Re: [midcom] SNMPv3 as MIDCOM protocol: Opinions?

Hi -

> From: Michael Thomas <[email protected]>
> Message-ID: <[email protected]>
> Date: Mon, 9 Dec 2002 17:08:25 -0800 (PST)
> To: Wes Hardaker <[email protected]>
> Cc: Michael Thomas <[email protected]>, [email protected],
>         "Harrington, David" <[email protected]>,
>         "Chris Elliott" <[email protected]>,
>         "Wijnen, Bert (Bert)" <[email protected]>,
>         "[email protected] (E-mail)" <[email protected]>
> Subject: Re: [midcom] SNMPv3 as MIDCOM protocol: Opinions?
> In-Reply-To: <[email protected]>
> References: <6D745637A7E0F94DA070743C55CDA9BA256F06@NHROCMBX1.ets.enterasys.com>
> 	<[email protected]>
> 	<[email protected]>
> 	<[email protected]>
...
>    I'm not saying that IPsec would be a good fit;
>    quite the opposite, actually. I'm arguing that app
>    layer security without key management is, well,
>    useless was the first thing that popped into my
>    mind, but I should probably be more charitable.
>    It really makes deciding what to do at any sort
>    of scale *very* hard given the inferior choices.
> 
>    As I said, for MIDCOM this is a very distinct
>    negative for SNMPv3 as a choice, all other
>    things being equal. Any other wg considering 
>    SNMPv3 as the basis for their protocol would be
>    well advised to take that into consideration.
...

Could you give an example of a protocol in use that does
initial key distribution, key update, authentication and access
control management well?  (All four, not just one or two.)
With SNMPv3 USM+VACM, we get three out of the four.  If there
were a good way to get all four, I think the WG would like
to know about it.

 ------------------------------------------------------
 Randy Presuhn          BMC Software, Inc.  SJC-1.3141
 [email protected]  2141 North First Street
 Tel: +1 408 546-1006   San José, California 95131  USA
 ------------------------------------------------------
 My opinions and BMC's are independent variables.
 ------------------------------------------------------