Tom,

> > If so, yes, both S/MIME and OpenPGP support this model.  
> However I'll
> > point oun that it is not a requirement that syslog work 
> that way; for
> > example RFC 3195 certainly has connections.
> >
> I'll look at those, thanks.  I agree syslog could be, perhaps 
> should be for
> meaningful security, but often at present is not, so I wanted 
> to see what
> security was
> possible with just one way communication

They use pre-shared secrets.

It's probably best if you look at syslog-sign, which provides the
necessary mechanisms for syslog. Please note that it still transmits
data in clear-text (which I consider a requirement to remain
backwards-compatible).

Rainer

_______________________________________________
Syslog mailing list
Syslog@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/syslog

Reply via email to