Re: [Isms] SNMP over (D)TLS draft available for review

[Hamid Mukhtar <hamid.mukhtar at gmail.com>]

Dear Wes,

In section 3.1.2 its mentioned that

>   the NULL integrity and encryption algorithms MUST NOT be used to fulfill
>   security level requests for authentication or privacy.
>   Implementations MAY choose to force (D)TLS to only allow
>   cipher_suites that provide both authentication and privacy to
>   guarantee this assertion.

IMO the requirement, as stated currently, may have to be changed to
consider authentication-only cipher suites (with no encryption)
[RFC4785].

On Wed, Oct 28, 2009 at 8:04 AM, Wes Hardaker <wjhns1 at hardakers.net> wrote:
>
> As you probably saw from the official draft announcement, a new copy of
> the SNMP over (D)TLS draft is available from:
>
>  http://tools.ietf.org/html/draft-ietf-isms-dtls-tm-01
>
> A diff from the previous version can be found here:
>
>  http://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-isms-dtls-tm-01.txt
>
> The -01 version reflects all outstanding issues that I'm aware of.  It
> would be good if WG participants could review the document and/or
> changes prior to the WG meeting in Hiroshima and list any issues you
> have with the draft so we can use the meeting time to discuss any of
> them that require a face-to-face meeting.
> --
> Wes Hardaker
> Cobham Analytic Solutions
> _______________________________________________
> Isms mailing list
> Isms at ietf.org
> https://www.ietf.org/mailman/listinfo/isms
>