« Data-centric security | Main | What's in a name? »

Wednesday, 13 August 2008

Standards fun

Trafficjamdakar

Today, I sat through an unusual meeting of the IEEE P1619.3 group, the people that are supposed to be developing a useful standard for key management. This group has been deadlocked for a while over the issue of what type of transport mechanism to use for communications between a key server and a client. Some people want a heavy but full-featured way to do this, like WS-Management or SOAP. Others want a bare-bones, low-level way like a fixed binary format or a TLV format like a suitably-encoded ASN.1 structure. Others want something between these two extremes.

The group has been unable to decide on which format or formats to adopt. This impasse seemed a bit unusual for a standards group that's trying to quickly define a reasonable standard for which there is considerable demand, and it certainly looked like the group was starting to focus more on discussing procedural issues than in the actual content of a standard for key management. Today it got even odder.

The source of the unexpected weirdness was a motion introduced to have the entire P1619 group vote on whether or not to require a single (unspecified) transport mechanism and allow others to be optional. If this doesn't pass, then it looks like vendors will be able to implement any one of a several possible choices and still claim to be compliant with the standard even there'll be absolutely no guarantee of interoperability at all.

After all, if you can't count on all compliant implementations to have a common way to communicate, you really can't guarantee any level of interoperability, can you? We might as well vote on whether or not the standard should actually be useful once it's completed. Is there really any need for a standard that doesn't guarantee some minimal level of interoperability?

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00e55375ef1c883300e553fece578834

Listed below are links to weblogs that reference Standards fun:

Comments

Post a comment

If you have a TypeKey or TypePad account, please Sign In.

Voltage Data Breach Index

  • Grab the Voltage Data Breach Index

May 2012

Sun Mon Tue Wed Thu Fri Sat
    1 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31