Re: [Add] [Ext] Updated charter proposal for ADD

[Patrick McManus <[e-mail]>]

Discovery requires authentication - otherwise the encryption is just snake
oil security. everyone wants to apply policy (even if the policy is
'unfiltered') and you can't deliver that policy without authentication. And
you can't seriously offer confidentiality without authentication either.
The proposed charter is clear on this. A charter that allowed the creation
of a an unauthenticated "secure" protocol in 2020 would fail to recognize
what is possible and really ought to be irrelevant.

This, btw, does not rule out unauthenticated network mechanisms (e.g. dhcp
or pvd) as transports any more than TLS rules out unauthenticated TCP. It
just means you need to layer something else on top if you go that way (e.g.
an out of band trust root can sign a connection without caring about the
domain name as the webPKI would..)

the role of opportunistic is in ratcheting legacy systems forward - this is
a new system and should be held to a modern bar.