Re: [Cfrg] [saag] New draft: Hashed Password Exchange

Good point; let me think about it for -01.  An obvious solution is to send
the hostname with the effective password.

On Jan 4, 2012, at 5:21 01PM, Joe Touch wrote:

> Hi, Steve,
> 
> This doc doesn't appear to address the case where a host has multiple DNS names, which could make it difficult to incorporate the hostname into the transform. I.e., I could contact a mail server at an IP address that represents any of dozens of DNS names - how does the server know which one I used so it can match without exhaustively trying all its equivalent names?
> 
> Joe
> 
> On 1/4/2012 1:41 PM, Steven Bellovin wrote:
>> I'd appreciate comments on my new draft, draft-bellovin-hpw-00.txt:
>> 
>> Abstract
>> 
>>    Many systems (e.g., cryptographic protocols relying on symmetric
>>    cryptography) require that plaintext passwords be stored.  Given how
>>    often people reuse passwords on different systems, this poses a very
>>    serious risk if a single machine is compromised.  We propose a scheme
>>    to derive passwords limited to a single machine from a typed
>>    password, and explain how a protocol definition can specify this
>>    scheme.
>> 
>> 
>> 		--Steve Bellovin, https://www.cs.columbia.edu/~smb
>> 
>> 
>> 
>> 
>> 
>> _______________________________________________
>> saag mailing list
>> saag@ietf.org
>> https://www.ietf.org/mailman/listinfo/saag
> 

		--Steve Bellovin, https://www.cs.columbia.edu/~smb