Subject: [Int-area] Last Call before IETF meeting: draft-rafiee-intarea-cga-tsig-00.txt

From: "Rafiee, Hosnieh" <[email-masked]>
Date: Tue, 23 Oct 2012 17:06:42 +0200

Hello,

This is our "last call" request for comments concerning our draft, RFC "CGA-TSIG". If you feel so inclined, please feel free to comment on it. Any and all comments are greatly appreciated.
Thank you,

----------------------------------

A new version of I-D, draft-rafiee-intarea-cga-tsig-00.txt
has been successfully submitted by Hosnieh Rafiee and posted to the IETF repository.

Filename:	 draft-rafiee-intarea-cga-tsig
Revision:	 00
Title:		 Transaction SIGnature (TSIG) using CGA Algorithm in IPv6
Creation date:	 2012-10-15
WG ID:		 Individual Submission
Number of pages: 13
URL:             http://www.ietf.org/internet-drafts/draft-rafiee-intarea-cga-tsig-00.txt
Status:          http://datatracker.ietf.org/doc/draft-rafiee-intarea-cga-tsig
Htmlized:        http://tools.ietf.org/html/draft-rafiee-intarea-cga-tsig-00

Abstract:
   The first step of Transaction SIGnature (TSIG) (RFC 2845) is to
   generate a shared secret and exchange it manually between a DNS
   server and a host. This document, CGA-TSIG, proposes a possible way
   to automate the now manual process for the authentication of a node
   with a DNS server during the DNS Update process by using the same
   parameters as are used in generating a secure address in IPv6
   networks, i.e., Cryptographically Generated Addresses (CGA) (RFC
   3972). CGA-TSIG facilitates this authentication process and reduces
   the time needed for DNS Updates. The current signature generation
   process and verification mechanism in TSIG are thus replaced with
   CGA. This algorithm is added, as an extension, to TSIG to eliminate
   the human intervention needed for generation and exchange of keys
   between a DNS server and a host when SEcure Neighbor Discovery (SEND)
   (RFC 3971) is used.

The IETF Secretariat