Re: [Emu] WG adoption call for draft-arkko-eap-aka-pfs

[Jari Arkko <[e-mail]>]

Alan,

Circling back to this.

I’ll first agree with your summary about the importance of the tech, that there’s some risk but the risk is likely low but non-zero, and that in an ideal situation you wouldn’t have to deal with this.

However, I would like to point out that

* The draft is an *optional* extension to something bigger, and no one is forced to implement it.

* Regardless of that, even the base RFC had a similar IPR associated with it back in ‘09, so any discussion about an extension’s properties should be set in that context. A problem in the extension cannot be bigger than a problem in what the extension builds on, no? Not to mention the context of say, 5G phones.

Neither me or you can change that context or even the situation with the base. Perhaps the world should operate on other kinds of rules, but what we have here is a tool that could have a real impact on billions of users’ security, and I think we could make it do that. But we need a standard. Can we have that?

Jari