IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

New IDs 2004-dec-09



Hi Folks,

I've updated the IDs based upon comments from the past few weeks.
  http://www.employees.org/~lonvick/secsh-wg/2004-dec-09/
It may take a day or so for the ID Editors to get them into the
repository.


* A few nits in the definition of name-list in [ARCH].


* Minor changes to the description for naming key algorithms in [NUMBERS]
and [TRANS].
----------NUMBERS----------
   4.10  Key Exchange Method Names

   The Key Exchange Method Name describes a key-exchange method for the
   protocol [SSH-TRANS].  Note that for historical reasons, the name
   "diffie-hellman-group1-sha1" is used for a key exchange method using
   an Oakley group as defined in [RFC2412].  Subsequently, the Working
   Group attempted to follow the numbering scheme of group numbers from
   [RFC3526] with diffie-hellman-group14-sha1 for the name of the second
   defined name.  This is considered an aberration and should not be
   repeated.  Any future specifications of Diffie-Hellman key exchange
   using Oakley groups defined in [RFC2412] or its successors should be
   performed with care and a bit of research.
----------[TRANS] is very similar---


* Reverted to the prior version of the protocol version exchange in
[TRANS].


* Reverted to "string    user name in ISO-10646 UTF-8 encoding" in various
places in [AUTH], and added a paragraph on normalizing.
----------[AUTH]----------
8.  Password Authentication Method: password
(skip some)

   From an internationalization standpoint, it is desired that if a user
   enters their password the authentication process will work regardless
   of what OS and client software they are using.  Doing so requires
   normalization.  Systems supporting non-ASCII passwords SHOULD always
   normalize passwords and usernames whenever they are added to the
   database, or compared (with or without hashing) to existing entries
   in the database.  SSH implementations that both store the passwords
   and compare them SHOULD use [I-D.ietf-sasl-saslprep] for
   normalization.
----------


Please review and let me know.

Thanks,
Chris



Home | Main Index | Thread Index | Old Index