Re: iSCSI: 7.2.1 CHAP Considerations (12-98)

[Paul Koning <ni1d@arrl.net>]

Excerpt of message (sent 13 June 2002) by Steve Senum:
> Further comments on this text:
> 
> 1. I would suggest changing "96 random bits" to "96 bits".
> I don't think it is practical to verify the number of random bits
> in a single secret.

That's certainly true.
 
> 2. I would suggest changing the final "MUST NOT" to a "SHOULD NOT".
> As with IKE pre-shared keys, the need to protect against off-line
> dictionary attacks is ultimately a local deployment consideration.

I agree.

    paul