I-D Action: draft-iab-identifier-comparison-07.txt

[[e-mail]]

A New Internet-Draft is available from the on-line Internet-Drafts directories.
 This draft is a work item of the Internet Architecture Board Working Group of the IETF.

	Title           : Issues in Identifier Comparison for Security Purposes
	Author(s)       : Dave Thaler
	Filename        : draft-iab-identifier-comparison-07.txt
	Pages           : 24
	Date            : 2012-12-17

Abstract:
   Identifiers such as hostnames, URIs, and email addresses are often
   used in security contexts to identify security principals and
   resources.  In such contexts, an identifier supplied via some
   protocol is often compared against some policy to make security
   decisions such as whether the principal may access the resource, what
   level of authentication or encryption is required, etc.  If the
   parties involved in a security decision use different algorithms to
   compare identifiers, then failure scenarios ranging from denial of
   service to elevation of privilege can result.  This document provides
   a discussion of these issues that designers should consider when
   defining identifiers and protocols, and when constructing
   architectures that use multiple protocols.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-iab-identifier-comparison

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-iab-identifier-comparison-07

A diff from the previous version is available at:
http://www.ietf.org/rfcdiff?url2=draft-iab-identifier-comparison-07


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/