Re: [Ideas] Kathleen Moriarty's Block on charter-ietf-ideas-00-03: (with BLOCK)

Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> Thu, 28 September 2017 14:06 UTC

Return-Path: <kathleen.moriarty.ietf@gmail.com>
X-Original-To: ideas@ietfa.amsl.com
Delivered-To: ideas@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAFE613314B; Thu, 28 Sep 2017 07:06:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CA9ds8estjO7; Thu, 28 Sep 2017 07:06:21 -0700 (PDT)
Received: from mail-pf0-x229.google.com (mail-pf0-x229.google.com [IPv6:2607:f8b0:400e:c00::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF83C133091; Thu, 28 Sep 2017 07:06:21 -0700 (PDT)
Received: by mail-pf0-x229.google.com with SMTP id z84so920427pfi.2; Thu, 28 Sep 2017 07:06:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Jax86CTE5zuUaJNyZu/EmFKvTr4pBxLY8uTqlx7DC30=; b=lu4FJI5EHYC1WuBVIrEZP6TSq4zHtJqEqOP9N0ptP2Wo4NrNyT87OMzjF40CzEs0gt ldmxEC0aEMki30rhB2LDTHqBGPB05TeNyR9nS05r4fL5nkaL6uHQBcswmQd50+uMkRal vU2tWRo0T23HTvAjG+1dTwNG6FQM/MgKlx2U4yttSGCDkxrzy1KnYqdIpHCl6HRhw58H hN36fXd+PZHWTcNc0lSTPMK4ABgeH+/WyXhUTJwGYxQluc+kscpPXDIv0yttF/8U8vCz F27+giCIMKWsIXOokYooR6aUNcdDmAYdOyXri8FJRTLYPk1wQhzGg5GDWjPolXiKM5hJ EHRg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Jax86CTE5zuUaJNyZu/EmFKvTr4pBxLY8uTqlx7DC30=; b=R0Iy1lbyC4/G29UdnFDW+0P9HK/WKkVslBkf1yEdHUhVJ0Tf5gwFVVtw0DLO6sxrN3 zmdQr1BnpzmyXF6Ep7zbd2j6kw58jQhZX82DSoRWuI/B6TruTpKDsah4LSUfdCdKOGLc /7p+85Cs+kspScEZaviz9wQRSiOX13KqChyuzGck9C4HeI+38YTzXbQ+Ln27mf/esrHg OX1Jy3fVA0CIGmXAmy825xdN5AIwU/zfrjxQc1UCPvroO5AB38D+fr5OIqtL4F2UosDu z1mxRnhQt7QP7x0x46oEOdze33k5mlCY+zbG9jFCOH3Qg/ZdWCT02JkEWoy0WxdbjB1E K4ig==
X-Gm-Message-State: AHPjjUgAPICBvpnekPt+YzEQ1nn57EjgLyZKTLeB7Cdxe+5ahGvSMj1n gTmySSmT4sMRnJpdz1DndFyshJpww8yCHUEXH+8=
X-Google-Smtp-Source: AOwi7QB+BB+27i231p22vUC5cLQdNkOxiO0P2vNEpEXpzdqm/CkxLmK3io+CUumtt6HgDID/1+CTmQgWamtxubSKE7M=
X-Received: by 10.99.156.1 with SMTP id f1mr2294582pge.364.1506607581212; Thu, 28 Sep 2017 07:06:21 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.100.134.8 with HTTP; Thu, 28 Sep 2017 07:05:40 -0700 (PDT)
In-Reply-To: <9942C847-93A9-4B7A-B5AE-6975E30581FB@cisco.com>
References: <150660583574.13768.16265986360409791782.idtracker@ietfa.amsl.com> <9942C847-93A9-4B7A-B5AE-6975E30581FB@cisco.com>
From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Thu, 28 Sep 2017 10:05:40 -0400
Message-ID: <CAHbuEH4+5T+k54J-0vjK7Ng06mFP4KFw5_85rDirgMKqb4rEtQ@mail.gmail.com>
To: "Alvaro Retana (aretana)" <aretana@cisco.com>
Cc: The IESG <iesg@ietf.org>, "ideas-chairs@ietf.org" <ideas-chairs@ietf.org>, "ideas@ietf.org" <ideas@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ideas/b2v6nPuUuWggLHUBqo4BJX2c2XQ>
Subject: Re: [Ideas] Kathleen Moriarty's Block on charter-ietf-ideas-00-03: (with BLOCK)
X-BeenThere: ideas@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Discussions relating to the development, clarification, and implementation of control-plane infrastructures and functionalities in ID enabled networks." <ideas.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ideas>, <mailto:ideas-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ideas/>
List-Post: <mailto:ideas@ietf.org>
List-Help: <mailto:ideas-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ideas>, <mailto:ideas-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Sep 2017 14:06:23 -0000

Thanks, Alvaro!

I think that would be a big improvement, but maybe adding in the word
requirements so that it sticks a bit more in the resulting work.  How
about:

- Security analysis of the complete system, including authentication,
authorization requirements and protection of any metadata.

On Thu, Sep 28, 2017 at 10:02 AM, Alvaro Retana (aretana)
<aretana@cisco.com> wrote:
> Hi Kathleen!
>
> I agree.  Do you want to suggest something, or would something line this be ok:
>
> - Security analysis of the complete system, including authentication, authorization and protection of any metadata.
>
> Thanks!
>
> Alvaro.
>
>
> On 9/28/17, 9:37 AM, "Kathleen Moriarty" <Kathleen.Moriarty.ietf@gmail.com> wrote:
>
> ----------------------------------------------------------------------
> BLOCK:
> ----------------------------------------------------------------------
>
> I'd like to see an explicit mention of security in the charter text itself in
> terms of how the metadata will be protected or that it will be protected in
> some way.   While the threats draft is helpful, the WG should be bound to
> consider security and provide it with this identifier/locator service.
>
>
>



-- 

Best regards,
Kathleen