From subs-reminder@imc.org Mon Jan 7 18:46:13 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id SAA01227 for ; Mon, 7 Jan 2002 18:46:13 -0500 (EST) From: subs-reminder@imc.org Received: by above.proper.com (8.11.6/8.11.3) id g07NkDZ13894; Mon, 7 Jan 2002 15:46:13 -0800 (PST) Date: Mon, 7 Jan 2002 15:46:13 -0800 (PST) Message-Id: <200201072346.g07NkDZ13894@above.proper.com> To: ediint-archive@ietf.org Subject: [[201675740]] Subscription to ietf-ediint for ediint-archive@lists.ietf.org Greetings. This message is a periodic reminder that ediint-archive@lists.ietf.org is subscribed to the ietf-ediint mailing list. There are two purposes for this message: - If this message is bounced by your mail server, I can remove you from the mailing list and reduce waste of bandwidth and resources. (If you are reading this message, it clearly didn't get bounced!) - Some people stay subscribed to mailing lists even though they do not want to because they do not know how to unsubscribe. If you want to stay subscribed to the ietf-ediint mailing list, you do not need to do anything. On the other hand, if you want to unsubscribe from this list, go to the following link: You can also unsubscribe by email. To do so, you can respond to this message and I will unsubscribe you by hand in the next few days. Alternatively, you can send a plain-text message to: ietf-ediint-request@imc.org with the single word unsubscribe in the body of the message. This last method assumes that the "From:" address in your mail is "ediint-archive@lists.ietf.org". If you have any questions, feel free to contact me. --Paul Hoffman, list administrator From owner-ietf-ediint@mail.imc.org Tue Jan 8 09:16:27 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA22421 for ; Tue, 8 Jan 2002 09:16:26 -0500 (EST) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g08DjAW01073 for ietf-ediint-bks; Tue, 8 Jan 2002 05:45:10 -0800 (PST) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g08Dj9301069 for ; Tue, 8 Jan 2002 05:45:09 -0800 (PST) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA20465; Tue, 8 Jan 2002 08:45:07 -0500 (EST) Message-Id: <200201081345.IAA20465@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ediint@imc.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ediint-as2-10.txt Date: Tue, 08 Jan 2002 08:45:07 -0500 Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Electronic Data Interchange-Internet Integration Working Group of the IETF. Title : HTTP Transport for Secure Peer-to-Peer EDI over the Internet Author(s) : D. Moberg, D. Brooks, R. Drummond, D. Fischer Filename : draft-ietf-ediint-as2-10.txt Pages : 25 Date : 07-Jan-02 This document describes how to exchange structured business data securely using HTTP transport for EDIFACT, X12, XML or other used for business to business data interchange. The data is packaged using standard MIME content-types. Authentication and privacy are obtained by using CMS (S/MIME) or OpenPGP security body parts. Authenticated acknowledgements make use of multipart/signed replies to the HTTP POST requests. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ediint-as2-10.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ediint-as2-10.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ediint-as2-10.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20020107135007.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ediint-as2-10.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ediint-as2-10.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20020107135007.I-D@ietf.org> --OtherAccess-- --NextPart-- From owner-ietf-ediint@mail.imc.org Tue Jan 8 09:18:25 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id JAA22503 for ; Tue, 8 Jan 2002 09:18:24 -0500 (EST) Received: by above.proper.com (8.11.6/8.11.3) id g08DjH001080 for ietf-ediint-bks; Tue, 8 Jan 2002 05:45:17 -0800 (PST) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g08DjF301075 for ; Tue, 8 Jan 2002 05:45:15 -0800 (PST) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA20481; Tue, 8 Jan 2002 08:45:14 -0500 (EST) Message-Id: <200201081345.IAA20481@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ediint@imc.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ediint-as1-15.txt Date: Tue, 08 Jan 2002 08:45:13 -0500 Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Electronic Data Interchange-Internet Integration Working Group of the IETF. Title : MIME-based Secure Peer-to-Peer EDI over the Internet Author(s) : T. Harding, R. Drummond, C. Shih Filename : draft-ietf-ediint-as1-15.txt Pages : 27 Date : 07-Jan-02 This document describes how to securely exchange EDI and other business related documents using MIME and public key cryptography. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ediint-as1-15.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ediint-as1-15.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ediint-as1-15.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20020107135019.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ediint-as1-15.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ediint-as1-15.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20020107135019.I-D@ietf.org> --OtherAccess-- --NextPart-- From owner-ietf-ediint@mail.imc.org Wed Jan 9 14:07:18 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id OAA12308 for ; Wed, 9 Jan 2002 14:07:18 -0500 (EST) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g09IZHm26108 for ietf-ediint-bks; Wed, 9 Jan 2002 10:35:17 -0800 (PST) Received: from www.tech-comm.com (ns3.tech-comm.com [209.149.125.161]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g09IZG326103 for ; Wed, 9 Jan 2002 10:35:16 -0800 (PST) Received: from XMLbridgeDB ([204.246.201.174]) by www.tech-comm.com (8.11.6/8.11.6) with SMTP id g09Jr4e18130 for ; Wed, 9 Jan 2002 13:53:05 -0600 Reply-To: From: "Dick Brooks" To: Subject: RE: I-D ACTION:draft-ietf-ediint-as2-10.txt Date: Wed, 9 Jan 2002 12:39:31 -0600 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) In-Reply-To: <200201081345.IAA20465@ietf.org> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Content-Transfer-Encoding: 7bit Please change the following section in the latest AS2 draft, ref http://www.ietf.org/internet-drafts/draft-ietf-ediint-as2-10.txt: G. Authors' Addresses Dale Moberg dale_moberg@stercomm.com Sterling Commerce 4600 Lakehurst Ct. Dublin, OH 43016 USA Dick Brooks dick@8760.com Group 8760 110 12th Street North Suite F103 Birmingham, Alabama 35203 Tel: 205-250-8053 Dale is no longer with Sterling Commerce. I am also with a new employer, please change my contact information to: Dick Brooks dick.brooks@systrends.com Systrends, Inc 7855 South River Parkway, Suite 111 Tempe, Arizona 85284 Web: www.systrends.com Phone:480.756.6777,Mobile:205-790-1542,eFax:240-352-0714 Thanks.. Dick Brooks -----Original Message----- From: owner-ietf-ediint@mail.imc.org [mailto:owner-ietf-ediint@mail.imc.org]On Behalf Of Internet-Drafts@ietf.org Sent: Tuesday, January 08, 2002 7:45 AM To: IETF-Announce: Cc: ietf-ediint@imc.org Subject: I-D ACTION:draft-ietf-ediint-as2-10.txt A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Electronic Data Interchange-Internet Integration Working Group of the IETF. Title : HTTP Transport for Secure Peer-to-Peer EDI over the Internet Author(s) : D. Moberg, D. Brooks, R. Drummond, D. Fischer Filename : draft-ietf-ediint-as2-10.txt Pages : 25 Date : 07-Jan-02 This document describes how to exchange structured business data securely using HTTP transport for EDIFACT, X12, XML or other used for business to business data interchange. The data is packaged using standard MIME content-types. Authentication and privacy are obtained by using CMS (S/MIME) or OpenPGP security body parts. Authenticated acknowledgements make use of multipart/signed replies to the HTTP POST requests. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ediint-as2-10.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ediint-as2-10.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ediint-as2-10.