[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ietf-saag
Subject:    Re: [saag] CIPSO implementations
From:       "Steven M. Bellovin" <smb () cs ! columbia ! edu>
Date:       2006-11-30 21:31:48
Message-ID: 20061130213148.1EAB53C03F8 () berkshire ! machshav ! com
[Download RAW message or body]

On Thu, 30 Nov 2006 14:35:16 -0500
"Shawn Campbell" <scampbell@assureddecisions.com> wrote:

> Most of the CMW work has been/was absorbed into other lines.  For
> example, Addamax became Argus became Trusted Computing Solutions
> (their secure Linux version), SecureWare (Trusted SCO UNIX) became
> Security First/HP became HP Trusted OS, Sun's Trusted Solaris has
> been absorbed into Solaris 10 Trusted Extensions, other next steps
> like Trusted Mach (TIS) became Flask (I think associated in some
> degree with TrustedBSD) became SELinux.  No idea what became of
> Ultrix - unless like VMS it became part of eventual Windows security
> capabilities.  All the genealogy may not be entirely accurate, but
> probably close enough.  
> 
I think this summarizes the problem -- there's a scarcity of hosts.
That is, if I can't trust a host to label a packet properly or to do
the right thing with a received label, what's the point of honoring
labels in the network?


		--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
saag mailing list
saag@mit.edu
http://mailman.mit.edu/mailman/listinfo/saag
[prev in list] [next in list] [prev in thread] [next in thread]