Re: [NGO] Re: FW: 10/18 agenda item - NETCONF WG Rechartering

[Balazs Lengyel <balazs.lengyel at ericsson.com>]

Hello,
I always thought one important reason to introduce TLS for Netconf was to support small devices 
that anyway have a built-in web server management interface. These devices AFAIK usually have 
an administrator user with a password, but usually do not have any certificates about the 
management user (client). So I think userId/Password base authentication of the client is a must.

I don really know how many people use certificate based client authentication. in my practice 
not many.

regards balazs

Sam Hartman wrote:
> Hi.
> I don't think your text really addresses what I'm talking about.
>
> I want to make sure the working group has had a discussion of how
> client to server authentication will be performed using netconf over
> TLS and I want to make sure that the participants have considered the
> implications when they came to consensus on this approach.
>
> For example if you plan to use an approach that uses client
> certificates it is important that WG participants understand this
> approach will not support passwords.
>
>
>
> _______________________________________________
> NGO mailing list
> NGO at ietf.org
> https://www1.ietf.org/mailman/listinfo/ngo

--
Balazs Lengyel                       Ericsson Hungary Ltd.
TSP System Manager
ECN: 831 7320                        Fax: +36 1 4377792
Tel: +36-1-437-7320     email: Balazs.Lengyel at ericsson.com


_______________________________________________
NGO mailing list
NGO at ietf.org
https://www1.ietf.org/mailman/listinfo/ngo