Re: [radext] I-D Action: draft-dekok-radext-deprecating-radius-05.txt

  This document is minor word smithing over -04 based on WG feedback.  I hope to discuss some of these issues in Prague.

  I think there's no major controversy here.  The main blocking item for this document is that it should ideally be published along side 6614bis.

> On Oct 23, 2023, at 8:12 AM, internet-drafts@ietf.org wrote:
> 
> Internet-Draft draft-dekok-radext-deprecating-radius-05.txt is now available.
> It is a work item of the RADIUS EXTensions (RADEXT) WG of the IETF.
> 
>   Title:   Deprecating Insecure Practices in RADIUS
>   Author:  Alan DeKok
>   Name:    draft-dekok-radext-deprecating-radius-05.txt
>   Pages:   34
>   Dates:   2023-10-23
> 
> Abstract:
> 
>   RADIUS crypto-agility was first mandated as future work by RFC 6421.
>   The outcome of that work was the publication of RADIUS over TLS (RFC
>   6614) and RADIUS over DTLS (RFC 7360) as experimental documents.
>   Those transport protocols have been in wide-spread use for many years
>   in a wide range of networks.  They have proven their utility as
>   replacements for the previous UDP (RFC 2865) and TCP (RFC 6613)
>   transports.  With that knowledge, the continued use of insecure
>   transports for RADIUS has serious and negative implications for
>   privacy and security.
> 
>   This document formally deprecates using the User Datagram Protocol
>   (UDP) and of the Transmission Control Protocol (TCP) as transport
>   protocols for RADIUS.  These transports are permitted inside of
>   secure networks, but their use in secure networks is still
>   discouraged.  For all other environments, the use of secure
>   transports such as IPsec or TLS is mandated.  We also discuss
>   additional security issues with RADIUS deployments, and give
>   recommendations for practices which increase security and privacy.
> 
> The IETF datatracker status page for this Internet-Draft is:
> https://datatracker.ietf.org/doc/draft-dekok-radext-deprecating-radius/
> 
> There is also an HTML version available at:
> https://www.ietf.org/archive/id/draft-dekok-radext-deprecating-radius-05.html
> 
> A diff from the previous version is available at:
> https://author-tools.ietf.org/iddiff?url2=draft-dekok-radext-deprecating-radius-05
> 
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
> 
> 
> _______________________________________________
> radext mailing list
> radext@ietf.org
> https://www.ietf.org/mailman/listinfo/radext