RE: RE2: Do ipsec vendors care about privacy?

["Yoav Nir" <ynir@CheckPoint.com>]

With GTC, the challenge is a string like "Enter your password" and the
response is also a string.  I think this is more useful than the other
methods for passing user/password from the client to the gateway.
With MD5-Challenge, the authenticator needs to issue the challenge.  You may
have some problems integrating it with various authentication servers.

-----Original Message-----
From: owner-ipsec@lists.tislabs.com
[mailto:owner-ipsec@lists.tislabs.com]On Behalf Of Antonio Forzieri
Sent: Friday, March 21, 2003 1:01 PM
To: ''IPsec WG ' '
Subject: Re: RE2: Do ipsec vendors care about privacy?


[SNIP]

With CHAP (Or MD5-CHALLENGE) Hugo's proposal will work, however with OTP
and maybe with GTC I think that the responder needs to know the
Iniziator ID prior to send the OTP challenge.

--
------------------------------------------------
Antonio Forzieri
CEFRIEL - Politecnico di Milano
Tesista Area E-Service Tecnologies
Tel: 02-23954.334 - email: forzieri@cefriel.it
ICQ# 177683894
------------------------------------------------