From nobody Thu Jul 18 17:34:26 2019 Return-Path: X-Original-To: kitten@ietfa.amsl.com Delivered-To: kitten@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE9BA1206ED; Thu, 18 Jul 2019 17:34:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0EYW8eW-zczq; Thu, 18 Jul 2019 17:34:16 -0700 (PDT) Received: from rfc-editor.org (rfc-editor.org [4.31.198.49]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDA81120B68; Thu, 18 Jul 2019 17:34:16 -0700 (PDT) Received: by rfc-editor.org (Postfix, from userid 30) id 5DCB6B80BEC; Thu, 18 Jul 2019 17:34:11 -0700 (PDT) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org X-PHP-Originating-Script: 1005:ams_util_lib.php From: rfc-editor@rfc-editor.org Cc: rfc-editor@rfc-editor.org, drafts-update-ref@iana.org, kitten@ietf.org Content-type: text/plain; charset=UTF-8 Message-Id: <20190719003411.5DCB6B80BEC@rfc-editor.org> Date: Thu, 18 Jul 2019 17:34:11 -0700 (PDT) Archived-At: Subject: [kitten] =?utf-8?q?RFC_8636_on_Public_Key_Cryptography_for_Initi?= =?utf-8?q?al_Authentication_in_Kerberos_=28PKINIT=29_Algorithm_Agility?= X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jul 2019 00:34:25 -0000 A new Request for Comments is now available in online RFC libraries. RFC 8636 Title: Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility Author: L. Hornquist Astrand, L. Zhu, M. Cullen, G. Hudson Status: Standards Track Stream: IETF Date: July 2019 Mailbox: lha@apple.com, larryzhu@live.com, margaret@painless-security.com, ghudson@mit.edu Pages: 21 Characters: 43054 Updates: RFC 4556 I-D Tag: draft-ietf-kitten-pkinit-alg-agility-08.txt URL: https://www.rfc-editor.org/info/rfc8636 DOI: 10.17487/RFC8636 This document updates the Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) standard (RFC 4556) to remove protocol structures tied to specific cryptographic algorithms. The PKINIT key derivation function is made negotiable, and the digest algorithms for signing the pre-authentication data and the client's X.509 certificates are made discoverable. These changes provide preemptive protection against vulnerabilities discovered in the future in any specific cryptographic algorithm and allow incremental deployment of newer algorithms. This document is a product of the Common Authentication Technology Next Generation Working Group of the IETF. This is now a Proposed Standard. STANDARDS TRACK: This document specifies an Internet Standards Track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the Official Internet Protocol Standards (https://www.rfc-editor.org/standards) for the standardization state and status of this protocol. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see https://www.ietf.org/mailman/listinfo/ietf-announce https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see https://www.rfc-editor.org/search For downloading RFCs, see https://www.rfc-editor.org/retrieve/bulk Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From nobody Wed Jul 31 08:55:11 2019 Return-Path: X-Original-To: kitten@ietf.org Delivered-To: kitten@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E6131203D8; Wed, 31 Jul 2019 08:55:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: kitten@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.99.1 Auto-Submitted: auto-generated Precedence: bulk Reply-To: kitten@ietf.org Message-ID: <156458850649.27522.2698156049489872873@ietfa.amsl.com> Date: Wed, 31 Jul 2019 08:55:06 -0700 Archived-At: Subject: [kitten] I-D Action: draft-ietf-kitten-sasl-saml-ec-18.txt X-BeenThere: kitten@ietf.org X-Mailman-Version: 2.1.29 List-Id: Common Authentication Technologies - Next Generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jul 2019 15:55:10 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Common Authentication Technology Next Generation WG of the IETF. Title : SAML Enhanced Client SASL and GSS-API Mechanisms Authors : Scott Cantor Simon Josefsson Filename : draft-ietf-kitten-sasl-saml-ec-18.txt Pages : 34 Date : 2019-07-31 Abstract: Security Assertion Markup Language (SAML) 2.0 is a generalized framework for the exchange of security-related information between asserting and relying parties. Simple Authentication and Security Layer (SASL) and the Generic Security Service Application Program Interface (GSS-API) are application frameworks to facilitate an extensible authentication model. This document specifies a SASL and GSS-API mechanism for SAML 2.0 that leverages the capabilities of a SAML-aware "enhanced client" to address significant barriers to federated authentication in a manner that encourages reuse of existing SAML bindings and profiles designed for non-browser scenarios. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-kitten-sasl-saml-ec/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-kitten-sasl-saml-ec-18 https://datatracker.ietf.org/doc/html/draft-ietf-kitten-sasl-saml-ec-18 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-kitten-sasl-saml-ec-18 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/