Re: [Isms] #8: Do we need a mapping between the SSH key and SNMPengineID?

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "Blumenthal," == Blumenthal, Uri <uri.blumenthal at intel.com> writes:

    Blumenthal,> First, it is a good practice for any discernable
    Blumenthal,> entity to have unique cryptographic material (keys).
    Blumenthal,> Second, if SNMP manager is OK with ascertaining only
    Blumenthal,> the host to where it directs its commands - then no
    Blumenthal,> need for separate keys. 

Or if the manager is willing to trust the host to direct the command
appropriately.

If however the manager wants
    Blumenthal,> to make sure that he talks with a certain *agent* -
    Blumenthal,> must have separate keys.

If the manager is not willing to trust the host to direct
communication to a requested agent, then each agent needs keys.


_______________________________________________
Isms mailing list
Isms at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms