Re: KITTEN BOF at IETF 60?

On Wed, Mar 10, 2004 at 01:37:09PM -0500, Sam Hartman wrote:
> CAT Fanciers:
> 
> Four years ago this month, the CAT working group became dormant.  Some
> time after that , the working group concluded.  During the
> intervening years we have gained significant implementation
> experience with GSSAPI, GSSAPI mechanisms, SPNEGO and other related
> technologies.
> 
> There has been significant interest in some continuing evolution of
> the GSSAPI specifications within the IETF during this time.  Doug has
> proposed that we start a working group to move forward on these
> issues.  I agree.  Assuming that we can find a chair for a BOF and
> potentially for a working group and can find document editors, I
> propose that we request a BOF slot at IETF 60 for the purpose of
> starting the offspring of CAT working group (KITTEN).

I second this.

> I believe that KITTEN should be chartered for the following tasks and
> for any additional tasks that members of this list believe have
> sufficient constituency.
[...]

> The following work might belong in the KITTEN working group although
> it currently lives in other IETF working groups:
> 
> * TThe CCM mechanism in the NFSV4 working group
> 
> * The domain-based GSSAPI names that will hopefully be a work item of
>   SASL some day

To this I would add:

 - My GSS_Store_cred() proposal (which competes with part of the GGF
   proposal);

 - My upcomming proposal for a framework for stackable pseudo-
   mechanisms.  (CCM is a stackable pseudo-mechanism; others have been
   proposed, and we've since discovered that there are some generality
   and mechanism negotiation issues that we should address.)

 - There's been a quiet effort to review and clarify the SPKM-1/2/3
   mechanisms.  This should move to some WG at some point, and I think
   KITTEN would be a good candidate for it.

I volunteer to edit my own drafts :)  of which there should be some
five, maybe six by the time the BoF meets.  These drafts would cover:

 - domain-based principal names and generic syntax[1]
 - domain-based principal name syntax for the Kerberos V mechanism[1]

 - GSS_Store_cred()[2]
 - stackable pseudo-mechanism framework[3]
 - channel bindings[4]

I think the channel bindings draft should probably move over to KITTEN.

Eventually the NFSv4 WG may be happy to have CCM moved over to KITTEN as
well.

[1] I've been promising these two drafts for some time, I know.
[2] draft-williams-gssapi-store-deleg-creds-00.txt
[3] Almost ready for submission.
[4] draft-ietf-nfsv4-channel-bindings-00.txt, soon to be updated to
    reflect a new approach to channel bindings to IPsec.

Cheers,

Nico
-- 
-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ietf-cat-wg" to [email protected]