[Emu] Issue #12: TLS Extensions

2009-08-05 Thread Joseph Salowey (jsalowey)
#12: TLS Extensions > Section 4.2.1.3 > > " In order to meet the requirements in this document TLS > extensions MAY >be used. For example, TLS extensions may be useful in providing >certificate revocation information via the TLS OCSP extension (thus >meeting the requirement in

[Emu] Issue #11: TLS version

2009-08-05 Thread Joseph Salowey (jsalowey)
#11: TLS version > Section 4.2.1 > > " The tunnel based method MUST support TLS version 1.2 [RFC5246] and >SHOULD support TLS version 1.0 [RFC2246] and version 1.1 > [RFC4346] to >enable the possibility of backwards compatibility with existing >deployments." > > I am not sur

[Emu] Issue #10: Emergency Services

2009-08-05 Thread Joseph Salowey (jsalowey)
#10: Emergency Services > Section 3.5 > > " When wireless VOIP service is provided, some regulations > require any >user to be able to gain access to the network to make an emergency >telephone call." > > Which regulations are being referred to? In a number of > places, supp

[Emu] Issue #9: Peer Identity Protection

2009-08-05 Thread Joseph Salowey (jsalowey)
#9: Peer Identity Protection > Section 3.4 > > " When performing an EAP authentication, the peer may want to protect >its identity, only disclosing its identity to a trusted backend >authentication server. This helps to maintain the privacy of the >peer's identity." > > With

[Emu] Issue #8: Cryptographic Binding Text

2009-08-05 Thread Joseph Salowey (jsalowey)
#8: Cryptographic Binding Text > Section 3.2 > > " In >particular, when weak methods are used, security policies enforcing >that such methods can only be executed inside a tunnel but never >outside one are required to mitigate the attack." > > The requirement that methods only

[Emu] Issue #7: Password Authentication

2009-08-05 Thread Joseph Salowey (jsalowey)
#7: Password Authentication > Section 3.1 Password Authentication > > " Many legacy systems only support user authentication with > passwords. >Some of these systems require transport of the actual username and >password to the authentication server. The tunnel method > MUST sup

[Emu] Issue 6: RFC 2119 Language

2009-08-05 Thread Joseph Salowey (jsalowey)
Description: Section 2 " Because this specification is an informational specification (not able to directly use [RFC2119])," Since a large number of Informational RFCs reference RFC 2119 and use normative language, this statement seems odd. Perhaps what it is trying to say is that the terms don't

Re: [Emu] If we use the Radius property extension

2009-08-03 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Richard [mailto:rishy...@gmail.com] > Sent: Monday, July 27, 2009 7:54 AM > To: Joseph Salowey (jsalowey); emu@ietf.org > Subject: If we use the Radius property extension > > Hi, all: > > The link to the slide: > http://www.

Re: [Emu] If we use the Radius property extension

2009-08-03 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Richard [mailto:rishy...@gmail.com] > Sent: Monday, July 27, 2009 2:57 PM > To: Dan Harkins > Cc: Joseph Salowey (jsalowey); emu@ietf.org; > dstan...@arubanetworks.com > Subject: Re: [Emu] If we use the Radius property extension >

[Emu] Slides for meeting

2009-07-25 Thread Joseph Salowey (jsalowey)
If you are on the agenda to present in the meeting please send your slides to the chairs so they can be uploaded to the server. Thanks, Joe ___ Emu mailing list Emu@ietf.org https://www.ietf.org/mailman/listinfo/emu

Re: [Emu] Last Call: draft-harkins-emu-eap-pwd (EAPAuthenticationUsing Only APassword) to Informational RFC

2009-07-21 Thread Joseph Salowey (jsalowey)
The announcement indicates that the draft will be published as informational, however Glen Zorn (one of the authors) has requested that this be changed to standards track so the status is currently under discussion. Since the document is in IETF last call comments on the draft including its standa

[Emu] FW: Last Call: draft-harkins-emu-eap-pwd (EAP Authentication Using Only APassword) to Informational RFC

2009-07-20 Thread Joseph Salowey (jsalowey)
-Original Message- From: ietf-announce-boun...@ietf.org [mailto:ietf-announce-boun...@ietf.org] On Behalf Of The IESG Sent: Monday, July 13, 2009 2:22 AM To: IETF-Announce Subject: Last Call: draft-harkins-emu-eap-pwd (EAP Authentication Using Only APassword) to Informational RFC The IE

[Emu] Draft EMU Agenda

2009-07-15 Thread Joseph Salowey (jsalowey)
Draft EMU agenda is available at: http://www.ietf.org/proceedings/09jul/agenda/emu.txt Let the chairs know if you have and additions or comments. Joe ___ Emu mailing list Emu@ietf.org https://www.ietf.org/mailman/listinfo/emu

