OASIS Open

Quantum Corporation

Modify KMIP specification to allow the client to inform the server whether or not it will accept mutated attributes.

I would prefer that the server not be allowed to mutate attributes on its own. To accommodate clients that may be making 'outdated' requests per policy changes (e.g., requesting a 1024-bit key when 2048-bit is now required), I would suggest allowing clients to request 'minimums' (i.e., >= type requests). That accommodates both the case of needing to be specific (and failing if not met), and the case of needing flexibility. This is slightly different than a client informing the server it is able to mutate, in that it provides the server some guidance on the allowable mutation. But this poll choice seemed closest.