Re: [Technical Errata Reported] RFC4556 (3157)

On Thu, 2012-03-15 at 14:04 -0700, RFC Errata System wrote:

> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=4556&eid=3157

...

> --------------------------------------
> RFC4556 (draft-ietf-cat-kerberos-pk-init-34)
> --------------------------------------
> Title               : Public Key Cryptography for Initial Authentication in Kerberos (PKINIT)
> Publication Date    : June 2006
> Author(s)           : L. Zhu, B. Tung
> Category            : PROPOSED STANDARD
> Source              : Kerberos WG
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG



This was discussed briefly on the WG mailing list before Tom submitted
the erratum.  It provides information needed for interoperability, in
several ways:

- It clarifies the behavior expected of compliant implementations, by
  explicitly pointing out how to derive correct values for Q for the
  affected group, when previously implementors had to infer this.

- It points out a noncompliant but widely-deployed behavior, and offers
  advice on what compliant implementations can do to interoperate when
  this behavior is seen.

The submitted erratum does _not_ change the protocol; particularly, it
neither permits the noncompliant behavior nor requires compliant
implementations to accept that behavior or interoperate with peers
exhibiting that behavior.

From a process standpoint, I believe this submission meets the IESG's
published criteria for acceptance of errata for IETF-stream documents.


On the basis of the previous discussion, I do not expect this submission
to be controversial.  I therefore propose we allow a week or so for any
objections, after which point we would request that the IESG approve the
submission at its earliest convenience.


-- Jeff, as krb-wg co-chair

_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg