CL Elec Exch: 2/19 Minutes (via Listserve)

[Scott Fullerton <sfullerton@glhec.org>]

The minutes from *last week* are being circulated via the CommonLine Electronic 
Exchange Listserve
-----------------
CommonLine Electronic Exchange Subcommittee minutes for 02/19/98.
.
Sub-committee members:
* = present
Russ Judd Great Lakes rjudd@glhec.org
Scott Fullerton* Great Lakes(Chair) sfullerton@glhec.org
Karl Ebert* SLMA 105502.3154@CompuServe.Com
John Falconer SLMA
Frank Hum SLMA franklin.r.hum.jr@slma.com
Libby Meeker SLMA Libby.Meeker@SLMA.com
Jeannette Miller SLMA 76756,60@Compuserve.Com
Gary Thomas SLMA 70664.401@compuserve.com
Mike Nolan PHEAA mnolan@pheaa.org
Darwin Peiffer* PHEAA dpeiffer@pheaa.org
Terry Zuch* PHEAA tzuch@pheaa.org
John Hall PHEAA
Linda Laub PHEAA llaub@pheaa.org
Jeff Knass USA Group jknass@usagroup.com
Brian Allison* USA Group BALLISON@usagroup.com
Ron Clark* USA Group rclark@usagroup.com
Paul Logston* USA Group plogston@usagroup.com
Mike Brannon USA Group MBrannon@usagroup.com
Matt Parrett USA Group mparrett@usagroup.com
Ki Ha NELA kiha@nela.net
Gary Burleson TGSLC gary.burleson@tgslc.org
Kelly Klipple* TGSLC kelly.klipple@tgslc.org
Will Thien* TGSLC will.thien@tgslc.org
Warren Sherard Edfund wsherard@edfund.org
Patrick Walters SLFC waltersp@slf.org
Gad Hazum Access ghazum@accessgrp.org
Ed McGowan ESF emcgowan@esfweb.com
Ruth Smith NYHESC rsmith@hesc.com
Kevin Malmberg NYHESC kmalmberg@hesc.com
Mike Schoeppler NYHESC mschoeppler@hesc.com
Betty Hansman* ISAC bhansman@isc016r1.state.il.us
Mike Yip ISAC
Debbie Phillips ISAC dphillip@isc016r1.state.il.us
Fred Highsmith* Guarantech fhighsmith@guarantec.com
Tim Hearley* KHEAA thearley@kheaa.com
Mark Lifland* Nellie Mae mark_lifland@nelliemae.com
Goeff Boisvert Nellie Mae geoff_boisvert@nelliemae.com
Doug McCaleb Nellie Mae doug_mccaleb@nelliemae.org
Tom Jurado AFSA jurado@ix.netcom.com
Bill Horn College Foundation whorn@cfi-nc.org
.
In this meeting, discussion on encryption options in light of situation at
Network Associates. Next Meeting: 2/26/98
================================
*ELECTRONIC EXCHANGE LISTSERVE*
Minutes hereonafter will be posted on the electronic exchange listserve.
They can be viewed with a browser at the archive site
http://lists.glhec.org/cl-elec-exch (case sensitive). These minutes and
those for the next two meetings will also go out via the standard
distribution list. After that, the listserve will be the exclusive means
for delivery.
--------------------------------
*COMPUSERVE REPORT*
Scott spoke with Teemu Kolemine (CompuServe/AOL messaging systems manager)to
learn the impact to us, if any, from the announced dismissal of 500
CompuServe employees. Teemu stated that these 500 employees were in the
customer service area (AOL is moving to outsource this) and back office
personnel (made redundant by the merger). The layoff would have no impact
on their messaging systems support and in fact there is no change in their
approach to oldmail. They will continue to support it through the "mid"
timeframe, (up to two years). He encouraged us to check in with them in a
couple of months to get more information about their migration plans.
--------------------------------
CYLINK/ALGORITHMIC RESEARCH
USA Group reported hearing a Gartner presentation in which Cylink was
reviewed very favorably as a leader in the industry. They have DSS/Diffie
Hellman encryption products and tools for 16-bit and 32-bit windows.
