Publication Request: draft-ietf-krb-wg-preauth-framework-15.txt This is a request to the IESG to approve publication of "A Generalized Framework for Kerberos Pre-Authentication", draft-ietf-krb-wg-preauth-framework-15.txt, as a Standards-Track RFC. This document is a product of the Kerberos Working Group. (1.a) Who is the Document Shepherd for this document? Has the Document Shepherd personally reviewed this version of the document and, in particular, does he or she believe this version is ready for forwarding to the IESG for publication? >> The Document Shepherd for this document is Jeffrey Hutzelman, >> . I have reviewed this document, and I believe >> it is ready for IETF-wide review and publication as a >> Proposed Standard. (1.b) Has the document had adequate review both from key WG members and from key non-WG members? Does the Document Shepherd have any concerns about the depth or breadth of the reviews that have been performed? >> This document has received review both within the working group >> and from key experts outside the working group. Any issues raised >> have been resolved. (1.c) Does the Document Shepherd have concerns that the document needs more review from a particular or broader perspective, e.g., security, operational complexity, someone familiar with AAA, internationalization or XML? >> I don't believe any particular outside review is required. >> Of course, more review is always welcome. (1.d) Does the Document Shepherd have any specific concerns or issues with this document that the Responsible Area Director and/or the IESG should be aware of? For example, perhaps he or she is uncomfortable with certain parts of the document, or has concerns whether there really is a need for it. In any event, if the WG has discussed those issues and has indicated that it still wishes to advance the document, detail those concerns here. Has an IPR disclosure related to this document been filed? If so, please include a reference to the disclosure and summarize the WG discussion and conclusion on this issue. >> I have no concerns. >> No IPR disclosures related to this document have been filed. (1.e) How solid is the WG consensus behind this document? Does it represent the strong concurrence of a few individuals, with others being silent, or does the WG as a whole understand and agree with it? >> There is concensus within the working group to publish this >> document on the standards track. I believe there is strong >> consensus for the preauthentication model and framework >> described in this document. >> >> The FAST mechanism described in section 6.4 is conceptually >> separable from the rest of the document, and so I discuss >> it separately here. There is consensus in the working group >> to publish this mechanism, and on the details of its design, >> at least among those who have contributed to or reviewed it. >> There is a somewhat rougher consensus to place this mechanism >> on the standards track and to require its implementation by >> Kerberos implementations conforming to the preauth framework. >> >> It is worth noting that a partial overlap exists between the >> functionality of the FAST mechanism, which provides an encrypted >> tunnel to protect exchange of preauthentication data between >> a client and KDC, and that of the Kerberos STARTTLS extension, >> draft-josefsson-kerberos5-starttls-07.txt, which is also a >> document of this working group. (1.f) Has anyone threatened an appeal or otherwise indicated extreme discontent? If so, please summarise the areas of conflict in separate email messages to the Responsible Area Director. (It should be in a separate email because this questionnaire is entered into the ID Tracker.) >> There have been no expressions of discontent. (1.g) Has the Document Shepherd personally verified that the document satisfies all ID nits? (See http://www.ietf.org/ID-Checklist.html and http://tools.ietf.org/tools/idnits/). Boilerplate checks are not enough; this check needs to be thorough. Has the document met all formal review criteria it needs to, such as the MIB Doctor, media type and URI type reviews? >> This document has been run through the idnits tool, and was >> reviewed manually for compliance with requirements not checked >> by the automatic tool. No additional formal review criteria >> apply to this document. >> >> In addition to RFC2119 requirements language, this document >> contains numerous uses of lowercase "may", "should", and >> "required", which are not intended to carry the RFC2119 >> meanings of the uppercase terms. These are used in contexts >> where requirements language is neither intended or appropriate, >> such as advice to the reader or to future pre-authentication >> mechanism designers, when discussing scenarios which provide >> background for a design decision or requirement, or when >> discussion potential constraints imposed by policy rather >> than by the protocol. (1.h) Has the document split its references into normative and informative? Are there normative references to documents that are not ready for advancement or are otherwise in an unclear state? If such normative references exist, what is the strategy for their completion? Are there normative references that are downward references, as described in [RFC3967]? If so, list these downward references to support the Area Director in the Last Call procedure for them [RFC3967]. >> References have been split appropriately. >> This document contains a normative reference to >> draft-ietf-krb-wg-anon, which is awaiting a new WGLC (1.i) Has the Document Shepherd verified that the document IANA consideration section exists and is consistent with the body of the document? If the document specifies protocol extensions, are reservations requested in appropriate IANA registries? Are the IANA registries clearly identified? If the document creates a new registry, does it define the proposed initial contents of the registry and an allocation procedure for future registrations? Does it suggest a reasonable name for the new registry? See [RFC2434]. If the document describes an Expert Review process has Shepherd conferred with the Responsible Area Director so that the IESG can appoint the needed Expert during the IESG Evaluation? >> This document creates three new registries, for Kerberos >> preauthentication and typed-data types, for FAST armor types, >> and for FAST options. The first creates an IANA registry >> for a namespace previously managed directly by the Kerberos >> working group; the others are new namespaces created by this >> document. In all three cases, suitable names are suggested, >> initial contents included, and an appropriate registration >> policy is specified. >> The current maintainer of the PA-DATA/TYPED-DATA registry, >> which this document turns over to IANA, is in the process of >> reconciling the initial IANA registry contents contained in >> this document with his existing records. We expect this will >> result in minor changes to the initial registry contents by >> the time the final document is published. >> This document allocates new values in several namespaces which >> are currently managed directly by the Kerberos working group >> rather than as IANA registries. Transferring these registries >> to IANA control is a work in progress but is not the subject >> of this document. (1.j) Has the Document Shepherd verified that sections of the document that are written in a formal language, such as XML code, BNF rules, MIB definitions, etc., validate correctly in an automated checker? >> This document contains an ASN.1 module, which in the current >> version does not compile. Corrections have been made in the >> author's copy and will be included the next update (presumably, >> along with changes to address any issues raised during IETF >> Last Call). (1.k) The IESG approval announcement includes a Document Announcement Write-Up. Please provide such a Document Announcement Write-Up? Recent examples can be found in the "Action" announcements for approved documents. The approval announcement contains the following sections: Technical Summary Kerberos is a protocol for verifying the identity of principals (e.g., a workstation user or a network server) on an open network. The Kerberos protocol provides a mechanism called pre-authentication for proving the identity of a principal and for better protecting the long-term secrets of the principal. This document describes a model for Kerberos pre-authentication mechanisms. The model describes what state in the Kerberos request a pre-authentication mechanism is likely to change. It also describes how multiple pre-authentication mechanisms used in the same request will interact. This document also provides common tools needed by multiple pre- authentication mechanisms. One of these tools is a secure channel between the client and the KDC with a reply key strengthening mechanism; this secure channel can be used to protect the authentication exchange thus eliminate offline dictionary attacks. With these tools, it is relatively straightforward to chain multiple authentication mechanisms, utilize a different key management system, or support a new key agreement algorithm. Working Group Summary This document represents the consensus of the Kerberos Working Group. Document Quality Multiple vendors have indicated that they plan to implement and ship the extensions described in this document or have already begun to do so. Personnel The Document Shepherd for this document is Jeffrey Hutzelman. The responsible Area Director is Tim Polk. ---------- End Forwarded Message ---------- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Tue Dec 1 13:26:11 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2629228C130 for ; Tue, 1 Dec 2009 13:26:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.676 X-Spam-Level: X-Spam-Status: No, score=-4.676 tagged_above=-999 required=5 tests=[AWL=1.923, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aI6oxZehXPOz for ; Tue, 1 Dec 2009 13:26:09 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 801353A6809 for ; Tue, 1 Dec 2009 13:26:09 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 929C09D; Tue, 1 Dec 2009 15:26:01 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id DC4668E; Tue, 1 Dec 2009 15:25:57 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 89AD280E34; Tue, 1 Dec 2009 15:25:57 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 7F2D480E32 for ; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 6F24681; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 67B7B8E for ; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 5CBC381 for ; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 38A687CC084; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02293-06-7; Tue, 1 Dec 2009 15:25:55 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 7F48F7CC082 for ; Tue, 1 Dec 2009 15:25:54 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvkAAC8ZFUuAAtnFmWdsb2JhbACbdwEBAQEBCAsKBxOtMSKGMYhNgj2BdASKXg X-IronPort-AV: E=Sophos;i="4.47,322,1257141600"; d="scan'208";a="34263671" Received: from smtp02.srv.cs.cmu.edu ([128.2.217.197]) by mailgateway.anl.gov with ESMTP; 01 Dec 2009 15:25:46 -0600 Received: from ATLANTIS.WV.CS.CMU.EDU (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp02.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nB1LPkPn023563 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 1 Dec 2009 16:25:46 -0500 (EST) Date: Tue, 01 Dec 2009 16:25:46 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: <1851CFF190996BE86D1E4820@atlantis.pc.cs.cmu.edu> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.197 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] Publication Request: draft-josefsson-kerberos5-starttls-07.txt (fwd) X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov ------------ Forwarded Message ------------ Date: Tuesday, December 01, 2009 04:24:59 PM -0500 From: Jeffrey Hutzelman To: tim.polk@nist.gov Cc: jhutz@cmu.edu, iesg-secretary@ietf.org Subject: Publication Request: draft-josefsson-kerberos5-starttls-07.txt This is a request to the IESG to approve publication of "Using Kerberos V5 over the Transport Layer Security (TLS) protocol", draft-josefsson-kerberos5-starttls-07.txt, as an Informational RFC. This document is a product of the Kerberos Working Group. (1.a) Who is the Document Shepherd for this document? Has the Document Shepherd personally reviewed this version of the document and, in particular, does he or she believe this version is ready for forwarding to the IESG for publication? >> The Document Shepherd for this document is Jeffrey Hutzelman, >> . I have reviewed this document, and I believe >> it is ready for IETF-wide review and publication as a >> Proposed Standard. (1.b) Has the document had adequate review both from key WG members and from key non-WG members? Does the Document Shepherd have any concerns about the depth or breadth of the reviews that have been performed? >> This document has received review both within the working group >> and from key experts outside the working group. Any issues raised >> have been resolved. (1.c) Does the Document Shepherd have concerns that the document needs more review from a particular or broader perspective, e.g., security, operational complexity, someone familiar with AAA, internationalization or XML? >> This document defines the use of TLS to protect exchanges >> between a Kerberos client and Key Distribution Center (KDC). >> As such, it depends on the security properties of TLS in >> ways that may warrant further review from subject-matter >> experts. To date, no such review has been solicited or >> received. >> >> In addition, as described below, there is an issue which may >> benefit from input from PKIX experts. (1.d) Does the Document Shepherd have any specific concerns or issues with this document that the Responsible Area Director and/or the IESG should be aware of? For example, perhaps he or she is uncomfortable with certain parts of the document, or has concerns whether there really is a need for it. In any event, if the WG has discussed those issues and has indicated that it still wishes to advance the document, detail those concerns here. Has an IPR disclosure related to this document been filed? If so, please include a reference to the disclosure and summarize the WG discussion and conclusion on this issue. >> This document allows for two methods for Kerberos clients to >> verify the certificate of a KDC: preshared certificates and >> RFC5280 path validation. For the later case, a new type is >> defined for the otherName field, containing the name of the >> Kerberos realm for which the certificate subject acts as KDC; >> the presence of a name of this type is taken to mean that the >> certificate may be used with this protocol. No extended key >> purpose is defined for this protocol. >> >> Several concerns about this approach have been raised by some >> working group participants, including myself. Particularly, >> it would seem appropriate to reuse the method used by PKINIT >> (RFC4556), which identifies a realm's KDC's using a particular >> value in the KRB5PrincipalName type defined in that document >> (see section 3.2.4), rather than defining a new name type. >> More importantly, the failure to define an extended key purpose >> means it would be impossible to issue a certificate which >> restricted to use only with this protocol, or with this >> protocol in combination with some other specific set of >> protocols, such as PKINIT. >> >> PKINIT defines a key purpose for use in certificates issued >> to KDC's, and requires its presence except in certificates >> which are identified as belonging to KDC's by use of the >> KRB5PrincipalName type with an appropriate value. However, it >> does not waive RFC5280's requirement that a certificate which >> contains the extendedKeyUsage extension be used only for the >> specific purposes identified there. We believe this approach >> to also be appropriate for the present document. >> >> The working group was unable to reach a consensus on this >> question, but there was a strong consensus that it would be >> preferable to move forward with the document rather than delay >> indefinitely attempting to come to a resolution. Therefore, >> it was agreed that the document be submitted in its present >> form, with this issue called out and described in the writeup, >> and that participants who felt strongly about this issue would >> have the opportunity to re-raise it during IETF Last Call. >> >> This consensus and agreement to move forward was supported by >> all of those who participated in discussion of this issue, >> including myself. Therefore, I expect no appeals or similar >> problems as a result. However, I feel that additional input >> from PKIX experts may be helpful, and I do expect this issue >> to be raised during IETF Last Call. >> >> No IPR disclosures related to this document have been filed. (1.e) How solid is the WG consensus behind this document? Does it represent the strong concurrence of a few individuals, with others being silent, or does the WG as a whole understand and agree with it? >> This is solid consensus within the working group to publish >> this document. It is worth noting that a partial overlap >> exists between the functionality of this document and of the >> FAST preauthentication mechanism described in section 6.4 of >> draft-ietf-krb-wg-preauth-framework-15.txt, which provides >> an encrypted tunnel to protect exchange of preauthentication >> data between a client and a KDC. The intended status of the >> latter document is standards track, and there exists a rough >> consensus to require implementation of the FAST mechanism >> in Kerberos implementations which conform to the framework >> defined in that document. Therefore, we are requesting the >> publication of the present document as an Informational RFC, >> and may request that it be upgraded to Proposed Standard at >> a later time. (1.f) Has anyone threatened an appeal or otherwise indicated extreme discontent? If so, please summarise the areas of conflict in separate email messages to the Responsible Area Director. (It should be in a separate email because this questionnaire is entered into the ID Tracker.) >> There have been no threats of appeal or other expressions of >> of discontent as a result of publication of this document. >> There is some dismay at the length of time it has taken to >> progress this document, as both the author and working group >> believed the technical aspects of the document were ready >> well over a year ago. Unfortunately, this document has been >> through multiple cycles of long silence followed by a new >> issue surfacing just as the chair was about to move forward >> on it. (1.g) Has the Document Shepherd personally verified that the document satisfies all ID nits? (See http://www.ietf.org/ID-Checklist.html and http://tools.ietf.org/tools/idnits/). Boilerplate checks are not enough; this check needs to be thorough. Has the document met all formal review criteria it needs to, such as the MIB Doctor, media type and URI type reviews? >> This document has been run through the idnits tool, and was >> reviewed manually for compliance with requirements not checked >> by the automatic tool. No additional formal review criteria >> apply to this document. (1.h) Has the document split its references into normative and informative? Are there normative references to documents that are not ready for advancement or are otherwise in an unclear state? If such normative references exist, what is the strategy for their completion? Are there normative references that are downward references, as described in [RFC3967]? If so, list these downward references to support the Area Director in the Last Call procedure for them [RFC3967]. >> References have been split appropriately. All references >> are to published RFC's, and all normative references are >> to BCP or standards-track documents. (1.i) Has the Document Shepherd verified that the document IANA consideration section exists and is consistent with the body of the document? If the document specifies protocol extensions, are reservations requested in appropriate IANA registries? Are the IANA registries clearly identified? If the document creates a new registry, does it define the proposed initial contents of the registry and an allocation procedure for future registrations? Does it suggest a reasonable name for the new registry? See [RFC2434]. If the document describes an Expert Review process has Shepherd conferred with the Responsible Area Director so that the IESG can appoint the needed Expert during the IESG Evaluation? >> The IANA considerations section correctly reflects the one >> action required of IANA, which is to assign a Kerberos TCP >> extension number. >> >> This document also requires the assignment of a Kerberos >> Preauthentication Data Type number; however, that registry >> is currently controlled by the Kerberos working group and >> an appropriate number will be assigned before the document >> is published. We hope soon to begin preparing a document >> which will turn this and several other Kerberos registries >> over to IANA. (1.j) Has the Document Shepherd verified that sections of the document that are written in a formal language, such as XML code, BNF rules, MIB definitions, etc., validate correctly in an automated checker? >> No part of this document is written in a formal language >> requiring such verification. It does contain an ASN.1 >> sequence definition which appears normatively in RFC4120 >> and is copied in this document for clarity. (1.k) The IESG approval announcement includes a Document Announcement Write-Up. Please provide such a Document Announcement Write-Up? Recent examples can be found in the "Action" announcements for approved documents. The approval announcement contains the following sections: Technical Summary This document specify how the Kerberos V5 protocol can be transported over the Transport Layer Security (TLS) protocol, to provide additional security features. Working Group Summary This technical specification represents the consensus of the Kerberos Working Group. However, the working group is also working on an alternate solution to an overlapping problem. It is not yet clear whether either or both specifications will win in the marketplace or whether either will become mandatory in a future version of the base Kerberos specification. However, we feel it is important to publish these specifications to gain implemention and deployment experience. Therefore, we are requesting publication of this document as an Informational RFC, and may request that it be upgraded to Proposed Standard at a later time. Document Quality At least one implementor has indicated an intention to support the extension described in this document. Personnel The Document Shepherd for this document is Jeffrey Hutzelman. The responsible Area Director is Tim Polk. ---------- End Forwarded Message ---------- _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Tue Dec 1 17:28:49 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 950DB3A688F for ; Tue, 1 Dec 2009 17:28:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.859 X-Spam-Level: **** X-Spam-Status: No, score=4.859 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20, URIBL_SC_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KdVAghscKcvU for ; Tue, 1 Dec 2009 17:28:42 -0800 (PST) Received: from 200-96-120-237.smace701.dsl.brasiltelecom.net.br (200-96-120-237.smace701.dsl.brasiltelecom.net.br [200.96.120.237]) by core3.amsl.com (Postfix) with ESMTP id EC56A3A6863 for ; Tue, 1 Dec 2009 17:28:41 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091202012841.EC56A3A6863@core3.amsl.com> Date: Tue, 1 Dec 2009 17:28:41 -0800 (PST) News Today

