[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SOI QUESTION: 5.2 Scope of proposals



-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Theodore" == Theodore Ts'o <tytso@mit.edu> writes:
    Theodore> 5.2.A) Is it important to have predefined suites or a la carte
    Theodore> selection of  
    Theodore> parameters?

  Predefined suites.
  They are easier to program, easier to optomize, and easier to analyze.

  The combinatorics do *NOT* concern me, because the effort of
the combinatorics of the testing exceeds any "hassle" in writing a couple
more RFCs.

  Predefined suites are better for pretty much every scenarios.

  We NEED a MUST suite for end-to-end security to work. We need a backup
suite to transition to should the initial suite turn out to be broken.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Finger me for keys

iQCVAwUBPSzS8oqHRg3pndX9AQFbTgP+N9P260BV1CuBNDogWSdCzpmK1r4Nh8rm
A/69i+B7kIH2SsmpdDt9ZCLFazewEq/45xt9oZXPddTwGEHxtqeTuGVCrz1DqZYk
zFzRoXfSEXxoGXfSADMVVTArqzdABnriFqJKrNszE/YBEichF5Gbva6KGwLTd9zz
VsqayonHyXY=
=k2bt
-----END PGP SIGNATURE-----