Re: [radext] Liaison to government agencies

Alan DeKok <aland@deployingradius.com> Fri, 02 December 2022 13:17 UTC

Return-Path: <aland@deployingradius.com>
X-Original-To: radext@ietfa.amsl.com
Delivered-To: radext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 585ACC14F745 for <radext@ietfa.amsl.com>; Fri, 2 Dec 2022 05:17:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Algc_FzDhoDI for <radext@ietfa.amsl.com>; Fri, 2 Dec 2022 05:16:56 -0800 (PST)
Received: from mail.networkradius.com (mail.networkradius.com [62.210.147.122]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A25DC14F741 for <radext@ietf.org>; Fri, 2 Dec 2022 05:16:55 -0800 (PST)
Received: from smtpclient.apple (135-23-95-173.cpe.pppoe.ca [135.23.95.173]) by mail.networkradius.com (Postfix) with ESMTPSA id 479B4317; Fri, 2 Dec 2022 13:16:50 +0000 (UTC)
Authentication-Results: NetworkRADIUS; dmarc=none (p=none dis=none) header.from=deployingradius.com
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.1\))
From: Alan DeKok <aland@deployingradius.com>
In-Reply-To: <CAOW+2dtzAZAYr5prKPzQf1XgFXW20_VFSP7FL5FcjLqLmCLqNg@mail.gmail.com>
Date: Fri, 02 Dec 2022 08:16:48 -0500
Cc: Margaret Cullen <mrcullen42@gmail.com>, radext@ietf.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <714E38D0-9DC4-4FEF-B729-7DFC30AC5411@deployingradius.com>
References: <4ce6d292-bb34-5dd7-7b8b-d43c282658f1@iea-software.com> <329FE6EA-C1E6-4E16-8D0C-A68C32B67FB9@gmail.com> <FC5C81F9-FEB5-4F9C-9A02-36837B7ABC09@deployingradius.com> <CAOW+2dtANzJDbAjmhHiz_m1pkk+SyfHu5uZ_ddp4PPMi17=0-A@mail.gmail.com> <E59F655C-ADC3-465A-BC9E-4445135BFE97@deployingradius.com> <2f8a0921-2e9e-751e-4f5d-42c5c9c3cb8a@dfn.de> <b96210fb-8a59-2606-bb0c-7cf365fb23e0@iea-software.com> <81A7763B-B2AE-4FBE-9A5E-1234C87393AE@deployingradius.com> <CAOW+2dvg2z9e_X0QzB+gnxDRK9wMdZy=S4x1LbsXzfP6AxrwtA@mail.gmail.com> <b036f5fd-60fc-352e-bf91-d832adba2545@cs.tcd.ie> <CAOW+2dvbercDhpHGhud8wbTOzVem+=CZ3qY2cat9Wno6G7VgjQ@mail.gmail.com> <ac383e60-b8b4-f46c-4b3c-4834fc4c827d@cs.tcd.ie> <CAOW+2dvkaHgjMPkA4J4hC2NsC=VqEJFOs2a0WPiP2Y4HQ7ppig@mail.gmail.com> <30e717f9-5d7d-2846-c87d-42b59b7f5b25@cs.tcd.ie> <F6961506-FDDF-4A22-A480-ABF4179A5366@gmail.com> <78B99A3A-A436-41C9-9E05-67CDDF7C80A0@gmail.com> <CAOW+2dtzAZAYr5prKPzQf1XgFXW20_VFSP7FL5FcjLqLmCLqNg@mail.gmail.com>
To: Bernard Aboba <bernard.aboba@gmail.com>
X-Mailer: Apple Mail (2.3696.120.41.1.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/radext/xjlmDOoR84yvH0KZJ4o0Du83bGQ>
Subject: Re: [radext] Liaison to government agencies
X-BeenThere: radext@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: RADIUS EXTensions working group discussion list <radext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/radext>, <mailto:radext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/radext/>
List-Post: <mailto:radext@ietf.org>
List-Help: <mailto:radext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/radext>, <mailto:radext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Dec 2022 13:17:00 -0000

On Dec 1, 2022, at 10:46 PM, Bernard Aboba <bernard.aboba@gmail.com> wrote:
> In the hallowed tradition of IETF acronyms, FADIUS could stand for "F(P)hase out insecure RADIUS!". 
> 
> Example usage: "Still using RADIUS? Join the FADIUS movement!"

  Hmm...  Or maybe RADIUS2, because Diameter is taken?

  On a more serious note, perhaps we could follow the tradition of the ALPN registry:

https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml#alpn-protocol-ids

  Perhaps "radius/1.0" and "radius/1.1" would work.  Simple, boring, and practical.

  Alan DeKok.