IETF Logo Mail Archive

Re: [kitten] I-D Action: draft-ietf-krb-wg-cammac-09.txt

Benjamin Kaduk <kaduk@MIT.EDU> Mon, 08 September 2014 16:29 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4F8F1A88B8 for <kitten@ietfa.amsl.com>; Mon, 8 Sep 2014 09:29:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.153
X-Spam-Level:
X-Spam-Status: No, score=-3.153 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.652, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FdR52yZ_NtrS for <kitten@ietfa.amsl.com>; Mon, 8 Sep 2014 09:29:16 -0700 (PDT)
Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DA2E1A88AD for <kitten@ietf.org>; Mon, 8 Sep 2014 09:29:15 -0700 (PDT)
X-AuditID: 12074423-f799d6d00000337c-9a-540dd95a063a
Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 5A.A5.13180.A59DD045; Mon, 8 Sep 2014 12:29:15 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id s88GTE0r012443; Mon, 8 Sep 2014 12:29:14 -0400
Received: from multics.mit.edu (system-low-sipb.mit.edu [18.187.2.37]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id s88GTCBf008787 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Mon, 8 Sep 2014 12:29:13 -0400
Received: (from kaduk@localhost) by multics.mit.edu (8.12.9.20060308) id s88GTCeM020843; Mon, 8 Sep 2014 12:29:12 -0400 (EDT)
Date: Mon, 08 Sep 2014 12:29:11 -0400
From: Benjamin Kaduk <kaduk@MIT.EDU>
To: Tom Yu <tlyu@MIT.EDU>
In-Reply-To: <ldvwq9h24e0.fsf@sarnath.mit.edu>
Message-ID: <alpine.GSO.1.10.1409081219440.21571@multics.mit.edu>
References: <20140905195755.12365.12570.idtracker@ietfa.amsl.com> <ldvwq9h24e0.fsf@sarnath.mit.edu>
User-Agent: Alpine 1.10 (GSO 962 2008-03-14)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrKIsWRmVeSWpSXmKPExsUixG6nrht9kzfEYPcsJoujm1exODB6LFny kymAMYrLJiU1J7MstUjfLoEr43THbLaCa8wVc56eYWlg/MLUxcjJISFgItH0/gk7hC0mceHe erYuRi4OIYHZTBJ3mg+wQjgbGCU+zZzCDuEcZJKY/PgEWLuQQL3Eq2/bmUFsFgEtib5T38Bs NgEViZlvNrKB2CICkhLHnpwHizMLCEusPzcDzBYWcJRY0PUfzOYU0JOYefElmM0LFL/RsI0Z Yn6yxL9ly8DOExXQkVi9fwoLRI2gxMmZT1ggZmpJLJ++jWUCo+AsJKlZSFILGJlWMcqm5Fbp 5iZm5hSnJusWJyfm5aUW6Zrp5WaW6KWmlG5iBIeli/IOxj8HlQ4xCnAwKvHwclzmCRFiTSwr rsw9xCjJwaQkylt5gTdEiC8pP6UyI7E4I76oNCe1+BCjBAezkgjv08tAOd6UxMqq1KJ8mJQ0 B4uSOO9ba6tgIYH0xJLU7NTUgtQimKwMB4eSBG/mDaBGwaLU9NSKtMycEoQ0EwcnyHAeoOH7 QWp4iwsSc4sz0yHypxiNOVqa3vYycazr/NbPJMSSl5+XKiXOu+Y6UKkASGlGaR7cNFhqecUo DvScMG8nyEAeYFqCm/cKaBUT0KpJwWCrShIRUlINjGxim5Qful86lvjj6/6jkWtEKgqfTmr+ 4jPl1sTyG7biN5SN4h54fItZkdyub3c7+1uZyWq3L/z+b2Zc9sgzTEg+4v1g+g3JUtbn/7eq H1N3fsx3aPOskoWZE3ulnSojU6amH9gjYq/JuCnetJsxJ6Olext3R3TGu18MXm/W8Akc8m1Z e8SyU4mlOCPRUIu5qDgRAMNba/8IAwAA
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/ZubJeGqXGwFH1F3qJ45ns3O6efY
Cc: kitten@ietf.org
Subject: Re: [kitten] I-D Action: draft-ietf-krb-wg-cammac-09.txt
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Sep 2014 16:29:18 -0000

On Fri, 5 Sep 2014, Tom Yu wrote:

> This revision makes some editorial wording changes in responses to
> feedback.

Thanks for the updates.

Aside from the extra "be" (in "be use") that Simo pointed out on IRC, I am
still not sure that I understand the last paragraph of the security
considerations.  That is, I don't see how using the S4U2Proxy extension
and having policy disallow the use of S4U2Proxy would result in similar
security properties.

-Ben

v2.23.0 | Report a Bug | By Email