Re: [Rum] [EXT] RUM security model

[Eugene Christensen <[e-mail]>]

Brian,

Admittedly I do not fully understand certificates and authentication but would client certificates or mutual authentication with a shared secret work here?

Thank you.

Eugene

CONFIDENTIALITY NOTICE. This e-mail transmission, and any documents, files or previous e-mail messages attached to it, may contain confidential and proprietary information. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this message is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately notify me by reply e-mail at [e-mail]<mailto:[e-mail]> or by telephone at [phone], and destroy the original transmission and its attachments without reading them or saving them to disk.

From: Brian Rosen <[e-mail]>
Sent: Wednesday, September 30, 2020 5:47 PM
To: Eugene Christensen <[e-mail]>
Cc: [e-mail]
Subject: Re: [Rum] [EXT] RUM security model

[EXTERNAL]
I think we understand why you want it. What we don’t understand is what mechanism would provide it. I am generally aware of this class of problem and I’m not aware of a solution that will work.  So what we need is a suggested mechanism that provides the assurance you want that is technically sound.

Brian

On Wed, Sep 30, 2020 at 6:30 PM Eugene Christensen <[e-mail]<mailto:[e-mail]>> wrote:
Thanks for considering how we might implement this security mechanism.  May I add my voice that it is essential that we find an option for providing this desired security, whatever it is.  It could be detrimental to the VRS providers to have UAs out there, with the ability to register with VRS providers without first being fully vetted.  It is our practice anytime we make updates to our UAs to test how they work with our UAS before we ever release the new UA software into our production environment.  We only want UAs registering that have undergone this rigorous testing with our systems and then only with users which we have awareness of.



Thanks,

Eugene Christensen



CONFIDENTIALITY NOTICE. This e-mail transmission, and any documents, files or previous e-mail messages attached to it, may contain confidential and proprietary information. If you are not the intended recipient, or a person responsible for delivering it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of any of the information contained in or attached to this message is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately notify me by reply e-mail at [e-mail]<mailto:[e-mail]> or by telephone at [phone], and destroy the original transmission and its attachments without reading them or saving them to disk.



--

Rum mailing list

[e-mail]<mailto:[e-mail]>

https://www.ietf.org/mailman/listinfo/rum