RE: DRAFT Pittsburgh ips Minutes

[Black_David@emc.com]

An important clarification has been pointed out in the DRAFT minutes.
The DRAFT minutes say:

  Consensus call
  --------------
  There was a consensus call eventually. Should encryption be mandatory?

  The consensus in the room is that encryption of the stream should
  not be mandatory. A lot of people were concerned about the overhead
  it would imply on cheap devices.

The consensus call question was actually "should implementation
of encryption be mandatory"?   Since the consensus was "no",
implementation of encryption will not be required by the specification.

Note that implementation of authentication and related data integrity
measures (e.g., that make it impossible to insert data into or hijack
an authenticated session) will be mandatory, per the AD (i.e., if they
are not mandatory in the spec that the WG produces, the spec
will be returned to the WG with instructions to make it so).

--David

---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 435-1000 x75140, FAX: +1 (508) 497-6909
black_david@emc.com  Cellular: +1 (978) 394-7754
---------------------------------------------------