Trouble viewing this mail? Read it online

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

From krb-wg-archive@lists.ietf.org Wed Dec 2 05:01:53 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CA6F43A659B for ; Wed, 2 Dec 2009 05:01:53 -0800 (PST) X-Quarantine-ID: <3LZQQ9hVh6qW> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Wed, 2 Dec 2009 05:01:47 -0800 (PST) Received: from apn-77-113-249-197.dynamic.gprs.plus.pl (apn-77-113-249-197.dynamic.gprs.plus.pl [77.113.249.197]) by core3.amsl.com (Postfix) with ESMTP id 90B8C3A68E0 for ; Wed, 2 Dec 2009 05:01:45 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091202130145.90B8C3A68E0@core3.amsl.com> Date: Wed, 2 Dec 2009 05:01:45 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

If you're having trouble viewing this image, click here

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Oxagu. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Wed Dec 2 11:11:00 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D979F3A6A8A for ; Wed, 2 Dec 2009 11:11:00 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -16.375 X-Spam-Level: X-Spam-Status: No, score=-16.375 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119, HOST_EQ_USERONOCOM=1.444, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RCVD_NUMERIC_HELO=2.067, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mqsUfCtgw4i2 for ; Wed, 2 Dec 2009 11:10:52 -0800 (PST) Received: from 82.159.40.117.dyn.user.ono.com (82.159.40.117.dyn.user.ono.com [82.159.40.117]) by core3.amsl.com (Postfix) with ESMTP id 346EC3A6A35 for ; Wed, 2 Dec 2009 11:10:52 -0800 (PST) From: Pfizer � Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091202191052.346EC3A6A35@core3.amsl.com> Date: Wed, 2 Dec 2009 11:10:52 -0800 (PST) Pfizer ® 80% OFF

If you cannot see the images, please click here

About us Unsubscribe Forward Privacy

(c) 2001-2009 Uykoo Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Wed Dec 2 14:11:28 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 621DA3A6903 for ; Wed, 2 Dec 2009 14:11:28 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Wed, 2 Dec 2009 14:11:22 -0800 (PST) Received: from a89-152-173-5.cpe.netcabo.pt (a89-152-173-5.cpe.netcabo.pt [89.152.173.5]) by core3.amsl.com (Postfix) with ESMTP id 5DB5D3A6901 for ; Wed, 2 Dec 2009 14:11:17 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091202221121.5DB5D3A6901@core3.amsl.com> Date: Wed, 2 Dec 2009 14:11:17 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Enij Inc., All rights reserved.

From ietf-krb-wg-bounces@lists.anl.gov Thu Dec 3 03:12:22 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A6063A6A17 for ; Thu, 3 Dec 2009 03:12:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.517 X-Spam-Level: X-Spam-Status: No, score=-4.517 tagged_above=-999 required=5 tests=[AWL=2.082, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o-F0JhFSpCxl for ; Thu, 3 Dec 2009 03:12:18 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 910BC3A67FB for ; Thu, 3 Dec 2009 03:12:17 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 86361135; Thu, 3 Dec 2009 05:12:09 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 99D22130; Thu, 3 Dec 2009 05:12:04 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 6D3582CC064; Thu, 3 Dec 2009 05:12:04 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id BAC9F2CC047 for ; Thu, 3 Dec 2009 05:12:02 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id AB7C712D; Thu, 3 Dec 2009 05:12:02 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id A6BC5130 for ; Thu, 3 Dec 2009 05:12:02 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 8812312D for ; Thu, 3 Dec 2009 05:12:02 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 7186D7CC05D; Thu, 3 Dec 2009 05:12:02 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02694-02; Thu, 3 Dec 2009 05:12:02 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 5791C7CC05A for ; Thu, 3 Dec 2009 05:12:02 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AiUCABcsF0tT8bEngWdsb2JhbACBTppBAQEWJLsKhDIEjRw X-IronPort-AV: E=Sophos;i="4.47,334,1257141600"; d="scan'208";a="34344875" Received: from yxa-v.extundo.com ([83.241.177.39]) by mailgateway.anl.gov with ESMTP; 03 Dec 2009 05:12:01 -0600 Received: from mocca.josefsson.org (c80-216-24-211.bredband.comhem.se [80.216.24.211]) (authenticated bits=0) by yxa-v.extundo.com (8.14.3/8.14.3/Debian-5) with ESMTP id nB3BBuTB018784 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 3 Dec 2009 12:11:58 +0100 From: Simon Josefsson To: Jeffrey Hutzelman References: <87k4zndzjt.fsf@mocca.josefsson.org> <411FF97D571E08A76C094117@atlantis.pc.cs.cmu.edu> OpenPGP: id=B565716F; url=http://josefsson.org/key.txt X-Hashcash: 1:22:091203:jhutz@cmu.edu::k4CeZEURaK8aD9Od:9ysw X-Hashcash: 1:22:091203:ietf-krb-wg@anl.gov::mLkcCKAvN/TK2nU+:eaGR X-Hashcash: 1:22:091203:hartmans-ietf@mit.edu::ygZ5bP48tTbXa0zJ:T0i3 Date: Thu, 03 Dec 2009 12:11:56 +0100 In-Reply-To: <411FF97D571E08A76C094117@atlantis.pc.cs.cmu.edu> (Jeffrey Hutzelman's message of "Tue, 29 Sep 2009 12:55:42 -0400") Message-ID: <87ws14ia6b.fsf@mocca.josefsson.org> User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.1 (gnu/linux) MIME-Version: 1.0 X-Virus-Scanned: clamav-milter 0.95.2 at yxa-v X-Virus-Status: Clean X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: ietf-krb-wg@anl.gov, Sam Hartman Subject: Re: [Ietf-krb-wg] krb5starttls SAN-vs-EKU X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov Jeffrey Hutzelman writes: > I don't see a consensus on this question; in fact, the only people > involved in the discussion to date have been Simon, Nico, and myself. > So long as the situation is that Simon takes one position, I and one > other participant take another, and no one else speaks up, then I am > unwilling to declare consensus, rough or otherwise. It hasn't been my intention to take one position. What I have been looking for (repeatedly) has been concrete edit requests to reflect your or Nico's proposal, as my perception has been that your proposals has slightly changed during each discussion cycle and/or that I were never able to understand it well enough to convert it into changes to the document. If you send me proposed changes to the document, I'll either incorporate it directly if I agree with it or we can have the WG decide between the two (or three?) variants. I outlined my requirements on the naming issue earlier, but to re-iterate I want 1) administrators to have the ability to decide whether they want to let the PKINIT server cert be usable as a KRB5STARTTLS server cert or not, and vice versa, and 2) not have a normative reference on PKINIT but instead cut'n'paste any SAN/EKU definitions, and 3) whatever solution should be in line with RFC 5280 practices, and 4) preferably the least complex solution that meets all requirements. What are your requirements? As far as I have understood, our requirements are not mutually exclusive. Other than those requirements, I don't care strongly how naming is handled. What's in the document is simply the first solution with the least complexity that I could find that meets my requirements. If this matter is resolved, what is the actual remaining reason to not publish as proposed standard? /Simon _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Thu Dec 3 22:52:15 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 61E303A6961 for ; Thu, 3 Dec 2009 22:52:15 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -46.568 X-Spam-Level: X-Spam-Status: No, score=-46.568 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, URIBL_AB_SURBL=10, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sZ8Q-Up5y3HU for ; Thu, 3 Dec 2009 22:52:08 -0800 (PST) Received: from bzq-79-180-250-76.red.bezeqint.net (bzq-79-181-205-120.red.bezeqint.net [79.181.205.120]) by core3.amsl.com (Postfix) with ESMTP id 927C13A67AE for ; Thu, 3 Dec 2009 22:52:07 -0800 (PST) From: Pfizer � Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091204065207.927C13A67AE@core3.amsl.com> Date: Thu, 3 Dec 2009 22:52:07 -0800 (PST) Pfizer ® 80% OFF

If you cannot see the images, please click here

About us Unsubscribe Forward Privacy

(c) 2001-2009 Ryyoqasypa Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Fri Dec 4 02:20:46 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 70D243A68B6 for ; Fri, 4 Dec 2009 02:20:45 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Genuine Software \256 Reseller ; Fri, 4 Dec 2009 02:20:43 -0800 (PST) Received: from 118.172.250.139.adsl.dynamic.totbb.net (118.172.250.139.adsl.dynamic.totbb.net [118.172.250.139]) by core3.amsl.com (Postfix) with ESMTP id B9C753A69DE for ; Fri, 4 Dec 2009 02:20:42 -0800 (PST) From: Genuine Software � Reseller To: krb-wg-archive@lists.ietf.org Subject: Special Discount 80% for user krb-wg-archive@lists.ietf.org on all software MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091204102042.B9C753A69DE@core3.amsl.com> Date: Fri, 4 Dec 2009 02:20:42 -0800 (PST) Newsletter

This message contains graphics. If you do not see the graphics click here to view.

Failed to display this picture? Click here!

Sent to: krb-wg-archive@lists.ietf.org.

About us | Unsubscribe | Privacy

� 2009 Ket.
All rights reserved.

From krb-wg-archive@lists.ietf.org Fri Dec 4 05:03:46 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 338E63A6826 for ; Fri, 4 Dec 2009 05:03:46 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Fri, 4 Dec 2009 05:03:40 -0800 (PST) Received: from h082218021106.host.wavenet.at (h082218021106.host.wavenet.at [82.218.21.106]) by core3.amsl.com (Postfix) with ESMTP id 031C03A67F0 for ; Fri, 4 Dec 2009 05:03:39 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091204130340.031C03A67F0@core3.amsl.com> Date: Fri, 4 Dec 2009 05:03:39 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Agypisoti. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Fri Dec 4 05:47:54 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 31D5D3A6A10 for ; Fri, 4 Dec 2009 05:47:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -61.486 X-Spam-Level: X-Spam-Status: No, score=-61.486 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RtgTsYhVVEtU for ; Fri, 4 Dec 2009 05:47:47 -0800 (PST) Received: from 173-23-79-70.client.mchsi.com (173-23-79-70.client.mchsi.com [173.23.79.70]) by core3.amsl.com (Postfix) with ESMTP id 37CC23A68ED for ; Fri, 4 Dec 2009 05:47:46 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091204134746.37CC23A68ED@core3.amsl.com> Date: Fri, 4 Dec 2009 05:47:46 -0800 (PST) News Today

Trouble viewing this mail? Read it online

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

From krb-wg-archive@lists.ietf.org Sat Dec 5 00:46:19 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D98203A6832 for ; Sat, 5 Dec 2009 00:46:19 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Sat, 5 Dec 2009 00:46:13 -0800 (PST) Received: from www.beamtele.com (unknown [124.123.115.219]) by core3.amsl.com (Postfix) with ESMTP id 744623A6774 for ; Sat, 5 Dec 2009 00:46:12 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091205084612.744623A6774@core3.amsl.com> Date: Sat, 5 Dec 2009 00:46:12 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Eimiiko. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Sat Dec 5 07:29:58 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B1DA63A6819 for ; Sat, 5 Dec 2009 07:29:58 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Sat, 5 Dec 2009 07:29:52 -0800 (PST) Received: from 125.26.185.184.adsl.dynamic.totbb.net (125.26.185.184.adsl.dynamic.totbb.net [125.26.185.184]) by core3.amsl.com (Postfix) with ESMTP id 060433A67D3 for ; Sat, 5 Dec 2009 07:29:50 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091205152951.060433A67D3@core3.amsl.com> Date: Sat, 5 Dec 2009 07:29:50 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Ylyzedy. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Sat Dec 5 08:54:37 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 478513A67E7 for ; Sat, 5 Dec 2009 08:54:37 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -33.228 X-Spam-Level: X-Spam-Status: No, score=-33.228 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, NUMERIC_HTTP_ADDR=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eAa5aVLTtBuL for ; Sat, 5 Dec 2009 08:54:30 -0800 (PST) Received: from 201-3-33-97.cbace702.dsl.brasiltelecom.net.br (201-24-43-44.cbace702.dsl.brasiltelecom.net.br [201.24.43.44]) by core3.amsl.com (Postfix) with ESMTP id 4F9063A63EC for ; Sat, 5 Dec 2009 08:54:28 -0800 (PST) From: Pfizer � Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091205165429.4F9063A63EC@core3.amsl.com> Date: Sat, 5 Dec 2009 08:54:28 -0800 (PST) Pfizer ® 80% OFF

