Was looking around the community if there were and SDO or Trade Organization updates in general on these topics.
Somewhat complicated answer...
Both SMI-S and CDMI have specified requirements associated with the implementation of SSL and TLS. Unfortunately, these requirements are for somewhat ancient versions of these protocols. To address this problem, the SNIA Security Technical Work Group (TWG) began working on a set of recommendations that it intended to provide to other SNIA activities when these activities leveraged SSL/TLS in future specifications. After the SNIA Technical Council learned of the Security TWG activity, they changed the adventure to the following:
From a schedule perspective, SNIA will probably be done with its TLS specification and send it off to ISO late in 2013. The SMI-S and CDMI changes will probably begin showing up in the next 12-36 months.
The latest discussion on this topic has to do with specific cipher suites the TLS v1.2 compliant products must implement versus what they are encouraged to implement. As currently written, the following is the language associated with cipher suites:
Recent dialogue within SNIA (including feedback from the TCG) has the following under consideration:
It seems likely that one or two PSK cipher suites will end up being added because it allow an implementation to sidestep the whole mess associated with digital certificates.
Retrieving data ...