per-entity - Re: [Per-Entity] adding a layer to the security model

Subject: Per-Entity Metadata Working Group

List archive

Re: [Per-Entity] adding a layer to the security model

From: "Cantor, Scott" <>
To: Tom Scavo <>, Per-Entity Metadata Working Group <>
Subject: Re: [Per-Entity] adding a layer to the security model
Date: Wed, 21 Sep 2016 16:05:00 +0000
Accept-language: en-US
Authentication-results: spf=pass (sender IP is 164.107.81.208) smtp.mailfrom=osu.edu; incommon.org; dkim=none (message not signed) header.d=none;incommon.org; dmarc=bestguesspass action=none header.from=osu.edu;
Ironport-phdr: 9a23:pXVIjx/XGNeAIP9uRHKM819IXTAuvvDOBiVQ1KB91u0cTK2v8tzYMVDF4r011RmSAtWdtqkP0reempujcFJDyK7JiGoFfp1IWk1NouQttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBX660e/5j8KGxj5KRE9ZqGsQtaT3IyL0LWO/JibWA5Bmj31Na9oNx6/swL5t88KjJFkJ7prjBbFvy0MM9xb3yZFI06Sgwe0w8qs9ZJq7y0YhPU79M9GXu3VZaMlVfQMFDk8dm0z+Mz3pDHCSwCI434bVCMRiBUeUCbf6xSvFLz4tDf9rK414yKdIdG8BeQ/UDK+6L0tEjfvkzpBOjIkpjKEwvdshb5W9Ury7yd0xJTZNcTMbKJz
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

On 9/21/16, 11:54 AM,
"
on behalf of Tom Scavo"
<
on behalf of
>
wrote:

> ScottC made an intriguing suggestion today, which might be
> characterized by the following "three layers of security:"
>
> 1) Commercial-grade TLS
> 2) HTTP message signing
> 3) XML Signature
>
> Scott, is that more-or-less what you were thinking?

More along the lines of using content-negotiation to decide between 2 and 3,
but basically.

-- Scott

[Per-Entity] adding a layer to the security model, Tom Scavo, 09/21/2016
- Re: [Per-Entity] adding a layer to the security model, Cantor, Scott, 09/21/2016
  - Re: [Per-Entity] adding a layer to the security model, Tom Scavo, 09/21/2016
    - Re: [Per-Entity] adding a layer to the security model, Cantor, Scott, 09/21/2016
      - Re: [Per-Entity] adding a layer to the security model, Tom Scavo, 09/21/2016
        
        Re: [Per-Entity] adding a layer to the security model, Cantor, Scott, 09/21/2016
        
        Re: [Per-Entity] adding a layer to the security model, Nick Roy, 09/21/2016

List archive

Re: [Per-Entity] adding a layer to the security model