November 2010 - caops-wg

Hacker Cracks Secure Hashing Algorithm Using Amazon Cloud -- Security -- InformationWeek
by Alan Sill 22 Nov '10

22 Nov '10

Thought you would be interested in the following link. Topic: Using EC2's cluster GPU power, security researcher spent only $2.10 to decrypt 14 SHA1 passwords in under an hour; other experts aren't concerned. Link: http://www.informationweek.com/news/security/NAC/showArticle.jhtml?articleI… Alan

2 1

HPC in the Cloud article: Cloud Security: The Federated Identity Factor
by Alan Sill 19 Nov '10

19 Nov '10

Thought you would be interested in the following link. Comments and discussion are welcome. Quote: "Standards like SAML and WS-Federation were purpose-built to provide robust security in the cloud. They keep authentication strong and securely within the enterprise firewall. They eliminate the need to maintain sensitive access control information external to the organization. They enable successful on- and off-boarding of all employees on a common directory server. They make it easier to pass security audits by giving full visibility into user access. They afford the flexibility needed to accommodate special or unusual needs. And they scale without adding significant cost or increased complexity." Link: http://www.hpcinthecloud.com/features/Cloud-Security-The-Identity-Factor--1… Alan

1 0

Fwd: [pkix] New Version Notification for draft-hotz-kx509-01
by Alan Sill 08 Nov '10

08 Nov '10

Can people please read this draft and comment if and as appropriate? Link: http://datatracker.ietf.org/doc/draft-hotz-kx509/ Thanks, Alan Begin forwarded message: > From: "Henry B. Hotz" <hotz(a)jpl.nasa.gov> > Date: November 8, 2010 3:22:35 PM CST > To: "saag(a)ietf.org" <saag(a)ietf.org>, "pkix(a)ietf.org" <pkix(a)ietf.org>, "ietf-krb-wg(a)anl.gov Group" <ietf-krb-wg(a)anl.gov> > Subject: Re: [pkix] New Version Notification for draft-hotz-kx509-01 > > I think I've incorporated all the suggested changes, except the ones that would create a new incompatible protocol. > > I intend to start discussion of a new version to fix the warts, but let's take care of this baseline first. > > On Nov 8, 2010, at 12:01 PM, IETF I-D Submission Tool wrote: > >> >> A new version of I-D, draft-hotz-kx509-01.txt has been successfully submitted by Henry Hotz and posted to the IETF repository. >> >> Filename: draft-hotz-kx509 >> Revision: 01 >> Title: KX509 Kerberized Certificate Issuance Protocol >> Creation_date: 2010-11-08 >> WG ID: Independent Submission >> Number_of_pages: 10 >> >> Abstract: >> This rfc describes a protocol, called kx509, for using Kerberos >> tickets to acquire X.509 certificates. >> >> While not (previously) standardized, this protocol is already in use >> at several large organizations, and certificates issued with this >> protocol are recognized by TAGPMA (The Americas Grid Policy >> Management Authority). >> >> >> >> The IETF Secretariat. > > ------------------------------------------------------ > The opinions expressed in this message are mine, > not those of Caltech, JPL, NASA, or the US Government. > Henry.B.Hotz(a)jpl.nasa.gov, or hbhotz(a)oxy.edu > > > > _______________________________________________ > pkix mailing list > pkix(a)ietf.org > https://www.ietf.org/mailman/listinfo/pkix Alan Sill, Ph.D Senior Scientist, High Performance Computing Center Adjunct Professor of Physics, TTU VP of Standards Open Grid Forum ==================================================================== : Alan Sill, Texas Tech University Office: Admin 233, MS 4-1167 : : e-mail: Alan.Sill(a)ttu.edu ph. 806-742-4350 fax 806-742-4358 : ====================================================================

1 0