RE: Security Use Requirements

[RJ Atkinson <rja@inet.org>]

At 11:32 06/02/01, julian_satran@il.ibm.com wrote:


>Bernard,
>
>Both IPSec and TLS will be in the standard.   As we are talking about
>speeds that will be in excess of 1GBs even on modest disk controllers we were all hesitant if to make anything in this category mandatory to
>implement today.

        I suspect that failing to make security mandatory-to-
implement will tend to prevent the specification(s) from 
ever becoming IETF standards-track RFC(s).  However, the WG
can certainly *try* to slide by.

        As a potential user, I would prefer that security be
made mandatory-to-implement.  Inevitably stuff intended for
private networks ends up on the global Internet by accident
or out of expediency.  Further, even on private networks
there are significant insider security risks.

Ran
rja@inet.org