From hartmans@mit.edu Sat Jun 1 09:27:14 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B24CE21F9E65 for ; Sat, 1 Jun 2013 09:27:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4b1bC7KJOn+i for ; Sat, 1 Jun 2013 09:27:08 -0700 (PDT) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id D194421F9CA5 for ; Sat, 1 Jun 2013 09:27:08 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id BD5F620625; Sat, 1 Jun 2013 12:23:44 -0400 (EDT) Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4yRQMSB2C0Fa; Sat, 1 Jun 2013 12:23:44 -0400 (EDT) Received: from carter-zimmerman.suchdamage.org (c-98-216-0-82.hsd1.ma.comcast.net [98.216.0.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Sat, 1 Jun 2013 12:23:44 -0400 (EDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id B21A64525; Sat, 1 Jun 2013 12:27:03 -0400 (EDT) From: Sam Hartman To: Sam Hartman References: Date: Sat, 01 Jun 2013 12:27:03 -0400 In-Reply-To: (Sam Hartman's message of "Fri, 10 May 2013 12:45:06 -0400") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: kitten@ietf.org Subject: Re: [kitten] Berlin Meeting: Agenda Items and Attendance X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Jun 2013 16:27:14 -0000 Folks, the meeting scheduling deadline is Monday. We've received no requests for agenda topis nor any of the regulars indicating they will be attending. This is not ideal. From ietf@augustcellars.com Sat Jun 1 12:29:39 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDE1021F9C34 for ; Sat, 1 Jun 2013 12:29:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FBVcjId5NjhZ for ; Sat, 1 Jun 2013 12:29:34 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) by ietfa.amsl.com (Postfix) with ESMTP id 257CF21F9A3A for ; Sat, 1 Jun 2013 12:29:34 -0700 (PDT) Received: from Philemon (mail.augustcellars.com [50.34.17.238]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id C1C5C2CA0C; Sat, 1 Jun 2013 12:29:33 -0700 (PDT) From: "Jim Schaad" To: "'Sam Hartman'" References: In-Reply-To: Date: Sat, 1 Jun 2013 12:28:43 -0700 Message-ID: <005201ce5efe$3b1d6790$b15836b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQI5IqS8IoLtVtYPdeQGtBbVUS2kywGqauJLmD5jteA= Content-Language: en-us Cc: kitten@ietf.org Subject: Re: [kitten] Berlin Meeting: Agenda Items and Attendance X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Jun 2013 19:29:39 -0000 I will be in Berlin. It is currently my hope to be in last call prior to the meeting started so I have not asked for an agenda slot. Jim > -----Original Message----- > From: kitten-bounces@ietf.org [mailto:kitten-bounces@ietf.org] On Behalf > Of Sam Hartman > Sent: Saturday, June 01, 2013 9:27 AM > To: Sam Hartman > Cc: kitten@ietf.org > Subject: Re: [kitten] Berlin Meeting: Agenda Items and Attendance > > Folks, the meeting scheduling deadline is Monday. We've received no > requests for agenda topis nor any of the regulars indicating they will be > attending. > > This is not ideal. > _______________________________________________ > Kitten mailing list > Kitten@ietf.org > https://www.ietf.org/mailman/listinfo/kitten From tlyu@mit.edu Sun Jun 2 12:02:15 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21FEC21F919D for ; Sun, 2 Jun 2013 12:02:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMD6KxBsqWOY for ; Sun, 2 Jun 2013 12:02:08 -0700 (PDT) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) by ietfa.amsl.com (Postfix) with ESMTP id 6BF1321F9273 for ; Sun, 2 Jun 2013 12:02:08 -0700 (PDT) X-AuditID: 1209190c-b7f566d000004c69-fe-51ab96af9d63 Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id E8.A3.19561.FA69BA15; Sun, 2 Jun 2013 15:02:07 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id r52J26Jl008482; Sun, 2 Jun 2013 15:02:07 -0400 Received: from cathode-dark-space.mit.edu (cathode-dark-space.mit.edu [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id r52J242M029937 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Sun, 2 Jun 2013 15:02:06 -0400 Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id r52J24sA026002; Sun, 2 Jun 2013 15:02:04 -0400 (EDT) To: Sam Hartman References: From: Tom Yu Date: Sun, 02 Jun 2013 15:02:04 -0400 In-Reply-To: (Sam Hartman's message of "Sat, 01 Jun 2013 12:27:03 -0400") Message-ID: Lines: 10 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrNIsWRmVeSWpSXmKPExsUixG6nrrt+2upAgxktxhZf2x6wWRzdvIrF gcljyZKfTB4rp55mD2CK4rJJSc3JLEst0rdL4MrY1jSDveALU8Xe/ZfZGxjXMnUxcnBICJhI zPkm3sXICWSKSVy4t54NxBYS2McoMbsjpouRC8jewChx68I8dgjnLJPEyauPWSGcTkaJmet7 GEFaRATUJVZfmsQOYjMLCEssX3MWbJSwgKPElJO/WCDG2kvMPfKDEWQzm4C0xNHFZSBhFgFV ibOzu8HKOQWSJbbOWMgMYvMKWEh8ndPKCmLzCHBKfJp6hR0iLihxcuYTFohVWhI3/r1kmsAo OAtJahaS1AJGplWMsim5Vbq5iZk5xanJusXJiXl5qUW6hnq5mSV6qSmlmxhBYcopybOD8c1B pUOMAhyMSjy8HdtXBQqxJpYVV+YeYpTkYFIS5e2dsjpQiC8pP6UyI7E4I76oNCe1+BCjBAez kgjv3lygHG9KYmVValE+TEqag0VJnPdyyk1/IYH0xJLU7NTUgtQimKwMB4eSBO+8qUCNgkWp 6akVaZk5JQhpJg5OkOE8QMOLQWp4iwsSc4sz0yHypxgVpcR5G0ESAiCJjNI8uF5YGnnFKA70 ijBvBUgVDzAFwXW/AhrMBDR48utVIINLEhFSUg2MEvP7dSbtuHBwo4TwJGvGlMOh4stm3T7P GfBi8hb1HaYZ95ovqe7+fiqGIeCcVNwf6dow+96soBqVeKZv82drP+LU11afm9egNpWrrDnI Nt/uPO8ugTj3hvdL5PUkvm8sjezbEnyjcOKFJwe0Fwee0Vs3PezuxNWrbqw8xverQT/gy5Ws Yv0QJZbijERDLeai4kQAhd9sq/4CAAA= Cc: kitten@ietf.org Subject: Re: [kitten] Berlin Meeting: Agenda Items and Attendance X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Jun 2013 19:02:15 -0000 Sam Hartman writes: > Folks, the meeting scheduling deadline is Monday. We've received no > requests for agenda topis nor any of the regulars indicating they will > be attending. > > This is not ideal. I'm tentatively planning on attending. I'd like to add the IANA assignments, CAMMAC, and trust-KDC-aliasing to the agenda. Thanks. From nico@cryptonector.com Sun Jun 9 22:03:24 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5170721F8CB4 for ; Sun, 9 Jun 2013 22:03:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XyCDahmkEipC for ; Sun, 9 Jun 2013 22:03:19 -0700 (PDT) Received: from homiemail-a88.g.dreamhost.com (caiajhbdcbef.dreamhost.com [208.97.132.145]) by ietfa.amsl.com (Postfix) with ESMTP id 5BACD21F8B98 for ; Sun, 9 Jun 2013 22:03:19 -0700 (PDT) Received: from homiemail-a88.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a88.g.dreamhost.com (Postfix) with ESMTP id 430FE264059 for ; Sun, 9 Jun 2013 22:03:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:date:message-id:subject:from:to:content-type; s= cryptonector.com; bh=7XeaJPowdZsWaCAcsWeGo36BfAc=; b=kcrqvNBU+aQ Qnkc1hdtm6+RcDapSKzdXlc1rz1nRBf+Thf7UscE/RyMoFJS5DXrnjm+bhmO2HrZ ygcgOmccT6r3fQQ0H5aOPl5bzao+8iTuwCvk8J2lxa/EIHjMNsYRxWaB2KWj3Abz fthjW6qdbZ7j6LjsHcMmLdQwchXFbSO0= Received: from mail-wi0-f172.google.com (mail-wi0-f172.google.com [209.85.212.172]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a88.g.dreamhost.com (Postfix) with ESMTPSA id EBFB5264057 for ; Sun, 9 Jun 2013 22:03:17 -0700 (PDT) Received: by mail-wi0-f172.google.com with SMTP id c10so2631117wiw.17 for ; Sun, 09 Jun 2013 22:03:16 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=799rGiP7uHv1eH7T39BXQozXKMmB9sMAG3V52UcCyU0=; b=cLEA8Us4PQCrUGrZinNCWvK2mvcLwAPUZQx4mVJ3whho1PyICjetWb9DjJmvFez8GG UF3qA6BZ3ShKFw3i2/vMszoPGjyyNhMuuG/NfcIcnxgDjz6WXCmUMBQXp/+5I/OKM1r6 1oli3g9imgZwsLoKB/lc6CEjjnObbTxIInfpAhxN0Y0U72DnAYkjkGkfZThGBV6lUPxj zAAhzsnj+NTw2uDclAIXLhrLQrjJrb5oqMnKhiz2xiEke1Xoz98AejQgyG8IgsyfEOyo q9UqX999BQvYnock/lLuXgZz5HvcK/WxPr15vJlBI739XxLz5/Vm+kkQeWLEHDj744Yn /TWg== MIME-Version: 1.0 X-Received: by 10.194.158.69 with SMTP id ws5mr3474456wjb.84.1370840596408; Sun, 09 Jun 2013 22:03:16 -0700 (PDT) Received: by 10.216.63.136 with HTTP; Sun, 9 Jun 2013 22:03:16 -0700 (PDT) Date: Mon, 10 Jun 2013 00:03:16 -0500 Message-ID: From: Nico Williams To: kitten@ietf.org Content-Type: text/plain; charset=UTF-8 Subject: [kitten] Is there a difference between a one zero-length component princ and a no-component princ? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 05:03:24 -0000 RFC4120 says Principal is an unconstrained sequence of components, and components are strings of unconstrained length. RFC1964 gives us the display (well, exported name token) syntax we're used to: components separated by '/' then '@' then realm, with '@', '/', '\' and some others backslash-quoted. Near as I can see this means that "@EXAMPLE" could refer to either/both of "zero-component principal in realm EXAMPLE" and "one zero-length component principal in realm EXAMPLE". This ambiguity likely means that no on is using either form in production (though the zero-component form is probably functional); this is convenient. I have a use for having a new GSS-API name-type for representing realms, and a corresponding use case for a GSS-API Kerberos mechanism name-form for Kerberos realms. I propose that we reserve the zero-component principal for naming realms themselves. I.e., I propose: - adding a new GSS generic name type: GSS_C_NT_ISSUER - adding a Kerberos representation/mapping of GSS_C_NT_ISSUER to zero-component principal in the realm named by the imported string - the display, query, and exported name token forms for this would be per-RFC1964: @REALM, with backslash quoting of the realm as appropriate. This will then be used for returning the realm (issuer) of an MN when using GSS_Get_name_attribute() with a generic attribute for requesting the issuer of a NAME (or, if used as a prefix attribute, of an attribute of a NAME). I had considered using krbtgt/REALM@REALM, but this felt unsatisfactory. @REALM is much more natural and happens to work and almost certainly is available. Comments welcomed. Nico -- From nico@cryptonector.com Sun Jun 9 23:38:40 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6136521F867B for ; Sun, 9 Jun 2013 23:38:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.953 X-Spam-Level: X-Spam-Status: No, score=-1.953 tagged_above=-999 required=5 tests=[AWL=0.023, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7CQdEzxLwKe4 for ; Sun, 9 Jun 2013 23:38:24 -0700 (PDT) Received: from homiemail-a73.g.dreamhost.com (caiajhbdcagg.dreamhost.com [208.97.132.66]) by ietfa.amsl.com (Postfix) with ESMTP id 20DE621F84B6 for ; Sun, 9 Jun 2013 23:38:24 -0700 (PDT) Received: from homiemail-a73.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a73.g.dreamhost.com (Postfix) with ESMTP id A23931F0084 for ; Sun, 9 Jun 2013 23:38:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=l5bTaiyFoSLB6OeTJba9 dzWMPQA=; b=JpIgqbNlNdVohUVA/8JvT/rpIvyRp7hfP5tltUXE/1dfPrVjb1ma joyy+7Yjs3Zh2LV/oWiiBY/LmmcIKifAXqVQvX2eN57HGXTg4RD/jKGe5WMM8Dl5 6ZbFlMiNIjqkaSuwKIWpk5ymhJg7B099HUGNXVgYu+UTua9kWvjaQ8U= Received: from mail-we0-f180.google.com (mail-we0-f180.google.com [74.125.82.180]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a73.g.dreamhost.com (Postfix) with ESMTPSA id 3EA851F007C for ; Sun, 9 Jun 2013 23:38:23 -0700 (PDT) Received: by mail-we0-f180.google.com with SMTP id w56so4480912wes.39 for ; Sun, 09 Jun 2013 23:38:21 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=s4q20nC+VBXn8oP/feglBo3EHYMENU2qK7LvW6yotfo=; b=SzX6kl4QEepQFrh7qWIKfTP06YXRXcaetBgXX9gj51oDLQg05HTckHHJLNYnEhfFbS 5nofSv6pvbFw/XB3XkoVijl1LmZuRaYQYZStp4gq0eL56OX9x0+lkJTz6bPPnvw8V06F WwglmmcUEXkCil3VCsZPLbz55oH4leG5KhHZuMljJ0QQ0iM8a1B4hKxB4ofK1TpDx3iP 7r/mzMM70Add81Wav9mY5G1vzaZLNhLb2+kmFmEkgm92EcUM7dFht8VFs+W5A4nYxPcV OGiovaz89Ae7pDhd3vqCyVrqIidGSex82cIn0dar/Xz0f6lt2vbWS1tBHAtLKpMddRkU HrUQ== MIME-Version: 1.0 X-Received: by 10.180.12.72 with SMTP id w8mr3983087wib.4.1370846301824; Sun, 09 Jun 2013 23:38:21 -0700 (PDT) Received: by 10.216.63.136 with HTTP; Sun, 9 Jun 2013 23:38:21 -0700 (PDT) In-Reply-To: References: Date: Mon, 10 Jun 2013 01:38:21 -0500 Message-ID: From: Nico Williams To: Nico Williams Content-Type: multipart/alternative; boundary=001a11c24386dcafdd04dec706dd Cc: "kitten@ietf.org" Subject: Re: [kitten] Is there a difference between a one zero-length component princ and a no-component princ? