[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: New IPSec Monitoring MIB draft

To: ipsec@tis.com
Subject: Re: New IPSec Monitoring MIB draft
From: "Michael C. Richardson" <mcr@sandelman.ottawa.on.ca>
Date: Sun, 31 Jan 1999 20:42:39 -0500
In-Reply-To: Your message of "Sun, 31 Jan 1999 18:00:50 EST." <36B4E0A2.F7FC3379@cs.umass.edu>
Sender: owner-ipsec@ex.tis.com


>>>>> "Lewis" == Lewis McCarthy <lmccarth@cs.umass.edu> writes:
    Lewis> This last point isn't obvious to me. In view of the work on trust
    Lewis> metrics for certification paths, I imagine that examining the
    Lewis> whole path might be useful. Since the overall authentication
    Lewis> relies upon the entire path, I'm not sure why you would single out
    Lewis> the terminal cert for inclusion in the MIB.

  I would agree. 
  Would it be legal for an implementation to put Phase I SAs that *failed*
to be set up due to authentication failures?

   :!mcr!:            |  Network and security consulting/contract programming
   Michael Richardson |         Firewalls, TCP/IP and Unix administration
 Personal: http://www.sandelman.ottawa.on.ca/People/Michael_Richardson/Bio.html
 Corporate: http://www.sandelman.ottawa.on.ca/SSW/
	ON HUMILITY: To err is human, to moo bovine.

References:

Re: New IPSec Monitoring MIB draft

From: Lewis McCarthy <lmccarth@cs.umass.edu>

Prev by Date: Re: New IPSec Monitoring MIB draft
Next by Date: April IPSec and PPP Interoperability Workshop
Prev by thread: Re: New IPSec Monitoring MIB draft
Next by thread: RE: New IPSec Monitoring MIB draft
Index(es):
- Main
- Thread