Fwd: The language for Key Mangement Domain

[Tony Cox <tony.cox@cryptsoft.com>]

Folks,

As discussed on last week's call - here is the alternate definition from Chuck W along with his rationale for it's construction.

In summary (and for ease of comparison), the two proposed definitions we have on the table so far are:

"A logical grouping of clients and servers where there is a reasonable expectation that a key, or key name is unique. "

and

"An instance of a key management system where uniqueness of objects can reasonably be expected. A key management system may comprise multiple logical partitions (Key management Domains) where uniqueness is preserved within each partition but is not required across all partitions."

Cheers,
-Tony Cox

-------- Forwarded Message --------

Subject:	The language for Key Maangement Domain
Date:	Thu, 31 Oct 2019 14:42:49 +0000
From:	White, Charles <chuck@fornetix.com>
To:	'tony.cox@cryptsoft.com' <tony.cox@cryptsoft.com>

"A logical grouping of clients and servers where there is a reasonable expectation that a key, or key name is unique. "

If you apply a sanity test of an identity domain - you can use similar language: A logical grouping of systems where there is a reasonable expectation that a given system identifier is unique.

This addresses the fact that a domain is more than just servers it is a collection of Clients and Servers - whether it is physical, virtual, partition, imaginary, rainbows, unicorns, etc

This also has the benefit of not using the term Domain in the definition.



Chuck White
Fornetix

CONFIDENTIALITY NOTICE: This message is confidential and may also be privileged. It is for the exclusive use of the intended recipient. If you are not the intended recipient please note that any distribution, copying, or use of this communication or the information in it is prohibited and may be unlawful. If you have received this communication in error, please return it to the sender and then delete the email and destroy any copies of it.