Re: [dane] direction of effort (was: Re: Second WGLC draft-ietf-dane-smime)

"Garfinkel, Simson L. (Fed)" <simson.garfinkel@nist.gov> Tue, 29 November 2016 14:14 UTC

Return-Path: <simson.garfinkel@nist.gov>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BE0F1295BD for <dane@ietfa.amsl.com>; Tue, 29 Nov 2016 06:14:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YL2Q41BlcHko for <dane@ietfa.amsl.com>; Tue, 29 Nov 2016 06:14:44 -0800 (PST)
Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0108.outbound.protection.outlook.com [23.103.201.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AAA5C12943A for <dane@ietf.org>; Tue, 29 Nov 2016 06:14:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=/N87omSfJFBFHnc4QfVOHOqFbQ5cPoJv/LTGgUgrt50=; b=lH5X8yz/9ruxo72LF46RpyvXerh8gZCM60FNkPboTnigk/QdQPCuT1NtcWwbemNjfCYqYAxieM61ZKjUcHoLhOKrWdBAj4g3Y+aQCijiLBTxdQHwKmCl4MeQm0aGaWrpUv2nB2Ki0YBU6cKWVGUAzMLiSnezMF/+r6lkAjWh4yE=
Received: from DM2PR09MB0576.namprd09.prod.outlook.com (10.161.252.22) by DM2PR09MB0575.namprd09.prod.outlook.com (10.161.252.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.747.13; Tue, 29 Nov 2016 14:14:43 +0000
Received: from DM2PR09MB0576.namprd09.prod.outlook.com ([10.161.252.22]) by DM2PR09MB0576.namprd09.prod.outlook.com ([10.161.252.22]) with mapi id 15.01.0747.015; Tue, 29 Nov 2016 14:14:43 +0000
From: "Garfinkel, Simson L. (Fed)" <simson.garfinkel@nist.gov>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Thread-Topic: direction of effort (was: Re: [dane] Second WGLC draft-ietf-dane-smime)
Thread-Index: AQHSRAZt9Pum0+YyrUeybB16hmqAOaDwDc4A
Date: Tue, 29 Nov 2016 14:14:43 +0000
Message-ID: <9548FA7F-B229-458B-B739-B1083FBC4028@nist.gov>
References: <1479102464.995918272@apps.rackspace.com> <alpine.LRH.2.20.1611170410140.28374@bofh.nohats.ca> <D96EB1EE-A7C6-4C21-B1AC-1D0A5F8547E8@rfc1035.com> <CADyWQ+EC4v5U1tcw3OTd7j2D0KNWveNhsUSGc6c=NvX9VhtRLg@mail.gmail.com> <42510095-2182-422E-8A47-1EF3181B16F3@nist.gov> <1d348f05-ab84-ada8-a8fd-9fba59f2c2b1@cs.tcd.ie>
In-Reply-To: <1d348f05-ab84-ada8-a8fd-9fba59f2c2b1@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.3124)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=simson.garfinkel@nist.gov;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [129.6.84.113]
x-ms-office365-filtering-correlation-id: b9270019-5635-4fb3-760a-08d41862111b
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DM2PR09MB0575;
x-microsoft-exchange-diagnostics: 1; DM2PR09MB0575; 7:bd8WdDwUM1wI80AZdBCGoolPWbiNJyRnCfKq3yKQ9pqNZpH80JMC5Qe8NjJ9jR2MSP3VU+ZmIXK8AXIh58aiNUu9xPtyxLswEyAsJBaanB3kxUKiBhst0IMCqF8atK8WKcL6vhtZUXrDaVo2cexJW5a5Bl16le1enemLnKClI5dbl+BC9iUasf+GiUXux/G8SBPQn7ERefDWM5W8hVNtjJ4/0mySIdwSQTUYkSkBFVg3t499eXGmQfORl/oMZwsqPgfh49Gg6rScGNg2BtHQXSMKMxsbn9FamR/a34QjumE4OOLQOeyIaPBCTvXUS/kI61mLStFeeBP7yxo74j1fPE1QjHB1UyydVEKmD3+E8RpIteIUV1uLg2AxxhaKCvjGtj0BlId14HZszWd9wHTLQcKpLR7gDqj1LLOFveemvYGAvQFxjSCMh/Cd1yoZ17GPY0SEii8QvPKqPCIkgg5QVg==
x-microsoft-antispam-prvs: <DM2PR09MB0575289FF5EF9244F5CA7D03F68D0@DM2PR09MB0575.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(32856632585715)(192374486261705);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6060326)(6040361)(6045199)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(6041248)(6061324)(20161123564025)(20161123562025)(20161123560025)(20161123555025); SRVR:DM2PR09MB0575; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0575;
x-forefront-prvs: 01415BB535
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(377454003)(189002)(51914003)(24454002)(102836003)(6116002)(6506003)(229853002)(81156014)(6512003)(38730400001)(122556002)(81166006)(4326007)(8936002)(82746002)(3846002)(8676002)(86362001)(83716003)(6486002)(97736004)(39400400001)(33656002)(39410400001)(39450400002)(39380400001)(77096006)(57306001)(2906002)(7736002)(305945005)(189998001)(7846002)(3280700002)(3660700001)(36756003)(66066001)(2900100001)(106356001)(50986999)(76176999)(99286002)(5660300001)(92566002)(106116001)(105586002)(50226002)(110136003)(68736007)(6916009)(230783001)(2950100002)(101416001)(93886004)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0575; H:DM2PR09MB0576.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <013D4D7C6FF99F4E8D4E44E721C2243F@namprd09.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Nov 2016 14:14:43.6867 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0575
Archived-At: <https://mailarchive.ietf.org/arch/msg/dane/JczjG_s-svNIg6Ae2znYyhMcsbM>
Cc: Dane WG <dane@ietf.org>
Subject: Re: [dane] direction of effort (was: Re: Second WGLC draft-ietf-dane-smime)
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dane/>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Nov 2016 14:14:46 -0000

Hi Stephen,

Thanks for your email.  Much of the DANE-related work that I’ve been doing at NIST is focused on the enterprise of the US Government. However you are correct, the DANE protocols could also be used for enable interoperable e2e email security for consumers. Thanks for the reminder.



> On Nov 21, 2016, at 9:49 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
> 
> 
> Hiya,
> 
> I'm just curious...
> 
> On 21/11/16 14:33, Garfinkel, Simson L. (Fed) wrote:
>> We continue to pursue and support R&D efforts to develop SMIME-based
>> approaches to enterprise email security.   Having a stable reference
>> will benefit those efforts.
> 
> Is there a particular reason to try focus on enterprises
> here? I know that's where we started out with smime but
> I'm not sure it's a useful target these days. Wouldn't it
> be more likely more effective if we (for some "we") tried
> to get the largest mail providers to provide some form(s)
> of interoperable e2e email security? If that happened, (*)
> then I suspect many more enterprises would just re-use that
> than would ever deploy something by/for themselves. And if
> we don't end up with e2e email security at the major mail
> providers, then it'll probably not happen within many
> enterprises either. (IOW, maybe the focus on enterprises
> as a target for e2e mail security is a bit 20-th century? :-)
> 
> (*) Yes, there are a bunch of reasons why this is not
> at all likely to happen. However, if we direct our efforts
> elsewhere that is one more nail in that coffin.
> 
> Cheers,
> S.
> 
> PS: I've nothing against the planned experiment here.
> 
> 
>