Subject: [Ietf-krb-wg] WG Last Call: draft-ietf-krb-wg-gss-cb-hash-agility-03.txt

From: Larry Zhu <[email-masked]>
Date: Wed, 14 Nov 2007 21:06:23 -0800

This note announces the start of a three-week last call within the Kerberos Working Group on whether to send the following document to the IESG:

Title:           Kerberos Version 5 GSS-API Channel Binding Hash Agility
Filename:        draft-ietf-krb-wg-gss-cb-hash-agility-03.txt
Intended Status: Standards Track

   Currently, the Kerberos Version 5 Generic Security Services
   Application Programming Interface (GSS-API) mechanism [RFC4121] does
   not have the ability to utilize better hash algorithms used to
   generate channel binding identities.  The current mechanism for doing
   this is hard coded to use MD5 only.  The purpose of this document is
   to outline changes required to update the protocol so that more
   secure algorithms can be used to create channel binding identities.
   The extensibility of this solution also provides an eventual
   replacement of identities based solely on hash algorithms.

This last call will expire at 23:59 EDT on Thursday December 6, 2007.

Please review this document and send any comments to the Kerberos Working Group mailing list, <[email-masked]>, by that date.  The file can be obtained via

http://www.ietf.org/internet-drafts/draft-ietf-krb-wg-gss-cb-hash-agility-03.txt

--Larry
_______________________________________________
ietf-krb-wg mailing list
[email-masked]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg