IETF Logo Mail Archive

Re: [kitten] On SASL's authzid

Nico Williams <nico@cryptonector.com> Fri, 07 March 2014 20:25 UTC

Return-Path: <nico@cryptonector.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AA7E1A01AD for <kitten@ietfa.amsl.com>; Fri, 7 Mar 2014 12:25:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.044
X-Spam-Level:
X-Spam-Status: No, score=-1.044 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, IP_NOT_FRIENDLY=0.334] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id msnDnMewgSdJ for <kitten@ietfa.amsl.com>; Fri, 7 Mar 2014 12:25:56 -0800 (PST)
Received: from homiemail-a16.g.dreamhost.com (agjbgdcfdbfd.dreamhost.com [69.163.253.153]) by ietfa.amsl.com (Postfix) with ESMTP id 616721A0136 for <kitten@ietf.org>; Fri, 7 Mar 2014 12:25:56 -0800 (PST)
Received: from homiemail-a16.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a16.g.dreamhost.com (Postfix) with ESMTP id 2B1D050808E for <kitten@ietf.org>; Fri, 7 Mar 2014 12:25:52 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h= mime-version:in-reply-to:references:date:message-id:subject:from :to:cc:content-type; s=cryptonector.com; bh=PuL8f+R3k/kotn4kiF7W pVsnbd4=; b=eDGPL13IeYHHYw9SBwvgQ6xFMD/8qIUmxgTQ5iofRJyjv2o6pnTp s4ldbaUkUxJ1hyqN3o3V3n8Fl9RCtthkA2YNUYpHlK2oshEf/e2WmLRLRXCpqEg1 6YE1Idp7+QnnaORdPPFRQI+n84xCnf+i5zntQbwfk8gVvt8XFkCLWxc=
Received: from mail-we0-f179.google.com (mail-we0-f179.google.com [74.125.82.179]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by homiemail-a16.g.dreamhost.com (Postfix) with ESMTPSA id D151B508064 for <kitten@ietf.org>; Fri, 7 Mar 2014 12:25:51 -0800 (PST)
Received: by mail-we0-f179.google.com with SMTP id x48so5725801wes.10 for <kitten@ietf.org>; Fri, 07 Mar 2014 12:25:50 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=CLmHYEpapc9Ba42jyyCuJC4iNaSs8cTPhKieuYnVrIg=; b=JoGGcuKYgGl4dGtvFoBFhD1BCWsoCbmECsmjhpsbj8R2vMxVVsN74PzwS6easzItaS +yzrUJecHZs3dQ7qPNrKxWMBFOzNs+o7leXT1vb4EwPLy/sYFEPuQ3dXOXKQiaYuZpdv sCnWkI452hceGSP2pDVBDqPG7t5Y6TSckomn8nn8wuVMIoqMeEzswYFSreiM/2UVMAt8 +kPJCsN4Mn0XD8yFod6NXBoruP98iNSw1Hp0DSQeJhvNjDEV9pdNw+oRNDYBtV0ox3AJ iBf+tbsVYnwE/EtRwDJbyDJwdp78iKQcnxdMyaawssyiLbAAqQGCzE6d9L0bpNvbELAg wSPQ==
MIME-Version: 1.0
X-Received: by 10.194.84.240 with SMTP id c16mr33324wjz.95.1394223950723; Fri, 07 Mar 2014 12:25:50 -0800 (PST)
Received: by 10.216.199.6 with HTTP; Fri, 7 Mar 2014 12:25:50 -0800 (PST)
In-Reply-To: <82E7C9A01FD0764CACDD35D10F5DFB6E692618@001FSN2MPN1-045.001f.mgd2.msft.net>
References: <CAK3OfOjTUru3UE+0MFXpYMpZWbWkFyEuitOAbDMgMaYxcpeTBw@mail.gmail.com> <1394176583.51714.YahooMailNeo@web142802.mail.bf1.yahoo.com> <4E333EB6-3D42-4DD1-A7CF-15F82922CFE9@isode.com> <CAK3OfOh1wxs84G1_HayWEc_oZjD_4E-X=Re6Ek0aoW0PfVThsQ@mail.gmail.com> <82E7C9A01FD0764CACDD35D10F5DFB6E692618@001FSN2MPN1-045.001f.mgd2.msft.net>
Date: Fri, 07 Mar 2014 14:25:50 -0600
Message-ID: <CAK3OfOhDJj4EnMhRqsjfSCoFWZr1gKyyae1n8VSsxSf56SXraQ@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: "Nordgren, Bryce L -FS" <bnordgren@fs.fed.us>
Content-Type: text/plain; charset="UTF-8"
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/Pe2Xyf1vmvWmBqnUSv0ArkTqZLE
Cc: "kitten@ietf.org" <kitten@ietf.org>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Mar 2014 20:25:57 -0000

On Fri, Mar 7, 2014 at 2:13 PM, Nordgren, Bryce L -FS
<bnordgren@fs.fed.us> wrote:
>> But maybe this isin't important.  The question I just asked Chris is more
>> important: is it OK for new mechanisms to impose new UIs/user interactions
>> on existing applications?
>
> If this was software, you'd keep the API stable during minor revisions and rearrange things for major revisions. The UI would supply whatever it had to in order to use the version of SASL it wants to use.

But SASL doesn't define an API (unlike GSS).  So we need to identify
what is to be kept stable, if anything, and it's not as simple as "the
API".

Nico
--

v2.46.0 | Report a Bug | By Email | System Status