Re: Communicating Conspirators Bill Frantz (frantz@netcom.com)
Fri, 24 Dec 1999 15:09:59 -0800

At 1:27 PM -0800 12/11/99, shapj@us.ibm.com wrote:
>Finally, it isn't enough to address mandatory access controls. This was
>not an objective of Norm's design, but if we are going to build in an
>intermediary we might as well get as much leverage out of it as we can.

[-] Mandatory access controls may be export controlled. Since I don't think we want to get into the export control mess, and we can achieve the security properties I think we need without providing full Orange Book B2/B3 mandatory access controls, we shouldn't go there.


Bill Frantz       | Internet Explorer, the     | Periwinkle -- Consulting
(408)356-8506     | hacker's path to your      | 16345 Englewood Ave.
frantz@netcom.com | hard disk.                 | Los Gatos, CA 95032, USA