RE: [TLS] Re: I-D ACTION:draft-ietf-tls-srp-13.txt

Tom Wu <tjw@CS.Stanford.EDU> Fri, 22 December 2006 22:35 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1Gxsyq-0002X6-SS; Fri, 22 Dec 2006 17:35:08 -0500
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Gxsyp-0002VR-1i for tls@ietf.org; Fri, 22 Dec 2006 17:35:07 -0500
Received: from cs-smtp-2.stanford.edu ([171.64.64.26]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1Gxsyn-0006A9-OH for tls@ietf.org; Fri, 22 Dec 2006 17:35:07 -0500
Received: from xenon.stanford.edu ([171.64.66.201]) by cs-smtp-2.Stanford.EDU with esmtps (TLSv1:AES256-SHA:256) (Exim 4.60) (envelope-from <tjw@CS.Stanford.EDU>) id 1Gxsym-000326-Fx for tls@ietf.org; Fri, 22 Dec 2006 14:35:05 -0800
Received: from tjw (helo=localhost) by xenon.Stanford.EDU with local-esmtp (Exim 4.60) (envelope-from <tjw@CS.Stanford.EDU>) id 1Gxsym-000725-8U for tls@ietf.org; Fri, 22 Dec 2006 14:35:04 -0800
Date: Fri, 22 Dec 2006 14:35:04 -0800
From: Tom Wu <tjw@CS.Stanford.EDU>
To: tls@ietf.org
Subject: RE: [TLS] Re: I-D ACTION:draft-ietf-tls-srp-13.txt
In-Reply-To: <279DDDAFA85EC74C9300A0598E7040560121DD3C@hdsmsx412.amr.corp.intel.com>
Message-ID: <Pine.LNX.4.62.0612221426110.22590@xenon.Stanford.EDU>
References: <279DDDAFA85EC74C9300A0598E7040560121DD3C@hdsmsx412.amr.corp.intel.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"; format="flowed"
X-Spam-Score: -102.5
X-Spam-Checker-Version: SpamAssassin 3.0.4-cs-csdcf (2005-06-05) on cs-smtp-2.Stanford.EDU
X-Scan-Signature: bd70d0bdda1312c8b25f7b39d1e2fb7f
X-Spam-Score: 0.0 (/)
X-Scan-Signature: b19722fc8d3865b147c75ae2495625f2
Cc:
X-BeenThere: tls@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/tls>
List-Post: <mailto:tls@lists.ietf.org>
List-Help: <mailto:tls-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@lists.ietf.org?subject=subscribe>
Errors-To: tls-bounces@lists.ietf.org

On Fri, 22 Dec 2006, Blumenthal, Uri wrote:

> I've heard that other parties claim that their patents cover SRP
> method as well. Stanford license agreement pretty much says "yeah
> those claims may be true - and if so it's your problem". (Caveat:
> I'm not a lawyer - the above is how I understand the written text.
> Feel free to correct me and provide the right interpretation.)

AFAIK it's standard boilerplate.

> I understand that since Stanford doesn't charge for the license,
> one can't demand or expect much from them, but you must understand
> those who find such a license less than reassuring.
>
> In short - I'd like to see some evidence that political/legal/IPR
> problems indeed have been solved (which is harder than writing an
> implementation :-).

Under the current circumstances, the growing base of running code
for TLS/SRP and the rough consensus among its implementors is
the best evidence one could reasonably expect.  If SRP weren't
truly free, it would be in the same boat as the other ZKP protocols
and would not have attracted the interest level it has, especially
with OSS projects.

> Regards,
> Uri
> <Disclaimer> I speak for myself only

Tom
-- 
Tom Wu
http://www-cs-students.stanford.edu/~tjw/

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls