Re: [Tcpcrypt] New version of the charter text

[marcelo bagnulo braun <[e-mail]>]

El 23/04/14 20:38, Joe Touch escribió:
>
>
> On 4/23/2014 10:54 AM, marcelo bagnulo braun wrote:
>> El 23/04/14 19:18, Joe Touch escribió:
>>>
>>>
>>> On 4/23/2014 10:04 AM, marcelo bagnulo braun wrote:
>>> ...
>>>>> > The WG will define the
>>>>>> TCP extensions to perform an unauthenticated key exchange 
>>>>>> resulting in
>>>>>> encryption
>>>>>> without authentication.
>>>>>
>>>>> This implies in-band.
>>>>
>>>> Yes, the idea here is to provide a fully automatic mechanism, that
>>>> people simply install and dont need to configure keys or anything.
>>>
>>> That is orthogonal as to whether the key exchange is in-band.
>>>
>>> Yes, a key exchange mechanism needs to be defined as part of the
>>> system, but not necessarily inside the connection being protected.
>>
>> mmm, havent considered that.
>> So the key exchange mechanism would be part of the work of the WG, 
>> correct?
>
> Yes.
>
>> How do you envision doing it other than inside the connection? like
>> having a control connection to negotiate these things?
>> (something like
>> https://tools.ietf.org/id/draft-paasch-mptcp-control-stream-00.txt 
>> maybe?)
>
> Sure- that's one possible way (i.e., that's what I meant by "in the 
> data of a previous TCP connection").
>
> I don't think we should pick in advance, though - let's see what 
> people suggest first.
>

Ok, so the WG will decide whether it is in band or else.
I will change the text in the charter to reflect this in the next version.

Regards, marcelo





> Joe
>
> _______________________________________________
> Tcpcrypt mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/tcpcrypt
>