Re: [ekmi] [Fwd: [p2p-hackers] TODAY/URGENT: Stop IETF Enactmentof Patented Standard for TLS]

[Arshad Noor <arshad.noor@strongauth.com>]

I presume you meant to add "..if they do it without a standards-
based EKMI" to the end of your last statement, Marc.  :-)

I don't doubt that software developers within a business company
are capable of writing their own KM solution if they wanted to.
The question their business people will never ask is: are they in
the financial transaction business or the KM business?  And what
happens when their company's management changes, gets bought out
or merges with another that has a standards-based KM solution?

Not asking these questions is the reason why the annual CIO-PwC
Global State of Security survey shows companies spending billions
on security each year, but unable to get ahead of the problem:

http://www.csoonline.com/article/221345/Analysis_Global_State_of_Information_Survey
and
http://www.pwc.com/extweb/home.nsf/docid/c1cd6cc69c2676d4852574da00785949

Arshad

Marc Massar wrote:
> Here's the press release from Heartland:
> http://www.snl.com/irweblinkx/file.aspx?IID=4094417&FID=7261934
> 
> In all fairness, they didn't say end-to-end security, but did say end-to-end
> encryption.  I think the plan that they are going to try to implement is
> admirable, but I fear that they are not considering the impact of encrypting
> data is going to have.  It's very possible that once they are done with the
> changes that are necessary to encrypt data in the card transaction process
> they will end up with an unmanageable key environment.