[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Comments: draft-siemborski-mupdate-04

To: iesg@ietf.org, iesg-secretary@ietf.org
Subject: Comments: draft-siemborski-mupdate-04
From: Russ Housley <housley@vigilsec.com>
Date: Tue, 08 Jul 2003 18:44:13 -0400

Turn off hyphenation.

In section 8.8, the protocol allows as list of authentication mechanisms, even if TLS is not in use. Without the integrity provided by TLS, an adversary can reorder the list of mechanisms. One solution would be to limit the list to a single item when TLS is not in use.

How was port 2004 assigned?

Follow-Ups:
- Re: Comments: draft-siemborski-mupdate-04
  - From: ned.freed@mrochek.com

Prev by Date: draft-savola-bcp38-multihoming-update-00.txt
Next by Date: Request to Expedite RFC processing (draft-chiba-radius-dynamic-authorization-20.txt)]
Previous by thread: draft-savola-bcp38-multihoming-update-nn.txt
Next by thread: Re: Comments: draft-siemborski-mupdate-04
Index(es):
- Date
- Thread