Thanks to all for the candid responses to my post.
1. S/MIME for EDI (EDIINT) and ASx were created and
implemented by experienced EDI and Internet people who
fully understood X12.58. They found X12.58 not to be
optimal for open Internet use. X12.58 was designed
before Internet options were available. Naturally,
X12.58 was sponsored by VAN advocates based on the
traditional VAN infrastructures and business
interests. I was among the group that pioneered
Internet EDI using PEM and S/MIME messaging in
1989-1993 (before the browsers) and I still advocate
that a mix of S/MIME and ASx provides the best value
options to the broadest range of groups.
2. When any type of effective security is implemented,
some type of testing/verification is
needed--regardless of the technology/techniques
involved. The issue is mutual trust by the community
of trading parties, and that requires both initial
validation and periodic re-validation to ensure it is
working as required. The time, tools, and personal
expertise needed to do competent testing and/or
certification can be done internally or by third
parties, but the functions are not free.
3. Having worked for the government for many years, I
much prefer that small, private companies be the
source of testing and certification functions for
things like security and transaction integrity. But,
without market competition, the price is bound to be
too high. Where are the cheaper alternatives to
Drummond's ASx certification services, and why would
companies like Walmart use Drummond if it was not
necessary and cost-effective? Is anyone from Walmart
willing to comment on this?
Robert Frank
(Retired EDI Consultant)
--- Ricardo Johnson <[EMAIL PROTECTED]> wrote:
>
> Not only is the idea of 'certification' by a private
> consultant/group completely absurd, but the whole
> ASx standard itself is highly questionable: Why
> would you want to wrap EDI envelopes with MIME
> envelopes, secure them with S/MIME (thus encryting
> EDI IDs and qualifiers), and acknowledge receipt of
> MIME evelopes (disrigarding their EDI content), when
> you can accomplish all that and much more with EDI
> security (X12.58 or EDIFACT) and acknowledgements.
> EDI security allows for fully secured and
> acknowledged exchanges (acknowledging EDI content
> and conformance) regardles of the communications
> media and protocol (because EDI IDs and qualifiers
> are left unencrypted).
>
> I don't know whether Drummond has any international
> acceptance or compliance (other than Wal-Mart). But
> EDI security is used extensively in Finance,
> Customs, and Invoicing in Canada, Latin America,
> Australia, Europe and Asia. Even most US Banks have
> been using X12.58 for years. EDI security has no
> cost for 'certification' and the technology is
> better suited for EDI transactions. Perhaps volume
> and competition could make it much less expensive
> than ASx.
>
> So, why re-invent the wheel only to come up with a
> less efficient version? You may want to ask the
> Drummond Group. You may also want to ask them why
> the $60K initial + $25K/year fees ?
>
> Ricardo
>
>
> ---------------------------------
> Start your day with Yahoo! - make it your home page
>
>
> [Non-text portions of this message have been
> removed]
>
>
____________________________________________________
Start your day with Yahoo! - make it your home page
http://www.yahoo.com/r/hs
------------------------ Yahoo! Groups Sponsor --------------------~-->
<font face=arial size=-1><a
href="http://us.ard.yahoo.com/SIG=12hith3vg/M=362335.6886445.7839731.1510227/D=groups/S=1705005582:TM/Y=YAHOO/EXP=1123191558/A=2894361/R=0/SIG=13jmebhbo/*http://www.networkforgood.org/topics/education/digitaldivide/?source=YAHOO&cmpgn=GRP&RTP=http://groups.yahoo.com/";>In
low income neighborhoods, 84% do not own computers. At Network for Good, help
bridge the Digital Divide!</a>.</font>
--------------------------------------------------------------------~->
.
Please use the following Message Identifiers as your subject prefix: <SALES>,
<JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC>
Access the list online at: http://groups.yahoo.com/group/EDI-L
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/EDI-L/
<*> To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
