Re: Authentication

Dave Katz <dkatz@juniper.net> Thu, 17 March 2005 18:34 UTC

Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA04391; Thu, 17 Mar 2005 13:34:41 -0500 (EST)
Received: from megatron.ietf.org ([132.151.6.71]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DBztk-00028q-0U; Thu, 17 Mar 2005 13:39:11 -0500
Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DBzjp-0008QZ-GZ; Thu, 17 Mar 2005 13:28:53 -0500
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1DBzjp-0008QU-3N for rtg-bfd@megatron.ietf.org; Thu, 17 Mar 2005 13:28:53 -0500
Received: from ietf-mx.ietf.org (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id NAA03883 for <rtg-bfd@ietf.org>; Thu, 17 Mar 2005 13:28:49 -0500 (EST)
Received: from colo-dns-ext1.juniper.net ([207.17.137.57]) by ietf-mx.ietf.org with esmtp (Exim 4.33) id 1DBzo6-0001zZ-3v for rtg-bfd@ietf.org; Thu, 17 Mar 2005 13:33:19 -0500
Received: from merlot.juniper.net (merlot.juniper.net [172.17.27.10]) by colo-dns-ext1.juniper.net (8.11.3/8.9.3) with ESMTP id j2HISZ956391; Thu, 17 Mar 2005 10:28:35 -0800 (PST) (envelope-from dkatz@juniper.net)
Received: from [172.16.12.139] (nimbus-sf.juniper.net [172.16.12.139]) by merlot.juniper.net (8.11.3/8.11.3) with ESMTP id j2HISTe48344; Thu, 17 Mar 2005 10:28:29 -0800 (PST) (envelope-from dkatz@juniper.net)
In-Reply-To: <Pine.LNX.4.61.0503171741390.26677@netcore.fi>
References: <200503170908.53160.cnogradi@laurelnetworks.com> <Pine.LNX.4.61.0503171741390.26677@netcore.fi>
Mime-Version: 1.0 (Apple Message framework v619.2)
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Message-Id: <d0fe25536e2482bc6b1e14136ad9e203@juniper.net>
Content-Transfer-Encoding: 7bit
From: Dave Katz <dkatz@juniper.net>
Date: Thu, 17 Mar 2005 11:31:01 -0700
To: Pekka Savola <pekkas@netcore.fi>
X-Mailer: Apple Mail (2.619.2)
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 7d33c50f3756db14428398e2bdedd581
Content-Transfer-Encoding: 7bit
Cc: rtg-bfd@ietf.org
Subject: Re: Authentication
X-BeenThere: rtg-bfd@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "RTG Area: Bidirectional Forwarding Detection DT" <rtg-bfd.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/rtg-bfd>, <mailto:rtg-bfd-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:rtg-bfd@ietf.org>
List-Help: <mailto:rtg-bfd-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/rtg-bfd>, <mailto:rtg-bfd-request@ietf.org?subject=subscribe>
Sender: rtg-bfd-bounces@ietf.org
Errors-To: rtg-bfd-bounces@ietf.org
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 798b2e660f1819ae38035ac1d8d5e3ab
Content-Transfer-Encoding: 7bit

On Mar 17, 2005, at 8:42 AM, Pekka Savola wrote:

> On Thu, 17 Mar 2005, Chris Nogradi wrote:
>> Since you did not make mention of this in the document changes 
>> sections, I
>> assume that this does not mean that all implementations must support 
>> at least
>> this form of authentication.  Is the purpose of this sentence to say 
>> that if
>> an implementation uses authentication, it must support SHA1?
>
> In any case, security area typically will not accept any new protocols 
> which don't support SHA1 -- and further, there must be at least one 
> mandatory-to-implement security mechanisms so different 
> implementations will be able to interoperate.

Yep.  Luckily they are protocol police, not implementation police.

--Dave