[stir] Realm Crossover + ENUM for security identity

[Rick van Rein <[e-mail]>]

Hello STIR,

I discovered your WG while I was looking through the London agenda.
I have been working on authentication across domain names, and found
it straightforward to add ENUM support for phone numbers.

We mostly use SASL because it works in very many protocols, though
we also keep an eye open for Kerberos and X.509.  Each has their
pros and cons.

Some protocols can benefit from having SASL authentication added,
notably HTTP and SIP, so I wrote specifications for that.  The HTTP
variant is pretty mature and I am talking about it to HTTPbis, and
I recently wrote a SIP embedding for SASL based on the HTTP form.

I am wondering if this is of interest to STIR and, if so, if there
is anything I can do for you during the London IETF.  Let me know.

I will add relevant document references for your information.

Best,

Rick van Rein
InternetWide.org


   ----- 8< -------- 8< -------- 8< -------- 8< -------- 8< -----


draft-vanrein-internetwide-realm-crossover
	Documents the general idea of Realm Crossover with hints
	at technology.  Suitable as a shared introduction for our
	work, but it is not very technical.

draft-vanrein-diameter-sasl
	Mechanisms to support Realm Crossover in SASL.  No change
	to the application protocol, but an SXOVER-PLUS mechanism
	and realm crossing with Diameter.

draft-vanrein-httpauth-sasl
	Adds SASL authentication in the HTTP Authentication framework.

draft-vanrein-sipauth-sasl
	Adds SASL authentication to SIP, based on the HTTP extension.