RADIUS crypto-agility straw-man proposal

[Alan DeKok <aland@nitros9.org>]

  I do not have significant comments on the straw-man set of
requirements.  Therefore, I have a straw-man proposal.

http://deployingradius.com/ietf/draft-dekok-radext-dtls-00.txt

  It was just submitted to the I-D editor, so it should make the -00
deadline.

  The content is a little rough, but the general idea should be
adequately covered.  In short, "RADIUS + DTLS" == "better security".

  Other groups are using DTLS for securing pre-existing UDP protocols.
One draft (draft-jennings-sip-dtls-00.txt) is about 3 pages long, and
says little other than "use DTLS".  That would appear to indicate that
it may be that easy to add DTLS support to RADIUS.

  Alan DeKok.


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>