RE: [TLS] Re: I-D ACTION:draft-ietf-tls-srp-13.txt

[Tom Wu <tjw at CS.Stanford.EDU>]

On Thu, 21 Dec 2006, Blumenthal, Uri wrote:

> I for one would like to (a) see the URLs pointing to free reference implementation(s), and (b) hear a clarification wrt. IPR status of the method defined in this draft.

(a) I am aware of the following free implementations of TLS/SRP:

- http://www.edelweb.fr/EdelKey/ (OpenSSL, C-based)
- http://www.trevp.net/tlslite/ (Python-based)
- http://www.gnu.org/software/gnutls/ (C-based, GPL)
- http://www.nongnu.org/jessie/ (Java-based)

(b) SRP-6 as used in the TLS/SRP specification is available under
Stanford's royalty-free licensing terms
(http://otl.stanford.edu/pdf/97006.pdf).

> I would certainly object advancement beyond Experimental until these two questions are answered to the satisfaction of the WG.
>
> Regards,
> Uri
> <Disclaimer> I speak for myself only.

Tom

> -----Original Message-----
> From: Peter Sylvester [mailto:Peter.Sylvester at edelweb.fr]
> Sent: Thursday, December 21, 2006 12:11 PM
> To: EKR
> Cc: tls at ietf.org
> Subject: Re: [TLS] Re: I-D ACTION:draft-ietf-tls-srp-13.txt
>
> EKR wrote:
> > Peter Sylvester <Peter.Sylvester at edelweb.fr> writes:
> >
> > > Would you mind giving a little bit more detailed explanation in particular
> > > what are the reasons why this cannot be on standards tracks, or what would
> > > be necessary if it would be etc.
> >
> > There are two reasons. First, as a matter of policy we are attempting
> > to move new work to Standards Track only where there is fairly strong
> > support for the work. In this case, the support for this work did
> > not appear to be particularly strong.
> Several existing interoperable implementations exist. I think that this is
> perfectly in the spirit of the IETF. If accepted as a standards track,
> the protocol
> would probably directly directly go to draft.
> > Second, the IPR issues surrounding all the ZKPP protocols are quite
> > murky and thus it would have required an affirmative decision by
> > the WG to move this document forward as a Proposed Standard
> > despite said issues.
> Several have requested the document being forwarded.
> I have not read any comment so far that is against the proposal except may
> you in this comment.

--
Tom Wu
http://www-cs-students.stanford.edu/~tjw/

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls