5. Interconnection

5.1. Technical policy statements

5.1.1. Networks

Agencies are to interconnect networks using TCP/IP.

IPv4 is acceptable for existing implementations. The e-GIF policy is to migrate to IPv6 when there is competitive support for IPv6 in mainstream network and application products. A co-existence approach is recommended and IPv4 will endure for some time. Our advice is to begin to plan for IPv6 integration and to build the need for co-existence of IPv4 and IPv6 into current procurements. [ Wording adapted from UK e-GIF, Version 3 at express request of contributing agencies. ]

5.1.2. Mail

Agencies will use SMTP to support email.

5.1.3. Directory

Agencies that require directory interconnection are to use LDAP v 3.0 for new inter-agency initiatives, while maintaining backward compatibility with LDAP v2.0.

Agencies will use DNS for Internet name-to-IP resolution.

Notes: Agencies that require interconnection are to ensure that they are aware of the S.E.E. activities and recommendations concerning Directories.

5.1.4. Authentication

Agencies that require Authentication for electronic transactions between agencies are to be aware of and adhere to directives and recommendations from the S.E.E. project. Refer to S.E.E. Public Key Infrastructure (PKI).

5.1.5. Security

It is recommended that protectively marked data be handled and transmitted in accordance with the provisions of the Department of Prime Minister and Cabinet publication Security in the Government Sector

Where data exchanges require encryption, SSL v 3.0 128bit is the minimum recommendation for transport security. Where data exchange is to be secured with digital key technology, agencies should adhere to the S.E.E. PKI requirements, i.e. using X.509 digital certificates.

Secure e-mail transfers should adhere to the S.E.E. mail specifications. Also, refer to the data exchange section of this document for current S/MIME specifications.

5.1.6. File Transfer

Standards for data transfer between agencies, including database interconnectivity, across networks are HTTP and, for large transfers, FTP. Where FTP is used, restart and recovery facilities are to be used.

5.2. Standards and guidelines