SEC16 — Security: SECIOP

Summary: Severity: Yes
Security 1.5:
Issue: Interoperability. SECIOP needs an internet address designation.

The current specification says that SECIOP goes under GIOP and over IIOP.
This is misguided, as IIOP is really just a term for GIOP over TCP/IP.

SECIOP doesn"t really have to be over TCP/IP, but it might be helpful
to think of it that way. However, like SSL, we need away to separate
SECIOP over TCP/IP and GIOP over TCP/IP. If SECIOP cannot have it"s own
profile, since now ONE profile can represent multiple protocols, then we
need a way specify a different internet address (different port), but also
maybe a different interface card (multihomed hosts).

Close issue 2437 "SECIOP needs an internet address designation"