[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

FW: BOUNCE ops-area@ops.ietf.org: Non-member submission from [ "Romascanu, Dan (Dan)" <dromasca@avaya.com>]



Approved@ cops
From dromasca@avaya.com Wed Jan 21 13:51:50 2004
Received: from [198.152.13.100] (helo=tierw.net.avaya.com)
	by psg.com with esmtp (Exim 4.24; FreeBSD)
	id 1AjIlq-000DDa-GX; Wed, 21 Jan 2004 13:51:50 +0000
Received: from tierw.net.avaya.com (localhost [127.0.0.1])
	by tierw.net.avaya.com (Switch-3.1.2/Switch-3.1.0) with ESMTP id i0LDmOiv023256;
	Wed, 21 Jan 2004 08:48:24 -0500 (EST)
Received: from IS0004AVEXU1.global.avaya.com (h135-64-105-51.avaya.com [135.64.105.51])
	by tierw.net.avaya.com (Switch-3.1.2/Switch-3.1.0) with ESMTP id i0LDmIiv023146;
	Wed, 21 Jan 2004 08:48:22 -0500 (EST)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Review: IESG Agenda and Package for January 22, 2004 Telechat
X-MimeOLE: Produced By Microsoft Exchange V6.0.6487.1
Date: Wed, 21 Jan 2004 15:51:20 +0200
Message-ID: <AAB4B3D3CF0F454F98272CBE187FDE2F038A9BDF@is0004avexu1.global.avaya.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Review: IESG Agenda and Package for January 22, 2004 Telechat
Thread-Index: AcPdMQoRDTjz7kWKSK2c8N1bNhmbigC838wQ
From: "Romascanu, Dan (Dan)" <dromasca@avaya.com>
To: "Wijnen, Bert (Bert)" <bwijnen@lucent.com>,
        "Mreview (E-mail)" <mreview@ops.ietf.org>
Cc: <ops-area@ops.ietf.org>
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on 
	psg.com
X-Spam-Level: 
X-Spam-Status: No, hits=-4.9 required=5.0 tests=BAYES_00 autolearn=ham 
	version=2.61

>   o draft-jones-opsec-03.txt
>     Operational Security Requirements for IP Network=20
> Infrastructure (BCP) - 2=20
>     of 2=20
>     Token: Steve Bellovin

To what extent is this document =
(http://www.ietf.cnri.reston.va.us/internet-drafts/draft-jones-opsec-03.t=
xt - on the IESG agenda tomorrow) known and was it reviewed in the =
Operations and Management Area? Although it has been categorized to =
belong in the Security Area it has quite a consistent amount of =
REQUIREMENTS related to management. As the document is supposed to =
become a BCP, and it also establishes as one of the goals to become 'a  =
basis for testing and certification of security features of networked =
products', I think that it deserves a close look from the management =
community.

I am still reading through it. It does include very useful stuff, but it =
may also have some problems - for example with the very crisp approach =
wrt. to in-band management.

Regards,

Dan