[KEYPROV] SASL stringprep Was: FW: New Version Notification - draft-ietf-keyprov-dskpp-13.txt

 Thanx Philip!

I had never heard about this before.  There is always something new to learn :-)

http://www.ietf.org/rfc/rfc4013.txt

Personally I would reject a scheme where a password in UTF-8 like

    I<U+00AD>X

is supposed to be translated to

    IX

The motives may be good but I think it creates more problems
than it solves.  For KeyGen2/SKS I will absolutely not adopt this,
that's for sure.  For encrypted passwords it would mean that the
token would do this translation (?) and that's a really horrible idea.

Anders

On 2010-09-05 23:40, Phillip Hallam-Baker wrote:
> Thanks for doing this Andrea.
>
> One substantive change to the protocol that should be noted is that
> SASL stringprep is now used for UNICODE passwords. I know we discussed
> this but I cannot remember if anyone cared.
>
> Some members of the IESG did care, they thought that consistency was
> important and in the absence of an actual reason not to use SASL
> stringprep, I agree.
>
> Is there anyone who thinks this is an issue?
>
>
> On Fri, Sep 3, 2010 at 1:56 PM,  <andrea.doherty@rsa.com> wrote:
>> -----Original Message-----
>> From: Internet-Draft@ietf.org [mailto:Internet-Draft@ietf.org]
>> Sent: Friday, September 03, 2010 1:45 PM
>> To: keyprov-chairs@tools.ietf.org; draft-ietf-keyprov-dskpp@tools.ietf.org; tim.polk@nist.gov; alexey.melnikov@isode.com
>> Subject: New Version Notification - draft-ietf-keyprov-dskpp-13.txt
>>
>> New version (-13) has been submitted for draft-ietf-keyprov-dskpp-13.txt.
>> http://www.ietf.org/internet-drafts/draft-ietf-keyprov-dskpp-13.txt
>>
>>
>> Diff from previous version:
>> http://tools.ietf.org/rfcdiff?url2=draft-ietf-keyprov-dskpp-13
>>
>> IETF Secretariat.
>>
>> _______________________________________________
>> KEYPROV mailing list
>> KEYPROV@ietf.org
>> https://www.ietf.org/mailman/listinfo/keyprov
>>
>
>