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. From owner-ietf-ediint@mail.imc.org Sun Jan 13 11:27:41 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id LAA12101 for ; Sun, 13 Jan 2002 11:27:40 -0500 (EST) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g0DFcJs04218 for ietf-ediint-bks; Sun, 13 Jan 2002 07:38:19 -0800 (PST) Received: from mail.hz.zj.cn ([202.101.172.2]) by above.proper.com (8.11.6/8.11.3) with SMTP id g0DFcH304212 for ; Sun, 13 Jan 2002 07:38:18 -0800 (PST) Received: from mail.hz.zj.cn([202.101.172.2]) by mail.hz.zj.cn(JetMail 2.5.3.0) with SMTP id jm1d3c41aa2f; Sun, 13 Jan 2002 15:28:24 -0000 Received: from above.proper.com([208.184.76.39]) by mail.hz.zj.cn(JetMail 2.5.3.0) with SMTP id jm3d3c3b32da; Tue, 8 Jan 2002 14:07:25 -0000 Received: by above.proper.com (8.11.6/8.11.3) id g08DjH001080 for ietf-ediint-bks; Tue, 8 Jan 2002 05:45:17 -0800 (PST) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g08DjF301075 for ; Tue, 8 Jan 2002 05:45:15 -0800 (PST) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA20481; Tue, 8 Jan 2002 08:45:14 -0500 (EST) Message-Id: <200201081345.IAA20481@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ediint@imc.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ediint-as1-15.txt Date: Tue, 08 Jan 2002 08:45:13 -0500 List-Archive: List-ID: List-Unsubscribe: Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Electronic Data Interchange-Internet Integration Working Group of the IETF. Title : MIME-based Secure Peer-to-Peer EDI over the Internet Author(s) : T. Harding, R. Drummond, C. Shih Filename : draft-ietf-ediint-as1-15.txt Pages : 27 Date : 07-Jan-02 This document describes how to securely exchange EDI and other business related documents using MIME and public key cryptography. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ediint-as1-15.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ediint-as1-15.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ediint-as1-15.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20020107135019.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ediint-as1-15.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ediint-as1-15.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20020107135019.I-D@ietf.org> --OtherAccess-- --NextPart-- From owner-ietf-ediint@mail.imc.org Mon Jan 14 06:31:17 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA01315 for ; Mon, 14 Jan 2002 06:31:16 -0500 (EST) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g0EB2kv25773 for ietf-ediint-bks; Mon, 14 Jan 2002 03:02:46 -0800 (PST) Received: from d06lmsgate-4.uk.ibm.COM (d06lmsgate-4.uk.ibm.com [195.212.29.4]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g0EB2i325769 for ; Mon, 14 Jan 2002 03:02:44 -0800 (PST) Received: from d06relay01.portsmouth.uk.ibm.com (d06relay01.portsmouth.uk.ibm.com [9.166.84.147]) by d06lmsgate-4.uk.ibm.COM (1.0.0) with ESMTP id KAA114620 for ; Mon, 14 Jan 2002 10:49:51 GMT Received: from d06ml035.portsmouth.uk.ibm.com (d06ml035_cs0 [9.180.35.16]) by d06relay01.portsmouth.uk.ibm.com (8.11.1m3/NCO v5.01) with ESMTP id g0EB1uv158160 for ; Mon, 14 Jan 2002 11:02:02 GMT To: ietf-ediint@imc.org MIME-Version: 1.0 Subject: Re: MIME-based Secure EDI -- AS1 X-Mailer: Lotus Notes Release 5.0.7 March 21, 2001 From: "Paul V Ford-Hutchinson" Message-ID: Date: Mon, 14 Jan 2002 10:59:40 +0000 X-MIMETrack: Serialize by Router on D06ML035/06/M/IBM(Release 5.0.8 |June 18, 2001) at 14/01/2002 11:02:30, Serialize complete at 14/01/2002 11:02:30 Content-Type: text/plain; charset="us-ascii" Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: David Fischer wrote: >After reading the comments from the Last Call on AS1, it seems there >are two concerns: >1) The name might suggest that all EDI on the Internet would be done >this way. > >2) There is some dissent to the way in which security is applied >in this spec. I also raised the issues that - there are too many options (in general options are considered bad in a protocol) - there are proposed modes of operation that offer no