Re: Security issues? (was: Re: Proposal: Removal of MIB View Mask)

Marshall Rose <mrose@dbc.mtview.ca.us> Thu, 01 October 1992 03:50 UTC

Received: from ietf.nri.reston.va.us by IETF.NRI.Reston.VA.US id aa11873; 30 Sep 92 23:50 EDT
Received: from NRI.RESTON.VA.US by IETF.NRI.Reston.VA.US id aa11869; 30 Sep 92 23:50 EDT
Received: from thumper.bellcore.com by NRI.Reston.VA.US id aa26529; 30 Sep 92 23:55 EDT
Received: by thumper.bellcore.com (4.1/4.7) id <AA10969> for ietf-archive@nri.reston.va.us; Wed, 30 Sep 92 23:55:39 EDT
Received: from dbc.mtview.ca.us (ppp.dbc.mtview.ca.us) by thumper.bellcore.com (4.1/4.7) id <AA10957> for /usr/lib/sendmail -oi -fsnmp2-request X-snmp2; Wed, 30 Sep 92 23:55:34 EDT
Received: from localhost by dbc.mtview.ca.us (5.65/3.1.090690) id AA02695; Wed, 30 Sep 92 20:54:07 -0700
To: mlk%bir.UUCP@mathcs.emory.edu
Cc: snmp-sec-dev@tis.com
Reply-To: snmp-sec-dev@tis.com
Subject: Re: Security issues? (was: Re: Proposal: Removal of MIB View Mask)
In-Reply-To: Your message of "Wed, 30 Sep 1992 23:17:29 EST." <0D15DDF1.evpg86@bir.bir.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Wed, 30 Sep 1992 20:54:05 -0700
Message-Id: <2693.717911645@dbc.mtview.ca.us>
Sender: ietf-archive-request@IETF.NRI.Reston.VA.US
From: Marshall Rose <mrose@dbc.mtview.ca.us>

>   o Dont you think that Secure SNMP related issues related to SMP or SNMPv2 
>     should be discussed in both places?  SMP security is different (currently
>     just a little, but the working group could recommend anything).

The changes that SMP makes to SNMP Security are now input the SNMP
Security working group.  They don't need to be discussed in both places.

>   o What do you see as the evolution of the Secure SNMP proposals if the
>     Secure SNMP RFC are not modified to adhere to the SMP security changes?

The current SNMP Security RFCs are lame ducks.  They need to be aligned
with SNMP version 2.  Hopefully the working group will improve on the
changes that the SMP authors made.

>   o If SNMPv2 is recommended to become an Internet standard, is the IETF
>     also going to also have Secure SNMP as an additional Internet standard?

The two works will have to progress together.  SNMP Security is
presently at the proposed stage, though I expect that the next version
of those documents, the one that will sync with SNMP version 2, will
also be at the proposed stage initially.

/mtr