[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Idr] proposed additional text



In message <20040517162807.B8794@nexthop.com>, Jeffrey Haas writes:
> Curtis,
> 
> On Mon, May 17, 2004 at 04:12:35PM -0400, Curtis Villamizar wrote:
> > Real threat - very close to zero.  We have better things to worry
> > about.
> 
> I'd agree.  IMO the security folk tend to be very picky about knowing
> the circumstances of where we have issues no matter how small the
> window.
> 
> IIRC, your original objection was showing how this could be done or
> otherwise delete the sentences that covered it.  I think we've
> shown how.  Deriving the unlikelihood of this set of circumstances
> can be left to the reader.
> 
> > Curtis
> 
> -- 
> Jeff Haas 
> NextHop Technologies


The threat is exactly zero if you change the key once a week or more
so I still think the sentence can be omited.  At least it needs to be
clarified.

Curtis

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www1.ietf.org/mailman/listinfo/idr