Re: [Emu] I-D Action:draft-ietf-emu-eaptunnel-req-03.txt

2009-07-06 Thread Joseph Salowey (jsalowey)
I believe this revision addresses all outstanding comments, this should be ready for the IESG. Please review and indicate if the document is ready or if there are outstanding issues. Thanks, Joe > -Original Message- > From: emu-boun...@ietf.org [mailto:emu-boun...@ietf.org] On > Beha

Re: [Emu] draft-ietf-emu-chbind-02 and AAA interaction

2009-06-23 Thread Joseph Salowey (jsalowey)
; > > > > > > [KH] Disagree, see my comments to your suggestions #2. > > > > > [Joe] So, I see i1 as the messages used in EAP channel > bindings. i2 > > looks to me like validation that should be done by the AAA protocol. > I > > think I may not h

Re: [Emu] draft-ietf-emu-chbind-02 and AAA interaction

2009-06-22 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Hoeper Katrin-QWKN37 [mailto:khoe...@motorola.com] > Sent: Friday, June 19, 2009 5:39 PM > To: Joseph Salowey (jsalowey); emu@ietf.org > Subject: RE: [Emu] draft-ietf-emu-chbind-02 and AAA interaction > > Joe, > > Thank you fo

[Emu] draft-ietf-emu-chbind-02 and AAA interaction

2009-06-18 Thread Joseph Salowey (jsalowey)
After reviewing recent comments from Klaas on the list on Channel bindings there is one issue I would like to try to resolve before bringing this draft to last call. In section 5.1, the draft defines a message i2, which is the message carrying AAA attributes from the authenticator to the server

Re: [Emu] review of chbind-01

2009-05-31 Thread Joseph Salowey (jsalowey)
I'm not sure I quite understand the differences between the two cases. I think Klaas is saying that we need a protocol to exchange channel binding information, but we should stop before we define rules on how to evaluate this information. While I think that the requirements for the protocol ar

[Emu] Tunnel requirements and RFC 5247 and RFC 4962

2009-05-28 Thread Joseph Salowey (jsalowey)
Below, Glen suggests that it would be better to list specific requirements from RFC 5247 and RFC 4962 to avoid later confusion. This sounds like a good idea, is someone willing to contribute some text on this? I think it would be a distilled list of requirements from the two drafts normalized so

Re: [Emu] comments on draft-ietf-emu-eaptunnel-req-02.txt, part 1

2009-05-28 Thread Joseph Salowey (jsalowey)
Hi Glen, Thanks for the review. I've incorporated most of the suggestions into a new revision. I have a question for you below. > Same section, last paragraph, says: > >Since EAP authentication occurs before network access is > granted the >tunnel method SHOULD enable an inner exc

Re: [Emu] comments on draft-ietf-emu-eaptunnel-req-02.txt, part 1

2009-05-28 Thread Joseph Salowey (jsalowey)
Hi Glen, Thanks for the review. I've incorporated most of the suggestions into a new revision. I have a question for you below. > Same section, last paragraph, says: > >Since EAP authentication occurs before network access is > granted the >tunnel method SHOULD enable an inner exc

[Emu] Comments from Hannes on draft-clancy-emu-aaapay-01.txt

2009-03-01 Thread Joseph Salowey (jsalowey)
Hannes said: > > I understand the issue of defining channel bindings. > draft-ietf-emu-chbind-00 does this but it does not define payloads. > Do we really need to split this aspect into separate drafts? > [Joe] Not necessarily. > The aspect of having the possibility to carry an opaque blob >

Re: [Emu] Draft agenda for IETF 74

2009-03-01 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: emu-boun...@ietf.org [mailto:emu-boun...@ietf.org] On > Behalf Of Hannes Tschofenig > Sent: Sunday, March 01, 2009 10:46 AM > To: 'Alan DeKok'; emu@ietf.org > Subject: Re: [Emu] Draft agenda for IETF 74 > > Hi Alan, > > a few questions inline. What is mor

[Emu] FW: I-D Action:draft-ietf-emu-eaptunnel-req-02.txt

2009-03-01 Thread Joseph Salowey (jsalowey)
I believe the document contains all the changes discussed in the meeting and on the list. The document should be ready for working group last call. It would help if a few people could review it to make sure it is complete. The following link provides to access to diffs and previous versions: ht

Re: [Emu] Key derivation differences

2009-02-12 Thread Joseph Salowey (jsalowey)
Interesting, so it looks like EAP-MSCHAPv2 isn't fully defined except within a tunnel method, so its behavior is specific to the tunnel method... > -Original Message- > From: emu-boun...@ietf.org [mailto:emu-boun...@ietf.org] On > Behalf Of pasi.ero...@nokia.com > Sent: Thursday, Februa

