1) make a broad general statement calling for strong authentication,
etc.
2) provide a number of instances where we can make specific
recommendations (or refer to specific docs from other standards bodies)
3) and include language that says "for other instances not covered by
these examples, one must use comparably strong techniques"
But I have to say, it is not clear to me from this thread if there is
even agreement on exactly what problem needs to be solved (or whether,
for example, NENA and others need a particular thing solved). I would
hope in coming up with text for 2) that we would all come to greater
clarity on the exact types of use cases when the extensions will be
used.
John
On Sep 17, 2009, at 6:17 PM, Richard Barnes wrote:
> Of course. There are cases where we can make specific
> recommendations (please provide text!), but we can't cover all the
> identifiers out there. Maybe a compromise approach would be to only
> include identifiers where such text can be written?
>
> --Richard
>
>
>
> Bernard Aboba wrote:
>>> Consider case (2) first. The recommendation that we would want to
>>> make
>>> is for the LS to verify that the identifier actually corresponds
>>> to the
>>> target. However, the identifiers in question will necessarily not
>>> be
>>> IP-layer identifiers (or else there would be no problem). That
>>> means
>>> that we can't define an Internet-standard mechanism for this
>>> verification -- mechanisms will have to be network-specific. So
>>> we're left making a vague statement that has to be re-interpreted
>>> for each
>>> network (or type of network). Not very satisfying, but basically
>>> all that can be done.
>> I don't think that it's necessary for us to restrict ourselves to
>> vague statements in
>> all cases. For some types of identifiers (such as MAC addresses,
>> NAIs, telephone #s),
>> we can probably give quite specific recommendations about
>> verification procedures.
> _______________________________________________
> Geopriv mailing list
> Geopriv@ietf.org
> https://www.ietf.org/mailman/listinfo/geopriv
>
_______________________________________________
Geopriv mailing list
Geopriv@ietf.org
https://www.ietf.org/mailman/listinfo/geopriv
