Re: 2 questions

Stephen Farrell <stephen.farrell@cs.tcd.ie> Tue, 31 March 2015 22:39 UTC

Return-Path: <ietf-http-wg-request+bounce-httpbisa-archive-bis2juki=lists.ie@listhub.w3.org>
X-Original-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Delivered-To: ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66DB41A19FA for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 31 Mar 2015 15:39:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.912
X-Spam-Level:
X-Spam-Status: No, score=-6.912 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z9k5iRbqgTb0 for <ietfarch-httpbisa-archive-bis2Juki@ietfa.amsl.com>; Tue, 31 Mar 2015 15:39:30 -0700 (PDT)
Received: from frink.w3.org (frink.w3.org [128.30.52.56]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A74E71A017F for <httpbisa-archive-bis2Juki@lists.ietf.org>; Tue, 31 Mar 2015 15:39:30 -0700 (PDT)
Received: from lists by frink.w3.org with local (Exim 4.80) (envelope-from <ietf-http-wg-request@listhub.w3.org>) id 1Yd4lI-0002Cv-JG for ietf-http-wg-dist@listhub.w3.org; Tue, 31 Mar 2015 22:35:56 +0000
Resent-Date: Tue, 31 Mar 2015 22:35:56 +0000
Resent-Message-Id: <E1Yd4lI-0002Cv-JG@frink.w3.org>
Received: from lisa.w3.org ([128.30.52.41]) by frink.w3.org with esmtp (Exim 4.80) (envelope-from <stephen.farrell@cs.tcd.ie>) id 1Yd4lB-0002CA-6A for ietf-http-wg@listhub.w3.org; Tue, 31 Mar 2015 22:35:49 +0000
Received: from [134.226.56.6] (helo=mercury.scss.tcd.ie) by lisa.w3.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from <stephen.farrell@cs.tcd.ie>) id 1Yd4l6-0007RZ-HZ for ietf-http-wg@w3.org; Tue, 31 Mar 2015 22:35:49 +0000
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 8F79EBEAA; Tue, 31 Mar 2015 23:35:16 +0100 (IST)
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9iC-TOO5xBb0; Tue, 31 Mar 2015 23:35:15 +0100 (IST)
Received: from [10.87.48.73] (unknown [86.46.29.244]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 6FEF5BE79; Tue, 31 Mar 2015 23:35:15 +0100 (IST)
Message-ID: <551B2120.7020907@cs.tcd.ie>
Date: Tue, 31 Mar 2015 23:35:12 +0100
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: Poul-Henning Kamp <phk@phk.freebsd.dk>
CC: Adrien de Croy <adrien@qbik.com>, Xiaoyin Liu <xiaoyin.l@outlook.com>, Dan Anderson <dan-anderson@cox.net>, "Walter H." <walter.h@mathemainzel.info>, "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
References: <emb9aea729-e991-4f83-bd83-960342d99b87@bodybag> <551B0C46.8040705@cs.tcd.ie> <40647.1427840473@critter.freebsd.dk>
In-Reply-To: <40647.1427840473@critter.freebsd.dk>
OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Received-SPF: none client-ip=134.226.56.6; envelope-from=stephen.farrell@cs.tcd.ie; helo=mercury.scss.tcd.ie
X-W3C-Hub-Spam-Status: No, score=-8.2
X-W3C-Hub-Spam-Report: AWL=1.159, BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RDNS_NONE=0.793, W3C_AA=-1, W3C_IRA=-1, W3C_IRR=-3, W3C_WL=-1
X-W3C-Scan-Sig: lisa.w3.org 1Yd4l6-0007RZ-HZ 1df1afb36efaec90d775d593aed4b501
X-Original-To: ietf-http-wg@w3.org
Subject: Re: 2 questions
Archived-At: <http://www.w3.org/mid/551B2120.7020907@cs.tcd.ie>
Resent-From: ietf-http-wg@w3.org
X-Mailing-List: <ietf-http-wg@w3.org> archive/latest/29150
X-Loop: ietf-http-wg@w3.org
Resent-Sender: ietf-http-wg-request@w3.org
Precedence: list
List-Id: <ietf-http-wg.w3.org>
List-Help: <http://www.w3.org/Mail/>
List-Post: <mailto:ietf-http-wg@w3.org>
List-Unsubscribe: <mailto:ietf-http-wg-request@w3.org?subject=unsubscribe>

Hi,

On 31/03/15 23:21, Poul-Henning Kamp wrote:
>> >Meanwhile, the take-away is clearly that MitM deployment is one of
>> >those things that's (ab:-)used about 0.41% of the time and should
>> >be treated as such and that claims to the contrary are anecdotal.
>
> Sorry for being the "one sheep which looks like it is black on at least
> one side" guy:

Actually the reason I posted about it was because this list seems
to have a lot of anecdotes on this topic and little or no data.

> As interesting as that study was, its results does not support your
> rather flippant and arrogant marginalization of MitM as an issue.

Flippant, that's quite possible:-)

Arrogant? Really? Apologies if I was, but that's surprising.

Anyway, feel free to produce better peer-reviewed data. I'm sure
the state of the art in this space is evolving rapidly, and it's
probably fair to say that it's still somewhat early days in
Internet measurement in general (or when we look back in a few
years, I figure we'll think that).

But studies like these are still (for me anyway) far more worth
paying attention to than yet more anecdotes and prognostications.

S.