Re: [Model-t] What are we trying to protect

[Stephen Farrell <[e-mail]>]

Partly agreeing, partly quibbling:-)

On 04/08/2019 17:37, Bret Jordan wrote:
> We need to ensure everyone here in the IETF understands the bigger
> problem, 

It is certain that not every IETF participant will care about
understanding every detail of every possible threat. They do
have other things do be doing:-)

> the larger risk, and larger attack surface.  When we design
> protocols and only consider a small handful of threats, then we
> inevitably hurt the market.

IMO we ought not only think in terms of "the market" - I'd
hope rather that everyone sometimes thinks of more than commerce
as the Internet impacts on people in other ways that are
relevant in this discussion.

> The more of these things we can document and the more we can bring
> them to light, the better everything will be in the end.
Yes, but it's important to document things in a way that can
lead up to then winnowing things down to something that ends
up useful to that population of IETFers who are not security
or privacy specialists.

Cheers,
S.