Re: [scap_interest] Scope of standards potentially moving to IETF

Adam Montville <amontville@tripwire.com> Wed, 15 February 2012 16:50 UTC

Return-Path: <amontville@tripwire.com>
X-Original-To: scap_interest@ietfa.amsl.com
Delivered-To: scap_interest@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0031321F8681 for <scap_interest@ietfa.amsl.com>; Wed, 15 Feb 2012 08:50:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.719
X-Spam-Level:
X-Spam-Status: No, score=-5.719 tagged_above=-999 required=5 tests=[AWL=0.880, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ohr0Boff06ED for <scap_interest@ietfa.amsl.com>; Wed, 15 Feb 2012 08:50:50 -0800 (PST)
Received: from TX2EHSOBE001.bigfish.com (tx2ehsobe004.messaging.microsoft.com [65.55.88.14]) by ietfa.amsl.com (Postfix) with ESMTP id 6701021F867E for <scap_interest@ietf.org>; Wed, 15 Feb 2012 08:50:50 -0800 (PST)
Received: from mail32-tx2-R.bigfish.com (10.9.14.248) by TX2EHSOBE001.bigfish.com (10.9.40.21) with Microsoft SMTP Server id 14.1.225.23; Wed, 15 Feb 2012 16:50:47 +0000
Received: from mail32-tx2 (localhost [127.0.0.1]) by mail32-tx2-R.bigfish.com (Postfix) with ESMTP id B21D73C05ED; Wed, 15 Feb 2012 16:50:45 +0000 (UTC)
X-SpamScore: -51
X-BigFish: VPS-51(zzbb2dI9371I1431J9f17RfacL98dK14ffOf10Kzz1202hzz8275ch1033IL8275bh8275dhz2dh2a8h668h839h944h)
X-Forefront-Antispam-Report: CIP:174.47.84.216; KIP:(null); UIP:(null); IPV:NLI; H:PDXHB01.tripwire.com; RD:174-47-84-216.static.twtelecom.net; EFVD:NLI
Received: from mail32-tx2 (localhost.localdomain [127.0.0.1]) by mail32-tx2 (MessageSwitch) id 1329324644482697_4244; Wed, 15 Feb 2012 16:50:44 +0000 (UTC)
Received: from TX2EHSMHS040.bigfish.com (unknown [10.9.14.247]) by mail32-tx2.bigfish.com (Postfix) with ESMTP id 65AE418004A; Wed, 15 Feb 2012 16:50:44 +0000 (UTC)
Received: from PDXHB01.tripwire.com (174.47.84.216) by TX2EHSMHS040.bigfish.com (10.9.99.140) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 15 Feb 2012 16:50:42 +0000
Received: from PDXHB01.tripwire.com (172.30.0.53) by PDXED01.tripwire.com (192.168.192.5) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 15 Feb 2012 08:59:27 -0800
Received: from PDXMB02.tripwire.com ([fe80::f997:7b65:8e64:438e]) by PDXHB01.tripwire.com ([fe80::d495:98d2:7df4:2154%11]) with mapi id 14.01.0355.002; Wed, 15 Feb 2012 08:50:41 -0800
From: Adam Montville <amontville@tripwire.com>
To: "david.oliva@verizon.net" <david.oliva@verizon.net>, "mchernin@dtcc.com" <mchernin@dtcc.com>, kent_landfield <kent_landfield@mcafee.com>, "scap_interest@ietf.org" <scap_interest@ietf.org>
Thread-Topic: [scap_interest] Scope of standards potentially moving to IETF
Thread-Index: AQHM7ADR/rI0ysEqR+uJzeU+eJNThpY+K+gA
Date: Wed, 15 Feb 2012 16:50:40 +0000
Message-ID: <CB6120FE.935D%amontville@tripwire.com>
In-Reply-To: <764077.456681.1329324154353.JavaMail.root@vznit170060>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/14.14.0.111121
x-originating-ip: [172.30.0.234]
x-exclaimer-md-config: 79afcaa7-fdf4-4fa6-abe0-afeaa4640a4f
Content-Type: text/plain; charset="us-ascii"
Content-ID: <634DAA4CD491AC41B01651F4468ADEF5@tripwire.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: tripwire.com
Subject: Re: [scap_interest] Scope of standards potentially moving to IETF
X-BeenThere: scap_interest@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Discussion List for IETFers interested in the Security Content Automation Protocol \(SCAP\)." <scap_interest.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/scap_interest>
List-Post: <mailto:scap_interest@ietf.org>
List-Help: <mailto:scap_interest-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/scap_interest>, <mailto:scap_interest-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Feb 2012 16:50:52 -0000

Hi David,

I think the answer to all three of your questions is really that it's all up to the working group.  The WG has an interest in ensuring interoperability, and standards are created based on running code.  USG may continue to require validation outside the context of the WG.  Finally, as the IETF is an open organization, participation from any organization, including USG, would be welcomed.

