Re: question on key localizaton

Wes Hardaker wrote:
> Uri> "The same key" is NOT the same as "the same LOCALIZED key". So
> Uri> yes, all those keys would be DERIVED from the user key owned by
> Uri> secName, and all those keys will be different and
> Uri> cryptographically "unrelated" due to localization process.
> 
> Uri> Am I missing something here?
> 
> Yes you are.  The engineid for the localization process in a SNMPv3
> inform is the notification receiver.

If correct - it means INFORMs are badly screwed up. Depending on
how it is addressed by the net-admin, either usability goes down
the tubes, or security...

The only correct fix that I see right now is to make the agent
authoritative engine always... Anybody remembers why we didn't
see such a simple problem and didn't address it way before?

> Uri> One of us is missing something. The question is - who and what? (:-)
> 
> It's you ;->

Yeah... I wish this was brought up earlier.

Are you 100% sure it's so with authoritative engines...?