From secmech-bounces@lists.ietf.org Mon Oct 03 12:02:39 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EMSlz-0005cY-TJ; Mon, 03 Oct 2005 12:02:39 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EMSlx-0005by-Tr; Mon, 03 Oct 2005 12:02:37 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id MAA14866; Mon, 3 Oct 2005 12:02:35 -0400 (EDT) Received: from p130.piuha.net ([193.234.218.130]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EMSuS-000497-Gg; Mon, 03 Oct 2005 12:11:25 -0400 Received: from [127.0.0.1] (p130.piuha.net [193.234.218.130]) by p130.piuha.net (Postfix) with ESMTP id 67AC089870; Mon, 3 Oct 2005 19:02:27 +0300 (EEST) Message-ID: <4341561F.4090201@piuha.net> Date: Mon, 03 Oct 2005 19:02:39 +0300 From: Jari Arkko User-Agent: Mozilla Thunderbird 1.0 (X11/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Sam Hartman Subject: Re: [SECMECH] Second secmech bof References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Scan-Signature: df9edf1223802dd4cf213867a3af6121 Content-Transfer-Encoding: 7bit Cc: secmech@ietf.org, iesg@ietf.org X-BeenThere: secmech@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Security mechanisms BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: secmech-bounces@lists.ietf.org Errors-To: secmech-bounces@lists.ietf.org This is the planned second BoF agenda. EAP METHODS UPDATE (EMU) BOF CHAIRS: Jari Arkko (jari.arkko@piuha.net) Joe Salowey (jsalowey@cisco.com) MAILING LIST: (Being set up.) DESCRIPTION: The Extensible Authentication Protocol (EAP), defined in RFC 3748 is a network access authentication framework used in the PPP, 802.11, 802.16, VPN, PANA, and in some functions in 3G networks. EAP itself is a simple protocol and actual authentication happens in so called EAP methods. Over 40 different EAP methods exists. This includes many undocumented and proprietary methods. Only a few methods are documented in RFCs, and out of these, methods listed in the original EAP RFC are no longer applicable in today's environments. For instance, none of the EAP methods that are applicable in a wireless environment are in Standards Track RFCs. This poses a problem for, among other things, the selection of a mandatory to implement EAP method in new network access technologies. Some methods have been defined in Internet Drafts, many of which have expired or have not been updated to reflect the true behavior in the protocols. The lack of documented, open specifications is a deployment and interoperability problem. In addition, new requirements such as those posed by wireless environments are creating needs that are currently not well matched by existing methods. For instance, RFC 4017 documents IEEE 802.11 requirements for EAP methods. Currently, there are only a few EAP methods that satisfy the mandatory requirements listed in this document, and there are no methods that satisfy all requirements. Some proposals for such methods exist, however. Finally, there are authentication mechanism types that are not supported by existing RFCs. For instance, there is no widely applicable method that would be able to authenticate using shared secrets in a wireless environment. The purpose of this BoF is to continue the work started in the EAP WG and in the SECMECH BOF, in a manner focused on few key EAP method needs. One immediate goals is to bring existing widely deployed EAP methods such as EAP-TLS (RFC 2716) to Proposed Standards with clarifications learned during deployment. Another goal is to standardize additional mechanism to match the current requirements. The BoF should have an organized discussion of what specific needs the community sees as worthwhile pursuing, and to discuss the specific technical solutions. The potential work items of the group include 1. Revision of EAP-TLS, to be placed on the standards track. The primary goal of this would be to bring the specification up to date, clarify unclear issues, etc. A standards track specification would also enable the consideration of EAP-TLS as a mandatory requirement in other Proposed Standard specifications. Note that there are limitations in current implementations which may need to be considered during this update. Similarly, the existing EAP-TLS specification may not accommodate all types of extensions in a backwards compatible manner. For instance, there may be issues in adding channel binding support or the use of new TLS mechanisms such as TLS PSK when run against RFC 2716 compliant devices. These issues shall be investigated and clarified; the revised EAP-TLS must be backwards compatible with existing deployment. 