security whatsoever. And so .. - options should be reduced/removed - all proposed mechanisms should offer a basic level of security (confidentiality, authentication and integrity) The IETF should be asserting the security high-ground and not allow insecure, lowest common denominator mechanisms to be defined. Perhaps we should ask for guidance from the SAAG ? Paul -- Paul Ford-Hutchinson : eCommerce application security : paulfordh@uk.ibm.com MPT-6, IBM , PO Box 31, Birmingham Rd, Warwick, CV34 5JL +44 (0)1926 462005 http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html From owner-ietf-ediint@mail.imc.org Mon Jan 14 10:25:49 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA04014 for ; Mon, 14 Jan 2002 10:25:48 -0500 (EST) Received: by above.proper.com (8.11.6/8.11.3) id g0EEnMn08177 for ietf-ediint-bks; Mon, 14 Jan 2002 06:49:22 -0800 (PST) Received: from drummondgroup.com (drummondgroup.com [192.41.39.80]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g0EEnL308173 for ; Mon, 14 Jan 2002 06:49:21 -0800 (PST) Received: from david (adsl-65-66-106-58.dsl.rcsntx.swbell.net [65.66.106.58]) by drummondgroup.com (8.8.5) id HAA13203; Mon, 14 Jan 2002 07:46:56 -0700 (MST) X-Authentication-Warning: drummondgroup.com: Host adsl-65-66-106-58.dsl.rcsntx.swbell.net [65.66.106.58] claimed to be david From: "David Fischer" To: "Paul V Ford-Hutchinson" , Subject: RE: MIME-based Secure EDI -- AS1 Date: Mon, 14 Jan 2002 08:47:36 -0600 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal In-Reply-To: Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: Content-Transfer-Encoding: 7bit You want to remove the option for someone to use AS1 without security? David Fischer Drummond Group. -----Original Message----- From: owner-ietf-ediint@mail.imc.org [mailto:owner-ietf-ediint@mail.imc.org]On Behalf Of Paul V Ford-Hutchinson Sent: Monday, January 14, 2002 5:00 AM To: ietf-ediint@imc.org Subject: Re: MIME-based Secure EDI -- AS1 David Fischer wrote: >After reading the comments from the Last Call on AS1, it seems there >are two concerns: >1) The name might suggest that all EDI on the Internet would be done >this way. > >2) There is some dissent to the way in which security is applied >in this spec. I also raised the issues that - there are too many options (in general options are considered bad in a protocol) - there are proposed modes of operation that offer no security whatsoever. And so .. - options should be reduced/removed - all proposed mechanisms should offer a basic level of security (confidentiality, authentication and integrity) The IETF should be asserting the security high-ground and not allow insecure, lowest common denominator mechanisms to be defined. Perhaps we should ask for guidance from the SAAG ? Paul -- Paul Ford-Hutchinson : eCommerce application security : paulfordh@uk.ibm.com MPT-6, IBM , PO Box 31, Birmingham Rd, Warwick, CV34 5JL +44 (0)1926 462005 http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html From owner-ietf-ediint@mail.imc.org Mon Jan 14 10:37:02 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id KAA04222 for ; Mon, 14 Jan 2002 10:37:02 -0500 (EST) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g0EF4Y808634 for ietf-ediint-bks; Mon, 14 Jan 2002 07:04:34 -0800 (PST) Received: from d06lmsgate.uk.ibm.COM (d06lmsgate.uk.ibm.com [195.212.29.1]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g0EF4W308630 for ; Mon, 14 Jan 2002 07:04:32 -0800 (PST) Received: from d06relay02.portsmouth.uk.ibm.com (d06relay02.portsmouth.uk.ibm.com [9.166.84.148]) by d06lmsgate.uk.ibm.COM (1.0.0) with ESMTP id OAA59518 for ; Mon, 14 Jan 2002 14:42:12 GMT Received: from d06ml035.portsmouth.uk.ibm.com (d06ml035_cs0 [9.180.35.16]) by d06relay02.portsmouth.uk.ibm.com (8.11.1m3/NCO v5.01) with ESMTP id g0EF1sn99834 for ; Mon, 14 Jan 2002 15:01:55 GMT To: ietf-ediint@imc.org MIME-Version: 1.0 Subject: RE: MIME-based Secure EDI -- AS1 X-Mailer: Lotus Notes Release 5.0.7 March 21, 2001 From: "Paul V Ford-Hutchinson" Message-ID: Date: Mon, 14 Jan 2002 