Re: [kitten] I-D: Best practices for password hashing and storage

Benjamin Kaduk <kaduk@mit.edu> Thu, 30 April 2020 03:14 UTC

Return-Path: <kaduk@mit.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D78523A0EBD for <kitten@ietfa.amsl.com>; Wed, 29 Apr 2020 20:14:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gdF7M1QKc-pm for <kitten@ietfa.amsl.com>; Wed, 29 Apr 2020 20:14:21 -0700 (PDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D6523A0EE8 for <kitten@ietf.org>; Wed, 29 Apr 2020 20:14:19 -0700 (PDT)
Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 03U3EFBQ030187 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 29 Apr 2020 23:14:18 -0400
Date: Wed, 29 Apr 2020 20:14:15 -0700
From: Benjamin Kaduk <kaduk@mit.edu>
To: Sam Whited <sam@samwhited.com>
Cc: Robbie Harwood <rharwood@redhat.com>, KITTEN Working Group <kitten@ietf.org>
Message-ID: <20200430031415.GJ27494@kduck.mit.edu>
References: <feda3e13-dc28-4f8e-8360-90853f649add@www.fastmail.com> <jlg7dxy2rpx.fsf@redhat.com> <23661358-b62e-40ed-b209-0551edf4ac8f@www.fastmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <23661358-b62e-40ed-b209-0551edf4ac8f@www.fastmail.com>
User-Agent: Mutt/1.12.1 (2019-06-15)
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/oVx3r83G1D0k0_xSWoN-Xae-zdk>
Subject: Re: [kitten] I-D: Best practices for password hashing and storage
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Apr 2020 03:14:24 -0000

On Wed, Apr 29, 2020 at 05:37:06PM -0400, Sam Whited wrote:
> On Wed, Apr 29, 2020, at 12:15, Robbie Harwood wrote:
> > In order for adoption to occur, I'd like to see expressed interest
> > from multiple folks in the WG (and a formal call for adoption).
> 
> That sounds good; how does that normally happen? Should I start hounding
> people, or is this email sufficient? (/cc Dave Cridland who I think is
> involved and who encouraged me to submit this I-D).

I would probably give the original mail a week or so bake time and see what
response it elicits before going out of your way to get further review.
That said, if you know of people who would be interested but are not on
this list, by all means invite them to comment here.

-Ben