Re: [hrpc] from “Security Considerations” to “Threat Model Considerations”?

Corinne Cath <corinnecath@gmail.com> Tue, 07 November 2023 06:40 UTC

Return-Path: <cattekwaad@gmail.com>
X-Original-To: hrpc@ietfa.amsl.com
Delivered-To: hrpc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E2D9C187724 for <hrpc@ietfa.amsl.com>; Mon, 6 Nov 2023 22:40:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M27_PC6c9Jng for <hrpc@ietfa.amsl.com>; Mon, 6 Nov 2023 22:40:27 -0800 (PST)
Received: from mail-oo1-xc36.google.com (mail-oo1-xc36.google.com [IPv6:2607:f8b0:4864:20::c36]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1E92C1D470D for <hrpc@irtf.org>; Mon, 6 Nov 2023 22:40:27 -0800 (PST)
Received: by mail-oo1-xc36.google.com with SMTP id 006d021491bc7-586f1db1a83so2955958eaf.2 for <hrpc@irtf.org>; Mon, 06 Nov 2023 22:40:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1699339227; x=1699944027; darn=irtf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=93fqZ0oRgSO154J0gffCKKxci91z6RQrdGA3JJps68o=; b=BQg0TunyiwErke5nF+sVzosSWxvQwsbQTfWzoJftn+QoWKwqDNhnKFfi+tOg4Ixv1D 6FLxB0uPIwVJs3cof62M7T1j/QCCmPaoV+r+YQqP5Cdl8y/WDOrTmR3xkWbuYKMNaofb Y/C5mt0/78zNBS7bYxRwqJCVPadDiTBreNIjh/CNXKCCpG9oGj4gekPw9UxjuOEwZXGS HNfMf053M4N+aGkSgKWtPq4KrkaJSvi94ouoiPqykKXmTdxhSRU6CU+aBG8tDXA7nRIC BuOxQkDHPvfxJmjWleTkV6Lmhi6p7WNuZM5j1MEx59QuQhMaVcXnYrCX30lWrWl9EdGp GkBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1699339227; x=1699944027; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=93fqZ0oRgSO154J0gffCKKxci91z6RQrdGA3JJps68o=; b=L4XagVxarGA//TTst+1luyb0akAWsECWmIndLQldl/SQrkkbaW2PUcmbtD0pThSMkP ILnmlOTUeG2ofjrCO1G8QtaHqDaDMXPxvVnBE3ERYhSycPUTObNttvQoa+v4X20MSBUr RK2KEnylB1ubccklwnnjWe+mJL8dezd3PDO/hL1q1ufVS5N9jLWoz1obFViGDYnlfn9M lp2a3Ii9Ykagg+1lJGWNngJ7ZBEHgI+aHKeeUF1Qxq2gyng2VszMQREjM69qvhWHyVam X7/lE0CGMcGf6L5czWkDUpIzrhuARM/EeVzaQzQ14+DzfQhhuSCyKhWmgGdKuFCswJZW G+5w==
X-Gm-Message-State: AOJu0YyajU9hnjzV98qWujTZ/Kolwii5X514egemyneBa832NYUUxsYf Oudl9b9jeyXXxH+yw39VJEOp2cLo7e9wnoY2Pu4=
X-Google-Smtp-Source: AGHT+IGsmS2+AV3CufNAbGO/cZ7YzH66C80bHgCSYdQogq1JpjBPaSDvG48BZfM/0TLaBFRmfqAjte3vBkPdeZm0Y3A=
X-Received: by 2002:a05:6820:211:b0:581:3e7d:12e8 with SMTP id bw17-20020a056820021100b005813e7d12e8mr31505828oob.2.1699339226644; Mon, 06 Nov 2023 22:40:26 -0800 (PST)
MIME-Version: 1.0
References: <50c88604c932b712b71eb5bd8034550c@acm.org> <CAN1qJvDN2LK=Vk-RsEZMinSX8Yax7hkDE38p4khZKfv7gjcaUQ@mail.gmail.com> <01fd01da10b2$93fe9890$bbfbc9b0$@gmx.net> <ZUlsoEKvoF9BetfE@net>
In-Reply-To: <ZUlsoEKvoF9BetfE@net>
From: Corinne Cath <corinnecath@gmail.com>
Date: Tue, 07 Nov 2023 07:40:15 +0100
Message-ID: <CAD499e+GKW1FCX5QHFaoSNfCQsvhZVpk4N9o6MAurHZUGfV-Gw@mail.gmail.com>
To: Cory Francis Myers <cfm@acm.org>
Cc: hannes.tschofenig@gmx.net, hrpc@irtf.org
Content-Type: multipart/alternative; boundary="000000000000f503ab06098a3ee9"
Archived-At: <https://mailarchive.ietf.org/arch/msg/hrpc/8K_45JRqR7REibUe7mpnGBju2gk>
Subject: Re: [hrpc] from “Security Considerations” to “Threat Model Considerations”?
X-BeenThere: hrpc@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: hrpc discussion list <hrpc.irtf.org>
List-Unsubscribe: <https://mailman.irtf.org/mailman/options/hrpc>, <mailto:hrpc-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/hrpc/>
List-Post: <mailto:hrpc@irtf.org>
List-Help: <mailto:hrpc-request@irtf.org?subject=help>
List-Subscribe: <https://mailman.irtf.org/mailman/listinfo/hrpc>, <mailto:hrpc-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Nov 2023 06:40:32 -0000

Might be useful to forward this to dult too? I presume they have a
mailinglist already?

To make sure these convos don’t stay siloed?

Cheers Corinne

On Mon, 6 Nov 2023 at 23:46 Cory Francis Myers <cfm@acm.org> wrote:

> On Mon, Nov 06, 2023 at 02:10:12PM +0100, hannes.tschofenig@gmx.net wrote:
> > Where are the presentation slides that talk about “safety”?
>
> Stephanie Mikkelson presented today on "Guidance on Safe and Ethical Use
> of Technology to Address Gender-based Violence", in
> <https://datatracker.ietf.org/doc/slides-118-hrpc-unfpa-gbv-tech-guidance/
> >.
> Her discussion of safety, privacy, and security by design is on slide
> 15.
>
>
>         --- cfm.
> _______________________________________________
> hrpc mailing list
> hrpc@irtf.org
> https://mailman.irtf.org/mailman/listinfo/hrpc
>