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 06:38:40 -0000 --001a11c24386dcafdd04dec706dd Content-Type: text/plain; charset=UTF-8 Also, for the generic issuer (realm, CA CN, ...) name syntax I think we should use something like @domainname or @. It will not generally be input by users, methinks, so it probably doesn't matter much, and no common syntax other than DNS domainnames seems general enough. --001a11c24386dcafdd04dec706dd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Also, for the generic issuer (realm, CA CN, ...) name syntax=C2=A0I think w= e should use something like @domainname or @<free-from>. =C2=A0It wil= l not generally be input by users, methinks, so it probably doesn't mat= ter much, and no common syntax other than DNS domainnames seems general eno= ugh. --001a11c24386dcafdd04dec706dd-- From ghudson@mit.edu Mon Jun 10 07:54:34 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D8DB21F938E for ; Mon, 10 Jun 2013 07:54:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zzmMiGux2ki9 for ; Mon, 10 Jun 2013 07:54:28 -0700 (PDT) Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) by ietfa.amsl.com (Postfix) with ESMTP id DC09321F86CA for ; Mon, 10 Jun 2013 07:54:27 -0700 (PDT) X-AuditID: 1209190d-b7fa26d000004bab-13-51b5e8a25e4c Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) by dmz-mailsec-scanner-2.mit.edu (Symantec Messaging Gateway) with SMTP id B2.2D.19371.2A8E5B15; Mon, 10 Jun 2013 10:54:26 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id r5AEsPmb014668; Mon, 10 Jun 2013 10:54:26 -0400 Received: from [18.101.8.235] (vpn-18-101-8-235.mit.edu [18.101.8.235]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id r5AEsNg8014878 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 10 Jun 2013 10:54:24 -0400 Message-ID: <51B5E89F.9010802@mit.edu> Date: Mon, 10 Jun 2013 10:54:23 -0400 From: Greg Hudson User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/20130510 Thunderbird/17.0.6 MIME-Version: 1.0 To: Nico Williams References: In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmplleLIzCtJLcpLzFFi42IRYrdT0V30YmugwbzrxhZHN69isTh17Qib A5PHy1PnGD2WLPnJFMAUxWWTkpqTWZZapG+XwJVx6sRmloLtLBXNCz+xNzCeZu5i5OSQEDCR mDrhCRuELSZx4d56IJuLQ0hgH6PEudO7mCGcjYwSL6c2skM4R5gkLl78CNbOK6Am8eTcO1YQ m0VAVWL3pxNgcTYBZYmDZ7+xgNiiAiESr96fYoOoF5Q4OfMJWFxEQFPi+rylYHFmAWGJC9v3 gs0RFiiUWHFnD1iNkECAxOxLnWA1nAKBEq/u3WOBOFVSYtG0ThaIXh2Jd30PmCFseYntb+cw T2AUmoVk3SwkZbOQlC1gZF7FKJuSW6Wbm5iZU5yarFucnJiXl1qka6SXm1mil5pSuokRFNqc krw7GN8dVDrEKMDBqMTD++DXlkAh1sSy4srcQ4ySHExKoryTnm0NFOJLyk+pzEgszogvKs1J LT7EKMHBrCTCK7sFKMebklhZlVqUD5OS5mBREue9knLTX0ggPbEkNTs1tSC1CCYrw8GhJMHr 9xyoUbAoNT21Ii0zpwQhzcTBCTKcB2i4P0gNb3FBYm5xZjpE/hSjopQ4rwtIQgAkkVGaB9cL Sz2vGMWBXhHmjQOp4gGmLbjuV0CDmYAGT1HfAjK4JBEhJdXAuFZrZzGn6UvJeXPFS202uLxf t9v84LN19cn6bqksMo038/qXnm22+V/o/Nz8K1f8xETL/hcrBBdGKh9SuKP+8nkJc+UJH8tX wq+yONM0jhTr7yxwYHp7e0Pagk0WkyekbmNRDbqzuneF5Zb6h2uMKx/bZT5mf+xmKTf9xu8/ 883fqO9dczGlWImlOCPRUIu5qDgRAI5SAN0YAwAA Cc: kitten@ietf.org Subject: Re: [kitten] Is there a difference between a one zero-length component princ and a no-component princ? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 14:54:34 -0000 On 06/10/2013 01:03 AM, Nico Williams wrote: > Near as I can see this means that "@EXAMPLE" could refer to > either/both of "zero-component principal in realm EXAMPLE" and "one > zero-length component principal in realm EXAMPLE". This ambiguity > likely means that no on is using either form in production (though the > zero-component form is probably functional); this is convenient. MIT krb5 (all versions) will parse "@REALM" as one zero-length component. It looks like Heimdal will do the same. I'm not sure if this throws a wrench in your plans. From nico@cryptonector.com Mon Jun 10 09:15:46 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C3A121F9808 for ; Mon, 10 Jun 2013 09:15:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.955 X-Spam-Level: X-Spam-Status: No, score=-1.955 tagged_above=-999 required=5 tests=[AWL=0.021, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZBUMwzrqXaq7 for ; Mon, 10 Jun 2013 09:15:41 -0700 (PDT) Received: from homiemail-a33.g.dreamhost.com (caiajhbdccah.dreamhost.com [208.97.132.207]) by ietfa.amsl.com (Postfix) with ESMTP id 3D4FA21F971B for ; Mon, 10 Jun 2013 09:15:41 -0700 (PDT) Received: from homiemail-a33.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a33.g.dreamhost.com (Postfix) with ESMTP id BC17559405E for ; Mon, 10 Jun 2013 09:15:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=EIfJ/kc4mfNsjTHM8Gm6 cG6tHY0=; b=q3M2z4aR4fIo1UH3+75Jc9fOpjSt6f7RU+BgJ6kWR3vwpeX9XdpE MMcUQoliikp4dY7MEE4DboBC/Vwuhu4Hpu2OPdPJom88a5c2aCVjkRRHQUCarl7i 5ns/V6odUeLaOciq+r45QrS8uCf4IFPMRM1eVAruxd0HseJJvUa7Tmk= Received: from mail-wg0-f41.google.com (mail-wg0-f41.google.com [74.125.82.41]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a33.g.dreamhost.com (Postfix) with ESMTPSA id 5DB14594058 for ; Mon, 10 Jun 2013 09:15:39 -0700 (PDT) Received: by mail-wg0-f41.google.com with SMTP id k13so3241110wgh.2 for ; Mon, 10 Jun 2013 09:15:37 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=uo6kZA2lcP3uO0S4Q4895m+4Lljlv3QYZrhNJ4/HkDU=; b=UflW+oI+TtfvnG7A3wwnmexp/d4mHxYbIqDNawypC7qmEARZyjslC3knGUbkVbv1rG jcadRCzTr78Z0mygt1v55+bC5MF7zTDGraQcS5a3PPTiyXmZzkYJY4sE4dvbc+qgsn/c CGECzY20/REC0eYsF2D3k5Rt6gtzKPED/ldKZoakCvD+W8f7lTUSFNbdEwiHsWCPvygv sZei3Db0sKYyK8+ZBg8jpe0MddR6GuGVz4ZChnDsMTebMXiLkrRYMCKDwST7WHzXaDby RKEcxxJd1LtXSeVufN49y/ekq3OCE8bUvciQoVGdolMbmxDIAoO6a4Ls5vG0Tdgzl+YA Wkag== MIME-Version: 1.0 X-Received: by 10.194.158.69 with SMTP id ws5mr4902432wjb.84.1370880937944; Mon, 10 Jun 2013 09:15:37 -0700 (PDT) Received: by 10.216.63.136 with HTTP; Mon, 10 Jun 2013 09:15:37 -0700 (PDT) Received: by 10.216.63.136 with HTTP; Mon, 10 Jun 2013 09:15:37 -0700 (PDT) In-Reply-To: <51B5E89F.9010802@mit.edu> References: <51B5E89F.9010802@mit.edu> Date: Mon, 10 Jun 2013 11:15:37 -0500 Message-ID: From: Nico Williams To: Greg Hudson Content-Type: multipart/alternative; boundary=e89a8f64355c55f00c04decf171a Cc: kitten@ietf.org Subject: Re: [kitten] Is there a difference between a one zero-length component princ and a no-component princ? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 16:15:46 -0000 --e89a8f64355c55f00c04decf171a Content-Type: text/plain; charset=UTF-8 On Jun 10, 2013 9:54 AM, "Greg Hudson" wrote: > MIT krb5 (all versions) will parse "@REALM" as one zero-length > component. It looks like Heimdal will do the same. I'm not sure if > this throws a wrench in your plans. But won't both also display a single zero-length component name as @REALM? I think it is exceedingly unlikely that either form is in use in production, or testing even. --e89a8f64355c55f00c04decf171a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Jun 10, 2013 9:54 AM, "Greg Hudson" <ghudson@mit.edu> wrote:
> MIT krb5 (all versions) will parse "@REALM" as one zero-leng= th
> component. =C2=A0It looks like Heimdal will do the same. =C2=A0I'm= not sure if
> this throws a wrench in your plans.

But won't both also display a single zero-length compone= nt name as @REALM?

I think it is exceedingly unlikely that either form is in us= e in production, or testing even.

