Re: [kitten] [saag] AD sponsoring draft-hansen-scram-sha256

(list reduced to kitten)

On 12/02/15 01:24, Stephen Farrell wrote:
> 
> Hiya,
> 
> I've been asked to AD sponsor draft-hansen-scram-sha256 [1] as it's
> needed for some work in http-auth but doesn't quite fit with any
> current WG. I plan to start an IETF LC for that shortly, but please
> do let me know if there are any issues.
> 
> This was previously discussed on the kitten WG list, so (with
> the WG chairs' permission) I'd ask that you send any comments
> there if you've any before I start the IETF LC. (Reply-to is
> set to the kitten WG list.)

So I've seen positive responses, and some tweaks suggested which
are all to the good, so I'm happy to sponsor this work.

But in addition, there were two substantive issues that ought be
resolved before IETF LC:

1. a new channel binding or requiring tls-session-hash (and I guess
   some explanatory text about why that is good/needed)

2. justify and possibly mandate an iteration count with which folks
   are happy

Tony - could you propose text for #1 and #2 or start threads to
resolve them. Feel free to shoot out any revisions you think make
sense whilst doing that. And once we're done with those, and have
a draft that reflects the consensus then I'll start IETF LC.

Cheers,
S.

> 
> Thanks,
> S.
> 
> [1] https://tools.ietf.org/html/draft-hansen-scram-sha256
> 
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
> 
> 