Re: [RPSEC] [OSPF] [sidr] Authentication for OSPFv3

Acee Lindem <acee@redback.com> Wed, 01 October 2008 15:57 UTC

Return-Path: <rpsec-bounces@ietf.org>
X-Original-To: rpsec-archive@megatron.ietf.org
Delivered-To: ietfarch-rpsec-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC70F3A6C58; Wed, 1 Oct 2008 08:57:11 -0700 (PDT)
X-Original-To: rpsec@core3.amsl.com
Delivered-To: rpsec@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 49FE33A6B77; Tue, 30 Sep 2008 08:07:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.299
X-Spam-Level:
X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_48=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TQ+fYg2HOTCc; Tue, 30 Sep 2008 08:07:57 -0700 (PDT)
Received: from prattle.redback.com (prattle.redback.com [155.53.12.9]) by core3.amsl.com (Postfix) with ESMTP id 924CB3A67E7; Tue, 30 Sep 2008 08:07:57 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by prattle.redback.com (Postfix) with ESMTP id 349ABA05F69; Tue, 30 Sep 2008 08:08:19 -0700 (PDT)
Received: from prattle.redback.com ([127.0.0.1]) by localhost (prattle [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27471-08; Tue, 30 Sep 2008 08:08:18 -0700 (PDT)
Received: from [IPv6???1] (login005.redback.com [155.53.12.64]) by prattle.redback.com (Postfix) with ESMTP id 4A307A05F6D; Tue, 30 Sep 2008 08:08:17 -0700 (PDT)
In-Reply-To: <C50382B8-74EB-4157-9043-56CB1D3F8594@cisco.com>
References: <48D96507.4000207@sri.com> <20080929200231.3E5DD3F443@pecan.tislabs.com> <77ead0ec0809291853t63940339xc826b13cf5515176@mail.gmail.com> <C50382B8-74EB-4157-9043-56CB1D3F8594@cisco.com>
Mime-Version: 1.0 (Apple Message framework v753.1)
Message-Id: <BAD965BE-053F-4296-B0F7-CF0F2C9C0779@redback.com>
From: Acee Lindem <acee@redback.com>
Date: Tue, 30 Sep 2008 11:08:15 -0400
To: David Ward <dward@cisco.com>
X-Mailer: Apple Mail (2.753.1)
X-Virus-Scanned: by amavisd-new at redback.com
X-Mailman-Approved-At: Wed, 01 Oct 2008 08:57:10 -0700
Cc: msec@ietf.org, tsvwg@ietf.org, rpsec@ietf.org, secdir@mit.edu, OSPF List <ospf@ietf.org>, sidr@ietf.org, Ross Callon <rcallon@juniper.net>
Subject: Re: [RPSEC] [OSPF] [sidr] Authentication for OSPFv3
X-BeenThere: rpsec@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Routing Protocol Security Requirements <rpsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/rpsec>, <mailto:rpsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/rpsec>
List-Post: <mailto:rpsec@ietf.org>
List-Help: <mailto:rpsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rpsec>, <mailto:rpsec-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Sender: rpsec-bounces@ietf.org
Errors-To: rpsec-bounces@ietf.org

One thing to take into consideration is that the outcome of our KMART  
BOF was that nobody deploying networks wanted routing infra-structure  
based on a third-part verified certificates.
Thanks,
Acee
On Sep 30, 2008, at 10:57 AM, David Ward wrote:

> Directions are to send your draft to opsec WG. To get it on their  
> charter, you have to request the doc to become a WG item and then  
> discussion will follow
>
> -DWard
>
> On Sep 29, 2008, at 8:53 PM, Vishwas Manral wrote:
>
>> Hi Sandy,
>>
>> Thanks for refering to my draft in your mail. The same was presented
>> by Dave (Ward) in the last IETF. Regarding the state of the draft,
>> because the RPSEC is closing down, we have been trying to find a home
>> for the draft.
>>
>> We can also solve the problem similarly by something like
>> BTNS(ofcourse Multicast part needs to be thought further) which does
>> not necessarily require any certificate verification - so we may have
>> unauthenticated IKE SA's but then all keys for the CHILD_SA from  
>> there
>> are automatically generated.
>>
>> Thanks,
>> Vishwas
>>
>>
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www.ietf.org/mailman/listinfo/ospf

_______________________________________________
RPSEC mailing list
RPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/rpsec