Re: New work for sacred working group?

[Simon Josefsson <jas@xxxxxxxxxxx>]

Stephen Farrell <stephen.farrell@xxxxxxxxx> writes:

> Hi Simon,
>
>> It appears to me as if the security community in IETF can't offer a
>> good password based security protocol.
>>
>> Anything beyond TLS+PLAIN seem to me be either surrounded with IPR
>> concerns (SPEKE, SRP); [...]
>
> Would it be fair to take that as meaning you'd be supportive
> of new work being done here on things like SPEKE if it were
> not "surrounded by IPR concerns"?

Hello Stephen.  Yes, if it means that SPEKE is eventually made
available for use in free implementations, that alone would justify
going through some additional work here, in my opinion.  I'm thinking
of this issue in general, and not specifically in connection with
SACRED, though.  But it has to start somewhere...

Regards,
Simon