Re: Bruce Schneier's Proposal to dedicate November meeting to saving the Internet from the NSA
Stefan Winter <stefan.winter@restena.lu> Fri, 06 September 2013 14:31 UTC
Return-Path: <stefan.winter@restena.lu>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8947C11E8199 for <ietf@ietfa.amsl.com>; Fri, 6 Sep 2013 07:31:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.509
X-Spam-Level:
X-Spam-Status: No, score=-3.509 tagged_above=-999 required=5 tests=[AWL=1.089, BAYES_00=-2.599, GB_I_LETTER=-2, WEIRD_PORT=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e92iFsDO1TwQ for <ietf@ietfa.amsl.com>; Fri, 6 Sep 2013 07:31:11 -0700 (PDT)
Received: from smtprelay.restena.lu (smtprelay.restena.lu [IPv6:2001:a18:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 84EA811E819B for <ietf@ietf.org>; Fri, 6 Sep 2013 07:31:10 -0700 (PDT)
Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id 8371F10589 for <ietf@ietf.org>; Fri, 6 Sep 2013 16:31:08 +0200 (CEST)
Received: from aragorn.restena.lu (aragorn.restena.lu [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 75F6010583 for <ietf@ietf.org>; Fri, 6 Sep 2013 16:31:08 +0200 (CEST)
Message-ID: <5229E727.6010000@restena.lu>
Date: Fri, 06 Sep 2013 16:31:03 +0200
From: Stefan Winter <stefan.winter@restena.lu>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: ietf@ietf.org
Subject: Re: Bruce Schneier's Proposal to dedicate November meeting to saving the Internet from the NSA
References: <5F053C0B-4678-4680-A8BF-62FF282ADDCE@softarmor.com> <20130906140824.GB1249@thunk.org>
In-Reply-To: <20130906140824.GB1249@thunk.org>
X-Enigmail-Version: 1.5.2
OpenPGP: id=8A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="WsuU2I9bO4WKIqvueHIKN7gS04XD99sWD"
X-Virus-Scanned: ClamAV
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 06 Sep 2013 14:31:13 -0000
+1. I'd +10 if I could :-) > One thing that would be helpful is to encourage the use of > Diffie-Hellman everywhere. Even without certificates that can be > trusted, we can eliminate the ability of casual, dragnet-style > surveillance. Sure, an attacker can still do a MITM attack. But (a) > people who are more clueful can do certificate pinning/verification, > and (b) if the NSA is really putting data taps into tier 1 providers' > high speed interconnects, they can only carry out MITM attacks on a > bulk scale by placing racks and racks of servers, which will require > significant amounts of cooling and power, in places that are much more > likely where they would be noticed. It's no longer a data tap hidden > away somewhere in a closet near a tier 1's NAP. > > For too long, I think, we've let the perfect be the enemy of the good. > Using TLS with DH to secure SMTP connections is valuable even if it is > subject to MITM attacks, and even if the NSA/FBI can hand a National > Security Letter to the cloud provider. At least this way they will be > forced to go the NSL route (and it will show up in whatever > transparency reports that Google or Microsoft or Facebook are allowed > to show to the public), or spend $$$ on huge racks of servers in > public data centers, which maybe means less money to subvert standards > setting activities. > > Although perfect security is ideal, increasing the cost of casual > style dragnet surveillance is still a Good Thing. > > - Ted > -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
- Bruce Schneier's Proposal to dedicate November me… Dean Willis
- Re: Bruce Schneier's Proposal to dedicate Novembe… Martin Millnert
- Re: Bruce Schneier's Proposal to dedicate Novembe… Lucy Lynch
- Re: Bruce Schneier's Proposal to dedicate Novembe… Brian E Carpenter
