pem-dev
[Top] [All Lists]

Re: section 4.2.1 Authority Key Identifier

1994-12-14 13:01:00
On Wed, 14 Dec 1994 15:44:54 GMT, Stephen Farrell said:
     ClearanceSyntax ::= BIT STRING {
          topSecret      (0),
          secret         (1),
          confidential   (2),
          restricted          (3),
          unclassSensitive    (4),
          canadaProtectedC    (5),
          canadaProtectedB    (6),
          canadaProtectedA    (7),
          companyProprietary (8),
          unclassified   (9) }

X.411 defines another possibility which is "unmarked" as one possible
SecurityClassification. I understand this to mean "one of the above, but
we're not saying which". Certain policies (e.g. STANAG 4406) require
that this be handled differently from unclassified.

Umm.. I dont have a copy of X.411 available, but I see a problem here.  Do we
know for a fact that even with the addition of 'unmarked', we cover all the
countries' varying security plans?  Even here in the US, I've seen reference
in "The Puzzle Palace" to security levels above top-secret whose very existence
was itself classified above top-secret.  Also, I'm worried that Canada gets
an A/B/C, but 'company' only gets 1 flag - many companies will want their OWN
multi-level - I'm sure that Coca-Cola would want a MUCH higher flag on (say)
their secret formula than they would on their routine invoice traffic...

                                Valdis Kletnieks
                                Computer Systems Engineer
                                Virginia Tech














<Prev in Thread] Current Thread [Next in Thread>