[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [radext] #89: Key Wrap and Password Hiding Requirements

#89: Key Wrap and Password Hiding Requirements

Changes (by bernard_aboba@â):

  * status:  new => closed
  * resolution:  => fixed


Comment:

 Proposed Resolution:

 Change the following text in Section 4.2:

    It is RECOMMENDED that solutions provide support for confidentiality,
    either by supporting encryption of entire RADIUS packets or by
    encrypting individual RADIUS attributes.  This includes providing
    support for improving the confidentiality of existing encrypted
    (sometimes referred to as "hidden") attributes as well as encrypting
    attributes (such as location attributes) that are currently
    transmitted in cleartext.  Proposals supporting confidentiality MUST
    support the negotiation of cryptographic algorithms for encryption.

 To:

    It is RECOMMENDED that solutions provide support for confidentiality,
    either by supporting encryption of entire RADIUS packets or by
    encrypting individual RADIUS attributes.  Proposals supporting
    confidentiality MUST support the negotiation of cryptographic
    algorithms for encryption.

    Solutions providing for encryption of entire RADIUS packets need not
    also provide support for encryption of individual RADIUS attributes.
    Solutions providing for encryption of individual RADIUS attributes
    are REQUIRED to provide support for improving the confidentiality of
    existing encrypted (sometimes referred to as "hidden") attributes as
    well as encrypting attributes (such as location attributes) that are
    currently transmitted in cleartext.

-- 
---------------------------------------+------------------------------------
 Reporter:  bernard_aboba@â            |        Owner:            
     Type:  defect                     |       Status:  closed    
 Priority:  critical                   |    Milestone:  milestone1
Component:  Crypto-Agility             |      Version:  1.0       
 Severity:  Active WG Document         |   Resolution:  fixed     
 Keywords:                             |  
---------------------------------------+------------------------------------

Ticket URL: <http://wiki.tools.ietf.org/wg/radext/trac/ticket/89#comment:1>
radext <http://tools.ietf.org/radext/>


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>