Re: [Emu] [saag] Feedback on Salted EAP draft

[Kathleen Moriarty <[e-mail]>]

Hello,

Is there interest in reviewing this draft?  Sam pointed out the importance
of moving this work forward, it would be helpful to have volunteers to
review the work and also to understand the level of interest (if any)
before this goes forward as AD sponsored.

Thank you!

On Fri, Mar 27, 2015 at 1:34 PM, Sam Hartman <[e-mail]> wrote:

> >>>>> "Kathleen" == Kathleen Moriarty <[e-mail]>
> writes:
>
>     Kathleen>    I meant to send the link to Dan's draft:
>     Kathleen> https://tools.ietf.org/html/draft-harkins-salted-eap-pwd-01
>     Kathleen> Long week...
>
> I have briefly reviewed the goals behind this proposal and a sketch of
> the details but have not done a technical review of the proposal.
>
> The underlying goal is important and valuable.
> This issue is the same issue that was behind my response to your AD
> review of the oauth dynamic registration draft.
> The more we can do to make it possible to use  deployed password
> databases with more modern security, the more we will be able to employ
> that modern security.
>
> However, take careful note of section 5 of the draft.
>
> Assuming that  you can get positive technical reviews of the proposal,
> this draft seems to solve an important problem that would be valuable to
> solve in the EAP community.
>



-- 

Best regards,
Kathleen