Re: baseline CPIM security

Dave Crocker <[email protected]> writes:

> Think real hard about IP.  IP is common content.  The exchange
> "medium" is all that differs.  That, indeed, is what you folks are
> describing for CPIM.
> 
> That's not gatewaying.

No, that is not at all what we're talking about.  What we're talking
about _IS_ more like email than IP, except we want to meet some
end-to-end security requirements which email does not.

> Gatewaying is what is done between Internet Mail and X.400, for
> example.  Two, independent and complete systems.

Right, and if this particular email was gatewayed to an X.400 system,
the CONTENT (meaning the section that begins "Dave Crocker <...>
writes:" and ends with "www.ihtfp.com" is transmitted without changes.
I could use PGP and encrypt this message content, and again the
gateway would _still work_.  That's because the gateway is happening
at the message-transport layer, not the message-content layer.

In other words, SIP or APEX or whatever provides it's envelope and
transport mechanism and we gateway from one to another.

If you want to think about it as IP and ethernet talking to chaosnet,
feel free.

-derek

PS: either the impp list is slow, or my messages are not being
sent properly.  I don't know which.

-- 
       Derek Atkins
       Computer and Internet Security Consultant
       [email protected]             www.ihtfp.com



  [reminder: [email protected] for non-technical discussions, please]