Re: iSCSI: SRP groups in Security-14 strawman

["Ofer Biran" <BIRAN@il.ibm.com>]

David,

Sounds reasonable. Two comments:

1. Is there no delay concern in introducing new IANA requirements at
   this late stage in the iSCSI standard ?

2. >Target MUST offer SRP-2048 as one of the possible values of
   >SRP_GROUP and SHOULD offer all supported groups that are
   >allowed by local security policy.

   "and SHOULD offer all supported groups..." - this sentence seems to
   me unnecessary. "MUST offer SRP-2048" is OK - it means that the
   implementation's administration interface will not enable settings
   that precludes offering SRP-2048. However, I'd expect the implementation
   to anyway offer other choices exactly according to the policy settings
   (unless it's bugged...).

  Regards,
      Ofer


Ofer Biran
Storage and Systems Technology
IBM Research Lab in Haifa
biran@il.ibm.com  972-4-8296253