Re: iSCSI: Authentication thoughts

[Bill Studenmund <wrstuden@wasabisystems.com>]

On Mon, 29 Apr 2002 Black_David@emc.com wrote:

> In the hopes of kicking off some useful discussion, I
> thought I'd post my current views on CHAP, DH-CHAP, and SRP.
> These are posted as an individual and author of the DH-CHAP
> draft, *not* as a WG co-chair.  This post follows a thought
> path through these issues.  While it's by no means the only
> such path, I think this sort of approach is better than
> starting with sets of MUST/SHOULD/MAY words, and comparing/
> contrasting the sets.  IMHO, the fundamental issue is what
> the first/only protocol is that "MUST implement" needs to be
> applied to.

I'm not going to copy the entire note, but I think my thoughts parallel
yours.

Would machine-generated CHAP keys be good enough?

I think I'd still vote for DH-CHAP... :-)

Take care,

Bill