From hartmans@mit.edu Mon Mar 4 06:11:11 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 636F021F8A84 for ; Mon, 4 Mar 2013 06:11:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.74 X-Spam-Level: X-Spam-Status: No, score=-100.74 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ONI99-3xSBxD for ; Mon, 4 Mar 2013 06:11:10 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 524E521F8967 for ; Mon, 4 Mar 2013 06:11:07 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-216-0-82.hsd1.ma.comcast.net [98.216.0.82]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 5460F203A3; Mon, 4 Mar 2013 09:11:02 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id E7E1E4486; Mon, 4 Mar 2013 09:11:05 -0500 (EST) From: Sam Hartman To: Sam Hartman References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> Date: Mon, 04 Mar 2013 09:11:05 -0500 In-Reply-To: (Sam Hartman's message of "Mon, 18 Feb 2013 10:13:32 -0500") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "kitten@ietf.org" , Kelley Burgin Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 14:11:11 -0000 >From past discussions and from Love's quick comment when I sent the call for adoption, it seems clear people have reviewed this document. There don't seem to be any technical objections nor any objections to this work being done on the IETF stream. Stephen and the chairs would prefer this go forward as a WG item if possible. So, my reading of the silence is that no one objects to us taking this forward as an informational document. If I got that wrong, please shout out before the draft submission window opens next week. Otherwise, we'll consider the draft adopted and move for a quick last call after Love and Nico's concern about CTS vs CBC in resolved. Sam hartman Kitten co-chair From nico@cryptonector.com Mon Mar 4 08:15:26 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1836221F85EE for ; Mon, 4 Mar 2013 08:15:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.976 X-Spam-Level: X-Spam-Status: No, score=-1.976 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mBBsMDRWejmC for ; Mon, 4 Mar 2013 08:15:22 -0800 (PST) Received: from homiemail-a70.g.dreamhost.com (caiajhbdcagg.dreamhost.com [208.97.132.66]) by ietfa.amsl.com (Postfix) with ESMTP id 1BC7221F8611 for ; Mon, 4 Mar 2013 08:15:18 -0800 (PST) Received: from homiemail-a70.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a70.g.dreamhost.com (Postfix) with ESMTP id D3F5476806A for ; Mon, 4 Mar 2013 08:15:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=yTovxBzBaVe2lDpUX+fJ yNiGQfE=; b=lCWyw7U8Ft9WpBb665ozQww3R+cktpGPzwmBK8dSHyvfl1NA6jWz FUhdD+M+UOvbn1B7L1Hb2dhFhZnel/lc24XAZy7QDb8LohDbFJqYHVfFE0jBgKpe ILkFjEBx5RIyeiZa8tmPGgyzfBnyd3P/EKODxYT4/jFRgSCRCDvpUb0= Received: from mail-wi0-f177.google.com (mail-wi0-f177.google.com [209.85.212.177]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a70.g.dreamhost.com (Postfix) with ESMTPSA id 7BF8B768064 for ; Mon, 4 Mar 2013 08:15:17 -0800 (PST) Received: by mail-wi0-f177.google.com with SMTP id hm14so2267115wib.10 for ; Mon, 04 Mar 2013 08:15:16 -0800 (PST) MIME-Version: 1.0 X-Received: by 10.180.74.228 with SMTP id x4mr12925508wiv.0.1362413716061; Mon, 04 Mar 2013 08:15:16 -0800 (PST) Received: by 10.216.148.193 with HTTP; Mon, 4 Mar 2013 08:15:15 -0800 (PST) Received: by 10.216.148.193 with HTTP; Mon, 4 Mar 2013 08:15:15 -0800 (PST) In-Reply-To: References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> Date: Mon, 4 Mar 2013 10:15:15 -0600 Message-ID: From: Nico Williams To: Sam Hartman Content-Type: multipart/alternative; boundary=f46d043c7efe95492b04d71ba955 Cc: kitten@ietf.org, "Kelley W. Burgin" Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 16:15:26 -0000 --f46d043c7efe95492b04d71ba955 Content-Type: text/plain; charset=UTF-8 I support this work. --f46d043c7efe95492b04d71ba955 Content-Type: text/html; charset=UTF-8

I support this work.

--f46d043c7efe95492b04d71ba955-- From ghudson@mit.edu Mon Mar 4 08:51:15 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0280E21F8C7A for ; Mon, 4 Mar 2013 08:51:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p0VvzqrZC1Nf for ; Mon, 4 Mar 2013 08:51:14 -0800 (PST) Received: from dmz-mailsec-scanner-3.mit.edu (DMZ-MAILSEC-SCANNER-3.MIT.EDU [18.9.25.14]) by ietfa.amsl.com (Postfix) with ESMTP id 5549221F85AC for ; Mon, 4 Mar 2013 08:51:14 -0800 (PST) X-AuditID: 1209190e-b7f266d0000008cb-58-5134d101f750 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 56.27.02251.101D4315; Mon, 4 Mar 2013 11:51:13 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id r24Gov9P029462; Mon, 4 Mar 2013 11:51:13 -0500 Received: from [18.101.8.102] (VPN-18-101-8-102.MIT.EDU [18.101.8.102]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id r24GotFB026631 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 4 Mar 2013 11:50:56 -0500 Message-ID: <5134D0EE.3040102@mit.edu> Date: Mon, 04 Mar 2013 11:50:54 -0500 From: Greg Hudson User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130106 Thunderbird/17.0.2 MIME-Version: 1.0 To: Sam Hartman References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjleLIzCtJLcpLzFFi42IR4hRV1mW8aBJocKHLyOJr2wM2i6ObV7FY zGvIcGD2WLLkJ5PHyqmn2T22Nv9jDGCO4rJJSc3JLEst0rdL4Mq4svUTW8FtpoprM9+yNjBO ZOpi5OCQEDCRuH6bvYuRE8gUk7hwbz1bFyMXh5DAPkaJ6dNnsEM4Gxgllt36zQjhHGaSeNf3 lBmkhVdATWLOk6eMIDaLgKrEs/OPWUFsNgFliYNnv7GA2KICIRKLzkxng6gXlDg58wlYXERA XWL1pUlgq5kFIiRevZ0P1issECTxcslDJohlB5gk/v56DraAE2jZvhXHmSFulZRYNK2TBaJZ B+igB8wQtrzE9rdzmCcwCs1Csm8WkrJZSMoWMDKvYpRNya3SzU3MzClOTdYtTk7My0st0jXW y80s0UtNKd3ECA52Sb4djF8PKh1iFOBgVOLhjThuEijEmlhWXJl7iFGSg0lJlFfhHFCILyk/ pTIjsTgjvqg0J7X4EKMEB7OSCO+pU0A53pTEyqrUonyYlDQHi5I475WUm/5CAumJJanZqakF qUUwWRkODiUJXvYLQI2CRanpqRVpmTklCGkmDk6Q4TxAw/+eBxleXJCYW5yZDpE/xagoJc5b ApIQAElklObB9cKS0StGcaBXhHlfg1TxABMZXPcroMFMQIM9QsEGlyQipKQaGOWM+UMN7zoG fjtW8eDbk9mSX083LBHLMZtyxKhqkrFAtl1YXNF8ncicC9euM3RlLd7ygG2d+5O70nFPTmlE VEZfsvnnenvj7Km5Gw6eXGu1VDDmMdOpHXO4cz90KDqeU974sSkvYo3PPAtfoXlb/f+sidp/ 39Vw16/3XHzXdd4t0FigtXC1urUSS3FGoqEWc1FxIgAPnViaIQMAAA== Cc: "kitten@ietf.org" , Kelley Burgin Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 16:51:15 -0000 On 03/04/2013 09:11 AM, Sam Hartman wrote: > So, my reading of the silence is that no one objects to us taking this > forward as an informational document. I don't object. But I do tend to think that if the Kerberos ecosystem is going to have two different AES-and-a-hash cipher suites, it would be better for the new one to use SHA-3. From nico@cryptonector.com Mon Mar 4 09:00:21 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD4C621F8CE9 for ; Mon, 4 Mar 2013 09:00:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pxS31AJCgKsJ for ; Mon, 4 Mar 2013 09:00:16 -0800 (PST) Received: from homiemail-a77.g.dreamhost.com (caiajhbdccah.dreamhost.com [208.97.132.207]) by ietfa.amsl.com (Postfix) with ESMTP id 827D021F8CD8 for ; Mon, 4 Mar 2013 09:00:16 -0800 (PST) Received: from homiemail-a77.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a77.g.dreamhost.com (Postfix) with ESMTP id 383FF9406E for ; Mon, 4 Mar 2013 09:00:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=fGwCKpL3fnYzsz1DfpXW d4kAVeo=; b=rgXoPNht4M4OFbgErA9emoBazGEejMWnpgEEnMTBgZWCw+h4c+7s JECyHyYLTxdpuBpu60SZevGkdAdVH7Cpmc4pnBkl9PmuORNlIrEFxUaAF7ewJJsk /baHYqNTa+hWp6xBHL3mdOvYAiFV9j9CuhU1b/KvJC9NaajzGbPCJiE= Received: from mail-wi0-f173.google.com (mail-wi0-f173.google.com [209.85.212.173]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a77.g.dreamhost.com (Postfix) with ESMTPSA id D36D49406D for ; Mon, 4 Mar 2013 09:00:15 -0800 (PST) Received: by mail-wi0-f173.google.com with SMTP id hq4so2307988wib.0 for ; Mon, 04 Mar 2013 09:00:14 -0800 (PST) MIME-Version: 1.0 X-Received: by 10.180.76.84 with SMTP id i20mr13273709wiw.9.1362416414626; Mon, 04 Mar 2013 09:00:14 -0800 (PST) Received: by 10.216.148.193 with HTTP; Mon, 4 Mar 2013 09:00:14 -0800 (PST) In-Reply-To: <5134D0EE.3040102@mit.edu> References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> <5134D0EE.3040102@mit.edu> Date: Mon, 4 Mar 2013 11:00:14 -0600 Message-ID: From: Nico Williams To: Greg Hudson Content-Type: text/plain; charset=UTF-8 Cc: "kitten@ietf.org" , Sam Hartman , Kelley Burgin Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 17:00:21 -0000 On Mon, Mar 4, 2013 at 10:50 AM, Greg Hudson wrote: > On 03/04/2013 09:11 AM, Sam Hartman wrote: >> So, my reading of the silence is that no one objects to us taking this >> forward as an informational document. > > I don't object. But I do tend to think that if the Kerberos ecosystem > is going to have two different AES-and-a-hash cipher suites, it would be > better for the new one to use SHA-3. The consensus that seems to be gathering steam is that SHA-2 is more than secure enough for these purposes (heck, SHA-1 is too when used in HMAC), and that it's faster in software than SHA-3, thus we should use SHA-2. I think we should use SHA-3 in places where we don't have HMAC or randomized hashing -- places we don't have in Kerberos. Nico -- From hartmans@mit.edu Mon Mar 4 09:17:57 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D09C921F8CE2 for ; Mon, 4 Mar 2013 09:17:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.134 X-Spam-Level: X-Spam-Status: No, score=-102.134 tagged_above=-999 required=5 tests=[AWL=0.465, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uaw9RMCnu-Qc for ; Mon, 4 Mar 2013 09:17:57 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 510FB21F8CD1 for ; Mon, 4 Mar 2013 09:17:57 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-216-0-82.hsd1.ma.comcast.net [98.216.0.82]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 592FF20229; Mon, 4 Mar 2013 12:17:52 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id EB41A4486; Mon, 4 Mar 2013 12:17:55 -0500 (EST) From: Sam Hartman To: Greg Hudson References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> <5134D0EE.3040102@mit.edu> Date: Mon, 04 Mar 2013 12:17:55 -0500 In-Reply-To: <5134D0EE.3040102@mit.edu> (Greg Hudson's message of "Mon, 04 Mar 2013 11:50:54 -0500") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "kitten@ietf.org" , Sam Hartman , Kelley Burgin Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 17:17:57 -0000 >>>>> "Greg" == Greg Hudson writes: Greg> On 03/04/2013 09:11 AM, Sam Hartman wrote: >> So, my reading of the silence is that no one objects to us taking >> this forward as an informational document. Greg> I don't object. But I do tend to think that if the Kerberos Greg> ecosystem is going to have two different AES-and-a-hash cipher Greg> suites, it would be better for the new one to use SHA-3. I'd urge WG participants considering this issue to review the presentations and discussion surrounding the last few SAAG discussions of sha-3. Nico's comments are consistent with those discussions. From kwburgi@tycho.ncsc.mil Mon Mar 4 11:04:52 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F72821F89D2 for ; Mon, 4 Mar 2013 11:04:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ppz61pBeuLPy for ; Mon, 4 Mar 2013 11:04:51 -0800 (PST) Received: from nsa.gov (emvm-gh1-uea09.nsa.gov [63.239.67.10]) by ietfa.amsl.com (Postfix) with ESMTP id 7F2E421F8976 for ; Mon, 4 Mar 