From anders.rundgren@telia.com Mon Feb 7 08:39:15 2011 Return-Path: X-Original-To: keyprov@core3.amsl.com Delivered-To: keyprov@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 71D263A6E02 for ; Mon, 7 Feb 2011 08:39:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=1.300, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X1-enzUxejZI for ; Mon, 7 Feb 2011 08:39:14 -0800 (PST) Received: from smtp-out11.han.skanova.net (smtp-out11.han.skanova.net [195.67.226.200]) by core3.amsl.com (Postfix) with ESMTP id 734D13A6D7D for ; Mon, 7 Feb 2011 08:39:14 -0800 (PST) Received: from [192.168.0.201] (81.232.45.215) by smtp-out11.han.skanova.net (8.5.133) (authenticated as u36408181) id 4D0756AC012D9E72 for keyprov@ietf.org; Mon, 7 Feb 2011 17:39:17 +0100 Message-ID: <4D502034.7030400@telia.com> Date: Mon, 07 Feb 2011 17:39:16 +0100 From: Anders Rundgren User-Agent: Thunderbird 2.0.0.24 (X11/20100623) MIME-Version: 1.0 To: KEYPROV Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [KEYPROV] NSTIC Update - Vital Technology Still Missing X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Feb 2011 16:39:16 -0000 http://www.nist.gov/nstic/video.html What this esteemed bunch of people may have overlooked, is that in a world hooked on on-line, the majority of actual uses-cases also presume on-line provisioned credentials directly to the end-user. However, there is no such system available today for the USB tokens and smart cards referred to in this video; you typically need a proprietary card management system. My personal take on this particular subject is that it doesn't make sense trying to make a variant and often NDA-protected technology like smart cards perform tricks that it was never designed for; it is much easier defining a "Web Token" which of course would be completely open and only require a single device driver. Anders From Ron.Williams@us.ibm.com Mon Feb 7 09:04:52 2011 Return-Path: X-Original-To: keyprov@core3.amsl.com Delivered-To: keyprov@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BE5103A6E14 for ; Mon, 7 Feb 2011 09:04:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id urByifvC9Q44 for ; Mon, 7 Feb 2011 09:04:52 -0800 (PST) Received: from e1.ny.us.ibm.com (e1.ny.us.ibm.com [32.97.182.141]) by core3.amsl.com (Postfix) with ESMTP id F31F63A6E08 for ; Mon, 7 Feb 2011 09:04:51 -0800 (PST) Received: from d01dlp02.pok.ibm.com (d01dlp02.pok.ibm.com [9.56.224.85]) by e1.ny.us.ibm.com (8.14.4/8.13.1) with ESMTP id p17GtNJI009322 for ; Mon, 7 Feb 2011 11:55:38 -0500 Received: from d01relay04.pok.ibm.com (d01relay04.pok.ibm.com [9.56.227.236]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id ED9EA4DE803E for ; Mon, 7 Feb 2011 12:04:09 -0500 (EST) Received: from d03av06.boulder.ibm.com (d03av06.boulder.ibm.com [9.17.195.245]) by d01relay04.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id p17H4sJX174984 for ; Mon, 7 Feb 2011 12:04:55 -0500 Received: from d03av06.boulder.ibm.com (loopback [127.0.0.1]) by d03av06.boulder.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id p17H9RYj010259 for ; Mon, 7 Feb 2011 10:09:27 -0700 Received: from d03nm119.boulder.ibm.com (d03nm119.boulder.ibm.com [9.17.195.145]) by d03av06.boulder.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id p17H9Rgd010221 for ; Mon, 7 Feb 2011 10:09:27 -0700 Auto-Submitted: auto-generated From: Ron Williams To: keyprov@ietf.org Message-ID: Date: Mon, 7 Feb 2011 10:04:53 -0700 X-MIMETrack: Serialize by Router on D03NM119/03/M/IBM(Release 8.5.1FP2|March 17, 2010) at 02/07/2011 10:04:54 MIME-Version: 1.0 Content-type: multipart/alternative; Boundary="0__=08BBF2A3DFCE52778f9e8a93df938690918c08BBF2A3DFCE5277" Content-Disposition: inline X-Content-Scanned: Fidelis XPS MAILER Subject: [KEYPROV] AUTO: Ron Williams is out of the office (returning 02/11/2011) X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Feb 2011 17:04:52 -0000 --0__=08BBF2A3DFCE52778f9e8a93df938690918c08BBF2A3DFCE5277 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: quoted-printable I am out of the office until 02/11/2011. Note: This is an automated response to your message "KEYPROV Digest, V= ol 47, Issue 1" sent on 2/7/11 9:39:16. This is the only notification you will receive while this person is awa= y.= --0__=08BBF2A3DFCE52778f9e8a93df938690918c08BBF2A3DFCE5277 Content-type: text/html; charset=US-ASCII Content-Disposition: inline Content-transfer-encoding: quoted-printable

I am out of the office until 02/11/2011.




