IETF Logo Mail Archive

Re: [kitten] On SASL's authzid

Bill Mills <wmills@yahoo-inc.com> Wed, 12 March 2014 00:15 UTC

Return-Path: <wmills@yahoo-inc.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7ED71A08A7 for <kitten@ietfa.amsl.com>; Tue, 11 Mar 2014 17:15:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.22
X-Spam-Level:
X-Spam-Status: No, score=-16.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NEUTRAL=0.779, USER_IN_DEF_WHITELIST=-15] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q8q2mZCzZN0U for <kitten@ietfa.amsl.com>; Tue, 11 Mar 2014 17:15:34 -0700 (PDT)
Received: from mrout1-b.corp.bf1.yahoo.com (mrout1-b.corp.bf1.yahoo.com [98.139.253.104]) by ietfa.amsl.com (Postfix) with ESMTP id 8FDB51A089A for <kitten@ietf.org>; Tue, 11 Mar 2014 17:15:34 -0700 (PDT)
Received: from GQ1-EX10-CAHT14.y.corp.yahoo.com (gq1-ex10-caht14.corp.gq1.yahoo.com [10.73.119.195]) by mrout1-b.corp.bf1.yahoo.com (8.14.4/8.14.4/y.out) with ESMTP id s2C0F2VS089675 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for <kitten@ietf.org>; Tue, 11 Mar 2014 17:15:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=yahoo-inc.com; s=cobra; t=1394583303; bh=twAtd6rhM6cEneiHjxJs2dQuXhvYOCpuB2BqpXyNmkg=; h=References:Date:From:Reply-To:Subject:To:CC:In-Reply-To; b=j1zjF9j7JYAQj23ABvaZopg8snJlhWadQnR1xxmSLnweNhCkSakzVaO1TSh0+hbW2 ATAkfkg7qarfWHkDwbLNgjzGLB4yGVzciXaIARvrjd8K564OX0m0sfLQa7nVdncPBG Ixb6QH6JPG0emON892wsyWNF5sdOo9fjN1Ue6foA=
Received: from omp1010.mail.ne1.yahoo.com (98.138.87.10) by GQ1-EX10-CAHT14.y.corp.yahoo.com (10.72.228.24) with Microsoft SMTP Server (TLS) id 14.3.181.6; Tue, 11 Mar 2014 17:15:01 -0700
Received: (qmail 31338 invoked by uid 1000); 12 Mar 2014 00:15:01 -0000
Received: (qmail 62257 invoked by uid 60001); 12 Mar 2014 00:15:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo-inc.com; s=ginc1024; t=1394583300; bh=Y96r6/PkpK4DX0CI0A/Suqor1rUl+NAJdmD4NGcOpNw=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=qfly4GrwPVQSSOOi2UPJB0vKqai0GdiU4X7uzjfUV4Fyo0DBqhQWmlWSoW0rglAXEq286KOxu3AU/Pl1lA6W80qQH2cXJLZym9RsAf2wiqsWcI/C3bbBYFIyiVb+R4+W+6FbORgQ1+PmjXB0yVh6G4uTeI+LfMZPH6gU+MFQV7g=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024; d=yahoo-inc.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=rjUeJsJ5kc/68lkLjOgB5Omo+lVcsXVAYCYd9eUH/u728kCxYWAdhtoVg0V6qYzQL69He+057G04w+W9i6fotfGz4IWHmPYqPoEqCr9lk6+ja3EJAQgCIFRkQdJ3g4wO08eIQ8GXCbKGe07S7FSzFdVTLIJDskj6muU7dp+/3zE=;
X-YMail-OSG: LROSb1UVM1mVf.6sv4E94iKJuHwuDv7b6YnDUW66MUu5fgQ 8yD2frDjcPEoq3JqSPPeTJxuThSz18gsEH.X6A6Scg.3MZQ3F1PLQj139lb_ 2qLqBIhB38LawebBAE2IUaB0IroBszgZmkasy2cBqu2PT1noigqGsZcTIlLK P4bx.czSy1j7ewBBT.ikndD3P_nWi6ZYqJ3YsjDOoxTicb8E3BJGOD9VhTIi 0KaklicdqfCEa.Kw3JW6XdurZP00K4T8ONE.fYmLKom9CF4esSIe1cDd.MvL QsE0vT6Z2pPQOEoMW30ziNjKz
Received: from [209.131.62.115] by web125605.mail.ne1.yahoo.com via HTTP; Tue, 11 Mar 2014 17:15:00 PDT
X-Rocket-MIMEInfo: 002.001, Q2FuIHdlIGxlYXZlIGE9IHRvIHdoZW4gYSBHUzIgbWVjaGFuaXNtIGlzIGRlZmluZWQ_wqAgb3IgZG8gd2UgbmVlZCBpdCBpbiBub3cgc28gdGhlIFNBU0wgbWVjaGFuaXNtIGlzIGZvcndhcmQgY29tcGF0aWJsZT8KCsKgCi1iaWxsCgoKCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCldpbGxpYW0gSi4gTWlsbHMKIlBhcmFub2lkIiBNVVggWWFob28hCgoKCgoKT24gVHVlc2RheSwgTWFyY2ggMTEsIDIwMTQgMzo1MiBQTSwgTmljbyBXaWxsaWFtcyA8bmljb0BjcnlwdG9uZWN0b3IuY29tPiB3cm8BMAEBAQE-
X-Mailer: YahooMailWebService/0.8.177.636
References: <CF3FAF4D.4B1F4%cantor.2@osu.edu> <1394230922.9009.YahooMailAndroidMobile@web142803.mail.bf1.yahoo.com> <CAPe4Cjp6KSL5FsHVzNPMxvE_E4BmaWgEuZQVr_wEkexH=ukpAg@mail.gmail.com> <CF436DAF.4B41B%cantor.2@osu.edu> <CAK3OfOivZAPDsanf-MAuUxFtzd5+vy51fpuw6UCgohmZP-T3MQ@mail.gmail.com> <1394474177.99427.YahooMailNeo@web125601.mail.ne1.yahoo.com> <CF437606.4B428%cantor.2@osu.edu> <1394475268.88821.YahooMailNeo@web125603.mail.ne1.yahoo.com> <CF437A98.4B43D%cantor.2@osu.edu> <1394475967.98405.YahooMailNeo@web125604.mail.ne1.yahoo.com> <CAK3OfOirp8ZJi8cKa4WKM80jWU8d_t9Snwk-aEEiggNzxu=H3Q@mail.gmail.com> <1394499537.96053.YahooMailNeo@web142802.mail.bf1.yahoo.com> <CAK3OfOhffp=PupCzzqnUe1cA8C4Af26FLC+eGWCzQpgy6GyMQg@mail.gmail.com> <1394500723.9375.YahooMailNeo@web142803.mail.bf1.yahoo.com> <CAK3OfOg9_V_oZ8YP46nKzWwp+UtxSHY4emiDhP5h2i7Rv+7TWQ@mail.gmail.com> <1394502756.57259.YahooMailNeo@web142803.mail.bf1.yahoo.com> <CAK3OfOh8hSwjg_QQdL-LqKrn9R5tE2HrnFomjXe0TNjtsSLVOg@mail.gmail.com> <1394575617.52449.YahooMailNeo@web142805.mail.bf1.yahoo.com> <CAK3OfOj_RoJUq9XX7VOKF0Bo0=fxefSwtYdOL_GVASFv=0WVtg@mail.gmail.com>
Message-ID: <1394583300.43796.YahooMailNeo@web125605.mail.ne1.yahoo.com>
Date: Tue, 11 Mar 2014 17:15:00 -0700
From: Bill Mills <wmills@yahoo-inc.com>
To: Nico Williams <nico@cryptonector.com>, Bill Mills <wmills_92105@yahoo.com>
In-Reply-To: <CAK3OfOj_RoJUq9XX7VOKF0Bo0=fxefSwtYdOL_GVASFv=0WVtg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1124617404-1775119117-1394583300=:43796"
X-Milter-Version: master.31+4-gbc07cd5+
X-CLX-ID: 583303000
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/X3VY9smQE0NyGHILjTyM-I1hcrs
X-Mailman-Approved-At: Tue, 11 Mar 2014 17:39:05 -0700
Cc: "kitten@ietf.org" <kitten@ietf.org>
Subject: Re: [kitten] On SASL's authzid
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: Bill Mills <wmills@yahoo-inc.com>
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Mar 2014 00:15:36 -0000

Can we leave a= to when a GS2 mechanism is defined?  or do we need it in now so the SASL mechanism is forward compatible?

 
-bill



--------------------------------
William J. Mills
"Paranoid" MUX Yahoo!





On Tuesday, March 11, 2014 3:52 PM, Nico Williams <nico@cryptonector.com> wrote:
 
On Tue, Mar 11, 2014 at 5:06 PM, Bill Mills <wmills_92105@yahoo.com> wrote:
> I was being more vague because you (?) mentioned the renaming stuff.  I'm
> happy to use that text.

Ah, I thought you were being vague because you didn't want to REQUIRE
the duplication.

I would prefer to REQUIRE that the authzid go in the GS2 a= and in the
user=.  That gets us both: interop with Google and interop with GS2.

(But I can bend on this because I'm intent on adding an authzid option
to GSS (as a name attribute) so that in the end a GS2 implementation
that supported that option could live with just the user= bit.)


Nico
--

v2.46.0 | Report a Bug | By Email | System Status