IETF Logo Mail Archive

Re: [Ietf-krb-wg] COMMENT: <draft-ietf-krb-wg-anon-12.txt>

Jeffrey Hutzelman <jhutz@cmu.edu> Fri, 08 October 2010 15:53 UTC

Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com
Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 704BC3A689E for <ietfarch-krb-wg-archive@core3.amsl.com>; Fri, 8 Oct 2010 08:53:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.558
X-Spam-Level:
X-Spam-Status: No, score=-106.558 tagged_above=-999 required=5 tests=[AWL=0.041, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HfadiyJbFxCh for <ietfarch-krb-wg-archive@core3.amsl.com>; Fri, 8 Oct 2010 08:53:28 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id 2E87F3A6899 for <krb-wg-archive@lists.ietf.org>; Fri, 8 Oct 2010 08:53:28 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id 2C50754; Fri, 8 Oct 2010 10:54:33 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id 9DC9A64; Fri, 8 Oct 2010 10:54:32 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id 6254980036; Fri, 8 Oct 2010 10:54:32 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id B903780032 for <ietf-krb-wg@lists.anl.gov>; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
Received: by mailhost.anl.gov (Postfix) id AA47C52; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
Delivered-To: ietf-krb-wg@anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.anl.gov (Postfix) with ESMTP id A5CCB54 for <ietf-krb-wg@anl.gov>; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 9F4D652 for <ietf-krb-wg@anl.gov>; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 89CC97CC060; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 23428-04; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay.anl.gov (Postfix) with ESMTP id 720107CC05C for <ietf-krb-wg@anl.gov>; Fri, 8 Oct 2010 10:54:30 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhMCAP/arkyAAtnGe2dsb2JhbACiPxUBARYiBR20WYhmhUcE
X-IronPort-AV: E=Sophos;i="4.57,303,1283749200"; d="scan'208";a="48661776"
Received: from smtp03.srv.cs.cmu.edu ([128.2.217.198]) by mailgateway.anl.gov with ESMTP; 08 Oct 2010 10:54:30 -0500
Received: from atlantis-home.pc.cs.cmu.edu (SIRIUS.FAC.CS.CMU.EDU [128.2.216.216]) (authenticated bits=0) by smtp03.srv.cs.cmu.edu (8.13.6/8.13.6) with ESMTP id o98FsS7e010694 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 8 Oct 2010 11:54:29 -0400 (EDT)
Date: Fri, 08 Oct 2010 11:54:25 -0400
From: Jeffrey Hutzelman <jhutz@cmu.edu>
To: Peter Saint-Andre <stpeter@stpeter.im>, iesg@ietf.org
Message-ID: <65243DB5F3C73051A4D7C632@atlantis.pc.cs.cmu.edu>
In-Reply-To: <20101005195433.25677.22116.idtracker@localhost>
References: <20101005195433.25677.22116.idtracker@localhost>
X-Mailer: Mulberry/4.0.8 (Linux/x86)
MIME-Version: 1.0
Content-Disposition: inline
X-Scanned-By: mimedefang-cmuscs on 128.2.217.198
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Cc: ietf-krb-wg@anl.gov, krb-wg-chairs@tools.ietf.org, draft-ietf-krb-wg-anon@tools.ietf.org, jhutz@cmu.edu
Subject: Re: [Ietf-krb-wg] COMMENT: <draft-ietf-krb-wg-anon-12.txt>
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: ietf-krb-wg-bounces@lists.anl.gov
Errors-To: ietf-krb-wg-bounces@lists.anl.gov

--On Tuesday, October 05, 2010 12:54:33 PM -0700 Peter Saint-Andre 
<stpeter@stpeter.im> wrote:

> Comment:
> The Security Considerations note that "Because there are plaintext parts
> of the tickets that are exposed on the wire, such matching by a third
> party observer is relatively straightforward." Presumably the use of
> transport layer security would minimize the attack surface here, so at
> least an informative reference to draft-josefsson-kerberos5-starttls
> might be appropriate.

I agree that a reference to some method for protecting against such 
observers would be appropriate.  However, that draft is not the only such 
method, so I think I want to bring this back to the working group to 
discuss.

-- Jeff
_______________________________________________
ietf-krb-wg mailing list
ietf-krb-wg@lists.anl.gov
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

v2.23.0 | Report a Bug | By Email