
From shanna@juniper.net  Tue Jul 28 13:21:13 2009
Return-Path: <shanna@juniper.net>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F144E3A6919 for <saag@core3.amsl.com>; Tue, 28 Jul 2009 13:21:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.486
X-Spam-Level: 
X-Spam-Status: No, score=-6.486 tagged_above=-999 required=5 tests=[AWL=0.113,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V4VFlhVLkKfH for <saag@core3.amsl.com>; Tue, 28 Jul 2009 13:21:13 -0700 (PDT)
Received: from exprod7og119.obsmtp.com (exprod7og119.obsmtp.com [64.18.2.16]) by core3.amsl.com (Postfix) with ESMTP id 0F1773A685B for <saag@ietf.org>; Tue, 28 Jul 2009 13:21:13 -0700 (PDT)
Received: from source ([66.129.224.36]) (using TLSv1) by exprod7ob119.postini.com ([64.18.6.12]) with SMTP ID DSNKSm9dukDbscvW4dCuCkk/RcDSPzje/5O5@postini.com; Tue, 28 Jul 2009 13:21:14 PDT
Received: from p-emfe02-wf.jnpr.net (172.28.145.25) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server (TLS) id 8.1.375.2; Tue, 28 Jul 2009 13:16:04 -0700
Received: from EMBX01-WF.jnpr.net ([fe80::1914:3299:33d9:e43b]) by p-emfe02-wf.jnpr.net ([fe80::c126:c633:d2dc:8090%11]) with mapi; Tue, 28 Jul 2009 16:16:04 -0400
From: Stephen Hanna <shanna@juniper.net>
To: "saag@ietf.org" <saag@ietf.org>
Date: Tue, 28 Jul 2009 16:15:35 -0400
Thread-Topic: NEA WG report
Thread-Index: AcmsH8hXHsgwY+dwSw2KhPdJ5ABQdAAqbGlgGL0rjFA=
Message-ID: <AC6674AB7BC78549BB231821ABF7A9AE8E76EF2D15@EMBX01-WF.jnpr.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [saag] NEA WG report
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 28 Jul 2009 20:21:14 -0000

The NEA WG met on Monday afternoon.

We have two drafts with the IESG: draft-ietf-nea-pa-tnc-04.txt
and draft-ietf-nea-pb-tnc-04.txt. We reviewed the comments
received during IETF Last Call and from the ADs. Proposals
for resolving these comments were presented and discussed.
No substantial disputes came up so the editors will proceed
with the changes discussed, as well as any others required
to address IESG requests. Since the changes are not entirely
trivial, we'll do another WGLC on the specs once they have
been revised to make sure there is WG consensus on the changes.

We also reviewed draft charter changes that add a new work
item: specifying one or more Posture Transport protocols
(PT) to transport the higher layer protocols (PA and PB).
We do not plan to define a new transport protocol. Rather,
we will define how the PB protocol should be carried over
existing standard transport protocols like EAP and/or TLS.
As with PA and PB, the plan is to solicit proposals for PT
that meet our requirements (described in RFC 5209). There
was agreement in the room and from our AD on these charter
changes and they had already been favorably reviewed on
the WG list so we will send them to the IESG for approval.

From yaronf@checkpoint.com  Wed Jul 29 02:49:11 2009
Return-Path: <yaronf@checkpoint.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5AC233A6F4E for <saag@core3.amsl.com>; Wed, 29 Jul 2009 02:49:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.182
X-Spam-Level: 
X-Spam-Status: No, score=-2.182 tagged_above=-999 required=5 tests=[AWL=0.416,  BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TtP3HmX4ZPw7 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 02:49:09 -0700 (PDT)
Received: from dlpdemo.checkpoint.com (dlpdemo.checkpoint.com [194.29.32.54]) by core3.amsl.com (Postfix) with ESMTP id 2F73C3A6F2B for <saag@ietf.org>; Wed, 29 Jul 2009 02:49:07 -0700 (PDT)
Received: by dlpdemo.checkpoint.com (Postfix, from userid 105) id 536D529C005; Wed, 29 Jul 2009 12:49:25 +0300 (IDT)
Received: from michael.checkpoint.com (michael.checkpoint.com [194.29.32.68]) by dlpdemo.checkpoint.com (Postfix) with ESMTP id 0003929C002 for <saag@ietf.org>; Wed, 29 Jul 2009 12:49:24 +0300 (IDT)
X-CheckPoint: {4A7019B4-0-14201DC2-1FFFF}
Received: from il-ex01.ad.checkpoint.com (localhost [127.0.0.1]) by michael.checkpoint.com (8.12.10+Sun/8.12.10) with ESMTP id n6T9n63e013346 for <saag@ietf.org>; Wed, 29 Jul 2009 12:49:07 +0300 (IDT)
Received: from il-ex01.ad.checkpoint.com ([194.29.32.26]) by il-ex01.ad.checkpoint.com ([194.29.32.26]) with mapi; Wed, 29 Jul 2009 12:49:06 +0300
From: Yaron Sheffer <yaronf@checkpoint.com>
To: "saag@ietf.org" <saag@ietf.org>
Date: Wed, 29 Jul 2009 12:49:02 +0300
Thread-Topic: ipsecme SAAG report
Thread-Index: AcoQKQMgEDzIMxFkRuSVRTeHhz55cwACIBTg
Message-ID: <7F9A6D26EB51614FBF9F81C0DA4CFEC80133E557CA99@il-ex01.ad.checkpoint.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0029_01CA1042.90BC83C0"
MIME-Version: 1.0
Subject: [saag] ipsecme SAAG report
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 09:49:11 -0000

------=_NextPart_000_0029_01CA1042.90BC83C0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_001_002A_01CA1042.90BC83C0"


------=_NextPart_001_002A_01CA1042.90BC83C0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

IPsecME met on the Monday morning session, to a full (if hard to find) room.

 

Most of the items on our current charter are nearing publication. We
reviewed most of them briefly, and then had presentations on four problems
that are proposed for the next charter revision. These are:

 

-          An EAP-only authentication extension to IKEv2

-          An extension that allows to establish an IKE SA with no
associated Child SA

-          Quick and secure detection of peer reboot/disconnect

-          Extending IKEv2 with password-based authentication

 

We concluded by closing yet another IKEv2-bis issue. This document is making
steady progress,  and will hopefully exit the WG by Hiroshima. A virtual
interim meeting, planned for mid-September, will help us push it along.