If you cannot see the images, please click here

About us Unsubscribe Forward Privacy

(c) 2001-2009 Yca Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Sat Dec 5 09:06:44 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 877D13A689C for ; Sat, 5 Dec 2009 09:06:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -37.38 X-Spam-Level: X-Spam-Status: No, score=-37.38 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HELO_DYNAMIC_DHCP=1.398, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dCgW-WmXH8O0 for ; Sat, 5 Dec 2009 09:06:37 -0800 (PST) Received: from catv-bvi-pool1-154.kaplantel.net (catv-bvi-pool1-154.kaplantel.net [208.65.8.154]) by core3.amsl.com (Postfix) with ESMTP id 8024D3A6808 for ; Sat, 5 Dec 2009 09:06:37 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091205170637.8024D3A6808@core3.amsl.com> Date: Sat, 5 Dec 2009 09:06:37 -0800 (PST) News Today

Trouble viewing this mail? Read it online

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

From krb-wg-archive@lists.ietf.org Sat Dec 5 09:58:47 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 805943A6937 for ; Sat, 5 Dec 2009 09:58:47 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sat, 5 Dec 2009 09:58:40 -0800 (PST) Received: from 189037096170.res-com.wayinternet.com.br (189037096170.res-com.wayinternet.com.br [189.37.96.170]) by core3.amsl.com (Postfix) with ESMTP id 1FC833A66B4 for ; Sat, 5 Dec 2009 09:58:39 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091205175840.1FC833A66B4@core3.amsl.com> Date: Sat, 5 Dec 2009 09:58:39 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Eeri Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Sun Dec 6 03:34:47 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2147A3A6832 for ; Sun, 6 Dec 2009 03:34:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -20.244 X-Spam-Level: X-Spam-Status: No, score=-20.244 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_FROM_DRUGS=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K8YeiaET5lXb for ; Sun, 6 Dec 2009 03:34:41 -0800 (PST) Received: from aliroo.com (unknown [110.137.28.176]) by core3.amsl.com (Postfix) with SMTP id EEF0B3A6846 for ; Sun, 6 Dec 2009 03:34:36 -0800 (PST) From: Approved VIAGRA Store Subject: Personal 70% off To: MIME-Version: 1.0 Content-Type: text/html Message-Id: <20091206113436.EEF0B3A6846@core3.amsl.com> Date: Sun, 6 Dec 2009 03:34:36 -0800 (PST)

Trouble viewing this mail? Read it online

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

From krb-wg-archive@lists.ietf.org Mon Dec 7 02:21:08 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF9D13A6917 for ; Mon, 7 Dec 2009 02:21:07 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 7 Dec 2009 02:21:00 -0800 (PST) Received: from 150.59.wms.cz (150.59.wms.cz [77.237.150.59]) by core3.amsl.com (Postfix) with ESMTP id C423328C122 for ; Mon, 7 Dec 2009 02:20:58 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091207102058.C423328C122@core3.amsl.com> Date: Mon, 7 Dec 2009 02:20:58 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Jocuyyq Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Mon Dec 7 13:27:21 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 59FD73A680B for ; Mon, 7 Dec 2009 13:27:21 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Mon, 7 Dec 2009 13:27:15 -0800 (PST) Received: from 171-152-223-201.adsl.terra.cl (171-152-223-201.adsl.terra.cl [201.223.152.171]) by core3.amsl.com (Postfix) with ESMTP id 1747B28C0E3 for ; Mon, 7 Dec 2009 13:27:14 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091207212715.1747B28C0E3@core3.amsl.com> Date: Mon, 7 Dec 2009 13:27:14 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Uryaxyxu. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Mon Dec 7 16:58:31 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D40FB3A6896 for ; Mon, 7 Dec 2009 16:58:31 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Mon, 7 Dec 2009 16:58:25 -0800 (PST) Received: from 5ac25ca8.bb.sky.com (5ac25ca8.bb.sky.com [90.194.92.168]) by core3.amsl.com (Postfix) with ESMTP id 964A128C0FF for ; Mon, 7 Dec 2009 16:58:24 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091208005824.964A128C0FF@core3.amsl.com> Date: Mon, 7 Dec 2009 16:58:24 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Ocin Inc., All rights reserved.

From krb-wg-archive@lists.ietf.org Tue Dec 8 02:00:11 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 637CE3A6A03 for ; Tue, 8 Dec 2009 02:00:11 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char C2 hex): From: Approved VIAGRA\302\256 Store ; Tue, 8 Dec 2009 02:00:05 -0800 (PST) Received: from africashope.org (unknown [123.19.245.199]) by core3.amsl.com (Postfix) with SMTP id F10B73A69E6 for ; Tue, 8 Dec 2009 01:57:52 -0800 (PST) From: Approved VIAGRA® Store Subject: Day in pictures To: MIME-Version: 1.0 Content-Type: text/html Message-Id: <20091208095752.F10B73A69E6@core3.amsl.com> Date: Tue, 8 Dec 2009 01:57:52 -0800 (PST)

Trouble viewing this mail? Read it online

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

From krb-wg-archive@lists.ietf.org Tue Dec 8 11:53:23 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 663B63A68A2 for ; Tue, 8 Dec 2009 11:53:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -29.049 X-Spam-Level: X-Spam-Status: No, score=-29.049 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_CHARTER=2.175, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HOST_EQ_CHARTER=1.295, HOST_EQ_DHCP=1.295, HTML_IMAGE_ONLY_24=1.552, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RBn+TPBYRQdW for ; Tue, 8 Dec 2009 11:53:22 -0800 (PST) Received: from 68-188-213-110.dhcp.trcy.mi.charter.com (68-188-213-110.dhcp.trcy.mi.charter.com [68.188.213.110]) by core3.amsl.com (Postfix) with ESMTP id 4E5243A68C4 for ; Tue, 8 Dec 2009 11:53:22 -0800 (PST) From: Approved VIAGRA Store To: krb-wg-archive@lists.ietf.org Subject: Member krb-wg-archive@lists.ietf.org get 80% 0FF on ALL Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091208195322.4E5243A68C4@core3.amsl.com> Date: Tue, 8 Dec 2009 11:53:22 -0800 (PST) News Today

Trouble viewing this mail? Read it online

The e-mail address is krb-wg-archive@lists.ietf.org
Unsubscribe from this e-mail | FAQ | Advertise | Privacy Policy

From ietf-krb-wg-bounces@lists.anl.gov Tue Dec 8 12:52:05 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7BFCF3A692C for ; Tue, 8 Dec 2009 12:52:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.976 X-Spam-Level: X-Spam-Status: No, score=-5.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EXXfTVwP-ff9 for ; Tue, 8 Dec 2009 12:52:04 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 626833A6A17 for ; Tue, 8 Dec 2009 12:52:04 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id E836EC6; Tue, 8 Dec 2009 14:51:53 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id A3B76D0; Tue, 8 Dec 2009 14:51:49 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 7FD8C80E33; Tue, 8 Dec 2009 14:51:49 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id 27ABD80E1A for ; Mon, 7 Dec 2009 16:18:02 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 11AB17CC05A; Mon, 7 Dec 2009 16:18:02 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 23037-05; Mon, 7 Dec 2009 16:18:01 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id E17527CC056 for ; Mon, 7 Dec 2009 16:18:01 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AukBAPQNHUvRVdi5kWdsb2JhbACEKYwXAYpSPwEBAQEJCwoHEwOvBI8/g1xXBI0j X-IronPort-AV: E=Sophos;i="4.47,357,1257141600"; d="scan'208";a="34523710" Received: from mail-px0-f185.google.com ([209.85.216.185]) by mailgateway.anl.gov with ESMTP; 07 Dec 2009 16:18:01 -0600 Received: by pxi15 with SMTP id 15so879313pxi.23 for ; Mon, 07 Dec 2009 14:18:00 -0800 (PST) MIME-Version: 1.0 Received: by 10.114.215.36 with SMTP id n36mr13022378wag.110.1260224280315; Mon, 07 Dec 2009 14:18:00 -0800 (PST) Date: Mon, 7 Dec 2009 14:18:00 -0800 Message-ID: <3561bdcc0912071418t158bbc6ajf61e2a3349529ee4@mail.gmail.com> From: Ravi Ganesan To: krbdev@mit.edu, kerberos@mit.edu, ietf-krb-wg@lists.anl.gov X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov X-Mailman-Approved-At: Tue, 08 Dec 2009 14:51:47 -0600 Subject: [Ietf-krb-wg] Kerberos integration with MashSSL available as GPL X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============6033242500227196489==" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov --===============6033242500227196489== Content-Type: multipart/alternative; boundary=0016e64dbdf490c8e0047a2ad4aa --0016e64dbdf490c8e0047a2ad4aa Content-Type: text/plain; charset=UTF-8 Hi All, I had posted to this list a while back describing a new effort in the works to standardize a multi-party, application level SSL protocol called MashSSL (can also be used for two party app level SSL). As an update: - The protocol is now in Verision 1.2.0.open released under the W3C royalty free guidelines as well as the Open Web Foundation IPR. - This spec is being worked on in the W3C MashSSL XG (Thomas Hardjono represents the MIT Kerberos Foundation in the XG). - There is a group called the MashSSL Alliance which seeks to evangelize the standard. MIT Kerberos Foundation is a founding member of the alliance. As a key goal is to build in Kerberos from the beginning, we welcome support from you (costs nothing to join, no obligations, just an expression of support really). - Software implementing MashSSL, including a Gateway that uses SPNEGO to allow Kerberos authentication cross domain can be found at http://www.safemashups.com/software_downloads.html. All the two sites need is willingness to trust each other's SSL certs (or common root). The software is currently released under a combination of GPL and Free BSD. Hope you find it useful Please let me know if you have any questions. Regards, Ravi Ganesan ravi@findravi.com www.findravi.com --0016e64dbdf490c8e0047a2ad4aa Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi All,

I had posted to this list a while back describing a new effo= rt in the works to standardize a multi-party, application level SSL protoco= l called MashSSL (can also be used for two party app level SSL). As an upda= te:

- The protocol is now in Verision 1.2.0.open released under the W3C roy= alty free guidelines as well as the Open Web Foundation IPR.

