Re: Consensus call was Re: Comments on draft-ietf-kitten-krb5-gssapi-prf-03.txt

[Nicolas Williams <[e-mail]>]

On Fri, Jun 03, 2005 at 07:15:23PM -0400, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <[e-mail]> writes:
> 
>     Sam> I'm willing to live with this text although it's not great.
>     Sam> I don't have improvements to offer.  The spirit behind the
>     Sam> text is fine.
> 
>     Nicolas> How about pointing out that the lack of useful APIs for
>     Nicolas> inquiring about cryptographic QoPs or specification of
>     Nicolas> policies on the same means that pplications that need to
>     Nicolas> make more than nominal use of GSS_Pseudo_random() should
>     Nicolas> take extra care?
> 
> 
> 
> I'd actually like to stay away from discussion of APIs. m I honestly
> believe that for any mechanism we are likely to standardize and for
> any use of PRF we are likely to standardize there isn't that big of a
> concern beyond the key lifetime concern we're already discussing
> unrealted to PRF.
> 
> So mentioning APIs as a way to find out whether what you are doing is
> OK is fine but mentioning APIsas a requirement seems unnecessary.

Ok, so we should stick with the text you agreed to earlier.  I don't
know how to improve it.

_______________________________________________
Kitten mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/kitten