RE: Draft WG charter
Down that path lay madness.
Yaron (We Need a Non-Versioning client and Security Sub-Group) Goland
From: Ben Laurie[SMTP:firstname.lastname@example.org]
Sent: Wednesday, September 18, 1996 7:54 AM
To: Jim Whitehead
Subject: Re: Draft WG charter
Jim Whitehead wrote:
> Ben Laurie wrote:
> >> Here is a proposed draft charter for this working group, which will
> >> be discussed at the Cambridge meeting. Especially if you are
> >> not attending, I welcome your feedback.
> >Pardon me if I've missed something but there seems to be no mention whatsoever
> >of security/authentication/permissions in this draft.
> >BTW, which Cambridge?
> Good points.
> Security is an item we are going to leave up to other groups to provide for
> us. However, our draft charter should make this clear.
> We have been operating under the assumption that MD5 authentication would
> be sufficient for our needs -- if something better than MD5 comes along, we
> would hope we could use it. Again, the draft should state this.
> Aside from locking, our work is *not* going to address access control or
> permissions. This is a huge issue, and I feel that we would never finish
> if we had to produce a consensus access control draft. This is an
> important issue, and one which will hopefully be addressed by *another*
> working group. But, the draft should make mention of this.
Fair enough. But there is an aspect of permissioning that probably should be
addressed by this WG, namely, the ownership/permissions of the file (or
equivalent entity) on the server. Not what they should be, of course, but how
one sets them.
Ben Laurie Phone: +44 (181) 994 6435
Freelance Consultant and Fax: +44 (181) 994 6472
Technical Director Email: email@example.com
A.L. Digital Ltd, URL: http://www.algroup.co.uk
London, England. Apache Group member (http://www.apache.org)