Note: This is an automated re= sponse to your message "KEYPROV Digest= , Vol 47, Issue 1" s= ent on 2/7/11 9:39:16.

This is the only notification= you will receive while this person is away.= --0__=08BBF2A3DFCE52778f9e8a93df938690918c08BBF2A3DFCE5277-- From anders.rundgren@telia.com Mon Feb 7 08:37:10 2011 Return-Path: X-Original-To: keyprov@core3.amsl.com Delivered-To: keyprov@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4CB213A6D6E for ; Mon, 7 Feb 2011 08:37:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.999 X-Spam-Level: X-Spam-Status: No, score=-0.999 tagged_above=-999 required=5 tests=[BAYES_50=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rq0Ap1zd-+JD for ; Mon, 7 Feb 2011 08:37:09 -0800 (PST) Received: from smtp-out11.han.skanova.net (smtp-out11.han.skanova.net [195.67.226.200]) by core3.amsl.com (Postfix) with ESMTP id EAA193A6959 for ; Mon, 7 Feb 2011 08:37:08 -0800 (PST) Received: from [192.168.0.201] (81.232.45.215) by smtp-out11.han.skanova.net (8.5.133) (authenticated as u36408181) id 4D0756AC012D9A54 for keyprov@ietf.org; Mon, 7 Feb 2011 17:37:11 +0100 Message-ID: <4D501FB7.2040409@telia.com> Date: Mon, 07 Feb 2011 17:37:11 +0100 From: Anders Rundgren User-Agent: Thunderbird 2.0.0.24 (X11/20100623) MIME-Version: 1.0 To: undisclosed-recipients:; Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Fri, 11 Feb 2011 13:34:20 -0800 Subject: [KEYPROV] NSTIC Update - Vital Technology Still Missing X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Feb 2011 16:37:10 -0000 http://www.nist.gov/nstic/video.html What this esteemed bunch of people may have overlooked, is that in a world hooked on on-line, the majority of actual uses-cases also presume on-line provisioned credentials directly to the end-user. However, there is no such system available today for the USB tokens and smart cards referred to in this video; you typically need a proprietary card management system. My personal take on this particular subject is that it doesn't make sense trying to make a variant and often NDA-protected technology like smart cards perform tricks that it was never designed for; it is much easier defining a "Web Token" which of course would be completely open and only require a single device driver. Anders From hannes.tschofenig@gmx.net Fri Feb 18 03:13:58 2011 Return-Path: X-Original-To: keyprov@core3.amsl.com Delivered-To: keyprov@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DD86C3A6EF8 for ; Fri, 18 Feb 2011 03:13:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.849 X-Spam-Level: X-Spam-Status: No, score=-102.849 tagged_above=-999 required=5 tests=[AWL=-0.250, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wr3XyfEoi4nq for ; Fri, 18 Feb 2011 03:13:58 -0800 (PST) Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.23]) by core3.amsl.com (Postfix) with SMTP id BCA0B3A6C85 for ; Fri, 18 Feb 2011 03:13:57 -0800 (PST) Received: (qmail invoked by alias); 18 Feb 2011 11:14:30 -0000 Received: from a88-115-222-204.elisa-laajakaista.fi (EHLO [192.168.1.3]) [88.115.222.204] by mail.gmx.net (mp059) with SMTP; 18 Feb 2011 12:14:30 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX18SbjUP7R0S7oJeg4fV/3JL4UDB3JcqslzDOnmQ3y zYf36NXsCOt1IR From: Hannes Tschofenig Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Fri, 18 Feb 2011 13:14:29 +0200 Message-Id: <88181895-96DC-43F5-90DF-8DA963812559@gmx.net> To: KEYPROV Mime-Version: 1.0 (Apple Message framework v1082) X-Mailer: Apple Mail (2.1082) X-Y-GMX-Trusted: 0 Cc: Hannes Tschofenig Subject: [KEYPROV] Web Object Encryption and Signing (WOES) X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Feb 2011 11:13:58 -0000 > Folks, a dedicated list has been established for discussion about > requirements and potential implementation of JSON to provide security > services for Web-based applications. You can subscribe here: > > https://www.ietf.org/mailman/listinfo/woes From wwwrun@rfc-editor.org Fri Feb 18 06:16:13 2011 Return-Path: X-Original-To: keyprov@core3.amsl.com Delivered-To: keyprov@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0E6903A6DBC for ; Fri, 18 Feb 2011 06:16:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.425 X-Spam-Level: X-Spam-Status: No, score=-102.425 tagged_above=-999 required=5 tests=[AWL=0.175, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ofoMEJ-oPWXK for ; Fri, 18 Feb 2011 06:16:12 