RE: [security-services] Smart Browser

["Flinn, Don" <Don.Flinn@hitachisoftware.com>]

Hi Jahan

I agree that if we move ahead with the smart browser profile that we
should investigate other protocols for inclusion in the new profile.
Part of the effort should be which protocols to include.  I like your
goal of making it generic *without making it difficult to use*.

Don

-----Original Message-----
From: Jahan Moreh [mailto:jmoreh@sigaba.com]
Sent: Tuesday, October 16, 2001 3:16 PM
To: Flinn, Don; 'Oasis Sstc (E-mail)'
Subject: RE: [security-services] Smart Browser


Don - 
I like the idea of a Smart Browser via a plugin. However,  I do not like
the idea of limiting it to a Needham/Schroedar-like protocol. I suggest
we should expound on this such that it can include other protocols. One
such protocol is Secure Remote Password (SRP) (RFC 2945). If there is
enough interest, I can write up this profile and present it to the
group. My rationale is that if we are going to come up with a new
profile, let's make it as generic as we possibly can (without making it
difficult to use).

Jahan
 

---------------------------
Jahan Moreh
Chief Security Architect
Sigaba Corp.
jmoreh@sigaba.com <mailto:jmoreh@sigaba.com> 
cell: 310.890.9391
tel: 310.286.3070





>-----Original Message-----
>From: Flinn, Don [mailto:Don.Flinn@hitachisoftware.com]
>Sent: Tuesday, October 16, 2001 12:04 PM
>To: Oasis Sstc (E-mail)
>Subject: [security-services] Smart Browser
>
>
>I had to drop out of today's focus group for another meeting.  
>
>I would like to get a reading from the group on the Smart Browser
>Profile concept that I put on the mailing list a couple of weeks ago.
>There has been no discussion on this.  I would like to know 
>whether this
>means that there is no interest and the idea should be dropped or
>whether people thought it worthwhile, in which case I would do
>additional work on it, or hated the idea.  
>
>I have attached the writeup again for easy reference.
>
>Don
>
>
>