IPP Mail Archive: IPP> on the use of SSL3 framing and SASL

IPP> on the use of SSL3 framing and SASL

Keith Moore (moore@cs.utk.edu)
Fri, 07 Nov 1997 17:22:55 -0500

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Turner, Randy: "IPP> Security proposal"
Previous message: Jay Martin: "Re: IPP> ADM - Article about IPP in Infoworld"
Next in thread: Keith Moore: "Re: IPP> on the use of SSL3 framing and SASL"
Next in thread: Xavier Riley.: "Re: IPP> on the use of SSL3 framing and SASL"

Chances are that IESG won't allow a standards track RFC to incorporate
the SSL3 protocol. It will have to reference the TLS protocol.
Fortuantely, the TLS spec is essentally finished - the TLS WG has
finished its internal Last Call and would appear to be ready to send
the spec back to IESG. So I don't expect that referencing the TLS
spec would delay adoption of IPP as a standard.

Also, while it's technically feasible to always use TLS framing with
IPP, it seems like it would be far better to define a SASL negotiation
framework for HTTP, which could then negotiate TLS. SASL is already a
Proposed Standard RFC, and is being retro-fitted into a number of
existing apps protocols.

Keith

Next message: Turner, Randy: "IPP> Security proposal"
Previous message: Jay Martin: "Re: IPP> ADM - Article about IPP in Infoworld"
Next in thread: Keith Moore: "Re: IPP> on the use of SSL3 framing and SASL"
Next in thread: Xavier Riley.: "Re: IPP> on the use of SSL3 framing and SASL"