RE: [Isms] #1: is it important to support anonymous user accesstoSNMP?

["Blumenthal, Uri" <uri.blumenthal at intel.com>]

> Note that I am not necessarily saying ISMS has to support
> authenticated anonymous access - perhaps community "public" is good
> enough, even though it is not authenticated.

The question was whether this is a useful feature. My answer is yes.
Whether it's a necessary one, or how much development efforts it
justifies - I abstain from answering.

> In fact, does authenticated anonymous access not boil down to "I
> configure a well-known (typically read-only) user identity with a
> secret that everybody knows about"? If yes, then I don't think ISMS
> has to do something special.

No, because in models such as USM - knowledge of that secret
cryptographically allows to impersonate *either* end of the
conversation. In ISMS it may or may not be different.

_______________________________________________
Isms mailing list
Isms at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/isms