From owner-ietf-sasl Sat Jan 15 13:46:39 2000 Received: by ns.secondary.com (8.9.3/8.9.3) id NAA08823 for ietf-sasl-bks; Sat, 15 Jan 2000 13:46:39 -0800 (PST) Received: from katroo.Sendmail.COM (katroo.Sendmail.COM [209.246.26.35]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id NAA08815 for ; Sat, 15 Jan 2000 13:46:37 -0800 (PST) Received: from wiz.Sendmail.COM (wiz.Sendmail.COM [10.210.100.97]) by katroo.Sendmail.COM (8.9.3/8.9.3) with ESMTP id NAA10000 for ; Sat, 15 Jan 2000 13:47:19 -0800 (PST) Received: (from ca@localhost) by wiz.Sendmail.COM (8.10.0.Beta2/8.10.0.Beta2) id e0FLlJn78918 for ietf-sasl@imc.org; Sat, 15 Jan 2000 13:47:19 -0800 (PST) Date: Sat, 15 Jan 2000 13:47:19 -0800 From: Claus Assmann To: ietf-sasl@imc.org Subject: mechanism based on OpenPGP? Message-ID: <20000115134719.A78914@wiz.Sendmail.COM> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Is there a SASL mechanism that is based on public key cryptography? Something like OpenPGP for example? I would like to see such a mechanism due to the "web of trust" that is simple in PGP but difficult in X.509 based certs. Since it seems a bit expensive for "end users" to get a cert from a big CA, it might be useful to have an alternative to TLS, which only (?) allows for a hierarchical structure. I know users could "just" use PGP in their MUAs, but having encryption in an MTA might solve some interoperability issues, esp. if an MTA like sendmail would support such a mechanism (including the security layer, not just authentication). From owner-ietf-sasl Sat Jan 15 14:14:35 2000 Received: by ns.secondary.com (8.9.3/8.9.3) id OAA09175 for ietf-sasl-bks; Sat, 15 Jan 2000 14:14:35 -0800 (PST) Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id OAA09170 for ; Sat, 15 Jan 2000 14:14:33 -0800 (PST) Received: (from gshapiro@localhost) by horsey.gshapiro.net (8.10.0.Beta11/8.10.0.Beta11) id e0FMFEE70409; Sat, 15 Jan 2000 14:15:14 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <14464.61810.580366.785815@horsey.gshapiro.net> Date: Sat, 15 Jan 2000 14:15:14 -0800 (PST) From: Gregory Neil Shapiro To: Claus Assmann Cc: ietf-sasl@imc.org Subject: Re: mechanism based on OpenPGP? In-Reply-To: <20000115134719.A78914@wiz.Sendmail.COM> References: <20000115134719.A78914@wiz.Sendmail.COM> X-Mailer: VM 6.75 under 21.2 (beta26) "Millenium" XEmacs Lucid Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: ca+sasl> Is there a SASL mechanism that is based on public key cryptography? I don't know if this is exactly what you are looking for.. http://search.ietf.org/internet-drafts/draft-ietf-tls-openpgp-00.txt Extensions to TLS for OpenPGP keys Abstract This document builds upon the TLS Protocol Specification [TLS]. The extensions described herein are intended to apply to Version 1.0 of the TLS specification. The purpose of this document is to update the TLS protocol with extensions to support the certificates, public key algorithms, symmetric ciphers, hash algorithms, and trust model used by OpenPGP [OpenPGP]. From owner-ietf-sasl Sun Jan 16 00:21:44 2000 Received: by ns.secondary.com (8.9.3/8.9.3) id AAA01172 for ietf-sasl-bks; Sun, 16 Jan 2000 00:21:44 -0800 (PST) Received: from demo.esys.ca (demo.esys.ca [207.167.22.130]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id AAA01168 for ; Sun, 16 Jan 2000 00:21:43 -0800 (PST) Received: from messagingdirect.com (2-091-edm.dial.worldgate.ca [207.167.2.91]) by demo.esys.ca (2.0.4/SMS 2.0.4-beta-5) with ESMTP id BAA32390; Sun, 16 Jan 2000 01:22:18 -0700 Message-ID: <38817ED3.1626AA5@messagingdirect.com> Date: Sun, 16 Jan 2000 01:18:27 -0700 From: Alexey Melnikov X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: Claus Assmann CC: ietf-sasl@imc.org Subject: Re: mechanism based on OpenPGP? References: <20000115134719.A78914@wiz.Sendmail.COM> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Claus Assmann wrote: > > Is there a SASL mechanism that is based on public key cryptography? > Something like OpenPGP for example? I would like to see such a > mechanism due to the "web of trust" that is simple in PGP but > difficult in X.509 based certs. Since it seems a bit expensive for > "end users" to get a cert from a big CA, it might be useful to have > an alternative to TLS, which only (?) allows for a hierarchical > structure. I know users could "just" use PGP in their MUAs, but > having encryption in an MTA might solve some interoperability > issues, esp. if an MTA like sendmail would support such a mechanism > (including the security layer, not just authentication). No one I am aware of. All SASL mechanisms are listed at http://baikonur.demo.ru/homerus/mail/SASL_info.html Everything except SecurID should be up to date. Alexey From owner-ietf-sasl Sat Jan 15 13:46:39 2000 Received: by ns.secondary.com (8.9.3/8.9.3) id NAA08823 for ietf-sasl-bks; Sat, 15 Jan 2000 13:46:39 -0800 (PST) Received: from katroo.Sendmail.COM (katroo.Sendmail.COM [209.246.26.35]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id NAA08815 for ; Sat, 15 Jan 2000 13:46:37 -0800 (PST) Received: from wiz.Sendmail.COM (wiz.Sendmail.COM [10.210.100.97]) by katroo.Sendmail.COM (8.9.3/8.9.3) with ESMTP id NAA10000 for ; Sat, 15 Jan 2000 13:47:19 -0800 (PST) Received: (from ca@localhost) by wiz.Sendmail.COM (8.10.0.Beta2/8.10.0.Beta2) id e0FLlJn78918 for ietf-sasl@imc.org; Sat, 15 Jan 2000 13:47:19 -0800 (PST) Date: Sat, 15 Jan 2000 13:47:19 -0800 From: Claus Assmann To: ietf-sasl@imc.org Subject: mechanism based on OpenPGP? Message-ID: <20000115134719.A78914@wiz.Sendmail.COM> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Is there a SASL mechanism that is based on public key cryptography? Something like OpenPGP for example? I would like to see such a mechanism due to the "web of trust" that is simple in PGP but difficult in X.509 based certs. Since it seems a bit expensive for "end users" to get a cert from a big CA, it might be useful to have an alternative to TLS, which only (?) allows for a hierarchical structure. I know users could "just" use PGP in their MUAs, but having encryption in an MTA might solve some interoperability issues, esp. if an MTA like sendmail would support such a mechanism (including the security layer, not just authentication). From owner-ietf-sasl Sat Jan 15 14:14:35 2000 Received: by ns.secondary.com (8.9.3/8.9.3) id OAA09175 for ietf-sasl-bks; Sat, 15 Jan 2000 14:14:35 -0800 (PST) Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id OAA09170 for ; Sat, 15 Jan 2000 14:14:33 -0800 (PST) Received: (from gshapiro@localhost) by horsey.gshapiro.net (8.10.0.Beta11/8.10.0.Beta11) id e0FMFEE70409; Sat, 15 Jan 2000 14:15:14 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <14464.61810.580366.785815@horsey.gshapiro.net> Date: Sat, 15 Jan 2000 14:15:14 -0800 (PST) From: Gregory Neil Shapiro To: Claus Assmann Cc: ietf-sasl@imc.org Subject: Re: mechanism based on OpenPGP? In-Reply-To: <20000115134719.A78914@wiz.Sendmail.COM> References: <20000115134719.A78914@wiz.Sendmail.COM> X-Mailer: VM 6.75 under 21.2 (beta26) "Millenium" XEmacs