OPC = Open Packaging Convention; it's the official standard name for zip files.



The attraction of an OPC solution is you can protect anything just as you can 
zip anything so it would generate a universal solution.



Both OOXML and ODF are widely used standards with multi-vendor support.   The 
reason to cited them as examples is that they have a documented file format 
with extension points we could use to build a solution.



I doubt the OOXML\ODF thing will go away just like pkix has cmc and cmp:)



Would you consider OPC a more neutral solution?



-----Original Message-----
From: Stephen Farrell [mailto:[email protected]]
Sent: Tuesday, April 19, 2011 2:40 PM
To: Trevor Freeman
Cc: [email protected]
Subject: Re: [plasma] Plasma and File protection Question





I've no idea what OPC is but I'd have thought that OOXML would likely be 
controversial - or have all the word processing types made up since the 
OOXML/ODF kerfuffle [1] of a few years ago?



S.



[1] http://en.wikipedia.org/wiki/Office_Open_XML#Standardization_process



On 19/04/11 22:19, Trevor Freeman wrote:

> Having agreed that files and are the conceptually the same as email

> from a policy access control perspective, there is one important distinction.

>

>

>

> Email has a standard mechanism to define multiple parts of a message

> to represent different aspects of the message i.e. MIME.

>

>

>

> We don't have that for files so we don't have a simple generic way to

> attach the extra metadata to a file.

>

>

>

> Some standard file formats have specific extension mechanisms we can

> use e.g. OOXML which would allow you to define a way to attach the

> plasma metadata to the file type in question.

>

>

>

> Alternatively there exist generic file container standards what can

> hold any combination of files and data e.g. OPC which would provide a

> generic solution for any file type.

>

>

>

> If we were to expand files for consideration with Plasma, which would

> be the best first step, a specific solution like OOXML or a generic

> solution such as OPC?

>

>

>

> *Dr Trevor Freeman*  Senior Security Strategist

>

> *End to End Trust Team

> <http://www.microsoft.com/mscorp/twc/endtoendtrust/default.mspx>*

>

> *Microsoft Trustworthy

> Computing<http://www.microsoft.com/mscorp/twc/default.mspx>*

>

>

>

>

>

> _______________________________________________

> plasma mailing list

> [email protected]<mailto:[email protected]>

> https://www.ietf.org/mailman/listinfo/plasma
_______________________________________________
plasma mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/plasma

Reply via email to