- This = spec is being worked on in the W3C MashSSL XG=C2=A0 (Thomas Hardjono represents the MIT Kerb= eros Foundation in the XG).

- There is a group called the MashSS= L Alliance which seeks to evangelize the standard. MIT Kerberos Foundat= ion is a founding member of the alliance. As a key goal is to build in Kerb= eros from the beginning, we welcome support from you (costs nothing to join= , no obligations, just an expression of support really).

- Software implementing MashSSL, including a Gateway that uses SPNEGO t= o allow Kerberos authentication cross domain can be found at http://www.safemashups.com= /software_downloads.html. All the two sites need is willingness to trus= t each other's SSL certs (or common root). The software is currently re= leased under a combination of GPL and Free BSD. Hope=C2=A0 you find it usef= ul

Please let me know if you have any questions.

Regards,

Ra= vi Ganesan
ravi@findravi.comwww.findravi.com --0016e64dbdf490c8e0047a2ad4aa-- --===============6033242500227196489== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg --===============6033242500227196489==-- From krb-wg-archive@lists.ietf.org Tue Dec 8 14:57:29 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1861D3A68BD for ; Tue, 8 Dec 2009 14:57:29 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Tue, 8 Dec 2009 14:57:23 -0800 (PST) Received: from 0x53588459.banxx4.dynamic.dsl.tele.dk (0x53588459.banxx4.dynamic.dsl.tele.dk [83.88.132.89]) by core3.amsl.com (Postfix) with ESMTP id 7F37F3A6878 for ; Tue, 8 Dec 2009 14:57:22 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091208225722.7F37F3A6878@core3.amsl.com> Date: Tue, 8 Dec 2009 14:57:22 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

We respect your right to privacy. For more information, please see our Privacy Policy and
Terms & Conditions or visit our Help Desk.

(c) 2006-2009 Yziat Inc., All rights reserved.

From ietf-krb-wg-bounces@lists.anl.gov Tue Dec 8 21:10:01 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 68CB13A6AB4 for ; Tue, 8 Dec 2009 21:10:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.989 X-Spam-Level: X-Spam-Status: No, score=-4.989 tagged_above=-999 required=5 tests=[AWL=1.610, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a1NP8AxQig9L for ; Tue, 8 Dec 2009 21:10:00 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 22B373A682A for ; Tue, 8 Dec 2009 21:10:00 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 7B2AFDC; Tue, 8 Dec 2009 23:09:49 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 774A6CE; Tue, 8 Dec 2009 23:09:47 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 454A680E33; Tue, 8 Dec 2009 23:09:47 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id C85A780E32 for ; Tue, 8 Dec 2009 23:09:45 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id B9460C6; Tue, 8 Dec 2009 23:09:45 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id B47E1CE for ; Tue, 8 Dec 2009 23:09:45 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id AB4E1C6 for ; Tue, 8 Dec 2009 23:09:45 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 93C2A7CC056; Tue, 8 Dec 2009 23:09:45 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00626-01; Tue, 8 Dec 2009 23:09:45 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 6FC7D7CC054 for ; Tue, 8 Dec 2009 23:09:45 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgYHAMC/HktuBL2G/2dsb2JhbACBTJc5viKELASCfIJrhzk X-IronPort-AV: E=Sophos;i="4.47,366,1257141600"; d="scan'208";a="34602535" Received: from z189134.ppp.asahi-net.or.jp (HELO mama.tanu.org) ([110.4.189.134]) by mailgateway.anl.gov with ESMTP; 08 Dec 2009 23:09:44 -0600 Received: from shoichi.tanu.org (120.145.221.202.bf.2iij.net [202.221.145.120]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mama.tanu.org (Postfix) with ESMTPSA id B8D6616B4A; Wed, 9 Dec 2009 14:09:42 +0900 (JST) Message-ID: <4B1F3115.5040307@tanu.org> Date: Wed, 09 Dec 2009 14:09:41 +0900 From: Shoichi Sakane User-Agent: Thunderbird 2.0.0.23 (X11/20090817) MIME-Version: 1.0 To: Jeffrey Hutzelman References: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> In-Reply-To: <3DCE1E3C73D43DA2705B37D6@minbar.fac.cs.cmu.edu> X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: tim.polk@nist.gov, Kerberos-wg Subject: Re: [Ietf-krb-wg] NEW LAST CALL: draft-ietf-krb-wg-cross-problem-statement-05.txt X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov Hi Jeff, Currently, I have not received any comment against this WGLC. The expiration date was over. So, could you decide to move this document forward ? === Shoichi Sakane On 11/11/2009 11:30 AM, Jeffrey Hutzelman wrote: > The cross-realm problem statement document previously passed last call > in this working group and was forwarded to the IESG for consideration > for publication as an informational RFC. During IETF last call, > comments and additional input were received which resulted in > substantial changes to the document. As a result, this note announces > the start of a new three-week last call within the Kerberos Working > Group on whether to send the revised document to the IESG. > > It is my belief that the last paragraph of the revised abstract (quoted > below) attempts to turn what began as a problem statement document into > a requirements document, and that we do not have consensus for this > change. As a result, I have informed the authors that that paragraph > will need to be removed when the document is revised to address last > call comments. If anyone disagrees with this assessment, please let me > know. > > > > Title: Problem statement on the cross-realm operation of Kerberos > Filename: draft-ietf-krb-wg-cross-problem-statement-05.txt > Intended Status: Informational > > The Kerberos protocol is today one of the most widely deployed > authentication protocols in the Internet. In order for a Kerberos > deployment to operate in a scalable manner, different Kerberos realms > must interoperate in such a way that cross-realm operations can be > performed efficiently and securely. > > This document provides background information regarding large scale > Kerberos deployments in the industrial sector, with the aim of > identifying issues in the current Kerberos cross-realm authentication > model as defined in RFC4120. > > As industrial automation is moving towards wider adoption of Internet > standards, the Kerberos authentication protocol represents one of the > best alternatives for ensuring the confidentiality and the integrity > of communications in control networks while meeting performance and > security requirements. > > However, the use of Kerberos cross-realm operations in large scale > industrial systems may introduce issues that could cause performance > and reliability problems. This document describes some examples of > actual large scale industrial systems, and lists requirements and > restriction regarding authentication operations in such environments. > > The current document also identifies a number of requirements derived > from the industrial automation field. Although they are found in the > field of industrial automation, these requirements are general enough > and are applicable to the problem of Kerberos cross-realm operations. > > These requirements need to be satisfied by proposed Kerberos cross- > realm frameworks or architectures, as well as specific solutions that > implement those frameworks or architectures. > > > This last call will expire at 23:59 EDT on Nov 30, 2009. Note that this > provides more than the usual amount of time for comments, due to the > ongoing 76th IETF meeting in Hiroshima. > > Please review this document and send any comments to the Kerberos Working > Group mailing list, , by that date. The file can be > obtained via > > http://tools.ietf.org/html/draft-ietf-krb-wg-cross-problem-statement-05 > > -- Jeffrey T. Hutzelman (N3NHS) > Co-Chair, IETF Kerberos Working Group > Carnegie Mellon University - Pittsburgh, PA > > _______________________________________________ > ietf-krb-wg mailing list > ietf-krb-wg@lists.anl.gov > https://lists.anl.gov/mailman/listinfo/ietf-krb-wg _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Wed Dec 9 01:16:36 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 038753A68B0 for ; Wed, 9 Dec 2009 01:16:36 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Wed, 9 Dec 2009 01:16:29 -0800 (PST) Received: from 125.27.227.19.adsl.dynamic.totbb.net (125.27.227.19.adsl.dynamic.totbb.net [125.27.227.19]) by core3.amsl.com (Postfix) with ESMTP id 8258A3A689C for ; Wed, 9 Dec 2009 01:16:28 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091209091628.8258A3A689C@core3.amsl.com> Date: Wed, 9 Dec 2009 01:16:28 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

Unsubscribe | Change Email Address | Update Email Preferences | Privacy Policy | Customer Service

Copyright © 2008 Uwalayjeti. All Rights Reserved.

From krb-wg-archive@lists.ietf.org Wed Dec 9 05:17:14 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D4F7B28C0CF for ; Wed, 9 Dec 2009 05:17:14 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -32.836 X-Spam-Level: X-Spam-Status: No, score=-32.836 tagged_above=-999 required=5 tests=[BAYES_99=3.5, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, SARE_UNI=0.591, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q9Udi2LMsD3b for ; Wed, 9 Dec 2009 05:17:08 -0800 (PST) Received: from 17-23.dedicado.com.uy (17-23.108.dedicado.com.uy [190.108.23.17]) by core3.amsl.com (Postfix) with ESMTP id 629CB28C118 for ; Wed, 9 Dec 2009 05:17:06 -0800 (PST) From: Pfizer � Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091209131707.629CB28C118@core3.amsl.com> Date: Wed, 9 Dec 2009 05:17:06 -0800 (PST) Pfizer ® 80% OFF