Re: [Emu] IANA allocation issue in EAP-FAST Documents

2009-02-04 Thread Joseph Salowey (jsalowey)
> > Are you saying that the registry of "EAP-FAST PAC Attribute > Types" also > > relates to RFC 4507, which is a standards track document? > [Joe] This is not directly related to 4507. RFC 4507 treats tickets as opaque. > > If so, then I may see your point. RFC 5226 does permit > v

[Emu] Comments on section 4 of draft-ietf-emu-chbind-00

2009-01-19 Thread Joseph Salowey (jsalowey)
Section 4 defines two channel binding options - Binding channel information into the EAP method key derivation - Exchanging channel information between peer and authenticator for validation These options are not mutually exclusive. For example a method could exchange data that is bound into the

[Emu] Minutes from IETF 73

2008-12-11 Thread Joseph Salowey (jsalowey)
Thanks to Paul Sangster the notes from IETF 73 can be found at http://www.ietf.org/proceedings/08nov/minutes/emu.txt. Let the chairs know if you have any corrections or additions. Thanks, Joe ___ Emu mailing list Emu@ietf.org https://www.ietf.org/mai

Re: [Emu] Review of Requirements for a Tunnel Based EAP Method

2008-11-03 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Katrin Höper [mailto:[EMAIL PROTECTED] > Sent: Monday, November 03, 2008 8:05 AM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: Re: [Emu] Review of Requirements for a Tunnel Based > EAP Method > > On Sun, Nov

Re: [Emu] Review of Requirements for a Tunnel Based EAP Method

2008-11-02 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Katrin Höper > Sent: Friday, October 31, 2008 8:22 AM > To: emu@ietf.org > Subject: [Emu] Review of Requirements for a Tunnel Based EAP Method > > Hi, > > I have problems with some of the cryptogra

Re: [Emu] Tunnel Method (Current WG Work item status)

2008-10-30 Thread Joseph Salowey (jsalowey)
Here is the list of revisions planned for the next revision of the tunnel method requirements document. + 4.5.1.2 authentication of server Issue: I don't think it is as important to protect the username as the password. Resolution: Update 4.5.1.2 as "The EAP server MUST be authenticated before th

Re: [Emu] Review of emu-eaptunnel-req-00, chunk 2 of 2

2008-10-30 Thread Joseph Salowey (jsalowey)
Hi Again, > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Stefan Winter > Sent: Tuesday, August 12, 2008 6:45 AM > To: emu@ietf.org > Subject: [Emu] Review of emu-eaptunnel-req-00, chunk 2 of 2 > > (continuing from 4.2.2 on) > > 4.3 Tunnel payload

Re: [Emu] Review of emu-eaptunnel-req-00, chunk 1

2008-10-30 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Stefan Winter > Sent: Tuesday, August 12, 2008 6:40 AM > To: Josh Howlett > Cc: emu@ietf.org > Subject: Re: [Emu] Review of emu-eaptunnel-req-00, chunk 1 > > Hi, > > > This is a desirable property

Re: [Emu] Review of Requirements for an Tunnel Based EAP Method

2008-10-30 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Klaas Wierenga > Sent: Monday, August 11, 2008 8:20 AM > To: emu@ietf.org > Subject: [Emu] Review of Requirements for an Tunnel Based EAP Method > > 1. intro > > reference for PEAP is missing, too

Re: [Emu] Review of emu-eaptunnel-req-00, chunk 1

2008-10-30 Thread Joseph Salowey (jsalowey)
Hi Stefan, Thanks for doing this review. Comments inline below > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Stefan Winter > Sent: Friday, August 08, 2008 7:10 AM > To: emu@ietf.org > Subject: [Emu] Review of emu-eaptunnel-req-00, chunk 1 > >

[Emu] Response from ITU-T SG 17 on X.1034

2008-10-15 Thread Joseph Salowey (jsalowey)
The ITU-T SG 17 has sent a response to our comments on X.1034. It can be found here: https://datatracker.ietf.org/liaison/475/ Cheers, Joe ___ Emu mailing list Emu@ietf.org https://www.ietf.org/mailman/listinfo/emu

[Emu] Draft liaison response for ITU-T Recommendation X.1034

2008-09-01 Thread Joseph Salowey (jsalowey)
Here is a draft liaison response for ITU-T Recommendation X.1034. Please send any comments on this by Monday 9/8. Thanks, Joe The EAP Method update (EMU) working group in the IETF has review the document "ITU-T Recommendation X.1034" that is the subject of a liaison statement submitted on 200

