Richard, On 2011-05-22 at 06:36, Richard Graveman wrote: > It seems to me that high assurance may well be needed in cases with > only one domain. Is that out of scope?
Single domain use cases are definitely in scope; but they are very similar (conceptually) to existing commercial crypto APIs. The ability to separate domains is what sets CICM apart. See: "2.3. Single Security Domain" in CICM Logical Model http://tools.ietf.org/html/draft-lanz-cicm-lm-00#section-2.3 "18. Single-Domain" in CICM Channel Management http://tools.ietf.org/html/draft-lanz-cicm-cm-00#section-18 Lev _______________________________________________ cicm mailing list [email protected] https://www.ietf.org/mailman/listinfo/cicm
