[Medup] New draft for MEDUP requirements and threat model

Bernie Hoeneisen <bernie@ietf.hoeneisen.ch> Sat, 13 July 2019 15:05 UTC

Date: Sat, 13 Jul 2019 17:05:38 +0200
From: Bernie Hoeneisen <bernie@ietf.hoeneisen.ch>
To: IETF MEDUP ML <medup@ietf.org>
Message-ID: <alpine.DEB.2.20.1907131658590.23633@softronics.hoeneisen.ch>
User-Agent: Alpine 2.20 (DEB 67 2015-01-07)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"; format="flowed"
Archived-At: <https://mailarchive.ietf.org/arch/msg/medup/J2UuvghcD6aK3ROPExuJDwI7C9U>
Subject: [Medup] New draft for MEDUP requirements and threat model
Precedence: list

Dear MEDUP mailign list

Please be informed that we submitted a new draft on Privacy and Security 
Threat Analysis and Requirements for Private Messaging that may be 
addressed in the future Working group (see below).

We tried to formulate the requirements more generic than those that the 
pEp reference implementations are based on. We are interested in your feedback 
on this list in particular:

- to learn whether or not we are on the right track
- whether other implementations in this area have different requirements

We will discuss this also during the Wednesday afternoon session (MEDUP 
non-WG meeting).

All the best
  Bernie



---------- Forwarded message ----------
Date: Mon, 8 Jul 2019 17:16:06
From: internet-drafts@ietf.org
To: Bernie Hoeneisen <bernie@ietf.hoeneisen.ch>,
     Iraklis Symeonidis <iraklis.symeonidis@uni.lu>
Subject: New Version Notification for draft-symeonidis-medup-requirements-00.txt


A new version of I-D, draft-symeonidis-medup-requirements-00.txt
has been successfully submitted by Bernie Hoeneisen and posted to the
IETF repository.

Name:		draft-symeonidis-medup-requirements
Revision:	00
Title:		Privacy and Security Threat Analysis and Requirements for Private Messaging
Document date:	2019-07-08
Group:		Individual Submission
Pages:		19
URL:            https://www.ietf.org/internet-drafts/draft-symeonidis-medup-requirements-00.txt
Status:         https://datatracker.ietf.org/doc/draft-symeonidis-medup-requirements/
Htmlized:       https://tools.ietf.org/html/draft-symeonidis-medup-requirements-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-symeonidis-medup-requirements


Abstract:
    [RFC8280] has identified and documented important principles, such as
    Data Minimization, End-to-End, and Interoperability in order to
    enable access to fundamental Human Rights.  While (partial)
    implementations of these concepts are already available, many current
    applications lack Privacy support that the average user can easily
    navigate.  This document covers analysis of threats to privacy and
    security and derives requirements from this threat analysis.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat

[Medup] New draft for MEDUP requirements and thre… Bernie Hoeneisen