RE: [Mipshop] AW: [Mobopts] Presentation slides for "CXTP using GIST"

> -----Original Message-----

:)

> If you mean "how

Yes, sorry.

> it would

Compromises are based either on software or on human faults, right?

As you know, when an operator deploys a technology, most of the time, he uses products from one or two manufacturers. So if one product is compromised, all the entities from the same product can be or are comprised. In the same case, if this is human-based compromise, most of the time, if this guy can access to one entity, he can access to all the entities of the same administrative domain. On the other side, Context Transfer only occurs in a same administrative domain (cf. CXTP requirements).

Do you need help?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related irtf.org Links mobopts Request more information about Pantek

So I don't see what is the danger to set up a rule saying "No CXTP for security". But maybe I am wrong and would be happy to know why :)

>
> jak

JMC. France Telecom - R&D Division - MAPS/NSS Jean-Michel COMBES, Internet/Intranet Security E-Mail: jeanmichel.combes@francetelecom.com Phone: +33 (0)1 45 29 45 94
Fax: +33 (0)1 45 29 65 19
Mobile: +33 (0)6 07 29 30 16

>
> ----- Original Message -----