2. Shared Secret - a pre-shared secret method. This is likely to be widely deployed if available, and another likely candidate to be referred to by other Proposed Standard specifications. Desired by IEEE 802.11. 3. Password based - essentially a shared secret mechanism that provides resistance to dictionary attacks. It should support various backend databases of password that use different storage techniques and perhaps support for one time tokens as well. Could use something related to EKE or a tunneling approach. Desired by IEEE 802.11, and would likely be widely deployed if available. 4. One time passwords - a secure one-time password -based mechanism that can provide keying material. 5. Tunneling - a tunneling method is useful to protect weaker authentication mechanisms. Tunneling methods are also used to exchange other types of authentication data. 6. Channel binding support - it has been suggested that new methods should have an ability to authenticate identifiers claimed by NASes. But it has also been suggested that backwards compatible extensions to do this in a few commonly used current methods should be developed for security reasons. Similarly, for the ability to retain EAP method and media indepedence, it may be necessary to have coordinated approach or even binding data formats between different methods. 7. Enrollment mechanisms - methods to automatically enroll clients in wireless environments. However, this list should not be taken as a proposal but rather as a template that can be used to determine community consensus on which of the items are worthwhile. It is certainly impossible to take on ALL of the above tasks, so a set of 3-4 priority tasks needs to be determined. There may also be IPR, complexity, or existing deployment concerns that make it undesirable to take on work for a specific item. Although the GUAM work is not a subject of the current BOF, the group's charter may later be extended to cover GUAM work discussed in the SECMECH BOF in IETF-63. This requires an explicit rechartering, however. The creation of this group does not affect existing procedures for IANA allocation of EAP method type numbers, or the publication of individual submissions documenting EAP methods as RFCs. AGENDA: o Background and relation to past SECMECH BOF and EAP WG work (Sam Hartman, 5 min) o EAP methods market situation (chairs, 5 min) o EAP methods technical requirements (tbd, 10 min) o Security AD's requirements for new methods (Russ Housley, 10 min) o EAP methods, SDO requirements (Aboba, 10 min) o EAP TLS issues and limitations (Aboba, 15 min) o Shared secret methods (tbd, 15 min) o Overview of other proposed methods (Eronen, 15 min) o Channel binding approaches (Eronen, 15 min) o Proposed charter (chairs, 15 min) o Discussion (40 min) READING LIST: RFC 3748. Extensible Authentication Protocol (EAP). B. Aboba, L. Blunk, J. Vollbrecht, J. Carlson, H. Levkowetz, Ed.. June 2004. RFC 2716, PPP EAP TLS Authentication Protocol. B. Aboba, D. Simon. October 1999. RFC 4017. Extensible Authentication Protocol (EAP) Method Requirements for Wireless LANs. D. Stanley, J. Walker, B. Aboba. March 2005. "EAP IKEv2 Method (EAP-IKEv2)", Hannes Tschofenig, 20-Jul-05, "The EAP-PSK Protocol: a Pre-Shared Key EAP Method", Hannes Tschofenig, Florent Bersani, 10-Aug-05, "EAP Flexible Authentication via Secure Tunneling (EAP-FAST)", Joseph Salowey, 25-Apr-05, "EAP Password Authenticated Exchange", Charles Clancy, William Arbaugh, 6-Jun-05, "The EAP-SKL protocol", Thomas Otto, 1-Aug-05, "The Protected One-Time Password Protocol (EAP-POTP)", Magnus Nystrom, 5-Jul-05, "Dynamic Provisioning using EAP-FAST", Nancy Cam-Winget, 19-Jul-05, "Authenticated Service Information for the Extensible Authentication Protocol (EAP)", Jari Arkko, Pasi Eronen, 20-Jul-05, "An Extensible Authentication Protocol (EAP) Enrollment Method", Rohan Mahy, 13-Jul-05, "AAA-Key Derivation with Lower-Layer Parameter Binding", Mayumi Yanagiya, Yoshihiro Ohba, 1-Jul-05, _______________________________________________ SECMECH mailing list SECMECH@lists.ietf.org https://www1.ietf.org/mailman/listinfo/secmech From secmech-bounces@lists.ietf.org Sat Oct 08 00:18:16 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EO683-0004u6-8K; Sat, 08 Oct 2005 00:16:11 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EO681-0004ti-1J for secmech@megatron.ietf.org; Sat, 08 Oct 2005 00:16:09 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA16133 for ; Sat, 8 Oct 2005 00:16:05 -0400 (EDT) Received: