[Mimi] Re: draft describing flows with pseudonyms

[Rohan Mahy <[e-mail]>]

These are great questions Konrad. I would be happy to start our pseudonym
privacy discussion with them.

I also asked for agenda time on abuse reporting. As this is a concrete PR
on mimi-protocol, and had some discussion at IETF 120, I'd like to discuss
this first.

Thanks,
-rohan

On Wed, Aug 21, 2024, 05:28 Konrad Kohbrok <[e-mail]>
wrote:

> Hi Rohan,
>
> Thanks for pushing the discussion forward! I’ve read your draft and I
> think you’re broaching some important topics that we should talk about
> before we go into specifics such as concrete flows and cryptographic
> mechanisms.
>
> I would propose the following (somewhat intertwined) topics/questions for
> today’s interim:
>
> - What are the requirements for our pseudonym-based protocol? What
> features and UX do we want to enable while using pseudonyms? To what degree
> should/must abuse reporting be possible?
> - What assumptions do we want to make about the provider-local protocol?
> Can the provider connect pseudonyms to real identities and to what degree?
> Does it have to know which groups each of its users is a member of?
> - What is our threat model? Should pseudonyms be per-group? To what degree
> do we want to consider traffic analysis?
>
> Once we have some agreement on all of those questions, I think we’re in a
> good place to discuss how to concretely implement the pseudonym-based
> approach.
>
> Cheers,
> Konrad
>
>
> > On 19. Aug 2024, at 15:54, Rohan Mahy <[e-mail]> wrote:
> >
> > Discussion Wednesday on any of these topics is good with me.
> >
> > I mention MIMIMI in the pseudonyms draft but didn't have time to compile
> the similarities and differences.
> >
> > thanks,
> > -rohan
> >
> > On Mon, Aug 19, 2024, 02:04 Raphael Robert <[e-mail]>
> wrote:
> > Hi Rohan,
> >
> > Thanks for the write-up. Happy to discuss this at the next interim.
> There’s definitely some overlap with
> https://www.ietf.org/archive/id/draft-kohbrok-mimi-metadata-minimalization-00.html.
> Our next move was to provide more details as to how MIMIMI works internally.
> >
> > As an alternative or additional agenda item we could also discuss
> https://www.ietf.org/archive/id/draft-robert-mimi-attachments-02.html.
> There was some discussion recently about how attachments should be
> accessed/proxied that is not covered in-depth on that draft. The draft
> however covers how attachments should be encrypted.
> >
> > Thanks
> >
> > Raphael
> >
> >> On 19. Aug 2024, at 04:04, Rohan Mahy <[e-mail]> wrote:
> >>
> >> Hi,
> >> I wrote a draft describing some possible flows which improve privacy
> using pseudonyms but also permit selective disclosure of elements of the
> user's "real" identity to the other participants of a room.
> >>
> >> If enough people have looked at the draft, I am happy to discuss it at
> the interim on Wednesday (time permitting of course).
> >>
> >> https://www.ietf.org/archive/id/draft-mahy-mimi-pseudonyms-00.html
> >>
> >> Many thanks,
> >> -rohan
> >> --
> >> Mimi mailing list -- [e-mail]
> >> To unsubscribe send an email to [e-mail]
> >
> > --
> > Mimi mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
>
>