[141207] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: two bits of light holiday reading

daemon@ATHENA.MIT.EDU (Steven M. Bellovin)
Sat Dec 27 14:08:03 2008

Date: Sat, 27 Dec 2008 12:33:37 -0500
From: "Steven M. Bellovin" <smb@cs.columbia.edu>
To: Ivan =?ISO-8859-1?Q?Krsti=3F?= <krstic@solarsail.hcs.harvard.edu>
Cc: Cryptography List <cryptography@metzdowd.com>
In-Reply-To: <FEA2EEE6-F188-4172-BE5B-1644E9BFD2AA@solarsail.hcs.harvard.edu>

On Fri, 26 Dec 2008 01:35:43 -0500
Ivan Krsti__ <krstic@solarsail.hcs.harvard.edu> wrote:


> 2.
> 
> The DC-based Center for Strategic and International Studies recently  
> released a report titled 'Securing Cyberspace for the 44th
> Presidency' written by a number of influential authors:
> 
> <http://www.csis.org/media/csis/pubs/081208_securingcyberspace_44.pdf>
> 
> Of most interest to this list, the report suggests going on the  
> offensive with regard to identity management, proposing to restrict  
> bonuses and awards of US federal agencies not using strong digital  
> credentials for employees in sufficient numbers (logical pp. 61-65).  
> Maybe, uh, it'll work this time around?

I disagree with a number of recommendations in that report; some of the
ones about identity management are high on my list.  See
http://www.cs.columbia.edu/~smb/blog/2008-12/2008-12-15.html for my
comments.

		--Steve Bellovin, http://www.cs.columbia.edu/~smb

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post