If you cannot see the images, please click here

From ietf-krb-wg-bounces@lists.anl.gov Wed Dec 9 13:57:03 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EED803A677D for ; Wed, 9 Dec 2009 13:57:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0-zg4QgBJUyE for ; Wed, 9 Dec 2009 13:57:02 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 41A203A67AE for ; Wed, 9 Dec 2009 13:57:02 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 49CDEF3; Wed, 9 Dec 2009 15:56:51 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id C0C23ED; Wed, 9 Dec 2009 15:56:47 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 8476780E33; Wed, 9 Dec 2009 15:56:47 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id 2589580E32 for ; Wed, 9 Dec 2009 15:56:46 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 0F4337CC079; Wed, 9 Dec 2009 15:56:46 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27870-09; Wed, 9 Dec 2009 15:56:45 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id D5B187CC077 for ; Wed, 9 Dec 2009 15:56:45 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkoAAH2sH0sSBwdQkGdsb2JhbACQTQGLFwEBAQEJCQwHEwWsS4VRiE2ELASBYg X-IronPort-AV: E=Sophos;i="4.47,370,1257141600"; d="scan'208";a="34648846" Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by mailgateway.anl.gov with ESMTP; 09 Dec 2009 15:56:29 -0600 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id nB9Lt1vk013089 for ; Wed, 9 Dec 2009 16:55:01 -0500 (EST) Received: from localhost (EQUAL-RITES.MIT.EDU [18.18.1.59]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id nB9LteNx012898 for ; Wed, 9 Dec 2009 16:55:40 -0500 (EST) Date: Wed, 9 Dec 2009 16:55:40 -0500 (EST) From: ghudson@MIT.EDU Message-Id: <200912092155.nB9LteNx012898@outgoing.mit.edu> To: ietf-krb-wg@lists.anl.gov X-Scanned-By: MIMEDefang 2.42 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Subject: [Ietf-krb-wg] Enctype design X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov MIT is planning an implementation of an enctype using Camellia, which looks and acts very much like AES. Our current expectation is that we will publish an informational RFC about this enctype after the fact. I'm here to solicit working group opinions on aspects of the new enctype, lest we inflict anything too awful on the world. The big question is the cipher mode. The options are: 1. CTS mode, paralleling AES. Several people have voiced opposition to adding another CTS mode enctype, citing the lack of hardware support for this cipher mode. 2. CBC mode with padding, paralleling DES3. Sam has raised strong objections to adding a new padded enctype; see: http://mailman.mit.edu/pipermail/krbdev/2009-December/008373.html 3. CCM mode (see RFCs 3610 and 5116). We have code for a prototype aes-ccm enctype already, so this would be easy for us to implement. Relative to GCM, CCM has the weaknesses that it does not allow parallel processing of message blocks (due to the CBC MAC) and that it disturbs the block alignment of additional data. 4. GCM. Relative to CCM, GCM has the weakness that nonce reuse compromises the integrity protection of all messages encrypted using that key, and not merely the privacy of the two messages encrypted with that nonce. Nonces in both cipher modes would typically be 96 bits long, and it is likely that we would randomly generate nonces without absolutely guaranteeing non-reuse. If we go with CTS or CBC, we would need to use a hash. This is a little awkward because NIST is working on standardizing a SHA-3 hash but won't be done until 2012. The best current candidate is probably SHA-256, but the AEAD modes are attractive in that they allow us to skip the SHA-2 family, which is viewed by some as transitional. A possible issue with AEAD modes is that neither CCM nor GCM support the interleaving of additional and encrypted data; that is, if you have a message which looks like A1 | M1 | A2 | M2, CCM or GCM will authenticate A1 | A2 | M1 | M2. We do not expect this to be a serious issue as we expect most users of iov-style encryption to be using fixed packet formats, which precludes an attacker from tricking an endpoint into reordering blocks. Currently we are internally favoring CCM. Another question is whether we want to do anything differently with key derivation. When deriving 256-bit keys for the current AES enctypes, we encrypt an n-folded constant once to produce the first 128 bits, and then encrypt those 128 bits again to produce the rest. An alternative might be n-folding the constant to 256 bits and encrypting that with ECB (or CBC, though I don't see the point), which would allow such keys to be derived inside a PKCS11 token with the CKM_AES_ECB_ENCRYPT_DATA mechanism. It's not yet clear to me that there is any great value in this. As Sam pointed out, if you have a non-extractable long-term key inside a PKCS11 token, and an attacker gets root on your machine, the attacker can cause the token to spit out the bits of all useful derivations of the key by asking it to encrypt specific nfolded constants. But I thought I would raise the issue, especially because I've heard Sam express a certain amount of discomfort with our current "encrypt, then encrypt the result" method of producing random bits. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Wed Dec 9 16:22:31 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E9CAE3A68C1 for ; Wed, 9 Dec 2009 16:22:30 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Wed, 9 Dec 2009 16:22:23 -0800 (PST) Received: from IGLD-80-230-2-119.inter.net.il (IGLD-80-230-2-119.inter.net.il [80.230.2.119]) by core3.amsl.com (Postfix) with ESMTP id 1F2103A682B for ; Wed, 9 Dec 2009 16:22:21 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091210002222.1F2103A682B@core3.amsl.com> Date: Wed, 9 Dec 2009 16:22:21 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

From ietf-krb-wg-bounces@lists.anl.gov Wed Dec 9 17:56:30 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A08C3A69A7 for ; Wed, 9 Dec 2009 17:56:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.197 X-Spam-Level: X-Spam-Status: No, score=-6.197 tagged_above=-999 required=5 tests=[AWL=0.402, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K1jtE838XaIo for ; Wed, 9 Dec 2009 17:56:28 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id C65833A6891 for ; Wed, 9 Dec 2009 17:56:28 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 89E5CED; Wed, 9 Dec 2009 19:56:17 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 2AA3BDA; Wed, 9 Dec 2009 19:56:15 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id EE5E080E33; Wed, 9 Dec 2009 19:56:14 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id 023E280E32 for ; Wed, 9 Dec 2009 19:56:13 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id D8C5F7CC066; Wed, 9 Dec 2009 19:56:12 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00465-06; Wed, 9 Dec 2009 19:56:12 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id AA6977CC061 for ; Wed, 9 Dec 2009 19:56:12 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkcAAIfjH0sSBwdQkGdsb2JhbACbZAEBAQEJCQwHEwWrPYVCiE2ELASBYos/ X-IronPort-AV: E=Sophos;i="4.47,371,1257141600"; d="scan'208";a="34657362" Received: from biscayne-one-station.mit.edu ([18.7.7.80]) by mailgateway.anl.gov with ESMTP; 09 Dec 2009 19:56:12 -0600 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id nBA1tfwq002397; Wed, 9 Dec 2009 20:55:41 -0500 (EST) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id nBA1uK59013648 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Wed, 9 Dec 2009 20:56:20 -0500 (EST) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id nBA1u2Q0019071; Wed, 9 Dec 2009 20:56:02 -0500 (EST) To: ghudson@mit.edu References: <200912092155.nB9LteNx012898@outgoing.mit.edu> From: Tom Yu Date: Wed, 09 Dec 2009 20:56:02 -0500 In-Reply-To: <200912092155.nB9LteNx012898@outgoing.mit.edu> (ghudson@MIT.EDU's message of "Wed, 9 Dec 2009 16:55:40 -0500 (EST)") Message-ID: Lines: 90 MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.42 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: ietf-krb-wg@lists.anl.gov Subject: Re: [Ietf-krb-wg] Enctype design X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov ghudson@MIT.EDU writes: > MIT is planning an implementation of an enctype using Camellia, which > looks and acts very much like AES. Our current expectation is that we > will publish an informational RFC about this enctype after the fact. > I'm here to solicit working group opinions on aspects of the new > enctype, lest we inflict anything too awful on the world. > > The big question is the cipher mode. The options are: > > 1. CTS mode, paralleling AES. Several people have voiced opposition > to adding another CTS mode enctype, citing the lack of hardware > support for this cipher mode. The main performance penalty of CTS is from decrypting ciphertext that is not a multiple of the block size in length. In this case, if using a hardware-accelerated CBC implementation, CTS decryption would incur an additional CBC setup penalty to handle the final two blocks. For short CTS messages, this can halve the performance compared to ordinary CBC decryption. > 2. CBC mode with padding, paralleling DES3. Sam has raised strong > objections to adding a new padded enctype; see: > http://mailman.mit.edu/pipermail/krbdev/2009-December/008373.html > > 3. CCM mode (see RFCs 3610 and 5116). We have code for a prototype > aes-ccm enctype already, so this would be easy for us to implement. > Relative to GCM, CCM has the weaknesses that it does not allow > parallel processing of message blocks (due to the CBC MAC) and that it > disturbs the block alignment of additional data. The word alignment of the additional authenticated data can be restored by prepending padding bytes to the additional data as an additional formatting step, ensuring that the application-submitted additional data end up fall on a cipher block or machine word boundary. Of course, this increases the length extension caused by the AEAD mode. > 4. GCM. Relative to CCM, GCM has the weakness that nonce reuse > compromises the integrity protection of all messages encrypted using > that key, and not merely the privacy of the two messages encrypted > with that nonce. Nonces in both cipher modes would typically be 96 > bits long, and it is likely that we would randomly generate nonces > without absolutely guaranteeing non-reuse. > > If we go with CTS or CBC, we would need to use a hash. This is a > little awkward because NIST is working on standardizing a SHA-3 hash > but won't be done until 2012. The best current candidate is probably > SHA-256, but the AEAD modes are attractive in that they allow us to > skip the SHA-2 family, which is viewed by some as transitional. > > A possible issue with AEAD modes is that neither CCM nor GCM support > the interleaving of additional and encrypted data; that is, if you > have a message which looks like A1 | M1 | A2 | M2, CCM or GCM will > authenticate A1 | A2 | M1 | M2. We do not expect this to be a serious > issue as we expect most users of iov-style encryption to be using > fixed packet formats, which precludes an attacker from tricking an > endpoint into reordering blocks. > > Currently we are internally favoring CCM. Some benchmarks indicate that CCM performs more poorly than CBC, reflecting the fact that CCM conceptually requires two block cipher invocations per cipher block of plaintext or ciphertext, while CBC requires only one. However, CCM can achieve some performance increase by using parallelism, unlike CBC + HMAC, where both the encryption function and the authentication function are inherently serial. > Another question is whether we want to do anything differently with > key derivation. When deriving 256-bit keys for the current AES > enctypes, we encrypt an n-folded constant once to produce the first > 128 bits, and then encrypt those 128 bits again to produce the rest. > An alternative might be n-folding the constant to 256 bits and > encrypting that with ECB (or CBC, though I don't see the point), which > would allow such keys to be derived inside a PKCS11 token with the > CKM_AES_ECB_ENCRYPT_DATA mechanism. > > It's not yet clear to me that there is any great value in this. As > Sam pointed out, if you have a non-extractable long-term key inside a > PKCS11 token, and an attacker gets root on your machine, the attacker > can cause the token to spit out the bits of all useful derivations of > the key by asking it to encrypt specific nfolded constants. But I > thought I would raise the issue, especially because I've heard Sam > express a certain amount of discomfort with our current "encrypt, then > encrypt the result" method of producing random bits. If the attacker does not compromise the cryptographic module, and the key derivation function involves more than encrypting some chosen plaintext using the non-extractable key, the attacker may not be able to get all the useful derivations of that key. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Thu Dec 10 07:00:25 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC8FF3A683B for ; Thu, 10 Dec 2009 07:00:24 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: General VIAGRA \256 Reseller ; Thu, 10 Dec 2009 07:00:24 -0800 (PST) Received: from etg-dialup-120-27.uniweb.net.co (etg-dialup-120-27.uniweb.net.co [200.24.120.27]) by core3.amsl.com (Postfix) with ESMTP id 8E6263A67EE for ; Thu, 10 Dec 2009 07:00:23 -0800 (PST) From: General VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: SALE 80% for user krb-wg-archive@lists.ietf.org on Pfizer Products MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091210150023.8E6263A67EE@core3.amsl.com> Date: Thu, 10 Dec 2009 07:00:23 -0800 (PST) Newsletter

This message contains graphics. If you do not see the graphics click here to view.

