[IPP] Fwd: [saag] RADIUS is deprecating MD5
Ira McDonald via ipp <ipp@pwg.org> Sun, 24 March 2024 18:30 UTC
Return-Path: <ipp-bounces@pwg.org>
X-Original-To: ietfarch-ipp-archive@ietfa.amsl.com
Delivered-To: ietfarch-ipp-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76303C14CEFA for <ietfarch-ipp-archive@ietfa.amsl.com>; Sun, 24 Mar 2024 11:30:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.105
X-Spam-Level:
X-Spam-Status: No, score=-8.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, MAILING_LIST_MULTI=-1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_FAIL=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=pwg.org header.b="PxhluVKH"; dkim=pass (1024-bit key) header.d=pwg.org header.b="iJ0wtfXd"; dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=gmail.com header.b="Q2Ttf8Lu"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JixXsfH8pjLO for <ietfarch-ipp-archive@ietfa.amsl.com>; Sun, 24 Mar 2024 11:30:06 -0700 (PDT)
Received: from mail.pwg.org (mail.pwg.org [172.104.19.21]) by ietfa.amsl.com (Postfix) with ESMTP id 49ED1C14CEED for <ipp-archive2@ietf.org>; Sun, 24 Mar 2024 11:30:06 -0700 (PDT)
Received: by mail.pwg.org (Postfix, from userid 1002) id 7907BC9DF; Sun, 24 Mar 2024 18:30:05 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.pwg.org 7907BC9DF
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pwg.org; s=default; t=1711305005; bh=/INcooSRtKf3G+DlaSOMz+OgXDcyGEi5ExxJWUDBeGg=; h=References:In-Reply-To:Date:To:Subject:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc: From; b=PxhluVKHX1rUiatuKbhmJ1QdHkwTjmR5D6Tc3H42gZ1PzT30j7zdQUbLKC+W3QxRf KsQ4uHAQ+faD3+H6iY58RQsp5Gq8fghCJLahXq89RQEljBVubkxPIat1iVrNA+CY9f 5APXtLxXkM37PLk1//XF1Vl0AyIUJxChEtRmpYPE=
Received: from mail.pwg.org (localhost [IPv6:::1]) by mail.pwg.org (Postfix) with ESMTP id D1ABDEE; Sun, 24 Mar 2024 18:30:03 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.pwg.org D1ABDEE
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pwg.org; s=default; t=1711305003; bh=/INcooSRtKf3G+DlaSOMz+OgXDcyGEi5ExxJWUDBeGg=; h=References:In-Reply-To:Date:To:Subject:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc: From; b=iJ0wtfXdEfqL1okTIlTZN0KMHSXrlpZ+ixWzUuocTIVjBSoPy7ruez86etKIDrajs hrEmslEZqsamfo7xUTBwMiplfKKJTBhwiawJ54HjafwjNXkzapwm6gyGmioSjaCt/X Q51nFOspd7ukEmpa9k86wF6dKC42y1G9a6dNf754=
X-Original-To: ipp@pwg.org
Delivered-To: ipp@pwg.org
Received: by mail.pwg.org (Postfix, from userid 1002) id B23D53A4D; Sun, 24 Mar 2024 18:30:01 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.pwg.org B23D53A4D
Authentication-Results: mail.pwg.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Q2Ttf8Lu"
Received: from mail-yw1-x1136.google.com (mail-yw1-x1136.google.com [IPv6:2607:f8b0:4864:20::1136]) by mail.pwg.org (Postfix) with ESMTPS id BB44326C8 for <ipp@pwg.org>; Sun, 24 Mar 2024 18:29:59 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.pwg.org BB44326C8
Received: by mail-yw1-x1136.google.com with SMTP id 00721157ae682-609fb19ae76so43091897b3.2 for <ipp@pwg.org>; Sun, 24 Mar 2024 11:29:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1711304998; x=1711909798; darn=pwg.org; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=q5RFqzHF+fM4hcwxcRyUm59YMwHsJR6WmC+WalBj1SY=; b=Q2Ttf8LuDLxCzPDyqoPgfA1eNXLJs0NSCZt1enMINlcvN2HN9sfUJ+lklZp1J69wPP mMaa4+salN5xTrx6c5lrWLDAZsdrah1epMDiPHzDPRPGMIsuQy/R1GYisA1EWLZ/ZmkG KgjZOvSuFs6owWEsgqqGIn1VAWA/LNe7SDOGuZxB0J19Dyqfx7Je8QnnmzffAwPtrQ3i vzzYkOy0Fv3mXkHzGOJbqCsyJtkV+y7PA9nB8mcp/ZijR5zECKKva0u35uKzEhL9/ILG