15:03:15 +0000 X-MIMETrack: Serialize by Router on D06ML035/06/M/IBM(Release 5.0.8 |June 18, 2001) at 14/01/2002 15:03:54, Serialize complete at 14/01/2002 15:03:54 Content-Type: text/plain; charset="us-ascii" Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: David Fischer wrote > You want to remove the option for someone to use AS1 without security? Unless it can be explained how this option is "MIME-based Secure Peer-to-Peer EDI over the Internet" It's that troublesome "Secure" word that bothers me. Paul -- Paul Ford-Hutchinson : eCommerce application security : paulfordh@uk.ibm.com MPT-6, IBM , PO Box 31, Birmingham Rd, Warwick, CV34 5JL +44 (0)1926 462005 http://www.ford-hutchinson.com/~fh-1-pfh/ftps-ext.html From owner-ietf-ediint@mail.imc.org Thu Jan 17 06:36:09 2002 Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id GAA11985 for ; Thu, 17 Jan 2002 06:36:09 -0500 (EST) Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g0HBAbf02800 for ietf-ediint-bks; Thu, 17 Jan 2002 03:10:37 -0800 (PST) Received: from mail.hz.zj.cn ([202.101.172.2]) by above.proper.com (8.11.6/8.11.3) with SMTP id g0HBAV302796 for ; Thu, 17 Jan 2002 03:10:31 -0800 (PST) Received: from mail.hz.zj.cn([202.101.172.2]) by mail.hz.zj.cn(JetMail 2.5.3.0) with SMTP id jmd3c46b12a; Thu, 17 Jan 2002 11:00:30 -0000 Received: from above.proper.com([208.184.76.39]) by mail.hz.zj.cn(JetMail 2.5.3.0) with SMTP id jm1a3c41bcc3; Sun, 13 Jan 2002 16:51:02 -0000 Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.6/8.11.3) id g0DFcJs04218 for ietf-ediint-bks; Sun, 13 Jan 2002 07:38:19 -0800 (PST) Received: from mail.hz.zj.cn ([202.101.172.2]) by above.proper.com (8.11.6/8.11.3) with SMTP id g0DFcH304212 for ; Sun, 13 Jan 2002 07:38:18 -0800 (PST) Received: from mail.hz.zj.cn([202.101.172.2]) by mail.hz.zj.cn(JetMail 2.5.3.0) with SMTP id jm1d3c41aa2f; Sun, 13 Jan 2002 15:28:24 -0000 Received: from above.proper.com([208.184.76.39]) by mail.hz.zj.cn(JetMail 2.5.3.0) with SMTP id jm3d3c3b32da; Tue, 8 Jan 2002 14:07:25 -0000 Received: by above.proper.com (8.11.6/8.11.3) id g08DjH001080 for ietf-ediint-bks; Tue, 8 Jan 2002 05:45:17 -0800 (PST) Received: from ietf.org (odin.ietf.org [132.151.1.176]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g08DjF301075 for ; Tue, 8 Jan 2002 05:45:15 -0800 (PST) Received: from CNRI.Reston.VA.US (localhost [127.0.0.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id IAA20481; Tue, 8 Jan 2002 08:45:14 -0500 (EST) Message-Id: <200201081345.IAA20481@ietf.org> Mime-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" To: IETF-Announce: ; Cc: ietf-ediint@imc.org From: Internet-Drafts@ietf.org Reply-to: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ediint-as1-15.txt Date: Tue, 08 Jan 2002 08:45:13 -0500 List-Archive: List-ID: List-Unsubscribe: List-Archive: List-ID: List-Unsubscribe: Sender: owner-ietf-ediint@mail.imc.org Precedence: bulk List-Archive: List-ID: List-Unsubscribe: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Electronic Data Interchange-Internet Integration Working Group of the IETF. Title : MIME-based Secure Peer-to-Peer EDI over the Internet Author(s) : T. Harding, R. Drummond, C. Shih Filename : draft-ietf-ediint-as1-15.txt Pages : 27 Date : 07-Jan-02 This document describes how to securely exchange EDI and other business related documents using MIME and public key cryptography. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ediint-as1-15.txt To remove yourself from the IETF Announcement list, send a message to ietf-announce-request with the word unsubscribe in the body of the message. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ediint-as1-15.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ediint-as1-15.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <20020107135019.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ediint-as1-15.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ediint-as1-15.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <20020107135019.I-D@ietf.org> --OtherAccess-- --NextPart--