 

Thanks,

            Paul and Yaron


------=_NextPart_001_002A_01CA1042.90BC83C0
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"place"/>
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
 name=3D"City"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal;
	font-family:Arial;
	color:windowtext;}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:Arial;
	color:navy;}
@page Section1
	{size:612.0pt 792.0pt;
	margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
	{page:Section1;}
 /* List Definitions */
 @list l0
	{mso-list-id:801653835;
	mso-list-type:hybrid;
	mso-list-template-ids:1158427044 657064294 67698691 67698693 67698689 =
67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-start-at:0;
	mso-level-number-format:bullet;
	mso-level-text:-;
	mso-level-tab-stop:36.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;
	font-family:Arial;
	mso-fareast-font-family:"Times New Roman";}
@list l0:level2
	{mso-level-tab-stop:72.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level3
	{mso-level-tab-stop:108.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level4
	{mso-level-tab-stop:144.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level5
	{mso-level-tab-stop:180.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level6
	{mso-level-tab-stop:216.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level7
	{mso-level-tab-stop:252.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level8
	{mso-level-tab-stop:288.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
@list l0:level9
	{mso-level-tab-stop:324.0pt;
	mso-level-number-position:left;
	text-indent:-18.0pt;}
ol
	{margin-bottom:0cm;}
ul
	{margin-bottom:0cm;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>IPsecME met on the Monday morning session, to a full =
(if
hard to find) room.<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Most of the items on our current charter are nearing
publication. We reviewed most of them briefly, and then had =
presentations on
four problems that are proposed for the next charter revision. These =
are:<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal =
style=3D'margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><font
size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial'><span
style=3D'mso-list:Ignore'>-<font size=3D1 face=3D"Times New Roman"><span
style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></font></span></span></font><![endif]><span dir=3DLTR><font =
size=3D2
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'>An =
EAP-only
authentication extension to IKEv2<o:p></o:p></span></font></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><font
size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial'><span
style=3D'mso-list:Ignore'>-<font size=3D1 face=3D"Times New Roman"><span
style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></font></span></span></font><![endif]><span dir=3DLTR><font =
size=3D2
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'>An =
extension that
allows to establish an IKE SA with no associated Child =
SA<o:p></o:p></span></font></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><font
size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial'><span
style=3D'mso-list:Ignore'>-<font size=3D1 face=3D"Times New Roman"><span
style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></font></span></span></font><![endif]><span dir=3DLTR><font =
size=3D2
face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'>Quick =
and secure
detection of peer reboot/disconnect<o:p></o:p></span></font></span></p>

<p class=3DMsoNormal =
style=3D'margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 =
lfo2'><![if !supportLists]><font
size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial'><span
style=3D'mso-list:Ignore'>-<font size=3D1 face=3D"Times New Roman"><span
style=3D'font:7.0pt "Times New =
Roman"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
</span></font></span></span></font><![endif]><span dir=3DLTR><font =
size=3D2
face=3DArial><span =
style=3D'font-size:10.0pt;font-family:Arial'>Extending IKEv2
with password-based authentication<o:p></o:p></span></font></span></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>We concluded by closing yet another IKEv2-bis issue. =
This
document is making steady progress, &nbsp;and will hopefully exit the WG =
by <st1:place
w:st=3D"on"><st1:City w:st=3D"on">Hiroshima</st1:City></st1:place>. A =
virtual
interim meeting, planned for mid-September, will help us push it =
along.<span
style=3D'font-variant:small-caps'><o:p></o:p></span></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>Thanks,<o:p></o:p></span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3DArial><span =
style=3D'font-size:10.0pt;
font-family:Arial'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;
Paul and Yaron<o:p></o:p></span></font></p>

</div>

</body>

</html>

------=_NextPart_001_002A_01CA1042.90BC83C0--

------=_NextPart_000_0029_01CA1042.90BC83C0
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
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------=_NextPart_000_0029_01CA1042.90BC83C0--

From aland@deployingradius.com  Wed Jul 29 06:26:17 2009
Return-Path: <aland@deployingradius.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B0CE3A6E92 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 06:26:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0z4Kz3jGuwV7 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 06:26:16 -0700 (PDT)
Received: from liberty.deployingradius.com (liberty.deployingradius.com [88.191.76.128]) by core3.amsl.com (Postfix) with ESMTP id 8FD8B3A6F20 for <saag@ietf.org>; Wed, 29 Jul 2009 06:26:16 -0700 (PDT)
Received: from dhcp-11a9.meeting.ietf.org (dhcp-11a9.meeting.ietf.org [130.129.17.169]) by liberty.deployingradius.com (Postfix) with ESMTPSA id 42A8912342AF for <saag@ietf.org>; Wed, 29 Jul 2009 15:26:17 +0200 (CEST)
Message-ID: <4A704DF8.6020707@deployingradius.com>
Date: Wed, 29 Jul 2009 15:26:16 +0200
From: Alan DeKok <aland@deployingradius.com>
User-Agent: Thunderbird 2.0.0.22 (Macintosh/20090605)
MIME-Version: 1.0
To: saag@ietf.org
X-Enigmail-Version: 0.95.7
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: [saag] EMU report
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 13:26:17 -0000

  EMU met on Monday afternoon, with a reasonable attendance.

  The charter items are making progress, but the work is slow

* tunnel requirements - 5 people had read it.

* channel bindings ~2 people had read it.

  We need to have more participation before we can move these items forward.

  There was a lot of discussion around the zero-knowledge password
schemes (EAP-EKE and EAP-PWD).  Much of the discussion was around issues
outside of EMU, and won't be summarized here.

  There were two presentations on authorization with EAP.  The general
feeling was that these items would likely not be appropriate for EMU.

  A similar issue exists with the tunnel requirements document.  The
"method chaining" can be used to chain authentications.  It can also be
used to perform policy checks (e.g. NEA).  This looks a lot like
authorization, and concerns were raised during the meeting about it.

  These issues need to be clarified so that we can reach consensus on
what is being standardized, and what it does.

  Alan DeKok.

