Re: [Endymail] Off we go...

"Joe Hildebrand (jhildebr)" <jhildebr@cisco.com> Wed, 27 August 2014 15:26 UTC

From: "Joe Hildebrand (jhildebr)" <jhildebr@cisco.com>
To: Tom Ritter <tom@ritter.vg>, "endymail@ietf.org" <endymail@ietf.org>
Thread-Topic: [Endymail] Off we go...
Thread-Index: AQHPwX34ogzl9fkBREe+zwM4ZgKLRZvkC8GAgAB2+IA=
Date: Wed, 27 Aug 2014 15:25:59 +0000
Message-ID: <E7DCF4A3-7407-4F14-8A83-D421F5E5EDCB@cisco.com>
References: <53FD0B7D.8070705@qti.qualcomm.com> <CA+cU71nkrhqmjra9Thkw-vSNGFQPX2=nY5FUL6drxeo9rxd8uw@mail.gmail.com>
In-Reply-To: <CA+cU71nkrhqmjra9Thkw-vSNGFQPX2=nY5FUL6drxeo9rxd8uw@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/15.3.0.140730
Content-Type: text/plain; charset="utf-8"
Content-ID: <A7F214A0CACCE44FB44B091071E1CD00@emea.cisco.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: http://mailarchive.ietf.org/arch/msg/endymail/2kj7AfRPfrs7azubFSBJWh_DflA
Subject: Re: [Endymail] Off we go...
Precedence: list

For distributing keys, POSH seems like it would be also be interesting:

http://tools.ietf.org/html/draft-ietf-xmpp-posh-01


As does RFC 7033 (WebFinger), both of which rely on extending trust from 
HTTPS to other domains.

On 8/27/14, 2:20 AM, "Tom Ritter" <tom@ritter.vg> wrote:

>On 26 August 2014 17:34, Pete Resnick <presnick@qti.qualcomm.com> wrote:
>> So off we go... What projects are folks working on
>
>Prior to Snowden's revelations, a friend and I had given some
>thought[0] to a system that supported provider-to-provider encryption,
>where the end could be extended on either side to end-to-provider or
>end-to-end encryption.  Along the way we thought about distributing
>keys over HTTPS vs DNS[1], authenticity[2], a report-only deployment
>mode[3], and other stuff.  We shelved our proposal, but published our
>thoughts in a document that we hoped would add some thoughts and
>context to future discussions.  Full spec is at
>https://github.com/tomrittervg/uee
>
>I can't claim to be working on this, but I'm excited about
>https://datatracker.ietf.org/doc/draft-ietf-dane-smtp-with-dane/
>
>I'm also tangentially involved (through my job) with NCC Group's
>.trust initiative[4].  There are a lot of policy controls, but also
>technical ones. Some of the guarantees you will have when
>communicating with a domain in the .trust gTLD will be that the domain
>will have valid TLS certificates for StartTLS, will have StartTLS
>available, will use DNSSEC, DKIM, and a host of other technical
>requirements.
>
>-tom
>
>
>[0] https://ritter.vg/blog-uee_email_encryption.html
>[1] 
>https://github.com/tomrittervg/uee/blob/master/appendix-key-distro-choice.
>md
>[2] 
>https://github.com/tomrittervg/uee/blob/master/proposal.md#key-authenticit
>y
>[3] 
>https://github.com/tomrittervg/uee/blob/master/proposal.md#report-only-mod
>e
>[4] https://www.nccgroup.com/media/112014/trust-faq.pdf
>
>_______________________________________________
>Endymail mailing list
>Endymail@ietf.org
>https://www.ietf.org/mailman/listinfo/endymail
>


-- 
Joe Hildebrand

[Endymail] Off we go... Pete Resnick
Re: [Endymail] Off we go... Tom Ritter
Re: [Endymail] Off we go... Phillip Hallam-Baker
Re: [Endymail] Off we go... Joe Hildebrand (jhildebr)
Re: [Endymail] Off we go... Viktor Dukhovni
Re: [Endymail] Off we go... Michael Kjörling
Re: [Endymail] Off we go... Cyrus Daboo
Re: [Endymail] Off we go... Frank Li
Re: [Endymail] Off we go... Phillip Hallam-Baker
Re: [Endymail] Off we go... Leo Vegoda
Re: [Endymail] Off we go... Werner Koch
Re: [Endymail] Off we go... Adam Caudill