Re: [Endymail] Another view of the problem and what the IETF could do

Michael Kjörling <michael@kjorling.se> Thu, 04 September 2014 13:19 UTC

Date: Thu, 4 Sep 2014 13:18:56 +0000
From: Michael =?utf-8?B?S2rDtnJsaW5n?= <michael@kjorling.se>
To: endymail@ietf.org
Message-ID: <20140904131856.GM603@yeono.kjorling.se>
References: <CAHBU6iuxfqs9RszSaJLaTV_obKBCJ9Pzii+t9XANN3q+bJm-3Q@mail.gmail.com> <5404A3A3.9050506@cisco.com> <A8423D66-369A-4511-8A4C-EE4545E49111@adamcaudill.com> <3093EBC2-B370-4675-B53D-20162E3D0CC9@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <3093EBC2-B370-4675-B53D-20162E3D0CC9@gmail.com>
Archived-At: http://mailarchive.ietf.org/arch/msg/endymail/qIjDw--NOtG0JFbqHJHvbHKVPeM
Subject: Re: [Endymail] Another view of the problem and what the IETF could do
Precedence: list

On 2 Sep 2014 16:36 -0400, from hallam@gmail.com (Phillip Hallam-Baker):
> Since spam is a concern, we might well not want to answer question
> 1, or at least not to just anyone.

This is one of the points I raised in [1], and which frankly I felt
went unaddressed.


> For in person trust anchor exchange, QR codes are the way to go.

Only if you're willing to basically limit "whatever we end up
discussing" to people who have the ability to process a random
encountered QR code in the field. While smartphones and ubiquitous
networking is common in many Western countries, designing a protocol
around only that seems rather excluding. Just to mention one example,
I myself would have no way to process that QR code, and found myself
in a discussion on a non-technical mailing list the other day where
several people commented about either not having cell phones at all,
or having only old "dumb phone" style phones.

Do we want to exclude those people from establishing that trust
anchor?


[1] Fri, 29 Aug 2014 09:11:33 +0000 http://mailarchive.ietf.org/arch/msg/endymail/mSmLHfs0kzZNE9LaYdBDjHtN8ok

-- 
Michael Kjörling • https://michael.kjorling.se • michael@kjorling.se
OpenPGP B501AC6429EF4514 https://michael.kjorling.se/public-keys/pgp
                 “People who think they know everything really annoy
                 those of us who know we don’t.” (Bjarne Stroustrup)

[Endymail] Another view of the problem and what t… Tim Bray
Re: [Endymail] Another view of the problem and wh… Werner Koch
Re: [Endymail] Another view of the problem and wh… Arnt Gulbrandsen
Re: [Endymail] Another view of the problem and wh… Phillip Hallam-Baker
Re: [Endymail] Another view of the problem and wh… Eliot Lear
Re: [Endymail] Another view of the problem and wh… Tim Bray
Re: [Endymail] Another view of the problem and wh… Werner Koch
Re: [Endymail] Another view of the problem and wh… Werner Koch
Re: [Endymail] Another view of the problem and wh… Steffen Nurpmeso
Re: [Endymail] Another view of the problem and wh… Leo Vegoda
Re: [Endymail] Another view of the problem and wh… Stephen Farrell
Re: [Endymail] Another view of the problem and wh… Leo Vegoda
Re: [Endymail] Another view of the problem and wh… Adam Caudill
Re: [Endymail] Another view of the problem and wh… Phillip Hallam-Baker
Re: [Endymail] Another view of the problem and wh… Tim Bray
Re: [Endymail] Another view of the problem and wh… Werner Koch
Re: [Endymail] Another view of the problem and wh… Stephen Farrell
Re: [Endymail] Another view of the problem and wh… Werner Koch
Re: [Endymail] Another view of the problem and wh… Kathleen Moriarty
Re: [Endymail] Another view of the problem and wh… Phillip Hallam-Baker
Re: [Endymail] Another view of the problem and wh… Michael Kjörling
Re: [Endymail] Another view of the problem and wh… Leo Vegoda