Re: [Emu] Consensus call on EAP-GPSK key lengths

2008-08-25 Thread Joseph Salowey (jsalowey)
Since there have been no additional comments on GPSK and client state the draft revision should also include text to resolve this issue along the lines of http://www.ietf.org/mail-archive/web/emu/current/msg00908.html. Thanks, Joe > -Original Message- > From: [EMAIL PROTECTED] [mailto:[

Re: [Emu] Liaison Statement on ITU-T Recommendation X.1034

2008-08-08 Thread Joseph Salowey (jsalowey)
Please send comments no later than 8/27 so we have time to prepare a response. Thanks, Joe > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of [EMAIL PROTECTED] > Sent: Wednesday, August 06, 2008 11:57 PM > To: emu@ietf.org > Cc: [EMAIL PROTECTED] >

[Emu] GPSK and client state

2008-08-07 Thread Joseph Salowey (jsalowey)
In order to make progress I propose the following resolution to this issue: Modify text in the third paragraph from the end of section 10 to read: "For GPSK-3, a peer MUST silently discard messages where the RAND_Peer or the CSuite_Sel fields do not match those transmitted in GPSK-2. An EA

Re: [Emu] Review of draft-ietf-emu-eap-gpsk-08 (1st roundof comments)

2008-08-05 Thread Joseph Salowey (jsalowey)
If we make the change below then we also have to change section 12.9. I think this is a bit problematic since at one point we had consensus to address the issues on client state avoidance raised by folks at Stanford. The goal was that the peer could store its nonce on a per-server basis rather th

[Emu] Review of draft-clancy-emu-chbind-01

2008-07-23 Thread Joseph Salowey (jsalowey)
In general I think the document is a good start. I think it needs some work in a few areas 1. Section 1 - The following sentence is a bit odd: "Here, a Network Access Server (NAS), or pass-through authenticator, may authenticate to the backend AAA infrastructure using one set of credentials,

[Emu] GPSK Issue: Key Size and MAC Length

2008-07-22 Thread Joseph Salowey (jsalowey)
Currently GPSK makes an implicit assumption that the MAC output size will be the same as the key size. This will not always be the case as it is possible for the MAC output size to be different than the key size. For example it has been pointed out that AES-CMAC-256 has a 128 bit output. It s

Re: [Emu] Review of Requirements for an Tunnel Based EAP Method

2008-07-07 Thread Joseph Salowey (jsalowey)
I think this issues has been raised in the past, does anyone on the list have any specific scenarios where EAP header protections are important? If not the requirement can be downgraded or removed entirely. With respect to making one method look like another, some systems such as 802.1X-2004, do

Re: [Emu] EMU WG Consensus call on acceptance of the tunnel requirements draft as a work item

2008-06-18 Thread Joseph Salowey (jsalowey)
I'm in favor of accepting this document as an EMU work item. Joe > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Alan DeKok > Sent: Thursday, June 05, 2008 6:51 AM > To: emu@ietf.org > Subject: [Emu] EMU WG Consensus call on acceptance of the > t

Re: [Emu] EMU charter revision,

2008-04-30 Thread Joseph Salowey (jsalowey)
dnesday, April 30, 2008 4:54 PM > To: Joseph Salowey (jsalowey); emu@ietf.org > Subject: RE: [Emu] EMU charter revision, > > [Joe] Jari had asked to keep this open to TLS. I think he > was suggesting it could be done as a TLS extension and would > not require tunneling. I agr

[Emu] EMU charter update

2008-04-30 Thread Joseph Salowey (jsalowey)
In order to get things moving we will send the following charter update to Pasi tomorrow. I will also let Pasi and Tim know there is interest in secure password methods and they should consider it as a topic for SAAG. Description of Working Group: The Extensible Authent

Re: [Emu] EMU charter revision,

2008-04-30 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Bernard Aboba > Sent: Tuesday, April 29, 2008 12:50 PM > To: emu@ietf.org > Subject: Re: [Emu] EMU charter revision, > > In re-reading this charter, I still don't think we're quite there: > > a.