--e89a8f64355c55f00c04decf171a-- From ietf@augustcellars.com Mon Jun 10 13:21:45 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A72F21F9A18 for ; Mon, 10 Jun 2013 13:21:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.739 X-Spam-Level: X-Spam-Status: No, score=-1.739 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dEzxvhXPAfx4 for ; Mon, 10 Jun 2013 13:21:39 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) by ietfa.amsl.com (Postfix) with ESMTP id 7A1F421F949D for ; Mon, 10 Jun 2013 13:21:37 -0700 (PDT) Received: from Philemon (173-160-230-154-Washington.hfc.comcastbusiness.net [173.160.230.154]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 590C42CA08 for ; Mon, 10 Jun 2013 13:21:37 -0700 (PDT) From: "Jim Schaad" To: Date: Mon, 10 Jun 2013 13:20:45 -0700 Message-ID: <069c01ce6617$fd5f5f50$f81e1df0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_069D_01CE65DD.510198C0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: Ac5mF7Pp+4MSt93fQH27O9N47hM4LA== Content-Language: en-us Subject: [kitten] Naming of the GSS_EXTS_FINISHED field X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 20:21:45 -0000 This is a multipart message in MIME format. ------=_NextPart_000_069D_01CE65DD.510198C0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Is there any preference in the group for the usage of GSS_EXTS_FINISHED / KRB-FINISHED (from PKU2U) Or GSS_EXTS_IAKERB_FINISHED / IAKERB-FINSISHED (from old IAKERB) For the naming of the type and structure in the update to the iakerb document? I am currently working through the update on the assumption it is being folded in. Jim ------=_NextPart_000_069D_01CE65DD.510198C0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Is there = any preference in the group for the usage of

 

GSS_EXTS_FINISHED / KRB-FINISHED  (from = PKU2U)

Or

 

GSS_EXTS_IAKERB_FINISHED / IAKERB-FINSISHED (from old = IAKERB)

 

For the naming of the type and structure in the update = to the iakerb document?  I am currently working through the update = on the assumption it is being folded in.

 

Jim

 

------=_NextPart_000_069D_01CE65DD.510198C0-- From kaduk@mit.edu Mon Jun 10 15:55:56 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5629921F9A62 for ; Mon, 10 Jun 2013 15:55:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T+5-8QWJ5VKt for ; Mon, 10 Jun 2013 15:55:49 -0700 (PDT) Received: from dmz-mailsec-scanner-3.mit.edu (dmz-mailsec-scanner-3.mit.edu [18.9.25.14]) by ietfa.amsl.com (Postfix) with ESMTP id A7D2B21F96EA for ; Mon, 10 Jun 2013 15:55:49 -0700 (PDT) X-AuditID: 1209190e-b7fa46d000006e53-c8-51b659743377 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) by dmz-mailsec-scanner-3.mit.edu (Symantec Messaging Gateway) with SMTP id 96.DA.28243.47956B15; Mon, 10 Jun 2013 18:55:48 -0400 (EDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-1.mit.edu (8.13.8/8.9.2) with ESMTP id r5AMtl57017881; Mon, 10 Jun 2013 18:55:48 -0400 Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id r5AMtkKp032090 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 10 Jun 2013 18:55:47 -0400 Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id r5AMtjED011680; Mon, 10 Jun 2013 18:55:45 -0400 (EDT) Date: Mon, 10 Jun 2013 18:55:45 -0400 (EDT) From: Benjamin Kaduk To: Jim Schaad In-Reply-To: <069c01ce6617$fd5f5f50$f81e1df0$@augustcellars.com> Message-ID: References: <069c01ce6617$fd5f5f50$f81e1df0$@augustcellars.com> User-Agent: Alpine 1.10 (GSO 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrDIsWRmVeSWpSXmKPExsUixCmqrFsSuS3QYOl1VYvV07+zWRzdvIrF gclj45zpbB5LlvxkCmCK4rJJSc3JLEst0rdL4MrYfuwke8Eyloq2pYoNjEuZuxg5OSQETCRu bD/EAmGLSVy4t56ti5GLQ0hgH6PEicYPLBDORkaJS817GSGcQ0wSXUuvQpU1MEr8ODqLCaSf RUBb4s++qWA2m4CKxMw3G9lAbBEBdYmtq2+CxZkFhCXWn5sBtltYwFpiff8fsDingIPErMOP weK8Ao4SE/bPAbI5gBbYS9xtTAUJiwroSKzeP4UFokRQ4uTMJywQIy0lzv25zjaBUXAWktQs JKkFjEyrGGVTcqt0cxMzc4pTk3WLkxPz8lKLdI31cjNL9FJTSjcxggNVkm8H49eDSocYBTgY lXh4Exm3BQqxJpYVV+YeYpTkYFIS5TUMBArxJeWnVGYkFmfEF5XmpBYfYpTgYFYS4Z1pCpTj TUmsrEotyodJSXOwKInzXkm56S8kkJ5YkpqdmlqQWgSTleHgUJLg3RkB1ChYlJqeWpGWmVOC