Re: Proposal for revised charter
"Yaron Sheffer" <[email protected]> Mon, 10 Apr 2006 16:04:29 +0300
| Newsgroups | gmane.ietf.mobike |
|---|---|
| Message-ID | <[email protected]> |
I realize that I'm a bit late, but still... I would like to propose two work items that I believe fall within MOBIKE's charter. 1. "Secure beacon": a secure way for a mobile client to determine whether it is inside or outside of the trusted network. In many cases, depending on network topology and local security policy, you might want to suspend IPsec once "inside the network". There are now similar solutions being discussed in the Mobile-IP+IPsec context, but a solution that's independent of Mobile IP would be preferable. 2. Short-term credentials assigned by one gateway, to allow a client to connect to another gateway without performing full EAP-based authentication (and entering a password). Although the need to connect to multiple IPsec gateways is not limited to the mobility case, it is amplified by mobility. For example, some of the gateways may not be accessible through different access methods, e.g. cellular/GPRS. I (and Check Point) obviously commit to work on these items if there is interest. Paul and Russ, I'd like to request a week to allow the group to support these proposals (or shoot them, anything is better than silence). Following that, we can reconsider group shut down. Thanks, Yaron -----Original Message----- From: Paul Hoffman [mailto:[email protected]] Sent: Friday, April 7, 2006 18:54 To: [email protected] Cc: Russ Housley Subject: Re: [Mobike] Proposal for revised charter There seems to be not enough interest in the WG to revise the charter: only two people spoke up. I assume that the people at the face-to-face meeting who wanted to see the charter revised wanted to see the work done, but didn't intend to help do it, which is understandable. <cue the forlorn violin music> Russ: please start the process to shut down the MOBIKE WG. I assume that Steve Bellovin, our mailing list host, will keep the list open indefinitely. If not, we can move it to VPNC. --Paul Hoffman, Director --VPN Consortium