Adam

From: <david.oliva@verizon.net<mailto:david.oliva@verizon.net>>
Date: Wed, 15 Feb 2012 10:42:34 -0600
To: <mchernin@dtcc.com<mailto:mchernin@dtcc.com>>, kent_landfield <kent_landfield@mcafee.com<mailto:kent_landfield@mcafee.com>>, <scap_interest@ietf.org<mailto:scap_interest@ietf.org>>
Subject: Re: [scap_interest] Scope of standards potentially moving to IETF

Hello all:

I also believe that SCAP can be used worlwide and should be marketted accordingly.
Maybe allowing IETF to endorse them is a good idea.

I just have a few questions.

1.  Would IETF also take a role in validating products?
2.  What mechanisms does IETF provide that encourage the cooperation needed for incorporation future specifications?
3.  How would IETF take into account the input of U.S. Federal agencies in future specifications?

David Oliva

On 02/15/12, Chernin, Michael A.<mchernin@dtcc.com<mailto:mchernin@dtcc.com>> wrote:

Kent, understood. Like the vendors, I do agree that certain standards need to go to IETF. But, today the only people that would be voting during IETF calls would be the federal government and security tool vendors. I am going to be hesitant in supporting a move of all standards until there are standards consumers (private sector customers) who will also be participating in IETF voting. I am trying to balance rapid development of standards using the IETF and complete vendor control of all standards. Once I see more consumer activity during voting, I will be more supportive of a large number of standards moving IETF.

I know I am early and jumping the gun on this, but I just wanted to get my story out there. At this time no standards have been specifically identified and no specific action is required at this time.

Aharon

DTCC Non-Confidential (White)
---------------------------------------------------
Michael "Aharon" Chernin
Security Automation Program Manager
Corporate Information Security -Depository Trust & Clearing Corporation
O: 813-470-2173

From: Kent_Landfield@McAfee.com<mailto:Kent_Landfield@McAfee.com> [mailto:Kent_Landfield@McAfee.com]
Sent: Tuesday, February 14, 2012 6:09 PM
To: Chernin, Michael A.; scap_interest@ietf.org<mailto:scap_interest@ietf.org>
Subject: Re: [scap_interest] Scope of standards potentially moving to IETF

>From my perspective TBD.

There are some that are unencumbered from and IPR perspective and those are potential candidates. Others will have to move as the appropriate consensus  is achieved and IPR issues are addressed.

The idea here from my perspective is to figure that out.

Kent Landfield
Director Content Strategy, Architecture and Standards

McAfee | An Intel Company
5000 Headquarters Dr.
Plano, Texas 75024

Direct: +1.972.963.7096
Mobile: +1.817.637.8026
Web: www.mcafee.com<http://www.mcafee.com/>

From: Michael Aharon Chernin <mchernin@dtcc.com<mailto:mchernin@dtcc.com>>
Date: Tue, 14 Feb 2012 16:04:43 -0600
To: "scap_interest@ietf.org<mailto:scap_interest@ietf.org>" <scap_interest@ietf.org<mailto:scap_interest@ietf.org>>
Subject: [scap_interest] Scope of standards potentially moving to IETF

I am just going to jump right on out there and ask. Which standards are we looking to go to IETF? Specific SCAP standards or the entire SCAP umbrella?

Aharon

DTCC Non-Confidential (White)
---------------------------------------------------
Michael "Aharon" Chernin
Security Automation Program Manager
Corporate Information Security -Depository Trust & Clearing Corporation
O: 813-470-2173

<BR>_____________________________________________________________
<FONT size=2><BR>
DTCC DISCLAIMER: This email and any files transmitted with it are
confidential and intended solely for the use of the individual or
entity to whom they are addressed. If you have received this email
in error, please notify us immediately and delete the email and any
attachments from your system. The recipient should check this email
and any attachments for the presence of viruses.  The company
accepts no liability for any damage caused by any virus transmitted
by this email.</FONT>
_______________________________________________
scap_interest mailing list
scap_interest@ietf.org<mailto:scap_interest@ietf.org>
https://www.ietf.org/mailman/listinfo/scap_interest


________________________________

_______________________________________________
scap_interest mailing list
scap_interest@ietf.org<mailto:scap_interest@ietf.org>
https://www.ietf.org/mailman/listinfo/scap_interest
_______________________________________________ scap_interest mailing list scap_interest@ietf.org<mailto:scap_interest@ietf.org> https://www.ietf.org/mailman/listinfo/scap_interest