Hello!
The ietf.pem-dev and the ietf.mixer groups are currently discussing
topics I hope we can contribute a little bit. "We" is a small team of
junior security researchers and students working on a research project
called MMMSec. This is about Security in Multimedia-Messaging and is
funded by the German PTT (more exact: DeTeBerkom which is 100% owned
by Deutsche Telekom AG).
1. The mixer group discusses gatewaying of MOSS-bodyparts to
X.420. The current consence as our opinion is that only tunneling is
possible. We have developed an X.420-security-bodypart, which is
similar to MOSS. Check our WWW-Page for the ASN.1 spec. Any comments
or hints for improvement are welcome.
http://www.fokus.gmd.de/ovma/mmms/
2. The protection of referenced data is discussed by pem-dev. Our
approach is to add some security related fields to the bodyparts
carrying the External Reference. That is external-body for MIME
external-reference for BERKOM (the BERKOM-messaging format is a
somewhat enhanced X.420). I will prepare the specs at our WWW-Page
these days. But I have to check the permission first. There is an
accepted paper about this stuff.
Regards, Burkhard
(German National Research Center For Information Technology,
Research Institute for Open Communication Systems)