Subject: RE: [TLS] Please discuss: draft-housley-evidence-extns-00 (resend)

From: Peter Williams <[email-masked]>
Date: Wed, 20 Dec 2006 11:10:38 -0800

Hmm. 
 
> http://www.navysbir.com/06_1/215.htm
a multi-level capable router, with layer 3 segregation based on KMI controlling the TLSConnections, with 
the protocol engine inside the N-TCB.
 
I.e. WAN router prevents IP-connectivity if the evidence does not satisfy centralized policy.
 
one should be able to repurpose alot of the multilevel layer 2 stack work done by cisco for LANs/MANs, with 
different STPs  for each VLAN (PVST+) - controlling compartmentalization across the trunks. i.e. 802.1q 
tagging for multilevel policy.
 
I assume that the testing criteria in the reseach is to do it all now with commodity TLS as the 
enforcement mechanism, and use CA graphs (with security labels in the certs) as the control 
mechanism for connectivity.?
 
_________________________________________________________________
Get the Live.com Holiday Page for recipes, gift-giving ideas, and more.
www.live.com/?addtemplate=holiday

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls