IETF Logo Mail Archive

[kitten] Fwd: I-D Action: draft-melnikov-scram-2fa-00.txt

Alexey Melnikov <alexey.melnikov@isode.com> Thu, 19 March 2020 13:26 UTC

Return-Path: <alexey.melnikov@isode.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 214AA3A296A for <kitten@ietfa.amsl.com>; Thu, 19 Mar 2020 06:26:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.078
X-Spam-Level:
X-Spam-Status: No, score=-2.078 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, T_SPF_HELO_TEMPERROR=0.01, T_SPF_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6rmFbUioQR0Z for <kitten@ietfa.amsl.com>; Thu, 19 Mar 2020 06:26:01 -0700 (PDT)
Received: from statler.isode.com (Statler.isode.com [62.232.206.189]) by ietfa.amsl.com (Postfix) with ESMTP id 6833B3A294D for <kitten@ietf.org>; Thu, 19 Mar 2020 06:26:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1584624360; d=isode.com; s=june2016; i=@isode.com; bh=9cJKzr70INMq3MiyrRIlbcVJ5ONIGVw6xiGI7f6T75A=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=SA4YCqdq4s08ho9/ICtJAf0h4XCbeHtxW9Lx7QrmLN73pLFz23D2VjLXqpSxaU5EglWxTI JcjXrm1xLhu4XJzlrRvO9zXV+j5Jj3J/sU9E6ncD9sgdW5GoqAdPRCc1pTlBrLJuP1rkdR lCd0AV6Llkws76wKH3gY/OWKACNnqkg=;
Received: from [192.168.1.216] (host81-154-46-147.range81-154.btcentralplus.com [81.154.46.147]) by statler.isode.com (submission channel) via TCP with ESMTPSA id <XnNy6AAcxQ-r@statler.isode.com>; Thu, 19 Mar 2020 13:26:00 +0000
References: <158462386052.13384.7911173297625270492@ietfa.amsl.com>
To: kitten@ietf.org
From: Alexey Melnikov <alexey.melnikov@isode.com>
X-Forwarded-Message-Id: <158462386052.13384.7911173297625270492@ietfa.amsl.com>
Message-ID: <1330abb0-f0ae-3399-0486-4d7f7ff63267@isode.com>
Date: Thu, 19 Mar 2020 13:25:58 +0000
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.5.0
In-Reply-To: <158462386052.13384.7911173297625270492@ietfa.amsl.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="------------A7B8FD3CFFB25C81ED9C08FE"
Content-Language: en-GB
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/9akV9ITKGvSZjDEXEU9lRVz8FGM>
Subject: [kitten] Fwd: I-D Action: draft-melnikov-scram-2fa-00.txt
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2020 13:26:14 -0000

Hi all,

As I had various conversations with people saying that SASL doesn't 
support 2 factor authentication, I posted a short draft which shows how 
to add 2 factor authentication to SCRAM. This is mostly a proof of 
concept and I am planning to work on another draft explaining how to do 
the same for SASL OAUTH.

(If I remember correctly I also talked to Dave Cridland about doing a 
more generic extension to the SASL framework itself by allowing 
protocols to invoke multiple SASL mechanism in a sequence and achieving 
2FA that way. I would be interested in developing this concept as well, 
but it would take longer than just extending some existing SASL mechanisms.)

If people can have a look and provide feedback, that would be much 
appreciated.

Best Regards,
Alexey
-------- Forwarded Message --------
Subject: 	I-D Action: draft-melnikov-scram-2fa-00.txt
Date: 	Thu, 19 Mar 2020 06:17:40 -0700
From: 	internet-drafts@ietf.org
Reply-To: 	internet-drafts@ietf.org
To: 	i-d-announce@ietf.org




A New Internet-Draft is available from the on-line Internet-Drafts 
directories.


Title : Extensions to Salted Challenge Response (SCRAM) for 2 factor 
authentication
Author : Alexey Melnikov
Filename : draft-melnikov-scram-2fa-00.txt
Pages : 5
Date : 2020-03-19

Abstract:
This specification describes an extension to family of Simple
Authentication and Security Layer (SASL; RFC 4422) authentication
mechanisms called the Salted Challenge Response Authentication
Mechanism (SCRAM), which provides support for 2 factor
authentication.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-melnikov-scram-2fa/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-melnikov-scram-2fa-00
https://datatracker.ietf.org/doc/html/draft-melnikov-scram-2fa-00


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt

v2.23.0 | Report a Bug | By Email