[44238] in North American Network Operators' Group
RE: Photo Op: You too can have your picture taken with a.root-servers.net
daemon@ATHENA.MIT.EDU (Sean Donelan)
Wed Nov 14 16:07:18 2001
Date: Wed, 14 Nov 2001 15:21:25 -0500 (EST)
From: Sean Donelan <sean@donelan.com>
To: Deepak Jain <deepak@ai.net>
Cc: Daniel Golding <dgolding@sockeye.com>, <nanog@merit.edu>
In-Reply-To: <GPEOJKGHAMKFIOMAGMDIMECIGNAA.deepak@ai.net>
Message-ID: <Pine.GSO.4.40.0111141508160.15060-100000@clifden.donelan.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 14 Nov 2001, Deepak Jain wrote:
> Not "the kind of security measures we have in place increasingly assure our
> customers of integrity..." but advertising your security measures for their
> own sake can only have negative security ramifications.
>
Yes and no. Las Vegas casinos regularly show off their security to
visitors. There have been several Discovery Channel shows giving
details how casino security works. Like most things, security is a
multi-disciplinary activity. And deterance does play a small role.
The problem is when your PR people start engaging in puffery and the
deterance becomes a challenge.
Discussing security is good, because we can all learn something. But
I wouldn't issue a challange, directly or indirectly. We take reasonable
precautions, have contigency plans for things which we didn't cover.