Re: Hum theatre

Phillip Hallam-Baker <hallam@gmail.com> Thu, 07 November 2013 17:48 UTC

MIME-Version: 1.0
In-Reply-To: <3B8251D7-23C4-413F-90B0-DB6EEC6ACF1C@tzi.org>
References: <527AF986.4090504@dcrocker.net> <CAHBU6iuDXQok_QRZe7BL__Vmkn447vUCSViDgrVkaedKAHcnfw@mail.gmail.com> <m2bo1w29zw.wl%randy@psg.com> <527B294E.20406@gmail.com> <E0485FA4-7F1A-4C78-B160-27C981B05DD4@cisco.com> <3B8251D7-23C4-413F-90B0-DB6EEC6ACF1C@tzi.org>
Date: Thu, 07 Nov 2013 12:48:33 -0500
Message-ID: <CAMm+Lwghyi19muapvSwuLzczmfi-XrmoPHXw=GTDiEyrrJ80GA@mail.gmail.com>
Subject: Re: Hum theatre
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Carsten Bormann <cabo@tzi.org>
Content-Type: multipart/alternative; boundary="001a1134b65ee1395904ea99df4b"
Cc: "Klaas Wierenga (kwiereng)" <kwiereng@cisco.com>, IETF Discussion <ietf@ietf.org>
Precedence: list

The sentiment is unanimous

Opinion on how to act on that sentiment remains divided.


One of the reasons that opinion on how to act is divided is that the
discussion of TLS everywhere is focused on the value TLS is designed to
bring to secure Internet protocols rather than the total value proposition
of TLS which was always intended to be wider.

The point of VeriSign Class 3 and later Organization Validation criteria
and the Extended Validation criteria is to establish ACCOUNTABILITY. The
authentication is a means to that end and the encryption is a nice
byproduct.


People have been using TLS with no accountability but authentication. Which
was only bad because the browsers didn't differentiate between the two
until Extended Validation was deployed.

Using crypto is not a problem, telling people that they are safe when they
are not is the problem. At the moment the IETF does not use metrics to
determine how difficult it would be for an attacker to break a system. This
is my effort in the area:

http://tools.ietf.org/html/draft-hallambaker-prismproof-trust-00

Re: Hum theatre Francis Dupont
Re: Hum theatre Ted Lemon
Hum theatre Dave Crocker
Re: Hum theatre Yoav Nir
Re: Hum theatre Phillip Hallam-Baker
Re: Hum theatre Tim Bray
Re: Hum theatre Randy Bush
Hum theatre Abdussalam Baryun
Re: Hum theatre Jorge Amodio
Re: Hum theatre Larry Masinter
Re: Hum theatre Ralph Droms
Re: Hum theatre Fred Baker (fred)
Re: Hum theatre Brian E Carpenter
Re: Hum theatre Pete Resnick
Re: Hum theatre Stefan Winter
Re: Hum theatre Martin J. Dürst
Re: Hum theatre Fred Baker (fred)
Re: Hum theatre Fred Baker (fred)
Re: Hum theatre Stefan Winter
Re: Hum theatre Richard Barnes
Re: Hum theatre Christian de Larrinaga
Re: Hum theatre Arturo Servin
Re: Hum theatre Dave Crocker
Re: Hum theatre Scott Brim
Re: Hum theatre Randy Bush
Re: Hum theatre Bob Hinden
Re: Hum theatre Tim Bray
Re: Hum theatre Randy Bush
Re: Hum theatre Paul Hoffman
Re: Hum theatre Scott Brim
Re: Hum theatre Klaas Wierenga (kwiereng)
Re: Hum theatre Klaas Wierenga (kwiereng)
Re: Hum theatre Carsten Bormann
Re: Hum theatre Dave Crocker
Re: Hum theatre Pete Resnick
Re: Hum theatre Phillip Hallam-Baker
Re: Hum theatre Jari Arkko
Re: Hum theatre Jari Arkko
Re: Hum theatre Richard Barnes
Re: Hum theatre Klaas Wierenga (kwiereng)
Re: Hum theatre Pete Resnick
Re: Hum theatre Dave Cridland
Re: Hum theatre Ted Lemon
Re: Hum theatre Dave Crocker
Re: Hum theatre Andrew Sullivan
Re: Hum theatre Jorge Amodio