To: ToySoldier who wrote (28488 ) 10/6/1999 11:58:00 PM From: Scott C. Lemon Respond to of 42771
Hello ToySoldier, > The NAT does not play any dangerous role when it comes to true > e-commerce transaction where non-repudiation is designed into the > conversation (i.e. digital certificates). It simply acts as a > middleman - IP be damned - and assists in carrying the secured > transaction conversation from end-to-end. I will say that some transactions of this type *can't* be done over NAT. For example, if you try to initiate a secure VPN session from you work station, through NAT, to the server, it will not work. This is because the workstation who initiates the connection has it's IP address in the credentials. Since the server see's the packets coming from the NAT machine, the IP address doesn't match ... so no VPN. The NAT machine would have to be the endpoint of the VPN ... > But this whole conversation did bring up a couple things in my > head: Uh oh ... conspiracy theory ... ;-) > 1) Why would smart, energetic, well respected, driven people like > you and Stone and others leave a company that APPEARS to be on the > verge of reclaiming its glory in the industry via Directory > Services? Ouch! You group me with him? > I put myself in your shoes for a minute and thought, I would leave > for two reasons: Ether I got a MUCH better opportunity or offer I > just could not refuse, or, I could see fundamental cracks in the > organization that are not being addressed or cannot be addressed by > the organization. I know you can't speak for Stone, but you might > want to speak for yourself - not that you have to. So the third reason is that I am a freak of nature ... I like to do a lot of things. I like to build things. And I like to build a lot of things that people just can't understand. I like to work on futures that sometimes don't make sense to the average person ... and sometimes don't seem to relate to the business at hand. And so instead of spending my time trying to explain this to people who aren't able to listen, I find people who want to pay me for those ideas, and allow me the freedom to experiment with them. I do this for the fun of it ... if it's no longer fun ... if it gets too serious to the people around me ... then I like to go elsewhere to play. ;-) And I really don't like big huge political organizations where the *real* rewards don't often go to the troops in the trenches. There are numerous people working hard at Novell that are seldom recognized (like the extremely talented group of digitalme engineers! Yeah, I know one of you is reading this! ;-) yet should be. My partner at my last start-up taught me a lot. He once said that: "If the battle is lost, it is the fault of the General. If the battle is won, it was because of the troops!" There are a lot of middle management "Generals" at Novell that don't understand this fundamental rule ... > 2) That I have fallen for some of the hype in the NDS message from > Novell in that it does not have the answer - magic bullet - to some > basic situations or problems in the Internet (that other in the > industry also do not have). NDS is generally as good and the legacy > products that it has to service. It cannot enhance the security of > a service that does not want to be secured. Oops ... there you go ... magic bullet? You believe in magic bullets? ;-) Scott C. Lemon