Re: [Model-t] What are we trying to protect

Bret Jordan <jordan.ietf@gmail.com> Sun, 04 August 2019 22:33 UTC

Return-Path: <jordan.ietf@gmail.com>
X-Original-To: model-t@ietfa.amsl.com
Delivered-To: model-t@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B630312010F for <model-t@ietfa.amsl.com>; Sun, 4 Aug 2019 15:33:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.998
X-Spam-Level:
X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rOYVWfgDIaln for <model-t@ietfa.amsl.com>; Sun, 4 Aug 2019 15:33:03 -0700 (PDT)
Received: from mail-pg1-x52e.google.com (mail-pg1-x52e.google.com [IPv6:2607:f8b0:4864:20::52e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3C0B12010E for <model-t@iab.org>; Sun, 4 Aug 2019 15:33:03 -0700 (PDT)
Received: by mail-pg1-x52e.google.com with SMTP id o13so38634727pgp.12 for <model-t@iab.org>; Sun, 04 Aug 2019 15:33:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=4O/J6/oS9UGvjqfiF0p5KBvqjJ7xvjMUqD2IQ9eLyFc=; b=cUjTbSBpUgJ3UJUjryU+NREAgiKOCcYCgPiiWl89Vbjz6zksb4GTgJbIb7b827yqsS h6JDTnf6Md3hrrXXVVlsB1iPvOV5abRjLTFN2/Wn3yiRwH/j7JrIt+hf7QQhhg+mtxQZ lySVLiznUlWK8kGvSntsTOV6uW/7f3aOMaiu2YJfmiRt1u+DghQOLGybtkPIWA5hQ856 iUVikBgaWz7b2wQ+slBjYMs3D6sQWlwgptHSbCaGrK4KWT8ZuL/iA6ADfNg4Ps0Dn5QY ebgb8omYKCBs80O6m7tUkGYRh/4veeArLUkPDKLM91I2XCuIp47M8n8+Z5U7Cs4Celid fRxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=4O/J6/oS9UGvjqfiF0p5KBvqjJ7xvjMUqD2IQ9eLyFc=; b=qywmLpM6QCnhgS+1BLp0G409SNq9ZFYitxRr/u8boqIAsSTjTxU3WMEiTe7nma8sG9 3pvdgoA+nbEom4/RRroiki1jtZsnMiT1ZRL60Nu84V2zZGXaPLS8MhbXEQxD7N0LwhAA y6WBkbA+R3bse9NyHoYYJLYQaU3Dtd0qZxAhb4QO2yWAtuY8Kwz+NvEOR+ZFPtVx+uFV X+RWoj4ftQEERTP4bxLejcrFI/zoA2vLzaDlWsHCXgATu3eny8wIR9P/g5xnSM2ktiSU +RbjrZFp4ZU4UbCpm8F4to6R/wU7nZx8NxzVPNIKDYqKDyVvDzFHOqE8oKbnz44uluT9 s8LA==
X-Gm-Message-State: APjAAAX2ESfWR6ZJZhLstzU0GYQerXw4nHfOVfkQb8h6ktLbywgXuf6K bNzmSI/Jk8PviK1EsL6Spoo=
X-Google-Smtp-Source: APXvYqysJP104Opixx2hpB95bSuz619IGeZv4Etuh3PcXNCgIlPnJGP7BJ3/mcefksCdH5hXDW3/yA==
X-Received: by 2002:a63:67c6:: with SMTP id b189mr43023892pgc.163.1564957983314; Sun, 04 Aug 2019 15:33:03 -0700 (PDT)
Received: from [10.128.64.149] ([136.60.227.81]) by smtp.gmail.com with ESMTPSA id b126sm119349397pfa.126.2019.08.04.15.33.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 04 Aug 2019 15:33:02 -0700 (PDT)
From: Bret Jordan <jordan.ietf@gmail.com>
Message-Id: <4DCC4BA0-8A4E-4A82-9C83-8E2FBB437B9D@gmail.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_E3204480-A2B8-4274-B9B4-535D9A6CC97E"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Sun, 04 Aug 2019 16:32:59 -0600
In-Reply-To: <C78C397D-59FB-43DB-BD19-FC1784C2F557@fugue.com>
Cc: Watson Ladd <watsonbladd@gmail.com>, Eric Rescorla <ekr@rtfm.com>, Dominique Lazanski <dml@lastpresslabel.com>, Christian Huitema <huitema@huitema.net>, model-t@iab.org
