2.7.13 Simple Authentication and Security Layer (sasl)

NOTE: This charter is a snapshot of the 69th IETF Meeting in Chicago, IL USA. It may now be out-of-date.

Last Modified: 2006-08-16

Chair(s):

Tom Yu <tlyu@mit.edu>
Kurt Zeilenga <kurt.zeilenga@isode.com>

Security Area Director(s):

Tim Polk <tim.polk@nist.gov>
Sam Hartman <hartmans-ietf@mit.edu>

Security Area Advisor:

Sam Hartman <hartmans-ietf@mit.edu>

Mailing Lists:

General Discussion: ietf-sasl@imc.org
To Subscribe: ietf-sasl-request@imc.org
In Body: subscribe
Archive: http://www.imc.org/ietf-sasl/mail-archive/

Description of Working Group:

The Simple Authentication and Security Layer [RFC2222] provides key
security services to a number of application protocols including BEEP,
IMAP, LDAP, POP, and SMTP. The purpose of this working group is to
shepherd SASL, including select SASL mechanisms, through the Internet
Standards process.

This group will deliver a revised SASL Technical Specification
suitable for consideration as a Draft Standard. This work will be
based upon RFC 2222 and draft-myers-saslrev.

This group will deliver revised Technical Specifications suitable for
consideration as Draft Standards for the following SASL mechanisms:
ANONYMOUS, PLAIN, CRAM-MD5, DIGEST-MD5, and EXTERNAL. This work will
be based upon RFC 2195, RFC 2222, RFC 2831, draft-zeilenga-sasl-anon,
draft-zeilenga-sasl-plain, draft-nerenberg-sasl-crammd5 and
draft-melnikov-rfc2831bis, and draft-myers-saslrev-xx.txt.

This group will deliver a revised Technical Specification suitable for
publication as Proposed Standard for the GSSAPI family of SASL
mechanisms. This work will be based upon RFC 2222 and
draft-ietf-cat-sasl-gssapi.

The following areas are not within the scope of work of this WG:

- new features,

- SASL Mechanisms not specifically mentioned above, and

- SASL "profiles".

However, the SASL WG is an acceptable forum for review of SASL-related
submissions produced by others as long as such review does not impede
progress on the WG objectives listed above.

Goals and Milestones:

Done  Submit revised SASL (+ EXTERNAL) I-D
Done  Submit revised SASL ANONYMOUS I-D
Done  Submit revised SASL PLAIN I-D
Done  Submit revised SASL CRAM-MD5 I-D
Done  Submit revised SASL DIGEST-MD5 I-D
Done  Submit revised SASL GSSAPI I-D
Done  Submit SASL (+ EXTERNAL) to the IESG for consideration as a Proposed Standard
Done  Submit GSSAPI to IESG for consideration as a Proposed Standard
Sep 2006  Submit GS2 to IESG for consideration as a Proposed Standard
Sep 2006  Submit CRAM-MD5 to IESG for consideration as a Proposed Standard
Oct 2006  Submit DIGEST-MD5 to IESG for consideration as a Proposed Standard
Oct 2006  Provide implementation report plan (with milestones)
Nov 2006  Revise charter or conclude

Internet-Drafts:

  • draft-ietf-sasl-rfc2831bis-12.txt
  • draft-ietf-sasl-crammd5-08.txt
  • draft-ietf-sasl-gs2-08.txt

    Request For Comments:

    RFCStatusTitle
    RFC4013 Standard SASLprep: Stringprep profile for user names and passwords
    RFC4422 PS Simple Authentication and Security Layer (SASL)
    RFC4505 PS Anonymous Simple Authentication and Security Layer (SASL) Mechanism
    RFC4616 PS The PLAIN Simple Authentication and Security Layer (SASL) Mechanism
    RFC4752 PS The Kerberos V5 (

    Meeting Minutes


    Slides

    agenda