Re: [Patient] [EXT] Re: the IETF participant choice

Brian Witten <brian_witten@symantec.com> Tue, 20 March 2018 11:20 UTC

Return-Path: <brian_witten@symantec.com>
X-Original-To: patient@ietfa.amsl.com
Delivered-To: patient@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30D60126DC2 for <patient@ietfa.amsl.com>; Tue, 20 Mar 2018 04:20:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.31
X-Spam-Level:
X-Spam-Status: No, score=-4.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=symantec.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E5J7vpzm6zKZ for <patient@ietfa.amsl.com>; Tue, 20 Mar 2018 04:20:07 -0700 (PDT)
Received: from tussmtoutape02.symantec.com (tussmtoutape02.symantec.com [155.64.38.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23ABC126DED for <patient@ietf.org>; Tue, 20 Mar 2018 04:20:06 -0700 (PDT)
Received: from tussmtmtaapi01.symc.symantec.com (tus3-f5-symc-ext-prd-snat1.net.symantec.com [10.44.130.1]) by tussmtoutape02.symantec.com (Symantec Messaging Gateway) with SMTP id B7.9A.06850.56EE0BA5; Tue, 20 Mar 2018 11:20:05 +0000 (GMT)
X-AuditID: 0a2c7e32-681329e000001ac2-05-5ab0ee65e6bc
Received: from tus3xchcaspin01.SYMC.SYMANTEC.COM (tus3-f5-symc-ext-prd-snat2.net.symantec.com [10.44.130.2]) by tussmtmtaapi01.symc.symantec.com (Symantec Messaging Gateway) with SMTP id F9.DA.07071.56EE0BA5; Tue, 20 Mar 2018 11:20:05 +0000 (GMT)
Received: from TUSXCHMBXWPI02.SYMC.SYMANTEC.COM (10.44.91.34) by tus3xchcaspin01.SYMC.SYMANTEC.COM (10.44.91.13) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 20 Mar 2018 04:20:05 -0700
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (10.44.128.8) by TUSXCHMBXWPI02.SYMC.SYMANTEC.COM (10.44.91.34) with Microsoft SMTP Server (TLS) id 15.0.1365.1 via Frontend Transport; Tue, 20 Mar 2018 04:20:05 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=symantec.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qYTIoNo5iRz/SQpwOtIkx28u1ChMzWSfxaj3xldBBFA=; b=3tuQlef4BUsz761xTkS0WWmnQXzLldpGqaCASC08RCgMl0kalBbo/Zn3aS5npouLXmPCijmf4rYq5Y3YBF/3ZHQXP++JHFWK7Uvh+Efxjod876yHGYV51D92xgupQQ9H1fx94ZlT5q9+FqC5jPYi8upvz0oUXXsqWF+p2mBu7rk=
Received: from BY2PR16MB0871.namprd16.prod.outlook.com (10.164.172.145) by BY2PR16MB0470.namprd16.prod.outlook.com (10.163.191.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Tue, 20 Mar 2018 11:20:03 +0000
Received: from BY2PR16MB0871.namprd16.prod.outlook.com ([10.164.172.145]) by BY2PR16MB0871.namprd16.prod.outlook.com ([10.164.172.145]) with mapi id 15.20.0588.017; Tue, 20 Mar 2018 11:20:03 +0000
From: Brian Witten <brian_witten@symantec.com>
To: Ted Lemon <mellon@fugue.com>, "tony@yaanatech.co.uk" <tony@yaanatech.co.uk>
CC: "patient@ietf.org" <patient@ietf.org>
Thread-Topic: [EXT] Re: [Patient] the IETF participant choice
Thread-Index: AQHTv74CL2nmQS6F4Ua37Fr1k74gd6PYBOkAgAAMwYCAAAUoAIAAICUigADBeACAAAFVxQ==
Date: Tue, 20 Mar 2018 11:20:03 +0000
Message-ID: <BY2PR16MB087188ADFEBFAE646DA86AB293AB0@BY2PR16MB0871.namprd16.prod.outlook.com>