2013 11:04:50 -0800 (PST) X-TM-IMSS-Message-ID: <963c24f4000f1457@nsa.gov> Received: from tarius.tycho.ncsc.mil ([144.51.31.2]) by nsa.gov ([63.239.67.10]) with ESMTP (TREND IMSS SMTP Service 7.1) id 963c24f4000f1457 ; Mon, 4 Mar 2013 14:06:41 -0500 Received: from [192.168.26.151] (rd6um-58422h [192.168.26.151]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id r24J4mCQ013951; Mon, 4 Mar 2013 14:04:48 -0500 Message-Id: <8C5B7BFF-109D-402B-A031-4EA1A1F361C0@tycho.ncsc.mil> From: Kelley Burgin To: Sam Hartman In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Date: Mon, 4 Mar 2013 14:05:24 -0500 References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> <5134D0EE.3040102@mit.edu> X-Mailer: Apple Mail (2.936) Cc: kitten@ietf.org, Kelley Burgin Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 19:04:52 -0000 I think it will take NIST a while (years?) to publish a standard for SHA-3 where it selects the algorithm parameters, provides test vectors, etc. It makes sense to me to have SHA-2 available in the meanwhile and revisit adding SHA-3 when a standard is published. Also, the draft is proposed to support draft-burgin-kerberos-suiteb, and Suite B requires SHA-2. Kelley On Mar 4, 2013, at 12:17 PM, Sam Hartman wrote: >>>>>> "Greg" == Greg Hudson writes: > > Greg> On 03/04/2013 09:11 AM, Sam Hartman wrote: >>> So, my reading of the silence is that no one objects to us taking >>> this forward as an informational document. > > Greg> I don't object. But I do tend to think that if the Kerberos > Greg> ecosystem is going to have two different AES-and-a-hash > cipher > Greg> suites, it would be better for the new one to use SHA-3. > > I'd urge WG participants considering this issue to review the > presentations and discussion surrounding the last few SAAG discussions > of sha-3. > Nico's comments are consistent with those discussions. From ghudson@mit.edu Mon Mar 4 11:14:48 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B041721F8DDF for ; Mon, 4 Mar 2013 11:14:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fIxWl4NvNtFK for ; Mon, 4 Mar 2013 11:14:48 -0800 (PST) Received: from dmz-mailsec-scanner-6.mit.edu (DMZ-MAILSEC-SCANNER-6.MIT.EDU [18.7.68.35]) by ietfa.amsl.com (Postfix) with ESMTP id 19E2921F8D87 for ; Mon, 4 Mar 2013 11:14:48 -0800 (PST) X-AuditID: 12074423-b7f5b6d000007e03-39-5134f2a7de94 Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id B7.80.32259.7A2F4315; Mon, 4 Mar 2013 14:14:47 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id r24JEkFY015730; Mon, 4 Mar 2013 14:14:46 -0500 Received: from [18.101.8.102] (VPN-18-101-8-102.MIT.EDU [18.101.8.102]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id r24JEi8o015695 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 4 Mar 2013 14:14:45 -0500 Message-ID: <5134F2A3.4030808@mit.edu> Date: Mon, 04 Mar 2013 14:14:43 -0500 From: Greg Hudson User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130106 Thunderbird/17.0.2 MIME-Version: 1.0 To: Kelley Burgin References: <48EB54C1-F693-492B-AFFD-F77FAD8211B4@kth.se> <5F3F1B73-646C-45F9-9804-942815023F69@tycho.ncsc.mil> <8B4C063947CD794BB6FF90C78BAE9B321E78B576@IMCMBX04.MITRE.ORG> <5134D0EE.3040102@mit.edu> <8C5B7BFF-109D-402B-A031-4EA1A1F361C0@tycho.ncsc.mil> In-Reply-To: <8C5B7BFF-109D-402B-A031-4EA1A1F361C0@tycho.ncsc.mil> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplleLIzCtJLcpLzFFi42IRYrdT0V3+ySTQYP4WKYujm1exWMxryHBg 8liy5CeTx9bmf4wBTFFcNimpOZllqUX6dglcGddO3GMvOM9ccXPVJpYGxi9MXYycHBICJhKP /rQxQ9hiEhfurWfrYuTiEBLYxyhx9voGdghnA6PE7c2nWCGcw0wS84/OBWvnFVCTWHjxPiOI zSKgKjHr0H5WEJtNQFni4NlvLCC2qECIxKIz09kg6gUlTs58AhYXEdCSuPpwDthqZgFhiQvb 94L1CgsESbxc8pAJYtlqZokLry+DNXMKOEn8e3WABeJWSYlF0zpZIJp1JN71PYAaJC+x/e0c 5gmMQrOQ7JuFpGwWkrIFjMyrGGVTcqt0cxMzc4pTk3WLkxPz8lKLdM30cjNL9FJTSjcxgkPb RXkH45+DSocYBTgYlXh4GY6aBAqxJpYVV+YeYpTkYFIS5X36BCjEl5SfUpmRWJwRX1Sak1p8 iFGCg1lJhPfFXaAcb0piZVVqUT5MSpqDRUmc91rKTX8hgfTEktTs1NSC1CKYrAwHh5IE7+OP QI2CRanpqRVpmTklCGkmDk6Q4TxAwyeB1PAWFyTmFmemQ+RPMSpKifOmgSQEQBIZpXlwvbDU 84pRHOgVYd59IFU8wLQF1/0KaDAT0GCPULDBJYkIKakGxi2Xrmo+iVstqtc+8ZtGYYiGksBt i3qhoHcV/h4RO38+aGko//Ok9lDx6oyfYY/+bzGyXMsmwGRXobVA7/+P6Ee53Temz4nanPa0 nPlK5fkwoZfqsSdjLIPv55on8mhVzmZ5brLe6+689JJPUfvfFaptPWzCufXcp1l9DjPPBOR1 67EEfs5YpsRSnJFoqMVcVJwIAC+JUUsYAwAA Cc: kitten@ietf.org Subject: Re: [kitten] Call for Adoption: draft-burgin-kerberos-aes-cbc- hmac-sha2. X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Mar 2013 19:14:48 -0000 On 03/04/2013 02:05 PM, Kelley Burgin wrote: > I think it will take NIST a while (years?) to publish a standard for > SHA-3 where it selects the algorithm parameters, provides test vectors, > etc. It makes sense to me to have SHA-2 available in the meanwhile and > revisit adding SHA-3 when a standard is published. Also, the draft is > proposed to support draft-burgin-kerberos-suiteb, and Suite B requires > SHA-2. Okay, I withdraw my preference. From lukeh@padl.com Sun Mar 10 18:04:45 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F30DB21F8895 for ; Sun, 10 Mar 2013 18:04:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2nCspvnc4i2X for ; Sun, 10 Mar 2013 18:04:44 -0700 (PDT) Received: from us.padl.com (us.padl.com [216.154.215.154]) by ietfa.amsl.com (Postfix) with ESMTP id 20DC821F882D for ; Sun, 10 Mar 2013 18:04:43 -0700 (PDT) Received: by us.padl.com with ESMTP id r2B14cJ2012253; Sun, 10 Mar 2013 21:04:41 -0400 From: Luke Howard Content-Type: multipart/alternative; boundary="Apple-Mail=_DC742174-E01E-4CF2-81B3-A904226B7FDB" Message-Id: Date: Mon, 11 Mar 2013 12:04:38 +1100 To: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) X-SMTP-Vilter-Version: 