[regext] FW: I-D Action: draft-ietf-regext-login-security-08.txt

"Gould, James" <jgould@verisign.com> Thu, 30 January 2020 14:45 UTC

Return-Path: <jgould@verisign.com>
X-Original-To: regext@ietfa.amsl.com
Delivered-To: regext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8CD4120103; Thu, 30 Jan 2020 06:45:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.3
X-Spam-Level:
X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x4UlqLLICRJN; Thu, 30 Jan 2020 06:45:03 -0800 (PST)
Received: from mail5.verisign.com (mail5.verisign.com [69.58.187.31]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EED71200FE; Thu, 30 Jan 2020 06:45:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=verisign.com; l=3564; q=dns/txt; s=VRSN; t=1580395503; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=947fIZvFFxgp3q7qPcQTqmvepw00lQPwcFLpSWF5V4o=; b=BMV8y8vBksSopP0TIZlDZD+6nHfZcPUKgojFXObh1bfr8cWvIF7irrwL WyJnkTLGFPuodgmk9HA4mJ/FQ5Z38fDJtzzUlXC0MT4BCR2oTO+GbeUCa eYM4QZ/psgoUrLVrRFzlQ/BkQ7b4WWC4zwIMdrHgLEeE7LvQZ4+fDgCMn 6CP4KwVQRuv2MsOfOi60USTDwPBuJvOhpx9CpvyTnboWSYNkFuzeh1xwW 6aMooMHLVgh2UUPxAaDTNjqsYkQo+V4h3GJTP/M7PVG1JvMsDTy59mZ4d yWs3lK3g1zZuy0WwEuTWoD4ef7MJaJKR9RwFkwy7xdjkfihsBFqyuuS8H Q==;
IronPort-SDR: GChv20zQ6ZvGk5lUXGyO2MJ/x5oPJRKunwy+VAPhuDMoVhT+sfZ/NIlFR5iRsDMQzphIsYbfK1 8zahILFh5tsJbggvMnRKsG1tnO7/S56yW1dz9rHDT4MubXqUewaKkBTZ+g7Hf5moylcJkpOh1e Gc2taOvjRDQi/wV6GjGfESpDmzxANKYgJ5a6/YsrB+XwphD4AL8nDTMh1ssvPcQY8dVZOIGC6W CmxJqYjJJ1VtGJSSkqKcAlxbLhyWAZuwT01ajjaORgshbUy4massEnOWGTu62p0mVbvl7v77Tx 5lk=
X-IronPort-AV: E=Sophos;i="5.70,382,1574139600"; d="scan'208";a="537341"
IronPort-PHdr: 9a23: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
X-IPAS-Result: A2FUBAC56zJe/zCZrQpiAx4BCxyFEIExCoQKkHeEE5cOFxsKCQEBAQEBAQEBAQcBGA0KAQECg3lFGYI8OBMCAwEBCwEBAQQBAQEBAQUDAQEBAoYgDII7KQFpLwk5AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBBQIIBzQZBzUSAR8GAQEhETodAQgaAhIBARICBCULFQYBBgUEARKDJgGDCqxngTKEOQIOQYU0gQ4qjDqBQj6BEScMFIJMPoJkAQECAQEYgV4KJgECBYJBMoIsBJBSnwsDB4I5h0OJWIU6gkh4hxSQLo5gh1RoKJIwAgQCBAUCFYFpgXtwFRohKgGCQQlHGA2SEIUUhQgBNnQKAwEki18PFYENgRABAQ
Received: from BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) by BRN1WNEX01.vcorp.ad.vrsn.com (10.173.153.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1779.2; Thu, 30 Jan 2020 09:44:39 -0500
Received: from BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d]) by BRN1WNEX01.vcorp.ad.vrsn.com ([fe80::a89b:32d6:b967:337d%5]) with mapi id 15.01.1779.002; Thu, 30 Jan 2020 09:44:39 -0500
From: "Gould, James" <jgould@verisign.com>
To: The IESG <iesg@ietf.org>, "draft-ietf-regext-login-security@ietf.org" <draft-ietf-regext-login-security@ietf.org>, Joseph Yee <jyee@afilias.info>, "regext@ietf.org" <regext@ietf.org>, "regext-chairs@ietf.org" <regext-chairs@ietf.org>
Thread-Topic: [regext] I-D Action: draft-ietf-regext-login-security-08.txt
Thread-Index: AQHV13vMvHS/RYtEbEqCwlA1sfB18Q==
Date: Thu, 30 Jan 2020 14:44:39 +0000
Message-ID: <C700B17F-893B-4540-B267-7FAA58BCC98F@verisign.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.10.12.200112
x-originating-ip: [10.170.148.18]
Content-Type: text/plain; charset="utf-8"
Content-ID: <FDB166B1748C664B9FAD0F070F78CFB8@verisign.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/regext/LR-D6SpFYrgV_uprghE7-KMoQak>
Subject: [regext] FW: I-D Action: draft-ietf-regext-login-security-08.txt
X-BeenThere: regext@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Registration Protocols Extensions <regext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/regext>, <mailto:regext-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/regext/>
List-Post: <mailto:regext@ietf.org>
List-Help: <mailto:regext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/regext>, <mailto:regext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jan 2020 14:45:05 -0000

I posted draft-ietf-regext-login-security-08 that incorporates the feedback received during the IESG review.  Please confirm that I've addressed all of your feedback.

Thanks,

-- 
 
JG



James Gould
Distinguished Engineer
jgould@Verisign.com <applewebdata://13890C55-AAE8-4BF3-A6CE-B4BA42740803/jgould@Verisign.com>

703-948-3271
12061 Bluemont Way
Reston, VA 20190

Verisign.com <http://verisigninc.com/>

On 1/30/20, 9:32 AM, "regext on behalf of internet-drafts@ietf.org" <regext-bounces@ietf.org on behalf of internet-drafts@ietf.org> wrote:

    
    A New Internet-Draft is available from the on-line Internet-Drafts directories.
    This draft is a work item of the Registration Protocols Extensions WG of the IETF.
    
            Title           : Login Security Extension for the Extensible Provisioning Protocol (EPP)
            Authors         : James Gould
                              Matthew Pozun
    	Filename        : draft-ietf-regext-login-security-08.txt
    	Pages           : 27
    	Date            : 2020-01-30
    
    Abstract:
       The Extensible Provisioning Protocol (EPP) includes a client
       authentication scheme that is based on a user identifier and
       password.  The structure of the password field is defined by an XML
       Schema data type that specifies minimum and maximum password length
       values, but there are no other provisions for password management
       other than changing the password.  This document describes an EPP
       extension that allows longer passwords to be created and adds
       additional security features to the EPP login command and response.
    
    
    The IETF datatracker status page for this draft is:
    https://datatracker.ietf.org/doc/draft-ietf-regext-login-security/
    
    There are also htmlized versions available at:
    https://tools.ietf.org/html/draft-ietf-regext-login-security-08
    https://datatracker.ietf.org/doc/html/draft-ietf-regext-login-security-08
    
    A diff from the previous version is available at:
    https://www.ietf.org/rfcdiff?url2=draft-ietf-regext-login-security-08
    
    
    Please note that it may take a couple of minutes from the time of submission
    until the htmlized version and diff are available at tools.ietf.org.
    
    Internet-Drafts are also available by anonymous FTP at:
    ftp://ftp.ietf.org/internet-drafts/
    
    _______________________________________________
    regext mailing list
    regext@ietf.org
    https://www.ietf.org/mailman/listinfo/regext