Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Dan Harkins
You are wrong. But let me just give my best John Major impression from "Prime Minister's Question Time": I refer the right-honourable gentleman to the answer I gave some moments ago. On Wed, December 2, 2009 10:50 pm, Alan DeKok wrote: > Dan Harkins wrote: >> Slicing up my posts an

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Alan DeKok
Dan Harkins wrote: > You are wrong. Are you opposed to sending clear-text passwords in the tunnel? Alan DeKok. ___ Emu mailing list Emu@ietf.org https://www.ietf.org/mailman/listinfo/emu

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Dan Harkins
I refer the right-honourable gentleman to the answer I gave some moments ago. On Thu, December 3, 2009 2:53 am, Alan DeKok wrote: > Dan Harkins wrote: >> You are wrong. > > Are you opposed to sending clear-text passwords in the tunnel? > > Alan DeKok. > _

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Alan DeKok
Dan Harkins wrote: > > >I refer the right-honourable gentleman to the answer I gave >some moments ago. > > Since there has been no new information, I can only conclude that my previous summary was correct, and that you have no additional concerns with the document. Alan DeKok. ___

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Dan Harkins
Once again Alan, you are wrong. Your previous summary went off on tangents, made statements that were irrelevant and inferred things that I never said. Responding to it would not be productive. I have made my comments on the draft and stand by them. I refer you to my previous statements made

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Alan DeKok
Dan Harkins wrote: > I refer you to my previous statements made on this list for my > concerns with the document which are current and unaddressed. I asked for clarification, and you claim that my attempts to discuss those clarifications are "tangents" and "straw men". This doesn't make me

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Dan Harkins
On Thu, December 3, 2009 12:24 pm, Alan DeKok wrote: > Dan Harkins wrote: >> I refer you to my previous statements made on this list for my >> concerns with the document which are current and unaddressed. > > I asked for clarification, and you claim that my attempts to discuss > those clarifi

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Alan DeKok
The document states a clear requirement: the tunneled method MUST be capable of sending clear-text passwords in the tunnel. You agree that the attacks against this requirement are adequately covered by existing text in the document: http://www.ietf.org/mail-archive/web/emu/current/msg01327.ht

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Dan Harkins
Alan, You are misrepresenting my concerns with this draft and (intentionally) misunderstanding my post. On Thu, December 3, 2009 1:20 pm, Alan DeKok wrote: > The document states a clear requirement: the tunneled method MUST be > capable of sending clear-text passwords in the tunnel. A "

Re: [Emu] Issue #7: Password Authentication

2009-12-03 Thread Alan DeKok
Dan Harkins wrote: > A "clear-text" password will have to be sent "in the tunnel" because > otherwise authentication would not be possible! There are many authentication protocols which do not require the sending of a clear-text password. CHAP, MS-CHAP, EKE, SRP, or your own proposal. So I'm