Re: The CIA mentions us

Phillip Hallam-Baker <phill@hallambaker.com> Thu, 09 March 2017 16:19 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CD5812959C for <ietf@ietfa.amsl.com>; Thu, 9 Mar 2017 08:19:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.668
X-Spam-Level:
X-Spam-Status: No, score=-1.668 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.229, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 70QDcPYhUdQo for <ietf@ietfa.amsl.com>; Thu, 9 Mar 2017 08:19:53 -0800 (PST)
Received: from mail-yb0-x22d.google.com (mail-yb0-x22d.google.com [IPv6:2607:f8b0:4002:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72D1A1293D6 for <ietf@ietf.org>; Thu, 9 Mar 2017 08:19:53 -0800 (PST)
Received: by mail-yb0-x22d.google.com with SMTP id g132so3773247ybg.3 for <ietf@ietf.org>; Thu, 09 Mar 2017 08:19:53 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=5J4H+PAoVvmrAXgTUYPXDyw2fDACJw3EnFefjuJYWw0=; b=AmFymR2njA5fmyXqUsrBAKPS4vzaVzZVKPnZnjKRnX36yJAPQ/Dk2Vc1NXnnqgYXUD SA3DHJq0QStyHIvDBUusyO5YLQ00fSxDLSoYN3faO4YP2aam0RZ8SFQsWY9JsJ7HCiw4 1vsc/A42AbneUNdFlAQePQ4lDV+o/uNvrLYjLcJouUGd6LOkTCnQH4NdXE/Ijn8xyCsG sXAyxK3ewHTrRnWoUb/n8koiR+Rh4oflKIq4KrIUkwg2dqWIOBb6X7TgrfbGF73I3ypw wxNl1CSp2qkMbJDuBCQ5rH6FMcCswVhk4ApFQoI2+q4WVIj2KhJbXRiHadGpK2ghSJeQ bFkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=5J4H+PAoVvmrAXgTUYPXDyw2fDACJw3EnFefjuJYWw0=; b=g7OGnbmPJjkSgSe9/g9NBy2EgSM8J3ZqmrpJ6LQ6PTKuKDtLpoE3ekZCfgUT18QqqQ YuXYQDxmOdCjYA3FCBVSaDI+FzGwp9c05j/K6eLhGQLdfRIB0wr9n45AQAPhhkyBTw19 Zzjy6H3tMuv1C1BOMYeghiQOqyUXrN1W1VpunBxos09u5JeR/E1p+psOtUIsmfGT+c89 DuWqJE4sKqZUUXG3y8OAcg3bity75WjIlkSkakN4HCKCvKGY7UT3K2h6Gydt4lJlTAeR fXlTfmxDaAJ0l1OXfGhgpwhggnF8v307jGM4Sfdq+2Mo2KAjpRG/uzrisYHJGBWS64il Y1hg==
X-Gm-Message-State: AMke39lCGbdsqDtwfvlxgYcIU2iBibdQZfHHHTTcWP29n1jBaWvTfXWlE1Ng3ohbT/iCiSCQHzL9lT33MMi3Hw==
X-Received: by 10.37.36.86 with SMTP id k83mr4649938ybk.130.1489076392556; Thu, 09 Mar 2017 08:19:52 -0800 (PST)
MIME-Version: 1.0
Sender: hallam@gmail.com
Received: by 10.83.19.20 with HTTP; Thu, 9 Mar 2017 08:19:51 -0800 (PST)
In-Reply-To: <alpine.LRH.2.01.1703071034050.3764@egate.xpasc.com>
References: <20170307155346.fwhhpnsm4wl6zzoo@nic.fr> <CAMm+Lwh5E-NPXsVWQpK2tA8Rr+6SpvJJKxMbiks7_F1umxz2FQ@mail.gmail.com> <20170307160840.duv7wwg5sm23nrek@nic.fr> <44d06f90-0f38-f6de-8eb1-cf8262369cd5@bogus.com> <c6df6333-1a08-aa0c-c1de-55d335234f2a@si6networks.com> <alpine.LRH.2.01.1703071034050.3764@egate.xpasc.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
Date: Thu, 09 Mar 2017 11:19:51 -0500
X-Google-Sender-Auth: 0Z8LO9G77YSw_4WsZ5QZtVIq46g
Message-ID: <CAMm+LwioHOJxDZudH8Ya9SYv5DT1fPMJ5ypDR8O5JGa4HwxPvg@mail.gmail.com>
Subject: Re: The CIA mentions us
To: David Morris <dwm@xpasc.com>
Content-Type: multipart/alternative; boundary="001a113d46ec6bffff054a4e9d9d"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/XxEA-07koos27qB8nHUfnbwkvqU>
Cc: IETF Discussion Mailing List <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Mar 2017 16:19:55 -0000

​OK just so people know. I am working on this with a well known co-author
and we have a totally serious purpose behind the humorous aspects.

One point is that this is material people developing apps should be reading
so as to develop counter-counter measures.

The bigger point is that these documents and the weaponized attacks should
have been protected by end-to-end encryption throughout their lifecycle,
including on the Web server. We are currently at a conference on building
international norms for cyber and would like to establish 'lock up your
weapons' as a norm.

Besides being a norm that benefits the community, it is a norm that would
benefit every one of the 117 national cyber commands that currently exist.






​

On Tue, Mar 7, 2017 at 1:35 PM, David Morris <dwm@xpasc.com> wrote:

>
>
> On Tue, 7 Mar 2017, Fernando Gont wrote:
>
> > On 03/07/2017 01:23 PM, joel jaeggli wrote:
> > > On 3/7/17 8:08 AM, Stephane Bortzmeyer wrote:
> > >> On Tue, Mar 07, 2017 at 11:02:54AM -0500,
> > >>  Phillip Hallam-Baker <phill@hallambaker.com> wrote
> > >>  a message of 54 lines which said:
> > >>
> > >>> This is all really good advice. I think it should be published as an
> > >>> RFC.
> > >> I suspect we may run into IPR problems. The CIA author did not read
> > >> the Note Well.
> > >>
> > > https://en.wikipedia.org/wiki/Copyright_status_of_work_by_
> the_U.S._government
> >
> > Well... one would still need to assess whether such work is official or
> > not. :-)  At times, intelligence agency's work is not official --
> > actually, officially, such work didn't happen. :-)
>
> Yeah, leaked classified materials don't need a copyright for protection.
> One can go to jail with out ever getting a chance to discuss copyright
> status.
>