Ian,
The latest IPP specifications in RFC 2910 and 2911 contain strong
recommendations to support SSL3 or TLS in IPP implementations.
However, you need to check with your suppliers of IPP client and IPP
Printers that they have indeed implemented it, or make your own tests to
verify it.
If TLS and/or SSL3 is implemented, it should support mutual authentication
of IPP Client and IPP Printer and allow you to encrypt the whole print job.
I am also copying your message to the IPP WG distribution list, so that
vendors of IPP Clients and Printers can reply to you directly and let you
know which of their products support your needs.
Regards,
Carl-Uno Manros
IETF IP WG Chair
> -----Original Message-----
> From: Ian Glinka [mailto:ian at mleco.com]
> Sent: Friday, February 28, 2003 10:10 AM
> To: carl at manros.com> Subject: IPP security
>>> I work for a company where we need to set up secure internet printing. We
> have it all set up and it works great, however... we're not
> really sure what
> we're sending isn't vulnerable to some savvy hacker running a packet
> sniffer. The print jobs contain confidential patient information, and we
> need to be absolutely certain it could not be intercepted.
>> Does IPP have SSL embedded in its code? Does it need to be enabled? Is
> there any way to send an encrypted print job?
>> Thanks!
> Ian
>