Re: [MEXT] AD review of draft-ietf-mext-aaa-ha-goals-01

[marcelo bagnulo braun <marcelo at it.uc3m.es>]

Hi Jari,

thanks for the feedback

just to make sure, is there something you want us (either the MEXT WG or 
the editors of the document) to do about this?

regards, marcelo


Jari Arkko escribió:
> I have done my AD review on this document.
>
> The document is ready to move forward, but I wanted to note something 
> regarding requirement G2.12.
>
> This requirement says that it must be possible to support IKEv2 shared 
> secret authentication. I can see some good and bad ways of implementing 
> this in terms of the solutions. Is the solution already in some document?
>
> I think we want to pay close attention to how this requirement is 
> fulfilled and make sure the architecture is right. (Sending keys vs. 
> specific keys for this HA vs. asking the server to calculate an 
> authentication value, binding of access keys to things that go across 
> accesses, mandatory vs. optional confidentiality of transported keys, 
> etc.) I will ask for early security review on the solutions.
>
> Jari
>
> _______________________________________________
> MEXT mailing list
> MEXT at ietf.org
> https://www.ietf.org/mailman/listinfo/mext
>
>   

_______________________________________________
MEXT mailing list
MEXT at ietf.org
https://www.ietf.org/mailman/listinfo/mext