From turners@ieca.com  Wed Jul 29 07:12:26 2009
Return-Path: <turners@ieca.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A03C63A7093 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 07:12:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Blz1uUvyHKob for <saag@core3.amsl.com>; Wed, 29 Jul 2009 07:12:24 -0700 (PDT)
Received: from smtp110.biz.mail.re2.yahoo.com (smtp110.biz.mail.re2.yahoo.com [206.190.53.9]) by core3.amsl.com (Postfix) with SMTP id A700B3A703C for <saag@ietf.org>; Wed, 29 Jul 2009 07:12:24 -0700 (PDT)
Received: (qmail 52967 invoked from network); 29 Jul 2009 14:12:24 -0000
Received: from unknown (HELO thunderfish.local) (turners@212.112.167.85 with plain) by smtp110.biz.mail.re2.yahoo.com with SMTP; 29 Jul 2009 14:12:23 -0000
X-Yahoo-SMTP: qPTWNAeswBAtDTSn9GKlmmL3C90ke7grn_5n9To-
X-YMail-OSG: y3B2pSwVM1nAajMB0o3P5tzsxvFtvblNLDfcUY7YylebtIeGbxLe3oM5KjGmrds1JIM7WqaMVcSF43rwhxr2GuQarYJexKtwgu2xa6V4m2KUnIk5b.uDMPcM0fQkljtpNnzKxajYBCu6oLd1yPW0QwWF2TloL4Q8fDwtfoXhKLsgqveygmUHYUIYDChaOLYVSVxYP6GYNI4xrxFr9oAeyVbPFRbJ7gtWDzYliG9aARXIjeQDG9mLC76wENLhD2fp5yucVNtDhYxG0._cO.dUPfSs_T2W5g5RrQPr17nCA9nO2k5ESYz1BLN1JSUv.pysHb3IGRQ-
X-Yahoo-Newman-Property: ymail-3
Message-ID: <4A7058C5.2060109@ieca.com>
Date: Wed, 29 Jul 2009 16:12:21 +0200
From: Sean Turner <turners@ieca.com>
User-Agent: Thunderbird 2.0.0.22 (Macintosh/20090605)
MIME-Version: 1.0
To: saag@ietf.org, ietf-smime@imc.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [saag] SMIME report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 14:12:26 -0000

The SMIME WG did not meet in Stockholm.

We have 8 IDs.  Since the last meeting, 5 IDs have entered the RFC 
editor's queue raising the number of SMIME WG IDs with the RFC editor to 7:

- draft-ietf-smime-multisig
- draft-ietf-smime-sha2
- draft-ietf-smime-3850bis
- draft-ietf-smime-3850bis
- draft-ietf-smime-3278bis
- draft-ietf-smime-new-asn1
- draft-ietf-smime-3852bis

All of the documents are pinned on documents from PKIX, the TLP 
revisions, or both.

A new version of draft-ietf-smime-rsa-kem was posted to address comments 
made by Steve Kent during his SECDIR review.  We issued a 2nd WGLC 
because the revisions were pretty substantial.  One set of comments, 
which I would categorize as minor, was received during the 2nd WGLC.  A 
new version will be posted, and then the document will passed to Tim Polk.

Once all the documents have been published we will initiate the 
procedure to shut down the WG.

spt

From william.polk@nist.gov  Wed Jul 29 04:14:49 2009
Return-Path: <william.polk@nist.gov>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ADABF3A6FD3; Wed, 29 Jul 2009 04:14:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.734
X-Spam-Level: 
X-Spam-Status: No, score=-6.734 tagged_above=-999 required=5 tests=[AWL=-0.135, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vs+8B-W8b55d; Wed, 29 Jul 2009 04:14:48 -0700 (PDT)
Received: from smtp.nist.gov (rimp2.nist.gov [129.6.16.227]) by core3.amsl.com (Postfix) with ESMTP id C0DBB3A6F3F; Wed, 29 Jul 2009 04:14:48 -0700 (PDT)
Received: from WSXGHUB1.xchange.nist.gov (wsxghub1.nist.gov [129.6.18.96]) by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id n6TBEijZ032146; Wed, 29 Jul 2009 07:14:44 -0400
Received: from MBCLUSTER.xchange.nist.gov ([fe80::d479:3188:aec0:cb66]) by WSXGHUB1.xchange.nist.gov ([2002:8106:1260::8106:1260]) with mapi; Wed, 29 Jul 2009 07:14:43 -0400
From: "Polk, William T." <william.polk@nist.gov>
To: "secdir@ietf.org" <secdir@ietf.org>, "saag@ietf.org" <saag@ietf.org>
Date: Wed, 29 Jul 2009 07:14:43 -0400
Thread-Topic: Nomcom 2009-2010: IETF-75 Office hours
Thread-Index: AcoPEQbFn5p69000RvKoubu2bcmSPQBKsoCS
Message-ID: <D7A0423E5E193F40BE6E94126930C49307859925E3@MBCLUSTER.xchange.nist.gov>
References: <20090727231807.374A33A6922@core3.amsl.com>
In-Reply-To: <20090727231807.374A33A6922@core3.amsl.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-NIST-MailScanner: Found to be clean
X-NIST-MailScanner-From: william.polk@nist.gov
X-Mailman-Approved-At: Wed, 29 Jul 2009 08:10:36 -0700
Subject: [saag] FW: Nomcom 2009-2010: IETF-75 Office hours
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 11:14:49 -0000

Folks,

I suspect that many of you are not on ietf@ietf.org or 75attendees@ietf.org=
,
so I thought I would pass this on.

Please support the nomcom in their extremely important job by talking
with the nomcom members!  For those in Stockholm, they are having office=20
hours this week, as noted below.  For those not at IETF 75, please take
advantage of the nomcom09@ietf.org address.

Tim Polk

P.S. Note that I am IESG liaison to the nomcom this year.  If you would pre=
fer
that I not see your feedback, I encourage you to send the email directly to
Mary Barnes <nomcom-chair@ietf.org>


________________________________________
From: ietf-bounces@ietf.org [ietf-bounces@ietf.org] On Behalf Of Mary Barne=
s [mary.barnes@nortel.com]
Sent: Monday, July 27, 2009 7:18 PM
To: IETF Announcement list
Cc: ietf@ietf.org; 75attendees@ietf.org
Subject: Nomcom 2009-2010: IETF-75 Office hours

Hi all,

As you know, one of the first tasks of the Nomcom is consideration of the
qualifications for the various positions. While the Nomcom is in the
initial stages of organization, we would appreciate community feedback on
the qualifications, as well as general feedback or concerns that you feel
Nomcom should consider.  The official nominations period starts on August
10th, at which time the online nomination tool will be available.
However, nominations are welcome via email at this point as well.

Please find one of the Nomcom members (wearing an orange dot) at the
meeting and share your thoughts or drop by the Nomcom office. If you
prefer to schedule an appointment, please let me know or send a request to
nomcom09@ietf.org.

We will be available in the Nomcom room (204) as follows (W-Fri):
Wed: 8am-4:10pm
Thurs: 8-9am, 11:30am-1pm
Fri: 8-9am

If you would to schedule a specific timeslot or another time not listed
above, please let us know and please include 3 timeslot/session options in
your request. We will make every effort to accommodate your requests and
will reply with an exact timeslot.

Of course, anyone is welcome to send input and feedback to the Nomcom
(nomcom09@ietf.org) or directly to myself or any nomcom voting member at
any time during the selection process.

Regards,
Mary H. Barnes
mary.barnes@nortel.com
nomcom-chair@ietf.org
mary.h.barnes@gmail.com
_______________________________________________
Ietf mailing list
Ietf@ietf.org
https://www.ietf.org/mailman/listinfo/ietf

From kent@bbn.com  Wed Jul 29 08:24:38 2009
Return-Path: <kent@bbn.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0AA973A6823 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 08:24:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.465
X-Spam-Level: 
X-Spam-Status: No, score=-2.465 tagged_above=-999 required=5 tests=[AWL=0.134,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id da5LUU0d6rW2 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 08:24:37 -0700 (PDT)
Received: from mx3.bbn.com (mx3.bbn.com [128.33.1.81]) by core3.amsl.com (Postfix) with ESMTP id 38F0D3A6983 for <saag@ietf.org>; Wed, 29 Jul 2009 08:24:16 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15] helo=[130.129.18.170]) by mx3.bbn.com with esmtp (Exim 4.63) (envelope-from <kent@bbn.com>) id 1MWB0p-0007jR-Ch; Wed, 29 Jul 2009 11:24:16 -0400
Mime-Version: 1.0
Message-Id: <p06240802c696122de8af@[130.129.18.170]>
Date: Wed, 29 Jul 2009 11:24:13 -0400
To: saag@ietf.org
From: Stephen Kent <kent@bbn.com>
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Subject: [saag] PKIX report
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 15:24:38 -0000

PKIX meeting report

About 42 individuals attended the single PKIX session at the 75th IETF.

Four PKIX document have been approved by the IESG and are awaiting 
publication. One is entering IETF last call, one is slated for a 
telechat in 3 weeks, and another has just completed WG last call. 
Seven other document are in process in the WG.

The remaining two trust anchor documents will enter WGLC in a few 
weeks, and software implementing the functionality of these documents 
will be made available.

Stefan Santesson will take over as editor of RFC 4557bis (OCSP). The 
revisions will add an extension allowing a client to express 
algorithm preferences for OCSP responses, and will specify an 
algorithm for how an OCSP server selects the algorithm to use in 
signing a response.

Stefan also will act as editor for the update for RFC 3161 (Time 
Stamping). This RFC will have a minor change made to accommodate 
ESSv2 cert IDs, to allow use of hash algorithms other than SHA-1. 
This is consistent with our algorithm agility mandate, and will 
harmonize this RFC with existing ETSI efforts.

Stefan, completing a hat trick, discussed his I-D on linking images 
to certs. The intent is to extend RFC 3709 (Logotypes) to allow 
additional image formats for scaleable graphic representation.

The meeting concluded with two non-WG presentations. One, by Stefan, 
discussed an ongoing technical effort in the EU to reduce ambiguity 
of distinguished names in X,509 certs. The plan is to use metadata to 
provide a guide to interpreting DN attributes on a per CA basis. 
Steve presented a proposal for relying party management of trust 
anchors, focusing on the RPKI requirement for such a capability.

From julienl@qualcomm.com  Wed Jul 29 13:16:08 2009
Return-Path: <julienl@qualcomm.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D8C713A69C0 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 13:16:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.71
X-Spam-Level: 
X-Spam-Status: No, score=-105.71 tagged_above=-999 required=5 tests=[AWL=0.889, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a9zEZGnm9Mm2 for <saag@core3.amsl.com>; Wed, 29 Jul 2009 13:16:08 -0700 (PDT)
Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) by core3.amsl.com (Postfix) with ESMTP id 09E1B3A6407 for <saag@ietf.org>; Wed, 29 Jul 2009 13:16:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qualcomm.com; i=julienl@qualcomm.com; q=dns/txt; s=qcdkim; t=1248898570; x=1280434570; h=from:to:date:subject:thread-topic:thread-index: message-id:accept-language:content-language: x-ms-has-attach:x-ms-tnef-correlator:acceptlanguage: content-type:content-transfer-encoding:mime-version: x-ironport-av; z=From:=20"Laganier,=20Julien"=20<julienl@qualcomm.com> |To:=20"saag@ietf.org"=20<saag@ietf.org>|Date:=20Wed,=202 9=20Jul=202009=2013:15:27=20-0700|Subject:=20BTNS=20non-m eeting=20report|Thread-Topic:=20BTNS=20non-meeting=20repo rt|Thread-Index:=20AcoQiVBSYPiNHvMxTpqfUD+kk7XEMQ=3D=3D |Message-ID:=20<BF345F63074F8040B58C00A186FCA57F1C22ACCE6 D@NALASEXMB04.na.qualcomm.com>|Accept-Language:=20en-US |Content-Language:=20en-US|X-MS-Has-Attach: |X-MS-TNEF-Correlator:|acceptlanguage:=20en-US |Content-Type:=20text/plain=3B=20charset=3D"us-ascii" |Content-Transfer-Encoding:=20quoted-printable |MIME-Version:=201.0|X-IronPort-AV:=20E=3DMcAfee=3Bi=3D"5 300,2777,5692"=3B=20a=3D"21402262"; bh=npsdLWEyX1pcZ8Jeb0qGsUycWMW1ZraY0PmL+J2G7iM=; b=U5aLRGUzDNpXTEmqaW/w9NJw7fOpHb9VJZPh+SYj/W+7aAL+lrMMauAc PK3fBLVilATAf7W2NP7WRQiKnWXnU7fQ0a2M3l2QyoySKcsTwa5SfZ7mG agBcF+e+X5xAPVehBC5q76oP1YRXNtClb6OeOamnP6ueZkf7fCbTTv+eO c=;
X-IronPort-AV: E=McAfee;i="5300,2777,5692"; a="21402262"
Received: from pdmz-ns-mip.qualcomm.com (HELO ithilien.qualcomm.com) ([199.106.114.10]) by wolverine01.qualcomm.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Jul 2009 13:16:09 -0700
Received: from totoro.qualcomm.com (totoro.qualcomm.com [129.46.61.158]) by ithilien.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id n6TKG9st025810 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for <saag@ietf.org>; Wed, 29 Jul 2009 13:16:09 -0700
Received: from nasanexhub01.na.qualcomm.com (nasanexhub01.na.qualcomm.com [10.46.93.121]) by totoro.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id n6TKFM4E000873 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT) for <saag@ietf.org>; Wed, 29 Jul 2009 13:16:09 -0700 (PDT)
Received: from nalasexhc02.na.qualcomm.com (10.47.129.186) by nasanexhub01.na.qualcomm.com (10.46.93.121) with Microsoft SMTP Server (TLS) id 8.1.358.0; Wed, 29 Jul 2009 13:15:30 -0700
Received: from NALASEXMB04.na.qualcomm.com ([10.47.7.114]) by nalasexhc02.na.qualcomm.com ([10.47.129.186]) with mapi; Wed, 29 Jul 2009 13:15:30 -0700
From: "Laganier, Julien" <julienl@qualcomm.com>
To: "saag@ietf.org" <saag@ietf.org>
Date: Wed, 29 Jul 2009 13:15:27 -0700
Thread-Topic: BTNS non-meeting report
Thread-Index: AcoQiVBSYPiNHvMxTpqfUD+kk7XEMQ==
Message-ID: <BF345F63074F8040B58C00A186FCA57F1C22ACCE6D@NALASEXMB04.na.qualcomm.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [saag] BTNS non-meeting report
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Jul 2009 20:16:08 -0000

