IETF Logo Mail Archive

Re: Proposed Statement on "HTTPS everywhere for the IETF"

Niels Dettenbach <nd@syndicat.com> Wed, 03 June 2015 19:09 UTC

Return-Path: <nd@syndicat.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B3AD1B29C8 for <ietf@ietfa.amsl.com>; Wed, 3 Jun 2015 12:09:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.311
X-Spam-Level:
X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qtf-Mzq7l_z7 for <ietf@ietfa.amsl.com>; Wed, 3 Jun 2015 12:09:43 -0700 (PDT)
Received: from mail.syndicat.com (mail.syndicat.com [62.146.89.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56B621B29BE for <ietf@ietf.org>; Wed, 3 Jun 2015 12:09:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=syndicat.com; s=x; h=Content-Type:MIME-Version:References:In-Reply-To:Message-ID:Date:Subject:To:From; bh=mPxuATpoK/9zYGUHmYhPJLYg3Q7KMV2s+fDKY5wUfcU=; b=AZ6SjfBU58wbmywLScsl26tDXZqrg4e5mjou2If3R9MBmQA1M3nWTv/ViMc9f9rVtui8QN1FfIX0gcw9U/Y2T7pB5JZbQ4xke+FoyzdmQLgELPJ0Ak+SKsnV3NzRDan/vyOLjwmpi8oGiU7wn9DiWtpLSYhW+LCOSUOG+f7A1ic=;
Received: from localhost.syndicat.com ([127.0.0.1] helo=localhost) by mail.syndicat.com with esmtp (Syndicat.com PostHamster 4.84) (envelope-from <nd@syndicat.com>) id 1Z0E2m-0002AT-OT for ietf@ietf.org; Wed, 03 Jun 2015 21:09:40 +0200
X-Virus-Scanned: amavisd-new at syndicat.com
Received: from mail.syndicat.com ([127.0.0.1]) by localhost (mail.syndicat.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GnCplX99o-Kd for <ietf@ietf.org>; Wed, 3 Jun 2015 21:09:40 +0200 (CEST)
Received: from p50876cb7.dip0.t-ipconnect.de ([80.135.108.183] helo=gongo.localnet) by mail.syndicat.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Syndicat.com PostHamster 4.84) (envelope-from <nd@syndicat.com>) id 1Z0E2m-0001oS-G2 for ietf@ietf.org; Wed, 03 Jun 2015 21:09:40 +0200
From: Niels Dettenbach <nd@syndicat.com>
To: ietf@ietf.org
Subject: Re: Proposed Statement on "HTTPS everywhere for the IETF"
Date: Wed, 03 Jun 2015 21:09:38 +0200
Message-ID: <8153080.MdfeK1Lqd7@gongo>
Organization: Syndicat IT&Internet
User-Agent: KMail/4.14.6 (Linux/4.0.1-niels; KDE/4.14.7; x86_64; ; )
In-Reply-To: <543B4D57-C84C-49B7-B108-827333434F72@cisco.com>
References: <20150601164359.29999.35343.idtracker@ietfa.amsl.com> <543B4D57-C84C-49B7-B108-827333434F72@cisco.com>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="nextPart13159076.fHoe7vtxv0"; micalg="pgp-sha512"; protocol="application/pgp-signature"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/qSvp9uN9orME2QRZLuVCjiWQ8_0>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Jun 2015 19:09:45 -0000

Am Mittwoch, 3. Juni 2015, 18:31:13 schrieb Cullen Jennings:
> The internet has already been harmed by too many years of security that is
> not turned on. 
If so - why not using signatures in YOUR mails btw.?

HTTPS x509 SSL/TLS isn't simply "security on" (this is btw THE major technical 
misunderstanding/-interpretation of HTTPS out today, leading to huge new 
scurity holes and attack vectors in practice) - this may be correct for i.e. 
with telnet->ssh or partly SMTP-> SMTPs/TLS (where it is still not applicable 
and/or applicated correctly until today in most practical cases), just btw...

> Take a hum at next plenary and find out if people want the IETF to actually
> use security or not.
...sorry, but This was NOT a question here - assume you mis- (or even not) 
readed correctly.


-- 
 ---
 Niels Dettenbach
 Syndicat IT & Internet
 http://www.syndicat.com
 PGP: https://syndicat.com/pub_key.asc
 ---

v2.23.0 | Report a Bug | By Email