From owner-ietf-sacred@mail.imc.org Thu Jun 26 18:02:24 2003 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA23748 for ; Thu, 26 Jun 2003 18:02:24 -0400 (EDT) Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5QLlIrb076086 for ; Thu, 26 Jun 2003 14:47:18 -0700 (PDT) (envelope-from owner-ietf-sacred@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h5QLlIp5076085 for ietf-sacred-bks; Thu, 26 Jun 2003 14:47:18 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-sacred@mail.imc.org using -f Received: from vulcan.rsasecurity.com (mail.rsasecurity.com [204.167.114.123]) by above.proper.com (8.12.9/8.12.8) with SMTP id h5QLlGrb076080 for ; Thu, 26 Jun 2003 14:47:17 -0700 (PDT) (envelope-from mnystrom@rsasecurity.com) Received: from sdtihq24.na.rsa.net by vulcan.rsasecurity.com via smtpd (for mail.imc.org [208.184.76.43]) with SMTP; 26 Jun 2003 21:47:19 UT Received: from exrsa01.rsa.com (ebola.securid.com [192.80.211.4]) by sdtihq24.securid.com (8.11.6p2/8.11.6) with ESMTP id h5QLkVc29644; Thu, 26 Jun 2003 17:46:31 -0400 (EDT) Received: by exrsa01.rsa.com with Internet Mail Service (5.5.2653.19) id ; Thu, 26 Jun 2003 14:46:26 -0700 Received: from MNYSTROM-LAP ([10.3.9.27]) by exrsa01.rsa.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id MM5M9LX8; Thu, 26 Jun 2003 14:46:20 -0700 From: "Nystrom, Magnus" Reply-To: "Nystrom, Magnus" To: smb@research.att.com Cc: iesg-secretary@ietf.org, ietf-sacred@imc.org Date: Thu, 26 Jun 2003 23:45:50 +0200 (W. Europe Daylight Time) Subject: New versions of SACRED I-Ds; recommending consideration for RFCs Message-ID: X-X-Sender: mnystrom@exrsa01.rsa.com MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-ietf-sacred@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Dear Steve, As a response to your pre-IESG, Area Director "nits", Stephen and I have now submitted new versions of SACRED's framework and protocol I-D, versions that we hope will meet your earlier comments. Below is a summary of the changes made to the framework document; the protocol document has a list of changes included in it. Due to the nature of these changes we do not intend to re-open the WG L-C on these documents, instead we ask that they be considered by you and the IETF secretariat for publication as RFCs. Thanks, -- Magnus -- Framework -06 changes: - Status of Memo (section replaced) - Copyright Notice (added) - Abstract (updated - now a single paragraph w/o references) - 4.2.2 TLS Authentication (updated - added info. on TLS server authentication and related subtopics) - 5.2.2 Client Security, TLS Server Authentication (new section - adds discussion of user interface for TLS server auth. by users) - Various sections (editorial tweaks to create draft-05, change hdrs/dates, etc.) From owner-ietf-sacred@mail.imc.org Thu Jun 26 18:13:45 2003 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA24868 for ; Thu, 26 Jun 2003 18:13:44 -0400 (EDT) Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5QLpYrb076156 for ; Thu, 26 Jun 2003 14:51:34 -0700 (PDT) (envelope-from owner-ietf-sacred@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h5QLpY1A076155 for ietf-sacred-bks; Thu, 26 Jun 2003 14:51:34 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-sacred@mail.imc.org using -f Received: from linux.research.att.com (H-135-207-24-16.research.att.com [135.207.24.16]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5QLpWrb076150 for ; Thu, 26 Jun 2003 14:51:32 -0700 (PDT) (envelope-from smb@research.att.com) Received: from bigmail.research.att.com (bigmail.research.att.com [135.207.30.101]) by linux.research.att.com (8.12.8/8.12.8) with ESMTP id h5QM0eJh001710; Thu, 26 Jun 2003 18:00:40 -0400 Received: from berkshire.research.att.com (raptor.research.att.com [135.207.23.32]) by bigmail.research.att.com (8.11.6+Sun/8.11.6) with ESMTP id h5QLoqV14995; Thu, 26 Jun 2003 17:50:52 -0400 (EDT) Received: from research.att.com (localhost [127.0.0.1]) by berkshire.research.att.com (Postfix) with ESMTP id AE5677B4D; Thu, 26 Jun 2003 17:50:51 -0400 (EDT) X-Mailer: exmh version 2.6.3 04/04/2003 with nmh-1.0.4 To: "Nystrom, Magnus" Cc: iesg-secretary@ietf.org, ietf-sacred@imc.org Subject: Re: New versions of SACRED I-Ds; recommending consideration for RFCs Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 26 Jun 2003 17:50:51 -0400 From: "Steven M. Bellovin" Message-Id: <20030626215051.AE5677B4D@berkshire.research.att.com> Sender: owner-ietf-sacred@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: In message , "Nystrom, Magnus" wr ites: >Dear Steve, > >As a response to your pre-IESG, Area Director "nits", Stephen and I have >now submitted new versions of SACRED's framework and protocol I-D, >versions that we hope will meet your earlier comments. > >Below is a summary of the changes made to the framework document; the >protocol document has a list of changes included in it. > >Due to the nature of these changes we do