[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CmnLn Elec Exch: 4/16 Minutes




CommonLine Electronic Exchange subcommittee minutes for 04/16/98.
-
Russ Judd         Great Lakes    rjudd@glhec.org
Scott Fullerton*  Great Lakes(Chair)    sfullerton@glhec.org
Brian Wilson*     Great Lakes    bwilson@goliath.com
Karl Ebert        SLMA           105502.3154@CompuServe.Com
John Falconer     SLMA
Frank Hum         SLMA           franklin.r.hum.jr@slma.com
Libby Meeker      SLMA           Libby.Meeker@SLMA.com
Gary Thomas       SLMA           70664.401@compuserve.com
Mike Nolan        PHEAA          mnolan@pheaa.org
Darwin Peiffer*   PHEAA          dpeiffer@pheaa.org
Terry Zuch        PHEAA          tzuch@pheaa.org
John Hall         PHEAA
Linda Laub        PHEAA          llaub@pheaa.org
Jeff Knass        USA Group      jknass@usagroup.com
Brian Allison*    USA Group      BALLISON@usagroup.com
Ron Clark         USA Group      rclark@usagroup.com
Paul Logston*     USA Group      plogston@usagroup.com
Mike Brannon      USA Group      MBrannon@usagroup.com
Matt Parrett      USA Group      mparrett@usagroup.com
Paul Jansen       USA Group      pjansen@usagroup.com
Jon Kroehler      USA Group
Ki Ha*            NELA           kiha@nela.net
Gary Burleson     TGSLC          gary.burleson@tgslc.org
Kelly Klipple     TGSLC		   kelly.klipple@tgslc.org
Will Thien*       TGSLC          will.thien@tgslc.org
Warren Sherard    Edfund         wsherard@edfund.org
Patrick Walters   SLFC           waltersp@slf.org
Gad Hazum         Access         ghazum@accessgrp.org
Ed McGowan        ESF            emcgowan@esfweb.com
Ruth Smith*       NYHESC         rsmith@hesc.com
Kevin Malmberg    NYHESC         kmalmberg@hesc.com
Mike Schoeppler*  NYHESC         mschoeppler@hesc.com
Betty Hansman     ISAC           bhansman@isc016r1.state.il.us
Mike Yip          ISAC
Debbie Phillips*  ISAC           dphillip@isc016r1.state.il.us
Fred Highsmith*   Guarantec      fhighsmith@guarantec.com
Tim Hearley*      KHEAA          thearley@kheaa.com
Mark Lifland      Nellie Mae     mark_lifland@nelliemae.com
Goeff Boisvert    Nellie Mae     geoff_boisvert@nelliemae.com
Doug McCaleb*     Nellie Mae     doug_mccaleb@nelliemae.org
Tom Jurado        AFSA           twjurado@aol.com
Bill Horn*        College Foundation whorn@cfi-nc.org
Dawn Harris       College Foundation dharris@cfi-nc.org
* = present
=================
*SUMMARY*
Topics discussed:
CompuServe/AOL update(Brian Allison reporting), Short-term Strategy, Evaluation 
Procedures, Product Update, Reconsidering our approach.
==================
1) *COMPUSERVE/AOL UPDATE: (Brian Allison)*
Brian summarized the very reassuring report he placed on the CLEE ListServe
Q. How long we can expect old mail to remain available?
A. As has been CompuServe's answer in the past, Teemu said there is no date for 
retiring old mail.
Q. How many other customers are still using oldmail?
A. Teemu said this information is confidential, but he did say that there are 
tens of thousands still using old mail. When I asked if the Airline Industry 
was one of those customers, he said he could not divulge that information.
Q. How much lead-time we can we expect before they withdraw it?
A. He said CompuServe will give 18 months notice before terminating oldmail.

2) *SHORT TERM STRATEGY*
The group felt we should send a follow-up message after our Armageddon
announcement that includes the following:
- advise CommonLine members that while it would be prudent to have a 
contingency in mind should oldmail be unexpectedly withdrawn before the new 
encryption standard is put in place, the likelihood of such a thing happening 
during the summer/fall processing season seems very unlikely.
- provide an update on the efforts of the group to find a replacement.
- discuss the strong possibility the replacement product might not support 
16-bit applications.

Scott agreed to draft this message and submit it to the group for review.

3) *PRODUCT INQUIRY/EVALUATION PROCEDURES*
a> Selection Criteria/Requirements
The group reviewed and approved the requirements listed in the 4/09 minutes. 
 In addition, members offered guidelines suggesting two more requirements:
- the product be viable in the marketplace
- the company be sound
b> Selection Time-Frame
The group set a tentative deadline of July 1 to complete the evaluation and 
selection
c> Evaluation Procedures
The group felt to assess the suitability of a product, the team must have the 
actual development tools and end-user products installed for testing. They 
should compile demonstration programs.

4) *PRODUCT UPDATE*
a)	RSA DSI (Brian Allison summarizing 4/15 CLEE Listserve message, "Report on 
two items: CompuServe's Existence and Pricing with RSA")
Brian's Report:
I ... talked with Brian Spector concerning the pricing of the RSA software and 
development toolkit. I will bullet the points of discussion.
- RSA wants to offer a non-royalty contract with rights to distribute for$25.00 
per user seat. This assume a minimum group purchase of 1,000 copies. The 
toolkit will be $290.00. Toolkits already distributed will not be charged.
- RSA is a very small company and therefore cannot get into the business of 
offering multiple or varied contracts. RSA wants one contract (basically its 
boilerplate contract) with NO addendums. I mentioned that the sub-committee had 
already been down this road and that we decided it could not be done. I 
questioned of one entity bought the software could it "sell" it to other 
entities at cost. He said yes. This will definitely have to be talked about at 
the sub-committee level.
- Support is 17% of the purchase price per year. This is the company's premiere 
support contract. Brian is faxing me information on what this entails. I asked 
if one company purchases the software and then distributes to multiple 
organizations, how is support handles. he said he will allow one contact per 
organization that the software is given (sold)to.

Discussion:
The group considered the feasibility of two alternative means of consolidated 
purchase
- having NCHELP purchase and resell the licenses.
This alternative was considered worth pursuing.  Scott agreed to follow up with 
Karen Haney.
- having a larger "civic-minded" member agency purchase and resell the 
licenses.
Most considered this unfeasible or at least not worth pursuing except as a last 
resort.
The group also discussed legal issues involved.  There was a good deal of 
speculation about the possible pitfalls with this. Questions that arose were
- whether NCHELP would have to set up licensing terms when it sub-licensed the 
product.
-  if so, whether they would be individualized with each of the purchasers.
-  what liability the reseller incurred.
It was finally agreed that Brian Allison would discuss these issues with Linda 
Laub.  He received a "boilerplate" licensing agreement from Brian Spector.  He 
would pass this along to her for review.

b) Information Security Corporation/AT&T (Tim Hearly, Scott Fullerton)
Tim and Scott reported on the state of negotiations to obtain evaluation copies 
of the product -  still in progress at the time of the meeting.

c) Krypto-tech and Entrust (Dawn Harris)
Dawn was not at the meeting to report.

d) Sterling Software (Dave Leonard)
Sterling, as it turns out, uses a symmetric algorithm.  For this reason the 
group agreed not to pursue this.

5 *RECONSIDERING OUR APPROACH*
Paul Logston suggested we might make more progress by sticking with *standards* 
and avoiding evaluating *products*.  If, for example, we all agreed to the 
S/MIME standard, then it would be up to each agency to work out the selection 
and purchase of products.
Discussion:
-	Does this assume an open standard?
-	There should be an adequate representation of products that support the 
standard.
-	Products that are compliant to the standard should be mutually compatible 
when it comes to encrypting, authenticating and decrypting.
We will discuss this further at the next meeting.

==================
*ELECTRONIC EXCHANGE LISTSERVE*
These minutes will go out via the Electronic Exchange listserve.  They can be 
viewed with a browser at the archive site http://lists.glhec.org/cl-elec-exch 
(case sensitive).  To subscribe to the listserve, send a message to 
cl-elec-exch-request@lists.glhec.org.  Put the word subscribe in the body of 
the message (You may make the subject anything you want).  To post to the 
listserve, send messages to cl-elec-exch@lists.glhec.org (You must first have 
subscribed).
--------------------------------
NEXT SCHEDULED MEETING:
Thursday 4/23/98 10a.m. central time.  The number to call is (800) 374-8567. 
When asked for the name of the conference, reply "CommonLine Electronic 
Exchange."   If asked for the host's name, reply "Scott Fullerton"
------------
Agenda

1) Report on CompuServe/AOL support for CBA using oldmail (Scott Fullerton)
2) Evaluation updates (evaluation team)
3) Purchase negotiation updates
a) RSA DSI (Brian Allison, Linda Laub (assuming she is available))
4) New products to consider (group)
5) Standard vs. Product (group)

------------------------------------------------------