Subject: [AAA-WG]: RE: Review of RADIUS Digest-07 Document

From: "Wijnen, Bert (Bert)" <[email-masked]>
Date: Sun, 19 Mar 2006 06:43:53 +0100

[when responding, it is probably best to only copy the radiusext
 WG list and not the AAA WG list.]

Do the new rev is available, in fact has been since Mar 8th.

Do we have consensus that this is now OK and that we can check
if security ADs are also happy, and as a result we can then 
also finish the draft-ietf-aaa-diameter-sip-app-xx.txt document?

It would be really great if we can finalize (i.e. get acceptable
I-Ds posted) by Wed at the latest, so we can try and clear these
2 documents for approval.

Pleas keep in mind my response to the updated version:
  > Wolfgang wrote:
  > my main focus for the -07 version was to address the 'discuss'
  > points from the IESG site.
  >  
  In fact, since the document was (and basically still is) in IESG evaluation,
  I think the WG should not add new issues/concerns unless there is a FATAL
  FLAW that we discovered late. 

  Bert (speaking as one of the ADs).

Bert

> -----Original Message-----
> From: [email-masked] 
> [mailto:[email-masked]]On Behalf Of
> Bernard Aboba
> Sent: Tuesday, March 07, 2006 17:04
> To: [email-masked]
> Subject: [AAA-WG]: Review of RADIUS Digest-07 Document
> 
> 
> A new version of the RADIUS Digest document has been 
> submitted in response 
> to IETF last call and IESG DISCUSS comments. Until the 
> specification ends 
> up on the archive, it is available here: 
> http://www.drizzle.com/~aboba/RADEXT/draft-ietf-radext-digest-
> auth-07.txt
> 
> When it ends up on the archive, it will be available here:
> http://www.ietf.org/internet-drafts/draft-ietf-radext-digest-a
> uth-07.txt
> 
> Please examine this new version of the document to see whether it 
> addresses the open issues, which were filed on the RADEXT WG 
> issues list: 
> http://www.drizzle.com/~aboba/RADEXT/
> 
> These include the following:
> 
> Issue #             Title                              Owner
> 
> ---------- ------------------------- ---------------------- 
> 150           IANA Considerations          John Loughney
> 151           Another review               Kurt Zeilenga
> 152           Review                       Alexey Melnikov
> 159           Negotiation                  Wolfgang Beck
> 162           Nonce Replay Issue           Wolfgang Beck
> 173           Client Nonce Generation      Sam Hartman
> 174           Review                       Russ Housley
> 175           Some NITs                    Bert Wijnen
> 
> In particular, the following questions should have been addressed:
> 
> * Handling of client/server nonce generation (comments from 
> Sam Hartman, 
>   Glen Zorn and others) 
> * Extensibility for new algorithms (Russ Housley)
> * Editorial comments (many)
> 
> 
>