kGbi4AQZzgM0/AJIDW9xQWJucWY6RP4Uo6KUOO9+kIQASCKjNA+uF5ZIXjGKA70izLsEpIoH mITgul8BDWYCGjxFfQvI4JJEhJRUA+O8Jft5MlxMgt8qvJf3OLiVU2TVxYj0y5t4ltu+rDjQ uNSbn196798SxnKBzX/XWsw/EpgzL+kb//nZjHs0TsdJpq++Vv3+8PFFbD3vxS4USM8q8moW UeXf63sqiP3kkROTsxv95/Eyhy4PvH8g/9gOqUlfbsr99Hv99d+fHdfK/ffGLHj0KsVKiaU4 I9FQi7moOBEAAfcBUP8CAAA= Cc: kitten@ietf.org Subject: Re: [kitten] Naming of the GSS_EXTS_FINISHED field X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jun 2013 22:55:56 -0000 On Mon, 10 Jun 2013, Jim Schaad wrote: > Is there any preference in the group for the usage of > > > > GSS_EXTS_FINISHED / KRB-FINISHED (from PKU2U) > > Or > > > > GSS_EXTS_IAKERB_FINISHED / IAKERB-FINSISHED (from old IAKERB) > > > > For the naming of the type and structure in the update to the iakerb > document? I am currently working through the update on the assumption it is > being folded in. If the intent is to have the extension be used in multiple contexts, then the more generic name seems preferrable. -Ben From jhutz@cmu.edu Tue Jun 11 11:23:06 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4080721F98C3 for ; Tue, 11 Jun 2013 11:23:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jpU2ZNkbXwlG for ; Tue, 11 Jun 2013 11:22:41 -0700 (PDT) Received: from smtp01.srv.cs.cmu.edu (SMTP01.SRV.CS.CMU.EDU [128.2.217.196]) by ietfa.amsl.com (Postfix) with ESMTP id 509DB21F9814 for ; Tue, 11 Jun 2013 11:22:22 -0700 (PDT) Received: from [128.2.193.239] (minbar.fac.cs.cmu.edu [128.2.193.239]) (authenticated bits=0) by smtp01.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id r5BIMHm8006300 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO); Tue, 11 Jun 2013 14:22:17 -0400 (EDT) Message-ID: <1370974937.2711.908.camel@minbar.fac.cs.cmu.edu> From: Jeffrey Hutzelman To: Nico Williams Date: Tue, 11 Jun 2013 14:22:17 -0400 In-Reply-To: <16063_1370840608_r5A53RqQ016953_CAK3OfOiqO-O-ge0dOJ4HwwOkkNubfN7y10TnWUv4gOGC-LvG1g@mail.gmail.com> References: <16063_1370840608_r5A53RqQ016953_CAK3OfOiqO-O-ge0dOJ4HwwOkkNubfN7y10TnWUv4gOGC-LvG1g@mail.gmail.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.2.3-0ubuntu6 Content-Transfer-Encoding: 7bit Mime-Version: 1.0 X-Scanned-By: mimedefang-cmuscs on 128.2.217.196 Cc: kitten@ietf.org, jhutz@cmu.edu Subject: Re: [kitten] Is there a difference between a one zero-length component princ and a no-component princ? X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Jun 2013 18:23:06 -0000 On Mon, 2013-06-10 at 00:03 -0500, Nico Williams wrote: > I had considered using krbtgt/REALM@REALM, but this felt > unsatisfactory. @REALM is much more natural and happens to work and > almost certainly is available. Note that we already use this for naming realms in certificates issued to KDCs for use with PKINIT. From hartmans@mit.edu Fri Jun 21 16:49:43 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4F0E21F9EDF for ; Fri, 21 Jun 2013 16:49:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7We+CWtFwXC4 for ; Fri, 21 Jun 2013 16:49:37 -0700 (PDT) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 650F321F9EE1 for ; Fri, 21 Jun 2013 16:49:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id DAF4020163; Fri, 21 Jun 2013 19:45:34 -0400 (EDT) Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xn9fa96v84wK; Fri, 21 Jun 2013 19:45:34 -0400 (EDT) Received: from carter-zimmerman.suchdamage.org (c-98-216-0-82.hsd1.ma.comcast.net [98.216.0.