Lucid Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: ca+sasl> Is there a SASL mechanism that is based on public key cryptography? I don't know if this is exactly what you are looking for.. http://search.ietf.org/internet-drafts/draft-ietf-tls-openpgp-00.txt Extensions to TLS for OpenPGP keys Abstract This document builds upon the TLS Protocol Specification [TLS]. The extensions described herein are intended to apply to Version 1.0 of the TLS specification. The purpose of this document is to update the TLS protocol with extensions to support the certificates, public key algorithms, symmetric ciphers, hash algorithms, and trust model used by OpenPGP [OpenPGP]. From owner-ietf-sasl Sun Jan 16 00:21:44 2000 Received: by ns.secondary.com (8.9.3/8.9.3) id AAA01172 for ietf-sasl-bks; Sun, 16 Jan 2000 00:21:44 -0800 (PST) Received: from demo.esys.ca (demo.esys.ca [207.167.22.130]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id AAA01168 for ; Sun, 16 Jan 2000 00:21:43 -0800 (PST) Received: from messagingdirect.com (2-091-edm.dial.worldgate.ca [207.167.2.91]) by demo.esys.ca (2.0.4/SMS 2.0.4-beta-5) with ESMTP id BAA32390; Sun, 16 Jan 2000 01:22:18 -0700 Message-ID: <38817ED3.1626AA5@messagingdirect.com> Date: Sun, 16 Jan 2000 01:18:27 -0700 From: Alexey Melnikov X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: Claus Assmann CC: ietf-sasl@imc.org Subject: Re: mechanism based on OpenPGP? References: <20000115134719.A78914@wiz.Sendmail.COM> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Claus Assmann wrote: > > Is there a SASL mechanism that is based on public key cryptography? > Something like OpenPGP for example? I would like to see such a > mechanism due to the "web of trust" that is simple in PGP but > difficult in X.509 based certs. Since it seems a bit expensive for > "end users" to get a cert from a big CA, it might be useful to have > an alternative to TLS, which only (?) allows for a hierarchical > structure. I know users could "just" use PGP in their MUAs, but > having encryption in an MTA might solve some interoperability > issues, esp. if an MTA like sendmail would support such a mechanism > (including the security layer, not just authentication). No one I am aware of. All SASL mechanisms are listed at http://baikonur.demo.ru/homerus/mail/SASL_info.html Everything except SecurID should be up to date. Alexey Received: by ns.secondary.com (8.9.3/8.9.3) id AAA01172 for ietf-sasl-bks; Sun, 16 Jan 2000 00:21:44 -0800 (PST) Received: from demo.esys.ca (demo.esys.ca [207.167.22.130]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id AAA01168 for ; Sun, 16 Jan 2000 00:21:43 -0800 (PST) Received: from messagingdirect.com (2-091-edm.dial.worldgate.ca [207.167.2.91]) by demo.esys.ca (2.0.4/SMS 2.0.4-beta-5) with ESMTP id BAA32390; Sun, 16 Jan 2000 01:22:18 -0700 Message-ID: <38817ED3.1626AA5@messagingdirect.com> Date: Sun, 16 Jan 2000 01:18:27 -0700 From: Alexey Melnikov X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: Claus Assmann CC: ietf-sasl@imc.org Subject: Re: mechanism based on OpenPGP? References: <20000115134719.A78914@wiz.Sendmail.COM> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Claus Assmann wrote: > > Is there a SASL mechanism that is based on public key cryptography? > Something like OpenPGP for example? I would like to see such a > mechanism due to the "web of trust" that is simple in PGP but > difficult in X.509 based certs. Since it seems a bit expensive for > "end users" to get a cert from a big CA, it might be useful to have > an