1.3.6 X-Spamd-Symbols: AWL,BAYES_00,HTML_MESSAGE,USER_IN_WHITELIST X-SMTP-Vilter-Spam-Backend: spamd X-Spam-Threshold: 5.0 X-Spam-Probability: -20.5 Subject: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2013 01:04:45 -0000 --Apple-Mail=_DC742174-E01E-4CF2-81B3-A904226B7FDB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hey folks, Nico and I have started hacking on an Internet Draft describing the GSS = BrowserID protocol. https://raw.github.com/lhoward/gss-browserid-id/master/gss-browserid.txt It probably could do with some reorganising (not to mention a proper = security considerations section), so we're not going to submit it yet, = but comments are welcome. Although poorly formatted, there is an IMAP = example which comes from our working implementation. cheers, -- Luke -- Luke Howard / lukeh@padl.com www.padl.com / www.lukehoward.com= --Apple-Mail=_DC742174-E01E-4CF2-81B3-A904226B7FDB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Hey = folks,

Nico and I have started hacking on an Internet = Draft describing the GSS BrowserID protocol.


It probably could do with some = reorganising (not to mention a proper security considerations section), = so we're not going to submit it yet, but comments are welcome. Although = poorly formatted, there is an IMAP example which comes from our working = implementation.

cheers,

= -- Luke
= --Apple-Mail=_DC742174-E01E-4CF2-81B3-A904226B7FDB-- From nico@cryptonector.com Sun Mar 10 20:10:48 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CB1A21F84A8 for ; Sun, 10 Mar 2013 20:10:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jo9C+TxBmcko for ; Sun, 10 Mar 2013 20:10:47 -0700 (PDT) Received: from homiemail-a16.g.dreamhost.com (caiajhbdccac.dreamhost.com [208.97.132.202]) by ietfa.amsl.com (Postfix) with ESMTP id A097C21F891C for ; Sun, 10 Mar 2013 20:10:46 -0700 (PDT) Received: from homiemail-a16.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a16.g.dreamhost.com (Postfix) with ESMTP id 9A1BB50808C for ; Sun, 10 Mar 2013 20:10:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=bQeiARD9lrgHx3u7IP03 5yFBUT8=; b=PU6KTLocroGYOIf6NHPQ5ixjyyHBy42u5H+8tZ825AvcJOBHa8rf LSFOFQeyx4VFO6XoTs6N3PVl+h7bcB4gv3mU6NZmrG7zZMA9I4yWLKw+iRJUEITZ hFN/Re/yqmK62gSFkaUgK5HJYP9NXFdOmRFVaPp38MA/Lk75xwUJL0o= Received: from mail-wg0-f48.google.com (mail-wg0-f48.google.com [74.125.82.48]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a16.g.dreamhost.com (Postfix) with ESMTPSA id 4D41E508064 for ; Sun, 10 Mar 2013 20:10:38 -0700 (PDT) Received: by mail-wg0-f48.google.com with SMTP id 16so4487788wgi.27 for ; Sun, 10 Mar 2013 20:10:36 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.194.60.195 with SMTP id j3mr16054160wjr.33.1362971436910; Sun, 10 Mar 2013 20:10:36 -0700 (PDT) Received: by 10.216.148.193 with HTTP; Sun, 10 Mar 2013 20:10:36 -0700 (PDT) In-Reply-To: References: Date: Sun, 10 Mar 2013 22:10:36 -0500 Message-ID: From: Nico Williams To: Luke Howard Content-Type: text/plain; charset=UTF-8 Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Mar 2013 03:10:48 -0000 On Sun, Mar 10, 2013 at 8:04 PM, Luke Howard wrote: > Nico and I have started hacking on an Internet Draft describing the GSS > BrowserID protocol. Luke is being generous. Most of the text (and all of the implementation it documents) is from Luke. This is a very cool mechanism. It's what SPKM wanted to be, but couldn't. Nico -- From hotz@jpl.nasa.gov Tue Mar 12 12:44:28 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A17611E8118 for ; Tue, 12 Mar 2013 12:44:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Us28o1MT9r9q for ; Tue, 12 Mar 2013 12:44:27 -0700 (PDT) Received: from mail.jpl.nasa.gov (sentrion2.jpl.nasa.gov [128.149.139.106]) by ietfa.amsl.com (Postfix) with ESMTP id DA7B411E8113 for ; Tue, 12 Mar 2013 12:44:27 -0700 (PDT) Received: from dhcp-137-78-183-181.jpl.nasa.gov (dhcp-137-78-183-181.jpl.nasa.gov [137.78.183.181]) (authenticated (0 bits)) by smtp.jpl.nasa.gov (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r2CJiPkJ031533 (using TLSv1/SSLv3 with cipher AES128-SHA (128 bits) verified NO); Tue, 12 Mar 2013 12:44:26 -0700 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: "Henry B. Hotz" In-Reply-To: Date: Tue, 12 Mar 2013 12:44:25 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Nico Williams X-Mailer: Apple Mail (2.1499) X-Source-Sender: hotz@jpl.nasa.gov X-AUTH: Authorized Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2013 19:44:28 -0000 OK, now I'm interested. ;-) It's always bugged me that (in common deployment terms) TLS is X.509 = PKI-only and GSSAPI is Kerberos-only. On Mar 10, 2013, at 8:10 PM, Nico Williams = wrote: > This is a very cool mechanism. It's what SPKM wanted to be, but = couldn't. ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu From lukeh@padl.com Tue Mar 12 15:51:45 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21E3821F8C08 for ; Tue, 12 Mar 2013 15:51:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KX79O54fZrPm for ; Tue, 12 Mar 2013 15:51:44 -0700 (PDT) Received: from us.padl.com (us.padl.com [216.154.215.154]) by ietfa.amsl.com (Postfix) with ESMTP id D77D021F8C06 for ; Tue, 12 Mar 2013 15:51:43 -0700 (PDT) Received: by us.padl.com with ESMTP id r2CMpYtt021539; Tue, 12 Mar 2013 18:51:37 -0400 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luke Howard In-Reply-To: Date: Wed, 13 Mar 2013 09:51:34 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <5C973CB4-3745-4970-8F43-EFEE45A4F3AC@padl.com> References: To: "Henry B. Hotz" X-Mailer: Apple Mail (2.1499) X-SMTP-Vilter-Version: 1.3.6 X-Spamd-Symbols: AWL,BAYES_00,USER_IN_WHITELIST X-SMTP-Vilter-Spam-Backend: spamd X-Spam-Threshold: 5.0 X-Spam-Probability: -20.5 Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Mar 2013 22:51:45 -0000 Note that you can't get away from TLS entirely. It is used to retrieve = IdP certificates (although I guess you could use sneakernet if you = really wanted). Also, X.509 certificates are used for optionally authenticating the = acceptor to the initiator. I figured that this was a practical = compromise because the infrastructure for long-term server certificates = already exists. -- Luke On 13/03/2013, at 6:44 AM, Henry B. Hotz wrote: > OK, now I'm interested. ;-) >=20 > It's always bugged me that (in common deployment terms) TLS is X.509 = PKI-only and GSSAPI is Kerberos-only. >=20 > On Mar 10, 2013, at 8:10 PM, Nico Williams = wrote: >=20 >> This is a very cool mechanism. It's what SPKM wanted to be, but = couldn't. >=20 > ------------------------------------------------------ > The opinions expressed in this message are mine, > not those of Caltech, JPL, NASA, or the US Government. > Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu >=20 -- Luke Howard / lukeh@padl.com www.padl.com / www.lukehoward.com From nico@cryptonector.com Tue Mar 12 18:26:37 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF8AB11E8111 for ; Tue, 12 Mar 2013 18:26:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6dsRd5Ol3DAD for ; Tue, 12 Mar 2013 18:26:37 -0700 (PDT) Received: from homiemail-a30.g.dreamhost.com (caiajhbdcahe.dreamhost.com [208.97.132.74]) by ietfa.amsl.com (Postfix) with ESMTP id 4F8FD11E8100 for ; Tue, 12 Mar 2013 18:26:37 -0700 (PDT) Received: from homiemail-a30.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a30.g.dreamhost.com (Postfix) with ESMTP id 0A38E21DE58 for ; Tue, 12 Mar 2013 18:26:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=28uDSSMJC3PKu0fNxJ/d XR/Ry5o=; b=twuruOSTJ8n4eLMQ7iP8NwJDcIf5dNzRAOWQEOoSXprpsXBvCjCe 7pdm0cU0x+wlOI1twDGr693F9+iBXx1AVfd2UBy5QjrPZ0OZY7QrjssU1UFwV5o1 W3RUPnJzs/B/9we4g6NoLfpXESUaUc41WO174uZWgJlr07rOZuPTKWI= Received: from mail-wg0-f48.google.com (mail-wg0-f48.google.com [74.125.82.48]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a30.g.dreamhost.com (Postfix) with ESMTPSA id 8A05E21DE57 for ; Tue, 12 Mar 2013 18:26:36 -0700 (PDT) Received: by mail-wg0-f48.google.com with SMTP id 16so468820wgi.27 for ; Tue, 12 Mar 2013 18:26:35 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.180.109.82 with SMTP id hq18mr6483901wib.0.1363137995108; Tue, 12 Mar 2013 18:26:35 -0700 (PDT) Received: by 10.216.148.193 with HTTP; Tue, 12 Mar 2013 18:26:34 -0700 (PDT) In-Reply-To: References: Date: Tue, 12 Mar 2013 20:26:34 -0500 Message-ID: From: Nico Williams To: "Henry B. Hotz" Content-Type: text/plain; charset=UTF-8 Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Mar 2013 01:26:37 -0000 On Tue, Mar 12, 2013 at 2:44 PM, Henry B. Hotz wrote: > OK, now I'm interested. ;-) > > It's always bugged me that (in common deployment terms) TLS is X.509 PKI-only and GSSAPI is Kerberos-only. There's also the GSI GSS mechanism that consists of... TLS. (If you send tokens with no extra framing then you're speaking TLS on the wire.) And there's Microsoft's PKU2U, which is TLS-like but based on PKINIT. Nico -- From jhutz@cmu.edu Tue Mar 12 18:42:48 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EBCE21F8CCA for ; Tue, 12 Mar 2013 18:42:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZT8idtM6CSHM for ; Tue, 12 Mar 2013 18:42:47 -0700 (PDT) Received: from smtp01.srv.cs.cmu.edu (SMTP01.SRV.CS.CMU.EDU [128.2.217.196]) by ietfa.amsl.com (Postfix) with ESMTP id 14BC421F8CC2 for ; Tue, 12 Mar 2013 18:42:46 -0700 (PDT) Received: from [128.2.193.239] (minbar.fac.cs.cmu.edu [128.2.193.239]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id r2D1getJ024110 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Tue, 12 Mar 2013 21:42:40 -0400 (EDT) Message-ID: <1363138960.2711.65.camel@minbar.fac.cs.cmu.edu> From: Jeffrey Hutzelman To: Nico Williams Date: Tue, 12 Mar 2013 21:42:40 -0400 In-Reply-To: <14071_1363138000_r2D1Qc98020493_CAK3OfOjARcigF32HrFZt0_CmOn3be4fN4oGfycTpbVizvxaCJQ@mail.gmail.com> References: <14071_1363138000_r2D1Qc98020493_CAK3OfOjARcigF32HrFZt0_CmOn3be4fN4oGfycTpbVizvxaCJQ@mail.gmail.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.2.3-0ubuntu6 Content-Transfer-Encoding: 7bit Mime-Version: 1.0 X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" , jhutz@cmu.edu Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Mar 2013 01:42:48 -0000 On Tue, 2013-03-12 at 20:26 -0500, Nico Williams wrote: > On Tue, Mar 12, 2013 at 2:44 PM, Henry B. Hotz wrote: > > OK, now I'm interested. ;-) > > > > It's always bugged me that (in common deployment terms) TLS is X.509 PKI-only and GSSAPI is Kerberos-only. > > There's also the GSI GSS mechanism that consists of... TLS. (If you > send tokens with no extra framing then you're speaking TLS on the > wire.) > > And there's Microsoft's PKU2U, which is TLS-like but based on PKINIT. In fact, PKU2U was the subject of an internet-draft that never quite got finished (it was very close, and I'm afraid I dropped the ball somewhere, Larry moved on to other work, and no one else was pushing very hard). From lukeh@padl.com Wed Mar 13 01:42:36 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F24D521F8D1B for ; Wed, 13 Mar 2013 01:42:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BKNakpjRzB+2 for ; Wed, 13 Mar 2013 01:42:35 -0700 (PDT) Received: from us.padl.com (us.padl.com [216.154.215.154]) by