Use rfc4716 for ssh_pubkey AVP?

haussli / draft-dahm-opsawg-tacacs-security

IETF draft for new tacacs+ security features

1 stars 1 forks source link

Closed haussli closed 3 years ago

haussli commented 3 years ago

Is rfc4716 format the best choice for ssh_pubkey AVPs? How well does it handle concatenation, eg: does it end with a ?

Pro: seems like it ought to make concatenation easier. Con: more overhead in data & encoding.

td-tacacs commented 3 years ago

Another pro: it is well understood by now and we have enough example implementations

haussli commented 3 years ago

Though it is not as compact as the openssh format, I agree and it is a rfc format.