IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: WG chair nits on draft-ietf-secsh-fingerprint-01.txt



> What do you like to see in the 'Security Considerations' section?

See http://www.ietf.org/internet-drafts/draft-iab-sec-cons-03.txt
("Guidelines for Writing RFC Text on Security Considerations").

for this document, this likely won't require much text.

Two points I'd make:

 - reference security considerations of [SSH-ARCH] and point out that
   this is a common exchange format to help with the problem.

 - point out that the 'trusted' copy of the fingerprint must be
   transmitted by some form of secure channel; how to do that is out
   of scope.

					- Bill



Home | Main Index | Thread Index | Old Index