[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Issue# 3-Policy Discovery



>>    5-Can/should policy discovery be part of
>>      policy negotiation?
>>
>>    6-What is the state-relationship between policy
>>      discovery and policy negotiation?
>
>I'm not sure how you mean negotiation; if I set my security policy, I'll allow
>you to operate within its limitations, but I don't want to back off from
>those. Negotiation implies a mutual backoff from initially established
>conditions, which is not really applicable here.

I agree that negotiation is a poor word choice for what we should
be trying to achieve.  We should be looking for an intersection of
the policies involved to try to find common policy that we can then
use to protect a communication (assuming there is a common policy,
otherwise no communication can occur).

Should we use the term 'policy resolution' instead of 'policy
negotiation'?  Or something else?

Matt