Re: [Cfrg] Requesting removal of CFRG co-chair

[Alyssa Rowan <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon 23 Dec 2013 01:35, Dan Harkins wrote:

> As it says in the charter of the CFRG, "IETF working groups 
> developing protocols that include cryptographic elements are 
> welcome to bring questions concerning the protocols to the CFRG
> for advice." That's what happened.

The TLS WG asked the CFRG for advice. They got Kevin's. He did not
mention the (unaddressed) concerns raised.


Documented fact: Kevin belongs to an agency with a "SIGINT Enabling
Project". Their job is to "enable" [backdoor and/or disrupt] strong
cryptography so the NSA can exploit it.

That makes his advice untrustworthy. For all we know, it's *literally*
his job to lie to us, and mislead us.

And if he is responsible, as co-chair, for relaying the CFRG's advice
to WGs, he is in the perfect position to do just that. The net effect
is to taint that advice with the NSA's proven untrustworthiness.

That's the central problem here.

The only fix is for him to step down as co-chair. (It wouldn't hurt
for him to resign from the NSA, or speak out, either; that he hasn't,
as Daniel raised, can only be reasonably interpreted as indicative of
his approval of the agency's actions.)


Do you agree?

If not, Dan, why do you wish Kevin to remain co-chair: despite the
profound concerns raised, and the fundamental conflict-of-interest
between his duties here, and the NSA's mission?

Kindly explain your reason. I'm keenly interested to hear it.


I mean, what I've heard from you so far is... just look at this gem:

On Thu 12 Dec 2013 16:06, on TLS WG, Trevor Perrin wrote:
>> The consequences of adopting a protocol we think is secure that 
>> isn't: dead people.

(Correct security engineering thinking, backed up by decades of proven
 history, and still just as true today, as Jacob Applebaum or Moxie
 would be able to confirm.)

On Fri 13 Dec 2013 08:35, on TLS WG, Dan Harkins wrote this reply:
> You obviously read too much fiction and have too little practical 
> experience. Dragonfly is not a threat to human life. Get a grip.

(...and well, I think that speaks for itself, doesn't it?)

- -- 
/akr
-----BEGIN PGP SIGNATURE-----
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=5YBr
-----END PGP SIGNATURE-----