from p130.piuha.net ([193.234.218.130]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EO6HQ-00026l-0U for secmech@ietf.org; Sat, 08 Oct 2005 00:25:53 -0400 Received: from [127.0.0.1] (p130.piuha.net [193.234.218.130]) by p130.piuha.net (Postfix) with ESMTP id BE65D89870 for ; Sat, 8 Oct 2005 07:15:42 +0300 (EEST) Message-ID: <434747FA.8020702@piuha.net> Date: Sat, 08 Oct 2005 07:15:54 +0300 From: Jari Arkko User-Agent: Mozilla Thunderbird 1.0 (X11/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: secmech@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Scan-Signature: cf4fa59384e76e63313391b70cd0dd25 Content-Transfer-Encoding: 7bit Cc: Subject: [SECMECH] EMU BOF meeting slot in Vancouver X-BeenThere: secmech@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Security mechanisms BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: secmech-bounces@lists.ietf.org Errors-To: secmech-bounces@lists.ietf.org This is the currently assigned meeting slot (subject to change): THURSDAY, November 10, 2005 0900-1130 Morning Session I APP iee Internationalized Email and Extensions BOF GEN techspec Requirements for IETF Technical Specification Publication BOF INT mip6 Mobility for IPv6 WG IRTF rrg Routing Research Group RTG pce Path Computation Element WG SEC emu EAP Method Update BOF TSV tcpm TCP Maintenance and Minor Extensions WG TSV voipeer VoIP Peering and Interconnect BOF _______________________________________________ SECMECH mailing list SECMECH@lists.ietf.org https://www1.ietf.org/mailman/listinfo/secmech From secmech-bounces@lists.ietf.org Fri Oct 21 01:27:13 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESpQu-0004B9-ST; Fri, 21 Oct 2005 01:27:12 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESpQr-00043p-5x for secmech@megatron.ietf.org; Fri, 21 Oct 2005 01:27:09 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA27725 for ; Fri, 21 Oct 2005 01:26:59 -0400 (EDT) Received: from p130.piuha.net ([193.234.218.130]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ESpcv-0001N6-RQ for secmech@ietf.org; Fri, 21 Oct 2005 01:39:38 -0400 Received: from [127.0.0.1] (p130.piuha.net [193.234.218.130]) by p130.piuha.net (Postfix) with ESMTP id 101D689848 for ; Fri, 21 Oct 2005 08:26:54 +0300 (EEST) Message-ID: <43587C2A.9030008@piuha.net> Date: Fri, 21 Oct 2005 08:27:06 +0300 From: Jari Arkko User-Agent: Mozilla Thunderbird 1.0 (X11/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: secmech@ietf.org Content-Type: multipart/mixed; boundary="------------000908010909070203080006" X-Spam-Score: 0.1 (/) X-Scan-Signature: 225414c974e0d6437992164e91287a51 Cc: Subject: [SECMECH] [Fwd: I-D ACTION:draft-clancy-eap-pax-05.txt] X-BeenThere: secmech@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Security mechanisms BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: secmech-bounces@lists.ietf.org Errors-To: secmech-bounces@lists.ietf.org This is a multi-part message in MIME format. --------------000908010909070203080006 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit --------------000908010909070203080006 Content-Type: message/rfc822; name="I-D ACTION:draft-clancy-eap-pax-05.txt" Content-Disposition: inline; filename="I-D ACTION:draft-clancy-eap-pax-05.txt" X-Account-Key: account4 Return-Path: Received: from murder ([unix socket]) by p130.piuha.net (Cyrus v2.2.12) with LMTPA; Fri, 21 Oct 2005 01:54:10 +0300 X-Sieve: CMU Sieve 2.2 Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by p130.piuha.net (Postfix) with ESMTP id 7B89F89848 for ; Fri, 21 Oct 2005 01:54:02 +0300 (EEST) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESjEy-0006Jq-5f; Thu, 20 Oct 2005 18:50:28 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESjEa-0006AI-P5 for i-d-announce@megatron.ietf.org; Thu, 20 Oct 2005 18:50:04 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA20176 for ; Thu, 20 Oct 2005 18:49:55 -0400 (EDT) Received: from [132.151.6.50] (helo=newodin.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ESjQa-0004eV-7A for i-d-announce@ietf.org; Thu, 20 Oct 2005 19:02:29 -0400 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1ESjEX-000665-NU for i-d-announce@ietf.org; Thu, 20 Oct 2005 18:50:01 -0400 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org From: Internet-Drafts@ietf.org Message-Id: Date: Thu, 20 Oct 2005 18:50:01 -0400 X-Spam-Score: 0.4 (/) X-Scan-Signature: c3a18ef96977fc9bcc21a621cbf1174b Subject: I-D ACTION:draft-clancy-eap-pax-05.txt X-BeenThere: i-d-announce@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: internet-drafts@ietf.org List-Id: i-d-announce.ietf.org List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: i-d-announce-bounces@ietf.org Errors-To: i-d-announce-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : EAP Password Authenticated Exchange Author(s) : C. Clancy, W. Arbaugh Filename : draft-clancy-eap-pax-05.txt Pages : 27 Date : 2005-10-20 This Internet Draft defines a provably secure Extensible Authentication Protocol method called EAP-PAX. This method is a lightweight shared-key authentication protocol with optional support for provisioning, key management, identity protection, and authenticated data exchange. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-clancy-eap-pax-05.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-clancy-eap-pax-05.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-clancy-eap-pax-05.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-10-20171548.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-clancy-eap-pax-05.txt --OtherAccess Content-Type: Message/External-body; name="draft-clancy-eap-pax-05.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-10-20171548.I-D@ietf.org> --OtherAccess-- --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Content-Transfer-Encoding: 7bit _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www1.ietf.org/mailman/listinfo/i-d-announce --NextPart-- --------------000908010909070203080006 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ SECMECH mailing list SECMECH@lists.ietf.org https://www1.ietf.org/mailman/listinfo/secmech --------------000908010909070203080006-- From secmech-bounces@lists.ietf.org Fri Oct 21 01:27:20 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESpR2-0004Ld-8Z; Fri, 21 Oct 2005 01:27:20 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESpQz-0004Ke-OZ for secmech@megatron.ietf.org; Fri, 21 Oct 2005 01:27:17 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA27728 for ; Fri, 21 Oct 2005 01:27:07 -0400 (EDT) Received: from p130.piuha.net ([193.234.218.130]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ESpd4-0001NL-JY for secmech@ietf.org; Fri, 21 Oct 2005 01:39:47 -0400 Received: from [127.0.0.1] (p130.piuha.net [193.234.218.130]) by p130.piuha.net (Postfix) with ESMTP id B7DBE89884 for ; Fri, 21 Oct 2005 08:27:07 +0300 (EEST) Message-ID: <43587C38.1060606@piuha.net> Date: Fri, 21 Oct 2005 08:27:20 +0300 From: Jari Arkko User-Agent: Mozilla Thunderbird 1.0 (X11/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: secmech@ietf.org Content-Type: multipart/mixed; boundary="------------070608000103070805040006" X-Spam-Score: 0.1 (/) X-Scan-Signature: 6ba8aaf827dcb437101951262f69b3de Cc: Subject: [SECMECH] [Fwd: I-D ACTION:draft-urien-eap-smartcard-09.txt] X-BeenThere: secmech@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Security mechanisms BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: secmech-bounces@lists.ietf.org Errors-To: secmech-bounces@lists.ietf.org This is a multi-part message in MIME format. --------------070608000103070805040006 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit --------------070608000103070805040006 Content-Type: message/rfc822; name="I-D ACTION:draft-urien-eap-smartcard-09.txt" Content-Disposition: inline; filename="I-D ACTION:draft-urien-eap-smartcard-09.txt" X-Account-Key: account4 Return-Path: Received: from murder ([unix socket]) by p130.piuha.net (Cyrus v2.2.12) with LMTPA; Thu, 20 Oct 2005 23:28:19 +0300 X-Sieve: CMU Sieve 2.2 Received: from megatron.ietf.org (megatron.ietf.org [132.151.6.71]) by p130.piuha.net (Postfix) with ESMTP id 77A9289848 for ; Thu, 20 Oct 2005 23:27:52 +0300 (EEST) Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESgUA-0002nz-70; Thu, 20 Oct 2005 15:53:58 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESgQc-0001HF-Tt for i-d-announce@megatron.ietf.org; Thu, 20 Oct 2005 15:50:18 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id PAA10087 for ; Thu, 20 Oct 2005 15:50:08 -0400 (EDT) Received: from [132.151.6.50] (helo=newodin.ietf.org) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ESgcQ-0006TY-IZ for i-d-announce@ietf.org; Thu, 20 Oct 2005 16:02:33 -0400 Received: from mlee by newodin.ietf.org with local (Exim 4.43) id 1ESgQM-0000vm-IH for i-d-announce@ietf.org; Thu, 20 Oct 2005 15:50:02 -0400 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org From: Internet-Drafts@ietf.org Message-Id: Date: Thu, 20 Oct 2005 15:50:02 -0400 X-Spam-Score: 0.4 (/) X-Scan-Signature: 31247fb3be228bb596db9127becad0bc Subject: I-D ACTION:draft-urien-eap-smartcard-09.txt X-BeenThere: i-d-announce@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: internet-drafts@ietf.org List-Id: i-d-announce.ietf.org List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: i-d-announce-bounces@ietf.org Errors-To: i-d-announce-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : EAP-Support in Smartcard Author(s) : P. Urien, et al. Filename : draft-urien-eap-smartcard-09.txt Pages : 57 Date : 2005-10-20 This document describes the interface to the EAP protocol in smartcards, which may store multiple identities associated to EAP methods and appropriate credentials. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-urien-eap-smartcard-09.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-urien-eap-smartcard-09.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-urien-eap-smartcard-09.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2005-10-20123321.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-urien-eap-smartcard-09.txt --OtherAccess Content-Type: Message/External-body; name="draft-urien-eap-smartcard-09.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2005-10-20123321.I-D@ietf.org> --OtherAccess-- --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline Content-Transfer-Encoding: 7bit _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www1.ietf.org/mailman/listinfo/i-d-announce --NextPart-- --------------070608000103070805040006 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ SECMECH mailing list SECMECH@lists.ietf.org https://www1.ietf.org/mailman/listinfo/secmech --------------070608000103070805040006-- From secmech-bounces@lists.ietf.org Fri Oct 21 11:22:34 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESyj4-0000fK-E2; Fri, 21 Oct 2005 11:22:34 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1ESyj3-0000f5-KN for secmech@megatron.ietf.org; Fri, 21 Oct 2005 11:22:33 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA05501 for ; Fri, 21 Oct 2005 11:22:21 -0400 (EDT) Received: from p130.piuha.net ([193.234.218.130]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1ESyvA-0007nN-N9 for secmech@ietf.org; Fri, 21 Oct 2005 11:35:07 -0400 Received: from [127.0.0.1] (p130.piuha.net [193.234.218.130]) by p130.piuha.net (Postfix) with ESMTP id BC86B89884 for ; Fri, 21 Oct 2005 18:22:13 +0300 (EEST) Message-ID: <435907B2.3080400@piuha.net> Date: Fri, 21 Oct 2005 18:22:26 +0300 From: Jari Arkko User-Agent: Mozilla Thunderbird 1.0 (X11/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: secmech@ietf.org References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Scan-Signature: d8ae4fd88fcaf47c1a71c804d04f413d Content-Transfer-Encoding: 7bit Cc: Subject: [SECMECH] FW: I-D ACTION:draft-badra-eap-double-tls-04.txt X-BeenThere: secmech@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Security mechanisms BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: secmech-bounces@lists.ietf.org Errors-To: secmech-bounces@lists.ietf.org Internet-Drafts@ietf.org wrote: >A New Internet-Draft is available from the on-line Internet-Drafts directories. > > > Title : EAP-Double-TLS Authentication Protocol > Author(s) : M. Badra, P. Urien > Filename : draft-badra-eap-double-tls-04.txt > Pages : 24 > Date : 2005-10-21 > >EAP-Double-TLS is an EAP protocol that extends EAP-TLS. In EAP-TLS, > a full TLS handshake is used to mutually authenticate a peer and > server and to share a secret key. EAP-Double-TLS extends this > authentication negotiation by establishing a secure connection based > on the use of Pre Shared Keys (PSK). The secure connection may then > be used to allow the server and the peer to securely exchange their > identity and to update security attributes for next sessions. > > EAP-Double-TLS allows the peer and the server to establish keying > material for use in the data connection between the peer and the > authenticator. The keying material is established implicitly between > peer and server based on the TLS Pre-Shared-Key handshake. > >A URL for this Internet-Draft is: >http://www.ietf.org/internet-drafts/draft-badra-eap-double-tls-04.txt > >To remove yourself from the I-D Announcement list, send a message to >i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. >You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce >to change your subscription settings. > > >Internet-Drafts are also available by anonymous FTP. Login with the username >"anonymous" and a password of your e-mail address. After logging in, >type "cd internet-drafts" and then > "get draft-badra-eap-double-tls-04.txt". > >A list of Internet-Drafts