IETF Logo Mail Archive

[abfab] [Sam Hartman] comments on draft-ietf-abfab-arch

Sam Hartman <hartmans-ietf@mit.edu> Wed, 04 September 2013 13:04 UTC

Return-Path: <hartmans@mit.edu>
X-Original-To: abfab@ietfa.amsl.com
Delivered-To: abfab@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9835321E80C2 for <abfab@ietfa.amsl.com>; Wed, 4 Sep 2013 06:04:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IrRpmFywwmxR for <abfab@ietfa.amsl.com>; Wed, 4 Sep 2013 06:04:20 -0700 (PDT)
Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id A145721E80B7 for <abfab@ietf.org>; Wed, 4 Sep 2013 06:04:20 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id 5025C2031B for <abfab@ietf.org>; Wed, 4 Sep 2013 09:04:17 -0400 (EDT)
Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sglL9JOGgcwb for <abfab@ietf.org>; Wed, 4 Sep 2013 09:04:17 -0400 (EDT)
Received: from carter-zimmerman.suchdamage.org (c-50-136-31-107.hsd1.ma.comcast.net [50.136.31.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS for <abfab@ietf.org>; Wed, 4 Sep 2013 09:04:17 -0400 (EDT)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 021F687FA8; Wed, 4 Sep 2013 09:04:18 -0400 (EDT)
From: Sam Hartman <hartmans-ietf@mit.edu>
To: abfab@ietf.org
Date: Wed, 04 Sep 2013 09:04:17 -0400
Message-ID: <tsl61ug7n72.fsf@mit.edu>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
Subject: [abfab] [Sam Hartman] comments on draft-ietf-abfab-arch
X-BeenThere: abfab@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Application Bridging, Federated Authentication Beyond \(the web\)" <abfab.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/abfab>, <mailto:abfab-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/abfab>
List-Post: <mailto:abfab@ietf.org>
List-Help: <mailto:abfab-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/abfab>, <mailto:abfab-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Sep 2013 13:04:26 -0000

Sent from wrong address.
--- Begin Message --- 
My apologies for not getting these out in last call.
One of these (the re-authentication section comment) is serious enough
that I believe it needs to be resolved prior to sending the document on.


Section 1.1.1

old: Typically when considering channel binding

new:

Typicially when considering both EAP and GSS-API channel binding

Later in the white board example
channel binding should be GSS-API channel binding


Section 2.3.3

This is unlikely to survive IETF last call unchallenged.


Section 3.4

old: shared private key
new: shared session key

Section 2.2.2 refers to sectian 6.1 for a description of GSS-API channel
binding; that seems wrong
--- End Message ---

v2.23.0 | Report a Bug | By Email