Re: REMINDER: RADEXT WG Last call on "Extended RADIUS Attributes"

[Alan DeKok <aland@deployingradius.com>]

Glen Zorn wrote:
>> Alan's wording "The More Flag MUST NOT be set if the Length is less
>> than
>> 255." sounds good to me.
> 
> My point was that making these kinds of rules is pointless: if someone wants
> to split "Hello" into 5 separate attributes they either have a very good
> reason to do so that none of us can foresee or they will soon be finding
> gainful employment in a different field.  In any case, it's not possible to
> protect people from their own stupidity (besides, they could still do it
> with tags).

  It's only one sentence.  And it will stop the stupid people from
afflicting everyone else.

  RFC 2865 has comments saying:

      The secret MUST NOT be empty (length 0) since this would allow
      packets to be trivially forged.

  Which were inserted because of real-world exposure to implementations
having *no* configuration for shared secrets. (i.e. they were always NUL).

  Alan DeKok.

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>