References: <MWHPR16MB14881688FE400E3277CA8A9393310@MWHPR16MB1488.namprd16.prod.outlook.com> <MWHPR16MB1488853B0E4F7BB8E557288D93370@MWHPR16MB1488.namprd16.prod.outlook.com> <MWHPR16MB148845FB069D03625BC399B193370@MWHPR16MB1488.namprd16.prod.outlook.com> <MWHPR16MB1488848D7AC828EBB8DA90B093350@MWHPR16MB1488.namprd16.prod.outlook.com> <DM5PR16MB148477E1FAA4C210A3B013F7930A0@DM5PR16MB1484.namprd16.prod.outlook.com> <alpine.LRH.2.21.1712141805020.15188@bofh.nohats.ca> <MWHPR16MB148859D8FC007D9B9D5005E6930A0@MWHPR16MB1488.namprd16.prod.outlook.com> <988132f9-478d-2012-9ad2-353534f07db7@yaanatech.co.uk> <e89e816d-76da-c062-b3fc-ae2e73c176ae@yaanatech.co.uk> <DF3346A5-89C8-4299-AA8F-A4C14F98B7EF@fugue.com> <2638b64d-ec63-b862-38e5-929f9ae6ad66@yaanatech.co.uk> <CAPt1N1n-wxVjPsLprbfgBYCmRy1Ha0ZPHigAgmnv4vu8fxiSrQ@mail.gmail.com> <6ef35751-665b-79fe-9c54-feab9f6d809f@yaanatech.co.uk> <BY2PR16MB0871CCA5C9239C481297EED893D40@BY2PR16MB0871.namprd16.prod.outlook.com>, <c31dedc5-4a36-70ec-b511-d5016aa5cb02@yaanatech.co.uk>
In-Reply-To: <c31dedc5-4a36-70ec-b511-d5016aa5cb02@yaanatech.co.uk>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=brian_witten@symantec.com;
x-originating-ip: [2001:67c:370:128:3d09:425c:e39c:b3df]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; BY2PR16MB0470; 7:wMetJ/mDxaieKMcH8Oq9E9EQKLsLS1l4/5Hxge6hhJviwj6XIFH0TTnoiRng26PB95BY3XFigiEMnSl+DogDvbv3RPayHhyT+ZbxRB7a8esB1K9kdf6czVOQEkKYCm+4ndyx7+bCeSvDhDM9SR9dcZ1e8hJsEYrgCpc5EvGEMqKYhzN9VC4Ssi0xenFydNT/8oL4incKRxeKUUDRU8bb8eOgM2Qc7SfMq1gHkbfEmrE8FX0nRkPJnUbkubGsDKNs
x-ms-exchange-antispam-srfa-diagnostics: SOS;
x-ms-office365-filtering-correlation-id: c173e223-d63e-486b-d0d6-08d58e5486d0
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BY2PR16MB0470;
x-ms-traffictypediagnostic: BY2PR16MB0470:
x-microsoft-antispam-prvs: <BY2PR16MB04704AC741215885B9878FFA93AB0@BY2PR16MB0470.namprd16.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(244540007438412)(278428928389397)(192374486261705)(21532816269658);
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3231221)(944501310)(52105095)(3002001)(6041310)(20161123558120)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:BY2PR16MB0470; BCL:0; PCL:0; RULEID:; SRVR:BY2PR16MB0470;
x-forefront-prvs: 061725F016
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(366004)(346002)(396003)(376002)(189003)(199004)(51914003)(51414003)(9686003)(54896002)(8676002)(81166006)(81156014)(478600001)(3280700002)(236005)(93886005)(99286004)(110136005)(6116002)(8936002)(2900100001)(2906002)(76176011)(86362001)(316002)(7696005)(345774005)(5660300001)(2950100002)(14454004)(186003)(77096007)(229853002)(74316002)(6606003)(19627405001)(105586002)(6246003)(53936002)(97736004)(7736002)(25786009)(59450400001)(4326008)(33656002)(102836004)(3660700001)(68736007)(106356001)(55016002)(2501003)(10290500003)(46003)(6436002)(6506007)(53546011)(9010500006); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR16MB0470; H:BY2PR16MB0871.namprd16.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: symantec.com does not designate permitted sender hosts)
x-microsoft-antispam-message-info: REKo8sdmywvO4EOoNmS/2oZJWtMUFu1VwIYKVEs582wGhmIaQDJnKHITjNiUBUGyPIJV0cC2xNsPeq011xMq9t7vCNbOuyTqZtkHzDqE5C62UupgBYlH7fEAImRyOkjsJxOifJ1SFZvkbu3uDekBxa8wfpNXDdB3C+M+391yrMH3pHH1LfLrvLl7gqFTRazcrf0mcJVIoIRsj5mXA2CU1oieCOKrA6ijfEe8LNVW1YUpokw39E43voH6/ynbeQ9bU2SpTdWj73xQR2WjIABsYXPq8eI/TuW1eki/imVYFnQFh6aHxC1TiljSOeWLKsuTjMS2oTLiPngTgLASiBbmdw==
