1 / 2

Potential New OTPS Work Items

In October 2005, John Linn from RSA Laboratories presented potential new OTP work items for community assessment. Two key prospects were identified: First, OTPs in TLS-PSK, which involves defining a method to derive a Pre-Shared Key (PSK) from an OTP for secure TLS connections. Second, OTPs in HTTP Digest Authentication, focusing on integrating OTP-based authentication with the existing HTTP Digest framework, potentially benefiting SIP authentication as well. Community feedback and suggestions are encouraged.

glynis
Download Presentation

Potential New OTPS Work Items

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Potential New OTPS Work Items John Linn, RSA Laboratories OTPS Workshop, October 2005

  2. Possible New OTPS Work Items • Two tentative prospects raised to assess community interest: • OTPs in TLS-PSK: The IETF Transport Layer Security (TLS) working group is defining new TLS ciphersuites that establish TLS connections based on pre-shared keys (PSK). This work item would define an approach for deriving a PSK for TLS-PSK purposes from an OTP value, enabling OTP-based protection of TLS connections. • OTPs in HTTP Digest Authentication: This work item would define methods for using OTP-based authentication in conjunction with HTTP Digest. As the authentication framework used in the Session Initiation Protocol (SIP) is based on HTTP Digest, the results of this work item could also support OTP-based SIP authentication, among other purposes. • Interest in these, or other suggestions?

More Related