Dear Hannes! #include <disclaimer.h> /* this is my personal view, not necessarily ACOnet's position */
Subject: Re: DANTE CERT Service From: Hannes Lubich <lubich@chx400.switch.ch>
Hmmm, I would rather see a coordinated action here, rather than just one or the other organisation "taking over" a function, regardless of their other services. Wouldn't that be a classical scenario for a Call for Tender?
...well, from the point of view of the customers "asking" DANTE to provide this service, it's probably a coordinated action, isn't it?
Another thought: as the person responsible for the SWITCH CERT, my impression is that one of the foundations of running a CERT/CC is trust (ie.e. a customer has to trust me that I will handle his/her security problem in a knowledgeable AND confidential way, also a CERT provider has to trust his/her customers to a certain degree). Such trust can only be built over time, so an European CERT/CC should in my opinion be based on one or more existing national CERTs, with that particular experience in place (and I'm not only talking about purely technical experience, see above).
I fully agree with your line of thoughts! However the trust aspect and confidentiality somehow contradicts the idea of putting up a (commercial) tendering process.. As an aside, I don't see DANTE's position in this at all, given the fact that the service is proposed to be subcontracted. Why dont' the national CERTs get directly in touch with the group that actually provides the coordination/functionality (I do not use the term "service" here by purpose)? Or have TERENA do the "tendering" (more like asking for qualified volunteers) and then provide the financial clearinghouse? But maybe we again "need" an "appropriately coloured management" somewhere along the path... Yours, Wilfried. -------------------------------------------------------------------------- Wilfried Woeber : e-mail: Woeber@CC.UniVie.ac.at Computer Center - ACOnet : Vienna University : Tel: +43 1 4065822 355 Universitaetsstrasse 7 : Fax: +43 1 4065822 170 A-1010 Vienna, Austria, Europe : NIC: WW144 --------------------------------------------------------------------------
...well, from the point of view of the customers "asking" DANTE to provide this service, it's probably a coordinated action, isn't it?
If this is the case, that's fine with me. However, I've spoken to too many people being surprised by the DANTA announcement, so it didn't appear *that* coordinated.
I fully agree with your line of thoughts! However the trust aspect and confidentiality somehow contradicts the idea of putting up a (commercial) tendering process..
It's not necessarily more commercial than the DANTE offering. At least, it will give interested parties a chance to participate on equal terms.
Or have TERENA do the "tendering" (more like asking for qualified volunteers) and then provide the financial clearinghouse?
That's what I thought would happen, and such a Call for Tender has indeed been prepared by TERENA, as far as I know, which has given me the feeling that the TERENA activity in that area was pre-empted by DANTE's announcement of a service. Maybe somebody from TERENA and/or DANTE cares to comment about that? At least one of your customers is a bit confused about these semi- or fully-parallel CERT/CC activities, so please clarify the situation! CHeers --HaL -- /==========================================================================\ | Hannes P. Lubich Voice: +41 1 268 15 55 (direct) 15 50 (line) | | SWITCH Head Office Fax : +41 1 268 15 68 | | Limmatquai 138 Mail : lubich@switch.ch | | CH-8001 Zurich Mail : S=lubich; O=switch; P=switch; A=arcom; C=ch; | | Switzerland Phys : 47 23'N, 8 33' E, GMT + 1 | | More : "finger @macHaL.switch.ch" (if switched on) | \==========================================================================/
...well, from the point of view of the customers "asking" DANTE to provide this service, it's probably a coordinated action, isn't it?
If this is the case, that's fine with me. However, I've spoken to too many people being surprised by the DANTA announcement, so it didn't appear *that* coordinated.
Hmmmm. Exactly *who* then asked DANTE to set up this CERT/CC ? Eric Luyten, BELNET.
...well, from the point of view of the customers "asking" DANTE to provide this service, it's probably a coordinated action, isn't it?
If this is the case, that's fine with me. However, I've spoken to too many people being surprised by the DANTA announcement, so it didn't appear *that* coordinated.
I fully agree with your line of thoughts! However the trust aspect and confidentiality somehow contradicts the idea of putting up a (commercial) tendering process..
It's not necessarily more commercial than the DANTE offering. At least, it will give interested parties a chance to participate on equal terms.
Or have TERENA do the "tendering" (more like asking for qualified volunteers) and then provide the financial clearinghouse?
That's what I thought would happen, and such a Call for Tender has indeed been prepared by TERENA, as far as I know, which has given me the feeling that the TERENA activity in that area was pre-empted by DANTE's announcement of a service. Maybe somebody from TERENA and/or DANTE cares to comment about that? At least one of your customers is a bit confused about these semi- or fully-parallel CERT/CC activities, so please clarify the situation! CHeers --HaL -- /==========================================================================\ | Hannes P. Lubich Voice: +41 1 268 15 55 (direct) 15 50 (line) | | SWITCH Head Office Fax : +41 1 268 15 68 | | Limmatquai 138 Mail : lubich@switch.ch | | CH-8001 Zurich Mail : S=lubich; O=switch; P=switch; A=arcom; C=ch; | | Switzerland Phys : 47 23'N, 8 33' E, GMT + 1 | | More : "finger @macHaL.switch.ch" (if switched on) | \==========================================================================/
participants (4)
-
Eric.Luyten＠belnet.be -
Hannes Lubich -
Peter2 -
Wilfried Woeber, UniVie/ACOnet