All of the Moonshot documentation has been moved to the new Moonshot wiki at http://wiki.moonshot.ja.net/
The new version of this page can be found at https://wiki.moonshot.ja.net/x/1wIp
All of the Moonshot documentation has been moved to the new Moonshot wiki at http://wiki.moonshot.ja.net/
The new version of this page can be found at https://wiki.moonshot.ja.net/x/2QIp
All of the Moonshot documentation has been moved to the new Moonshot wiki at http://wiki.moonshot.ja.net/
The new version of this page can be found at https://wiki.moonshot.ja.net/x/OAEp
All of the Moonshot documentation has been moved to the new Moonshot wiki at http://wiki.moonshot.ja.net/
The new version of this page can be found at https://wiki.moonshot.ja.net/x/dgAp
You will no doubt have already received advisories about vulnerabilities in the 1.0.1-series of OpenSSL[1] affecting TLS enabled services via the heartbeat extension.
The advice for Moonshot is very similar to an advisory you may have received from eduroam[2].
While there are no indications that CVE-2014-0160[3] is being actively exploited via TLS-based EAP-mechanisms or RADIUS/TLS (aka RadSec) at this time, the software used by Moonshot *is* vulnerable to a "heartbleed" attack.
Those of you who have been following Moonshot for a while will be aware that from the outset we have been keen to get the technology adopted as a standard. Thanks to the hard work of the Application Bridging for Federated Access Beyond web (ABFAB) Working Group of the IETF, December saw an important milestone with the publication of three Moonshot-related RFC documents:
RFC 7055
Title: A GSS-API Mechanism for the Extensible Authentication Protocol
Author: Author: S. Hartman, Ed., J. Howlett
Introduction
This page contains links to various resources that will allow you to explore Moonshot in more detail.
This presentation explains why Moonshot has been developed, what it is, the use cases it solves and an overview of the technologies. It also introduces the 2 pilots that started in April 2013.
General enquiries
The Project Manager is John Chapman. Please feel free to get in touch if you have any questions or require further information.
Getting started
Moonshot Developers Meeting Draft Meeting Miniutes. Meeting was held on 14th and 15th October 2013 at the Warwick University, UK.