[radext] Fwd: New Version Notification for draft-dekok-radext-radiusv11-05.txt

Alan DeKok <aland@deployingradius.com> Wed, 19 April 2023 16:57 UTC

From: Alan DeKok <aland@deployingradius.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_5FC6943A-D81A-4D21-A65C-FC8236094176"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
Message-Id: <C4DA0DAF-15F6-4812-8CB0-86D801847C8D@deployingradius.com>
References: <168192341618.25034.5510187604094804837@ietfa.amsl.com>
To: radext@ietf.org
Date: Wed, 19 Apr 2023 12:57:18 -0400
Archived-At: <https://mailarchive.ietf.org/arch/msg/radext/aGWWQsa4AbllfOXmEHcxeZc0Omo>
Subject: [radext] Fwd: New Version Notification for draft-dekok-radext-radiusv11-05.txt
Precedence: list

  One more pass through WG feedback.

> Begin forwarded message:
> 
> From: internet-drafts@ietf.org
> Subject: New Version Notification for draft-dekok-radext-radiusv11-05.txt
> Date: April 19, 2023 at 12:56:56 PM EDT
> To: "Alan DeKok" <aland@freeradius.org>
> 
> 
> A new version of I-D, draft-dekok-radext-radiusv11-05.txt
> has been successfully submitted by Alan DeKok and posted to the
> IETF repository.
> 
> Name:		draft-dekok-radext-radiusv11
> Revision:	05
> Title:		RADIUS Version 1.1
> Document date:	2023-04-19
> Group:		radext
> Pages:		27
> URL:            https://www.ietf.org/archive/id/draft-dekok-radext-radiusv11-05.txt
> Status:         https://datatracker.ietf.org/doc/draft-dekok-radext-radiusv11/
> Html:           https://www.ietf.org/archive/id/draft-dekok-radext-radiusv11-05.html
> Htmlized:       https://datatracker.ietf.org/doc/html/draft-dekok-radext-radiusv11
> Diff:           https://author-tools.ietf.org/iddiff?url2=draft-dekok-radext-radiusv11-05
> 
> Abstract:
>   This document defines Application-Layer Protocol Negotiation
>   Extensions for use with RADIUS/TLS and RADIUS/DTLS.  These extensions
>   permit the negotiation of an additional application protocol for
>   RADIUS over (D)TLS.  No changes are made to RADIUS/UDP or RADIUS/TCP.
>   The extensions allow the negotiation of a transport profile where the
>   RADIUS shared secret is no longer used, and all MD5-based packet
>   signing and attribute obfuscation methods are removed.  When this
>   extension is used, the previous Authenticator field is repurposed to
>   contain an explicit request / response identifier, called a Token.
>   The Token also allows more than 256 packets to be outstanding on one
>   connection.
> 
>   This extension can be seen as a transport profile for RADIUS, as it
>   is not an entirely new protocol.  It uses the existing RADIUS packet
>   layout and attribute format without change.  As such, it can carry
>   all present and future RADIUS attributes.  Implementation of this
>   extension requires only minor changes to the protocol encoder and
>   decoder functionality.  The protocol defined by this extension is
>   named "RADIUS version 1.1", or "RADIUS/1.1".
> 
> 
> 
> 
> The IETF Secretariat
> 
>

[radext] Fwd: New Version Notification for draft-… Alan DeKok