Path: utzoo!utgpu!utstat!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!ucbvax!GATEWAY.MITRE.ORG!hal From: hal@GATEWAY.MITRE.ORG (Hal Feinstein) Newsgroups: comp.protocols.tcp-ip Subject: IP access control Message-ID: <8902241600.AA11112@gateway.mitre.org> Date: 24 Feb 89 16:00:12 GMT Sender: daemon@ucbvax.BERKELEY.EDU Organization: The Internet Lines: 8 Who knows if anything was/is/will be done to permit what DoD people call "discretionary" access control at the IP level. Forms include "filtering" based on host identity (address), host membership in a discretionary access control group, member of a subnet (perhaps via the IPSO and an RSA-like certificate). I'm told that the new thing for all sorts of access control problems is RSA-like certificates. Hope we can stand the overhead.