Re: [Isms] #2: is server authentication a requirement that SNMPwillrequire

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "Eliot" == Eliot Lear <lear at cisco.com> writes:

    Eliot> Sam,
    >> Again, the goal of ISMS is to provide SNMP with support for
    >> *today's* authentication solutions.

    Eliot> It is not so far from the realm of possibility that X.509
    Eliot> will be here. I hope you will agree that if the SSHSM/SNMP
    Eliot> subsystem treats SSH as a black box with appropriate
    Eliot> gazzintas and gazzoutas this shouldn't be a problem.

Completely.  You might even want to do things like standardize X.509
SubjectAltNames for SNMP engine IDs (or you might not); define a
netconf data model fragment for configuring appropriate trust anchors
and certificate validation policies; etc.  

What I think would be inappropriate is depending on X.509 in the core
ssh SM documents.


_______________________________________________
Isms mailing list
Isms at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms