IDXP status
[email protected] Fri, 26 Jul 2002 10:59:28 -0400
| Newsgroups | gmane.ietf.idwg |
|---|---|
| Message-ID | <397E0659AA2DD411843500508B64F1CE0431030A@USBOSMX01> |
I have made all the updates I am planning to make, and have posted them in the draft-ietf-idwg-beep-idxp-05 memo of June 17, 2002. The last unresolved issue of Glenn's is shown below. Unless I hear anything to support Glenn or requests to change the wording, the IDXP memo will stay the way it is. On Mon, 24 Jun 2002, Glenn Mansfield Keeni wrote: > > GMK 4. Sec 5 Page 21 > > ID The [protocol] SHOULD be able to ensure non-repudiation of the > > ID origin of IDMEF messages. > > ID > > ID IDXP supports non-repudiation of message origin through the use > > ID of an appropriate underlying BEEP security profile. The TLS > > ID profile is an example of a security profile that offers non- > > ID repudiation of message origin through the authentication of > > > > GMK The above may be misleading. It is not clear how this will be done. > > GMK To my knowledge TLS does not guarantee non-repudiation of message > > GMK origin. (It can ensure non repudiation of TLS session origination > > GMK - but that does not ensure non-repudiation of message origin.). This > > GMK is probably a message content matter and thus beyond the communication > > GMK protocol. > > > > BSF Point taken. I've rewritten this section, hopefully more to > > BSF Glenn's liking. > Unfortunately not. non-repudiation of message origin cannot be done by > BEEP/IDXP. And non-repudiation of session origin is not what is sought. > I would recommend that you drop this. And maybe it should be dropped as > from the (protocol) requirement document too. > Ben Feinstein > Software Development Engineer, R & D > W: 678.585.7865 x6726 F: 770.645.8311 M: 678.772.4126 > 8302 Dunwoody Pl., Suite 320, Atlanta, GA 30350 www.guardent.com > _____________________________________________________ > G U A R D E N T > Enterprise Security and Privacy Programs >