Re: [IPsec] [Cfrg] Beginning discussion on secure password-only authentication for IKEv2

2010-03-04 Thread Yaron Sheffer
: 'ipsec@ietf.org'; 'c...@irtf.org' Subject: Re: [IPsec] [Cfrg] Beginning discussion on secure password- only authentication for IKEv2 Well, during my long and fruitful career I've come across many asinine statements - but this pearl from your collection outshines mine! Indeed straight from

Re: [IPsec] [Cfrg] Beginning discussion on secure password-only authentication for IKEv2

2010-03-04 Thread Yoav Nir
Sent: Thursday, March 04, 2010 19:09 To: 'pgut...@cs.auckland.ac.nz' Cc: 'ipsec@ietf.org'; 'c...@irtf.org' Subject: Re: [IPsec] [Cfrg] Beginning discussion on secure password- only authentication for IKEv2 Well, during my long and fruitful career I've come across many asinine statements

Re: [IPsec] [Cfrg] Beginning discussion on secure password-only authentication for IKEv2

2010-03-03 Thread thomwu
On 3/3/10 6:25 AM, Blumenthal, Uri - 0662 - MITLL u...@ll.mit.edu wrote: You're good! :-) On the vendor side - perhaps EKE patent concern was the cause (you implement/sell free SRP and get slapped with EKE licensing)? And the users found alternative solutions in the meanwhile? No, I can

Re: [IPsec] [Cfrg] Beginning discussion on secure password-only authentication for IKEv2

2010-03-02 Thread Paul Hoffman
At 7:22 PM +0200 3/2/10, Hannes Tschofenig wrote: The challenge I have in understanding the motivation for this work is impacted by ... 1) EAP is not only meant to be used with backend infrastructure. 2) EAP is an authentication framework and EAP methods exist that support strong-password based

Re: [IPsec] [Cfrg] Beginning discussion on secure password-only authentication for IKEv2

2010-03-02 Thread Steven M. Bellovin
On Tue, 2 Mar 2010 13:03:40 -0500 Blumenthal, Uri - 0662 - MITLL u...@ll.mit.edu wrote: I see value in adding a simpler-than-EAP method, and support this effort. But overall it's an extremely difficult task because of IPR. I personally would hate to see a patent-encumbered solution - and