attachment-0001
<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div>Section 3.3 Out of Scope<div><br></div><div>While we're not specifying a standard for any of the mechanisms or functionality in section 3.3, we do include a statement that impacts:</div><div><br></div><div>6. Data Protection Policies</div><div><br></div><div>For instance, in section 6, "Conformance Requirements", #2 and #3 deal specifically with items that would be included in a data protection policy</div><div><br></div><div>And in section 9 "Security Considerations", we again require integrity protection of the log information.</div><div><br></div><div>We may want to modify the "out of scope" section to state that we are placing requirements on data protection policies, but not including recommendations for a "soup to nuts" data protection policy for logging information (of course, "soup to nuts" may not be appropriate for the actual text, but hopefully you get the idea)</div><div><br></div><div>---------</div><div><br></div><div>By the way, the sentence in section 9 I'm referring to above is written as:</div><div><br></div><div><blockquote type="cite">
<div class="page" title="Page 24">
<div class="layoutArea">
<div class="column">
<ol start="485" style="list-style-type: none">
<li><p><span style="font-size: 10.000000pt; font-family: 'Arial'">Device MUST provide protection from alteration both on the device and when distributed outside </span><span style="font-family: Arial; font-size: 10pt; ">the device.</span></p><div><br></div></li></ol></div></div></div></blockquote>IMHO, this wording should be more specific….something like:</div><div><br></div><div>Imaging devices MUST provide integrity protection for log message data, both on the device, as well as when the log data is transported outside the device.</div><div><br></div><div>The original text doesn't explicitly state what might be altered.</div><div><br></div><div><br></div><div><br></div><div>Randy</div><div><br></div><div><br></div><div><br></div><div><br></div><div><div class="page" title="Page 24"><div class="layoutArea"><div class="column"><ol start="485" style="list-style-type: none"><li><p>On Nov 26, 2012, at 12:47 PM, "Murdock, Joe" <<a href="mailto:jmurdock@sharplabs.com">jmurdock@sharplabs.com</a>> wrote:</p></li></ol></div></div></div><div><br class="Apple-interchange-newline"><blockquote type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1"><p class="MsoNormal">All,<br>
<br>
[This PWG Last Call starts today Monday November 26, 2012 and ends Friday January 18, 2013 at 10pm US PST.]<br>
<br>
This is the formal announcement of the PWG Last Call for the PWG Log specification, located at:<br>
<br>
<span class="apple-tab-span"> </span><u><span style="color:blue"><a href="ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-ids-log10-20121112.pdf">ftp://</a><a href="ftp://ftp.pwg.org/pub/pwg/ids/wd/wd-ids-log10-20121112.pdf">ftp.pwg.org/pub/pwg/ids/wd/wd-ids-log10-20121112.pdf</a></span></u><br>
<br>
All required entries and values defined in this document have been prototyped by Apple. The IDS WG has completed extensive review of the various revisions of this document and an IDS WG last call.<br>
<br>
The PWG Process/3.0 requires that a quorum (30%) of PWG voting members must acknowledge a PWG Last Call (with or without comments), before any document can progress to PWG Formal Vote. This PWG Last Call is NOT a Formal Vote but it DOES require your review
acknowledgment.<br>
<br>
<br>
HOW TO RESPOND<br>
<br>
Send an email with *exactly* the following subject line format:<br>
Subject: <Company Name> has reviewed the PWG-Log specification and has [no] comments<br>
<br>
<br>
WHERE TO SEND YOUR RESPONSE<br>
<br>
Please send your response to *all* of the following email addresses (replacing "dot" with '.' and "at" with '@'):<br>
<br>
“ids "at" pwg "dot" org (IDS WG mailing list - you must be subscribed!)<br>
jmurdock "at" sharplabs "dot" com (Joe Murdock, IDS WG Chair)<br>
alan.sukert "at" xerox "dot" com (Alan Sukert, IDS WG Secretary)<o:p></o:p></p><p class="MsoNormal">msweet "at" apple "dot" com (Michael Sweet, PWG-Log Editor)<br>
<br>
Note that you must be subscribed to the IDS WG mailing list to send email there - otherwise your email will be silently discarded.<br>
<br>
Please do NOT simply reply to this note on the PWG-Announce list.<br>
<br>
Note: The PWG Definition of the Standards Development Process Version 3.0 is located at:<br>
<br>
<span class="apple-tab-span"> </span><a href="http://www.pwg.org/chair/membership_docs/pwg-process30.pdf">http://www.pwg.org/chair/membership_docs/pwg-process30.pdf</a><o:p></o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><o:p> </o:p></p><p class="MsoNormal"><span style="font-size:9.0pt">---------------------------------------<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">Joe Murdock<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">Principal Engineer and Researcher<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">Chair IEEE/ISTO Printer Working Group Imaging Device Security<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">Sharp Labs of America<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">5750 NW Pacific Rim Blvd<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">Camas, WA 98607<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt">(360) 817-7542<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size:9.0pt"><a href="mailto:jmurdock@sharplabs.com"><span style="color:blue">jmurdock@sharplabs.com</span></a><o:p></o:p></span></p><p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>--
<br>This message has been scanned for viruses and
<br>dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br>believed to be clean.
</div>
_______________________________________________<br>pwg-announce mailing list<br><a href="mailto:pwg-announce@pwg.org">pwg-announce@pwg.org</a><br>https://www.pwg.org/mailman/listinfo/pwg-announce<br></blockquote></div><br></div><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</body></html>