Re: [Emu] EMU charter revision

2008-04-28 Thread Joseph Salowey (jsalowey)
Hi Yoav, You bring up an interesting point in discussing the need for EAP password based authentication within other protected protocols. If this is targeted at working with legacy databases then I think it can be accommodated under the current charter. An EAP protected tunnel is required for so

Re: [Emu] EMU charter revision

2008-04-11 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Dan Harkins [mailto:[EMAIL PROTECTED] > Sent: Friday, April 11, 2008 10:38 AM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: Re: [Emu] EMU charter revision > > > Hi Joe, > > Thank you for giving m

[Emu] EMU charter revision

2008-04-10 Thread Joseph Salowey (jsalowey)
Below is a revision to the EMU charter that is intended to reflect the discussions in the Philadelphia meeting. Please respond to the list if you approve of the charter or if you have any comments on the charter. I would like to have responses by 4/24. Thanks, Joe Description of Working Group:

Re: [Emu] comment on draft-ietf-emu-eap-gpsk

2008-04-02 Thread Joseph Salowey (jsalowey)
2008 2:09 AM > To: Dan Harkins > Cc: Joseph Salowey (jsalowey); emu@ietf.org > Subject: RE: [Emu] comment on draft-ietf-emu-eap-gpsk > > Joseph Salowey (jsalowey) <> scribbled on : > > > Thanks Dan, I agree with your assessment. I think we > should include &

Re: [Emu] comment on draft-ietf-emu-eap-gpsk

2008-04-01 Thread Joseph Salowey (jsalowey)
Thanks Dan, I agree with your assessment. I think we should include text similar to what you propose in the document. Joe > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Dan Harkins > Sent: Tuesday, April 01, 2008 3:26 PM > To: emu@ietf.org > S

[Emu] Draft meeting minutes for IETF 71

2008-03-27 Thread Joseph Salowey (jsalowey)
Draft meeting minutes for IETF-71 are available below and at http://www.ietf.org/proceedings/08mar/minutes/emu.txt. Thanks to Dorothy and Charles who took excellent notes. Let me know if there are any additions or corrections. Thanks, Joe EMU IETF-71 - Philadelphia Thursday, March 13, 2008 09

Re: [Emu] Agenda Take 2

2008-03-10 Thread Joseph Salowey (jsalowey)
Sorry, make that draft-harkins-emu-eap-pwd-01 > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Joseph Salowey (jsalowey) > Sent: Monday, March 10, 2008 2:55 PM > To: Dan Harkins; SeongHan Shin > Cc: Kazukuni Kobara; emu@ietf

Re: [Emu] Agenda Take 2

2008-03-10 Thread Joseph Salowey (jsalowey)
elow ID (Password only Mechanism) > >> http://tools.ietf.org/id/draft-harkins-emu-eap-pwd-00.txt > >> to be presented at IETF 71. > >> > >> The idea of the protocol seems interesting. > >> However, I found that th

Re: [Emu] EMU Charter revision

2008-03-03 Thread Joseph Salowey (jsalowey)
ter revision, > specifically the change that says the password-based method > can only be via the tunneled method. I do approve of the > inclusion of tunneled methods in the charter though and would > be willing to contribute as a reviewer. > > regards, > > Dan." > On Tue,

[Emu] Agenda Take 2

2008-02-27 Thread Joseph Salowey (jsalowey)
EMU Agenda IETF 71 THURSDAY, March 13, 2008 0900-1130 Morning Session I - + Administrivia (5 min) - agenda, blue sheets, note takers + Document Status (5 min) - EAP-TLS - draft-simon-emu-rfc2716bis-13.txt - EAP-GPSK - draft-ietf-emu-eap-gpsk-08.txt

Re: [Emu] EMU charter revision

2008-02-23 Thread Joseph Salowey (jsalowey)
e password only method" such as the on proposed in the draft? Thanks, Joe > -Original Message- > From: Dorothy Stanley [mailto:[EMAIL PROTECTED] > Sent: Friday, February 22, 2008 8:25 AM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: Re: [Emu] EMU cha

Re: [Emu] Draft Agenda for IETF-71

2008-02-21 Thread Joseph Salowey (jsalowey)
008 11:35 AM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: Re: [Emu] Draft Agenda for IETF-71 > > > > + Channel Bindings (20 min) > > - draft-clancy-emu-chbind-00.txt > > - draft-clancy-emu-aaapay-00.txt > > > > > I haven't

[Emu] Draft Agenda for IETF-71

2008-02-21 Thread Joseph Salowey (jsalowey)
Draft meeting agenda is attached below, let me know if you have any additions or corrections. Thanks, Joe EMU Agenda IETF 71 THURSDAY, March 13, 2008 0900-1130 Morning Session I - + Administrivia (5 min) - agenda, blue sheets, note takers + Document

Re: [Emu] EMU charter revision

2008-02-19 Thread Joseph Salowey (jsalowey)
starting point for discussions on the list and in the Philadelphia meeting. Thanks, Joe > -Original Message- > From: Joseph Salowey (jsalowey) > Sent: Monday, February 04, 2008 9:13 PM > To: emu@ietf.org > Subject: EMU charter revision > > Below is a revised charte

Re: [Emu] [eap] new eap method

2008-02-14 Thread Joseph Salowey (jsalowey)
Hi Gondi, I think proposals on handover are better evaluated in the HOKEY (Handover Keying) working group, which is currently working in this problem space. Cheers, Joe > -Original Message- > From: Vamsi Krishna Gondi [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 14, 2008 6:

