Re: [Tsvwg] Adopting draft-behringer-tsvwg-rsvp-security-groupkeying as WG item?

[Francois Le Faucheur IMAP <[e-mail]>]

Hi Lars,

On 30 Jan 2008, at 15:08, Lars Eggert wrote:
>
>> Second, draft-behringer is not proposing to dictate what MSEC  
>> should or should not do. It is about documenting group keying  
>> applicability to RSVP and its benefits in some scenarios. The  
>> expectation is indeed that MSEC will find its own motivation to  
>> develop a solution based on the benefits it would bring to RSVP.  
>> That's all.
>
> Great. Because recalling the discussion in SAAG, I came away with a  
> different impression. The SAAG minutes say:
>
> "There was progress on four [MSEC - ed.] work items, including  
> crypto suites for
> GDOI, and extensions to GDOI for hash agility, GDOI for SRTP, and
> TESLA extensions.  There are also several current work items that
> are not making progress and may need to be dropped.  Some new work
> has been proposed to support keying for transport and routing
> protocols, but this work will not go forward unless it is clear that
> the appropriate WGs in transport and routing have consensus.
> If clear direction is provided, msec will consider a charter update  
> for
> new work.  Otherwise, msec will stay on course to complete its  
> active documents and shut down."
>
> The "support keying for transport" bit was about RSVP group keying  
> (draft-weis), and the half-sentence following it makes it pretty  
> clear that MSEC won't take it on unless TSVWG would indicate some  
> sort of consensus about this work. I'm merely attempting to clarify  
> that any adoption of draft-behringer isn't such an indication.
>


Why is it so important to ensure that the TSVWG does not send any  
indication to MSEC that it would be useful to deploy a group keying  
solution for RSVP?
Is this because you know of better solutions to achieve automated key  
management for RSVP?
If yes, can you share them so that we can discuss those?
If not, what exactly would be so bad if TSVWG was to document the  
fact that group keying would be useful for RSVP and if MSEC was to  
interpret that as a cue to develop a solution for it?

Thanks

Francois