[Ghost] This could be really useful

"Boyle, Vincent M" <vmboyle@nsa.gov> Thu, 30 July 2015 18:35 UTC

Return-Path: <vmboyle@nsa.gov>
X-Original-To: ghost@ietfa.amsl.com
Delivered-To: ghost@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28DE31B2E3A for <ghost@ietfa.amsl.com>; Thu, 30 Jul 2015 11:35:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.21
X-Spam-Level:
X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z9EQnQ_-mpSR for <ghost@ietfa.amsl.com>; Thu, 30 Jul 2015 11:35:43 -0700 (PDT)
Received: from emvm-gh1-uea09.nsa.gov (emvm-gh1-uea09.nsa.gov [63.239.67.10]) by ietfa.amsl.com (Postfix) with ESMTP id 91DAC1B2A17 for <ghost@ietf.org>; Thu, 30 Jul 2015 11:35:43 -0700 (PDT)
X-TM-IMSS-Message-ID: <cd06d2fd0001acaf@nsa.gov>
Received: from MSHT-GH1-UEA01.corp.nsa.gov (msht-gh1-uea01.corp.nsa.gov [10.215.227.18]) by nsa.gov ([63.239.67.10]) with ESMTP (TREND IMSS SMTP Service 7.1; TLSv1/SSLv3 AES128-SHA (128/128)) id cd06d2fd0001acaf ; Thu, 30 Jul 2015 14:41:20 -0400
Received: from MSMR-GH1-UEA01.corp.nsa.gov (10.215.225.4) by MSHT-GH1-UEA01.corp.nsa.gov (10.215.227.18) with Microsoft SMTP Server (TLS) id 14.2.347.0; Thu, 30 Jul 2015 14:35:40 -0400
Received: from MSMR-GH1-UEA02.corp.nsa.gov ([10.215.227.180]) by MSMR-GH1-UEA01.corp.nsa.gov ([10.215.225.4]) with mapi id 14.02.0347.000; Thu, 30 Jul 2015 14:35:39 -0400
From: "Boyle, Vincent M" <vmboyle@nsa.gov>
To: "'ghost@ietf.org'" <ghost@ietf.org>
Thread-Topic: This could be really useful
Thread-Index: AdDK9hRGqMVWtfCqRCCIB8Wb64Evig==
Date: Thu, 30 Jul 2015 18:35:38 +0000
Message-ID: <E18BF42C3D667642ABC0EF4B6064EB67D1CB9DDC@MSMR-GH1-UEA02.corp.nsa.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.215.224.46]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/ghost/7tnoxhqod2Ypn_0lhKZgmLqeiTU>
Subject: [Ghost] This could be really useful
X-BeenThere: ghost@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Mailing list for GatHering and reOrganizing STandards information \(GHOST\) team" <ghost.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ghost>, <mailto:ghost-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ghost/>
List-Post: <mailto:ghost@ietf.org>
List-Help: <mailto:ghost-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ghost>, <mailto:ghost-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Jul 2015 18:35:45 -0000

Hi Everybody,
I saw the announcement and subscribed. I like the idea of an organized repository for practical information on standards. While the focus of the Google doc is on developers, I'd like to offer another perspective, that of the user. I participate in an effort to select standards for a large, enterprise network (the US DoD). The goal is to promote interoperability across the network by enforcing the use of selected standards by all major programs that use that network. Specifically, I'm a member of the Information Assurance (i.e. security) working group of the effort. Three times a year we meet to review portions of the standards registry and vote on retaining those standards or replacing them with newer ones. 

The information that is being proposed for inclusion in the ghost repository is exactly the information that we research and discuss prior to voting. We want to choose standards that offer state of the art security, but they need to be implementable (and actually implemented in products). In that vein, I was happy to see that there would be information on which standards seem to be on the upswing. If we can  document actual implementation in some way that is fair and accurate (not easily gamed by people with proprietary interests), that would be great!

I'll chime in later; just wanted to put in a nudge to the user community to support this.

Mike Boyle