IETF Logo Mail Archive

Re: [SECMECH] Framework Bindings Vs. Mechanism Bridges

Josh Howlett <josh.howlett@bristol.ac.uk> Mon, 22 August 2005 14:50 UTC

Received: from localhost.localdomain ([127.0.0.1] helo=megatron.ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1E7DdS-0007ei-AC; Mon, 22 Aug 2005 10:50:50 -0400
Received: from odin.ietf.org ([132.151.1.176] helo=ietf.org) by megatron.ietf.org with esmtp (Exim 4.32) id 1E7DdQ-0007di-BS for secmech@megatron.ietf.org; Mon, 22 Aug 2005 10:50:48 -0400
Received: from ietf-mx.ietf.org (ietf-mx [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA20565 for <secmech@ietf.org>; Mon, 22 Aug 2005 10:50:46 -0400 (EDT)
Received: from dirg.bris.ac.uk ([137.222.10.102]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1E7EDz-0003EJ-N6 for secmech@ietf.org; Mon, 22 Aug 2005 11:28:37 -0400
Received: from isis.bris.ac.uk ([137.222.10.63]) by dirg.bris.ac.uk with esmtp (Exim 4.51) id 1E7DdC-0004L7-UI; Mon, 22 Aug 2005 15:50:36 +0100
Received: from cumulus.cse.bris.ac.uk ([137.222.12.162]) by isis.bris.ac.uk with esmtp (Exim 4.51) id 1E7DcN-00017U-Qj; Mon, 22 Aug 2005 15:49:47 +0100
Date: Mon, 22 Aug 2005 15:49:42 +0100
From: Josh Howlett <josh.howlett@bristol.ac.uk>
To: Charles Clancy <clancy@cs.umd.edu>, Josh Howlett <josh.howlett@bristol.ac.uk>
Subject: Re: [SECMECH] Framework Bindings Vs. Mechanism Bridges
Message-ID: <1DCACCAC04655B3AFE9733A8@cumulus>
In-Reply-To: <Pine.GSO.4.60.0508221008260.1174@ismene>
References: <7210B31550AC934A8637D6619739CE6905C06510@e2k-sea-xch2.sea-alpha. cisco.com> <Pine.GSO.4.60.0508191330380.16954@ismene> <20050819210308.GI6659@binky.Central.Sun.COM> <20050820031035.GA5352@isc.upenn.edu> <43074F76.8000604@cs.umd.edu> <20050822044255.GC27685@isc.upenn.edu> <Pine.GSO.4.60.0508220801430.1114@ismene> <35850EE42DFD2824F0DDBBC8@cumulus> <Pine.GSO.4.60.0508221008260.1174@ismene>
Originator-Info: login-token=Mulberry:01EGe1K3LcH5FT0PuKSnHX4p5N3umEUHWVF51E2+mCQD7cIA==; token_authority=postmaster@bristol.ac.uk
X-Mailer: Mulberry/3.1.5 (Linux/x86)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Spam-Score: -2.8
X-Spam-Level: --
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 52e1467c2184c31006318542db5614d5
Content-Transfer-Encoding: 7bit
Cc: secmech@ietf.org, Nicolas Williams <Nicolas.Williams@sun.com>
X-BeenThere: secmech@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Josh Howlett <josh.howlett@bristol.ac.uk>
List-Id: Security mechanisms BOF <secmech.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/secmech>, <mailto:secmech-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/secmech>
List-Post: <mailto:secmech@lists.ietf.org>
List-Help: <mailto:secmech-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/secmech>, <mailto:secmech-request@lists.ietf.org?subject=subscribe>
Sender: secmech-bounces@lists.ietf.org
Errors-To: secmech-bounces@lists.ietf.org


--On Monday, August 22, 2005 10:19:53 -0400 Charles Clancy 
<clancy@cs.umd.edu> wrote:

> On Mon, 22 Aug 2005, Josh Howlett wrote:
>
>> On Mon, 22 Aug 2005, Charles Clancy <clancy@cs.umd.edu> wrote:
>>
>>> Personally, I think a native EAP-Kerberos method that utilizes DTLS is
>>> the way to go.
>>
>> Why not take something like TTLSv1 and define a Kerberos binding to it?
>
> I guess it's a tradeoff between outside dependencies and reinventing the
> wheel.  TTLS hasn't been on the list of EAP methods seeking
> standards-track action.  Regardless, this is another approach I
> personally would be willing to support.

Out of curiousity, what are the advantages of using native Kerberos, rather 
than PAP inside a tunneled method which the AAA server verifies against the 
KDC? (this is how FreeRADIUS currently implements "Kerberos" 
authentication).

Perhaps I'm being a bit dim, but I feel like I'm missing the point.

Or is the point simply to define a mechanism that EAP and GSS can share?

josh.

-- 
-----------------------------------------------------------
Josh Howlett, Networking & Digital Communications,
Information Systems & Computing, University of Bristol, U.K.
'phone: 0117 928 7850 email: josh.howlett@bris.ac.uk
------------------------------------------------------------

_______________________________________________
SECMECH mailing list
SECMECH@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/secmech

v2.23.0 | Report a Bug | By Email