Re: [dane] PGP security models, was Summary of IETF LC for draft-ietf-dane-openpgpkey

Sam Hartman <hartmans-ietf@mit.edu> Wed, 23 September 2015 16:07 UTC

From: Sam Hartman <hartmans-ietf@mit.edu>
To: dcrocker@bbiw.net
References: <20150921172109.19893.qmail@ary.lan> <alpine.LFD.2.20.1509211455150.420@bofh.nohats.ca> <m2pp19ztmu.wl%randy@psg.com> <20150923035731.GZ21942@mournblade.imrryr.org> <m21tdpy2oa.wl%randy@psg.com> <tslk2rhgnni.fsf@mit.edu> <5602C6CD.2050200@dcrocker.net>
Date: Wed, 23 Sep 2015 12:07:23 -0400
In-Reply-To: <5602C6CD.2050200@dcrocker.net> (Dave Crocker's message of "Wed, 23 Sep 2015 08:35:41 -0700")
Message-ID: <tsl37y5glvo.fsf@mit.edu>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
Archived-At: <http://mailarchive.ietf.org/arch/msg/dane/TE5DFHDKKFvHjVRy3Ss_iF-GTVo>
Cc: Randy Bush <randy@psg.com>, Sam Hartman <hartmans-ietf@mit.edu>, ietf@ietf.org, dane@ietf.org
Subject: Re: [dane] PGP security models, was Summary of IETF LC for draft-ietf-dane-openpgpkey
Precedence: list

>>>>> "Dave" == Dave Crocker <dhc@dcrocker.net> writes:

    Dave> On 9/23/2015 8:29 AM, Sam Hartman wrote:
    >> I tend to agree with John and others who have suggested the
    >> document should be more clear about its assumptions.

    Dave> Assumptions, models, details, etc., with operational and risk
    Dave> implications.

Hi, Dave.
It would be easy to read the above as trying to restate  my position to
 be broader than I intended.

I'm specifically supporting the idea that the document should clearly
state its trust model.
I understand other comments have been made; I'm not expressing an
opinion on those.

Re: [dane] Summary of IETF LC for draft-ietf-dane… Viktor Dukhovni
Re: [dane] PGP security models, was Summary of IE… John Levine
Re: [dane] PGP security models, was Summary of IE… Paul Wouters
Re: [dane] PGP security models, was Summary of IE… manning
Re: [dane] PGP security models, was Summary of IE… manning
Re: [dane] PGP security models, was Summary of IE… Scott Kitterman
Re: [dane] PGP security models, was Summary of IE… John C Klensin
Re: [dane] PGP security models, was Summary of IE… Joe Abley
Re: [dane] PGP security models, was Summary of IE… Paul Wouters
Re: [dane] provisioning assumptions, was PGP secu… John Levine
Re: [dane] provisioning assumptions, was PGP secu… Paul Wouters
Re: [dane] PGP security models, was Summary of IE… Randy Bush
Re: [dane] PGP security models, was Summary of IE… Viktor Dukhovni
Re: [dane] PGP security models, was Summary of IE… Randy Bush
Re: [dane] PGP security models, was Summary of IE… Sam Hartman
Re: [dane] PGP security models, was Summary of IE… Dave Crocker
Re: [dane] PGP security models, was Summary of IE… Paul Wouters
Re: [dane] PGP security models, was Summary of IE… Sam Hartman
Re: [dane] PGP security models, was Summary of IE… Dave Crocker