Re: [MLS] Recommendation for encrypted group operations

Watson Ladd <watsonbladd@gmail.com> Tue, 30 January 2024 21:15 UTC

Return-Path: <watsonbladd@gmail.com>
X-Original-To: mls@ietfa.amsl.com
Delivered-To: mls@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EACCC151083 for <mls@ietfa.amsl.com>; Tue, 30 Jan 2024 13:15:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.108
X-Spam-Level:
X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9BY1dIsRm4MC for <mls@ietfa.amsl.com>; Tue, 30 Jan 2024 13:15:46 -0800 (PST)
Received: from mail-wm1-x329.google.com (mail-wm1-x329.google.com [IPv6:2a00:1450:4864:20::329]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0744FC14CE27 for <mls@ietf.org>; Tue, 30 Jan 2024 13:15:45 -0800 (PST)
Received: by mail-wm1-x329.google.com with SMTP id 5b1f17b1804b1-40e775695c6so39550035e9.3 for <mls@ietf.org>; Tue, 30 Jan 2024 13:15:45 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1706649344; x=1707254144; darn=ietf.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=tdplUaCanDyOZHxWEEBIAIXBcp0u2Uyh80fOIrdl7uc=; b=LyLsEAvYpV1h8t3vHOOkrPkpk6q/xxoSsdMsaaYnSjmegYtYBD4BL3y2JUJJ6A4LHL 3hMNtf3ZS8XmqZW0D8Ecx9zrtdeIahe2jEIWqnbJ1WYBBxz7zqqCUq1uKyPcUyMrpEa9 II8ncr18SQ6qJQacDuHUtQODsU2kRehBReqo7XKW3og5CkEIJ5QhL8NUfEA0adq2ZNlW lPF3w7/coO/KTU3wogwsiIC7LMamHcrh5HNIZco14TZUbsacOc94C7uoqmJN10e7BhLI y2iu+uljHApOdKPqdFKxqli/Y6f+10kKhmFPRwRl2G7HTSff1C0f/jUEYLkwtsrV7Ffh bZuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1706649344; x=1707254144; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=tdplUaCanDyOZHxWEEBIAIXBcp0u2Uyh80fOIrdl7uc=; b=rm/oxnJMQnUihjOyMLcJWLZP3UTJJ9Mvv42KdmALyeKLgltaVCkfK02q9DrJO1YlNn Z/KEc1qQFm1gvgWiaEhtRu6T5PmpQozEvFuQwAwpAF/S1tMPf0hC66AxHxw62hMc/xuz +bTK9ScTH6VuTS1LF8Pzq0YFLwjsssrfCfDWp2VAfmjlMDmJS9/N8qUKfTVIts3uUPMz muWcJX2cuY52lmIHQZF4j7DjbQKks8RcasFMuNx8kOx1eA/5v7EID1O90Q5e2XhI0wVI lCQLwR+VStY9BrVL4KnEWLUYrYFXHCAKcgU0orFRdj2NOtPyySEp3hlYT/DYadUz6Bjy lffg==
X-Gm-Message-State: AOJu0YztT6ZVXwv70kIQgaaTnIMunYgnL1QPFWdIxVMul4fIkEHXyUXO /put6aspX09ACNfLRkF/hhi23sjepIZvqhSZUQ3/RuQixIX0kafKfVIVJrDZwlGb+CWFLv+22EV DZ0rT+ZDY7k4yx3tY6/cEH80F4+i03YZh
X-Google-Smtp-Source: AGHT+IFANEoXzXmPh5sWW3b1jQ/859xBf4NiZFDGHJd7tpy84hSf9KXnuuLp37752FGApCho5nLbfsey49eNEHiVw+A=
X-Received: by 2002:a05:600c:5489:b0:40e:f626:483d with SMTP id iv9-20020a05600c548900b0040ef626483dmr5974850wmb.13.1706649343831; Tue, 30 Jan 2024 13:15:43 -0800 (PST)
MIME-Version: 1.0
References: <CAJTd26+hJjKaZZenN3bQuVaifJotVhbpQoYEBLBaN7KiOw2_Qg@mail.gmail.com> <CABcZeBNT=EBMrmOJ1pBpaThs6BcVuajXYt+ziXzEMZU0LKjfjg@mail.gmail.com> <CAL02cgQkOxg6f1U-GwAWTOBDv96yvV1bEFZ=F7ES+Qhs7vDJLA@mail.gmail.com> <CAJTd26L-ROx_T5RaDU9cZscTzOZGM9zGmgwN=_iAtGWw2jgJUA@mail.gmail.com> <CAL02cgR03wgwLFARPPwx1ROCsvPUk0xR83FSudjv0b7aR21yzg@mail.gmail.com> <CAJTd26L_AVPwnm+5-H2nA_x4j2tLZZOKHykBNmvk0PO9oUL4Ww@mail.gmail.com> <CABcZeBPOGtFu=UXyqV-ftiMYx1rXJYbxRNE+Hfggsws8bZ2zwA@mail.gmail.com> <CAJTd26JXHjqVbHs91g+oUbuBrX88geOjbGqz1EW-7TUOLgAQWg@mail.gmail.com>
In-Reply-To: <CAJTd26JXHjqVbHs91g+oUbuBrX88geOjbGqz1EW-7TUOLgAQWg@mail.gmail.com>
From: Watson Ladd <watsonbladd@gmail.com>
Date: Tue, 30 Jan 2024 13:15:32 -0800
Message-ID: <CACsn0cniLJgCmMOmW9NVvf4X7H3DimKcwrjNe5rNiHDgf7bbsw@mail.gmail.com>
To: Brendan McMillion <brendanmcmillion@gmail.com>
Cc: Eric Rescorla <ekr@rtfm.com>, Richard Barnes <rlb@ipv.sx>, MLS List <mls@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/mls/QqOOVgeVjRhtICK-C9gp3bqZV5E>
Subject: Re: [MLS] Recommendation for encrypted group operations
X-BeenThere: mls@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Messaging Layer Security <mls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mls>, <mailto:mls-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/mls/>
List-Post: <mailto:mls@ietf.org>
List-Help: <mailto:mls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mls>, <mailto:mls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jan 2024 21:15:48 -0000

On Tue, Jan 30, 2024 at 1:11 PM Brendan McMillion
<brendanmcmillion@gmail.com> wrote:
>
> #1 is only an issue if you are supporting very very large groups, or maybe if you have very inefficient credentials. #2 does not immediately resonate with me, as it sounds more like a concern that you would have in corporate environments?

Groups can be extremely large: there are telegram channels of tens of
thousands of people. The credentials in cross-domain environments can
rapidly swell. At the same time spam can be an issue, and having
server visibility into group joining I think can be a very useful clue
here.
>
> I personally have not followed the mimi wg very closely and I can not say why they made this decision.

Even as someone subscribed I'm not sure I'm aware of this particular
conversation. Anyone got handly links?

Sincerely,
Watson


-- 
Astra mortemque praestare gradatim