RE: IP Address in the ACM (Was: Comments on Access Control Model - BNF)

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 10:59 AM 4/4/01 -0700, Paul Leach wrote:
>I hope that IP addresses as subjects are OPTIONAL, and that the security
>considerations section is appropriately negative on their security.
>
>In fact, I believe they should be a SHOULD NOT in the spec -- i.e., you
>must have good reason to believe that they are secure before you use
>them.

I concur.

I also note that DNS names have all the security concerns of
the IP Addresses they are derived from and the DNS system
used to generate them.