RE: [pki-comment] Comments in Testing Category

Title: Comments in Testing Category

Sharon,

 

Thanks.  I'll be consolidating this and other comments over the 
weekend.

 

John

 

------------------------------------------------------------------ 

John T. Sabo, CISSP 
Manager, Security Privacy and Trust Initiatives 
Computer Associates International 
2291 Wood Oak Drive 
Herndon, Virginia, 
20171 
USA 
Phone: +1 703-708-3037 
Mobile: +1 
443-629-6198 

  
-----Original Message-----
From: Sharon Boeyen 
  [mailto:]
Sent: Friday, November 14, 2003 
  2:59 PM
To: 
Subject: 
  [pki-comment] Comments in Testing Category

  
It appears (surprising to me) that there is only 
  one comment specifically on testing: 

  
-20031017-Testing-1 
  

  
Brief Quote: (from FPKI) 
The only real discussion of the action plan was around 
  testing. The PKITS and NIST Protection 
Profiles are familiar to this group and will address interop issues 
  that relate to conformance 
(as well as a 
  common set of functions for all clients). However for non-path-validation 
  topics there 
was some interest in the Open 
  Group taking up a role for other testing. Note that there were 
  
some Open Group folks in the room and it 
  was they who expressed the interest. 

  
Commentary/Recommendation: 
I think the action plan does already cover this under the 
  action item "Increase testing to 
improve 
  interoperability". My recommendation would be not to alter the action plan at 
  this 
point (because other interop testing 
  activities (e.g. PKITS, EEMA PKI C, and the Asian interop 
testing activity) also need to be considered before we 
  determine what  additional testing 
is 
  actually required. This comment should be forwarded to whoever undertakes the 
  exercise 
to assess existing test 
  environments. 

  
Note that comments 
  -20031021-General-4 and -20031021-5 
  
also relate to testing, but that isn't 
  their primary focus, so I do agree they belong in the 
general category. 

  
Sharon Boeyen 
Principal, Advanced Security 
Tel: 613 270 3181 
Fax: 613 270 2504 
Entrust 
Securing Digital Identities 
& Information 
http://www.entrust.com