To: Ted Lemon <mellon@fugue.com>
References: <c3a112ba-baab-1cb0-97ad-21ff9999a637@cs.tcd.ie> <29756028-95f1-e6e5-b3ea-562cbc635df0@sandelman.ca> <5ef15ad2-5b20-e871-0d01-17cf906051c1@cs.tcd.ie> <22633.1564768705@localhost> <e7c02d44-353f-406c-818e-06a2e49ee212@www.fastmail.com> <5879878A-7CEA-4030-BB72-108CC4122719@gmail.com> <d253231a-d35d-e7c9-e3ae-5c7d7915566e@bluepopcorn.net> <06F0AE14-4413-4022-A804-C1B58E2702CE@fugue.com> <52BAC141-CB25-4072-B556-6325912F1ADD@gmail.com> <9a1555ca-6699-75f1-683e-2a3a2a539a11@cs.tcd.ie> <fbb6866d-87af-abea-42b4-8bb45959ea6a@huitema.net> <A8ABBBFF-9967-4F3B-974F-2DC5953D5DD9@gmail.com> <CABcZeBOKnaa7t3Nc=uq4sB2OQ+uKp=+_LHqX3bBBmpy3RY3dCA@mail.gmail.com> <86157132-D401-4033-A72B-AD4859DB6696@lastpresslabel.com> <CABcZeBPBy+6W-Yg4vMF1aCyNkE7XAJ81HaM75hKa--gRnpUVbg@mail.gmail.com> <5281A343-35C0-4F4D-949D-02C46FA07801@lastpresslabel.com> <86639B71-F616-48CC-96AB-719F7168F087@gmail.com> <CACsn0cktsrVnzVByV9NzcE4jDpMdJ1UBPzut5PTzVSesMXXaNg@mail.gmail.com> <ADF23214-F1A8-4996-A56D-3DB037D81EA9@fugue.com> <F3098ECC-3B02-4242-90C8-15EC8D8F0CBF@gmail.com> <C78C397D-59FB-43DB-BD19-FC1784C2F557@fugue.com>
X-Mailer: Apple Mail (2.3445.104.11)
Archived-At: <https://mailarchive.ietf.org/arch/msg/model-t/z0Io8l6qQctj_CfDGjpqbDkR7LA>
Subject: Re: [Model-t] What are we trying to protect
X-BeenThere: model-t@iab.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussions of changes in Internet deployment patterns and their impact on the Internet threat model <model-t.iab.org>
List-Unsubscribe: <https://www.iab.org/mailman/options/model-t>, <mailto:model-t-request@iab.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/model-t/>
List-Post: <mailto:model-t@iab.org>
List-Help: <mailto:model-t-request@iab.org?subject=help>
List-Subscribe: <https://www.iab.org/mailman/listinfo/model-t>, <mailto:model-t-request@iab.org?subject=subscribe>
X-List-Received-Date: Sun, 04 Aug 2019 22:33:06 -0000

I do not want to boil the ocean.  As we work through this, we can figure out the right balance for this community and other communities that will need to look at and reference our work.


Thanks,
Bret
PGP Fingerprint: 63B4 FC53 680A 6B7D 1447  F2C0 74F8 ACAE 7415 0050
"Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

> On Aug 4, 2019, at 11:11 AM, Ted Lemon <mellon@fugue.com> wrote:
> 
> On Aug 4, 2019, at 11:37 AM, Bret Jordan <jordan.ietf@gmail.com <mailto:jordan.ietf@gmail.com>> wrote:
>> The more of these things we can document and the more we can bring them to light, the better everything will be in the end. 
> 
> Of course, wearing my IETF pedant hat, we do need to be careful not to try to boil the ocean.
>