Re: question on key localizaton

³ªÇöÀÍ wrote:
> 
> After some thought, I found that I imagined a situation
> where any arbitrary pair of engines want to communicate with each other.

Quite an imagination you've got! Stop right there.  (:-)

In SNMP arbitrary pairs of engines do NOT communicate, period.
[As you yourself note a few lines below.]

> In this kind of situation, an engine should know all the others' keys
> and different keys on every engines are meaningless.

Of course - as the whole imaginary situation is meaningless.
 
> However, this is generally not the case.
> A comminication takes place between a manager  ( or one of few managers ) and an agent
> and a agent need not to know another agent's key. ( except for a proxy agent. )

You said it. 
 
> However we still be very cautious not to be stolen the manager box because
> it knows many keys on many other authoritative engines.  :-)

The assumption behind all this is that there are ust a few "manager
boxes" and
they usually sit in well-protected and reasonably secure locations.
While the
agents are plentiful and deployed in the field across the wild lands,
so
pretty much anybody can get to an agent or two and tease 'em apart...