draft-austein-dnsext-relax-gratuitous-tsig-00.txt
Rob Austein <sra@isc.org> Wed, 21 June 2006 16:50 UTC
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Ft5uQ-00007a-IS for dnsext-archive@lists.ietf.org; Wed, 21 Jun 2006 12:50:30 -0400
Received: from psg.com ([147.28.0.62]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Ft5np-0000oT-HJ for dnsext-archive@lists.ietf.org; Wed, 21 Jun 2006 12:43:42 -0400
Received: from majordom by psg.com with local (Exim 4.60 (FreeBSD)) (envelope-from <owner-namedroppers@ops.ietf.org>) id 1Ft5hk-000PPS-IV for namedroppers-data@psg.com; Wed, 21 Jun 2006 16:37:24 +0000
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on psg.com
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.1.1
Received: from [66.92.66.68] (helo=cyteen.hactrn.net) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.60 (FreeBSD)) (envelope-from <sra@hactrn.net>) id 1Ft5hj-000PP6-Ru for namedroppers@ops.ietf.org; Wed, 21 Jun 2006 16:37:24 +0000
Received: from thrintun.hactrn.net (thrintun.hactrn.net [IPv6:2002:425c:4242:0:250:daff:fe82:1c39]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "thrintun.hactrn.net", Issuer "Grunchweather Associates" (verified OK)) by cyteen.hactrn.net (Postfix) with ESMTP id 30939BC for <namedroppers@ops.ietf.org>; Wed, 21 Jun 2006 12:37:22 -0400 (EDT)
Received: from thrintun.hactrn.net (localhost [IPv6:::1]) by thrintun.hactrn.net (Postfix) with ESMTP id 7C8045C1D for <namedroppers@ops.ietf.org>; Wed, 21 Jun 2006 12:37:21 -0400 (EDT)
Date: Wed, 21 Jun 2006 12:37:21 -0400
From: Rob Austein <sra@isc.org>
To: IETF DNSEXT WG <namedroppers@ops.ietf.org>
Subject: draft-austein-dnsext-relax-gratuitous-tsig-00.txt
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-Id: <20060621163721.7C8045C1D@thrintun.hactrn.net>
Sender: owner-namedroppers@ops.ietf.org
Precedence: bulk
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 79899194edc4f33a41f49410777972f8
draft-austein-dnsext-relax-gratuitous-tsig-00.txt, available from a fine Internet-Draft repository near you. In brief: GSS-TSIG is underspecified in a way that makes it difficult to interoperate without violating the spec. As the piece that's underspecified is also, as far as we can tell, both useless and annoying, the easiest fix would be to remove the underspecified piece, thus making a hideously complex mechanism a trifle simpler in the bargain. This is something the WG will have to address sooner or later as part of moving GSS-TSIG to Draft Standard; we're writing about it now because my co-author and I have some relevant recent experience. I've requested a few minutes on the agenda in Montréal. -- to unsubscribe send a message to namedroppers-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://ops.ietf.org/lists/namedroppers/>