Re: [Gen-art] Review of draft-harkins-owe-05

2017-02-01 Thread Jari Arkko
Thanks for your review, Lucy!

Jari

On 09 Dec 2016, at 18:17, Lucy Yong  wrote:

> Reviewer: Lucy Yong
> Review result: Ready with Nits
> 
> The draft is nearly ready for the publication.
> 
> Minor comment: Suggest adding this in security considerations: OWE
> provides encryption over the wireless medium, i.e., Wi-Fi without
> authentication. Thus it does not provide security for end-to-end
> traffic.  users should still use application level security such as
> VPN for end-to-end security. In this case, use of OWE prevents VPN
> authentication info. to be spoofed in open public Wi-Fi.
> one question: Will a user notices if OWE is used or not?  This may be
> important for some users.
> 
> nit: r/encryption of the wireless medium/encryption over the wireless
> medium/
> 
> 
> 



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Gen-art mailing list
Gen-art@ietf.org
https://www.ietf.org/mailman/listinfo/gen-art


[Gen-art] Review of draft-harkins-owe-05

2016-12-09 Thread Lucy Yong
Reviewer: Lucy Yong
Review result: Ready with Nits

The draft is nearly ready for the publication.
 
Minor comment: Suggest adding this in security considerations: OWE
provides encryption over the wireless medium, i.e., Wi-Fi without
authentication. Thus it does not provide security for end-to-end
traffic.  users should still use application level security such as
VPN for end-to-end security. In this case, use of OWE prevents VPN
authentication info. to be spoofed in open public Wi-Fi.
one question: Will a user notices if OWE is used or not?  This may be
important for some users. 

nit: r/encryption of the wireless medium/encryption over the wireless
medium/



___
Gen-art mailing list
Gen-art@ietf.org
https://www.ietf.org/mailman/listinfo/gen-art