Dorian.Selz | 12 Jan 1998 23:04
Picon

IJEM: Special Issue on Electronic Auctions (Vol.7 - No.4)

Apologies for cross-posting; please pass on to interested
colleagues and distribute to relevant lists.
_________________________________________________________

Dear Colleagues,

What is the rational behind auctions and what are the motives to
set-up electronic auctions on the Web, asks our Guest Editor Stefan
Klein, University of Muenster, Germany. He put together a special
issue (Vol.7 - No.4 / Winter '97/98) with highlights such as:

- AUCNET: Electronic Intermediary for Used-Car Transactions,
  by Ho Geun Lee, Yonsei University, Korea

- Auctions and Bidding on the Internet: An Assessment, by Efraim
  Turban, California State University Long Beach

- Experiences with  Electronic Auctions in the Dutch Flower
  Industry, by Eric van Heck, Erasmus University Rotterdam, The and
  Pieter M. Ribbers, Tilburg University, The Netherlands

Find the Table of Content below. The journal may be downloaded from
our Website (http://www.electronicmarkets.org). Please write to the
editor for hard copies (em.editors <at> netacademy.org).

The coming issues will deal with "Transactions in Electronic Markets"
(Spring Issue) and "Electronic Commerce in Europe" (Summer Issue).
See our Call for Papers at our Website
(http://www.electronicmarkets.org).

(Continue reading)

Rik Drummond | 21 Jan 1998 16:49

FW: EDIINT WG Minutes for the IETF Dec 98 Meeting


-----Original Message-----
From:	Rik Drummond [SMTP:drummond <at> onramp.net]
Sent:	Tuesday, January 20, 1998 2:39 PM
To:	cclark <at> ns.ietf.org
Subject:	EDIINT WG Minutes for the IETF Dec 98 Meeting

Minutes from the EDIINT WG Session at the IETF December 1997 Meeting

Rik Drummond, WG Chair, and Dale Moberg, Editor for the Secure EDI over 
HTTP Applicability Statement Draft, made presentations during the meeting.

Rik Drummond welcomed everyone and reviewed the WG status. Approximately 
20% of the 30 attendees had read the three WG Drafts.  We will submit the 
first two drafts to the Experimental RFC track as a holding action until 
the S/MIME issue is resolved one way or the other, since both drafts 
reference S/MIME.  There are three Internet Drafts now available.  A 
fourth, specific to the healthcare industry (HL7), is expected in January. 
The current drafts are: Requirements, Applicability Statement for Secure 
EDI over SMTP, and Applicability Statement for Secure EDI over HTTP.

Rik noted that Microsoft Exchange is still causing problems because or the 
way MIME / MAPI translations take place. It is not know if Exchange version 
5.5 fixes the problem.

Dale Moberg presented the status of the Secure EDI over HTTP Draft.  It 
follows closely the SMTP Draft, making only changes necessary to convert 
the SMTP-based recommendations to the HTTP protocol.  Dale noted that one 
of the problems he found in a test implementation of Secure EDI over HTTP 
is that the servers timeout if the response takes to long. Einar Stefferud 
(Continue reading)

Werner, James K | 21 Jan 1998 20:25
Picon

RE: EDIINT WG Minutes fo the IETF Dec 98 Meeting

imho, the "possible" need to timestamp EDI "transactions" is a complete
misstatement: timestamping is an *absolute* repeat *ABSOLUTE* (volume
added for emphasis) requirment - no waffling, no qualifications, no
'divide and conquer' strategies - timestamping is a must!.  

James K. Werner
The Boeing Company
PO Box 3707, #MS 6C-FH
Seattle, Wa. 98124-2207
phone: (425)237-6274  fax: (425)237-8510
email: james.werner <at> pss.boeing.com

Rik Drummond | 21 Jan 1998 21:52

RE: EDIINT WG Minutes fo the IETF Dec 98 Meeting

Then get involved and make it happen. How do you see this happening?  What would the process be and who would be involved?