Re: [Emu] EMU charter revision

2008-02-12 Thread Joseph Salowey (jsalowey)
working group interest in pursuing a method of this type. Cheers, Joe > -Original Message- > From: Dorothy Stanley [mailto:[EMAIL PROTECTED] > Sent: Tuesday, February 12, 2008 8:13 AM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: Re: [Emu] EMU charter re

[Emu] EMU charter revision

2008-02-05 Thread Joseph Salowey (jsalowey)
Below is a revised charter update based on the discussion on the list. I have left the password based method item as a tunnel method because this represents the consensus the working group has reached. I also believe the working group will have to focus on the tunnel method related items for the n

RE: [Emu] EMU charter update,

2008-01-30 Thread Joseph Salowey (jsalowey)
5 PM > To: Joseph Salowey (jsalowey) > Cc: Dan Harkins; emu@ietf.org > Subject: RE: [Emu] EMU charter update, > > > Hi Joe, > > I don't think I've been very clear. In fact, after speaking > to other people about this topic I'm pretty sure I have not

RE: [Emu] WG consensus on charter update

2008-01-29 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Hao Zhou (hzhou) > Sent: Monday, January 28, 2008 1:50 PM > To: Joseph Salowey (jsalowey); emu@ietf.org > Subject: RE: [Emu] WG consensus on charter update > > Joe: > > I am ok with the updated charter, with the following minor

RE: [Emu] WG consensus on charter update

2008-01-29 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Lakshminath Dondeti [mailto:[EMAIL PROTECTED] > Sent: Monday, January 28, 2008 1:40 PM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: Re: [Emu] WG consensus on charter update > > I know it's after the deadline,

[Emu] WG consensus on charter update

2008-01-24 Thread Joseph Salowey (jsalowey)
So far I have only seen responses from Dan Harkins on the proposed charter update ( http://www1.ietf.org/mail-archive/web/emu/current/msg00712.html ) Please respond on the list if you have reviewed the charter and have comments or if you approve of the current text. Also make sure to review the

RE: [Emu] EMU charter update,

2008-01-23 Thread Joseph Salowey (jsalowey)
Hi Dan, Comments inline below: > -Original Message- > From: Dan Harkins [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 23, 2008 11:34 AM > To: Joseph Salowey (jsalowey) > Cc: Dan Harkins; emu@ietf.org > Subject: RE: [Emu] EMU charter update, > > >

RE: [Emu] EMU charter update,

2008-01-22 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Dan Harkins [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 22, 2008 5:12 PM > To: Joseph Salowey (jsalowey) > Cc: Dan Harkins; emu@ietf.org > Subject: RE: [Emu] EMU charter update, > > > Hi Joe, > > OK, so the

RE: [Emu] EMU charter update,

2008-01-22 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Dan Harkins [mailto:[EMAIL PROTECTED] > Sent: Tuesday, January 22, 2008 2:13 PM > To: Joseph Salowey (jsalowey) > Cc: emu@ietf.org > Subject: RE: [Emu] EMU charter update, > > > Hi Joe, > > On Tue, January 22, 2008 1

RE: [Emu] EMU charter update,

2008-01-22 Thread Joseph Salowey (jsalowey)
e > working group we could fall back on the "must be a strong > shared secret" > requirement. > > The tunneled method should be resistant to dictionary > attack but if the non-tunneled one was also resistant to > dictionary attack wouldn't that be g

RE: [Emu] 2716bis13: Support of certificate_status extension

2008-01-22 Thread Joseph Salowey (jsalowey)
Hi Madjid, Comments inline below: > -Original Message- > From: Nakhjiri Madjid-VXT746 [mailto:[EMAIL PROTECTED] > Sent: Friday, January 18, 2008 5:03 PM > To: [EMAIL PROTECTED]; emu@ietf.org > Subject: [Emu] 2716bis13: Support of certificate_status extension > > Hi, > > Question on

[Emu] EMU charter update

2008-01-08 Thread Joseph Salowey (jsalowey)
Below is a draft of the EMU charter that reflects discussions we had at IETF 70. Please review this and send comments. I would like to have comments in by January 23, 2008. Thanks, Joe Description of Working Group: The Extensible Authentication Protocol (EAP) [RFC 3748] is a network access a

[Emu] Draft minutes for IETF-70 EMU meeting

2007-12-17 Thread Joseph Salowey (jsalowey)
Below are the draft minutes for the IETF-70 EMU meeting. Thanks to Nancy, Steve and Sue for taking notes. Please let me know if you have any corrections. EMU Minutes == TUESDAY, Dec

