Re: [Emu] [lamps] EAP/EMU recommendations for client cert validation logic

2020-01-15 Thread Benjamin Kaduk
A couple things that stand out to me from having basically read the whole thread in one go (this is not intended to be an exhaustive list of open questions): It was implied but not fully clear to me, that Ryan thinks that someone so inclined could, right now, go around trying to connect to wifi us

Re: [Emu] [lamps] EAP/EMU recommendations for client cert validation logic

2020-01-15 Thread Joseph Salowey
There has been a lot of discussion on this thread, but I do not see anything actionable for the EAP-TLS 1.3 specification. Joe On Wed, Jan 8, 2020 at 12:48 PM Alan DeKok wrote: > On Jan 8, 2020, at 3:00 PM, Michael Richardson > wrote: > > > > > > Alan DeKok wrote: > >alan> Many people use

Re: [Emu] AD review of draft-ietf-emu-rfc5448bis-06

2020-01-15 Thread Joseph Salowey
On Wed, Jan 15, 2020 at 2:24 PM Roman Danyliw wrote: > Hello! > > I conducted an AD review of draft-ietf-emu-rfc5448bis-06 and this document > is in good shape. Thanks for all of the work on it. I have minor > questions and editorial nits which can be addressed with the IETF Last Call > feedbac

[Emu] Last Call: (Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')) to Informational RFC

2020-01-15 Thread The IESG
The IESG has received a request from the EAP Method Update WG (emu) to consider the following document: - 'Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')' as Informational RFC The IESG plans to make a decision in the n

[Emu] AD review of draft-ietf-emu-rfc5448bis-06

2020-01-15 Thread Roman Danyliw
Hello! I conducted an AD review of draft-ietf-emu-rfc5448bis-06 and this document is in good shape. Thanks for all of the work on it. I have minor questions and editorial nits which can be addressed with the IETF Last Call feedback. Minor: -- Can you revisit the history -- why was RFC4187 inf

Re: [Emu] BRSKI-TEAP vs regular connection (was Re: EAP questions ...)

2020-01-15 Thread Eliot Lear (elear)
> On 15 Jan 2020, at 16:10, Michael Richardson wrote: > > > Eliot Lear (elear) wrote: >>> Owen, do we have a need to recognize that a device needs to perform >>> onboarding again after a movement? >>> >>> i.e. device A enrolls on network 1, gets an LDevID usable on network >>> 1, uses that w

Re: [Emu] BRSKI-TEAP vs regular connection (was Re: EAP questions ...)

2020-01-15 Thread Michael Richardson
Eliot Lear (elear) wrote: >> Owen, do we have a need to recognize that a device needs to perform >> onboarding again after a movement? >> >> i.e. device A enrolls on network 1, gets an LDevID usable on network >> 1, uses that with EAP-FOOBAR. >> >> device A then is mov

Re: [Emu] BRSKI-TEAP vs regular connection (was Re: EAP questions ...)

2020-01-15 Thread Eliot Lear (elear)
Hi Michael, > > Owen, do we have a need to recognize that a device needs to perform > onboarding again after a movement? > > i.e. device A enrolls on network 1, gets an LDevID usable on network 1, > uses that with EAP-FOOBAR. > > device A then is moved to network 2, it tries to use same LDevID