A new Request for Comments is now available in online RFC libraries.
RFC 5387
Title: Problem and Applicability Statement for
Better-Than-Nothing Security (BTNS)
Author: J. Touch, D. Black, Y. Wang
Status: Informational
Date: November 2008
Mailbox: touch@isi.edu,
black_david@emc.com,
yu-shun.wang@microsoft.com
Pages: 28
Characters: 71707
Updates/Obsoletes/SeeAlso: None
I-D Tag: draft-ietf-btns-prob-and-applic-07.txt
URL: http://www.rfc-editor.org/rfc/rfc5387.txt
The Internet network security protocol suite, IPsec, requires
authentication, usually of network-layer entities, to enable access
control and provide security services. This authentication can be
based on mechanisms such as pre-shared symmetric keys, certificates
with associated asymmetric keys, or the use of Kerberos (via
Kerberized Internet Negotiation of Keys (KINK)). The need to deploy
authentication information and its associated identities can be a
significant obstacle to the use of IPsec.
This document explains the rationale for extending the Internet
network security protocol suite to enable use of IPsec security
services without authentication. These extensions are intended to
protect communication, providing "better-than-nothing security"
(BTNS). The extensions may be used on their own (this use is called
Stand-Alone BTNS, or SAB) or may be used to provide network-layer
security that can be authenticated by higher layers in the protocol
stack (this use is called Channel-Bound BTNS, or CBB). The document
also explains situations for which use of SAB and/or CBB extensions
are applicable. This memo provides information for the Internet community.
This document is a product of the Better-Than-Nothing Security Working Group of the IETF.
INFORMATIONAL: This memo provides information for the Internet community.
It does not specify an Internet standard of any kind. Distribution of
this memo is unlimited.
This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
http://www.ietf.org/mailman/listinfo/ietf-announce
http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html.
For downloading RFCs, see http://www.rfc-editor.org/rfc.html.
Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.
The RFC Editor Team
USC/Information Sciences Institute
_______________________________________________
IETF-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/ietf-announce
