Re: Next Generation Firewall

[Ted Doty <ted () iss net>]

At 09:41 AM 12/2/97 -0400, James Slupsky wrote:

> 1.  If the system of encryption and authentication for the RPCs is a good
one (such >as Kerberos or DCE version 1.1), then don't some of these
concerns go away?  >(specifically, the authorized user concerns)

This assumes that you will only exchange data with known (and presumably
trusted) parties.  This mailing list is an example of a good reason to
communicate with people that you don't know, and have no reason to trust.
As long as there are anonymous services (like the web) and quasi-anonymous
services (like email mailing lists), crypto authentication is a limited
solution.

- Ted

--------------------------------------------------------------
Ted Doty, Internet Security Systems | Phone: +1 770 395 0150
41 Perimeter Center East            | Fax:   +1 770 395 1972
Atlanta, GA 30346  USA              | Web: http://www.iss.net
--------------------------------------------------------------
PGP key fingerprint: 362A EAC7 9E08 1689  FD0F E625 D525 E1BE