zvUB1ty0FG6MGiocLMLj0FMiFKVO64Xv0T1o+5c5BtqoD2Iw2Uf4tAE6Wu7rtt/f3ZbK Wopw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711304998; x=1711909798; h=to:subject:message-id:date:from:in-reply-to:references:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=q5RFqzHF+fM4hcwxcRyUm59YMwHsJR6WmC+WalBj1SY=; b=OD1bntTCCTFLHBH9BN+BUhvXVmvIboi+gvkFFq00OTBVzMag6wvuigecSYFzQS+Itz LrOKVmjAYD/JFXTI2nVScXWCuv/HQYCRr8SkeGH8sbg0ZHgNKbLiml19GWfbGaq3qoJq JWZ/Nn0bNREgdJmZfzzK2/a6LfjyTW77XdhiT3wbqAZlLamADcvy69EHK9JJmQjnTKY0 Ty0vggYTZEX+JlMShdXCgCVhqZK81m4KHDV8KCx3CzhvOSIObMi/ZBAhr7vtHXfT5BGc HohFdMYxRSHyiDWnsQgKKAcoCtaTDbgpJmE48LXl5tIGnVa83Jd//bludUTz4VCFDH2O X6MQ==
X-Gm-Message-State: AOJu0YxWgMhwVJVunDTYL0bsVvdg2k+VGeBfirYlmG03t6GT9/O6EsKn CQg7vpxKzngq5lm6BiTEpYilpFVmNYb/LXSNRhDFGlz+lESWbjIMWBgQsKyZoWw9yakPdRdsfC8 lZbmr79glcqYLdUGXIppVVp2KetEGcnEQ
X-Google-Smtp-Source: AGHT+IHzy22iRRha7Rfb1lyhmZ2QYHxAxiCbGv+j9GIr6ulTXHZ0LMESTogPkk8A/d/QR1r2VYiglkzmlfqg1/rD4UY=
X-Received: by 2002:a81:9c0e:0:b0:60a:4fd7:f1d4 with SMTP id m14-20020a819c0e000000b0060a4fd7f1d4mr4333945ywa.24.1711304998482; Sun, 24 Mar 2024 11:29:58 -0700 (PDT)
MIME-Version: 1.0
References: <755BC73B-B981-4986-B45A-E9796DCC66BC@deployingradius.com>
In-Reply-To: <755BC73B-B981-4986-B45A-E9796DCC66BC@deployingradius.com>
Date: Sun, 24 Mar 2024 14:29:40 -0400
Message-ID: <CAN40gSvA8NZiRxhbFnt0eaDFwjfTGEzqXRR1CQeTzYHTNWf92w@mail.gmail.com>
To: "ipp@pwg.org" <ipp@pwg.org>, Ira McDonald <blueroofmusic@gmail.com>
Subject: [IPP] Fwd: [saag] RADIUS is deprecating MD5
X-BeenThere: ipp@pwg.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: ISTO-PWG Internet Printing Protocol workgroup discussion forum <ipp.pwg.org>
List-Unsubscribe: <https://www.pwg.org/mailman/options/ipp>, <mailto:ipp-request@pwg.org?subject=unsubscribe>
List-Archive: <http://www.pwg.org/pipermail/ipp/>
List-Post: <mailto:ipp@pwg.org>
List-Help: <mailto:ipp-request@pwg.org?subject=help>
List-Subscribe: <https://www.pwg.org/mailman/listinfo/ipp>, <mailto:ipp-request@pwg.org?subject=subscribe>
From: Ira McDonald via ipp <ipp@pwg.org>
Reply-To: ISTO-PWG Internet Printing Protocol workgroup discussion forum <ipp@pwg.org>
Cc: Ira McDonald <blueroofmusic@gmail.com>
Content-Type: multipart/mixed; boundary="===============8790001672852923036=="
Errors-To: ipp-bounces@pwg.org
Sender: ipp <ipp-bounces@pwg.org>
FYI - RADIUS is cleaning up its act - this will impact many users and systems. ---------- Forwarded message --------- From: Alan DeKok <aland@deployingradius.com> Date: Sun, Mar 24, 2024 at 2:23 PM Subject: [saag] RADIUS is deprecating MD5 To: <saag@ietf.org> To follow up on my comments at the mic in Brisbane, the RADEXT group is working on two documents: * moving TLS to standards track: https://datatracker.ietf.org/doc/draft-rieckers-radext-rfc6614bis/ * deprecating insecure practices: https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ We expect to submit these documents for publication around IETF 120. We will be deprecating the use of RADIUS/UDP, in large part due to it's reliance on MD5. Everyone shipping RADIUS clients should take a serious look at moving to TLS immediately. MD5 isn't getting any more secure, and there are few reasons left for staying with it. Alan DeKok. _______________________________________________ saag mailing list saag@ietf.org https://www.ietf.org/mailman/listinfo/saag
_______________________________________________ ipp mailing list ipp@pwg.org https://www.pwg.org/mailman/listinfo/ipp
- [IPP] Fwd: [saag] RADIUS is deprecating MD5 Ira McDonald via ipp