--------------------------------
*NETWORK ASSOCIATES REPORT*
Scott reported the very disturbing news that he and others have heard from
Network Associates. Scott's source of information was from Eric Nesson, the
Manager of corporate accounts.
1) PGPMail 4.x and related toolkits are being obsoleted
a) Eric could not get access to the code. Scott sent it back to him via
e-mail attachments so that it could be made available on a Network
Associates ftp server.
b) There is only one person in tech support known to be able to support 4.x,
Howard Fritz. When he leaves, the possibilities of getting tech support
may be very limited.
.
2) RSA license negotiations between Network Associates and RSA DSI are still
underway. Until they are resolved, there is no assurance that should we
obtain licenses now, we could purchase more license later.
.
3) There is no expectation that Network Associates will provide a 16-bit
Windows or DOS version of PGP that supports DSS/Diffie Hellmann.
.
4) There are many 16-bit School Based Products still.
.
-The implication of (1,2) and (3,4) is that we are not likely to have a
single encryption standard common to everyone in CommonLine, not at least
one that we can trust to remain available for very long.
.
The cost per license (when purchased singly) to embed PGP in
School-Based-Software is $60. Scott reported to this group that Eric had
expressed interest in negotiating volume discounts, that he (Scott) reviewed
for him the history of attempts toward this end with Steve Abbott, and that
they agreed this was an area that might possibly be reexamined if all the
other concerns are resolved.
--------------------------------
*DISCUSSION ON DEVELOPMENT TIME FRAME AS A RESULT OF THE ABOVE*
Given the very obvious reasons for concern, the question was raised whether
it wouldn't be better to relax the May deadline for readiness. If we do
relax this deadline, it is likely nothing will be instituted until the fall
at the earliest.
.
This presents two problems. First, it leaves us more exposed to the
possibility that CompuServe might withdraw support for oldmail. Second,
this would result in (at least a temporary) absence of a standard leaving an
opening for agencies each to develop their own independent set of procedures
making standardization that much more difficult later on.
.
On the other hand, if we proceed with a product that will soon be obsoleted,
we face the risk of wasted development and delays.
.
After much discussion, the group agreed we should present the issues to the
community via the CommonLine listserve, mention the probable impact this
will have on our deadline, and promise to keep them abreast of developments.
.
Scott will draft the message to put on the listserve, and present it for
review by members from Nellie Mae, ISAC, and USA Group.
--------------------------------
*DISCUSSION ON WHETHER TO CONTINUE WITH PGP*
There was some discussion on whether to continue with PGP. The sense of
the group was that while we should begin looking at other options (Cylink
was discussed in this context), it is premature to make a decision about PGP
yet.
.
Scott will continue to explore the situation with Network Associates. In
doing so, he will try to identify and work with the people making the
decisions.
.
USA Group will explore Cylink as a possible option.
--------------------------------
*ADDENDUM REVISION*
Proposed changes so far include the following:
1.) Replace references to PGP Inc. with Network Associates. The first
reference could read Network Associates (formerly PGP Inc.)
.
2.) Change text on page 12 under "Setup: Initial Distribution of Keys"
paragraph 2 bullet 2. Where it reads CL COMM UPDATE <recipient name>, it
should read CL COMM UPDATE <sender name>
.
If you have any further revisions to suggest, please send them to me
(sfullerton@glhec.org) before the next meeting.
--------------------------------
*PLEASE BE SURE TO SEND IN BILLING INFORMAITON*
If you haven't already done so, send billing information to Scott, who will
forward it to InPhoneMation. Active members of the subcommittee MUST FILL
THIS OUT. If several members always call in together to the meetings, we
would then only need information for one of them. Please provide the
following.
.
Name (Used to identify yourself upon calling in):
Organization:
Billing Address:
Telephone Number:
e-mail:
Fax:
--------------------------------
NEXT SCHEDULED MEETING:
Thursday 2/19/98 10AM Central Time. The number to call is (800) 374-8567.
When asked for the name of the conference, reply "CommonLine Electronic
Exchange." If asked for the host's name, reply "Scott Fullerton"
------------
Agenda
1 Network Associates (again)
2 Addendum Revisions
3 Testing
------------------------------------------------------
======================================================