Re: pre-kink-10
Shoichi Sakane <[email protected]> Fri, 30 Sep 2005 16:42:52 +0900
| Newsgroups | gmane.ietf.kink |
|---|---|
| Message-ID | <[email protected]> |
Hi, I think that this sentence should not be in the introduction, should be in the security consideration that Ken mentioned. On the other hand, there is a same sentence in the security consideration. So we might be able to just remove it. However the sentence was added after a IESG review. Thus I do not know we can remove it easily. Derek, could you decide whether it can remove or not ? > > Relatively minor stuff: > > > > - Introduction: > > > > Kerberos, like any internet protocol, does have > > its own security considerations. You can find them discussed in > > [KERBEROS]. > > > > That's security-considerations material, not introductory > > material. In fact, I think the security considerations section > > already talks about it. > > These sentences seem to have been added as a result of the > previous IESG review, for a comment from Randy Bush. > <https://datatracker.ietf.org/public/pidtracker.cgi?command=view_comment&id=9126> > (See the first comment.) > I feel he was not focusing on security vulnerabilities (as he gave > scalability as an example). > So, I'll replace that part with the following. > > Kerberos, like any internet protocol, does have drawbacks on certain > environments. You can find them discussed in [KERBEROS] and its > references. > > Do you have better sentences?