Re: [netmod] Adoption of: draft-bjorklund-netmod-snmp-cfg-02 (respondby 20120420)

Hi -

While I suppose it's inevitable that this work will happen, I am
nonetheless horrified by the way the I-D proposes that keys
(and worse still, "passwords") be handled.  This approach
completely undermines the design of USM for preventing
the compromise of one managed device causing the keys
for another device to be revealed.  The configuration management
of keying material needs to be carefully separated from the
rest, and needs to be done in a way that does not undercut
the security of *all* managed devices in an administrative domain.

Randy

----- Original Message ----- 
> From: "David Kessens" <david.kessens@nsn.com>
> To: <netmod@ietf.org>
> Sent: Monday, April 16, 2012 1:46 AM
> Subject: [netmod] Adoption of: draft-bjorklund-netmod-snmp-cfg-02 (respondby 20120420)
>
> 
> Hi,
> 
> During the netmod session at last IETF, there was no opposition to adopt:
> 
> http://tools.ietf.org/id/draft-bjorklund-netmod-snmp-cfg-02.txt
> 
> as a working group document.
> 
> I would hereby like to give the working group a final chance to object
> against this proposal.
> 
> Please respond to the mailing list by 20120420 if you don't agree that we
> adopt this document as a working group document.
> 
> Thanks,
> 
> David Kessens
> ---
> _______________________________________________
> netmod mailing list
> netmod@ietf.org
> https://www.ietf.org/mailman/listinfo/netmod