Re: [HOKEY] Last Call: draft-ietf-hokey-reauth-ps

Alan DeKok <aland@deployingradius.com> Tue, 19 February 2008 07:21 UTC

Return-Path: <hokey-bounces@ietf.org>
X-Original-To: ietfarch-hokey-archive@core3.amsl.com
Delivered-To: ietfarch-hokey-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 640603A6D9A; Mon, 18 Feb 2008 23:21:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.179
X-Spam-Level:
X-Spam-Status: No, score=-1.179 tagged_above=-999 required=5 tests=[AWL=-0.742, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uB2w1gdXIck3; Mon, 18 Feb 2008 23:21:07 -0800 (PST)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 931BE3A6D7C; Mon, 18 Feb 2008 23:21:07 -0800 (PST)
X-Original-To: hokey@core3.amsl.com
Delivered-To: hokey@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ADCFE3A6A29 for <hokey@core3.amsl.com>; Mon, 18 Feb 2008 23:21:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P0k-s-72XWYT for <hokey@core3.amsl.com>; Mon, 18 Feb 2008 23:21:05 -0800 (PST)
Received: from deployingradius.com (www.deployingradius.com [216.240.42.17]) by core3.amsl.com (Postfix) with ESMTP id E75603A6A2F for <hokey@ietf.org>; Mon, 18 Feb 2008 23:21:04 -0800 (PST)
Received: from [192.168.0.14] (pas38-1-82-67-71-238.fbx.proxad.net [82.67.71.238]) by deployingradius.com (Postfix) with ESMTP id DEBE3A704E; Mon, 18 Feb 2008 23:20:54 -0800 (PST)
Message-ID: <47BA82AD.2070505@deployingradius.com>
Date: Tue, 19 Feb 2008 08:18:05 +0100
From: Alan DeKok <aland@deployingradius.com>
User-Agent: Thunderbird 2.0.0.6 (X11/20071022)
MIME-Version: 1.0
To: Charles Clancy <clancy@cs.umd.edu>
References: <479F4056.2070000@deployingradius.com> <47AF73F5.40306@cs.umd.edu> <47AFFD2A.5030209@deployingradius.com> <A3DA4C2546E1614D8ACC896746CDCF29B94625@aruba-mx1.arubanetworks.com> <47B04D4F.3090807@deployingradius.com> <A3DA4C2546E1614D8ACC896746CDCF29B94634@aruba-mx1.arubanetworks.com> <47B058C4.5030007@deployingradius.com> <A3DA4C2546E1614D8ACC896746CDCF29B94856@aruba-mx1.arubanetworks.com> <47B13CEF.5060802@deployingradius.com> <A3DA4C2546E1614D8ACC896746CDCF29B948E7@aruba-mx1.arubanetworks.com> <47B19316.9000602@deployingradius.com> <47BA414C.9000009@cs.umd.edu>
In-Reply-To: <47BA414C.9000009@cs.umd.edu>
X-Enigmail-Version: 0.95.0
Cc: hokey@ietf.org
Subject: Re: [HOKEY] Last Call: draft-ietf-hokey-reauth-ps
X-BeenThere: hokey@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: HOKEY WG Mailing List <hokey.ietf.org>
List-Unsubscribe: <http://www.ietf.org/mailman/listinfo/hokey>, <mailto:hokey-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/hokey>
List-Post: <mailto:hokey@ietf.org>
List-Help: <mailto:hokey-request@ietf.org?subject=help>
List-Subscribe: <http://www.ietf.org/mailman/listinfo/hokey>, <mailto:hokey-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: hokey-bounces@ietf.org
Errors-To: hokey-bounces@ietf.org

Charles Clancy wrote:
> It was decided to split up the documentation into the "problem" and the
> "solution".  The PS document described the reauth problem and gave
> design goals for a fast reauth protocol.  It motivates WHY we need fast
> reauth, but not HOW to implement it (other than high-level design
> goals).  The "solutions" documents then provided protocols that met
> those design goals, justifying their approach.

  The problem statement can contain a description of the current
architecture.  That description can refer to *existing* systems without
proposing a solution to the hokey problem.

  To put it another way, I haven't followed hokey since the beginning.
There appears to be knowledge captured on the list that isn't available
in the documents.

> Addressing AAA proxies will occur in detail in draft-ietf-hokey-key-mgm
> (text not there yet).

  Again... how do AAA proxies fit into the problem statement?  They are
first mentioned in Section 5.4.  The term "AAA proxy" is not defined in
Section 2, and there is no reference in that section to any document
that defines the term.  The document just assumes that everyone knows
what an AAA proxy is, and how it fits into the problem statement.

  I will try to come up with suggested text to address my comments.

  Alan DeKok.
_______________________________________________
HOKEY mailing list
HOKEY@ietf.org
http://www.ietf.org/mailman/listinfo/hokey