>>why would companies like Walmart use Drummond if it was not >>necessary and cost-effective?
Bob, you must be joking! YES it is cost-effective to them! At the expense of everyone else. They most likely got FREE software! Don't think that it's the best way for everyone just because that's the way it was done, just understand that it was the best way for the people that made the decisions. >>In many RFCs, the tests are published and don't need expensive certification. >>Perhaps HTTP or ftp is a simplistic comparison, but they are easy to test >>without expensive 'certification', and either work correctly, or do not. No doubt Earl. That's how RFCs work. Building on one another. The AS2 specs reference other RFCs, so Earl- you should setup a group to verify them too. (I believe this was already mentioned by someone.) Travis- -----Original Message----- From: Bob Frank [mailto:[EMAIL PROTECTED] Sent: Thursday, August 04, 2005 10:52 AM To: [email protected] Cc: Ricardo Johnson Subject: Re: [EDI-L] Re: <Tech> Sears, Penney's AS2 usage Thanks to all for the candid responses to my post. 1. S/MIME for EDI (EDIINT) and ASx were created and implemented by experienced EDI and Internet people who fully understood X12.58. They found X12.58 not to be optimal for open Internet use. X12.58 was designed before Internet options were available. Naturally, X12.58 was sponsored by VAN advocates based on the traditional VAN infrastructures and business interests. I was among the group that pioneered Internet EDI using PEM and S/MIME messaging in 1989-1993 (before the browsers) and I still advocate that a mix of S/MIME and ASx provides the best value options to the broadest range of groups. 2. When any type of effective security is implemented, some type of testing/verification is needed--regardless of the technology/techniques involved. The issue is mutual trust by the community of trading parties, and that requires both initial validation and periodic re-validation to ensure it is working as required. The time, tools, and personal expertise needed to do competent testing and/or certification can be done internally or by third parties, but the functions are not free. 3. Having worked for the government for many years, I much prefer that small, private companies be the source of testing and certification functions for things like security and transaction integrity. But, without market competition, the price is bound to be too high. Where are the cheaper alternatives to Drummond's ASx certification services, and why would companies like Walmart use Drummond if it was not necessary and cost-effective? Is anyone from Walmart willing to comment on this? Robert Frank (Retired EDI Consultant) --- Ricardo Johnson <[EMAIL PROTECTED]> wrote: > > Not only is the idea of 'certification' by a private > consultant/group completely absurd, but the whole > ASx standard itself is highly questionable: Why > would you want to wrap EDI envelopes with MIME > envelopes, secure them with S/MIME (thus encryting > EDI IDs and qualifiers), and acknowledge receipt of > MIME evelopes (disrigarding their EDI content), when > you can accomplish all that and much more with EDI > security (X12.58 or EDIFACT) and acknowledgements. > EDI security allows for fully secured and > acknowledged exchanges (acknowledging EDI content > and conformance) regardles of the communications > media and protocol (because EDI IDs and qualifiers > are left unencrypted). > > I don't know whether Drummond has any international > acceptance or compliance (other than Wal-Mart). But > EDI security is used extensively in Finance, > Customs, and Invoicing in Canada, Latin America, > Australia, Europe and Asia. Even most US Banks have > been using X12.58 for years. EDI security has no > cost for 'certification' and the technology is > better suited for EDI transactions. Perhaps volume > and competition could make it much less expensive > than ASx. > > So, why re-invent the wheel only to come up with a > less efficient version? You may want to ask the > Drummond Group. You may also want to ask them why > the $60K initial + $25K/year fees ? > > Ricardo > > > --------------------------------- > Start your day with Yahoo! - make it your home page > > > [Non-text portions of this message have been > removed] > > ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs . Please use the following Message Identifiers as your subject prefix: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC> Access the list online at: http://groups.yahoo.com/group/EDI-L Yahoo! Groups Links ------------------------ Yahoo! Groups Sponsor --------------------~--> <font face=arial size=-1><a href="http://us.ard.yahoo.com/SIG=12hje9qb2/M=362131.6882499.7825260.1510227/D=groups/S=1705005582:TM/Y=YAHOO/EXP=1123272187/A=2889191/R=0/SIG=10r90krvo/*http://www.thebeehive.org ">Get Bzzzy! (real tools to help you find a job) Welcome to the Sweet Life - brought to you by One Economy</a>.</font> --------------------------------------------------------------------~-> . Please use the following Message Identifiers as your subject prefix: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC> Access the list online at: http://groups.yahoo.com/group/EDI-L Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/EDI-L/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
