Wire/Transport Security

[Thom Wysong <wysong@technodemocracy.org>]

The most recent posts on Wire/Transport Security are ....

Jason Kitcat 
(http://lists.oasis-open.org/archives/election-services/200106/msg00032.html)
Krishna Sankar 
(http://lists.oasis-open.org/archives/election-services/200106/msg00034.html)
Michael Zolotarev 
(http://lists.oasis-open.org/archives/election-services/200106/msg00039.html)

I agree with what Michael is saying about wire/transport security ....

(a) "SSL is not the only way to secure the wire"
(b) "we shouldn't be saying more than 'a token may be encrypted' "
(c) what method is used to encrypt wire traffic is "completely orthogonal 
to ... wire security"
(d) "a specific mechanism for wire security is not up to us to 
mandate/recommend"

-Thom