Re: [tcpm] I-D Action:draft-ietf-tcpm-tcp-auth-opt-11.txt

Hi, all,

The revisions in this document address the IESG DISCUSS issues.

Joe

Internet-Drafts@ietf.org wrote:
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the TCP Maintenance and Minor Extensions Working Group of the IETF.
> 
> 
> 	Title           : The TCP Authentication Option
> 	Author(s)       : J. Touch, et al.
> 	Filename        : draft-ietf-tcpm-tcp-auth-opt-11.txt
> 	Pages           : 48
> 	Date            : 2010-03-23
> 
> This document specifies the TCP Authentication Option (TCP-AO), which
> obsoletes the TCP MD5 Signature option of RFC-2385 (TCP MD5). TCP-AO
> specifies the use of stronger Message Authentication Codes (MACs),
> protects against replays even for long-lived TCP connections, and
> provides more details on the association of security with TCP
> connections than TCP MD5. TCP-AO is compatible with either static
> master key tuple (MKT) configuration or an external, out-of-band MKT
> management mechanism; in either case, TCP-AO also protects
> connections when using the same MKT across repeated instances of a
> connection, using traffic keys derived from the MKT, and coordinates
> MKT changes between endpoints. The result is intended to support
> current infrastructure uses of TCP MD5, such as to protect long-lived
> connections (as used, e.g., in BGP and LDP), and to support a larger
> set of MACs with minimal other system and operational changes. TCP-AO
> uses a different option identifier than TCP MD5, even though TCP-AO
> and TCP MD5 are never permitted to be used simultaneously. TCP-AO
> supports IPv6, and is fully compatible with the proposed requirements
> for the replacement of TCP MD5.
> 
> A URL for this Internet-Draft is:
> http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-11.txt
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
> 
> Below is the data which will enable a MIME compliant mail reader
> implementation to automatically retrieve the ASCII version of the
> Internet-Draft.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> tcpm mailing list
> tcpm@ietf.org
> https://www.ietf.org/mailman/listinfo/tcpm

Re: [tcpm] I-D Action:draft-ietf-tcpm-tcp-auth-opt-11.txt

Attachment: signature.asc