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_BY2PR16MB087188ADFEBFAE646DA86AB293AB0BY2PR16MB0871namp_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: c173e223-d63e-486b-d0d6-08d58e5486d0
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Mar 2018 11:20:03.1928 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 3b217a9b-6c58-428b-b022-5ad741ce2016
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR16MB0470
X-OriginatorOrg: symantec.com
X-Brightmail-Tracker: H4sIAAAAAAAAA02SfUhTURjGOfde767D6Wl+vShKjCI1Nb9KKa2gAqGM6g8JM2zoNcXpZJui QrK0SDTQMsmPPqaYojkYpbXITERNp5mzEEqjZAZ+lqw0NdS8Owr+c/i9z/O8vOccXo6WvrHz 4FIzNLwqQ66QsWJG7F+AAvifhrigziLfiLmWbipiujM0orCROU5HFww3iKLr61eo6B+ztew5 Ok4cmcQrUrN51YGjV8Qpn4bKRJnX43P6e9dYLWqMKUb2HOAwqNEPMMVIzEmxFUH7Lz0qRpzN MHYfIfoygoE2HUuKHgTD+gYRKaYQTPV9Q0LBYCsFQ0WjiDhVFPxbmd7q6UPw+2YRK0xkcSD0 rI3bCeyCz8PGchkrDKSxL/QWhwuyM46ENl25iESiYH58liEcCyu3mmmBGbwXzP0dSGAJjocX txdoMquag8/mRUow7PEJ0I6X2hoQdoO/phabTmN3+DL5mCI/gKG+/QNN2BWmLet2JB8PJv3M lh4BTS8HWcJeMPK4xPZKwK0U6P683QoFwEJFxRbHQNN0E0VCm6+vr2xkiOEHpsU6lnxxGrRZ LpSh0OoddyKsBPNSt40leBf0V00yRPcH3WsrS3g/NNTO0ts82Gmhduo6JGpGuzVZanW6Rpml kWfyQSGB6tz0ROGQb65UYmCiMv0Zsi1VfogRWQ1nuhDmkMxB4v3dECe1k2dvJrsQcLTMRbLv 0qYkSZLn5vEqZYIqS8Gru5Anx8jcJXOS+3FSfFWu4dN4PpNXbbsUZ++hRZ69wVHXch3X8wyu +pHCpcqTEx2nW264GRK/Zngcm88vLzzsrHD4mGAsab0baMx6NOaUdvFd+R716NMhrUOkynE+ djXcHDRm8ll9JV3YqMsvVfp4K5NrHk6UhVnOHjKuJh80GzV33l/mOB+nJzE5z3WTfKTulHfe zMq93gSvqgeZMkadIg/2o1Vq+X9cTxj+UAMAAA==
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrEKsWRmVeSWpSXmKPExsXCpdPEpJv6bkOUwfpvqhZv1hxhsnh5wNii eTmLA7NH04Vl7B5Llvxk8nj6eiFbAHMUl01Kak5mWWqRvl0CV8aVcxPYCxpjKk4e+8vWwLjc t4uRg0NCwERixxHrLkYuDiGBH4wSp7cuYINwjjJKXFi7jB3CecEo8eLEfUYQh0XgE5PEuY5r jBCZmUwSv3++hOo5wSjxubUDyOHkYBPQkzj69w4riC0iECjx/8cENpCFzAKaEse6zEHCwgI2 ElsXTGaHKLGVeHvnNQuEHSbxs30VM4jNIqAqcfHkPkYQm1cgRmJbzwdmiF2zOCRuXvzKBJLg FHCWaLjTD9bAKCAm8f3UGrA4s4C4xK0n88FsCQEBiSV7zjND2KISLx//Y4Woj5E4tfYVVNxC YuX2M2wQtqzEpfndYF9KCGxhkljwZT9Uka7Eh6lToWxfiZUvVzJBFAF9v2TGchaIhJbEqa+L 2CBBnC2x9XEQRDhXYn7jYTaI+pnMEr+bXzJPYNSfheRYCDtf4uK3I2A2r4CgxMmZT1gg4joS C3Z/YoOwtSWWLXzNDGOfOfCYCVl8ASP7KkaFktLi4tyS3JLExIJMA0O94srcZBCRCExSyXrJ +bmbGMGJylliB+O+Pz6HGAU4GJV4eDXurI8SYk0sA6o8xCjNwaIkzrs/tjBKSCA9sSQ1OzW1 ILUovqg0J7X4ECMTB6dUA2PMX8kTR358Or95r+EyOea27bdVjnKXN+8sE1FPf2DDt2FzxtOw 9ZmsN7ffPXa1SUp4/6Rdtzfd5y+unyXuOeGATfrXPLOTWW9N3h18daGmzzn6wKK7KVbvJ2is XWzrNW/xdIdABy9jr4fOx5u0DzM6LNqfZnYlZod1zM+dB6/UX667HDBBIo5JiaU4I9FQi7mo OBEAFfC2IDUDAAA=
X-CFilter-Loop: TUS03
Archived-At: <https://mailarchive.ietf.org/arch/msg/patient/PgP-mLgBiwTRrEgkNr8yUXEfUA0>
Subject: Re: [Patient] [EXT] Re: the IETF participant choice
X-BeenThere: patient@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: Protecting against Attacks Tunneling In Encrypted Network Tunnels <patient.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/patient>, <mailto:patient-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/patient/>
List-Post: <mailto:patient@ietf.org>
List-Help: <mailto:patient-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/patient>, <mailto:patient-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Mar 2018 11:20:09 -0000

