Re: [Netconf] WGLC??for??draft-ietf-netconf-tls-04.txt

On Tue, Sep 30, 2008 at 06:22:49PM +0200, badra@isima.fr wrote:

> I think the "applicability" or the benefits of using pre-shared key based
> authentication have been explained in the Introduction of [RFC4279]. To
> recall of them, would be sufficient to insert the following text at the
> end of the first paragraph of Section 3? (The use of PSK is a MAY, not a
> SHOULD)
> 
> "The benefits of pre-shared symmetric-key vs. public-/private-key pair
> based authentication for the key exchange in TLS have been explained in
> the Introduction of [RFC4279]".

If you add an explicit pointer to the benefits of PSKs by pointing to
the Introduction of RFC 4279, then I like to request that you also add
an explicit pointer to the applicability statement contained in
section 1.1 of RFC 4279. The text starts as follows:

   The ciphersuites defined in this document are intended for a rather
   limited set of applications, usually involving only a very small
   number of clients and servers.  Even in such environments, other
   alternatives may be more appropriate.

I assume we have agreement that PSKs following RFC 4279 are on
optional to implement feature and my preference would be to trust
implementors that they go and read RFC 4279 and then decide wether
PSKs are in their interest or not without highlighting any benefits
of drawbacks in the NETCONF transport mapping itself.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>
_______________________________________________
Netconf mailing list
Netconf@ietf.org
https://www.ietf.org/mailman/listinfo/netconf