Re: [Model-t] Definition of an intermediary

Martin Thomson <mt@lowentropy.net> Thu, 23 December 2021 23:57 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: model-t@ietfa.amsl.com
Delivered-To: model-t@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8AE23A0CC1 for <model-t@ietfa.amsl.com>; Thu, 23 Dec 2021 15:57:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=ccZus73H; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=ZmnJPPjd
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4nF1iHuY4ekd for <model-t@ietfa.amsl.com>; Thu, 23 Dec 2021 15:57:14 -0800 (PST)
Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 075EF3A0CBF for <model-t@iab.org>; Thu, 23 Dec 2021 15:57:14 -0800 (PST)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 6A24F5C00E4 for <model-t@iab.org>; Thu, 23 Dec 2021 18:57:13 -0500 (EST)
Received: from imap41 ([10.202.2.91]) by compute3.internal (MEProxy); Thu, 23 Dec 2021 18:57:13 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=mime-version:message-id:in-reply-to:references:date:from:to :subject:content-type:content-transfer-encoding; s=fm1; bh=zqMvw n2eAwXnxvhVt8pl+Kp7jFRAlTdWN4fhDcoC7Xw=; b=ccZus73HYbulQ4MLY0PNl zWvI5Eff7mqsO6dwj0D7jBq31jNzy6Wk6octtGaFpb+Po+MUmTM1MdDvVYSzR8bo Mla0na5IgTau1LgLg5YZr+mobiNi/CLs8vK0/M8NKIxsVy6wHnX0sMK1GBdtD9QF 7El7jviVmKmQnTOGTIKDBPNli9fH5DkApWayGfmTv1uNaKwZua+mkK04xnDpJrSb 9V5kvG3yaPfVs5VoswwEIUgt88CTI4ZnPn3vVQM75OlbWQfib9W29rmmBfq4UqIk Y5zqj9SJsoklsvmYDHDrCZ6ao73ds9GDrhCtBXOh0iuYiuJ1Hkh8ETZpPIihhuMp w==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=zqMvwn2eAwXnxvhVt8pl+Kp7jFRAlTdWN4fhDcoC7 Xw=; b=ZmnJPPjdA+0pkzglWlSPsXYEdz4yovU3FefH51MWgonE4ROTlqEmdqv/X 088MJGiOFbqAwkLmsrhMrFatrtr2FLUhRrzNcxqjgkM9dg0zhBzV/x2LL3CIEO6G 51aAq+3j8u1dg94E8AT/Xmf89473K97Kh8/cKbjo5JhA6Pj7LebXSLTDDhrXAhji 9+RM58Pu0sA62bNZnM8ubzLb9E8YhUKZlWKjGiL1GhtkaOJaOS9+/ZLJqAE6kCyM fELdl9JJ9N3+0+IE5TMslDIp/SwlNm+InKZ6dZZzz2bnGFM4g5T9voNlahYvvmJQ GACoLBtV0K/SjdJVQTkJP1+NM0Plw==
X-ME-Sender: <xms:2QzFYf64MFyEacezhpDNK8SrZ2LXX2jRPczrbLlanuzAb-pKOQIRUw> <xme:2QzFYU4UER2lSrjmTJlyPQzrI4r_GAyx8bksFPWJnQtLF64fZhLna_rdAW_RyIx_d yqamlVkUJZj4Al5SkU>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvuddruddtledgtdekucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfgjfhffhffvufgtgfesth hqredtreerjeenucfhrhhomhepfdforghrthhinhcuvfhhohhmshhonhdfuceomhhtsehl ohifvghnthhrohhphidrnhgvtheqnecuggftrfgrthhtvghrnhepgfejueduieffledtge elheejvdettdejudduhefggeefgfekgfeuieetgefftddtnecuvehluhhsthgvrhfuihii vgeptdenucfrrghrrghmpehmrghilhhfrhhomhepmhhtsehlohifvghnthhrohhphidrnh gvth
X-ME-Proxy: <xmx:2QzFYWcRzAtDJ_Djr9LLzYQWtH85MO2fPxatGok6KEnqZR-fshIyQw> <xmx:2QzFYQJfXf_KQAqRbJfPDxdoSc0FDywRYQL5OME6UGLPWEK22ka3IQ> <xmx:2QzFYTIEOSy6XKPR4T9tESS86skAUzE2Kr8nl1VkYMoQxrfprYJ5zQ> <xmx:2QzFYYUFNDC26BI3hC5-so6mzgmXqJUxMIJNh7c3U9MogNS2TfTJ9A>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 424173C00CF; Thu, 23 Dec 2021 18:57:13 -0500 (EST)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.5.0-alpha0-4525-g8883000b21-fm-20211221.001-g8883000b
Mime-Version: 1.0
Message-Id: <54ac97ce-2aa3-4b52-9a44-5aa76b9b9c89@www.fastmail.com>
In-Reply-To: <6676A8BC-205E-43F9-B56A-3D94B736901D@tzi.org>
References: <aed0b88c-34db-46b3-847c-9a82b60c8a80@www.fastmail.com> <1261779701.26774.1640271475608@appsuite-gw1.open-xchange.com> <6676A8BC-205E-43F9-B56A-3D94B736901D@tzi.org>
Date: Fri, 24 Dec 2021 10:56:52 +1100
From: Martin Thomson <mt@lowentropy.net>
To: model-t@iab.org
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/model-t/QQx5w2qk88xl-A2eEoQYA3IFJDg>
Subject: Re: [Model-t] Definition of an intermediary
X-BeenThere: model-t@iab.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussions of changes in Internet deployment patterns and their impact on the Internet threat model <model-t.iab.org>
List-Unsubscribe: <https://www.iab.org/mailman/options/model-t>, <mailto:model-t-request@iab.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/model-t/>
List-Post: <mailto:model-t@iab.org>
List-Help: <mailto:model-t-request@iab.org?subject=help>
List-Subscribe: <https://www.iab.org/mailman/listinfo/model-t>, <mailto:model-t-request@iab.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Dec 2021 23:57:18 -0000

On Fri, Dec 24, 2021, at 03:20, Carsten Bormann wrote:
> On 2021-12-23, at 15:57, Vittorio Bertola 
> <vittorio.bertola=40open-xchange.com@dmarc.ietf.org> wrote:
>> 
>> between the fingers of the sending human being and the eyes of the receiving human being (or of the single human being involved, in human-to-server communication) is an intermediary. 
>
> … which demonstrates that the term intermediary is always relative to a 
> perspective.

This is the key observation, I think.  If we're to make contributions that are of use to protocol designers, then we need to think about perspectives other than the human one.  Once the effect on the true end-to-end system of communication between people has been duly considered, there might be work to do.  Engagement at an appropriate level allows us to provide concrete and actionable guidance.

> Very important for me is whether 0, 1, or 2 endpoints agreed to go 
> through this intermediary (or even had the initiative to ask for or 
> select the intermediary).

0, 1, or N :)

I generally agree here, though when you say "agreed", that gets interesting very quickly.  The notion of consent has some real limitations here.  Part of what I'm talking about in the draft is ensuring that these interjections by intermediaries are deliberate, that participants are identified, and the extent of their capabilities understood.  That is all in service of a more comprehensible and robust system.