Re: [kitten] draft-ietf-kitten-iakerb-02

Greg Hudson <ghudson@mit.edu> Tue, 28 October 2014 16:25 UTC

Return-Path: <ghudson@mit.edu>
X-Original-To: kitten@ietfa.amsl.com
Delivered-To: kitten@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26D131A8F4B for <kitten@ietfa.amsl.com>; Tue, 28 Oct 2014 09:25:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.211
X-Spam-Level:
X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ryqnF-_CdQuM for <kitten@ietfa.amsl.com>; Tue, 28 Oct 2014 09:25:54 -0700 (PDT)
Received: from dmz-mailsec-scanner-8.mit.edu (dmz-mailsec-scanner-8.mit.edu [18.7.68.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA59F1A8AF5 for <kitten@ietf.org>; Tue, 28 Oct 2014 09:24:07 -0700 (PDT)
X-AuditID: 12074425-f79e46d000002583-66-544fc3265170
Received: from mailhub-auth-4.mit.edu ( [18.7.62.39]) (using TLS with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-8.mit.edu (Symantec Messaging Gateway) with SMTP id A2.B7.09603.623CF445; Tue, 28 Oct 2014 12:24:06 -0400 (EDT)
Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) by mailhub-auth-4.mit.edu (8.13.8/8.9.2) with ESMTP id s9SGO67Z002737 for <kitten@ietf.org>; Tue, 28 Oct 2014 12:24:06 -0400
Received: from localhost (equal-rites.mit.edu [18.18.1.59]) (authenticated bits=0) (User authenticated as ghudson@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id s9SGO5O4017832 for <kitten@ietf.org>; Tue, 28 Oct 2014 12:24:05 -0400
From: Greg Hudson <ghudson@mit.edu>
To: kitten@ietf.org
References: <alpine.GSO.1.10.1410141053220.27826@multics.mit.edu>
Date: Tue, 28 Oct 2014 12:23:41 -0400
Message-ID: <x7d4muo40z6.fsf@equal-rites.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrPIsWRmVeSWpSXmKPExsUixG6nrqt22D/E4EW/ocXRzatYHBg9liz5 yRTAGMVlk5Kak1mWWqRvl8CV0dO7lK3gOVPFs/2LWRoYVzJ1MXJySAiYSLTf2QJli0lcuLee rYuRi0NIYDaTxLy725ggnOOMEsdOToZyOpgk9p1vZwFpYRNQlli/fyuYLSIgLLF76ztmEFtY wFDi+YTfjCC2kICjRFfzRFYQm0VAVeLYjKtgcV6gmol72lkhbEGJkzOfgM1hFpCQOPjiBfME Rt5ZSFKzkKQWMDKtYpRNya3SzU3MzClOTdYtTk7My0st0rXQy80s0UtNKd3ECA4bF9UdjBMO KR1iFOBgVOLhXdjnHyLEmlhWXJl7iFGSg0lJlNf4EFCILyk/pTIjsTgjvqg0J7X4EKMEB7OS CG/YbqAcb0piZVVqUT5MSpqDRUmcd9MPvhAhgfTEktTs1NSC1CKYrAwHh5IEbxfIUMGi1PTU irTMnBKENBMHJ8hwHqDhrSA1vMUFibnFmekQ+VOMuhwtTW97mYRY8vLzUqXEectAigRAijJK 8+DmwOL9FaM40FvCvKogVTzAVAE36RXQEiagJUbTfECWlCQipKQaGKNcemZZrsuwrYioPXPq TNcFoea97QEqzHOPcjIE7DL+zhP/vkNgR+2yzIcz1MuctmXwV8+LWH6/80D3zT3M7yQUfpWz M4nVd99w1Dv8WvrC9thbfbNZv1xMCetedODupIy9fh8ZGb14mbK+z38tzvT9XD8rc078gV7d a5HMlwrkvtvFp77lVWIpzkg01GIuKk4EAAHha4TSAgAA
Archived-At: http://mailarchive.ietf.org/arch/msg/kitten/wvxgpJ9dXzwLDAHxaylWs7vc08Y
Subject: Re: [kitten] draft-ietf-kitten-iakerb-02
X-BeenThere: kitten@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Common Authentication Technologies - Next Generation <kitten.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/kitten>, <mailto:kitten-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/kitten/>
List-Post: <mailto:kitten@ietf.org>
List-Help: <mailto:kitten-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/kitten>, <mailto:kitten-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Oct 2014 16:25:57 -0000

While examining the OIDs used by various Kerberos-related ASN.1 modules,
I noticed that the IAKERB draft does not define a full ASN.1 module at
all; it only presents fragments for IAKERB-HEADER and KRB-FINISHED.
There should be an appendix in the draft containing a full module, with
OID and appropriate imports declarations for the RFC 4120 types used.