Re: Future of the PPP WG

Hi Glen,

On Fri, Sep 9, 2011 at 7:33 AM, Glen Zorn <[email protected]> wrote:
> On 9/9/2011 5:24 AM, Donald Eastlake wrote:
>
>> Hi,
>>
>> In case you were unaware, I am now the Chair of PPPEXT.
>
> Thanks for mentioning it!
>
>>
>> Generally, there has been little activity in this WG for some years.
>> Although I believe it serves a useful purpose in examining PPP
>> proposals, possibly that purpose could be served by just continuing
>> the mailing list. In any case, it seems likely that, if the situation
>> continues unchanged, the WG will be dissolved sometime early next
>> year.
>>
>> In the process of producing RFC 6361, it became very apparent that the
>> PPP security RFCs, such as they are, meet few, if any, modern IETF
>> security guidelines.
>
> Would these be realistic guidelines (such as RFC 3552 (but do you
> consider that 'modern')) or pie-in-the-sky "in my dream world this is
> how it would work" guidelines (like RFC 4962)?

I should think the PPPEXT WG would decided which guidelines, subject
to the constrains of getting documents through the IETF process :-)

>> I believe that there should be an update of PPP
>> security or, if an effort to update them fails for some reason, then
>> at least old / inadequate / unimplemented PPP security RFCs should be
>> declared historic.
>
> Do you have a list of said RFCs?

I don't think it is complete but how about the following to start with:

"The PPP Encryption Control Protocol (ECP)",
               RFC 1968, June 1996.
"PPP Challenge Handshake Authentication
               Protocol (CHAP)", RFC 1994, August 1996.
"The PPP Triple-DES Encryption Protocol (3DESE)", RFC 2420, September 1998.

>> My suggestion is that PPPEXT re-Charter to include a goal such as the
>> above and I'm willing to try drafting a new Charter but welcome
>> suggestions and comments on all this.
>>
>> One question is, should PPPEXT have a 1 hour meeting at the November
>> IETF meeting? I think that would be the best way to come to consensus
>> on this but obviously only if enough people would plan to actually
>> attend. So, I'd be interested in who is would attend and any opinions
>> for or against such a meeting.
>
> I would attend if I had no irreconcilable conflicts.

Unless there is significant support, I won't try to have a physical meeting.

Thanks,
Donald
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D
=A0Donald E. Eastlake 3rd=A0=A0 +1-508-333-2270 (cell)
=A0155 Beaver Street,=A0Milford, MA 01757 USA
[email protected]
_______________________________________________
Pppext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/pppext