[Gen-art] Gen-ART LC review of draft-ietf-tram-auth-problems-02
Brian E Carpenter <brian.e.carpenter@gmail.com> Sat, 26 July 2014 15:00 UTC
Return-Path: <brian.e.carpenter@gmail.com>
X-Original-To: gen-art@ietfa.amsl.com
Delivered-To: gen-art@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 868FB1B282F for <gen-art@ietfa.amsl.com>; Sat, 26 Jul 2014 08:00:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TaYELqiqWdeA for <gen-art@ietfa.amsl.com>; Sat, 26 Jul 2014 08:00:31 -0700 (PDT)
Received: from mail-qg0-x22e.google.com (mail-qg0-x22e.google.com [IPv6:2607:f8b0:400d:c04::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9361D1A030E for <gen-art@ietf.org>; Sat, 26 Jul 2014 08:00:31 -0700 (PDT)
Received: by mail-qg0-f46.google.com with SMTP id z60so6516907qgd.19 for <gen-art@ietf.org>; Sat, 26 Jul 2014 08:00:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:organization:user-agent:mime-version:to :subject:content-type:content-transfer-encoding; bh=dwHOHRblk5deXu8HnxAFNf5r6vmuj/2zvW+r57SsJyE=; b=hpVL1KIjt6igh1kmhQYvrBMAFx9vhGzncr+To3dkL5uouQPGRvL5FlFYZSdFDL00b8 iwPeUr9HfV9++7kjIvlTqlPdJ32SE4RuNLJ+gbsmW2TD1ra6OSKJkjloxfi3Y8RSCJ5d ux5qU9aRXDaKKGm1pZz3ZoduKJpBBP6jGDPaqvxuRHnALgfyZqi1VWs9Z7lNj7IFDEIY MnBMrU8dEciw+Ta0lLLvr3HcCNDwzU0HBK1vAtjBOxCJtuOV2ZL0jEB1gc4JlR+hKBL0 zJ1IMHEwtCO+J3Hkkh37uesShwiwq4q9SUVeURqWIzKCqHXz3LlS8yjM5gHfKBTyKc1d d7Cw==
X-Received: by 10.224.21.9 with SMTP id h9mr37838289qab.67.1406386830804; Sat, 26 Jul 2014 08:00:30 -0700 (PDT)
Received: from [142.131.64.169] ([206.47.221.210]) by mx.google.com with ESMTPSA id l76sm15334609qga.8.2014.07.26.08.00.28 for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 26 Jul 2014 08:00:29 -0700 (PDT)
Message-ID: <53D3C28B.6020801@gmail.com>
Date: Sun, 27 Jul 2014 03:00:27 +1200
From: Brian E Carpenter <brian.e.carpenter@gmail.com>
Organization: University of Auckland
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: draft-ietf-tram-auth-problems.all@tools.ietf.org, General Area Review Team <gen-art@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/gen-art/1Cnkv3p7bpExAfqer1sfPL0NzV4
Subject: [Gen-art] Gen-ART LC review of draft-ietf-tram-auth-problems-02
X-BeenThere: gen-art@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "GEN-ART: General Area Review Team" <gen-art.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/gen-art>, <mailto:gen-art-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/gen-art/>
List-Post: <mailto:gen-art@ietf.org>
List-Help: <mailto:gen-art-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/gen-art>, <mailto:gen-art-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 26 Jul 2014 15:00:41 -0000
I am the assigned Gen-ART reviewer for this draft. For background on Gen-ART, please see the FAQ at <http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>. Please resolve these comments along with any other Last Call comments you may receive. Document: draft-ietf-tram-auth-problems-02.txt Reviewer: Brian Carpenter Review Date: 2014-07-26 IETF LC End Date: 2014-08-08 IESG Telechat date: Summary: Almost ready -------- Minor issues: ------------- In Problem 2, would it be useful to reference RFC 6151, which indicates why MD5 is problematic? Problem 6 (Hosting multiple realms on a single IP address is challenging...) doesn't really seem to be a problem with authentication as such, so while it's clearly a problem, is it in scope? It isn't quite clear to me that there's a security threat there.
- [Gen-art] Gen-ART LC review of draft-ietf-tram-au… Brian E Carpenter
- Re: [Gen-art] Gen-ART LC review of draft-ietf-tra… Simon Perreault
- Re: [Gen-art] Gen-ART LC review of draft-ietf-tra… Brian E Carpenter
- Re: [Gen-art] Gen-ART LC review of draft-ietf-tra… Simon Perreault
- Re: [Gen-art] Gen-ART LC review of draft-ietf-tra… Tirumaleswar Reddy (tireddy)
- Re: [Gen-art] Gen-ART LC review of draft-ietf-tra… Brian E Carpenter