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Fri, 21 Jun 2013 19:45:34 -0400 (EDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id B83A280878; Fri, 21 Jun 2013 19:49:16 -0400 (EDT) From: Sam Hartman To: nico@cryptonector.com Date: Fri, 21 Jun 2013 19:49:16 -0400 Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: kitten@ietf.org Subject: [kitten] Adopting draft-williams-kitten-channel-bound-flag X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Jun 2013 23:49:43 -0000 Nico, based on Shawn's consensus call, I believe we have consensus to adopt draft-williams-kitten-channel-bound-flag. based on discussions with Stephen today, we don't need to recharter to do that. So if you want to submit a 00, the chairs would be happy to approve. From nico@cryptonector.com Sat Jun 22 15:11:18 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48C2621F9C7A for ; Sat, 22 Jun 2013 15:11:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RkHnuShTlwim for ; Sat, 22 Jun 2013 15:11:13 -0700 (PDT) Received: from homiemail-a26.g.dreamhost.com (caiajhbdcbef.dreamhost.com [208.97.132.145]) by ietfa.amsl.com (Postfix) with ESMTP id 6481921F9E58 for ; Sat, 22 Jun 2013 15:11:13 -0700 (PDT) Received: from homiemail-a26.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a26.g.dreamhost.com (Postfix) with ESMTP id F3944B805B for ; Sat, 22 Jun 2013 15:11:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=zsLvxypRDkps17NM103z XyYRrlY=; b=dR0ci2QcchpQnGOysx0drZFvvkVIwdEz9omnU1QwFXwu7rllpsHa 8O+YwG2kOB5KQvGhUKFBjadv+benzZEjIq5ogxdDoQRcDj4SsDfUnL4rpl29/1pK VCJQsFJcZ7enQcs/tpquF5NP+HN3p9Rp8jDpyg9M426vxI21cL1W7/U= Received: from mail-wi0-f180.google.com (mail-wi0-f180.google.com [209.85.212.180]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a26.g.dreamhost.com (Postfix) with ESMTPSA id 9DA49B8057 for ; Sat, 22 Jun 2013 15:11:12 -0700 (PDT) Received: by mail-wi0-f180.google.com with SMTP id c10so1525577wiw.13 for ; Sat, 22 Jun 2013 15:11:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=xuaKZIVhrhB16ZtTCVbHuKWPIscT23zlIP/sqY28kUw=; b=SJ9F+59/L5CJNZqojvsobCXPfnaFWpeQZMJ+xfV0Vpruh8GGfB+t31XRBk5FT9eNtO UefZLffKZX+BcOkmzGts8xbDsID6R7Jfo1LczDAHSgwchUoI3NekIusCLAvnwF4As/eN 3Qwoad/LU1qwI6m0T8cqZrLJNKaPG3HPztPWkCzPgMkNh3fHyo5c+ze0yrqtN7BezB4n anP/n5E0S97VVzd7NSZVE3XdofGFwEJYV3BD/o1+B1hE7izmnIIyVtTwp35R/5EBE6PT tjVS3TYLI+3h+aSKmI6KpcLQZU+W43zgZ1qpCuk8W8YEr7h04bmmAzyfnv8tK1yRxPDp o6YQ== MIME-Version: 1.0 X-Received: by 10.180.21.243 with SMTP id y19mr2327400wie.36.1371939071278; Sat, 22 Jun 2013 15:11:11 -0700 (PDT) Received: by 10.216.29.5 with HTTP; Sat, 22 Jun 2013 15:11:11 -0700 (PDT) In-Reply-To: References: Date: Sat, 22 Jun 2013 17:11:11 -0500 Message-ID: From: Nico Williams To: Sam Hartman Content-Type: text/plain; charset=UTF-8 Cc: kitten@ietf.org Subject: Re: [kitten] Adopting draft-williams-kitten-channel-bound-flag X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Jun 2013 22:11:18 -0000 I'll try to get to it (and other IETF things) on Monday night. From internet-drafts@ietf.org Fri Jun 28 10:30:24 2013 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D89C21F866E; Fri, 28 Jun 2013 10:30:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.182 X-Spam-Level: X-Spam-Status: No, score=-102.182 tagged_above=-999 required=5 tests=[AWL=0.418, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X8QlD+waHECg; Fri, 28 Jun 2013 10:30:23 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8073B21F8667; Fri, 28 Jun 2013 10:30:17 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.51.p2 Message-ID: <20130628173017.2197.22687.idtracker@ietfa.amsl.com> Date: Fri, 28 Jun 2013 10:30:17 -0700 Cc: kitten@ietf.org Subject: [kitten] I-D Action: draft-ietf-kitten-aes-cts-hmac-sha2-01.txt X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Jun 2013 17:30:24 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Common Authentication Technology Next Gen= eration Working Group of the IETF. Title : AES Encryption with HMAC-SHA2 for Kerberos 5 Author(s) : Kelley W. Burgin Michael A. Peck Filename : draft-ietf-kitten-aes-cts-hmac-sha2-01.txt Pages : 15 Date : 2013-06-28 Abstract: This document specifies two encryption types and two corresponding checksum types for Kerberos 5. The new types use AES in CTS mode (CBC mode with ciphertext stealing) for confidentiality and HMAC with a SHA-2 hash for integrity. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-kitten-aes-cts-hmac-sha2 There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-01 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-kitten-aes-cts-hmac-sha2-01 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/