Re: [netmod] Adoption of: draft-bjorklund-netmod-snmp-cfg-02 (respondby 20120420)

Martin Bjorklund <mbj@tail-f.com> Mon, 16 April 2012 20:21 UTC

Return-Path: <mbj@tail-f.com>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648A411E80E6 for <netmod@ietfa.amsl.com>; Mon, 16 Apr 2012 13:21:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.046
X-Spam-Level:
X-Spam-Status: No, score=-2.046 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_MISMATCH_COM=0.553]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KisFS0aoGebL for <netmod@ietfa.amsl.com>; Mon, 16 Apr 2012 13:21:26 -0700 (PDT)
Received: from mail.tail-f.com (de-2007.d.ipeer.se [213.180.74.102]) by ietfa.amsl.com (Postfix) with ESMTP id 991AD11E808C for <netmod@ietf.org>; Mon, 16 Apr 2012 13:21:25 -0700 (PDT)
Received: from localhost (c213-100-166-57.cust.tele2.se [213.100.166.57]) by mail.tail-f.com (Postfix) with ESMTPSA id 6C4181200D55; Mon, 16 Apr 2012 22:21:24 +0200 (CEST)
Date: Mon, 16 Apr 2012 22:21:22 +0200
Message-Id: <20120416.222122.489615035.mbj@tail-f.com>
To: randy_presuhn@mindspring.com
From: Martin Bjorklund <mbj@tail-f.com>
In-Reply-To: <000401cd1c02$aedace60$6b01a8c0@oemcomputer>
References: <002f01cd1bf7$18f9ab60$6b01a8c0@oemcomputer> <20120416.202832.486818825.mbj@tail-f.com> <000401cd1c02$aedace60$6b01a8c0@oemcomputer>
X-Mailer: Mew version 6.3.51 on Emacs 23.3 / Mule 6.0 (HANACHIRUSATO)
Mime-Version: 1.0
Content-Type: Text/Plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Cc: netmod@ietf.org
Subject: Re: [netmod] Adoption of: draft-bjorklund-netmod-snmp-cfg-02 (respondby 20120420)
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/netmod>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Apr 2012 20:21:26 -0000

"Randy Presuhn" <randy_presuhn@mindspring.com> wrote:
> > From: "Martin Bjorklund" <mbj@tail-f.com>
> I should allow a device to see a password only if I am willing to entrust
> the security of my entire network to that device.
> 
> > Nevertheless, it would be great to discuss alternative solutions to
> > the problem (configuring keys).

How would you solve this problem?  I think the problem is not limited
to USM keys, but keys/passwords in general.


/martin