BTNS status update.

draft-ietf-btns-connection-latching is in IESG: resolution of the last DISC=
USS regarding SCTP handling of latch breakage is being discussed on the WG =
mailing list.

Lack of progress on BTNS APIs which are the last document left on our plate=
.

From Shawn.Emery@Sun.COM  Thu Jul 30 00:40:12 2009
Return-Path: <Shawn.Emery@Sun.COM>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 888A928C133 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 00:40:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.046
X-Spam-Level: 
X-Spam-Status: No, score=-6.046 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YoGb0hyeG-Fg for <saag@core3.amsl.com>; Thu, 30 Jul 2009 00:40:11 -0700 (PDT)
Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by core3.amsl.com (Postfix) with ESMTP id 6A42F28C159 for <saag@ietf.org>; Thu, 30 Jul 2009 00:39:31 -0700 (PDT)
Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n6U7dW3s003883 for <saag@ietf.org>; Thu, 30 Jul 2009 07:39:32 GMT
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; CHARSET=US-ASCII; format=flowed
Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) id <0KNL001003V8SZ00@mail-amer.sun.com> for saag@ietf.org; Thu, 30 Jul 2009 01:39:32 -0600 (MDT)
Received: from dhcp-16b2.meeting.ietf.org ([unknown] [129.150.124.137]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7u2-7.02 64bit (built Apr 16 2009)) with ESMTPSA id <0KNL0044W3XV1D80@mail-amer.sun.com> for saag@ietf.org; Thu, 30 Jul 2009 01:39:32 -0600 (MDT)
Date: Thu, 30 Jul 2009 01:36:49 -0600
From: "Shawn M. Emery" <Shawn.Emery@Sun.COM>
Sender: Shawn.Emery@Sun.COM
To: saag@ietf.org
Message-id: <4A714D91.60107@sun.com>
User-Agent: Thunderbird 2.0.0.22 (Macintosh/20090605)
Subject: [saag] KITTEN report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 07:40:12 -0000

Kitten will meet after SAAG today in the second afternoon session (room 
300).

Most of the drafts, except one, are either in the IESG, have recently 
become RFCs, or in the RFC Editor's queue.  The only active I-D, 
draft-ietf-kitten-gssapi-extensions-iana, needs some work, but the 
associated changes have been agreed upon within the WG.

There has not been much momentum in the WG to complete the few remaining 
charter items.  We will discuss this with the ADs and WG to see how to 
proceed.

Shawn and Tom.
--

From barryleiba.mailing.lists@gmail.com  Thu Jul 30 00:52:01 2009
Return-Path: <barryleiba.mailing.lists@gmail.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D298A3A69AD for <saag@core3.amsl.com>; Thu, 30 Jul 2009 00:52:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.382
X-Spam-Level: 
X-Spam-Status: No, score=-2.382 tagged_above=-999 required=5 tests=[AWL=0.217,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LZN+-JM0hras for <saag@core3.amsl.com>; Thu, 30 Jul 2009 00:52:01 -0700 (PDT)
Received: from mail-pz0-f184.google.com (mail-pz0-f184.google.com [209.85.222.184]) by core3.amsl.com (Postfix) with ESMTP id EBAFA3A7183 for <saag@ietf.org>; Thu, 30 Jul 2009 00:52:00 -0700 (PDT)
Received: by pzk14 with SMTP id 14so380074pzk.29 for <saag@ietf.org>; Thu, 30 Jul 2009 00:52:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:reply-to:date:message-id :subject:from:to:cc:content-type:content-transfer-encoding; bh=Pj+Q3i4kMCBEnGMhJIg1PK1yi3IYnMaa80g0utjFoN4=; b=MVvRytc1DDHpZ1LvMfvGdb7YfsGri81FR5j5Wy5uTNyHmgHqdqsD4ATBTg3tmXpV9p YkScbKul+UxPNcaRo38GN4KulO0XiISPPRG7U45PR/FM7Z8n0QAnOPEVPIQ8XSewCeJy Bkh2l1o7MdlviiSpnCQz9CbtfNEUqO34ip7wo=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:reply-to:date:message-id:subject:from:to:cc :content-type:content-transfer-encoding; b=TL4rZzHVpeacoTZtaPLl2EeSAZw5HA36PqKgx7FBFXtQRJchJPWqaIwkubpf5W+Trd UfCZGcdRWf/GbS94Q3nV5OxflY5mynEnbcFJ6HI5PSP+WbLOfFstOs9pX5e4OnveZ1Yy ulo6924kk7PSr9UoTTlhf8wOhOE55THBESyPY=
MIME-Version: 1.0
Received: by 10.114.136.7 with SMTP id j7mr1231739wad.30.1248940320859; Thu,  30 Jul 2009 00:52:00 -0700 (PDT)
Date: Thu, 30 Jul 2009 03:52:00 -0400
Message-ID: <6c9fcc2a0907300052m71a3846kb8adae1370e4c678@mail.gmail.com>
From: Barry Leiba <barryleiba.mailing.lists@gmail.com>
To: saag@ietf.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: IETF DKIM WG <ietf-dkim@mipassoc.org>
Subject: [saag] DKIM summary report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: barryleiba@computer.org
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 07:52:01 -0000

