IETF Logo Mail Archive

Consensus call: the fate of CRAM-MD5

Tom Yu <tlyu@MIT.EDU> Tue, 24 March 2009 02:39 UTC

Return-Path: <owner-ietf-sasl@mail.imc.org>
X-Original-To: ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com
Delivered-To: ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C567E3A690E for <ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com>; Mon, 23 Mar 2009 19:39:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.006
X-Spam-Level:
X-Spam-Status: No, score=-6.006 tagged_above=-999 required=5 tests=[AWL=0.593, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qis4StfmLO1T for <ietfarch-sasl-archive-Zoh8yoh9@core3.amsl.com>; Mon, 23 Mar 2009 19:39:14 -0700 (PDT)
Received: from balder-227.proper.com (properopus-pt.tunnel.tserv3.fmt2.ipv6.he.net [IPv6:2001:470:1f04:392::2]) by core3.amsl.com (Postfix) with ESMTP id 7EDFF3A6B8E for <sasl-archive-Zoh8yoh9@ietf.org>; Mon, 23 Mar 2009 19:39:14 -0700 (PDT)
Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n2O2Y6ar064676 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 23 Mar 2009 19:34:06 -0700 (MST) (envelope-from owner-ietf-sasl@mail.imc.org)
Received: (from majordom@localhost) by balder-227.proper.com (8.14.2/8.13.5/Submit) id n2O2Y6WE064675; Mon, 23 Mar 2009 19:34:06 -0700 (MST) (envelope-from owner-ietf-sasl@mail.imc.org)
X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-sasl@mail.imc.org using -f
Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n2O2XsbZ064650 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <ietf-sasl@imc.org>; Mon, 23 Mar 2009 19:34:05 -0700 (MST) (envelope-from tlyu@MIT.EDU)
Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id n2O2XqCv026574 for <ietf-sasl@imc.org>; Mon, 23 Mar 2009 22:33:53 -0400 (EDT)
Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id n2O2XpX3008959 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <ietf-sasl@imc.org>; Mon, 23 Mar 2009 22:33:52 -0400 (EDT)
Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id n2O2XpXo012726; Mon, 23 Mar 2009 22:33:51 -0400 (EDT)
To: ietf-sasl@imc.org
Subject: Consensus call: the fate of CRAM-MD5
From: Tom Yu <tlyu@MIT.EDU>
Date: Mon, 23 Mar 2009 22:33:51 -0400
Message-ID: <ldvzlfbsl80.fsf@cathode-dark-space.mit.edu>
Lines: 22
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Scanned-By: MIMEDefang 2.42
Sender: owner-ietf-sasl@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-sasl/mail-archive/>
List-ID: <ietf-sasl.imc.org>
List-Unsubscribe: <mailto:ietf-sasl-request@imc.org?body=unsubscribe>

Based on earlier mail from Lyndon and Alexey, I am initiating a
consensus call on the following points, which I hope are not
contentious, as I believe that they express the existing desires of
the Working Group:

* Abandon work on draft-ietf-sasl-crammd5, removing it from the WG
  work list.  (de facto already done)

* Leave the status of RFC 2195 (Proposed Standard) unchanged.

* Adopt the SCRAM family as the successor to CRAM-MD5.

* New work item: produce an Informational RFC documenting existing
  issues with CRAM-MD5.  This document could be based on
  draft-zeilenga-sasl-crammd5.

* At some point in the future, probably after SCRAM is finished, move
  CRAM-MD5 to Historic status.

Please comment before April 3.  We can discuss this at tomorrow's WG
session if necessary, but I do not want it to occupy a lot of session
time without good reason.

v2.23.0 | Report a Bug | By Email