Re: Misc security considerations on the current netconf draft

[Eliot Lear <lear@cisco.com>]

[This is my third attempt at writing a response, so I'm going to keep it 
short and ask brief questions.]

Wes,

Is your requirement that we specify an ACL model now?  Truth be told we 
could specify a rudimentary one without much difficulty.

I do not share your concern about mixed models.  I think it's still left 
to the device to validate commands as authentic from a configuration 
file, no matter its source.  I think of it no differently than a UNIX 
script (without setuid capability).

Eliot


--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>