ietfa.amsl.com (Postfix) with ESMTP id 6209321F8D11 for ; Wed, 13 Mar 2013 01:42:35 -0700 (PDT) Received: by us.padl.com with ESMTP id r2D8gQ0H013736; Wed, 13 Mar 2013 04:42:29 -0400 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luke Howard In-Reply-To: Date: Wed, 13 Mar 2013 19:42:25 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Nico Williams X-Mailer: Apple Mail (2.1499) X-SMTP-Vilter-Version: 1.3.6 X-Spamd-Symbols: AWL,BAYES_00,USER_IN_WHITELIST X-SMTP-Vilter-Spam-Backend: spamd X-Spam-Threshold: 5.0 X-Spam-Probability: -20.5 Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Mar 2013 08:42:36 -0000 > There's also the GSI GSS mechanism that consists of... TLS. (If you > send tokens with no extra framing then you're speaking TLS on the > wire.) One thing about BrowserID is that it's a little closer to Kerberos, in = that you get short-lived certificates that behave more like tickets than = traditional client certs. -- Luke= From smith@Cardiff.ac.uk Thu Mar 14 07:51:13 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1BE211E8197 for ; Thu, 14 Mar 2013 07:51:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w1qbEiKNkY6P for ; Thu, 14 Mar 2013 07:51:09 -0700 (PDT) Received: from smtpout1.cf.ac.uk (smtpout1.cf.ac.uk [131.251.137.125]) by ietfa.amsl.com (Postfix) with ESMTP id 755F511E8155 for ; Thu, 14 Mar 2013 07:51:09 -0700 (PDT) Received: from smtpauth.cf.ac.uk ([131.251.248.19]) by smtpout1.cf.ac.uk with esmtp (Exim 4.77) (envelope-from ) id 1UG9Uq-0003Uu-CY for kitten@ietf.org; Thu, 14 Mar 2013 14:51:08 +0000 Received: from [130.129.8.66] (helo=dhcp-9042.meeting.ietf.org) by smtpauth.cf.ac.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.69) (envelope-from ) id 1UG9Uq-0007WB-7U for kitten@ietf.org; Thu, 14 Mar 2013 14:51:08 +0000 From: Rhys Smith Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: <0B71F54A-4084-4B40-A241-2E25E2CF9678@cardiff.ac.uk> Date: Thu, 14 Mar 2013 10:51:05 -0400 To: kitten@ietf.org Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Sender: smith@Cardiff.ac.uk X-Virus-Scanned: Cardiff University Virus Scanner X-Virus-Scanned: Cardiff University Virus Scanner Subject: [kitten] Sam's Kerberos / GSS / SASL paper X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 14:51:14 -0000 As discussed in the meeting: http://www.kerberos.org/software/appskerberos.pdf Rhys. -- Dr Rhys Smith Identity, Access, and Middleware Specialist Cardiff University & Janet - the UK's research and education network email: smith@cardiff.ac.uk / rhys.smith@ja.net GPG: 0xDE2F024C From shawn.emery@oracle.com Thu Mar 14 08:04:00 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F04311E8229 for ; Thu, 14 Mar 2013 08:03:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K1ljJhrBLrIX for ; Thu, 14 Mar 2013 08:03:53 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 2D39111E8249 for ; Thu, 14 Mar 2013 08:03:19 -0700 (PDT) Received: from ucsinet22.oracle.com (ucsinet22.oracle.com [156.151.31.94]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r2EF3GS3004064 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 14 Mar 2013 15:03:17 GMT Received: from acsmt356.oracle.com (acsmt356.oracle.com [141.146.40.156]) by ucsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r2EF3GUO024408 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 14 Mar 2013 15:03:16 GMT Received: from abhmt112.oracle.com (abhmt112.oracle.com [141.146.116.64]) by acsmt356.oracle.com (8.12.11.20060308/8.12.11) with ESMTP id r2EF3FT3027729 for ; Thu, 14 Mar 2013 10:03:15 -0500 Received: from dhcp-13ad.meeting.ietf.org (/130.129.19.173) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 14 Mar 2013 08:03:15 -0700 Message-ID: <5141E6AC.7050407@oracle.com> Date: Thu, 14 Mar 2013 09:03:08 -0600 From: Shawn M Emery User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: kitten@ietf.org References: <512E828C.7040004@oracle.com> <512E84CB.5040601@stpeter.im> In-Reply-To: <512E84CB.5040601@stpeter.im> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Source-IP: ucsinet22.oracle.com [156.151.31.94] Subject: Re: [kitten] IETF 86 Agenda X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 15:04:00 -0000 Forgot to mention this during the working group session, but please join us for the precis WG meeting today at 13:00 EDT if you are interested in saslprepbis. Shawn. -- kitten co-chair. On 2/27/13 3:12 PM, Peter Saint-Andre wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 2/27/13 3:02 PM, Shawn Emery wrote: >> Here is the draft agenda for the kitten session at IETF 86: >> >> http://www.ietf.org/proceedings/86/agenda/agenda-86-kitten >> >> Please provide feed-back/additions no later than March 4th. > I'm hoping that folks who are interested in saslprepbis will join the > PRECIS meeting on Thursday afternoon at 13:00. Full disclosure: it's > opposite wpkops and sacm, both of which might be of interest to sec > area folks. > > Peter > > - -- > Peter Saint-Andre > https://stpeter.im/ > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.18 (Darwin) > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBAgAGBQJRLoTKAAoJEOoGpJErxa2pqpsP/RxRwzBm6D5whBx62Zx1hEDP > /z4AK6bfKvl7/wLggmM/y21OzzZSi9Y9hVPV+rMJ3rlo/dDztGCy0vdaaZ+rIsHJ > MTZvXSGe2srYH9/lhcqW+JKS2oDaZfwP1M0dWPXA4z8duhpIQoQCvfNrNhYDB9dg > qVjm110YLeh+oISSd/n5xUwmrdRqBp3u8EcLCPvAR9SqOunMIIF09vNhCly8f67M > j7wlBiAsG/c6JoVke6pl+34Us3fxGQZXFi8W3DjDgBQVrz7MfMCw49anBiA6NVuQ > L3BYLYkTw0R/gvislZNnRMpNjIGyzFe79LESUCm1kNGJHs+2+IOYsnCf6/WcaZr8 > mVQhIVZbn4ys9vwRcKks/PqczrkDiVR2yX54+w2hSL+J72lHmHL7yAf2pzWCdkJc > Yv/wim6JCmr5+/nbxd392G2rOcbblP1JyW8e+jn928IEKI3nSNGLSEu6GsyBvaig > h8cQdbAXLmbCYa9U2PzZx2oYuwH8hNCGW96GccIFOzEF/wATJcg6u1r9id3yytaL > d/rp3vAAHtk+C4tZmQxrk+DmXv0M/dDeG8wc1jIpIGhDBG0gE0zOj+lH79LlNHsX > H72HwwMXsdH0PHes4YhH0V46IF9HYynGImw+u+/1+XFdKEE/37sTFs3Od7+l0HOz > nWZ6npTVcgH3/CoYmyaQ > =ps+0 > -----END PGP SIGNATURE----- > _______________________________________________ > Kitten mailing list > Kitten@ietf.org > https://www.ietf.org/mailman/listinfo/kitten > From shawn.emery@oracle.com Thu Mar 14 09:05:21 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E168611E825F for ; Thu, 14 Mar 2013 09:05:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D5KeKRqvjFs7 for ; Thu, 14 Mar 2013 09:05:15 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 722AA11E820A for ; Thu, 14 Mar 2013 09:05:15 -0700 (PDT) Received: from acsinet22.oracle.com (acsinet22.oracle.com [141.146.126.238]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r2EG5EnH028318 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 14 Mar 2013 16:05:15 GMT Received: from acsmt357.oracle.com (acsmt357.oracle.com [141.146.40.157]) by acsinet22.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r2EG5Due026643 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 14 Mar 2013 16:05:14 GMT Received: from abhmt111.oracle.com (abhmt111.oracle.com [141.146.116.63]) by acsmt357.oracle.com (8.12.11.20060308/8.12.11) with ESMTP id r2EG5D2X002482 for ; Thu, 14 Mar 2013 11:05:13 -0500 Received: from shawn-emerys-computer.local (/130.129.129.139) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 14 Mar 2013 09:05:13 -0700 Message-ID: <5141F52D.70801@oracle.com> Date: Thu, 14 Mar 2013 10:05:01 -0600 From: Shawn M Emery User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:17.0) Gecko/20130307 Thunderbird/17.0.4 MIME-Version: 1.0 To: kitten@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Source-IP: acsinet22.oracle.com [141.146.126.238] Subject: [kitten] Replay Cache Avoidance Draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2013 16:05:22 -0000 Forgot to mention this during the session; the replay cache avoidance draft has not been submitted to the data tracker tool as of yet, but can be found here: https://github.com/nicowilliams/kitten/blob/master/gss-krb5-rcache-avoid.txt Shawn. -- kitten co-chair From mrex@sap.com Thu Mar 14 17:46:02 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE48A11E8156 for ; Thu, 14 Mar 2013 17:46:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.249 X-Spam-Level: X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3B+tiIDVJRwQ for ; Thu, 14 Mar 2013 17:46:02 -0700 (PDT) Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 117CF11E8151 for ; Thu, 14 Mar 2013 17:46:01 -0700 (PDT) Received: from mail05.wdf.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id r2F0jvMn022942 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 15 Mar 2013 01:45:57 +0100 (MET) In-Reply-To: To: Nico Williams Date: Fri, 15 Mar 2013 01:45:57 +0100 (CET) X-Mailer: ELM [version 2.4ME+ PL125 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="US-ASCII" Message-Id: <20130315004557.B064C1A639@ld9781.wdf.sap.corp> From: mrex@sap.com (Martin Rex) X-SAP: out Cc: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Subject: Re: [kitten] GSS BrowserID draft X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: mrex@sap.com List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Mar 2013 00:46:03 -0000 Nico Williams wrote: > Luke Howard wrote: >> >> Nico and I have started hacking on an Internet Draft describing the GSS >> BrowserID protocol. > > Luke is being generous. Most of the text (and all of the > implementation it documents) is from Luke. > > This is a very cool mechanism. It's what SPKM wanted to be, but couldn't. SPKM (rfc2025) never tried to be anything else than what it was: One vendors description of his product. (GSS IDUP is even more so, for the same vendor). The idea of SPKM to use asymmetric crypto digital signatures for per-message integrity protection is mindbogglingly lame (and a real performance-killer). -Martin From lukeh@padl.com Tue Mar 19 17:06:03 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D3EC21F8EF2 for ; Tue, 19 Mar 2013 17:06:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9HyhpIU7NJzj for ; Tue, 19 Mar 2013 17:06:02 -0700 (PDT) Received: from us.padl.com (us.padl.com [216.154.215.154]) by ietfa.amsl.com (Postfix) with ESMTP id 8123D21F8EF1 for ; Tue, 19 Mar 2013 17:06:02 -0700 (PDT) Received: by us.padl.com with ESMTP id r2K05vNo023899; Tue, 19 Mar 2013 20:06:00 -0400 From: Luke Howard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Wed, 20 Mar 2013 11:05:57 +1100 References: <20130320000505.32207.74732.idtracker@ietfa.amsl.com> To: "dev-identity@lists.mozilla.org" , "kitten@ietf.org" Message-Id: <49F0D151-C294-414A-9285-E8AA423BE4E5@padl.com> Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) X-SMTP-Vilter-Version: 1.3.6 X-Spamd-Symbols: AWL,BAYES_00,USER_IN_WHITELIST X-SMTP-Vilter-Spam-Backend: spamd X-Spam-Threshold: 5.0 X-Spam-Probability: -20.5 Subject: [kitten] draft-howard-gss-browserid-00 X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2013 00:06:03 -0000 A new version of I-D, draft-howard-gss-browserid-00.txt has been successfully submitted by Luke Howard and posted to the IETF repository. Filename: draft-howard-gss-browserid Revision: 00 Title: A SASL and GSS-API Mechanism for the BrowserID = Authentication Protocol Creation date: 2013-03-20 Group: Individual Submission Number of pages: 41 URL: = http://www.ietf.org/internet-drafts/draft-howard-gss-browserid-00.txt Status: = http://datatracker.ietf.org/doc/draft-howard-gss-browserid