[160988] in North American Network Operators' Group
Re: NYT covers China cyberthreat
daemon@ATHENA.MIT.EDU (Stephen Sprunk)
Thu Feb 21 06:35:37 2013
Date: Thu, 21 Feb 2013 05:35:26 -0600
From: Stephen Sprunk <stephen@sprunk.org>
To: nanog@nanog.org
In-Reply-To: <CA+TcGd-1t70RGUfjL6jVibnPFj27=F8W3yy7bhp16Cr7e0pWxQ@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
This is a cryptographically signed message in MIME format.
--------------ms000902000601000200090307
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 21-Feb-13 04:25, Kyle Creyts wrote:
> For another example of this, an acquaintance once told me about the pro=
cess of getting internationally standardized technologies approved for de=
ployment in China; the process that was described to me involved giving C=
hina the standards-based spec that had been drafted and approved, being t=
old that for deployment, they would have to improve upon it in a laundry =
list of ways to bring it some 5-10 years ahead of the spec, and THEN it w=
ould be allowed to be deployed.
My recent experience doing exactly this at $EMPLOYER doesn't match this
story at all.
The main problem, as with several other "second world" countries, is
that the standards you must comply with are only in the local language
and you must make your submission in the local language as well.=20
However, if you have a local technical presence, you can often get
software approval (or a formal notice of exemption--even for products
that contain "dangerous" features like encryption) in a matter of days
or even hours. If you don't, it can drag on for months. Hardware
testing can be even worse because it must be performed in their labs and
can cost tens of thousands of dollars, but at least that doesn't have to
be repeated each time you publish a new version of code.
In contrast, "first world" countries generally publish their standards
in, and accept submissions in, English. They also tend not to care
about software features, just hardware. The standards tend to be shared
across countries (eg. EU/EFTA and US/Canada), or at least they accept
test results from third-party labs that can test for all such countries
at the same time. As a result, many vendors simply don't bother going
past that group--or do it so infrequently that they don't gain the
institutional knowledge of how to navigate the approval processes in the
other group successfully and with minimal effort/cost.
S
--=20
Stephen Sprunk "God does not play dice." --Albert Einstein
CCIE #3723 "God is an inveterate gambler, and He throws the
K5SSS dice at every possible opportunity." --Stephen Hawking
--------------ms000902000601000200090307
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms000902000601000200090307--
