Re: [kitten] New Version Notification for draft-howard-gss-sanon-01.txt

Nico Williams <nico@cryptonector.com> Tue, 07 April 2020 02:39 UTC

Return-Path: <nico@cryptonector.com>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B1BD3A1392 for <kitten@ietfa.amsl.com>; Mon, 6 Apr 2020 19:39:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.1
X-Spam-Level:
X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cryptonector.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 42yNS_nFKVyV for <kitten@ietfa.amsl.com>; Mon, 6 Apr 2020 19:39:31 -0700 (PDT)
Received: from black.elm.relay.mailchannels.net (black.elm.relay.mailchannels.net [23.83.212.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E44573A1390 for <kitten@ietf.org>; Mon, 6 Apr 2020 19:39:30 -0700 (PDT)
X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com
Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 241A3100ED0; Tue, 7 Apr 2020 02:39:30 +0000 (UTC)
Received: from pdx1-sub0-mail-a56.g.dreamhost.com (100-96-6-13.trex.outbound.svc.cluster.local [100.96.6.13]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 9EB67100EE7; Tue, 7 Apr 2020 02:39:29 +0000 (UTC)
X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com
Received: from pdx1-sub0-mail-a56.g.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:2500 (trex/5.18.6); Tue, 07 Apr 2020 02:39:30 +0000
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|nico@cryptonector.com
X-MailChannels-Auth-Id: dreamhost
X-Blushing-Drop: 2a34d5c13bd7a956_1586227169968_204533893
X-MC-Loop-Signature: 1586227169967:1786095233
X-MC-Ingress-Time: 1586227169967
Received: from pdx1-sub0-mail-a56.g.dreamhost.com (localhost [127.0.0.1]) by pdx1-sub0-mail-a56.g.dreamhost.com (Postfix) with ESMTP id 60C8D8487F; Mon, 6 Apr 2020 19:39:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=cryptonector.com; h=date :from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to:content-transfer-encoding; s= cryptonector.com; bh=FRg30OrsAEURIP5wwOKIoO14LtA=; b=StdNcSDW09y ujOoPCY+2UBoeve2UEATz1r2Bq0NnbX3pAcoKrdORU3Yh0PQ7BoTSBI9E0JRbpor YDhEzhSWPPXQHxoY/UymvSMvFNX+l9Oqj+UUSu0NuK2HcmRUtDLt+KIcHdkRny8F +kkKaM2Yh2gdMGEnKbf2KqzULQ8NGn+Q=
Received: from localhost (unknown [24.28.108.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: nico@cryptonector.com) by pdx1-sub0-mail-a56.g.dreamhost.com (Postfix) with ESMTPSA id 7076C84871; Mon, 6 Apr 2020 19:39:25 -0700 (PDT)
Date: Mon, 06 Apr 2020 21:39:23 -0500
X-DH-BACKEND: pdx1-sub0-mail-a56
From: Nico Williams <nico@cryptonector.com>
To: Luke Howard <lukeh@padl.com>
Cc: Jeffrey Altman <jaltman@auristor.com>, "kitten@ietf.org" <kitten@ietf.org>
Message-ID: <20200407023922.GS18021@localhost>
References: <B2497A4F-81B3-42F9-AED1-CFECF1D9F7C0@padl.com> <20200405234929.GD18021@localhost> <38ED72E1-3361-4242-9923-C3BE61698BE0@padl.com> <20200406011026.GG18021@localhost> <E5951DC2-569F-48FB-8458-50D0CC8A4BAC@padl.com> <4E7EFAC6-3E51-4FC7-B0F1-2F886BBC1F56@lukehoward.com> <20200406152828.GK18021@localhost> <47052E79-71C9-482E-AF42-D46C44F9AA47@padl.com> <ccc68323-89a7-0bc8-a0b2-b785effb2752@auristor.com> <472D27C4-7DFA-4BE5-8BE6-23D42C8E0E55@padl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
In-Reply-To: <472D27C4-7DFA-4BE5-8BE6-23D42C8E0E55@padl.com>
User-Agent: Mutt/1.9.4 (2018-02-28)
X-VR-OUT-STATUS: OK
X-VR-OUT-SCORE: -100
X-VR-OUT-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeduhedrudeggdehjecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucggtfgfnhhsuhgsshgtrhhisggvpdfftffgtefojffquffvnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenucfjughrpeffhffvuffkfhggtggugfgjfgesthekredttderjeenucfhrhhomheppfhitghoucghihhllhhirghmshcuoehnihgtohestghrhihpthhonhgvtghtohhrrdgtohhmqeenucfkphepvdegrddvkedruddtkedrudekfeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhhouggvpehsmhhtphdphhgvlhhopehlohgtrghlhhhoshhtpdhinhgvthepvdegrddvkedruddtkedrudekfedprhgvthhurhhnqdhprghthheppfhitghoucghihhllhhirghmshcuoehnihgtohestghrhihpthhonhgvtghtohhrrdgtohhmqedpmhgrihhlfhhrohhmpehnihgtohestghrhihpthhonhgvtghtohhrrdgtohhmpdhnrhgtphhtthhopehnihgtohestghrhihpthhonhgvtghtohhrrdgtohhm
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/kitten/pmnIt3ashFT9xrH1PwlFgQ9UJs4>
Subject: Re: [kitten] New Version Notification for draft-howard-gss-sanon-01.txt
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Apr 2020 02:39:33 -0000

On Tue, Apr 07, 2020 at 11:59:59AM +1000, Luke Howard wrote:
> We seem to have one vote for NegoEx-only, one against; I’m neutral
> (slight preference towards NegoEx-only). What to do?

IMO you can simply not even mention it.  If you must say anything about
negotiation, you can speak of it generically -- after all, GSS envisions
arbitrary mechanism-negotiation pseudo-mechanisms, not just SPNEGO, or
SPNEGO+NegoEx.

Nico
--