IETF Logo Mail Archive

Re: [Model-t] minimization review

Martin Thomson <mt@lowentropy.net> Wed, 06 April 2022 06:10 UTC

Return-Path: <mt@lowentropy.net>
X-Original-To: model-t@ietfa.amsl.com
Delivered-To: model-t@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 741C43A10F3 for <model-t@ietfa.amsl.com>; Tue, 5 Apr 2022 23:10:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.108
X-Spam-Level:
X-Spam-Status: No, score=-7.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=lowentropy.net header.b=jr+gk3Lo; dkim=pass (2048-bit key) header.d=messagingengine.com header.b=fXiCm005
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0ol0BeBp58dQ for <model-t@ietfa.amsl.com>; Tue, 5 Apr 2022 23:10:27 -0700 (PDT)
Received: from wout3-smtp.messagingengine.com (wout3-smtp.messagingengine.com [64.147.123.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2078D3A10E6 for <model-t@iab.org>; Tue, 5 Apr 2022 23:10:27 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 223DD3200E83; Wed, 6 Apr 2022 02:10:25 -0400 (EDT)
Received: from imap41 ([10.202.2.91]) by compute3.internal (MEProxy); Wed, 06 Apr 2022 02:10:25 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lowentropy.net; h=cc:cc:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to; s=fm2; bh=Nk4LbsmqaKZKZjg60gsznYheMT5TFk gdzMQ/TpEEJJw=; b=jr+gk3LoeJOZas4ATT8E8wTwjAkWxTlBxViMMVhHXb1Mlr tpgSS0D6eRQFH7vJPOVq7MBKQTb2isr0duHjcA+dLs2ltv/xDHe31/ofEXqvOscJ 01i9rhWnYd33n93ZAj5vgwwLXkGLAGu38FVnlX9WO1rUV7NN8KetQManyvZakdt8 ChOdxbmHfkT+Bt4dd7bzL2nHgaS8tTbIx55WJwRv7pp9pIMChnAheXo2bbe3XVe9 TjdXHVtqYA/mnHs/c5HS08YXK+WdBF85R4zOU+vcEOkuWvKzrFTXdN33Ef32zVXw EM+VSLh7gL6etYDYOWLEEMywt/T3EKJKwb+SwF/A==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=Nk4LbsmqaKZKZjg60 gsznYheMT5TFkgdzMQ/TpEEJJw=; b=fXiCm0054koclLyYqM76mskyuZc0/sAzP PAcKEjin10wGwhWfjAMu1OccLgavSuDEsiWmsiWEiio9R+CjZqYoam0T4QUZH3Jk wGDmhedQkvVDeGRhgjZg1svz9oPjZ5EyG2/kMMDynieHJzYJQ+2ogUz0jc7mffc2 9Gsypw8VplIaX7t5IJQGdlOOj2j6pyxueg7F+FHzMR6C+Ef1tt6KwmCEtq2pxSQT LDlzuJeAwnZQSWINbCgUdXgIGjkt8dLir5b/hdqngsyoJAJ8ljz5CoLZTVACUeAw +wHtEhUIRoaLK+qAP0Un/wxhFbiH9CfaFAU1LeaSX6CELMscHTJLA==
X-ME-Sender: <xms:0C5NYjanG7ySnFMIwR_iqZ6thZDnNaRH05hyOFtXBIHux4NDJfTMHw> <xme:0C5NYibSvjHv3FsMqi-YS7b-5JvjvoosxopXpJVEjOLtQVcxm1PPxihrks16LJWIz 1Ne0PELGIfvqCraPVw>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddrudejhedguddtfecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefofgggkfgjfhffhffvufgtsehttdertderredtnecuhfhrohhmpedfofgr rhhtihhnucfvhhhomhhsohhnfdcuoehmtheslhhofigvnhhtrhhophihrdhnvghtqeenuc ggtffrrghtthgvrhhnpefhiedttdeviefhjeejgfevfeeuudfggfekveekheeugeegleev keevkedthfeuieenucffohhmrghinhepihgvthhfrdhorhhgnecuvehluhhsthgvrhfuih iivgeptdenucfrrghrrghmpehmrghilhhfrhhomhepmhhtsehlohifvghnthhrohhphidr nhgvth
X-ME-Proxy: <xmx:0C5NYl_2dUVMSYhHo5g4fd2OK4Txo0DpuQb-jQjy_iiTa9VfP03ENw> <xmx:0C5NYpqsClXhEvgFWcGImief7XCjLuahUxbsh2UYbXZs57Jkf18Ftw> <xmx:0C5NYuqd2bIy1Rmvg8DIvTlfZ5CtKy7_t2oPW8H35NLI9aMjf7qR1w> <xmx:0C5NYsHjYFfni44nZ8f8KIoqixHjEav7yc-Pi_mHhUNTe1rEWefGVQ>
Received: by mailuser.nyi.internal (Postfix, from userid 501) id 55F3E3C0265; Wed, 6 Apr 2022 02:10:24 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.7.0-alpha0-385-g3a17909f9e-fm-20220404.001-g3a17909f
Mime-Version: 1.0
Message-Id: <0eb564a4-a263-4ffd-a44f-a1cc2ede1229@beta.fastmail.com>
In-Reply-To: <FF747CEC-D381-40DE-97D7-FA7AFE32406E@piuha.net>
References: <f621a2ed-5cbb-4d77-aa8e-abbd167b7ad1@beta.fastmail.com> <FF747CEC-D381-40DE-97D7-FA7AFE32406E@piuha.net>
Date: Wed, 06 Apr 2022 16:10:05 +1000
From: Martin Thomson <mt@lowentropy.net>
To: Jari Arkko <jari.arkko@piuha.net>
Cc: model-t@iab.org
Content-Type: text/plain
Archived-At: <https://mailarchive.ietf.org/arch/msg/model-t/x-rG2XkBURarc40tgxZXTpjwPXc>
Subject: Re: [Model-t] minimization review
X-BeenThere: model-t@iab.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussions of changes in Internet deployment patterns and their impact on the Internet threat model <model-t.iab.org>
List-Unsubscribe: <https://www.iab.org/mailman/options/model-t>, <mailto:model-t-request@iab.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/model-t/>
List-Post: <mailto:model-t@iab.org>
List-Help: <mailto:model-t-request@iab.org?subject=help>
List-Subscribe: <https://www.iab.org/mailman/listinfo/model-t>, <mailto:model-t-request@iab.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Apr 2022 06:10:33 -0000

On Wed, Apr 6, 2022, at 05:40, Jari Arkko wrote:
> Are you referring to the second-to-last paragraph of Section 2? If so, 
> I agree that the text definitely needs work.

This one: https://www.ietf.org/archive/id/draft-arkko-iab-data-minimization-principle-01.html#section-2-4

Which starts: "This recommendation is of course very similar to the current approach to communications security."

> (But I think the questions about who and how much may not be clearly 
> separate in all cases. 

Fair point, it's all minimization.  But the new input here is that it is not sufficient to control breadth, it is also necessary to control depth.

v2.23.0 | Report a Bug | By Email