IPP Mail Archive: IPP> RE: IPP security

IPP> RE: IPP security

From: Carl (carl@manros.com)
Date: Fri Feb 28 2003 - 20:25:58 EST

  • Next message: Carl: "IPP> I-D ACTION:draft-ietf-ipp-not-spec-11.txt"

    Ian,

    The latest IPP specifications in RFC 2910 and 2911 contain strong
    recommendations to support SSL3 or TLS in IPP implementations.

    However, you need to check with your suppliers of IPP client and IPP
    Printers that they have indeed implemented it, or make your own tests to
    verify it.

    If TLS and/or SSL3 is implemented, it should support mutual authentication
    of IPP Client and IPP Printer and allow you to encrypt the whole print job.

    I am also copying your message to the IPP WG distribution list, so that
    vendors of IPP Clients and Printers can reply to you directly and let you
    know which of their products support your needs.

    Regards,

    Carl-Uno Manros
    IETF IP WG Chair

    > -----Original Message-----
    > From: Ian Glinka [mailto:ian@mleco.com]
    > Sent: Friday, February 28, 2003 10:10 AM
    > To: carl@manros.com
    > Subject: IPP security
    >
    >
    > I work for a company where we need to set up secure internet printing. We
    > have it all set up and it works great, however... we're not
    > really sure what
    > we're sending isn't vulnerable to some savvy hacker running a packet
    > sniffer. The print jobs contain confidential patient information, and we
    > need to be absolutely certain it could not be intercepted.
    >
    > Does IPP have SSL embedded in its code? Does it need to be enabled? Is
    > there any way to send an encrypted print job?
    >
    > Thanks!
    > Ian
    >



    This archive was generated by hypermail 2b29 : Fri Feb 28 2003 - 20:26:46 EST