[saag] Fwd: I-D Action: draft-iab-identifier-comparison-05.txt

[Russ Housley <[e-mail]>]

This document is in the final stages.  If you have last minute comments, please send them to [e-mail] very soon.

Russ


> From: [e-mail]
> Date: October 20, 2012 7:19:31 PM EDT
> To: [e-mail]
> Cc: [e-mail]
> Subject: [IAB] I-D Action: draft-iab-identifier-comparison-05.txt
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Internet Architecture Board Working Group of the IETF.
> 
> 	Title           : Issues in Identifier Comparison for Security Purposes
> 	Author(s)       : Dave Thaler
> 	Filename        : draft-iab-identifier-comparison-05.txt
> 	Pages           : 23
> 	Date            : 2012-10-20
> 
> Abstract:
>   Identifiers such as hostnames, URIs, and email addresses are often
>   used in security contexts to identify security principals and
>   resources.  In such contexts, an identifier supplied via some
>   protocol is often compared against some policy to make security
>   decisions such as whether the principal may access the resource, what
>   level of authentication or encryption is required, etc.  If the
>   parties involved in a security decision use different algorithms to
>   compare identifiers, then failure scenarios ranging from denial of
>   service to elevation of privilege can result.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-iab-identifier-comparison
> 
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-iab-identifier-comparison-05
> 
> A diff from the previous version is available at:
> http://www.ietf.org/rfcdiff?url2=draft-iab-identifier-comparison-05
> 
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>