directories can be found in >http://www.ietf.org/shadow.html >or ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > >Internet-Drafts can also be obtained by e-mail. > >Send a message to: > mailserv@ietf.org. >In the body type: > "FILE /internet-drafts/draft-badra-eap-double-tls-04.txt". > >NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > >Below is the data which will enable a MIME compliant mail reader >implementation to automatically retrieve the ASCII version of the >Internet-Draft. > > >------------------------------------------------------------------------ > >_______________________________________________ >I-D-Announce mailing list >I-D-Announce@ietf.org >https://www1.ietf.org/mailman/listinfo/i-d-announce > > _______________________________________________ SECMECH mailing list SECMECH@lists.ietf.org https://www1.ietf.org/mailman/listinfo/secmech From secmech-bounces@lists.ietf.org Tue Oct 25 01:06:42 2005 Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EUH1G-0002eS-1f; Tue, 25 Oct 2005 01:06:42 -0400 Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1EUH1E-0002eN-La for secmech@megatron.ietf.org; Tue, 25 Oct 2005 01:06:40 -0400 Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id BAA20168 for ; Tue, 25 Oct 2005 01:06:27 -0400 (EDT) Received: from p130.piuha.net ([193.234.218.130]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1EUHE5-0005pa-0y for secmech@ietf.org; Tue, 25 Oct 2005 01:20:00 -0400 Received: from [127.0.0.1] (p130.piuha.net [193.234.218.130]) by p130.piuha.net (Postfix) with ESMTP id 5AD5289848 for ; Tue, 25 Oct 2005 08:06:23 +0300 (EEST) Message-ID: <435DBD5B.4060609@piuha.net> Date: Tue, 25 Oct 2005 08:06:35 +0300 From: Jari Arkko User-Agent: Mozilla Thunderbird 1.0 (X11/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: secmech@ietf.org References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Score: 0.0 (/) X-Scan-Signature: d0bdc596f8dd1c226c458f0b4df27a88 Content-Transfer-Encoding: 7bit Cc: Subject: [SECMECH] FW: I-D ACTION:draft-cam-winget-eap-fast-03.txt X-BeenThere: secmech@lists.ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Security mechanisms BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: secmech-bounces@lists.ietf.org Errors-To: secmech-bounces@lists.ietf.org Internet-Drafts@ietf.org wrote: >A New Internet-Draft is available from the on-line Internet-Drafts directories. > > > Title : The Flexible Authentication via Secure > Tunneling Extensible Authentication Protocol > Method (EAP-FAST) > Author(s) : J. Salowey, et al. > Filename : draft-cam-winget-eap-fast-03.txt > Pages : 63 > Date : 2005-10-24 > >This document defines the Extensible Authentication Protocol (EAP) > based Flexible Authentication via Secure Tunneling (EAP-FAST) > protocol. EAP-FAST is an EAP method that enables secure > communication between a peer and a server by using the Transport > Layer Security (TLS) to establish a mutually authenticated tunnel. > Within the tunnel, Type-Length-Value (TLV) objects are used to convey > authentication related data between the peer and the EAP server. > >A URL for this Internet-Draft is: >http://www.ietf.org/internet-drafts/draft-cam-winget-eap-fast-03.txt > >To remove yourself from the I-D Announcement list, send a message to >i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. >You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce >to change your subscription settings. > > >Internet-Drafts are also available by anonymous FTP. Login with the username >"anonymous" and a password of your e-mail address. After logging in, >type "cd internet-drafts" and then > "get draft-cam-winget-eap-fast-03.txt". > >A list of Internet-Drafts directories can be found in >http://www.ietf.org/shadow.html >or ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > >Internet-Drafts can also be obtained by e-mail. > >Send a message to: > mailserv@ietf.org. >In the body type: > "FILE /internet-drafts/draft-cam-winget-eap-fast-03.txt". > >NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > >Below is the data which will enable a MIME compliant mail reader >implementation to automatically retrieve the ASCII version of the >Internet-Draft. > > >------------------------------------------------------------------------ > >_______________________________________________ >I-D-Announce mailing list >I-D-Announce@ietf.org >https://www1.ietf.org/mailman/listinfo/i-d-announce > > _______________________________________________ SECMECH mailing list SECMECH@lists.ietf.org https://www1.ietf.org/mailman/listinfo/secmech