Re: [arch-d] [Model-t] Possible new IAB program on Internet trust model evolution

[Joachim Fabini <[e-mail]>]

Jari, Stephen, all,

I support the IAB initiative. As a detailed reply to some aspects
mentioned in the draft charter: imo
- it's needed that these threat/trust model activities find a home. The
IAB taking the lead can help in covering a wide variety of perspectives
(including aspects that some may consider research).
- the potential impact of the threat model on future activities is too
high to handle it within a closed group and/or side-meetings. Being open
for public participation and becoming more visible (by listing the
sessions in the program) can help to include perspectives of all
affected parties.
- the major challenge (imho) is an appropriate scope of the new model
while keeping it simple, usable and relevant for most of us (as your
draft and the charter both mention). Various areas/stakeholders/systems
may have conflicting views and priorities at
architectural/structural/protocol/security/privacy levels.
- An unbiased discussion/review on (explicit and, in particular,
implicit) prerequisites that RFC3552 relies on and if/how they changed
within the last 17 years may be a good start (fitting topic 2 of the
expected outputs).

At a technical level the term "compromised" (*) may benefit from a
refined perspective and definition. It sounds simple, but thinking of
group communications (multicast, broadcast) it becomes a challenge.

thanks
Joachim

PS: (*): or "compromisable"? The safe (realistic) assumption is to
consider any system to be vulnerable.

On 24/01/2020 12:49, Jari Arkko wrote:
> 
> The IAB are considering starting up a programme on Internet
> trust model evolution as described in the link at the bottom of this
> email.
> 
> We'd like to get feedback on that idea and the text. As you may
> be aware, in 2019 a number of documents were published on
> this topic and discussions held (on the mailing list, SAAG, side
> meeting at IETF-106, workshops, etc). There’s also a virtual
> meeting coming up on February 14th.
> 
> To be clear, any output from this program would be text offered 
> to the IETF for consideration - it is not within the IAB's remit, nor 
> that of an IAB program, to modify a BCP. Nonetheless, an IAB 
> program offers a good venue for this work, as it perhaps allows 
> for more focus on the evolving architecture aspect within this space.
> 
> The plan is for the new program to be entirely open for participation,
> similar to how the current work has already been. That is, the mailing
> list is open for all interested to join, meetings are open and listed
> in the public agendas. The IAB will find a chair or chairs for the
> group to stay organised.
> 
> There's no specific deadline for this, but the IAB will consider this
> further in the next few weeks, so if you could take a few minutes 
> to share your thoughts on this that'd be great.
> 
> https://github.com/intarchboard/model-t-charter/blob/master/model-t-charter-00.md
> https://www.iab.org/mailman/listinfo/model-t
> 
> Stephen & Jari
> 
> 

-- 
---------------------------------------
Dr. Joachim Fabini
Senior Scientist
Institute of Telecommunications
TU Wien
Gusshausstrasse 25/E389
A-1040 Vienna, Austria
Tel: [phone]
mailto: [e-mail]
---------------------------------------