RE: DRAFT Pittsburgh ips Minutes

[julian_satran@il.ibm.com]

This is an accurate description of what was said. One additional and
relevant element in the discussion was the proposal made my Brian Carpenter
to mandate implementations to
"understand" any form of encryption and authentication but indicate that
support or lack of support when asked.

That might be appropriate for simple controllers aimed at closed
environments
and deferring authentication/encryption  to a "proxy" (a firewall) for all
relevant flows.

I assume that we will also want to specifically state which security
elements are mandatory
for an initiator and which for a target.

Julo

Black_David@emc.com on 12/08/2000 03:38:16

Please respond to Black_David@emc.com

To:   ips@ece.cmu.edu
cc:    (bcc: Julian Satran/Haifa/IBM)
Subject:  RE: DRAFT Pittsburgh ips Minutes




An important clarification has been pointed out in the DRAFT minutes.
The DRAFT minutes say:

  Consensus call
  --------------
  There was a consensus call eventually. Should encryption be mandatory?

  The consensus in the room is that encryption of the stream should
  not be mandatory. A lot of people were concerned about the overhead
  it would imply on cheap devices.

The consensus call question was actually "should implementation
of encryption be mandatory"?   Since the consensus was "no",
implementation of encryption will not be required by the specification.

Note that implementation of authentication and related data integrity
measures (e.g., that make it impossible to insert data into or hijack
an authenticated session) will be mandatory, per the AD (i.e., if they
are not mandatory in the spec that the WG produces, the spec
will be returned to the WG with instructions to make it so).

--David

---------------------------------------------------
David L. Black, Senior Technologist
EMC Corporation, 42 South St., Hopkinton, MA  01748
+1 (508) 435-1000 x75140, FAX: +1 (508) 497-6909
black_david@emc.com  Cellular: +1 (978) 394-7754
---------------------------------------------------