- Re: Bruce Schneier's Proposal to dedicate Novembe… cb.list6
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Re: Bruce Schneier's Proposal to dedicate Novembe… Phillip Hallam-Baker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Noel Chiappa
- Re: Bruce Schneier's Proposal to dedicate Novembe… Brian E Carpenter
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dave Crocker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Brian E Carpenter
- Re: Bruce Schneier's Proposal to dedicate Novembe… Melinda Shore
- Re: Bruce Schneier's Proposal to dedicate Novembe… Vinayak Hegde
- Re: Bruce Schneier's Proposal to dedicate Novembe… Andrew Sullivan
- Re: Bruce Schneier's Proposal to dedicate Novembe… Vinayak Hegde
- Re: Bruce Schneier's Proposal to dedicate Novembe… Noel Chiappa
- Re: Bruce Schneier's Proposal to dedicate Novembe… Phillip Hallam-Baker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Phillip Hallam-Baker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Randy Bush
- Re: Bruce Schneier's Proposal to dedicate Novembe… Melinda Shore
- Re: Bruce Schneier's Proposal to dedicate Novembe… Jari Arkko
- Re: Bruce Schneier's Proposal to dedicate Novembe… Eliot Lear
- Re: Bruce Schneier's Proposal to dedicate Novembe… Jari Arkko
- Re: Bruce Schneier's Proposal to dedicate Novembe… SM
- Re: Bruce Schneier's Proposal to dedicate Novembe… Måns Nilsson
- Re: Bruce Schneier's Proposal to dedicate Novembe… Hannes Tschofenig
- Re: Bruce Schneier's Proposal to dedicate Novembe… Adam Novak
- Re: Bruce Schneier's Proposal to dedicate Novembe… t.p.
- Re: Bruce Schneier's Proposal to dedicate Novembe… Vinayak Hegde
- Re: Bruce Schneier's Proposal to dedicate Novembe… Hannes Tschofenig
- Re: Bruce Schneier's Proposal to dedicate Novembe… Stewart Bryant
- Re: Bruce Schneier's Proposal to dedicate Novembe… Stephen Farrell
- Re: Bruce Schneier's Proposal to dedicate Novembe… Hannes Tschofenig
- Re: Bruce Schneier's Proposal to dedicate Novembe… Jorge Amodio
- Re: Bruce Schneier's Proposal to dedicate Novembe… Peter Saint-Andre
- Re: Bruce Schneier's Proposal to dedicate Novembe… Alan Johnston
- Re: Bruce Schneier's Proposal to dedicate Novembe… Martin Sustrik
- Re: Bruce Schneier's Proposal to dedicate Novembe… Eliot Lear
- Re: Bruce Schneier's Proposal to dedicate Novembe… Pete Resnick
- Re: Bruce Schneier's Proposal to dedicate Novembe… Scott Brim
- Re: Bruce Schneier's Proposal to dedicate Novembe… Bjoern Hoehrmann
- Re: Bruce Schneier's Proposal to dedicate Novembe… Noel Chiappa
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dave Crocker
- Re: Bruce Schneier's Proposal to dedicate Novembe… John C Klensin
- Re: Bruce Schneier's Proposal to dedicate Novembe… Theodore Ts'o
- Re: Bruce Schneier's Proposal to dedicate Novembe… Theodore Ts'o
- Re: Bruce Schneier's Proposal to dedicate Novembe… Tony Finch
- Re: Bruce Schneier's Proposal to dedicate Novembe… Theodore Ts'o
- Re: Bruce Schneier's Proposal to dedicate Novembe… Stefan Winter
- Re: Bruce Schneier's Proposal to dedicate Novembe… Pete Resnick
- Re: Bruce Schneier's Proposal to dedicate Novembe… Joe Abley
- Re: Bruce Schneier's Proposal to dedicate Novembe… Noel Chiappa
- Re: Bruce Schneier's Proposal to dedicate Novembe… Scott Brim
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dave Crocker
- Re: Bruce Schneier's Proposal to dedicate Novembe… John C Klensin
- Re: Bruce Schneier's Proposal to dedicate Novembe… Brian Trammell
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Re: Bruce Schneier's Proposal to dedicate Novembe… Stephane Bortzmeyer
- Re: Bruce Schneier's Proposal to dedicate Novembe… Pete Resnick