To successfully load this image, click here!

From ietf-krb-wg-bounces@lists.anl.gov Thu Dec 10 12:54:48 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0B4E128C15D for ; Thu, 10 Dec 2009 12:54:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dbqxUPvu-x4H for ; Thu, 10 Dec 2009 12:54:47 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 2387628C148 for ; Thu, 10 Dec 2009 12:54:10 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id EB4EB104; Thu, 10 Dec 2009 14:53:58 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 342AA107; Thu, 10 Dec 2009 14:53:54 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id EA5D380E34; Thu, 10 Dec 2009 14:53:53 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id 5679980E02 for ; Thu, 10 Dec 2009 14:53:52 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 388037CC071; Thu, 10 Dec 2009 14:53:52 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 25711-06; Thu, 10 Dec 2009 14:53:52 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 1FE6F7CC064 for ; Thu, 10 Dec 2009 14:53:51 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Am0AALfuIEtAqmIgjmdsb2JhbACbRwEBAQEJCwgJEQe8B4QrBA X-IronPort-AV: E=Sophos;i="4.47,377,1257141600"; d="scan'208";a="34705676" Received: from mail.ietf.org ([64.170.98.32]) by mailgateway.anl.gov with ESMTP; 10 Dec 2009 14:53:51 -0600 Received: by core3.amsl.com (Postfix, from userid 30) id 4C3D728C138; Thu, 10 Dec 2009 12:54:02 -0800 (PST) X-idtracker: yes To: IETF-Announce From: The IESG Message-Id: <20091210205402.4C3D728C138@core3.amsl.com> Date: Thu, 10 Dec 2009 12:54:02 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: ietf-krb-wg@lists.anl.gov Subject: [Ietf-krb-wg] Last Call: draft-josefsson-kerberos5-starttls (Using Kerberos V5 over the Transport Layer Security (TLS) protocol) to Informational RFC X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list Reply-To: ietf@ietf.org List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov The IESG has received a request from the Kerberos WG (krb-wg) to consider the following document: - 'Using Kerberos V5 over the Transport Layer Security (TLS) protocol ' as an Informational RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2009-12-24. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. The file can be obtained via http://www.ietf.org/internet-drafts/draft-josefsson-kerberos5-starttls-07.txt IESG discussion can be tracked via https://datatracker.ietf.org/public/pidtracker.cgi?command=view_id&dTag=12554&rfc_flag=0 _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Thu Dec 10 13:39:19 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 41A973A6B20 for ; Thu, 10 Dec 2009 13:39:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FkLk9S6NlLdb for ; Thu, 10 Dec 2009 13:39:18 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 2C4123A6A6E for ; Thu, 10 Dec 2009 13:39:18 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id EFF9F10E; Thu, 10 Dec 2009 15:39:06 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id D0DD4107; Thu, 10 Dec 2009 15:39:06 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id AFFEF80E34; Thu, 10 Dec 2009 15:39:06 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by lists.anl.gov (Postfix) with ESMTP id AC8DA80E02 for ; Thu, 10 Dec 2009 15:39:05 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 977EB7CC064; Thu, 10 Dec 2009 15:39:05 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 06063-10; Thu, 10 Dec 2009 15:39:05 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 7DC607CC056 for ; Thu, 10 Dec 2009 15:39:05 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Am0AAEL5IEtAqmIgjmdsb2JhbACbQQEBAQEJCwgJEQe7doQrBA X-IronPort-AV: E=Sophos;i="4.47,377,1257141600"; d="scan'208";a="34708415" Received: from mail.ietf.org ([64.170.98.32]) by mailgateway.anl.gov with ESMTP; 10 Dec 2009 15:39:04 -0600 Received: by core3.amsl.com (Postfix, from userid 30) id BEAC03A68C6; Thu, 10 Dec 2009 13:39:15 -0800 (PST) X-idtracker: yes To: IETF-Announce From: The IESG Message-Id: <20091210213915.BEAC03A68C6@core3.amsl.com> Date: Thu, 10 Dec 2009 13:39:15 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: ietf-krb-wg@lists.anl.gov Subject: [Ietf-krb-wg] Last Call: draft-ietf-krb-wg-preauth-framework (A Generalized Framework for Kerberos Pre-Authentication) to Proposed Standard X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list Reply-To: ietf@ietf.org List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov The IESG has received a request from the Kerberos WG (krb-wg) to consider the following document: - 'A Generalized Framework for Kerberos Pre-Authentication ' as a Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2010-01-07. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. The file can be obtained via http://www.ietf.org/internet-drafts/draft-ietf-krb-wg-preauth-framework-15.txt IESG discussion can be tracked via https://datatracker.ietf.org/public/pidtracker.cgi?command=view_id&dTag=11488&rfc_flag=0 _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From ietf-krb-wg-bounces@lists.anl.gov Thu Dec 10 14:11:31 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C55283A6B59 for ; Thu, 10 Dec 2009 14:11:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.321 X-Spam-Level: X-Spam-Status: No, score=-4.321 tagged_above=-999 required=5 tests=[AWL=2.279, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aGT6WoGqLbbW for ; Thu, 10 Dec 2009 14:11:29 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 3520C3A67B1 for ; Thu, 10 Dec 2009 14:11:29 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C2ABD10A; Thu, 10 Dec 2009 16:11:17 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 75B5210B; Thu, 10 Dec 2009 16:11:14 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 3ED7580E34; Thu, 10 Dec 2009 16:11:14 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 7311980E02 for ; Thu, 10 Dec 2009 16:11:12 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id 65FDC102; Thu, 10 Dec 2009 16:11:12 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 614C010A for ; Thu, 10 Dec 2009 16:11:12 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 5A1F2102 for ; Thu, 10 Dec 2009 16:11:12 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 441C97CC064; Thu, 10 Dec 2009 16:11:12 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 14521-05; Thu, 10 Dec 2009 16:11:12 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 2B9547CC056 for ; Thu, 10 Dec 2009 16:11:12 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjwDAEsAIUtFGcQcgWdsb2JhbACbPgEBFiStYoVDiE2EKwQ X-IronPort-AV: E=Sophos;i="4.47,377,1257141600"; d="scan'208";a="34710208" Received: from permutation-city.suchdamage.org (HELO mail.suchdamage.org) ([69.25.196.28]) by mailgateway.anl.gov with ESMTP; 10 Dec 2009 16:11:11 -0600 Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.suchdamage.org (Postfix) with ESMTPS id 1552920135; Thu, 10 Dec 2009 17:11:11 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 214D54128; Thu, 10 Dec 2009 17:10:38 -0500 (EST) From: Sam Hartman To: ietf@ietf.org References: <20091210213915.BEAC03A68C6@core3.amsl.com> Date: Thu, 10 Dec 2009 17:10:38 -0500 In-Reply-To: <20091210213915.BEAC03A68C6@core3.amsl.com> (The IESG's message of "Thu, 10 Dec 2009 13:39:15 -0800 (PST)") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: ietf-krb-wg@anl.gov Subject: Re: [Ietf-krb-wg] Last Call: draft-ietf-krb-wg-preauth-framework (A Generalized Framework for Kerberos Pre-Authentication) to Proposed Standard X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov I hate to be raising last call issues with my own document but such is life. 1) Jim Schaad reports that our ASN.1 module is missing an import statement. 2) Shortly after Jeff submitted the publication request, Tom Yu found some problems with the assigned numbers in the IANA pre-authentication registry that is being created. In response to his last round of comments back in April we moved some things around and apparently left some conflicts in place. The above two are relatively easy to fix. 3) We discovered that the description of ad-authentication-strength at the bottom of page 36 is incorrect. It says that ad-authentication-strength needs to be included in ad-if-relevant. The problem with that is that a client could generate a fake ad-authentication-strength element unless it is integrity protected by the KDC. So, ad-authentication-strength really needs to be included in ad-kdc-issued. In this case, the KDC provides integrity protection for the element, preventing a client from including its own claim about authentication strength. (This is roughly the difference between signed and unsigned attributes in CMS). I need to figure out whether ad-kdc-issued is inherently non-critical or if you need ad-kdc-issued plus ad-if-relevant (and if so, what the order should be) to get a non-critical integrity-protected authorization data element. This change should not be a problem; as far as I'm aware none of the implementations currently include an ad-authentication-strength element. Sorry that the above point is coming out so late. We discovered this when looking at a bug in another protocol and were concerned that we might have something we needed to treat as a product security problem. As it turns out that issue is non-sensitive and I'll be describing it in a separate message to the working group list. I request permission from the chairs and Tim to upload a new draft fixing these three issues once I confirm a resolution for #3 above. _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Fri Dec 11 02:24:35 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EBD743A6A73 for ; Fri, 11 Dec 2009 02:24:34 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Online Shop ; Fri, 11 Dec 2009 02:24:28 -0800 (PST) Received: from 210-210-74-90.lan.sify.net (210-210-74-90.lan.sify.net [210.210.74.90]) by core3.amsl.com (Postfix) with ESMTP id B845D3A68F5 for ; Fri, 11 Dec 2009 02:24:25 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: Valued customer krb-wg-archive@lists.ietf.org 80% OFF on Pfizer. Content-Type: text/html; charset="ISO-8859-1" MIME-Version: 1.0 Message-Id: <20091211102425.B845D3A68F5@core3.amsl.com> Date: Fri, 11 Dec 2009 02:24:25 -0800 (PST) Newsletter

If you're having trouble viewing this email, see it online the Web.

