was: not really pgp signing in van

SM <sm@resistor.net> Wed, 11 September 2013 16:34 UTC

Return-Path: <sm@resistor.net>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C72421E8149 for <ietf@ietfa.amsl.com>; Wed, 11 Sep 2013 09:34:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.299
X-Spam-Level:
X-Spam-Status: No, score=-102.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_21=0.6, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id puF-8awsdzGn for <ietf@ietfa.amsl.com>; Wed, 11 Sep 2013 09:34:49 -0700 (PDT)
Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id 62C0021E80B6 for <ietf@ietf.org>; Wed, 11 Sep 2013 09:34:49 -0700 (PDT)
Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id r8BGYWSG002165; Wed, 11 Sep 2013 09:34:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1378917278; bh=BB0+bFdc+D0GqYLX/BWnYJCRwTIg8wn4udc+Nfe8diY=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=gVc0HpgaGYwfA3vAhTeZ1bkp2HdcoDZhISoXk0nxNNNbHBxdvJV5LVXjxErAUKZfm iZLgJCrltX8+W2IBSNZ2zt07mCqOZpC1HaSLP2D//CVPrwJFqXrQI+TaobSlBCrMJu oD+A7LuDC4FvkM7leHMsEByc/9cYx8i9Erq3uWtA=
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1378917278; i=@resistor.net; bh=BB0+bFdc+D0GqYLX/BWnYJCRwTIg8wn4udc+Nfe8diY=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=ttNWVETe5+H0te5lHviF21u614otTs6Ln35u87yE89GAoDg47G5BVuDRcsW9i6W75 siwAjQDdq2NJ/34huuROQyzFpvcveDttnKcPcHu1JboBK49l3FvC5xIBkm7v+iMnFx i9zXmOQl5x/KuF4iJLb08rAC0dZHZlzPcDOkueDM=
Message-Id: <6.2.5.6.2.20130911063431.0bc95118@resistor.net>
X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6
Date: Wed, 11 Sep 2013 08:41:19 -0700
To: Yoav Nir <ynir@checkpoint.com>
From: SM <sm@resistor.net>
Subject: was: not really pgp signing in van
In-Reply-To: <F6A860A8-BB7C-46F4-9AEB-D39237C6585A@checkpoint.com>
References: <20130910010719.33978.qmail@joyce.lan> <8D23D4052ABE7A4490E77B1A012B63077527E234@mbx-01.win.nominum.com> <alpine.BSF.2.00.1309092125360.34090@joyce.lan> <8D23D4052ABE7A4490E77B1A012B63077527E488@mbx-01.win.nominum.com> <CAMm+LwhZ9OKesZW+kFct5Gps6_JBzcNUUBQ-y5J21zMcxmL6EQ@mail.gmail.com> <241D1DD6-C096-49D6-A05B-33638846BF15@nominum.com> <CAMm+LwhhUzDX=AaJXSCkqJofHQ9ZiN11GmCw-reO0OPmNC4fyA@mail.gmail.com> <E2ECE63C-D8E4-4A5A-BEA3-295C027D0E71@nominum.com> <alpine.BSF.2.00.1309101745410.46654@joyce.lan> <B27CD2F3-D71E-446A-9166-AC05B49718F4@nominum.com> <CAMm+LwiDCA1-KCm_Sj757Ty67qn1y0QFNoCd76qMxTAhOMXj7w@mail.gmail.com> <31D54C08-0246-4CE3-A958-18BAAE59FA0C@nominum.com> <F6A860A8-BB7C-46F4-9AEB-D39237C6585A@checkpoint.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format="flowed"
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Sep 2013 16:34:50 -0000

Hi Yoav,
At 03:28 11-09-2013, Yoav Nir wrote:
>I don't think you'd even need the threats.

[snip]

>Notice the important parts of that pitch. A sense of danger; Making 
>the target feel either patriotic or a humanitarian; Sharing a 
>"secret" with the target, making him part of the "inner circle". 
>Making the target feel important, like "only your cooperation can 
>help us stop the next attack". If this pitch is executed correctly, 
>by the end, the target is asking for an NSL as CYA. I've seen this 
>kind of thing done once years ago, but it was done very poorly and didn't work.

Yes.

My reading of Phillip Hallam-Baker's comment is that there isn't 
anything to worry about in relation to Comodo except that he does not 
have any knowledge about the operational side.  John Levine asked how 
likely they would risk their reputation.  Theodore Ts'o mentioned 
that there really is no incentive for them to do a good job.

Over the last few years nobody noticed that there might be a 
problem.  That's not reassuring.  I doubt that people would not 
comply with a NSL.

Regards,
-sm