Subject: Re: [BEHAVE] [Technical Errata Reported] RFC5389 (3327)

From: Wesley Eddy <[email-masked]>
Date: Thu, 06 Sep 2012 22:03:11 -0400

For the record, I'm going to REJECT this errata report, based
on the mailing list discussion.

On 8/20/2012 2:24 PM, RFC Errata System wrote:
> The following errata report has been submitted for RFC5389,
> "Session Traversal Utilities for NAT (STUN)".
> 
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=5389&eid=3327
> 
> --------------------------------------
> Type: Technical
> Reported by: Todd Herman <[email-masked]>
> 
> Section: 15.3
> 
> Original Text
> -------------
>    The USERNAME attribute is used for message integrity.  It identifies
> 
>    the username and password combination used in the message-integrity
> 
>    check.
> 
> Corrected Text
> --------------
> 
> 
> Notes
> -----
> There is no explanation or description as to where this "password" comes from.  The statement indicates that the password is also part of the username field but that may not actually be true according to additional research I conducted and other portions of the specification.
> 
> 
> 
> If the password is part of this field than it should be explicitly noted how the two values are concatenated.  If this is not accurate, than the "and password combination" portion should be removed.
> 
> Instructions:
> -------------
> This errata is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party (IESG)
> can log in to change the status and edit the report, if necessary. 
> 
> --------------------------------------
> RFC5389 (draft-ietf-behave-rfc3489bis-18)
> --------------------------------------
> Title               : Session Traversal Utilities for NAT (STUN)
> Publication Date    : October 2008
> Author(s)           : J. Rosenberg, R. Mahy, P. Matthews, D. Wing
> Category            : PROPOSED STANDARD
> Source              : Behavior Engineering for Hindrance Avoidance
> Area                : Transport
> Stream              : IETF
> Verifying Party     : IESG
> 
> 

-- 
Wes Eddy
MTI Systems