Re: [98attendees] Tussle issue in plenary

Stephane Bortzmeyer <bortzmeyer+ietf@nic.fr> Sat, 01 April 2017 19:45 UTC

Return-Path: <bortzmeyer+ietf@nic.fr>
X-Original-To: 98attendees@ietfa.amsl.com
Delivered-To: 98attendees@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C1481292D3 for <98attendees@ietfa.amsl.com>; Sat, 1 Apr 2017 12:45:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K7RE9E2iMCGD for <98attendees@ietfa.amsl.com>; Sat, 1 Apr 2017 12:45:46 -0700 (PDT)
Received: from mail.bortzmeyer.org (aetius.bortzmeyer.org [217.70.190.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 674F0128D19 for <98attendees@ietf.org>; Sat, 1 Apr 2017 12:45:46 -0700 (PDT)
Received: by mail.bortzmeyer.org (Postfix, from userid 10) id C2BA631C7E; Sat, 1 Apr 2017 21:45:43 +0200 (CEST)
Received: by godin (Postfix, from userid 1000) id 12594EC0E09; Sat, 1 Apr 2017 21:45:32 +0200 (CEST)
Date: Sat, 01 Apr 2017 14:45:32 -0500
From: Stephane Bortzmeyer <bortzmeyer+ietf@nic.fr>
To: "Vinicius Fortuna [vee-NEE-see.oos]" <fortuna@google.com>
Cc: Stephen Farrell <stephen.farrell@cs.tcd.ie>, Bron Gondwana <brong@fastmail.fm>, 98attendees@ietf.org
Message-ID: <20170401194532.GA3337@laperouse.bortzmeyer.org>
References: <tencent_4BA31A857FEA40E27003B548@qq.com> <1490942587.113767.929512208.3648B1DF@webmail.messagingengine.com> <2440f643-2a9a-f205-37be-398aa650eb58@cs.tcd.ie> <CAJVAGYgjZb_dCMZ=1KoL4Ypg5zt3WiNCKgs=mHzjH3WvVsfHJQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <CAJVAGYgjZb_dCMZ=1KoL4Ypg5zt3WiNCKgs=mHzjH3WvVsfHJQ@mail.gmail.com>
X-Transport: UUCP rules
X-Operating-System: Ubuntu 16.04 (xenial)
X-Charlie: Je suis Charlie
User-Agent: Mutt/1.5.24 (2015-08-30)
Archived-At: <https://mailarchive.ietf.org/arch/msg/98attendees/Ij38nWgPdfMdu5gnlV9Rro0uJ-w>
Subject: Re: [98attendees] Tussle issue in plenary
X-BeenThere: 98attendees@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Mailing list of IETF 98 attendees that have opted in on this list." <98attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/98attendees>, <mailto:98attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/98attendees/>
List-Post: <mailto:98attendees@ietf.org>
List-Help: <mailto:98attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/98attendees>, <mailto:98attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Apr 2017 19:45:48 -0000

On Fri, Mar 31, 2017 at 04:37:59PM +0000,
 Vinicius Fortuna [vee-NEE-see.oos] <fortuna@google.com> wrote 
 a message of 138 lines which said:

> If two parties want and explicit opt to add a third party to their
> communication, the network should allow them to do it.

I don't see how the network could *prevent* it, so this argument seems
a strawman. If you want to send a copy of your emails to the NSA, or a
copy of the HTTPS traffic in clear to a middlebox, open a TCP
connection to this 3rd-party and send()

> Whether previous proposals were bad, that's not a reason to give
> up. There are so many brilliant people at IETF that I'm sure a good
> solution can be achieved.

I don't want to destroy optimism, or to pretend that the IETF
participants are not extra-bright, but I seriously doubt our
collective abilities to *weaken* a complicated and brittle protocol
like TLS without breaking it in one way or the other. Look at all the
security problems with TLS for a proof.

> that cannot happen if the attitude is to dismiss attempts without
> even talking.

Well, it's like IPv10. We cannot reopen every day questions that have
been closed and well closed by previous attempts.