[Emu] PROTO write-up for EAP-GPSK

2007-12-17 Thread Joseph Salowey (jsalowey)
Below is the PROTO write-up for EAP-GPSK. Please let me know if there are any issues with the write-up. I will send EAP-GPSK to the IESG in the next few weeks. Thanks, Joe -- (1.a) Who is the Document Shepherd for this document? Has the Document Shepherd personally reviewed this vers

[Emu] FW: [saag] EMU working group summary

2007-12-12 Thread Joseph Salowey (jsalowey)
Here is the summary that was sent to the SAAG list for emu. I will post full minutes later this week. Thanks, Joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joseph Salowey (jsalowey) Sent: Thursday, December 06, 2007 9:23 AM To: [EMAIL PROTECTED

RE: [Emu] EMU charter update for tunneled method

2007-12-03 Thread Joseph Salowey (jsalowey)
, 2007 3:28 AM > To: Joseph Salowey (jsalowey); emu@ietf.org > Subject: RE: [Emu] EMU charter update for tunneled method > > Here is my feedback on this proposed charter update. > > 1) RFC 3748 and RFC 4017 requirements should apply to >all deliverables. The proposed language

[Emu] Agenda update

2007-11-27 Thread Joseph Salowey (jsalowey)
I received some feedback that it would be more productive to move the method presentations before the requirements discussion so the requirements discussion can benefit from the lessons learned in the existing method designs. The updated agenda looks like: EMU TUESDAY, December 4, 2007 0900-1130

[Emu] Tunneling EAP method requirements

2007-11-26 Thread Joseph Salowey (jsalowey)
In adding the tunneling method to the charter we need to make sure we work off a valid set of requirements. We have a set of requirements that are based on tunneling passwords: 1. Transport of encrypted password for support of legacy password databases (REQUIRED) 2. Mutual authentication (specifi

[Emu] Updated agenda for iETF 70

2007-11-26 Thread Joseph Salowey (jsalowey)
Below is an updated agenda for EMU at IETF 70. Let me know if you have any corrections or additions. We also need 2 note takers. Instead of wasting time in the meeting looking for note takers it would be helpful if a few participants volunteered ahead of time. Thanks, Joe EMU TUESDAY, Dece

[Emu] Draft Agenda for IETF 70

2007-11-19 Thread Joseph Salowey (jsalowey)
Below is the draft agenda for the EMU session at IETF 70 in Atlanta. Let me know if you have something you want to present in one of the sections: EMU TUESDAY, December 4, 2007 0900-1130 Morning Session I Cypress === 1. Administrivia (5 min) 2. Draft updates (

[Emu] EMU charter update for tunneled method

2007-11-19 Thread Joseph Salowey (jsalowey)
Below is a proposed update to the EMU charter to add a tunneled method. The following are the changes to the existing charter: - add charter item for tunneled EAP method - modified password based item to make use of the above tunneled method - modify "enhanced TLS" item to focus on adding channel

[Emu] Password Method Consensus

2007-10-30 Thread Joseph Salowey (jsalowey)
We have working group consensus to move forward with working on a tunneled EAP method in order to provide the basis for a password based EAP method. The next steps are to revise the working group charter to include the tunneled EAP method item and make sure we have a good set of requirements to wo

RE: [Emu] EAP-GPSK and Client-Side DoS Attacks

2007-10-30 Thread Joseph Salowey (jsalowey)
tp://www1.ietf.org/mail-archive/web/emu/current/msg00670.html > > We agree that this solution seems to solve the issue in the > cleanest way. > > Andre Scedrov, John Mitchell, Arnab Roy, Paul Rowe > > >Date: Wed, 3 Oct 2007 21:22:31 -0700 > >From: "J

[Emu] RE: Revised liaison response for IEEE 802.11u EAP method for emergency calls

2007-10-30 Thread Joseph Salowey (jsalowey)
- > From: Joseph Salowey (jsalowey) > Sent: Monday, October 15, 2007 2:30 PM > To: 'Bernard Aboba'; emu@ietf.org > Cc: [EMAIL PROTECTED] > Subject: RE: Revised liaison response for IEEE 802.11u EAP > method for emergency calls > > > > > -Original

RE: [Emu] Moving forward with the EMU password method

2007-10-25 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Pascal Urien [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 24, 2007 6:52 AM > To: Joseph Salowey (jsalowey); emu@ietf.org > Subject: Re: [Emu] Moving forward with the EMU password method > > Hi Joe, > >I support m

[Emu] RE: Revised liaison response for IEEE 802.11u EAP method for emergency calls

