Re: [kitten] SASL's idea of "additional data" in a protocol

Rick van Rein <rick@openfortress.nl> Thu, 19 March 2020 15:54 UTC

Return-Path: <rick@openfortress.nl>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4DF23A07FE for <kitten@ietfa.amsl.com>; Thu, 19 Mar 2020 08:54:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=openfortress.nl
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A8XzHIX6bEZK for <kitten@ietfa.amsl.com>; Thu, 19 Mar 2020 08:54:21 -0700 (PDT)
Received: from lb3-smtp-cloud7.xs4all.net (lb3-smtp-cloud7.xs4all.net [194.109.24.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6601E3A07FD for <kitten@ietf.org>; Thu, 19 Mar 2020 08:54:20 -0700 (PDT)
Received: from popmini.vanrein.org ([IPv6:2001:980:93a5:1::7]) by smtp-cloud7.xs4all.net with ESMTP id ExUrjompRLu1fExUsjjyqB; Thu, 19 Mar 2020 16:54:17 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=openfortress.nl; i=rick@openfortress.nl; q=dns/txt; s=fame; t=1584633253; h=message-id : date : from : mime-version : to : cc : subject : references : in-reply-to : content-type : content-transfer-encoding : date : from : subject; bh=OB+odT0jNTvQM5s5RcgF+takqkdHAWYrzeMlxwTe2NY=; b=gh3c/1c7wEhSYgwL5HUe6QJpKvDnnYBMqPMRCR8vGRr5+HD9gnk1TcY6 8tVbBwy8lfpQFPU+m2KACS0ugAFak3UVwjUYPKpJKat7CycIygXmc2c7Wm RlYddW9ZOp7YlBZbDcYYAcYIKi400RsQvPmFvTrDatE4tDuJYgsNiXgjQ=
Received: by fame.vanrein.org (Postfix, from userid 1006) id 48E2937F20; Thu, 19 Mar 2020 15:54:11 +0000 (UTC)
X-Original-To: kitten@ietf.org
Received: from airhead.local (phantom.vanrein.org [83.161.146.46]) by fame.vanrein.org (Postfix) with ESMTPA id BB79B37F1C; Thu, 19 Mar 2020 15:54:03 +0000 (UTC)
Message-ID: <5E739599.5010605@openfortress.nl>
Date: Thu, 19 Mar 2020 16:54:01 +0100
From: Rick van Rein <rick@openfortress.nl>
User-Agent: Postbox 3.0.11 (Macintosh/20140602)
MIME-Version: 1.0
To: Alexey Melnikov <alexey.melnikov@isode.com>, dave@cridland.net
CC: "kitten@ietf.org" <kitten@ietf.org>
References: <5E7331FF.9000500@openfortress.nl> <889abf71-b8c9-5bb8-5376-02047054296b@isode.com>
In-Reply-To: <889abf71-b8c9-5bb8-5376-02047054296b@isode.com>
X-Enigmail-Version: 1.2.3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Bogosity: Unsure, tests=bogofilter, spamicity=0.520000, version=1.2.4
X-CMAE-Envelope: =?utf-8?q?MS4wfN1IAcSsaEZcxG6QY/BdoeCV5a5tbbXmV2s5FQIZCK5qc?= =?utf-8?q?dJCEyDC2XdcCf7JPWsjvPGtWfmaNb/LGbuqv0y5WikEpNm67kUKeKBksQbyR97XRe?= =?utf-8?q?Gtr5ef_+DQa3rr1fIE2c7juUzqhZW4bmyntHXwq+E8mPL8hUgDmKdRUDeo/DXliDL?= =?utf-8?q?DYyalN3j+Vecyhvwx5XA=3D=3D?=
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/CfdtFyJPxP9BcDrBGFT6yTWIBmU>
Subject: Re: [kitten] SASL's idea of "additional data" in a protocol
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Mar 2020 15:54:25 -0000

Hello Dave and Alexey,

> SCRAM does this, and it can be seen in profiles that support it like XMPP.

> Actually, this is being used. Look for example at SCRAM (RFC 5802),
> the last message from the server (containing the v= attribute) can be
> sent as "additional data with success".


Thanks, my feeling that this was not used at else has been falsified.  I
was beginning to wonder if I was being overzealously spec-compliant.
Apparently not :)

-Rick