- Re: Bruce Schneier's Proposal to dedicate Novembe… Scott Brim
- Re: Bruce Schneier's Proposal to dedicate Novembe… John C Klensin
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dave Crocker
- Re: Bruce Schneier's Proposal to dedicate Novembe… John C Klensin
- Re: Bruce Schneier's Proposal to dedicate Novembe… SM
- Re: Bruce Schneier's Proposal to dedicate Novembe… Spencer Dawkins
- Re: Bruce Schneier's Proposal to dedicate Novembe… Tony Finch
- Re: Bruce Schneier's Proposal to dedicate Novembe… Arturo Servin
- Re: Bruce Schneier's Proposal to dedicate Novembe… Noel Chiappa
- Re: Bruce Schneier's Proposal to dedicate Novembe… Hannes Tschofenig
- Re: Bruce Schneier's Proposal to dedicate Novembe… Hannes Tschofenig
- Re: Bruce Schneier's Proposal to dedicate Novembe… Abdussalam Baryun
- Re: Bruce Schneier's Proposal to dedicate Novembe… Michael Richardson
- Re: Bruce Schneier's Proposal to dedicate Novembe… Adam Novak
- Re: Bruce Schneier's Proposal to dedicate Novembe… Spencer Dawkins
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dean Willis
- RE: Bruce Schneier's Proposal to dedicate Novembe… George, Wes
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dean Willis
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dave Crocker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Re: Bruce Schneier's Proposal to dedicate Novembe… Keith Moore
- Teachable moment Brian E Carpenter
- Re: Bruce Schneier's Proposal to dedicate Novembe… Måns Nilsson
- Re: Bruce Schneier's Proposal to dedicate Novembe… SM
- Re: Bruce Schneier's Proposal to dedicate Novembe… David Conrad
- Re: Bruce Schneier's Proposal to dedicate Novembe… Tim Bray
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Re: Bruce Schneier's Proposal to dedicate Novembe… David Morris
- Re: Bruce Schneier's Proposal to dedicate Novembe… Scott Brim
- Re: Bruce Schneier's Proposal to dedicate Novembe… SM
- Re: Bruce Schneier's Proposal to dedicate Novembe… Dave Crocker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Phillip Hallam-Baker
- Re: Bruce Schneier's Proposal to dedicate Novembe… Patrik Fältström
- Re: Bruce Schneier's Proposal to dedicate Novembe… Jorge Amodio
- Re: Bruce Schneier's Proposal to dedicate Novembe… Patrik Fältström
- Re: Bruce Schneier's Proposal to dedicate Novembe… Phillip Hallam-Baker
- Re: Bruce Schneier's Proposal to dedicate Novembe… ned+ietf
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ted Lemon
- Equably when it comes to privacy SM
- Re: Equably when it comes to privacy Phillip Hallam-Baker
- Re: Equably when it comes to privacy Jorge Amodio
- Re: Equably when it comes to privacy Phillip Hallam-Baker
- Re: Equably when it comes to privacy Scott Kitterman
- Re: Equably when it comes to privacy SM
- Re: Equably when it comes to privacy joel jaeggli
- Re: Equably when it comes to privacy Janet P Gunn
- RE: Bruce Schneier's Proposal to dedicate Novembe… l.wood
- Re: Bruce Schneier's Proposal to dedicate Novembe… John C Klensin
- Re: Equably when it comes to privacy SM
- Re: Equably when it comes to privacy joel jaeggli
- RE: Bruce Schneier's Proposal to dedicate Novembe… l.wood
- Re: Bruce Schneier's Proposal to dedicate Novembe… Ross Finlayson
- Re: Bruce Schneier's Proposal to dedicate Novembe… Eliot Lear
- Re: Teachable moment Jari Arkko
- Re: Bruce Schneier's Proposal to dedicate Novembe… Erik Nordmark
- Re: Equably when it comes to privacy Abdussalam Baryun
- Re: Bruce Schneier's Proposal to dedicate Novembe… Tobias Gondrom
- Re: Bruce Schneier's Proposal to dedicate Novembe… Tobias Gondrom
- Re: Bruce Schneier's Proposal to dedicate Novembe… Phillip Hallam-Baker