The DKIM working group met on Tuesday afternoon.  The group's
chartered work is nearly done (the last document is in WGLC, and two
others are now in the RFC Editor queue), so the goal of this meeting
was to discuss implementation reports and draft-standard progression
for the base protocol.

Dave Crocker has posted implementation surveys to the mailing list,
but has so far gotten few replies.  WG participants were urged to
complete them, and to pass them on to others.  Barry will pass them to
MAAWG (Messaging Anti-Abuse Working Group) and urge response, as IETF
liaison to MAAWG.  Barry would like to collect data not only on
feature use by signers and verifiers, but also on what use the
verifiers make of the results.

There was much discussion about dropping unused or little-used
features in the process of going to draft standard.  We note that RFC
2026 *requires* dropping features that are truly unused, but whether
to drop others is a different question.  Several opinions were given
about keeping all features, because, while there's plenty of
experience with signing and verifying, knowledge of usage of the
result of verifying is still limited.  We don't yet know what
verifiers will decide is important, over time.  Counter-argument:
history shows that when we learn that, we'll find that the features we
kept purely speculatively will be the wrong ones anyway.

Informal vote showed approximately a 2-to-1 preference for keeping
*all* features, versus removing some.  Chairs don't consider that to
be sufficient for "rough consensus", so it will be discussed on the
list.  Pasi pointed out, and the chairs agree, that because we had
consensus on these to start with, the default action, lacking clear
consensus to remove a feature, is to keep it.

There was also discussion indicating that documenting DKIM use cases
could be helpful.  Perhaps this could be added to the "deployment"
document (in WGLC now), or perhaps using an easily updated wiki.

Barry Leiba (and Stephen Farrell)

From larry.zhu@microsoft.com  Thu Jul 30 01:15:44 2009
Return-Path: <larry.zhu@microsoft.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9BEB028C1F3 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:15:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.278
X-Spam-Level: 
X-Spam-Status: No, score=-8.278 tagged_above=-999 required=5 tests=[AWL=2.321,  BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fx2AVsE5RmP7 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:15:44 -0700 (PDT)
Received: from smtp.microsoft.com (mail2.microsoft.com [131.107.115.215]) by core3.amsl.com (Postfix) with ESMTP id 7BAFC28C1F0 for <saag@ietf.org>; Thu, 30 Jul 2009 01:15:44 -0700 (PDT)
Received: from TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) by TK5-EXGWY-E802.partners.extranet.microsoft.com (10.251.56.168) with Microsoft SMTP Server (TLS) id 8.2.99.4; Thu, 30 Jul 2009 01:15:46 -0700
Received: from TK5EX14MLTW652.wingroup.windeploy.ntdev.microsoft.com (157.54.71.68) by TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) with Microsoft SMTP Server id 14.0.621.7; Thu, 30 Jul 2009 01:15:45 -0700
Received: from TK5EX14MBXW653.wingroup.windeploy.ntdev.microsoft.com ([169.254.3.25]) by TK5EX14MLTW652.wingroup.windeploy.ntdev.microsoft.com ([157.54.71.68]) with mapi; Thu, 30 Jul 2009 01:15:45 -0700
From: Larry Zhu <larry.zhu@microsoft.com>
To: "saag@ietf.org" <saag@ietf.org>
Thread-Topic: krb-wg report (IETF 75)
Thread-Index: AcoQ7e+QRkZMpGiyQU+RKB8B+korzQ==
Date: Thu, 30 Jul 2009 08:15:44 +0000
Message-ID: <D3DC9D45B39CFC4CB312B2DD279B354C1D9F80@TK5EX14MBXW653.wingroup.windeploy.ntdev.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: [saag] krb-wg report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 08:15:44 -0000

Krb-wg will meet tomorrow (Friday) in the morning after saag today.

We will have technical discussions on FAST ID and IA-Kerb. Shoichi will mak=
e a presentation on the proposed DHCPv6 Kerberos option. Tom will give us a=
n update on the Kerberos consortium activities related to SHA1 hash usage a=
nd proposals.

Overall we have 7 documents either ready or close to be ready. The Kerberos=
 OTP document generated considerable amount of discussions in the list duri=
ng the past 3 months. The discussions are constructive and the chair believ=
es this document is converging and currently in good shape, though a workin=
g group second last call is deemed necessary due to significant changes mad=
e or to be made as the result of these discussions.

Larry Zhu

From turners@ieca.com  Thu Jul 30 01:41:41 2009
Return-Path: <turners@ieca.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BCCD628C1AB for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:41:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QnJ1SL21pc8X for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:41:40 -0700 (PDT)
Received: from smtp109.biz.mail.re2.yahoo.com (smtp109.biz.mail.re2.yahoo.com [206.190.53.8]) by core3.amsl.com (Postfix) with SMTP id 186D828C144 for <saag@ietf.org>; Thu, 30 Jul 2009 01:41:40 -0700 (PDT)
Received: (qmail 94616 invoked from network); 30 Jul 2009 08:41:39 -0000
Received: from unknown (HELO dhcp-1598.meeting.ietf.org) (turners@130.129.21.152 with plain) by smtp109.biz.mail.re2.yahoo.com with SMTP; 30 Jul 2009 08:41:39 -0000
X-Yahoo-SMTP: qPTWNAeswBAtDTSn9GKlmmL3C90ke7grn_5n9To-
X-YMail-OSG: jF6Iz24VM1l.aABWl0NH2lYR6KWehs1bGBMKuwdBDUhePm1lwRC3DyfWONz8KlJGT4MM9Yl3apLdxI6QUEae5qcUbWgknMdTpolkJBCY96T8ivHPTTbzcAz4WmzO36NPW5AVud.Lyu.deRZjvLQPGXeopvEkLW9r3pib1JQ0jcfGV9_8qltH75zmwBb9yvSpHzB9QcUt0y_QII_4p8AzNc05MhXFMjdnCXgxRks09by47Qd_P1ZCB8rQXMzyoh9b2Nv.ufmpws_Kv75lj6oh_lNDjA1UjwX7Sw.sXuxcXG5BrkoubyPZbpz5H0zGkAFWwa14nEM-
X-Yahoo-Newman-Property: ymail-3
Message-ID: <4A715CC1.1000900@ieca.com>
Date: Thu, 30 Jul 2009 10:41:37 +0200
From: Sean Turner <turners@ieca.com>
User-Agent: Thunderbird 2.0.0.22 (Macintosh/20090605)
MIME-Version: 1.0
To: saag@ietf.org, keyprov@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [saag] KEYPROV report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 08:41:41 -0000

The KEYPROV WG meeting Thursday morning.  Somewhere around 20 brave 
souls entered the cavernous 790 seat auditorium.

KEYPROV has three IDs:

The Portable Symmetric Key Container (PSKC) ID has emerged nearly 
unscathed from its 2nd WGLC.  Another version will be produced to 
address the minor comments raised during this WGLC.  It will be passed 
to Pasi once it is published.

The Symmetric Key Package Content Type ID will be updated to add ASN.1 
versions of the XML PSKC attributes.  After the next version is 
published, it will enter WGLC.

The Dynamic Symmetric Key Provisioning Protocol (DSKPP) will be updated 
to address minor comments and when it is published it will enter WGLC.

A PSKC reference implementation has been developed.  A link to it will 
be provided to the KEYPROV mailing list.

spt


From larry.zhu@microsoft.com  Thu Jul 30 01:07:46 2009
Return-Path: <larry.zhu@microsoft.com>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5EBED28C1B0 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:07:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.278
X-Spam-Level: 
X-Spam-Status: No, score=-8.278 tagged_above=-999 required=5 tests=[AWL=2.321,  BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DfU7lE0Y1KU8 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:07:45 -0700 (PDT)
Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.212]) by core3.amsl.com (Postfix) with ESMTP id B593528C1A1 for <saag@ietf.org>; Thu, 30 Jul 2009 01:07:45 -0700 (PDT)
Received: from TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.2.99.4; Thu, 30 Jul 2009 01:07:47 -0700
Received: from TK5EX14MLTW652.wingroup.windeploy.ntdev.microsoft.com (157.54.71.68) by TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) with Microsoft SMTP Server id 14.0.621.7; Thu, 30 Jul 2009 01:07:47 -0700
Received: from TK5EX14MBXW653.wingroup.windeploy.ntdev.microsoft.com ([169.254.3.25]) by TK5EX14MLTW652.wingroup.windeploy.ntdev.microsoft.com ([157.54.71.68]) with mapi; Thu, 30 Jul 2009 01:07:47 -0700
From: Larry Zhu <larry.zhu@microsoft.com>
To: "saag@ietf.org" <saag@ietf.org>
Thread-Topic: krb-wg report (IETF 75)
Thread-Index: AcoQ7NIekkDTp31YRyeZ2ggL+hXn2Q==
Date: Thu, 30 Jul 2009 08:07:45 +0000
Message-ID: <D3DC9D45B39CFC4CB312B2DD279B354C1D9F2D@TK5EX14MBXW653.wingroup.windeploy.ntdev.microsoft.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailman-Approved-At: Thu, 30 Jul 2009 01:59:43 -0700
Subject: [saag] krb-wg report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 08:09:15 -0000

Krb-wg will meet tomorrow (Friday) in the morning after saag today.

We will have technical discussions on FAST ID and IA-Kerb. Shoichi will mak=
e a presentation on the proposed DHCPv6 Kerberos option. Tom will give us a=
n update on the Kerberos consortium activities related to SHA1 hash usage a=
nd proposals.

Overall we have 7 documents either ready or close to be ready. The Kerberos=
 OTP document generated considerable amount of discussions in the list duri=
ng the past 3 months. The discussions are constructive and the chair believ=
es this document is converging and currently in good shape, though a workin=
g group second last call is deemed necessary due to significant changes mad=
e or to be made as the result of these discussions.

Larry Zhu

From j.schoenwaelder@jacobs-university.de  Thu Jul 30 01:21:22 2009
Return-Path: <j.schoenwaelder@jacobs-university.de>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B494028C241 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:21:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.199
X-Spam-Level: 
X-Spam-Status: No, score=-2.199 tagged_above=-999 required=5 tests=[AWL=0.050,  BAYES_00=-2.599, HELO_EQ_DE=0.35]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ykhmPbYkWm10 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 01:21:21 -0700 (PDT)
Received: from hermes.jacobs-university.de (hermes.jacobs-university.de [212.201.44.23]) by core3.amsl.com (Postfix) with ESMTP id DD96128C24E for <saag@ietf.org>; Thu, 30 Jul 2009 01:20:53 -0700 (PDT)
Received: from localhost (demetrius1.jacobs-university.de [212.201.44.46]) by hermes.jacobs-university.de (Postfix) with ESMTP id 68089C00B8 for <saag@ietf.org>; Thu, 30 Jul 2009 10:20:55 +0200 (CEST)
X-Virus-Scanned: amavisd-new at jacobs-university.de
Received: from hermes.jacobs-university.de ([212.201.44.23]) by localhost (demetrius1.jacobs-university.de [212.201.44.32]) (amavisd-new, port 10024) with ESMTP id KrYhGEHgs5DX; Thu, 30 Jul 2009 10:20:54 +0200 (CEST)
Received: from elstar.local (elstar.iuhb02.iu-bremen.de [10.50.231.133]) by hermes.jacobs-university.de (Postfix) with ESMTP id 81212C0025; Thu, 30 Jul 2009 10:20:54 +0200 (CEST)
Received: by elstar.local (Postfix, from userid 501) id AC9F0B71AC2; Thu, 30 Jul 2009 10:20:54 +0200 (CEST)
Date: Thu, 30 Jul 2009 10:20:54 +0200
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: saag@ietf.org
Message-ID: <20090730082054.GC15636@elstar.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.19 (2009-01-05)
X-Mailman-Approved-At: Thu, 30 Jul 2009 01:59:43 -0700
Subject: [saag] ISMS report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 08:21:22 -0000

