IETF Logo Mail Archive

Re: [kitten] New Version Notification for draft-howard-gss-sanon-01.txt

Luke Howard <lukeh@padl.com> Mon, 06 April 2020 23:00 UTC

Return-Path: <lukeh@padl.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 393793A0E7B for <kitten@ietfa.amsl.com>; Mon, 6 Apr 2020 16:00:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=padl.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FpPr1-pe4v8z for <kitten@ietfa.amsl.com>; Mon, 6 Apr 2020 15:59:59 -0700 (PDT)
Received: from us.padl.com (us.padl.com [216.154.215.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8388E3A0E70 for <kitten@ietf.org>; Mon, 6 Apr 2020 15:59:59 -0700 (PDT)
Received: by us.padl.com with ESMTP id 036MxFjQ014881; Mon, 6 Apr 2020 22:59:19 GMT
DKIM-Filter: OpenDKIM Filter v2.11.0 us.padl.com 036MxFjQ014881
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=padl.com; s=default; t=1586213961; bh=vMfYtQGM3SyKcP+fA7934UlokXPjL3+6dft9/sNsBn4=; h=From:Subject:Date:In-Reply-To:Cc:To:References:From; b=ZhuCEcTo1irR2okEgBYrJApMZf8oOmWV+waSTPa2FbgE0SI1NVViEnlg+AG8Piznx V2X461E2x15tqlrtB8xhc9IMlO/lhlTyXT9ioLeL50wjoPTynJSMp5SPqJIq+Tw0k5 fZP7bk5q+JH2BGWX0gr3v+Yf78A7a5cT6GK2Kv0FlFNRv/8g3ORegbUE4n6WmcecLD PmLvcjVv/g8YXsuBP0/oeGropv+e81PEYaRZLIu7KGIjF8RUgQ8dwleoUvuESoaaFJ hyHXKPzidQJwMdb8bZwue0x5axUb/AiAFy1kcAHu0Jg9z/JER+0G/7ZXigIkTxgsEp edg0YBbODUaDQ==
From: Luke Howard <lukeh@padl.com>
Message-Id: <47052E79-71C9-482E-AF42-D46C44F9AA47@padl.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_4436CCBF-F18A-4585-ABFE-20DA6D463D43"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Tue, 07 Apr 2020 08:59:14 +1000
In-Reply-To: <20200406152828.GK18021@localhost>
Cc: "kitten@ietf.org" <kitten@ietf.org>, Jeffrey Altman <jaltman@auristor.com>
To: Nicolas Williams <nico@cryptonector.com>
References: <158604472122.27168.16112727090339772628@ietfa.amsl.com> <B2497A4F-81B3-42F9-AED1-CFECF1D9F7C0@padl.com> <20200405234929.GD18021@localhost> <38ED72E1-3361-4242-9923-C3BE61698BE0@padl.com> <20200406011026.GG18021@localhost> <E5951DC2-569F-48FB-8458-50D0CC8A4BAC@padl.com> <4E7EFAC6-3E51-4FC7-B0F1-2F886BBC1F56@lukehoward.com> <20200406152828.GK18021@localhost>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/G-dQhkmkEqBj3a2XCJAeDfFzdwk>
Subject: Re: [kitten] New Version Notification for draft-howard-gss-sanon-01.txt
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Apr 2020 23:00:01 -0000

Jeff suggests informational track.

I’ve fixed the NegoEx thing anyway in the most recent draft.

The NegoEx authors did not envisage a mechanism being negotiated under both SPNEGO and NegoEx, so it doesn’t say anything about the preference order of such a mechanism. (It was possible to build such a mechanism up to Windows 8, but this was an accident that was then corrected.)

MIT and Heimdal support mechanisms being negotiable under both and always preference negotiating it under NegoEx.

Luke Howard
web <http://lukehoward.com/> / facebook <https://www.facebook.com/lukehowardmusic> / instagram <http://instagram.com/lukehowardmusic/> / spotify <https://open.spotify.com/artist/3duTXsC49HoPt4f4EySDKf>

> On 7 Apr 2020, at 1:28 am, Nico Williams <nico@cryptonector.com> wrote:
> 
> On Mon, Apr 06, 2020 at 11:35:37AM +1000, Luke Howard wrote:
>> The progressing requirement is not an issue if SAnon is experimental
>> track, though?
> 
> It's not, but there's no reason for SAnon not to make it to the
> Standards Track either...
> 
> The simplest thing to do is to say that the requirement about NegoEx is
> only for initiators that implement NegoEx.  Heck, you might not even
> need to say anything: NegoEx itself already imposes that requirement,
> does it not?  If so, why restate it here?
> 
> Nico
> --

v2.23.0 | Report a Bug | By Email