<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<title>UC RE: [Sls-slp] Security, NGU and New TC services and there effect on
COP-1</title>
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Verdana;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
span.EmailStyle18
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:black;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext="edit">
  <o:idmap v:ext="edit" data="1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple>

<div class=Section1>

<p style='margin-left:.5in'><span lang=EN-GB style='font-size:10.0pt;
font-family:"Courier New"'>Where we disagree</span><span lang=EN-GB> </span><span
lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>is that the COP
isn't "broken" if you put the security afterwards and the security
layer fails its checks.</span><span lang=EN-GB> </span><span lang=EN-GB
style='font-size:10.0pt;font-family:"Courier New"'>This comes back to where the
COP/FARM has finished its job (to guarantee</span><span lang=EN-GB> </span><span
lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>delivery of
complete in</span><span lang=EN-GB> </span><span lang=EN-GB style='font-size:
10.0pt;font-family:"Courier New"'>sequence, error free commands). Our
disagreement was that I believe that the COP has finished when it hands the
command to the next process (whatever that is)</span><span lang=EN-GB> </span><span
lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>– in this</span><span
lang=EN-GB> </span><span lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>example
it is the security layer.</span><span lang=EN-GB> </span><span lang=EN-GB
style='font-size:10.0pt;font-family:"Courier New"'>You believe that the COP</span><span
lang=EN-GB> </span><span lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>has
not</span><span lang=EN-GB> </span><span lang=EN-GB style='font-size:10.0pt;
font-family:"Courier New"'>completing its job correctly if the next process or
processes throws the</span><span lang=EN-GB> </span><span lang=EN-GB
style='font-size:10.0pt;font-family:"Courier New"'>command</span><span
lang=EN-GB> </span><span lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>away
for another failure</span><span lang=EN-GB> </span><span lang=EN-GB
style='font-size:10.0pt;font-family:"Courier New"'>– in this case</span><span
lang=EN-GB> </span><span lang=EN-GB style='font-size:10.0pt;font-family:"Courier New"'>if
the security has failed.<o:p></o:p></span></p>

<p><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>This
is analogous to IPSec being above the link and network (IP) layers.  While IP
does not guarantee in-order delivery it does (sort of) guarantee that the
packet isn't clobbered (based on its weak checksum).  But IP is supposed to
simply hand-of what it thinks is a good packet to IPSec for security processing. 
IP washes its (virtual) hands of the packet and it becomes IPSec's responsibility
to pass it up to the next layer as "good" to to send it to the
bit-bucket because it didn't pass muster.<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Howie<o:p></o:p></span></p>

<div>

<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:black'>-----------------------<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Tahoma","sans-serif";
color:#002395'><o:p> </o:p></span></p>

<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:black'>Howard Weiss </span></b><span style='font-size:10.0pt;font-family:
"Verdana","sans-serif";color:black'><br>
</span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";
color:black'>Technical Director<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";
color:black'>SPARTA National Security Sector<br>
Cobham Analytic Solutions<br>
T: 443 430 8089<br>
F: 443 430 8238<br>
C: 410 261 1479<br>
howard.weiss@cobham.com<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Verdana","sans-serif";
color:#002395'><br>
</span><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";
color:black'>SPARTA, Inc., dba Cobham Analytic Solutions, 7110 Samuel Morse
Dr., Columbia MD 21046  <a href="http://www.sparta.com/"><span
style='font-family:"Times New Roman","serif";color:black'>www.sparta.com</span></a><br>
</span><span style='font-size:11.0pt;font-family:"Verdana","sans-serif";
color:blue'><br>
</span><b><span style='font-size:8.0pt;font-family:"Verdana","sans-serif";
color:#339900'>Please consider the environment before printing this email</span></b><span
style='font-size:8.0pt;font-family:"Verdana","sans-serif";color:blue'> <br>
<br>
</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p></o:p></span></p>

</div>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>

<p><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span></p>

</div>

</body>

</html>