Re: [arch-d] Off topic [was: IAB Statement on Encryption and Mandatory Client-side Scanning of Content]

Phillip Hallam-Baker <phill@hallambaker.com> Wed, 20 December 2023 00:55 UTC

MIME-Version: 1.0
References: <170266952162.33107.14325064798861197261@ietfa.amsl.com> <6.2.5.6.2.20231216110256.18d0acd0@elandnews.com> <CWXP265MB5153610FBB98A7B06AF81040C290A@CWXP265MB5153.GBRP265.PROD.OUTLOOK.COM> <CAKr6gn2Hf4N+DgKHKyO+i3T3OJyYRBJhH1AdQf-uXZ0xKmJ4Eg@mail.gmail.com> <CWXP265MB515381523714FF99524410CFC290A@CWXP265MB5153.GBRP265.PROD.OUTLOOK.COM> <790032a6-24f6-60d1-fb60-4b44bd447bde@gmail.com> <fadd9250-4b31-4bf5-aa76-4f37d24fd650@cdt.org> <02ae01da31f2$80580630$81081290$@olddog.co.uk> <c96e396d-fc05-4bdd-a047-012cbf7366c1@cdt.org> <CAFvDQ9ouHUpn8PqcNLxT0yKGh+mPeOZE_g7a8Nz+rOzEViVL=g@mail.gmail.com> <e9f0c20a-f06c-eb8c-3261-b9c5a7f21b5f@gmail.com> <CAFvDQ9oSa62BG2DBQa72=h4=dB-yHyDtoKdA_9FrtoARKZrU7Q@mail.gmail.com>
In-Reply-To: <CAFvDQ9oSa62BG2DBQa72=h4=dB-yHyDtoKdA_9FrtoARKZrU7Q@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
Date: Tue, 19 Dec 2023 19:54:46 -0500
Message-ID: <CAMm+LwgQYN9zHiH1MTGvVVB-Tq_mRO9eAKaCmcCJkzdKjqfWMA@mail.gmail.com>
To: Hesham ElBakoury <helbakoury@gmail.com>
Cc: Brian E Carpenter <brian.e.carpenter@gmail.com>, architecture-discuss@ietf.org
Content-Type: multipart/alternative; boundary="000000000000a65d88060ce66eb8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/architecture-discuss/yWSgc3feIduC6wMVEmExSNi6GBU>
Subject: Re: [arch-d] Off topic [was: IAB Statement on Encryption and Mandatory Client-side Scanning of Content]
Precedence: list

If that is the way it works, it does not.

The only cases where anything like that has happened have been nation state
actors getting deep into the supply chain. Cases like Crypto AG.




On Tue, Dec 19, 2023 at 6:13 PM Hesham ElBakoury <helbakoury@gmail.com>
wrote:

> Brian,
> The way it works is described here:
> https://www.nubeva.com/pillar/get-session-keys
>
> Nubeva is in AWS market place. It is used with AWS VPC:
> https://aws.amazon.com/marketplace/pp/prodview-aex37bzqx6hxi
>
> Hesham
>
> On Tue, Dec 19, 2023, 2:00 PM Brian E Carpenter <
> brian.e.carpenter@gmail.com> wrote:
>
>> Hesham,
>> On 19-Dec-23 11:59, Hesham ElBakoury wrote:
>>
>> > Nubeva has developed technology to extract TLS keys to be used by 3rd
>> party tools to decrypt and inspect the traffic [
>> https://www.nubeva.com/hubfs/Downloadables/Nubeva%20SSL%20Solution%20Brief_Nov%202019.pdf
>> ].
>> >
>> > Would this violates client privacy?
>> >
>>
>> I may be missing something, but I don't understand how this product could
>> work unless the "Sensor" component is configured with the server's private
>> keys. Is that correct?
>>
>>     Brian
>>
> _______________________________________________
> Architecture-discuss mailing list
> Architecture-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/architecture-discuss
>

Re: [arch-d] IAB Statement on Encryption and Mand… S Moonesamy
Re: [arch-d] IAB Statement on Encryption and Mand… Brian E Carpenter
Re: [arch-d] IAB Statement on Encryption and Mand… S Moonesamy
Re: [arch-d] IAB Statement on Encryption and Mand… S Moonesamy
Re: [arch-d] IAB Statement on Encryption and Mand… George Michaelson
Re: [arch-d] IAB Statement on Encryption and Mand… Brian E Carpenter
Re: [arch-d] IAB Statement on Encryption and Mand… Vittorio Bertola
Re: [arch-d] IAB Statement on Encryption and Mand… Christian Huitema
Re: [arch-d] IAB Statement on Encryption and Mand… Eric Rescorla
Re: [arch-d] IAB Statement on Encryption and Mand… Andrew Campling
Re: [arch-d] IAB Statement on Encryption and Mand… Andrew Campling
Re: [arch-d] IAB Statement on Encryption and Mand… S Moonesamy
Re: [arch-d] IAB Statement on Encryption and Mand… Brian E Carpenter
Re: [arch-d] IAB Statement on Encryption and Mand… Wes Hardaker
Re: [arch-d] IAB Statement on Encryption and Mand… Hesham ElBakoury
Re: [arch-d] IAB Statement on Encryption and Mand… S Moonesamy
Re: [arch-d] IAB Statement on Encryption and Mand… S Moonesamy
Re: [arch-d] IAB Statement on Encryption and Mand… Eliot Lear
Re: [arch-d] IAB Statement on Encryption and Mand… Eric Rescorla
[arch-d] Off topic [was: IAB Statement on Encrypt… Brian E Carpenter
Re: [arch-d] IAB Statement on Encryption and Mand… Phillip Hallam-Baker
Re: [arch-d] IAB Statement on Encryption and Mand… Eric Rescorla
Re: [arch-d] IAB Statement on Encryption and Mand… Arnaud Taddei
Re: [arch-d] Off topic [was: IAB Statement on Enc… Phillip Hallam-Baker
Re: [arch-d] IAB Statement on Encryption and Mand… Phillip Hallam-Baker
Re: [arch-d] [EXTERNAL] Re: IAB Statement on Encr… Tommy Jensen
Re: [arch-d] Off topic [was: IAB Statement on Enc… Phillip Hallam-Baker
Re: [arch-d] IAB Statement on Encryption and Mand… Eric Rescorla
Re: [arch-d] IAB Statement on Encryption and Mand… Phillip Hallam-Baker
Re: [arch-d] IAB Statement on Encryption and Mand… Phillip Hallam-Baker
Re: [arch-d] IAB Statement on Encryption and Mand… Mallory Knodel
Re: [arch-d] IAB Statement on Encryption and Mand… Mallory Knodel
Re: [arch-d] IAB Statement on Encryption and Mand… Phillip Hallam-Baker
Re: [arch-d] IAB Statement on Encryption and Mand… Mallory Knodel
Re: [arch-d] IAB Statement on Encryption and Mand… Adrian Farrel
Re: [arch-d] IAB Statement on Encryption and Mand… Mallory Knodel
Re: [arch-d] Off topic [was: IAB Statement on Enc… Hesham ElBakoury
Re: [arch-d] Off topic [was: IAB Statement on Enc… Brian E Carpenter
Re: [arch-d] IAB Statement on Encryption and Mand… Vittorio Bertola
Re: [arch-d] IAB Statement on Encryption and Mand… John Levine
Re: [arch-d] IAB Statement on Encryption and Mand… Mirja Kuehlewind (IETF)
Re: [arch-d] [IAB] IAB Statement on Encryption an… Mirja Kuehlewind (IETF)