Subject: Re: [Enum] Re: draft-chenh-enum-app-auth-00.txt

From: Xiaodong Lee <[email-masked]>
Date: Tue, 07 Nov 2006 05:28:36 +0800

1)public key will be stored into the ENUM DNS.
2)Exact, replay attack is good question, some mechanism, e.g. timestamp, 
should be used to against that.
   BUT, this has not been covered in this draft up to now.

-- 
-- Xiaodong LEE [The best answer is doing]
   +86-10-58813020 
   mailto:[email-masked]
   http://www.lixiaodong.cn

Otmar Lendl wrote:
> Regarding draft-chenh-enum-app-auth-00.txt:
>
> | 2.3.  Application
> | 
>
> [...]
>
> | In order to improve the security and privacy of ENUM service,
> | authentication function can be introduced into ENUM applications.
> | When the originer initiates a service, the initiation message carries
> | both originer's un-encrypted ENUM number and encrypted ENUM number
> | field with sender's public key. 
>
> Shouldn't that be the private key?
>
> Two other questions:
>
> * Do you propose to store the public key directly in the ENUM dns,
>   or just a refernce (URI) to a key-server which keeps the public
>   keys?
>
> * How to you protect the scheme against replay attacks? 
>
> /ol
>   

_______________________________________________
enum mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/enum