Re: [Reap] [saag] PSA: New list for discussing EAP related methods

That sounds like the best plan.

Thank you,
Kathleen 

Sent from my iPhone

> On Oct 26, 2017, at 9:16 PM, Bernard Aboba <bernard.aboba@gmail.com> wrote:
> 
> Yes, the EMU WG  list has been used for discussion of EAP methods since the WG closed. 
> 
> That list is a better venue for discussion of EAP  methods than a new REAP list, so as to ensure that proper attention is paid to backward compatibility, IPR, security properties and other critical aspects of EAP method design. 
> 
> After all, we are talking about a protocol that is 20+ years old that is implemented on billions of devices, many of which utilize open-source.  
> 
> 
> 
> 
> 
> 
> 
> 
>> On Thu, Oct 26, 2017 at 11:53 AM, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:
>> On Thu, Oct 26, 2017 at 1:16 PM, Mohit Sethi <mohit.m.sethi@ericsson.com> wrote:
>> > Hi Bernard,
>> >
>> > The EAP-TLS 1.3 document is a very rough drafty version that was submitted
>> > before the cut-off for the last IETF. As you rightly point out, it has the
>> > skeleton and a lot of material from RFC5216, and still many important
>> > details are missing.
>> >
>> > The purpose of this list is to exactly receive these kind of comments.
>> > Should RFC5216 be updated or obsoleted by this draft. And it would be great
>> > if we can have your contributions to the document. We will definitely add an
>> > acknowledgement section and contact the authors of RFC5216 to see if they
>> > can contribute and comment. We plan to have more EAP related contributions
>> > in the near future. We discussed this with the Security ADs and thought that
>> > a separate list would be appropriate to get feedback/criticism and
>> > contributions from the folks interested.
>> 
>> I'm sorry, I didn't realize that a revision of 5216 was involved and
>> that the authors were not notified at the onset as is normal practice
>> in case they want to continue as authors.  Thank you for spotting this
>> issue Bernard.
>> 
>> Is there an existing list that should be used?  Is there adequate
>> overlap in objectives and personnel?
>> 
>> Thank you,
>> Kathleen
>> 
>> >
>> > --Mohit
>> >
>> >
>> > On 10/26/2017 06:51 PM, Bernard Aboba wrote:
>> >
>> > There are existing functioning IETF mailing lists relating to EAP.
>> >
>> > Why are you starting yet another one?
>> >
>> > From what I can tell, the EAP-TLS 1.3 draft is merely a copy of RFC 5216
>> > (with no acknowledgement to the original authors) stating that EAP-TLS
>> > implementations must support TLS 1.3.
>> >
>> > This is ridiculous because there are 1+ Billion existing implementations out
>> > there that
>> >
>> >
>> > On Thu, Oct 26, 2017 at 6:02 AM, Mohit Sethi <mohit.m.sethi@ericsson.com>
>> > wrote:
>> >>
>> >> Dear all,
>> >>
>> >> We have started a mailing list for discussing new EAP related work that
>> >> currently has no obvious home. The mailing list is called REAP (Renew EAP)
>> >> reap@ietf.org and you can subscribe here:
>> >> https://www.ietf.org/mailman/listinfo/reap
>> >>
>> >> Recently several new EAP methods have been proposed. These include for
>> >> example:
>> >>
>> >> EAP-TLS 1.3: https://tools.ietf.org/html/draft-mattsson-eap-tls13-00
>> >>
>> >> EAP-NOOB: https://tools.ietf.org/html/draft-aura-eap-noob-02
>> >>
>> >> EAP-SASL: https://tools.ietf.org/html/draft-vanrein-eap-sasl-00
>> >>
>> >> The list serves as a venue for discussion of these and other EAP related
>> >> drafts that will be submitted in the near future. As courtesy, we will post
>> >> any new draft to SAAG, but we plan to continue the discussion only on the
>> >> REAP mailing list. We have also asked for a short presentation slot during
>> >> SECDISPATCH at IETF 100 in Singapore.
>> >>
>> >> Comments, early feedback, and discussion on existing or new work is more
>> >> than welcome.
>> >>
>> >> --Mohit
>> >>
>> >> _______________________________________________
>> >> saag mailing list
>> >> saag@ietf.org
>> >> https://www.ietf.org/mailman/listinfo/saag
>> >
>> >
>> >
>> >
>> > _______________________________________________
>> > saag mailing list
>> > saag@ietf.org
>> > https://www.ietf.org/mailman/listinfo/saag
>> >
>> >
>> >
>> > _______________________________________________
>> > saag mailing list
>> > saag@ietf.org
>> > https://www.ietf.org/mailman/listinfo/saag
>> >
>> 
>> 
>> 
>> --
>> 
>> Best regards,
>> Kathleen
> 