2007-10-15 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Bernard Aboba [mailto:[EMAIL PROTECTED] > Sent: Monday, October 15, 2007 1:06 PM > To: Joseph Salowey (jsalowey); emu@ietf.org > Cc: [EMAIL PROTECTED] > Subject: RE: Revised liaison response for IEEE 802.11u EAP > method for emerg

[Emu] Revised liaison response for IEEE 802.11u EAP method for emergency calls

2007-10-15 Thread Joseph Salowey (jsalowey)
I modified the liaison response below based on the comments received. Please respond indicating if this looks OK or indicate what needs to be modified or added. Thanks, Joe == 802.11u Liaison response for EAP Methods for Emergency Comm

[Emu] RE: Draft liaison response for IEEE 802.11u EAP method for emergency calls

2007-10-15 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Bernard Aboba [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 02, 2007 1:03 PM > To: Joseph Salowey (jsalowey); emu@ietf.org > Cc: [EMAIL PROTECTED] > Subject: RE: Draft liaison response for IEEE 802.11u EAP > method for emergenc

RE: [Emu] EAP-GPSK & Key Derivation Function

2007-10-03 Thread Joseph Salowey (jsalowey)
I think this is a good approach. > -Original Message- > From: Charles Clancy [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 20, 2007 4:11 AM > To: Tschofenig,Hannes (NSN - DE/Germany - MiniMD) > Cc: emu@ietf.org > Subject: Re: [Emu] EAP-GPSK & Key Derivation Function > > All, >

RE: [Emu] EAP-GPSK and Client-Side DoS Attacks

2007-10-03 Thread Joseph Salowey (jsalowey)
I think the problem is real, although not catastrophic. I would prefer not to remove the identity from the key derivation so either option 2 or 3 is good. I think 2 is maybe a little bit cleaner and 3 is less of a change to the existing draft. Since we do not have many implementations yet I would

[Emu] Moving forward with the EMU password method

2007-10-03 Thread Joseph Salowey (jsalowey)
At the IETF in Chicago we had a hum as to the direction we should take with the password based method. I would like to clarify the choices and determine working group consensus on the list. The two directions are given below please express you preference by 10/25. Option 1 - Password based metho

[Emu] RE: Draft liaison response for IEEE 802.11u EAP method for emergency calls

2007-10-02 Thread Joseph Salowey (jsalowey)
Hi Hannes, Comments inline below. > -Original Message- > From: Hannes Tschofenig [mailto:[EMAIL PROTECTED] > Sent: Saturday, September 22, 2007 6:23 AM > To: Bernard Aboba > Cc: Joseph Salowey (jsalowey); emu@ietf.org; > [EMAIL PROTECTED]; ECRIT > Subject: Re: D

[Emu] RE: Draft liaison response for IEEE 802.11u EAP method for emergency calls

2007-10-02 Thread Joseph Salowey (jsalowey)
> -Original Message- > From: Bernard Aboba [mailto:[EMAIL PROTECTED] > Sent: Monday, September 17, 2007 10:20 AM > To: Joseph Salowey (jsalowey); emu@ietf.org > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: Draft liaison response for IEEE 802.11u EAP >

RE: [Emu] Open Issues with EAP-GPSK

2007-09-20 Thread Joseph Salowey (jsalowey)
I added these issues to the issue list at http://www3.tools.ietf.org/wg/emu/trac/report/1 Joe > -Original Message- > From: Tschofenig,Hannes (NSN - DE/Germany - MiniMD) > [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 20, 2007 1:51 AM > To: emu@ietf.org > Subject: [Emu] Open Iss

[Emu] Draft liaison response for IEEE 802.11u EAP method for emergency calls

2007-09-16 Thread Joseph Salowey (jsalowey)
The EMU working group has a liaison request from IEEE 802.11u on EAP methods for emergency calls. The liaison request can be found on the liaison statement page, https://datatracker.ietf.org/liaison/ (May 2007). We had a presentations and discussion of this topic at the Chicago EMU meeting. Belo

RE: [Emu] Proposed way forward: emu and channel bindings

2007-09-16 Thread Joseph Salowey \(jsalowey\)
Hi Sam, This does sound reasonable. Some questions for the group to solidify what it means to support channel bindings: 1) Is encryption required or is integrity protection enough. In my opinion integrity protection should be sufficient since channel bindings communicate parameters that are v

[Emu] Minutes from IETF-69

2007-08-20 Thread Joseph Salowey \(jsalowey\)
Below are minutes to the EMU session at IETF-69. I will also upload them to the proceedings page. Let me know if you have any corrections. Thanks to Mauricio and Nancy for taking good notes. Joe Notes from EMU meeting at IETF 69 Tuesday, July 24, 2007 Chicago Agenda --- +

<    1   2   3   4   5   6   >