Re: Continued discussion of RADIUS Crypto-Agility

[Leif Johansson <leifj@it.su.se>]

Bernard Aboba wrote:
>> The wg should (imho) explicitly state if the issue is getting rid of MD5
>> or getting rid of MD5 at the same time as a whole bunch of other
>> things are done. That will probably make this process go a whole lot
>> easier.
>
> David has posted the set of requirements that a solution needs to
> meet.  Beyond those, the WG can also take into account other desirable
> security characteristics in making a determination.
>
Draft?
> However, in doing so, I would warn against feature creep.  RADIUS has
> succeeded largely because of its simplicity and modest footprint.  So
> the goal is to address the crypto-agility issue with a minimum of
> unrelated changes.
>
Very wise.

    Cheers Leif


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>