Re: [radext] Issue with draft-ietf-radext-radius-fragmentation, pre-authorization phase and authentication attributes.

Sam Hartman <hartmans@painless-security.com> Mon, 03 March 2014 09:41 UTC

Return-Path: <hartmans@painless-security.com>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E8C41A0D99 for <radext@ietfa.amsl.com>; Mon, 3 Mar 2014 01:41:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.447
X-Spam-Level:
X-Spam-Status: No, score=-2.447 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.547] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HYmXaIp3zAHJ for <radext@ietfa.amsl.com>; Mon, 3 Mar 2014 01:41:54 -0800 (PST)
Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id E1D331A0DA0 for <radext@ietf.org>; Mon, 3 Mar 2014 01:41:53 -0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by mail.painless-security.com (Postfix) with ESMTP id 543DC206A3; Mon, 3 Mar 2014 04:37:28 -0500 (EST)
Received: from mail.painless-security.com ([127.0.0.1]) by localhost (mail.suchdamage.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YTWlXE0UU_Jh; Mon, 3 Mar 2014 04:37:28 -0500 (EST)
Received: from carter-zimmerman.suchdamage.org (dhcp-9ca7.meeting.ietf.org [31.133.156.167]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS; Mon, 3 Mar 2014 04:37:28 -0500 (EST)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id AA72483E07; Mon, 3 Mar 2014 04:41:49 -0500 (EST)
From: Sam Hartman <hartmans@painless-security.com>
To: Alejandro Perez Mendez <alex@um.es>
References: <53107CBB.3020407@um.es> <53134D64.7080304@restena.lu> <53143367.6090001@um.es>
Date: Mon, 03 Mar 2014 04:41:49 -0500
In-Reply-To: <53143367.6090001@um.es> (Alejandro Perez Mendez's message of "Mon, 03 Mar 2014 08:46:47 +0100")
Message-ID: <tsl61nvei02.fsf@mit.edu>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Archived-At: http://mailarchive.ietf.org/arch/msg/radext/NAw4L2uJ9K-VQ5nreTpeh1TOUJA
Cc: Stefan Winter <stefan.winter@restena.lu>, "radext@ietf.org" <radext@ietf.org>
Subject: Re: [radext] Issue with draft-ietf-radext-radius-fragmentation, pre-authorization phase and authentication attributes.
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/radext/>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Mar 2014 09:41:58 -0000

I don't support adding phony state attributes in the first packet of
fragmentation.
Presence or absence of state should be an indicator to everyone involved
(proxies, end servers) that this is an ongoing conversation.


--Sam