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:1112:1::2f]) by core3.amsl.com (Postfix) with ESMTP id 4D9C33A6CCE for ; Fri, 18 Feb 2011 06:16:12 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 418E4E06A3; Fri, 18 Feb 2011 06:16:46 -0800 (PST) To: andrea.doherty@rsa.com, mpei@verisign.com, smachani@diversinet.com, mnystrom@microsoft.com, stephen.farrell@cs.tcd.ie, turners@ieca.com, tim.polk@nist.gov, phill@hallambaker.com, Hannes.Tschofenig@gmx.net From: RFC Errata System Message-Id: <20110218141646.418E4E06A3@rfc-editor.org> Date: Fri, 18 Feb 2011 06:16:46 -0800 (PST) Cc: nmalykh@protocols.ru, keyprov@ietf.org, rfc-editor@rfc-editor.org Subject: [KEYPROV] [Editorial Errata Reported] RFC6063 (2725) X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Feb 2011 14:16:13 -0000 The following errata report has been submitted for RFC6063, "Dynamic Symmetric Key Provisioning Protocol (DSKPP)". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=6063&eid=2725 -------------------------------------- Type: Editorial Reported by: Nikolai Malykh Section: 7.2.2 Original Text ------------- To handle content negotiation, HTTP requests MAY include an HTTP Accept header field. This header field SHOULD should be identified using the MIME type specified in Section 7.2.1. The Accept header MAY include additional content types defined by future versions of this protocol. Corrected Text -------------- To handle content negotiation, HTTP requests MAY include an HTTP Accept header field. This header field SHOULD be identified using the MIME type specified in Section 7.2.1. The Accept header MAY include additional content types defined by future versions of this protocol. Notes ----- Double "should" Instructions: ------------- This errata is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary. -------------------------------------- RFC6063 (draft-ietf-keyprov-dskpp-14) -------------------------------------- Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) Publication Date : December 2010 Author(s) : A. Doherty, M. Pei, S. Machani, M. Nystrom Category : PROPOSED STANDARD Source : Provisioning of Symmetric Keys Area : Security Stream : IETF Verifying Party : IESG From mpei@verisign.com Fri Feb 25 10:20:01 2011 Return-Path: X-Original-To: keyprov@core3.amsl.com Delivered-To: keyprov@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A6DF3A683D for ; Fri, 25 Feb 2011 10:20:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.828 X-Spam-Level: X-Spam-Status: No, score=-9.828 tagged_above=-999 required=5 tests=[AWL=0.772, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4iV+tLvCpj2D for ; Fri, 25 Feb 2011 10:20:00 -0800 (PST) Received: from robin.verisign.com (robin.verisign.com [65.205.251.75]) by core3.amsl.com (Postfix) with ESMTP id A193F3A683B for ; Fri, 25 Feb 2011 10:20:00 -0800 (PST) Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by robin.verisign.com (8.12.11/8.13.4) with ESMTP id p1PIKrrp019866; Fri, 25 Feb 2011 10:20:53 -0800 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.4675); Fri, 25 Feb 2011 10:20:53 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 25 Feb 2011 10:20:52 -0800 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C901EE9EE8@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: New Version Notification - draft-mraihi-totp-timebased-08.txt Thread-Index: AcvUj9uppVp5J1IuSZeI2ygZEDkwEgAiNXNA From: "Pei, Mingliang" To: , "KEYPROV" X-OriginalArrivalTime: 25 Feb 2011 18:20:53.0388 (UTC) FILETIME=[BCD024C0:01CBD518] Subject: [KEYPROV] FW: New Version Notification - draft-mraihi-totp-timebased-08.txt X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Feb 2011 18:20:01 -0000 =20 -----Original Message----- From: Internet-Draft@ietf.org [mailto:Internet-Draft@ietf.org]=20 Sent: Thursday, February 24, 2011 6:00 PM To: smachani@diversinet.com; Pei, Mingliang; johan.rydell@portwise.com; draft-mraihi-totp-timebased@tools.ietf.org; Hannes.Tschofenig@gmx.net; turners@ieca.com; dromasca@avaya.com; alexey.melnikov@isode.com Subject: New Version Notification - draft-mraihi-totp-timebased-08.txt New version (-08) has been submitted for draft-mraihi-totp-timebased-08.txt. http://www.ietf.org/internet-drafts/draft-mraihi-totp-timebased-08.txt Sub state has been changed to AD Follow up from New Id Needed Diff from previous version: http://tools.ietf.org/rfcdiff?url2=3Ddraft-mraihi-totp-timebased-08 IETF Secretariat.