The ISMS WG met on Monday afternoon at IETF 75. Since the last meeting
at IETF 74, all chartered work items were completed (three RFCs
published and one currently in AUTH48). A recharting discussion before
IETF 75 let to the adoption of two additional work items: SNMP over
TLS/DTLS and RADIUS authorization of SNMP access control policies. Two
individual submissions were discussed at IETF 75 and the WG adopted
them as working group items. The goal is to deliver the final versions
of these documents in January 2010 to the IESG and then ISMS is likely
done.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>

From tlyu@MIT.EDU  Thu Jul 30 02:22:25 2009
Return-Path: <tlyu@MIT.EDU>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AC93828C2A2 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 02:22:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.266
X-Spam-Level: 
X-Spam-Status: No, score=-5.266 tagged_above=-999 required=5 tests=[AWL=1.333,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LCJo6-GorEq7 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 02:22:24 -0700 (PDT)
Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by core3.amsl.com (Postfix) with ESMTP id 9D0D328C290 for <saag@ietf.org>; Thu, 30 Jul 2009 02:22:24 -0700 (PDT)
Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id n6U9MLZS005664; Thu, 30 Jul 2009 05:22:21 -0400 (EDT)
Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id n6U9MKux012281 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 30 Jul 2009 05:22:20 -0400 (EDT)
Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id n6U9MKXG012174; Thu, 30 Jul 2009 05:22:20 -0400 (EDT)
To: saag@ietf.org
From: Tom Yu <tlyu@MIT.EDU>
Date: Thu, 30 Jul 2009 05:22:20 -0400
Message-ID: <ldvskgettir.fsf@cathode-dark-space.mit.edu>
Lines: 54
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Scanned-By: MIMEDefang 2.42
Cc: ietf-sasl@imc.org
Subject: [saag] SASL IETF75 summary
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 09:22:25 -0000

Simple Authentication And Security Layer (SASL)
IETF75, Stockholm, Sweden

Monday, July 27, 15:20--17:20
=============================

Chairs:

Tom Yu <tlyu@mit.edu>
Kurt Zeilenga <kurt.zeilenga@isode.com>

Scribe: Peter Saint-Andre

Jabber:
http://jabber.ietf.org/logs/sasl/2009-07-27.txt

Audio:
ftp://videolab.uoregon.edu/pub/videolab/media/ietf75/ietf75-mon-rm300-pm.mp3

Agenda slides:
http://www.ietf.org/proceedings/75/slides/sasl-0.pdf

GS2 slide:
http://www.ietf.org/proceedings/75/slides/sasl-1.pdf

====================

- draft-ietf-sasl-gs2-14 -- in WGLC
- draft-ietf-sasl-scram-02 -- in WGLC
- draft-ietf-sasl-4422bis-01 -- not much progress, mostly editorial
- changes
- draft-ietf-sasl-channel-bindings-03 -- some revisions, as side
  effect of SCRAM/GS2 discussion

SCRAM and GS2 in WGLC (concluding Aug. 3); mostly editorial comments
at this point.

SASL base spec to Draft Standard: need implementation report.  4422bis
needs revised SASLprep, which Kurt will work on.  Some discussion
about normative downref to SASLprep.  Probably not a problem because
individual mechanisms are what actually normatively reference it.

Drop EXTERNAL from base spec?  No consensus either way.  Probably not
a big deal; could possibly get folded into Simon's external-channel
draft.

Milestones:

Mar 09 GS2 WGLC -- in progress
Mar 09 SCRAM WGLC -- in progress
Apr 09 decide CRAM-MD5 approach -- done; Tom will summarize to list
Jun 09 4422bis I-D -- initial revisions
Oct 09 implementation report
Oct 09 4422bis WGLC

From dhc@dcrocker.net  Thu Jul 30 03:18:09 2009
Return-Path: <dhc@dcrocker.net>
X-Original-To: saag@core3.amsl.com
Delivered-To: saag@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1923A3A6B43 for <saag@core3.amsl.com>; Thu, 30 Jul 2009 03:18:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0fupHUPR3Wle for <saag@core3.amsl.com>; Thu, 30 Jul 2009 03:18:08 -0700 (PDT)
Received: from sbh17.songbird.com (unknown [IPv6:2001:470:1:76:0:ffff:4834:7147]) by core3.amsl.com (Postfix) with ESMTP id EAD983A7052 for <saag@ietf.org>; Thu, 30 Jul 2009 03:18:07 -0700 (PDT)
Received: from [130.129.85.251] (dhcp-55fb.meeting.ietf.org [130.129.85.251]) (authenticated bits=0) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id n6UAHog7031773 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 30 Jul 2009 03:18:02 -0700
Message-ID: <4A717349.3010900@dcrocker.net>
Date: Thu, 30 Jul 2009 12:17:45 +0200
From: Dave CROCKER <dhc@dcrocker.net>
Organization: Brandenburg InternetWorking
User-Agent: Thunderbird 2.0.0.22 (Windows/20090605)
MIME-Version: 1.0
To: barryleiba@computer.org
References: <6c9fcc2a0907300052m71a3846kb8adae1370e4c678@mail.gmail.com>
In-Reply-To: <6c9fcc2a0907300052m71a3846kb8adae1370e4c678@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.17]); Thu, 30 Jul 2009 03:18:03 -0700 (PDT)
X-Mailman-Approved-At: Thu, 30 Jul 2009 08:01:33 -0700
Cc: saag@ietf.org, IETF DKIM WG <ietf-dkim@mipassoc.org>
Subject: Re: [saag] [ietf-dkim] DKIM summary report (IETF 75)
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: dcrocker@bbiw.net
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/saag>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2009 10:18:09 -0000

Barry Leiba wrote:
> The DKIM working group met on Tuesday afternoon. 


Barry,  Just wanted to thank you for writing such an excellent summary of the 
meeting.  I think you captured the salient points perfectly.

d/

-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net
