Anonymity Support for Kerberos
RFC 6112
Yes
No Objection
Note: This ballot was opened for revision 12 and is now closed.
Lars Eggert No Objection
(Tim Polk; former steering group member) Yes
(Adrian Farrel; former steering group member) No Objection
idnits (http://tools.ietf.org/tools/idnits/) notes a few issues with references that other ADs have noted, and one problem with format. It would be good to sort these out. --- I like the acknowledgement... Sam Hartman and Nicolas Williams were great champions of this work. It is so often the case that document authors do not champion their work :-)
(Dan Romascanu; former steering group member) No Objection
(Gonzalo Camarillo; former steering group member) No Objection
(Jari Arkko; former steering group member) No Objection
(Peter Saint-Andre; former steering group member) No Objection
The Security Considerations note that "Because there are plaintext parts of the tickets that are exposed on the wire, such matching by a third party observer is relatively straightforward." Presumably the use of transport layer security would minimize the attack surface here, so at least an informative reference to draft-josefsson-kerberos5-starttls might be appropriate.
(Ralph Droms; former steering group member) No Objection
Section 4.2: The TGS SHOULD NOT populate identity-based authorization data into an anonymous ticket in that such authorization data typically reveals the client's identity. MUST? Or, under what conditions can the TGS violate the SHOULD NOT? Section 7: The padata-value field of the PA-PKINIT-KX type padata contains the DER [X680] [X690] encoding of the Abstract Syntax Notation One (ASN.1) type PA-PKINIT-KX. Are [X680] and [X690] citations? There are no matching references in the References section.
(Robert Sparks; former steering group member) No Objection
(Ron Bonica; former steering group member) No Objection
(Russ Housley; former steering group member) No Objection
Please consider the comments made by Elwyn Davies in the Gen-ART
Review posted on 10 September 2010. The review can be found here:
http://www.softarmor.com/rai/temp-gen-art/
draft-krb-wg-ananon-12-davies.txt
(Sean Turner; former steering group member) No Objection
(Stewart Bryant; former steering group member) No Objection