Re: [plasma] Plasma and File protection Question

Hi Trevor,

I don't have a real preference/opinion myself except that
a credible proposal here should have real support from
various sources, optimally including the open-source
community.

S.

On 20/04/11 00:13, Trevor Freeman wrote:
> OPC = Open Packaging Convention; it’s the official standard name for zip
> files.
> 
> The attraction of an OPC solution is you can protect anything just as
> you can zip anything so it would generate a universal solution.
> 
> Both OOXML and ODF are widely used standards with multi-vendor support.
>   The reason to cited them as examples is that they have a documented
> file format with extension points we could use to build a solution.
> 
> I doubt the OOXML\ODF thing will go away just like pkix has cmc and cmpJ
> 
> Would you consider OPC a more neutral solution?
> 
>  
> 
> -----Original Message-----
> From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie]
> Sent: Tuesday, April 19, 2011 2:40 PM
> To: Trevor Freeman
> Cc: plasma@ietf.org
> Subject: Re: [plasma] Plasma and File protection Question
> 
>  
> 
>  
> 
> I've no idea what OPC is but I'd have thought that OOXML would likely be
> controversial - or have all the word processing types made up since the
> OOXML/ODF kerfuffle [1] of a few years ago?
> 
>  
> 
> S.
> 
>  
> 
> [1] http://en.wikipedia.org/wiki/Office_Open_XML#Standardization_process
> 
>  
> 
> On 19/04/11 22:19, Trevor Freeman wrote:
> 
>> Having agreed that files and are the conceptually the same as email
> 
>> from a policy access control perspective, there is one important
> distinction.
> 
>>
> 
>> 
> 
>>
> 
>> Email has a standard mechanism to define multiple parts of a message
> 
>> to represent different aspects of the message i.e. MIME.
> 
>>
> 
>> 
> 
>>
> 
>> We don’t have that for files so we don’t have a simple generic way to
> 
>> attach the extra metadata to a file.
> 
>>
> 
>> 
> 
>>
> 
>> Some standard file formats have specific extension mechanisms we can
> 
>> use e.g. OOXML which would allow you to define a way to attach the
> 
>> plasma metadata to the file type in question.
> 
>>
> 
>> 
> 
>>
> 
>> Alternatively there exist generic file container standards what can
> 
>> hold any combination of files and data e.g. OPC which would provide a
> 
>> generic solution for any file type.
> 
>>
> 
>> 
> 
>>
> 
>> If we were to expand files for consideration with Plasma, which would
> 
>> be the best first step, a specific solution like OOXML or a generic
> 
>> solution such as OPC?
> 
>>
> 
>> 
> 
>>
> 
>> *Dr Trevor Freeman*  Senior Security Strategist
> 
>>
> 
>> *End to End Trust Team
> 
>> <http://www.microsoft.com/mscorp/twc/endtoendtrust/default.mspx>*
> 
>>
> 
>> *Microsoft Trustworthy
> 
>> Computing<http://www.microsoft.com/mscorp/twc/default.mspx>*
> 
>>
> 
>> 
> 
>>
> 
>>
> 
>>
> 
>> _______________________________________________
> 
>> plasma mailing list
> 
>> plasma@ietf.org <mailto:plasma@ietf.org>
> 
>> https://www.ietf.org/mailman/listinfo/plasma
> 