Internet Security Glossary, Version 2
RFC 4949

Approval announcement
Draft of message to be sent after approval:

From: The IESG <>
To: RFC Editor <>
Cc: The IESG <>, <>,
Subject: Re: Informational RFC to be: 

The IESG has no problem with the publication of 'Internet Security 
Glossary, Version 2' <draft-shirey-secgloss-v2-09.txt> as an 
Informational RFC. 

The IESG would also like the IRSG or RFC-Editor to review the comments in 
the datatracker 
related to this document and determine whether or not they merit 
incorporation into the document. Comments may exist in both the ballot 
and the comment log. 

The IESG contact person is Russ Housley.

A URL of this Internet-Draft is:

The process for such documents is described at

Thank you,

The IESG Secretary

Technical Summary

  This Glossary provides definitions, abbreviations, and explanations of
  terminology for information system security.  It is very long (300+
  pages).  It offers recommendations to improve the clarity of Internet
  documents.  The recommendations follow the principles that Internet
  documents should (a) use the same term or definition whenever the same
  concept is mentioned; (b) use terms in their plainest, dictionary
  sense; (c) use terms that are already well-established in open
  publications; and (d) avoid terms that either favor a particular
  vendor or favor a particular technology or mechanism over other,
  competing techniques that already exist or could be developed.

Working Group Summary

  This is an individual effort.  It is not affiliated with any IETF
  Working Group.

Protocol Quality

  The Security Directorate helped review this document.  Each member was
  assigned the task of reviewing several pages of the document.  The
  intent was to make sure that someone other than the author had looked
  at each definition.  Comments were provided by each reviewer; however,
  there was no attempt to reach consensus on each definition.

  This document was reviewed by Russ Housley for the IESG.


  This RFC is not a candidate for any level of Internet Standard.
  The IETF disclaims any knowledge of the fitness of this RFC for
  any purpose and notes that the decision to publish is not based on
  IETF review apart from IESG review for conflict with IETF work.
  The RFC Editor has chosen to publish this document at its
  discretion.  See RFC 3932 for more information.

Note to the RFC Editor

  The Abstract and the Introduction of this document include
  prescriptive language that is more appropriate in a BCP.  The
  IESG strongly encourages the RFC Editor to work with the author
  to come up with wording that does not imply an IETF concensus
  on the definitions in this document.