Archive

[IPsec] Moving Authentication Header (AH) to Historic

"Bhatia, Manav (Manav)" <manav.bhatia@alcatel-lucent.com> Thu, 29 December 2011 18:51 UTC

From: "Bhatia, Manav (Manav)" <manav.bhatia@alcatel-lucent.com>
To: "IPsec@ietf.org" <IPsec@ietf.org>
Date: Fri, 30 Dec 2011 00:21:34 +0530
Thread-Topic: Moving Authentication Header (AH) to Historic
Thread-Index: AczGWuNIu0K1AGG7T86TG4O9aPf5yg==
Message-ID: <7C362EEF9C7896468B36C9B79200D8350D027BB14E@INBANSXCHMBSA1.in.alcatel-lucent.com>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [IPsec] Moving Authentication Header (AH) to Historic
Precedence: list

Hi,

We have had several discussions in the past about the utility of AH when ESP with NULL encryption offers everything that AH has to offer. I have written a very small draft that recommends moving AH to the Historic status. This document does NOT deprecate AH and it does NOT mean that people should stop using AH now. All it means is that other WGs should use ESP-NULL whenever defining integrity verification mechanisms and should only use AH when authentication cannot be achieved with ESP-NULL. I also discuss a few points that people usually put in favor of AH over ESP and why I think that those are not very relevant.

I would love to hear feedback from the WG.

The URL for the draft is:
http://www.ietf.org/internet-drafts/draft-bhatia-moving-ah-to-historic-00.txt 

Happy New Year in advance!

Cheers, Manav

From: internet-drafts@ietf.org 
To: i-d-announce@ietf.org 
Reply-to: internet-drafts@ietf.org 
Subject: I-D Action: draft-bhatia-moving-ah-to-historic-00.txt 
X-RSN: 1/0/935/40711/44097 
 
A New Internet-Draft is available from the on-line Internet-Drafts directories. 
 
Title : Moving Authentication Header (AH) to Historic 
Author(s) : Manav Bhatia 
Filename : draft-bhatia-moving-ah-to-historic-00.txt 
Pages : 5 
Date : 2011-12-29 
 
This document recommends retiring Authentication Header (AH) and 
discusses the reasons for doing so. It recommends moving RFC 4302 to 
Historic status. 
 
 
 
A URL for this Internet-Draft is: 
http://www.ietf.org/internet-drafts/draft-bhatia-moving-ah-to-historic-00.txt 
 
Internet-Drafts are also available by anonymous FTP at: 
ftp://ftp.ietf.org/internet-drafts/ 
 
This Internet-Draft can be retrieved at: 
ftp://ftp.ietf.org/internet-drafts/draft-bhatia-moving-ah-to-historic-00.txt

[IPsec] Moving Authentication Header (AH) to Hist… Bhatia, Manav (Manav)
Re: [IPsec] Moving Authentication Header (AH) to … Melinda Shore
Re: [IPsec] Moving Authentication Header (AH) to … Yoav Nir
Re: [IPsec] Moving Authentication Header (AH) to … Jack Kohn
Re: [IPsec] Moving Authentication Header (AH) to … Melinda Shore
Re: [IPsec] Moving Authentication Header (AH) to … Venkatesh Sriram
[IPsec] 答复: Moving Authentication Header (AH) to … Dacheng Zhang(Dacheng)
Re: [IPsec] 答复: Moving Authentication Header (AH)… Yaron Sheffer
Re: [IPsec] Moving Authentication Header (AH) to … david.black
Re: [IPsec] Moving Authentication Header (AH) to … Bhatia, Manav (Manav)
Re: [IPsec] Moving Authentication Header (AH) to … Nico Williams
Re: [IPsec] Moving Authentication Header (AH) to … david.black
Re: [IPsec] Moving Authentication Header (AH) to … Venkatesh Sriram
Re: [IPsec] Moving Authentication Header (AH) to … Paul Hoffman
Re: [IPsec] Moving Authentication Header (AH) to … Bhatia, Manav (Manav)
Re: [IPsec] Moving Authentication Header (AH) to … Paul Hoffman
[IPsec] Avoiding Authentication Header (AH) (was … Bhatia, Manav (Manav)
Re: [IPsec] Avoiding Authentication Header (AH) (… Michael Richardson
Re: [IPsec] Avoiding Authentication Header (AH) (… Bhatia, Manav (Manav)
Re: [IPsec] Avoiding Authentication Header (AH) (… Yoav Nir
Re: [IPsec] Moving Authentication Header (AH) to … Nico Williams