Subject: [TLS] FW: Last Call: <draft-ietf-emu-eap-tls13-20.txt> (Using EAP-TLS with TLS 1.3 (EAP-TLS 1.3)) to Proposed Standard

From: Roman Danyliw <[email-masked]>
Date: Tue, 7 Sep 2021 16:26:35 +0000

Cross-posting to ensure visibility given the support of the TLS WG during the initial IESG Review of this document.

-----Original Message-----
From: [email-masked] <[email-masked]> 
Sent: Monday, September 6, 2021 2:20 PM
To: IETF-Announce <[email-masked]>
Cc: Joseph Salowey <[email-masked]>; [email-masked]; [email-masked]; [email-masked]; [email-masked]; Roman Danyliw <[email-masked]>
Subject: Last Call: <draft-ietf-emu-eap-tls13-20.txt> (Using EAP-TLS with TLS 1.3 (EAP-TLS 1.3)) to Proposed Standard

The IESG has received a request from the EAP Method Update WG (emu) to consider the following document: - 'Using EAP-TLS with TLS 1.3 (EAP-TLS 1.3)'
  <draft-ietf-emu-eap-tls13-20.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the [email-masked] mailing lists by 2021-09-20. Exceptionally, comments may be sent to [email-masked] instead. In either case, please retain the beginning of the Subject line to allow automated sorting.

Abstract

   The Extensible Authentication Protocol (EAP), defined in RFC 3748,
   provides a standard mechanism for support of multiple authentication
   methods.  This document specifies the use of EAP-Transport Layer
   Security (EAP-TLS) with TLS 1.3 while remaining backwards compatible
   with existing implementations of EAP-TLS.  TLS 1.3 provides
   significantly improved security, privacy, and reduced latency when
   compared to earlier versions of TLS.  EAP-TLS with TLS 1.3 (EAP-TLS
   1.3) further improves security and privacy by always providing
   forward secrecy, never disclosing the peer identity, and by mandating
   use of revocation checking.  This document also provides guidance on
   authentication, authorization, and resumption for EAP-TLS in general
   (regardless of the underlying TLS version used).  This document
   updates RFC 5216.

The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-emu-eap-tls13/

No IPR declarations have been submitted directly on this I-D.