Re: [kmip] Groups - Enhancing KMIP Profile Definition to include Operations allowed for different client types uploaded

[Mark Joseph <mark@p6r.com>]

Hi Bob, 

   So reading over the presentation are you proposing that the KMIP client implement access controls on what the application can do with a key?    
Its obvious that once the client has the key it can do anything with it currently.   Also this only pertains to keys that the client gets from the KMIP server cause given enough entropy it can certainly create its own keys for local use to get around the whole issue.


Best,

Mark Joseph, Ph.D.
President
P6R, Inc
408-205-0361
mark@p6r.com
Skype: markjoseph_sc
http://www.linkedin.com/pub/mark-joseph/0/752/4b4

Robert Lockhart <Robert.Lockhart@thalesesec.com> , 3/26/2014 3:15 PM:

Submitter's message
Presentation for March 27, 2014 KMIP TC Meeting
-- Robert Lockhart

Document Name: Enhancing KMIP Profile Definition to include Operations allowed for different client types

---

Description
Initial Presentation
Download Latest Revision
Public Download Link

---

Submitter: Robert Lockhart
Group: OASIS Key Management Interoperability Protocol (KMIP) TC
Folder: Proposals
Date submitted: 2014-03-26 15:14:36