alternative to TLS, which only (?) allows for a hierarchical > structure. I know users could "just" use PGP in their MUAs, but > having encryption in an MTA might solve some interoperability > issues, esp. if an MTA like sendmail would support such a mechanism > (including the security layer, not just authentication). No one I am aware of. All SASL mechanisms are listed at http://baikonur.demo.ru/homerus/mail/SASL_info.html Everything except SecurID should be up to date. Alexey Received: by ns.secondary.com (8.9.3/8.9.3) id OAA09175 for ietf-sasl-bks; Sat, 15 Jan 2000 14:14:35 -0800 (PST) Received: from horsey.gshapiro.net (horsey.gshapiro.net [209.220.147.178]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id OAA09170 for ; Sat, 15 Jan 2000 14:14:33 -0800 (PST) Received: (from gshapiro@localhost) by horsey.gshapiro.net (8.10.0.Beta11/8.10.0.Beta11) id e0FMFEE70409; Sat, 15 Jan 2000 14:15:14 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <14464.61810.580366.785815@horsey.gshapiro.net> Date: Sat, 15 Jan 2000 14:15:14 -0800 (PST) From: Gregory Neil Shapiro To: Claus Assmann Cc: ietf-sasl@imc.org Subject: Re: mechanism based on OpenPGP? In-Reply-To: <20000115134719.A78914@wiz.Sendmail.COM> References: <20000115134719.A78914@wiz.Sendmail.COM> X-Mailer: VM 6.75 under 21.2 (beta26) "Millenium" XEmacs Lucid Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: ca+sasl> Is there a SASL mechanism that is based on public key cryptography? I don't know if this is exactly what you are looking for.. http://search.ietf.org/internet-drafts/draft-ietf-tls-openpgp-00.txt Extensions to TLS for OpenPGP keys Abstract This document builds upon the TLS Protocol Specification [TLS]. The extensions described herein are intended to apply to Version 1.0 of the TLS specification. The purpose of this document is to update the TLS protocol with extensions to support the certificates, public key algorithms, symmetric ciphers, hash algorithms, and trust model used by OpenPGP [OpenPGP]. Received: by ns.secondary.com (8.9.3/8.9.3) id NAA08823 for ietf-sasl-bks; Sat, 15 Jan 2000 13:46:39 -0800 (PST) Received: from katroo.Sendmail.COM (katroo.Sendmail.COM [209.246.26.35]) by ns.secondary.com (8.9.3/8.9.3) with ESMTP id NAA08815 for ; Sat, 15 Jan 2000 13:46:37 -0800 (PST) Received: from wiz.Sendmail.COM (wiz.Sendmail.COM [10.210.100.97]) by katroo.Sendmail.COM (8.9.3/8.9.3) with ESMTP id NAA10000 for ; Sat, 15 Jan 2000 13:47:19 -0800 (PST) Received: (from ca@localhost) by wiz.Sendmail.COM (8.10.0.Beta2/8.10.0.Beta2) id e0FLlJn78918 for ietf-sasl@imc.org; Sat, 15 Jan 2000 13:47:19 -0800 (PST) Date: Sat, 15 Jan 2000 13:47:19 -0800 From: Claus Assmann To: ietf-sasl@imc.org Subject: mechanism based on OpenPGP? Message-ID: <20000115134719.A78914@wiz.Sendmail.COM> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-ietf-sasl@imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Is there a SASL mechanism that is based on public key cryptography? Something like OpenPGP for example? I would like to see such a mechanism due to the "web of trust" that is simple in PGP but difficult in X.509 based certs. Since it seems a bit expensive for "end users" to get a cert from a big CA, it might be useful to have an alternative to TLS, which only (?) allows for a hierarchical structure. I know users could "just" use PGP in their MUAs, but having encryption in an MTA might solve some interoperability issues, esp. if an MTA like sendmail would support such a mechanism (including the security layer, not just authentication).