Return-Path: Received: from newbox.ece.cmu.edu (localhost [127.0.0.1]) by newbox.ece.cmu.edu (Cyrus v2.1.12) with LMTP; Tue, 12 Aug 2003 20:19:06 -0400 X-Sieve: CMU Sieve 2.2 Received: from hazard.ece.cmu.edu (HAZARD.ECE.CMU.EDU [128.2.129.24]) by newbox.ece.cmu.edu (Postfix) with ESMTP id 00A3630CC for ; Tue, 12 Aug 2003 20:19:05 -0400 (EDT) Received: by hazard.ece.cmu.edu (Postfix, from userid 953) id BDA6B148; Tue, 12 Aug 2003 20:19:05 -0400 (EDT) Received: from sos.ece.cmu.edu (SOS.ECE.CMU.EDU [128.2.129.27]) by hazard.ece.cmu.edu (Postfix) with ESMTP id 3C997141; Tue, 12 Aug 2003 20:19:01 -0400 (EDT) Received: by sos.ece.cmu.edu (Postfix) id CD00789DF; Tue, 12 Aug 2003 20:18:48 -0400 (EDT) Delivered-To: ips-outgoing@sos.ece.cmu.edu Received: from osgood.ece.cmu.edu (OSGOOD.ECE.CMU.EDU [128.2.129.25]) by sos.ece.cmu.edu (Postfix) with ESMTP id BA2DA89DC for ; Tue, 12 Aug 2003 20:18:48 -0400 (EDT) Received: by osgood.ece.cmu.edu (Postfix) id 808A87E; Tue, 12 Aug 2003 20:18:48 -0400 (EDT) Delivered-To: ips-outgoing@ece.cmu.edu Received: by osgood.ece.cmu.edu (Postfix, from userid 953) id 6022B89; Tue, 12 Aug 2003 20:18:48 -0400 (EDT) Received: from sos.ece.cmu.edu (SOS.ECE.CMU.EDU [128.2.129.27]) by osgood.ece.cmu.edu (Postfix) with ESMTP id D64C27E for ; Tue, 12 Aug 2003 20:18:46 -0400 (EDT) Received: by sos.ece.cmu.edu (Postfix, from userid 363) id C334589E3; Tue, 12 Aug 2003 20:18:46 -0400 (EDT) X-Original-To: ips@sos.ece.cmu.edu Delivered-To: ips@sos.ece.cmu.edu Received: from hazard.ece.cmu.edu (HAZARD.ECE.CMU.EDU [128.2.129.24]) by sos.ece.cmu.edu (Postfix) with ESMTP id 4EB6D89DC for ; Tue, 12 Aug 2003 20:18:45 -0400 (EDT) Received: by hazard.ece.cmu.edu (Postfix) id BB3E3141; Tue, 12 Aug 2003 20:18:44 -0400 (EDT) Delivered-To: ips@ece.cmu.edu Received: by hazard.ece.cmu.edu (Postfix, from userid 953) id 90398F6; Tue, 12 Aug 2003 20:18:44 -0400 (EDT) Received: from mail.ivivity.com (unknown [64.238.111.99]) by hazard.ece.cmu.edu (Postfix) with ESMTP id 4FCEB14A for ; Tue, 12 Aug 2003 20:18:39 -0400 (EDT) Received: by atlops.ivivity.com with Internet Mail Service (5.5.2653.19) id ; Tue, 12 Aug 2003 20:18:34 -0400 Message-ID: From: Eddy Quicksall To: "Merhar, Milan" , "Ips@Ece.Cmu.Edu (ips@ece.cmu.edu)" Subject: Virus warning Date: Tue, 12 Aug 2003 20:18:32 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain Sender: owner-ips@ece.cmu.edu Precedence: bulk X-Spam-Status: No, hits=-12.1 required=5.0 tests=BAYES_10,ORIGINAL_MESSAGE version=2.50 X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp) It looks like this has the W32.Bugbear.B.Dam virus. Eddy -----Original Message----- From: Merhar, Milan [mailto:mmerhar@muttsnuts.com] Sent: Tuesday, August 12, 2003 7:41 PM Subject: RE: iSCSI Inband authentication (SRP/CHAP) - proposed resolution Just to make sure I understand the requirement; if CHAP is used in today's conventional way with a human-generated password, iSCSI login MUST be protected using ESP encryption (and integrity.) That seems to be a reasonable solution, given the goal of protecting the login secret. But, since the IPsec SA must be in place before iSCSI l