attachment-0001
Hi,<br><br>A PWG member company has prototyped the PWG HCD Health Attributes NAP Protocol Binding <br>with the following reported results:<br><br><br>"We did a prototype of NAP on an MFP in 2009-2010. The most recent
specs to which the prototype <br>was developed were
wd-idsattributes10-20100409.pdf and wd-ids-napsoh10-20100409.pdf. <br><br>We
tested using 802.1x, not the other protocols. We implemented all of
the mandatory attributes. <br><br>We didn't have any user apps or patches
installed, there was no PSTN, and forwarding wasn't supported <br>in the
device, so we didn't test the conditionally mandatory attributes. <br><br>We
didn't do any of the optional attributes. <br><div bgcolor="#FFFFFF">
<br>
It all worked well enough as a demonstration prototype.<br>
<br>
However, we did find an issue with HCD_Default_Password_Enabled:
which password (or passwords) <br>should be checked?<br>
<ul><li>If there are multiple administrative logins, should all be
checked? What if some of them are not <br>security-relevant? What if
some could be considered security-relevant but do not administer
any <br>of the settings that are covered by the health check?<br>
</li><li>If there are different passwords for different administrative
protocols (e.g., http, ssh, ...), should <br>all be checked?"</li></ul></div><br>Cheers,<br>- Ira (PWG Secretary)<br><br><br clear="all">Ira McDonald (Musician / Software Architect)<br>Chair - Linux Foundation Open Printing WG<br>
Secretary - IEEE-ISTO Printer Working Group<br>Co-Chair - IEEE-ISTO PWG IPP WG<br>Co-Chair - TCG Trusted Mobility Solutions WG<br>Chair - TCG Embedded Systems Hardcopy SG<br>IETF Designated Expert - IPP & Printer MIB<br>
Blue Roof Music/High North Inc<br><a style="color:rgb(51,51,255)" href="http://sites.google.com/site/blueroofmusic" target="_blank">http://sites.google.com/site/blueroofmusic</a><br><a style="color:rgb(102,0,204)" href="http://sites.google.com/site/highnorthinc" target="_blank">http://sites.google.com/site/highnorthinc</a><br>
mailto:<a href="mailto:blueroofmusic@gmail.com" target="_blank">blueroofmusic@gmail.com</a><br>Winter 579 Park Place Saline, MI 48176 734-944-0094<br>Summer PO Box 221 Grand Marais, MI 49839 906-494-2434<br>Temporary Cabin *** 2012 only *** 906-494-2523<br>
<div style="display:inline"></div><div style="display:inline"></div><div style="display:inline"></div><div></div><div></div><div></div><div></div><br>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.