Htmlized: = http://tools.ietf.org/html/draft-howard-gss-browserid-00 Abstract: This document defines protocols, procedures and conventions for a Generic Security Service Application Program Interface (GSS-API) security mechanism based on the BrowserID authentication mechanism. Through the GS2 family of mechanisms defined in RFC 5801, these protocols also define how Simple Authentication and Security Layer (SASL, RFC 4422) applications may use BrowserID. The IETF Secretariat= From shawn.emery@oracle.com Sun Mar 24 23:34:44 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 904DC21F8E7F for ; Sun, 24 Mar 2013 23:34:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.999 X-Spam-Level: X-Spam-Status: No, score=-3.999 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h4OWGQ2uo7it for ; Sun, 24 Mar 2013 23:34:44 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) by ietfa.amsl.com (Postfix) with ESMTP id 1DB8C21F8E87 for ; Sun, 24 Mar 2013 23:34:41 -0700 (PDT) Received: from acsinet21.oracle.com (acsinet21.oracle.com [141.146.126.237]) by userp1040.oracle.com (Sentrion-MTA-4.3.1/Sentrion-MTA-4.3.1) with ESMTP id r2P6YdGb002872 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Mon, 25 Mar 2013 06:34:40 GMT Received: from acsmt357.oracle.com (acsmt357.oracle.com [141.146.40.157]) by acsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id r2P6YdM0017693 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 25 Mar 2013 06:34:39 GMT Received: from abhmt101.oracle.com (abhmt101.oracle.com [141.146.116.53]) by acsmt357.oracle.com (8.12.11.20060308/8.12.11) with ESMTP id r2P6Ydvl030043 for ; Mon, 25 Mar 2013 01:34:39 -0500 Received: from [10.159.78.120] (/10.159.78.120) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Sun, 24 Mar 2013 23:34:38 -0700 Message-ID: <514FEFC4.9040903@oracle.com> Date: Mon, 25 Mar 2013 00:33:40 -0600 From: Shawn Emery User-Agent: Mozilla/5.0 (X11; SunOS i86pc; rv:10.0.11) Gecko/20121204 Thunderbird/10.0.11 MIME-Version: 1.0 To: "kitten@ietf.org" Content-Type: multipart/alternative; boundary="------------020607020306010709000607" X-Source-IP: acsinet21.oracle.com [141.146.126.237] Subject: [kitten] IETF 86 Minutes X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Mar 2013 06:34:44 -0000 This is a multi-part message in MIME format. --------------020607020306010709000607 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit We have posted the draft minutes for the Orlando session here: http://www.ietf.org/proceedings/86/minutes/minutes-86-kitten Note that there was not a lot of back-and-forth discussions during this session, which affected the format of the minutes. However, please let me know if I had missed any of the points during the session. Send any of these corrections to me by April 12th. Shawn. -- kitten co-chair --------------020607020306010709000607 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
We have posted the draft minutes for the Orlando session here:

http://www.ietf.org/proceedings/86/minutes/minutes-86-kitten

Note that there was not a lot of back-and-forth discussions during this session, which affected the format of the minutes.  However, please let me know if I had missed any of the points during the session.  Send any of these corrections to me by April 12th.

Shawn.
--
kitten co-chair
 --------------020607020306010709000607-- From lukeh@padl.com Wed Mar 27 19:06:00 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACFAD21F9414 for ; Wed, 27 Mar 2013 19:06:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ugcIaab0IM8p for ; Wed, 27 Mar 2013 19:06:00 -0700 (PDT) Received: from us.padl.com (us.padl.com [216.154.215.154]) by ietfa.amsl.com (Postfix) with ESMTP id DA2B221F9413 for ; Wed, 27 Mar 2013 19:05:59 -0700 (PDT) Received: by us.padl.com with ESMTP id r2S25qko016262; Wed, 27 Mar 2013 22:05:54 -0400 From: Luke Howard Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Thu, 28 Mar 2013 13:05:51 +1100 References: <20130328020203.8665.22697.idtracker@ietfa.amsl.com> To: "kitten@ietf.org" , "dev-identity@lists.mozilla.org" Message-Id: Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) X-SMTP-Vilter-Version: 1.3.6 X-Spamd-Symbols: AWL,BAYES_00,USER_IN_WHITELIST X-SMTP-Vilter-Spam-Backend: spamd X-Spam-Threshold: 5.0 X-Spam-Probability: -20.6 Subject: [kitten] draft-howard-gss-browserid-01.txt X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Mar 2013 02:06:00 -0000 FYI -- this version adds an extra round trip option for replay cache = avoidance, and cleans up a few other nits. A new version of I-D, draft-howard-gss-browserid-01.txt has been successfully submitted by Luke Howard and posted to the IETF repository. Filename: draft-howard-gss-browserid Revision: 01 Title: A SASL and GSS-API Mechanism for the BrowserID = Authentication Protocol Creation date: 2013-03-28 Group: Individual Submission Number of pages: 42 URL: = http://www.ietf.org/internet-drafts/draft-howard-gss-browserid-01.txt Status: = http://datatracker.ietf.org/doc/draft-howard-gss-browserid Htmlized: = http://tools.ietf.org/html/draft-howard-gss-browserid-01 Diff: = http://www.ietf.org/rfcdiff?url2=3Ddraft-howard-gss-browserid-01 Abstract: This document defines protocols, procedures and conventions for a Generic Security Service Application Program Interface (GSS-API) security mechanism based on the BrowserID authentication mechanism. Through the GS2 family of mechanisms defined in RFC 5801, these protocols also define how Simple Authentication and Security Layer (SASL, RFC 4422) applications may use BrowserID. The IETF Secretariat=