3 ms·

Why are they using MLS to describe this? That acronym has already been widely used. https://en.wikipedia.org/wiki/Multilevel_security https://en.wikipedia.org

Why are they using MLS to describe this? That acronym has already been widely used. https://en.wikipedia.org/wiki/Multilevel_security https://en.wikipedia.org/wiki/Multilevel_security https://csrc.nist.gov/glossary/term/multi_level_security https://csrc.nist.gov/glossary/term/multi_level_security https://gdmissionsystems.com/multilevel-security https://gdmissionsystems.com/multilevel-security https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security-enhanced_linux/mls https://access.redhat.com/documentation/en-us/red_hat_enterp... https://www.ibm.com/docs/SSLTBW_2.3.0/com.ibm.zos.v2r3.e0ze100/ch1.htm https://www.ibm.com/docs/SSLTBW_2.3.0/com.ibm.zos.v2r3.e0ze1...

lucideer 3y ago
This is a spec. Multi-level security is a high-level concept - and not one that has much technical definition - the Wikipedia article (while problematic / vague) even includes some thoughts on semantic overload. As someone who works in security, it's not something that comes up - specific frameworks, applications & implementations are more relevant. Avoiding every possible acronym clash in tech is not particularly viable today (and becomes less so daily). --- Meanwhile, in the context of IETF's work, the acronym is natural and intuitive: Transport/Multiplexed-Transport -vs- Message makes immediate sense to anyone working with security in the context of network protocols.
- anonymousiam 3y ago
  MLS is quite a bit more than a "high-level concept" -- it has been implemented and has been in use throughout the US Government for nearly two decades. https://link.springer.com/content/pdf/10.1007/978-3-031-02333-0_8.pdf https://link.springer.com/content/pdf/10.1007/978-3-031-0233... https://csrc.nist.rip/nissc/2000/proceedings/papers/206.pdf https://csrc.nist.rip/nissc/2000/proceedings/papers/206.pdf

lucideer 3y ago

This is a spec. Multi-level security is a high-level concept - and not one that has much technical definition - the Wikipedia article (while problematic / vague) even includes some thoughts on semantic overload. As someone who works in security, it's not something that comes up - specific frameworks, applications & implementations are more relevant. Avoiding every possible acronym clash in tech is not particularly viable today (and becomes less so daily). --- Meanwhile, in the context of IETF's work, the acronym is natural and intuitive: Transport/Multiplexed-Transport -vs- Message makes immediate sense to anyone working with security in the context of network protocols.

anonymousiam 3y ago
MLS is quite a bit more than a "high-level concept" -- it has been implemented and has been in use throughout the US Government for nearly two decades. https://link.springer.com/content/pdf/10.1007/978-3-031-02333-0_8.pdf https://link.springer.com/content/pdf/10.1007/978-3-031-0233... https://csrc.nist.rip/nissc/2000/proceedings/papers/206.pdf https://csrc.nist.rip/nissc/2000/proceedings/papers/206.pdf