Re: [Cfrg] Call for participation: privacy-pass virtual IETF BoF

[Hannes Tschofenig <[e-mail]>]

Hi Alex,

Do you have a problem statement document/write-up somewhere as well?

I would like to get to understand whether this is something I should pay attention to. Why is there a problem? What is the prior work and why is it insufficient to solve the problem? Who needs to be involved to make this successful? What are the incentives (or disincentives) of the parties in the ecosystem?

Ciao
Hannes

From: Cfrg <[e-mail]> On Behalf Of Alex Davidson
Sent: Thursday, March 19, 2020 11:41 AM
To: [e-mail]
Subject: [Cfrg] Call for participation: privacy-pass virtual IETF BoF

Dear CFRG,

I just wanted to draw your attention to the privacy-pass<https://datatracker.ietf.org/group/privacypass/meetings/> virtual IETF Birds of a Feather (BoF) session being held next week on Thursday 26 March (20:00-22:00 UTC) that may be of interest to members of this community.

The BoF will be held entirely remotely and aims to decide whether a WG should be formed for standardising the Privacy Pass protocol (https://privacypass.github.io<https://privacypass.github.io/>). The protocol provides clients with the ability to redeem blinded tokens that prove ownership of some attribute to a server, without revealing anything else about the client's identity. It is based heavily on protocols for computing verifiable oblivious pseudorandom functions (VOPRFs). Constructions of VOPRF protocols have already been proposed in an ongoing CFRG draft (https://tools.ietf.org/html/draft-irtf-cfrg-voprf-03). There are many applications that already make use of some form of the Privacy Pass protocol for achieving privacy-preserving authorisation in the Internet setting [7-11].

The full agenda for the BoF is already available [5]. In the meeting, we will be discussing three initial drafts that describe the protocol [1], architecture [2] and intended web API [3], along with aiming to finalise the WG charter that we currently have [4]. Anyone is very welcome to join the meeting and the mailing list [6] to discuss the direction of the standardisation and the proposed charter. Any feedback from the community would be highly appreciated! More information about how to join the meeting remotely will be posted to the privacy-pass mailing list in due course.

Looking forward to hearing from you!

Best,
Alex

[1] https://tools.ietf.org/html/draft-davidson-pp-protocol-00
[2] https://tools.ietf.org/html/draft-davidson-pp-architecture-00
[3] https://tools.ietf.org/html/draft-svaldez-pp-http-api-00
[4] https://github.com/alxdavids/privacy-pass-ietf/blob/master/CHARTER.md
[5] https://datatracker.ietf.org/meeting/107/materials/agenda-107-privacypass
[6] https://www.ietf.org/mailman/listinfo/privacy-pass
[7] https://blog.cloudflare.com/supporting-the-latest-version-of-the-privacy-pass-protocol/
[8] https://blog.chromium.org/2019/08/potential-uses-for-privacy-sandbox.html
[9] https://github.com/WICG/trust-token-api
[10] https://medium.com/least-authority/the-path-from-s4-to-privatestorage-ae9d4a10b2ae
[11] https://engineering..fb.com/security/partially-blind-signatures/<https://engineering.fb.com/security/partially-blind-signatures/>

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.