Re: [pcp] Server's auth policy discovery

Is discoverying binary policy (auth unsupported/supported)
is enough, or is discovering three-policy (auth 
unsupported/mandated/optional) needed?

Yoshihiro Ohba

(2012/10/12 19:51), Sam Hartman wrote:
> Hi.
> As I've mentioned previously, I consider DHCP-based discovery of auth
> policy a significant down-side to an approach that requires it.
>
> For many of the same reasons that you want to avoid one port for
> authentication and one port for the protocol, you want to avoid one
> system for security policy discovery with another system for using that
> policy.  Tightly-coupled systems are easier to debug and support.  In
> this particular case, if auth policy discovery is in-band, you avoid the
> failure modes where the discovery solution has bad information.
>
> --Sam
> _______________________________________________
> pcp mailing list
> pcp@ietf.org
> https://www.ietf.org/mailman/listinfo/pcp
>