Based upon my own experience attempting to negotiate with vendors over
whether it is "good" or "bad" that they use Key 8 CSA in their code, and if
it was "bad", whether they would actually fix their code, this sledgehammer
is ABSOLUTELY REQUIRED.

Thank you, Jim.  Once again, you've made another huge improvement to the
z/OS platform!

Brian

On Fri, 20 Jul 2007 16:48:18 -0400, Jim Mulder wrote:

>  I still wanted to move to a default of NO quickly, as the
>slow progress in eliminating user key CSA convinced me that
>the sledgehammer approach was required.  Hopefully, having
>to explain to security auditors why use of product X requires
>overriding IBM's recommendation, default, and HealthChecker
>will be a sufficiently large sledgehammer.
>
>Jim Mulder   z/OS System Test   IBM Corp.  Poughkeepsie,  NY

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to