Regards, Rik

-----Original Message-----
From:	Werner, James K [SMTP:James.Werner <at> PSS.Boeing.com]
Sent:	Wednesday, January 21, 1998 1:25 PM
To:	'ietf-ediint <at> imc.org'
Subject:	RE: EDIINT WG Minutes fo the IETF Dec 98 Meeting

imho, the "possible" need to timestamp EDI "transactions" is a complete
misstatement: timestamping is an *absolute* repeat *ABSOLUTE* (volume
added for emphasis) requirment - no waffling, no qualifications, no
'divide and conquer' strategies - timestamping is a must!.  

James K. Werner
The Boeing Company
PO Box 3707, #MS 6C-FH
Seattle, Wa. 98124-2207
phone: (425)237-6274  fax: (425)237-8510
email: james.werner <at> pss.boeing.com

Marc Blanchet | 22 Jan 1998 00:21
Picon

Timestamping

In the PKIX group, there is a draft on time stamping. 
(ftp://ftp.ietf.org/internet-drafts/draft-ietf-pkix-ipki5tsp-00.txt)
I was involved in the early work on it. This draft can give at least some
thoughts.  I would be interested in participating in the effort.

Regards, Marc.

>Then get involved and make it happen. How do you see this happening?  What
would the process be and who would be involved?
>
>Regards, Rik
>
>-----Original Message-----
>From:	Werner, James K [SMTP:James.Werner <at> PSS.Boeing.com]
>Sent:	Wednesday, January 21, 1998 1:25 PM
>To:	'ietf-ediint <at> imc.org'
>Subject:	RE: EDIINT WG Minutes fo the IETF Dec 98 Meeting
>
>imho, the "possible" need to timestamp EDI "transactions" is a complete
>misstatement: timestamping is an *absolute* repeat *ABSOLUTE* (volume
>added for emphasis) requirment - no waffling, no qualifications, no
>'divide and conquer' strategies - timestamping is a must!.  
>
>
>James K. Werner
>The Boeing Company
>PO Box 3707, #MS 6C-FH
>Seattle, Wa. 98124-2207
>phone: (425)237-6274  fax: (425)237-8510
>email: james.werner <at> pss.boeing.com
(Continue reading)

J. David MacDonald | 22 Jan 1998 02:25

Re: the "possible" need to timestamp EDI transactions

My first contribution to this group.

I think what we're talking about here a method to independently verify that
an EDI document was created on a certain date.

This would be well suited to a time-stamping service.  For instance, I use
Verisign's time-stamping service along with authenticode technology to sign
and date the executables that I distrubute.  What it really means is that
when I timestamp the executable and distribute it, I no longer have the
option to go back, change something, back-date my computer and sign it again
because the timestamp is supplied by Verisign, not by me. Changing anything
would invalidate the timestamp.  This keeps me honest!

The same thing applies to an EDI transactions.  We want an independent
source to verify that the document was in a certain state at a specific
time.

I can think of other situations as well.  If I'm late filing my B3
accounting documents to Customs, I will be fined even if they're
electronically lost or delayed by a 3rd party such as a VAN or ISP.  This
situation might change is I can prove that the document was prepared on a
certain date and timestamped by an independent 3rd party.

Of course, this brings up the subject of a reliable time-stamping service
capable of handling EDIINT type messages. None come to mind.

I guess the long and short of it is:  We need a place in the EDIINT
structure that can accomodate independent timestamps supplied by 3rd
parties.

(Continue reading)

Rik Drummond | 22 Jan 1998 15:56

RE: Timestamping

Thanks Marc...... I assume the reason for time-stamping is "non-repudiation of submission" and other
reasons. Correct?

Regards, Rik

-----Original Message-----
From:	Marc Blanchet [SMTP:Marc.Blanchet <at> viagenie.qc.ca]
Sent:	Wednesday, January 21, 1998 5:21 PM
To:	Rik Drummond; 'Werner, James K'; 'ietf-ediint <at> imc.org'
Subject:	Timestamping

In the PKIX group, there is a draft on time stamping. 
(ftp://ftp.ietf.org/internet-drafts/draft-ietf-pkix-ipki5tsp-00.txt)
I was involved in the early work on it. This draft can give at least some
thoughts.  I would be interested in participating in the effort.

Regards, Marc.

