<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2/13/2013 9:46 AM, Nate Reller
wrote:<br>
</div>
<blockquote
cite="mid:1360777588.61953.YahooMailNeo@web163801.mail.gq1.yahoo.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div style="color:#000; background-color:#fff; font-family:times
new roman, new york, times, serif;font-size:12pt">
<div>Our intent was not to limit which encryption algorithms to
use or to propose a minimum standard. We needed to pick a
default implementation to use for the Grizzly release. We did
not have enough time to make the algorithm configurable, so we
needed to pick a default for the release.</div>
<div><br>
In the future we would like to support many different
algorithms and key sizes. We are imagining the user inputting
which algorithm and key size they would like to use via the
dashboard. The administrators of the cloud would be
responsible for configuring the dashboard and other components
to report which encryption algorithms are available. This
will depend upon their cloud, and the encryption algorithm and
key sizes will likely be dictated by the features supported by
the compute nodes.</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
times new roman,new york,times,serif; background-color:
transparent; font-style: normal;"><br>
-Nate</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family:
times new roman,new york,times,serif; background-color:
transparent; font-style: normal;"><br>
</div>
</div>
</blockquote>
Something like this should always be pluggable, even if it requires
editing configuration files.<br>
Dashboard selection would also be nice, but would presume providing
some text about what<br>
the options were.<br>
<br>
In any case, the general rule of thumb I have followed on security
issues is to allow the user<br>
a great deal of flexibility, but to default high. Users who do not
know how to configure their<br>
security settings probably need them to be set high.<br>
<br>
</body>
</html>