Subject: [Isms] ISMS WG Meeting Summary

From: Ken Hornstein <[email-masked]>
Date: Thu, 11 Nov 2004 14:02:32 -0500

WG members,

Below you will find a summary of the working group meeting that
took place at this IETF (Washington, DC).  More detailed minutes
will be forthcoming.  I plan on integrating the current minutes
(thanks to Mike Baer) with the excellent job Sharon Chishom did as
Jabber scribe.

ISMS WG - IETF 61 Meeting Summary

The deadlines of the WG were discussed.

- October 2004 cutoff for for proposals
- November 2004 decision by WG on direction to take
- March 2005 recharter to focus on direction or shut down

There was a general discussion about selection critera.

The three different proposals were then discussed.

The first proposal was TLSM, by David Harrington.

- Using a lower level transport layer (such as TLS) to provide SNMP
  security
- Considerable discussion on this topic.
- David Harrington is not convinced it was the best, but "needed to be done"

Next proposal was SBSM, by Wes Hardaker.

- Creates a "session" and negotiates security in-band.
- Implemented in Net-SNMP
- Considerable concern from WG attendees about creating a new key
  exchange mechanism.
- Suggested that one should reuse another key exchange mechanism

Third proposal was EUSM, by Kaushik Narayan.

- Uses USM, but talks to a third party (AAA) server
- Implemented by people at Cisco.
- Concerns about key lifetime and robustness.

There was significant discussion about the proposals.  It was agreed
that an evaluation team should be used, and evaluation team members
were chosen.  The evaluation team members are:

Randy Presuhn <[email-masked]>
Eric Rescorla <[email-masked]>
Uri Blumenthal <[email-masked]>
Lakshminath Dondeti <[email-masked]>

The evaluation team should make a decision by the end of November.

--Ken

_______________________________________________
Isms mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/isms