Re: COVID-19 contacts tracker (Re: a brief pondering)

John Wroclawski <jtw@csail.mit.edu> Wed, 15 April 2020 17:13 UTC

Return-Path: <jtw@csail.mit.edu>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF3553A0D94 for <ietf@ietfa.amsl.com>; Wed, 15 Apr 2020 10:13:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level:
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QVKV32-_ojC6 for <ietf@ietfa.amsl.com>; Wed, 15 Apr 2020 10:13:47 -0700 (PDT)
Received: from ana-server.csail.mit.edu (ana-server.csail.mit.edu [18.26.1.3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C72A23A0EAE for <ietf@ietf.org>; Wed, 15 Apr 2020 10:13:41 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by ana-server.csail.mit.edu (Postfix) with ESMTP id A6E56D38062A; Wed, 15 Apr 2020 13:13:40 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mydomain = ana-server.csail.mit.edu
Received: from ana-server.csail.mit.edu ([127.0.0.1]) by localhost (ana-server.csail.mit.edu [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id cY6b9t0jxk-S; Wed, 15 Apr 2020 13:13:28 -0400 (EDT)
Received: from callisto-vii.cambridge.schlepp.org (c-66-30-11-134.hsd1.ma.comcast.net [66.30.11.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ana-server.csail.mit.edu (Postfix) with ESMTPSA id 64160D380615; Wed, 15 Apr 2020 13:13:28 -0400 (EDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.14\))
Subject: Re: COVID-19 contacts tracker (Re: a brief pondering)
From: John Wroclawski <jtw@csail.mit.edu>
In-Reply-To: <24cd67ab-df5a-cc2f-745f-ace19d5325ea@network-heretics.com>
Date: Wed, 15 Apr 2020 13:13:27 -0400
Cc: Keith Moore <moore@network-heretics.com>, Carsten Bormann <cabo@tzi.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <59D332BC-F85E-4744-A3D0-2514551154E8@csail.mit.edu>
References: <fd6b7ee2-cdbe-14a1-0087-ce61282b22f6@lear.ch> <29D0DCA7-1D72-428F-A6DD-05511D90C039@cable.comcast.com> <2fa6a8c8-7639-a378-2ff1-3f8697556b66@cisco.com> <24cd67ab-df5a-cc2f-745f-ace19d5325ea@network-heretics.com>
To: ietf@ietf.org
X-Mailer: Apple Mail (2.3445.104.14)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf/ddHTb7OOjEZyBSnErL3POfGTmCI>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Apr 2020 17:13:50 -0000


> On Apr 15, 2020, at 12:42 PM, Keith Moore <moore@network-heretics.com> wrote:
> On 4/15/20 12:07 PM, Benoit Claise wrote:
>> Hi,
>>> 
>>> Which leads me to a question: what can this community (and similar/adjacent ones) do productively together to help? What new things are happening on the network from which we can learn and quickly adapt/improve?
>>> 
>> In my wish list, I would see this community helping with a COVID-19 contacts tracker:
>>     - with clear specifications
>>     - that respects the privacy concerns, for all parties
> 
> I don't think it's possible.  Anything that can be used to trace contacts for medical purposes can be used to trace contacts for political purposes.
> Keith

I imagine many people here are aware of efforts such as PACT

https://pact.mit.edu/
https://pact.mit.edu/wp-content/uploads/2020/04/The-PACT-protocol-specification-ver-0.1.pdf

and the quite similar Apple-Google proposal:

Privacy Safe Contact Tracing using Bluetooth Low Energy
https://blog.google/documents/57/Overview_of_COVID-19_Contact_Tracing_Using_BLE.pdf

(More, with links to preliminary technical specs, at:
https://blog.google/inside-google/company-announcements/apple-and-google-partner-covid-19-contact-tracing-technology )

I think the existence of these things, and the speed they’re moving at, pretty much validates Carsten’s observation that:

> On Apr 15, 2020, at 12:25 PM, Carsten Bormann <cabo@tzi.org> wrote:
> (1) We are not fast enough.  (Some of us are, but as an organization we aren’t.)

but also, it’s interesting to see how these ideas address “privacy preserving”, what the model they’ve adopted is, and how they might at least try to address Keith’s point.

cheers, -john