From krb-wg-archive@lists.ietf.org Fri Dec 11 02:28:12 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E85503A693D for ; Fri, 11 Dec 2009 02:28:12 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Fri, 11 Dec 2009 02:28:06 -0800 (PST) Received: from 184.25.broadband4.iol.cz (184.25.broadband4.iol.cz [85.71.25.184]) by core3.amsl.com (Postfix) with ESMTP id 487EB3A68F5 for ; Fri, 11 Dec 2009 02:28:05 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091211102805.487EB3A68F5@core3.amsl.com> Date: Fri, 11 Dec 2009 02:28:05 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

From ietf-krb-wg-bounces@lists.anl.gov Fri Dec 11 09:11:32 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 36E313A69A0 for ; Fri, 11 Dec 2009 09:11:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.745 X-Spam-Level: X-Spam-Status: No, score=-4.745 tagged_above=-999 required=5 tests=[AWL=1.854, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VfJxwDlZ5Df6 for ; Fri, 11 Dec 2009 09:11:30 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 5B8093A687B for ; Fri, 11 Dec 2009 09:11:30 -0800 (PST) Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id C3577118; Fri, 11 Dec 2009 11:11:18 -0600 (CST) Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 258D9FE; Fri, 11 Dec 2009 11:11:13 -0600 (CST) Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id E516D80E32; Fri, 11 Dec 2009 11:11:12 -0600 (CST) X-Original-To: ietf-krb-wg@lists.anl.gov Delivered-To: ietf-krb-wg@lists.anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id E686E80E2D for ; Fri, 11 Dec 2009 11:11:10 -0600 (CST) Received: by mailhost.anl.gov (Postfix) id E10BCF3; Fri, 11 Dec 2009 11:11:10 -0600 (CST) Delivered-To: ietf-krb-wg@anl.gov Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id DC2A1FE for ; Fri, 11 Dec 2009 11:11:10 -0600 (CST) Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id D69ADF3 for ; Fri, 11 Dec 2009 11:11:10 -0600 (CST) Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id C0AC47CC064; Fri, 11 Dec 2009 11:11:10 -0600 (CST) Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 17571-04; Fri, 11 Dec 2009 11:11:10 -0600 (CST) Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id A76437CC05F for ; Fri, 11 Dec 2009 11:11:10 -0600 (CST) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4AAHoLIkuAAtnEmWdsb2JhbACbOwEBAQEBCAsKBxOsH4VGiE2EKwSBYw X-IronPort-AV: E=Sophos;i="4.47,383,1257141600"; d="scan'208";a="34746007" Received: from smtp01.srv.cs.cmu.edu ([128.2.217.196]) by mailgateway.anl.gov with ESMTP; 11 Dec 2009 11:11:10 -0600 Received: from ATLANTIS.PC.CS.CMU.EDU (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id nBBHB9uv002418 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 11 Dec 2009 12:11:09 -0500 (EST) Date: Fri, 11 Dec 2009 12:11:09 -0500 From: Jeffrey Hutzelman To: ietf-krb-wg@anl.gov Message-ID: <5CD2D0C3536894D7F2062FB6@atlantis.pc.cs.cmu.edu> X-Mailer: Mulberry/4.0.8 (Linux/x86) MIME-Version: 1.0 Content-Disposition: inline X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov Cc: jhutz@cmu.edu Subject: [Ietf-krb-wg] IETF76 minutes X-BeenThere: ietf-krb-wg@lists.anl.gov X-Mailman-Version: 2.1.11 Precedence: list List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: ietf-krb-wg-bounces@lists.anl.gov Errors-To: ietf-krb-wg-bounces@lists.anl.gov I have uploaded draft minutes for our meeting at IETF76 to the IETF web site. The draft minutes can be reviewed here: This version is missing some details on the discussion of the data model document, and probably also some details on the discussion of Sam's FAST negotation proposal. I encourage everyone to review the minutes and send comments and corrections to me. This goes double for people who were actually there; it's hard to get this right remotely. I will post at updated version sometime next week. -- Jeff _______________________________________________ ietf-krb-wg mailing list ietf-krb-wg@lists.anl.gov https://lists.anl.gov/mailman/listinfo/ietf-krb-wg From krb-wg-archive@lists.ietf.org Sat Dec 12 22:25:47 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AC4433A6819 for ; Sat, 12 Dec 2009 22:25:47 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sat, 12 Dec 2009 22:25:40 -0800 (PST) Received: from 210-213-58-143.static.asianet.co.th (210-213-58-143.static.asianet.co.th [210.213.58.143]) by core3.amsl.com (Postfix) with ESMTP id DDB6F3A6880 for ; Sat, 12 Dec 2009 22:25:39 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091213062539.DDB6F3A6880@core3.amsl.com> Date: Sat, 12 Dec 2009 22:25:39 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

From krb-wg-archive@lists.ietf.org Sun Dec 13 03:07:10 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3BE923A67FD for ; Sun, 13 Dec 2009 03:07:10 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: VIAGRA \256 Reseller ; Sun, 13 Dec 2009 03:07:03 -0800 (PST) Received: from 87ppoe81.clients.kbrod.net (87ppoe81.clients.kbrod.net [195.234.87.81]) by core3.amsl.com (Postfix) with ESMTP id 4E26B3A67EA for ; Sun, 13 Dec 2009 03:07:02 -0800 (PST) From: VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: Dear krb-wg-archive@lists.ietf.org receive 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091213110702.4E26B3A67EA@core3.amsl.com> Date: Sun, 13 Dec 2009 03:07:02 -0800 (PST) Pfizer ® Newsletter

If you have images disabled or have trouble viewing this message, please click here.

To unsubscribe, click here.

From krb-wg-archive@lists.ietf.org Sun Dec 13 08:18:51 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B85753A6833 for ; Sun, 13 Dec 2009 08:18:50 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: Pfizer \256 Customer Servi[...] X-Spam-Flag: NO X-Spam-Score: -45.072 X-Spam-Level: X-Spam-Status: No, score=-45.072 tagged_above=-999 required=5 tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426, HTML_IMAGE_ONLY_20=1.546, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001, MIME_8BIT_HEADER=0.3, MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_UNI=0.591, URIBL_AB_SURBL=10, URIBL_BLACK=20, URI_HEX=0.368, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GaK0ySzGVwoH for ; Sun, 13 Dec 2009 08:18:43 -0800 (PST) Received: from host86-143-116-10.range86-143.btcentralplus.com (host86-143-116-10.range86-143.btcentralplus.com [86.143.116.10]) by core3.amsl.com (Postfix) with ESMTP id 769663A67EE for ; Sun, 13 Dec 2009 08:18:42 -0800 (PST) From: Pfizer � Customer Service To: krb-wg-archive@lists.ietf.org Subject: Special offer krb-wg-archive@lists.ietf.org receive 70% OFF on Pfizer. MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091213161842.769663A67EE@core3.amsl.com> Date: Sun, 13 Dec 2009 08:18:42 -0800 (PST) Pfizer ® 80% OFF

If you cannot see the images, please click here

From krb-wg-archive@lists.ietf.org Sun Dec 13 09:22:29 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 408323A6828 for ; Sun, 13 Dec 2009 09:22:29 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char AE hex): From: General VIAGRA \256 Reseller ; Sun, 13 Dec 2009 09:22:28 -0800 (PST) Received: from i170015.upc-i.chello.nl (i170015.upc-i.chello.nl [62.195.170.15]) by core3.amsl.com (Postfix) with ESMTP id BBC733A67E5 for ; Sun, 13 Dec 2009 09:22:27 -0800 (PST) From: General VIAGRA � Reseller To: krb-wg-archive@lists.ietf.org Subject: SALE 80% for user krb-wg-archive@lists.ietf.org on Pfizer Products MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091213172227.BBC733A67E5@core3.amsl.com> Date: Sun, 13 Dec 2009 09:22:27 -0800 (PST) Newsletter

This message contains graphics. If you do not see the graphics click here to view.

From krb-wg-archive@lists.ietf.org Sun Dec 13 10:29:36 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A5A043A6917 for ; Sun, 13 Dec 2009 10:29:36 -0800 (PST) X-Quarantine-ID: <7iXfvaPcZbYa> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char A9 hex): From: VIAGRA \251 Online Shop ; Sun, 13 Dec 2009 10:29:27 -0800 (PST) Received: from 78-31-230-102.ip.airnet.lt (78-31-230-102.ip.airnet.lt [78.31.230.102]) by core3.amsl.com (Postfix) with ESMTP id 349523A6864 for ; Sun, 13 Dec 2009 10:29:27 -0800 (PST) From: VIAGRA � Online Shop To: krb-wg-archive@lists.ietf.org Subject: For krb-wg-archive special 80% OFF on Pfizer MIME-Version: 1.0 Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <20091213182927.349523A6864@core3.amsl.com> Date: Sun, 13 Dec 2009 10:29:27 -0800 (PST) Newsletter

View Online

From krb-wg-archive@lists.ietf.org Sun Dec 13 15:05:14 2009 Return-Path: X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A4343A659B for ; Sun, 13 Dec 2009 15:05:14 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char A9 hex): From: VIAGRA \251 Online Shop ; Sun, 13 Dec 2009 15:05:07 -0800 (PST) Received: from 212-198-141-171.rev.numericable.fr (212-198-141-171.rev.numericable.fr [212.198.141.171]) by core3.amsl.com (Postfix) with ESMTP id 368883A63D3 for ; Sun, 13 Dec 2009 15:05:07 -0800 (PST) From: VIAGRA � Online Shop