Re: Thoughts on NetConf Requirements

["Randy Presuhn" <randy_presuhn@mindspring.com>]

Hi -

> From: "Wes Hardaker" <wjhns1@hardakers.net>
> To: "Eliot Lear" <lear@cisco.com>
> Cc: "Wes Hardaker" <wjhns1@hardakers.net>; "Andy Bierman" <abierman@cisco.com>; "Randy Bush" <randy@psg.com>; "David T. Perkins"
<dperkins@dsperkins.com>; "Kevin C Miller" <kevinm@andrew.cmu.edu>; <netconf@ops.ietf.org>
> Sent: Wednesday, June 18, 2003 3:27 PM
> Subject: Re: Thoughts on NetConf Requirements
...
> What Andy has been trying to advocate is that the authorization checks
> won't know if encryption was turned on or not (you only know about the
> user name, the operation and the "filter").  Therefore it would be
> impossible to generate the above error message (from the xmlconf side,
> of course...  you could do it via TLS (or whatever) configuration)
...

To prevent the use of security policies limiting sensitive configuration
data to properly secured transfer mechanisms would be a big mistake,
in my opinion.

Randy



--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>