Re: [secdir] [Isms] secdir reviewofdraft-ietf-isms-transport-security-model-12

[Juergen Schoenwaelder <[e-mail]>]

On Fri, May 08, 2009 at 06:56:27PM +0200, tom.petch wrote:
 
> The idea of Models in SNMP is to be able to mix and match.  In
> practice, this has not worked - USM with sshTM will not function,
> regardless of whether it is secure or not.

Not sure I understand why. Can you explain?

> Thus TLS has session cache and resumption. Will that work with TSM?

Yes, this will just work fine since it is transparent. You can add
session resumption to SSH and it will work just fine with sshtm.

Of course, sometimes we design for extensibility and when we need it,
we realize the shortcomings of the design. But there are also things
that just work fine - you are painting a picture here with black
colors. Even though it is difficult to get exensibility right, I think
not trying to be extensible is not an alternative.

/js

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: [phone]         Campus Ring 1, 28759 Bremen, Germany
Fax:   [phone]         <http://www.jacobs-university.de/>