Re: [kitten] WGLC on draft-ietf-kitten-cammac-03
Greg Hudson <ghudson@mit.edu> Mon, 12 October 2015 17:21 UTC
Return-Path: <ghudson@mit.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 428231A21BD for <kitten@ietfa.amsl.com>; Mon, 12 Oct 2015 10:21:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.211
X-Spam-Level:
X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uH0ONsRw4E2I for <kitten@ietfa.amsl.com>; Mon, 12 Oct 2015 10:21:03 -0700 (PDT)
Received: from dmz-mailsec-scanner-8.mit.edu (dmz-mailsec-scanner-8.mit.edu [18.7.68.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD6FD1A8A45 for <kitten@ietf.org>; Mon, 12 Oct 2015 10:21:02 -0700 (PDT)
X-AuditID: 12074425-f79816d000004571-c6-561bebfdaf70
Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-8.mit.edu (Symantec Messaging Gateway) with SMTP id C3.98.17777.DFBEB165; Mon, 12 Oct 2015 13:21:01 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id t9CHL0jB002713; Mon, 12 Oct 2015 13:21:01 -0400
Received: from [18.101.8.74] (vpn-18-101-8-74.mit.edu [18.101.8.74]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id t9CHKw8Q025672 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 12 Oct 2015 13:21:00 -0400
To: Benjamin Kaduk <kaduk@mit.edu>, kitten@ietf.org
References: <alpine.GSO.1.10.1510041931331.26829@multics.mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <561BEBFA.9090000@mit.edu>
Date: Mon, 12 Oct 2015 13:20:58 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
MIME-Version: 1.0
In-Reply-To: <alpine.GSO.1.10.1510041931331.26829@multics.mit.edu>
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: 7bit
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrPIsWRmVeSWpSXmKPExsUixCmqrfv3tXSYQcttNYujm1exODB6LFny kymAMYrLJiU1J7MstUjfLoErY9rtTSwFT1grrjyazN7AeJeli5GTQ0LAROLV0R9sELaYxIV7 64FsLg4hgcVMEov37INyNjJKTD2wkxXCOcgksfpeIzNIi7CApcSVE61MILaIgLHE3Z83wMYK CThKbHg2C6yGTUBZYv3+rWBxXgE1iZXT+9hBbBYBVYlbJyezgtiiAhESp86+ZYOoEZQ4OfMJ WD2ngJPEu/51YPXMAnoSO67/YoWw5SW2v53DPIFRYBaSlllIymYhKVvAyLyKUTYlt0o3NzEz pzg1Wbc4OTEvL7VI10IvN7NELzWldBMjKCzZXVR3ME44pHSIUYCDUYmHl2OLVJgQa2JZcWXu IUZJDiYlUd7gl9JhQnxJ+SmVGYnFGfFFpTmpxYcYJTiYlUR4lSYC5XhTEiurUovyYVLSHCxK 4rybfvCFCAmkJ5akZqemFqQWwWRlODiUJHgzXwE1ChalpqdWpGXmlCCkmTg4QYbzAA1vB6nh LS5IzC3OTIfIn2LU5Vjw4/ZaJiGWvPy8VClx3qkgRQIgRRmleXBzwOkklcPrFaM40FvCvPtB qniAqQhu0iugJUxAS4zYpUCWlCQipKQaGJfoRtyOPL+a4WHFA1GnbQynJBlC9wbMYWn2jG8M 1Qv6/clEUM69y+AcW5fd0f4rsi3Vn9SErp/WLOsomVgb+WeWTvD3IxauF9k3y/smz38fsv/V gkseu/P98l7suFmhPT9JIPW7lOXpmxKlouttWup/itXoT71uUMgVZeA+51TafNkYuyxlJZbi jERDLeai4kQA43cNkQIDAAA=
Archived-At: <http://mailarchive.ietf.org/arch/msg/kitten/pUBepFl6P2yrNHfjGrbeybSWsrk>
Subject: Re: [kitten] WGLC on draft-ietf-kitten-cammac-03
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Oct 2015 17:21:04 -0000
On 10/04/2015 08:37 PM, Benjamin Kaduk wrote: > This message begins the second Working Group Last Call (WGLC) of "Kerberos > Authorization Data Container Authenticated by Multiple MACs" > <draft-ietf-kitten-cammac-03>. A previous version of this document was > approved by the IESG for publication, but while the document was in the > RFC Editor queue, an error was discovered regarding processing CAMMACs in > cross-realm TGTs [0] that required changes to the document, so it was > brought back to the working group for further modifications. The new security considerations next looks good to me. (No great surprise since I had reviewed it prior to the draft update, but I re-read it for the WGLC and it still looks fine.)
- [kitten] WGLC on draft-ietf-kitten-cammac-03 Benjamin Kaduk
- Re: [kitten] WGLC on draft-ietf-kitten-cammac-03 Greg Hudson
- Re: [kitten] WGLC on draft-ietf-kitten-cammac-03 Benjamin Kaduk