Re: AS#2 Transport Protocol/Security

[drummond@xxxxxxxxxx (Rik Drummond)]

At 12:18 PM 9/18/96, Carl Hage wrote:
>Rik wrote:
>: I think we are back to requirements again. What are the requirements for two
>: WEB servers to exchange EDI in real time?
>
>The question seems flawed to me, since HTTP is a *client*-server protocol,
>not a server-server protocol (except for proxy caching).

I understand...It is not abnormal in architectures to have servers talk to
other servers as if they were clients...Microsoft's NT operating system
internal components, the discussion with LDAP, and such all following this
line.

The proposal was on the table from Chrysler two months ago...we tabled it
to finish the discussions on Email...maybe we don't want two servers to
talk.....how ever Carl I disagree it is flawed...

Later..rik


>
>The real question is why do you require WEB _servers_ to exchange EDI?
>(OK ignore, WWW robots for now.) (This is a serious question, not
>retorical sarcasm.)
>
>What do you mean by "EDI"?
>
>: I would assume we need things like signature, encryptions, non repudiation
>: of source WEB server, response-time expectations across all levels of the
>: protocol stack. Do we need a secure channel between the two servers, in
>: addtion to signature and encryption at the EDI message level?
>
>No, you have a requirement for confidentiality, authentication, and
>non-repudiation for the transaction.
>
>Requirement: Logging of transactions and signatures, to implement
>             non-repudiation and for audit trails.
>
>Requirement: Need a definition of the meaning of a "transaction".
>--------------------------------------------------------------------------
>Carl Hage                                              C. Hage Associates
><email:carl@chage.com> Voice/Fax: 1-408-244-8410       1180 Reed Ave #51
><http://www.chage.com/chage/>                          Sunnyvale, CA 94086

------------------------------------------------------
|         Rik Drummond - The Drummond Group          |
|   5008 Brentwood Ct., Ft. Worth, TX 76132   USA    |
|      Voice: 817 294 7339    Fax: 817 294 7950      |
------------------------------------------------------