IETF Logo Mail Archive

Re: [Int-area] New version of WPADNG

Watson Ladd <watsonbladd@gmail.com> Wed, 17 July 2024 23:51 UTC

Received: by ietfa.amsl.com (Postfix) id 43CDEC1D52EE; Wed, 17 Jul 2024 16:51:10 -0700 (PDT)
Delivered-To: ietfarch-httpbisa-archive-bis2juki@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4329AC1D52E2 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 17 Jul 2024 16:51:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.86
X-Spam-Level:
X-Spam-Status: No, score=-2.86 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.25, MAILING_LIST_MULTI=-1, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=w3.org header.b="Lik4nqgt"; dkim=pass (2048-bit key) header.d=w3.org header.b="XjOaUzRJ"; dkim=pass (2048-bit key) header.d=gmail.com header.b="XqNMzlP1"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9_04dv9SjHjg for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Wed, 17 Jul 2024 16:51:09 -0700 (PDT)
Received: from mab.w3.org (mab.w3.org [IPv6:2600:1f18:7d7a:2700:d091:4b25:8566:8113]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6FAD0C1D4A83 for <httpbisa-archive-bis2Juki@ietf.org>; Wed, 17 Jul 2024 16:51:09 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Subject:Content-Type:Cc:To:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To; bh=xdCn45DfTeUnQiv2+BviVTTz+gRRCsHX6TZPA3MfGoc=; b=Lik4nqgtVMA4fHpppkP9dp9+9A zOgM4VpBV+LJp4J+uUpRAnOZlTenFs0e082AWydQEeHGu8+8NFvSWgTUxHVRhYmORC8/4R9loK7K8 zi8TELjTBOiwjC/O3IixWQGY1Hrt49Vlkt7omX1WXK9NakV/K84JYDNdhC5Uya+YfoAgnViaGFyqZ x7kGFR+w2aPy6G3bahROvs/Hntciol5j9+1wWY/qQQUi9uqdMA3fdgq19O5ICnxPTK/+2qN0bl1Mr Jia4ulzH4Suaz1AT3QBDScF29DE1460HwGxC+o9ybzYAj9tYDAsTUzsaCMrezNCYzicWNf0xDeF2I wQjyCxLQ==;
Received: from lists by mab.w3.org with local (Exim 4.96) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1sUEPm-005UBx-1u for ietf-http-wg-dist@listhub.w3.org; Wed, 17 Jul 2024 23:50:30 +0000
Resent-Date: Wed, 17 Jul 2024 23:50:30 +0000
Resent-Message-Id: <E1sUEPm-005UBx-1u@mab.w3.org>
Received: from ip-10-0-0-144.ec2.internal ([10.0.0.144] helo=pan.w3.org) by mab.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <watsonbladd@gmail.com>) id 1sUEPj-005UAs-1x for ietf-http-wg@listhub.w3.internal; Wed, 17 Jul 2024 23:50:27 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=w3.org; s=s1; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:In-Reply-To: References:MIME-Version:Reply-To; bh=xdCn45DfTeUnQiv2+BviVTTz+gRRCsHX6TZPA3MfGoc=; t=1721260227; x=1722124227; b=XjOaUzRJ/E142jwJGfWlQtvEr2vGiLjBHohpET3Q3kR9t60hZhjl2V7iJXIJP2ARrWfsMMGq3Hg 5McE6yNHXm98XMMkPLW/qANVZKtO91f1xwm7SsSa2+mgVz8mResVjK9gIs313v6sIwYJ2tk4p1FUc 3cen8MSCBT1xz7uoPCD15bQgLjZcIPkXR+To2K6urjccChSrerMYZcHuwIqqsTW8oUoEK1elEq9QZ WyJmuyO7GcvDbyWaq5LiCy83pWcn2XLwztwoM60cMA7Om4gOYhc/A1+yRfNoLelwSspquGPF2hNt+ flYZhzRXAIWh0kDKLqM8PNcF2Av0AxB94BOg==;
Received-SPF: pass (pan.w3.org: domain of gmail.com designates 2a00:1450:4864:20::42d as permitted sender) client-ip=2a00:1450:4864:20::42d; envelope-from=watsonbladd@gmail.com; helo=mail-wr1-x42d.google.com;
Received: from mail-wr1-x42d.google.com ([2a00:1450:4864:20::42d]) by pan.w3.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <watsonbladd@gmail.com>) id 1sUEPj-009naE-0G for ietf-http-wg@w3.org; Wed, 17 Jul 2024 23:50:27 +0000
Received: by mail-wr1-x42d.google.com with SMTP id ffacd0b85a97d-368584f9e36so276f8f.2 for <ietf-http-wg@w3.org>; Wed, 17 Jul 2024 16:50:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1721260223; x=1721865023; darn=w3.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=xdCn45DfTeUnQiv2+BviVTTz+gRRCsHX6TZPA3MfGoc=; b=XqNMzlP1xo+6DeJA3nz6wgb/+ygyaEc9OY2ra7Xty6Ptb0Jxr0TSJ1a7sErMGDofq2 3ssexEfB7J8ghr7Jhe3p4OpWkI6RvNbmM3MhiNfV/fwsN998+CyjT4P0XULk56nUdZ5s ewofZxXqUKfYohRCvbnNFivX4/7p6A8IJX7ej6m/TI+7iDp7FvIdMwKyeWnUvTYXnE3a Zd4byMtz0wnKePliE0GT+txlop0LYSRURcIkEoHxllKITln0KYm/KGraaudCZHbz5wrZ v0AyhBs4WaSH+zDXzMjNpUzxbKNzBmyZ3qh8ezmh1dcQuDl6o5CjAWljK/UCgggZ+gDZ DefQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1721260223; x=1721865023; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=xdCn45DfTeUnQiv2+BviVTTz+gRRCsHX6TZPA3MfGoc=; b=J9v5nsJaQyw24V6+1SFmpeMYBsCzp9nUUGCvdUnZW2Eli+D/ZVdXch0kBYzvOK7zSX 8accycFBrkj+UAR0SEqIQZDyPkYOIXyCtp7+v7kqNgzpCSwi8++PeRT2JvHbA5K/E+Gi b0QIXYQlxL6wptpaah30WjDEtOZccl8sRNsbcAx6gQNu7ZG3dpcgF8ODQxH4CDeeFNmX +qhtuT8Clei/ZiCx2BtUfjQyZ90t5FxShmANfmtEZR5zT3SZYajIZ0i6xsDTp5iFTrLq emlvy2HjVptlU9ZEUEjbfzheVbguARaUFkFtItcGM2VWaA9Q7DnbmgxKB1rYp3PKD07e qXHg==
X-Forwarded-Encrypted: i=1; AJvYcCUz+KQv9iOZcS3XoBRhFjmRxL2ujQzhigci5iKPPiRULc08IBNxlEWvQmHQG54EEFwigXVEqQRmrWG3cnM23XooTHpT
X-Gm-Message-State: AOJu0Yx8ZnY6GUgijumIIowY3wQyyB5fzGVKlp80RaNn8wtRCq12xkTS QNzn+S6eq9LXyFQrD3s9uVhkSKL7RkQMe/6o+eiQ6jd8jA9YZMaVbk+Pud5m9rfO+rBRIqyV/f1 nE9K7Zs+itOrDG3cRXky24z2Hfjizow==
X-Google-Smtp-Source: AGHT+IEg3oVPH32wK7L1fG4BJq/VrmNx0LgzhvWkCspedRc2l+/sA13j3hUS2hZw8Jt/X2xPcQBW+KpiAr5OBi9Ywe8=
X-Received: by 2002:adf:ee0a:0:b0:368:4910:8f49 with SMTP id ffacd0b85a97d-3684910905bmr1062654f8f.12.1721260222860; Wed, 17 Jul 2024 16:50:22 -0700 (PDT)
MIME-Version: 1.0
References: <CAF3KT4QFxgNK=kLw_jZ06B85-3sUXqHmHQK03i-jWOZS-jCszw@mail.gmail.com> <CAPDSy+6ranR-120OMGzOGELLA=r2BxJdqLFmTXWqCA6-wm2uoQ@mail.gmail.com> <CAF3KT4SmCpBFZ-3VtnkaSBTSzRpBwOnBqsrft3RxVbq7MU09+Q@mail.gmail.com>
In-Reply-To: <CAF3KT4SmCpBFZ-3VtnkaSBTSzRpBwOnBqsrft3RxVbq7MU09+Q@mail.gmail.com>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Wed, 17 Jul 2024 16:50:11 -0700
Message-ID: <CACsn0cknrPEeacAkRv7LhywS6bWkYc+bEzfS8kMKLcJzY1Z55w@mail.gmail.com>
To: Josh Cohen <joshco@gmail.com>
Cc: David Schinazi <dschinazi.ietf@gmail.com>, int-area@ietf.org, ietf-http-wg@w3.org
Content-Type: text/plain; charset="UTF-8"
X-W3C-Hub-DKIM-Status: validation passed: (address=watsonbladd@gmail.com domain=gmail.com), signature is good
X-W3C-Hub-Spam-Status: No, score=-5.1
X-W3C-Hub-Spam-Report: BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, FREEMAIL_FROM=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, W3C_AA=-1, W3C_DB=-1, W3C_WL=-1
X-W3C-Scan-Sig: pan.w3.org 1sUEPj-009naE-0G 17477a7ebce6157e561f06e3394fffd2
X-Original-To: ietf-http-wg@w3.org
Subject: Re: [Int-area] New version of WPADNG
Archived-At: <https://www.w3.org/mid/CACsn0cknrPEeacAkRv7LhywS6bWkYc+bEzfS8kMKLcJzY1Z55w@mail.gmail.com>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/52080
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <https://www.w3.org/email/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

One adversary is willing to devote an entire nuclear submarine to the
task. They are more than willing to use existing vulnerabilities in
ways that you never hear about because they are good at their jobs.

If you use network links to configure your device, and the device goes
to the coffeeshop, that coffeeshop gets to configure the device.
That's just inherently a bad idea, and always has been.

Sincerely,
Watson Ladd

-- 
Astra mortemque praestare gradatim

v2.46.0 | Report a Bug | By Email | System Status