Re: iSCSI Security

[julian_satran@il.ibm.com]

---------------------- Forwarded by Julian Satran/Haifa/IBM on 06/03/2001
03:50 ---------------------------

Julian Satran
06/03/2001 03:49

To:   Joshua Tseng <jtseng@NishanSystems.com>
cc:
From: Julian Satran/Haifa/IBM@IBMIL
Subject:  Re: iSCSI Security  (Document link: Julian Satran - Mail)

Josh,

We don't want to deal with any of the authentication schemes on which we
have to keep inventing things and interfaces.

Kerberos and SRP have everything needed, including being implemented on
widely available platforms, and beyond them IPSec handles everything.

Obviously vendors can add anything (including public key).

Regards,
Julo

Joshua Tseng <jtseng@NishanSystems.com> on 05/03/2001 20:53:05

Please respond to Joshua Tseng <jtseng@NishanSystems.com>

To:   Julian Satran/Haifa/IBM@IBMIL
cc:   ips@ece.cmu.edu
Subject:  iSCSI Security




Julian,

Why was the public key authentication method removed from version -05?
Are you sure you want iSCSI to forsake the benefits of public key
cryptography?  I strongly suggest it be reinstated as one of the
authentication
methods listed in page 95.

Josh