Re: [secdir] [OPSAWG] Secdir last call review of draft-ietf-opsawg-tacacs-13

[Randy Bush <[e-mail]>]

>> Agreed to replace the section with a simple statement that
>> obfuscation provides no integrity or replay protection. I'm assuming
>> this refers just to 10.1 and not the whole of 10.
>>
> [Joe] I think you could probably replace a large portion of 10.2, 3 and 4
> as well.

hyperbole is not constructive

creaky as it is, this is an informational draft which is documenting an
extremely widely used and distributed protocol.  no one is gonna change
millions of devices and thousands of servers for tweaks.  no one moves
for a 10% improvement, especially if there is no functional improvement.

we need to document it so we can put this in the can and move forward to
modernizing it.  then, if we have a seriously functionally improved and
modernized protocol, we will start the 42 year process of rolling it
out.

randy