not intend to re-open the WG L-C >on these documents, instead we ask that they be considered by you and the >IETF secretariat for publication as RFCs. > I agree -- no new LC is needed. When they pop in the repository, I'll look at them again. --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book) From owner-ietf-sacred@mail.imc.org Mon Jun 30 08:40:03 2003 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA18856 for ; Mon, 30 Jun 2003 08:40:02 -0400 (EDT) Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5UBvNFK060937 for ; Mon, 30 Jun 2003 04:57:23 -0700 (PDT) (envelope-from owner-ietf-sacred@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h5UBvNLK060936 for ietf-sacred-bks; Mon, 30 Jun 2003 04:57:23 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-sacred@mail.imc.org using -f Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5UBsAFK060844 for ; Mon, 30 Jun 2003 04:54:13 -0700 (PDT) (envelope-from nsyracus@cnri.reston.va.us) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA12759; Mon, 30 Jun 2003 07:54:09 -0400 (EDT) Message-Id: <200306301154.HAA12759@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-sacred@imc.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-sacred-framework-06.txt Date: Mon, 30 Jun 2003 07:54:09 -0400 Sender: owner-ietf-sacred@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Securely Available Credentials Working Group of the IETF. Title : Securely Available Credentials - Credential Server Framework Author(s) : D. Gustafson, M. Just, M. Nystrom Filename : draft-ietf-sacred-framework-06.txt Pages : 22 Date : 2003-6-27 As the number, and more particularly the number of different types, of devices connecting to the Internet increases, credential mobility becomes an issue for IETF standardization. This document responds to the requirements on protocols for secure exchange of credentials listed in [RFC3157] by presenting an abstract protocol framework A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sacred-framework-06.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-sacred-framework-06.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-sacred-framework-06.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2003-6-27150916.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-sacred-framework-06.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-sacred-framework-06.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2003-6-27150916.I-D@ietf.org> --OtherAccess-- --NextPart-- From owner-ietf-sacred@mail.imc.org Mon Jun 30 08:41:25 2003 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA19031 for ; Mon, 30 Jun 2003 08:41:25 -0400 (EDT) Received: from above.proper.com (localhost [127.0.0.1]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5UBsLFK060852 for ; Mon, 30 Jun 2003 04:54:21 -0700 (PDT) (envelope-from owner-ietf-sacred@mail.imc.org) Received: (from majordom@localhost) by above.proper.com (8.12.9/8.12.9/Submit) id h5UBsLUN060851 for ietf-sacred-bks; Mon, 30 Jun 2003 04:54:21 -0700 (PDT) X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-sacred@mail.imc.org using -f Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.12.9/8.12.8) with ESMTP id h5UBsHFK060846 for ; Mon, 30 Jun 2003 04:54:17 -0700 (PDT) (envelope-from nsyracus@cnri.reston.va.us) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id HAA12824; Mon, 30 Jun 2003 07:54:17 -0400 (EDT) Message-Id: <200306301154.HAA12824@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-sacred@imc.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-sacred-protocol-bss-08.txt Date: Mon, 30 Jun 2003 07:54:16 -0400 Sender: owner-ietf-sacred@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Securely Available Credentials Working Group of the IETF. Title : Securely Available Credentials Protocol Author(s) : S. Farrell Filename : draft-ietf-sacred-protocol-bss-08.txt Pages : 24 Date : 2003-6-27 This document describes a protocol whereby a user can acquire cryptographic credentials (e.g., private keys, PKCS #15 structures) from a credential server, using a workstation that has locally trusted software installed, but with no user-specific configuration. The protocol's payloads are described in XML. This memo also specifies a BEEP profile of the protocol. Security requirements are met by mandating support for TLS and/or DIGEST-MD5 (through BEEP). A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-sacred-protocol-bss-08.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-sacred-protocol-bss-08.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-sacred-protocol-bss-08.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2003-6-27150927.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-sacred-protocol-bss-08.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-sacred-protocol-bss-08.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2003-6-27150927.I-D@ietf.org> --OtherAccess-- --NextPart--