>Then get involved and make it happen. How do you see this happening?  What
would the process be and who would be involved?
>
>Regards, Rik
>
>-----Original Message-----
>From:	Werner, James K [SMTP:James.Werner <at> PSS.Boeing.com]
>Sent:	Wednesday, January 21, 1998 1:25 PM
>To:	'ietf-ediint <at> imc.org'
>Subject:	RE: EDIINT WG Minutes fo the IETF Dec 98 Meeting
>
>imho, the "possible" need to timestamp EDI "transactions" is a complete
(Continue reading)

Charles Bell | 22 Jan 1998 17:03

RE: the "possible" need to timestamp EDI transactions

<lurk-off>
check out www.surety.com, interesting approach to the digital notary 
service.  also, the us. postal service is rumored to be doing something 
here, but I haven't had time to check it out.
<lurk-on>

Best Regards,

Charlie Bell
Server Technologies Group, Inc.

-----Original Message-----
From:	J. David MacDonald [SMTP:davemac <at> ottawa.com]
Sent:	Wednesday, January 21, 1998 6:44 PM
To:	ietf-ediint <at> imc.org
Subject:	Re: the "possible" need to timestamp EDI transactions

My first contribution to this group.

I think what we're talking about here a method to independently verify that
an EDI document was created on a certain date.

This would be well suited to a time-stamping service.  For instance, I use
Verisign's time-stamping service along with authenticode technology to sign
and date the executables that I distrubute.  What it really means is that
when I timestamp the executable and distribute it, I no longer have the
option to go back, change something, back-date my computer and sign it 
again
because the timestamp is supplied by Verisign, not by me. Changing anything
would invalidate the timestamp.  This keeps me honest!
(Continue reading)

Dave Darnell | 22 Jan 1998 17:35

Re: the "possible" need to timestamp EDI transactions

I agree - good points made here by Dave MacDonald and others. 

IMHO - We need time-stamping in the EDIINT RFC. 

Regards,
Dave

At 08:25 PM 1/21/98 -0500, J. David MacDonald wrote:
>My first contribution to this group.
>
>I think what we're talking about here a method to independently verify that
>an EDI document was created on a certain date.
>
>This would be well suited to a time-stamping service.  For instance, I use
>Verisign's time-stamping service along with authenticode technology to sign
>and date the executables that I distrubute.  What it really means is that
>when I timestamp the executable and distribute it, I no longer have the
>option to go back, change something, back-date my computer and sign it again
>because the timestamp is supplied by Verisign, not by me. Changing anything
>would invalidate the timestamp.  This keeps me honest!
>
>The same thing applies to an EDI transactions.  We want an independent
>source to verify that the document was in a certain state at a specific
>time.
>
>I can think of other situations as well.  If I'm late filing my B3
>accounting documents to Customs, I will be fined even if they're
>electronically lost or delayed by a 3rd party such as a VAN or ISP.  This
>situation might change is I can prove that the document was prepared on a
>certain date and timestamped by an independent 3rd party.
(Continue reading)

Peter Yeatrakas | 22 Jan 1998 18:00

Re: Timestamping

>From my point of view (non technical), it is just a sound business
(best) practice, especially if there are any disagreements between
trading partners.  In the Automated Clearing House, the financial
community depends on something called settlement date (contained in the
file format), which while 24 hours long, is the key to when funds are
transfered, the key to the deadlines for submitting adjustments, and
tied to the obligations of the FI to it's customer, whether consumer or
corporate.  That date is MANDATORY, and similar to  Marc's ABSOLUTE
notion.  Financial institutions repackage EDI information along with the
funds transfer, so you can see that in the ACH world, the notion of
timestamping is absolutely critical.
Best regards,
Pete Yeatrakas

Rik Drummond wrote:
> 
> Thanks Marc...... I assume the reason for time-stamping is "non-repudiation of submission" and other
reasons. Correct?
> 
> Regards, Rik
> 
> -----Original Message-----
> From:   Marc Blanchet [SMTP:Marc.Blanchet <at> viagenie.qc.ca]
> Sent:   Wednesday, January 21, 1998 5:21 PM
> To:     Rik Drummond; 'Werner, James K'; 'ietf-ediint <at> imc.org'
> Subject:        Timestamping
> 
> In the PKIX group, there is a draft on time stamping.
> (ftp://ftp.ietf.org/internet-drafts/draft-ietf-pkix-ipki5tsp-00.txt)
> I was involved in the early work on it. This draft can give at least some
(Continue reading)


Gmane