From: Ralf Weber <rw@colt.net>
To: ietf@ietf.org
In-Reply-To: <20090211131613.GE29220@mini-me.lan>
Subject: Re: draft-housley-tls-authz-extns-07.txt to Proposed Standard
References: <73E1DD05-C75B-47F5-92C5-21780818C0F7@colt.net>
 <20090211131613.GE29220@mini-me.lan>
Message-Id: <1F36D2E0-49C1-4237-AF34-38C9C4CFAE0C@colt.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Wed, 11 Feb 2009 16:14:16 +0100
Cc: Theodore Tso <tytso@mit.edu>
Precedence: list

Moin!

On 11.02.2009, at 14:16, Theodore Tso wrote:
> No, actually.  Point 3 is very tightly constrained to certain types of
> Agreements, where Agreements is defined in point 2.  Point 4 is about
> countersigning authorizations, presumably with the intention of
> forwawrding them to a 3rd party.  There is plenty of prior art for
> point 4 all by itself (Kerberos V5, for one, and it was certainly not
> the first system to do that).
So your statement is that the patent claim is invalid, because of =20
prior art? If so we are not 100% sure unless someone questions the =20
patent claim in court - Volunteers ;-).

> There are plenty of ways in which authorization data could be passed
> via TLS that would clearly not violate RedPhone Security's claimed
> patent claims.  There is over 30 years of prior art involving
> cryptographically sealed authorization data that could be passed via
> this protocol extension.
I think the difference is that the authorization is exchanged as part =20=

of the setup rather then over the established channel, but as Sam =20
Hartmann pointed out there may be other use cases for these protocol =20
extensions so I think the best way to advance with the document would =20=

be to run it again in the TLS working group.

So long
-Ralf
---
Ralf Weber
Platform Infrastructure Manager
Colt Telecom GmbH
Herriotstrasse 4
60528 Frankfurt
Germany
DDI: +49 (0)69 56606 2780 Internal OneDial: 8 491 2780
Fax: +49 (0)69 56606 6280
Email: rw@colt.net
http://www.colt.net/
Data | Voice | Managed Services

Sch=FCtze Deine Umwelt | Erst denken, dann drucken

*****************************************
COLT Telecom GmbH, Herriotstra=DFe 4, 60528 Frankfurt/Main, Deutschland =20=

* Tel +49 (0)69 56606 0 * Fax +49 (0)69 56606 2222 *

Gesch=E4ftsf=FChrer: Dr. J=FCrgen Hernichel (Vors.), Rita Thies * =20
Amtsgericht Frankfurt/Main HRB 46123 * USt.-IdNr. DE 197 498 400