Security considerations group.

["Lerner, Michah, ALSVC" <michah@att.com>]

Attached is the note I sent earlier today from an alternate email account.
Since
the mail did not have authorization it was bounced by the Oasis server, a
somewhat
fitting response given this lists' audience!  Here is the earlier note.

-----------------

 

Date: Tue, 20 Feb 2001 09:28:02 -0500 (EST)

From: Michah Lerner <lerner@cs.columbia.edu>

To: George_Robert_Blakley_III@tivoli.com, rlmorgan@washington.edu

Cc: security-consider@lists.oasis-open.org

Subject: Re: Getting the security considerstions group going

 

I second Bob's suggestion, and would like to add that domains already

enforce policies even where these policies are not formally defined. This

may be problematic from secure interactions, in particular where trust

chains are undefined. While it might be 'out of scope' to provide a

solution we should be 'in scope' with discusion of the issue.

 

Michah Lerner

michah@att.com, lerner@cs.columbia.edu

1 732 319 3798 (cell)

1 732 420 5194 (office)