After having a bit of drama at my work resulting in way too many email memos being sent and a project being delayed over a misunderstanding of a security related term I decided to hunt down a copy of RFC2828, which one of the parties in question had never seen.

Having done this it also occured to me how many debates here and other forums are over simple semantics... and since I happend to have it on hand now...

This document is the Internet Security Glossary and is really the closest thing to an offical IS security disctionary.

View attached.

catch