btns problem and applicability statement
play

BTNS Problem and Applicability Statement Joe Touch David Black - PowerPoint PPT Presentation

BTNS Problem and Applicability Statement Joe Touch David Black Yu-Shun Wang 1 11/10/2005 3:19 PM Document Status Versions: draft-ietf-btns-prob-and-applic-00.txt July 1, 2005 draft-ietf-btns-prob-and-applic-01.txt Sept.


  1. BTNS Problem and Applicability Statement Joe Touch David Black Yu-Shun Wang 1 11/10/2005 3:19 PM

  2. Document Status � Versions: � draft-ietf-btns-prob-and-applic-00.txt � July 1, 2005 � draft-ietf-btns-prob-and-applic-01.txt � Sept. 23, 2005 � Feedback from only a few parties � Broader feedback solicited 11/10/2005 3:19 PM 2

  3. Feedback Status � 00-> 01 � Most comments incorporated � Some not fully addressed � We DID try to address all comments � Some were not sufficient – working on revisions � 01-> (02 – TBA) � Revisit open issues from 00-01 � New issues 11/10/2005 3:19 PM 3

  4. A Note on Feedback � Not all changes added ‘as suggested’ � Some suggest broader revision is needed � ALL were addressed in some way � Is feedback on feedback desired? � Can/will send (based on what was received) � Point-by-point � Summarized replies � List where feedback may need public input 11/10/2005 3:19 PM 4

  5. Pending Clarifications � Channel bindings � VoIP in examples � Limits of manual keying (RFC 3723/4107) � Re: “IPsec doesn’t require IKE” � Clarify IPsec services � Access control � SSL/TLS should address common case � Client has no certificate � OE � Re: “discovery, not key lookup” � BGP motivation � (next 2 slides) � Clearer text on three variants � Unauth, Channel-bound, leap-of-faith (?) 11/10/2005 3:19 PM 5

  6. BGP Motivation � BGP requirements are varied � Reducing configuration � CPU load / need for hardware � Performance � Not all requirements addressed here � BTNS is inspired by BGP security issue � BTNS may be part of a BGP solution � BTNS is useful in other scenarios 11/10/2005 3:19 PM 6

  7. About CPU Load/Perf � Recall it was part of the proposed work � And nixed � � It may be part of other efforts � E.g., Triage (www.postel.org/triage) � ID in time for BOF at Dallas � Provably strong security is expensive � Fast security may be desired as an alternative 11/10/2005 3:19 PM 7

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend