Re: [arch-d] IAB Statement on Encryption and Mandatory Client-side Scanning of Content

"Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net> Fri, 19 January 2024 17:20 UTC

Return-Path: <ietf@kuehlewind.net>
X-Original-To: architecture-discuss@ietfa.amsl.com
Delivered-To: architecture-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B025C14F6AB; Fri, 19 Jan 2024 09:20:05 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.905
X-Spam-Level:
X-Spam-Status: No, score=-1.905 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ryHfaAkzosp; Fri, 19 Jan 2024 09:20:01 -0800 (PST)
Received: from wp513.webpack.hosteurope.de (wp513.webpack.hosteurope.de [80.237.130.35]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7547C14F6AD; Fri, 19 Jan 2024 09:19:15 -0800 (PST)
Received: from dslb-002-206-239-216.002.206.pools.vodafone-ip.de ([2.206.239.216] helo=smtpclient.apple); authenticated by wp513.webpack.hosteurope.de running ExIM with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) id 1rQsWP-0005ql-8L; Fri, 19 Jan 2024 18:19:13 +0100
From: "Mirja Kuehlewind (IETF)" <ietf@kuehlewind.net>
Message-Id: <8793DF0E-8D0E-4FBA-A5CB-59EBBD150CB3@kuehlewind.net>
Content-Type: multipart/alternative; boundary="Apple-Mail=_B6DB2AC3-C90F-4AFD-9069-82876D2B0D84"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3731.700.6\))
Date: Fri, 19 Jan 2024 18:19:02 +0100
In-Reply-To: <CWXP265MB5153610FBB98A7B06AF81040C290A@CWXP265MB5153.GBRP265.PROD.OUTLOOK.COM>
Cc: "iab@iab.org" <iab@iab.org>, "architecture-discuss@ietf.org" <architecture-discuss@ietf.org>, S Moonesamy <sm+ietf@elandsys.com>
To: Andrew Campling <andrew.campling@419.consulting>
References: <170266952162.33107.14325064798861197261@ietfa.amsl.com> <6.2.5.6.2.20231216110256.18d0acd0@elandnews.com> <CWXP265MB5153610FBB98A7B06AF81040C290A@CWXP265MB5153.GBRP265.PROD.OUTLOOK.COM>
X-Mailer: Apple Mail (2.3731.700.6)
X-bounce-key: webpack.hosteurope.de;ietf@kuehlewind.net;1705684755;bf9ce8f5;
X-HE-SMSGID: 1rQsWP-0005ql-8L
Archived-At: <https://mailarchive.ietf.org/arch/msg/architecture-discuss/JfrtZ0QuApj3ht2OD7aXq2XhcYI>
Subject: Re: [arch-d] IAB Statement on Encryption and Mandatory Client-side Scanning of Content
X-BeenThere: architecture-discuss@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: open discussion forum for long/wide-range architectural issues <architecture-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/architecture-discuss>, <mailto:architecture-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/architecture-discuss/>
List-Post: <mailto:architecture-discuss@ietf.org>
List-Help: <mailto:architecture-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/architecture-discuss>, <mailto:architecture-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 19 Jan 2024 17:20:05 -0000

Dear Andrew,

We do not plan for any further document in this space. We understand and acknowledge in the statement the societal harms through the distribution of illegal content and criminal action on the Internet. However, these are challenging problems and it is the fact that there is no good technical solution available at this point in time, that causes the current discussion that the IAB wanted to create awareness about.

Mirja


> On 18. Dec 2023, at 01:44, Andrew Campling <andrew.campling@419.consulting> wrote:
> 
> At 8:08 PM 16-12-2023, S Moonesamy <sm+ietf@elandsys.com> wrote:
> 
>> I would like to commend the members of the IAB for acknowledging the concern about societal harms.  
> 
> The document states that "The IAB shares concerns about societal harms through the distribution of illegal content and criminal action on the Internet and recognizes the need to protect Internet users from such threats".  Whilst the document rules out the use of client-side scanning (a definition of which could usefully be added), it does not go on to indicate how the IAB recommends Internet users should be protected from such threats; is there a plan to produce a separate document that addresses this important issue?
> 
> 
> Andrew 
> 
> 
> _______________________________________________
> Architecture-discuss mailing list
> Architecture-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/architecture-discuss
>