OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

camp message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: [OASIS Issue Tracker] Updated: (CAMP-19) SSL Cipher Suite


     [ http://tools.oasis-open.org/issues/browse/CAMP-19?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Adrian Otto updated CAMP-19:
----------------------------

    Proposal: https://www.oasis-open.org/apps/org/workgroup/camp/download.php/48168/camp-19-2013-02-06.doc  (was: https://www.oasis-open.org/apps/org/workgroup/camp/download.php/48065/camp-19-2013-01-30-r1.doc)

> SSL Cipher Suite
> ----------------
>
>                 Key: CAMP-19
>                 URL: http://tools.oasis-open.org/issues/browse/CAMP-19
>             Project: OASIS Cloud Application Management for Platforms (CAMP) TC
>          Issue Type: Bug
>          Components: Spec
>            Reporter: Anish Karmarkar
>            Assignee: Adrian Otto
>            Priority: Minor
>
> In the spec, it calls for a specific supported cipher quite for TLS. That includes an unencrypted variant, which is not a best practice. Consider eliminating that one. The only legitimate use cases for those are where the credentials are protected, but the payloads are not (for performance reasons). This only really makes sense when the end user knows the data being transferred is not sensitive. That will almost never be the case for a system implemented with this spec. If a "null" type cipher is desired by an implementer, that certainly may be added through extensibility. It should not be required for purposes of interoperability.
> [This issue was raised by Ashok Malhotra and was drupal issue # 1090]

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]