[plasma] FW: I-D Action: draft-freeman-plasma-requirements-05.txt

Trevor Freeman <trevorf@exchange.microsoft.com> Mon, 29 April 2013 20:20 UTC

Return-Path: <trevorf@exchange.microsoft.com>
X-Original-To: plasma@ietfa.amsl.com
Delivered-To: plasma@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id 4982C21F9C01 for <plasma@ietfa.amsl.com>; Mon, 29 Apr 2013 13:20:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id vueLp2Fw0f8R for <plasma@ietfa.amsl.com>; Mon, 29 Apr 2013 13:20:28 -0700 (PDT)
Received: from na01-by1-obe.outbound.o365filtering.com (na01-by1-obe.ptr.o365filtering.com []) by ietfa.amsl.com (Postfix) with ESMTP id 5710521F9C05 for <plasma@ietf.org>; Mon, 29 Apr 2013 13:20:28 -0700 (PDT)
Received: from BY2SR01CA105.namsdf01.sdf.exchangelabs.com ( by BY2SR01MB608.namsdf01.sdf.exchangelabs.com ( with Microsoft SMTP Server (TLS) id 15.0.692.5; Mon, 29 Apr 2013 20:20:26 +0000
Received: from SN2FFOFD003.ffo.gbl ( by BY2SR01CA105.outlook.office365.com ( with Microsoft SMTP Server (TLS) id 15.0.692.5 via Frontend Transport; Mon, 29 Apr 2013 20:20:26 +0000
Received: from hybrid.exchange.microsoft.com ( by SN2FFOFD003.mail.o365filtering.com ( with Microsoft SMTP Server (TLS) id 15.0.687.1 via Frontend Transport; Mon, 29 Apr 2013 20:20:25 +0000
Received: from DFM-TK5MBX15-08.exchange.corp.microsoft.com ( by DF-G14-02.exchange.corp.microsoft.com ( with Microsoft SMTP Server (TLS) id; Mon, 29 Apr 2013 20:19:43 +0000
Received: from PIO-MLT-05.exchange.corp.microsoft.com ( by DFM-TK5MBX15-08.exchange.corp.microsoft.com ( with Microsoft SMTP Server (TLS) id 15.0.620.25; Mon, 29 Apr 2013 13:19:43 -0700
Received: from DF-M14-10.exchange.corp.microsoft.com ([fe80::b076:a99f:3049:4c76]) by PIO-MLT-05.exchange.corp.microsoft.com ([fe80::d940:e316:1daa:5e6a%10]) with mapi id 14.03.0123.001; Mon, 29 Apr 2013 20:19:42 +0000
From: Trevor Freeman <trevorf@exchange.microsoft.com>
To: "plasma@ietf.org" <plasma@ietf.org>
Thread-Topic: I-D Action: draft-freeman-plasma-requirements-05.txt
Thread-Index: AQHORRZybxulWxbx5U+eg9pDoNxzkZjtot7Q
Date: Mon, 29 Apr 2013 20:19:41 +0000
Message-ID: <3020AC5E95452D43B5D8D0FB02F881D3CED96D@DF-M14-10.exchange.corp.microsoft.com>
References: <20130429201514.16393.62344.idtracker@ietfa.amsl.com>
In-Reply-To: <20130429201514.16393.62344.idtracker@ietfa.amsl.com>
Accept-Language: en-GB, en-US
Content-Language: en-US
x-originating-ip: []
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Forefront-Antispam-Report: CIP:; CTRY:US; IPV:NLI; EFV:NLI; SFV:NSPM; SFS:(377424002)(189002)(199002)(377454001)(53754004)(13464002)(31966008)(23726002)(66066001)(33656001)(74706001)(65816001)(47776003)(80022001)(79102001)(63696002)(50466002)(20776003)(47446002)(74502001)(16406001)(44976003)(56816002)(81542001)(56776001)(69226001)(54356001)(15202345002)(46406003)(81342001)(77982001)(50986001)(49866001)(47736001)(55846006)(51856001)(74366001)(46102001)(4396001)(47976001)(54316002)(53806001)(6806003)(76482001)(59766001)(74662001); DIR:OUT; SFP:; SCL:1; SRVR:BY2SR01MB608; H:hybrid.exchange.microsoft.com; RD:mail7.exchange.microsoft.com; MX:1; A:1; LANG:en;
X-Forefront-PRVS: 0831C25939
X-OriginatorOrg: DuplicateDomain-61ba7064-737a-4e22-89e1-0398ba8005ed.exchange.microsoft.com
Subject: [plasma] FW: I-D Action: draft-freeman-plasma-requirements-05.txt
X-BeenThere: plasma@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "The PoLicy Augmented S/Mime \(plasma\) bof discussion list." <plasma.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/plasma>, <mailto:plasma-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/plasma>
List-Post: <mailto:plasma@ietf.org>
List-Help: <mailto:plasma-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/plasma>, <mailto:plasma-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 29 Apr 2013 20:20:48 -0000

Hi All,
 I have posted a new requirements draft. The changes were all editorial nits, types etc.

I believe we are close to closing this document and progressing to last call. Please review and send any feedback to so we can move this forward.  


-----Original Message-----
From: i-d-announce-bounces@ietf.org [mailto:i-d-announce-bounces@ietf.org] On Behalf Of internet-drafts@ietf.org
Sent: Monday, April 29, 2013 1:15 PM
To: i-d-announce@ietf.org
Subject: I-D Action: draft-freeman-plasma-requirements-05.txt

A New Internet-Draft is available from the on-line Internet-Drafts directories.

	Title           : Requirements for Message Access Control
	Author(s)       : Trevor Freeman
                          Jim Schaad
                          Patrick Patterson
	Filename        : draft-freeman-plasma-requirements-05.txt
	Pages           : 60
	Date            : 2013-04-29

   There are many situations where organizations want to protect
   information with robust access control, either for implementation of
   intellectual property right protections, enforcement of contractual
   confidentiality agreements or because of legal regulations.  The
   Enhanced Security Services (ESS) for S/MIME defines an access control
   mechanism for email which is enforced by the recipient's client after
   decryption of the message. The ESS mechanism therefore is dependent
   on the correct access policy configuration of every recipient's
   client. This mechanism also provides full access to the data to all
   recipients prior to the access control check, this is considered to
   be inadequate due to the difficulty in demonstrating policy

   This document lays out the deficiencies of the current ESS security
   label, and presents requirements for a new model for doing/providing
   access control to messages where the access check is performed prior
   to message content decryption. This new model also does not require
   policy configuration on the client to simplify deployment and
   compliance verification.

   The proposed model additionally provides a method where non-X.509
   certificate credentials can be used for encryption/decryption of
   S/MIME messages.

The IETF datatracker status page for this draft is:

There's also a htmlized version available at:

A diff from the previous version is available at:

Internet-Drafts are also available by anonymous FTP at:

I-D-Announce mailing list
Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt