: 'ipsec@ietf.org'; 'c...@irtf.org'
Subject: Re: [IPsec] [Cfrg] Beginning discussion on secure password-
only authentication for IKEv2
Well, during my long and fruitful career I've come across many asinine
statements - but this pearl from your collection outshines mine! Indeed
straight from
Sent: Thursday, March 04, 2010 19:09
To: 'pgut...@cs.auckland.ac.nz'
Cc: 'ipsec@ietf.org'; 'c...@irtf.org'
Subject: Re: [IPsec] [Cfrg] Beginning discussion on secure password-
only authentication for IKEv2
Well, during my long and fruitful career I've come across many asinine
statements
On 3/3/10 6:25 AM, Blumenthal, Uri - 0662 - MITLL u...@ll.mit.edu wrote:
You're good! :-)
On the vendor side - perhaps EKE patent concern was the cause (you
implement/sell free SRP and get slapped with EKE licensing)? And the users
found alternative solutions in the meanwhile?
No, I can
At 7:22 PM +0200 3/2/10, Hannes Tschofenig wrote:
The challenge I have in understanding the motivation for this work is impacted
by ...
1) EAP is not only meant to be used with backend infrastructure.
2) EAP is an authentication framework and EAP methods exist that support
strong-password based
On Tue, 2 Mar 2010 13:03:40 -0500
Blumenthal, Uri - 0662 - MITLL u...@ll.mit.edu wrote:
I see value in adding a simpler-than-EAP method, and support this
effort. But overall it's an extremely difficult task because of IPR.
I personally would hate to see a patent-encumbered solution - and