Re: [saag] Kitten Summary - IETF 86

[Nico Williams <[e-mail]>]

On Thu, Mar 14, 2013 at 1:06 PM, Shawn M Emery <[e-mail]> wrote:
> The WG met for the morning session on Thursday (3.14.13).

Sorry I could not attend.

> draft-ietf-kitten-sasl-oauth
> ----------------------------
> Jeff Hutzelman had made WGLC comments that entail an GSS-API abstract
> violation due to the
> use of the mutual authentication state to indicate that the application, not
> the mechanism
> has performed mutual authentication.  The other two SASL mechanisms, OpenID
> and SAML,
> have similar issues.  It was decided that there should be an interim meeting
> to discuss
> whether we update GS2 to provision for these mechanism types or do we remove
> the GS2
> capabilities of these SASL mechanisms.

Basically, any mechanism that does not do mutual auth could still be
used with GS2 if we relax the mutual auth requirement there, but we
must not allow such mechanisms to be advertised as -PLUS mechanisms.

> draft-williams-kitten-krb5-extra-rt
> Would require a recharter.

Some of it relates to rcache avoidance, FYI, which is in charter.
Mind you, I think we should modify the charter.

Also, if mechanism work is in charter then I'd think that
maintenance/extensions work on existing mechanisms should be as well.
If that's not already clearly stated in the charter, then we should
make it so.

> draft-williams-kitten-krb5-rcache-avoidance
> Already in the current charter.
>
> draft-yu-kitten-kerberos-kdc-does-aliases
> Would require a recharter.

I support modifying the charter so we can adopt this I-D (as well as,
unsurprisingly, mine).

> Open Mic
> --------
> No one came forward.

FYI, Nathan McCallum has convinced me to specify a subset of the verto
API (which is quite simple) for async GSS.

> GSS-Profile
> -----------
> Sam had commented on this draft as being useful in simplifying the GSS-API.
> There were
> not enough reviewers in the room to make a call for adoption.  Unfortunately
> a charter item
> (i.e. draft-yu-kitten-api-wishlist) similar to this was previously removed
> due to lack of
> feed-back or interest.

Which I-D was this?  draft-williams-gss-profiles?

Nico
--