RE: a strawman proposal for the security discussion at the Dallas faceto face

["Brunner, Eric" <EBrunner@Engage.com>]

Maryann,

I would appreciate it if you could in the opening paras of the next
go-around of the security strawman, situate the work in the literature,
and/or provide a manditory-to-grok cite for the subsequent discussion.

One term I was surprised by was "privacy" but not "data protection" which
suggests to me that I need to read carefully to be sure that the European
requirements haven't been understated.

The definition (the ability to allow only the intended recipient to read a
message) surprised me also. In the IETF literature (rfc2828), and the P3P
literature (I'm one of the P3P Spec WG participants) the concept described
is "data confidentiality", not "privacy".

I'm sorry I won't be able to attend the F2F @ Dallas Tuesday. I'll offer
more comments as I've a chance to carefully read the strawman proposal.

Eric

-----Original Message-----
From: mhondo@us.ibm.com [mailto:mhondo@us.ibm.com]
Sent: Friday, September 22, 2000 5:20 PM
To: ebxml-transport@lists.ebxml.org
Subject: a strawman proposal for the security discussion at the Dallas
face to face




All,

As discussed on the TRP call, here is a strawman proposal to use in our
discussion of security at
the face to face in Dallas on Tuesday.   Hope it reflects some of the
comments, if not, let me know!

Maryann

(See attached file: Ebxml Security Strawman.doc)