Hi Tony,


Thanks for the info as usual, but I'd like to keep the PATIENT list focused on PATIENT, so let's connect on ETSI & RHRD separately.  Happy to connect 1:1 anytime -


Brian


+1 571 215 8224

________________________________
From: Tony Rutkowski <tony@yaanatech.co.uk>
Sent: Tuesday, March 20, 2018 4:09:48 AM
To: Brian Witten; Ted Lemon
Cc: patient@ietf.org
Subject: Re: [EXT] Re: [Patient] the IETF participant choice

Hi Brian,

The entire world resonated with those use cases. :-)    Of course, that was foregone.  The Use Case Annex to the ETSI MSP draft spec has about six sub-sections running five pages!  That took some careful editing given the several thousand published materials that articulate the use cases, as well as ongoing work in other bodies.

The challenge has been sifting through the dozens of different techniques that have already been published in research papers, standards bodies, and patent applications for accomplishing the required observability with the desired granularity controls.

The ancillary challenge has been the proactive outreach of continually discovering and engaging with the numerous diverse communities who want the observability capabilities ASAP.  They are ultimately the customers for the specifications, and will likely produce derivative versions to meet their own industry or sector needs.  When there is this kind of demand, it is race against time before the existing proprietary solutions extensively proliferate.

The initial stable versions of the network specs will be available shortly in preparation for the June workshop and hackathon.  The data centre specs will follow shortly afterwards.

--tony


On 19-Mar-18 7:57 PM, Brian Witten wrote:

Hi Tony,


Thank you for your note!  I very much empathize with the pains of remote participation, and it's very unfortunate that the dates conflicted for SG 17 this week as we clearly both have colleagues and friends at both events.  I personally applaud the work in both ETSI TC Cyber and ITU SG 17, along with the work in the IETF TLS WG.


In person, here at the IETF, I got a bit of a different feeling than you described from remote participation.  In person, I heard more emphasis on the valid technical concerns which were raised, concerns which focused on the proposed protocol, not the use-cases.  We heard additional requirements not yet factored into a design.  Of course, the "passive-listener / off-line decrypt" challenges which rhrd (tonight's hum) attempted to address are not the same as the "in-line, actively acknowledged proxy," challenges which PATIENT has been discussing.  Still, I was glad to see Steve Fenter's use cases received "better than at least I had expected," even if the proposed draft protocol design was not accepted.


I believe that the authors have the option to either (a) propose directly to the Security Area Directors a new protocol better addressing the requirements emphasized in discussion tonight, so that the AD's can decide whether TLS WG discussion of a third design is the right best next step, or (b) consider pursuing formation of a new WG such as through a BOF process.  I'm not sure which they'll do, but I look forward to learning that from the SAAG and/or TLS WG lists.


Please LMK if I can help more -


Best,

Brian

________________________________
From: Tony Rutkowski <tony@yaanatech.co.uk><mailto:tony@yaanatech.co.uk>
Sent: Monday, March 19, 2018 2:42:18 PM
To: Ted Lemon
Cc: patient@ietf.org<mailto:patient@ietf.org>; Brian Witten
Subject: [EXT] Re: [Patient] the IETF participant choice


Almost every venue does things pretty much this way.

No fora exists to solve all the world's network operational problems.  "Sorry, not our problem" is an acceptable answer.  Those venues that don't have that option, when appropriate, are probably best avoided.

--tony

On 19-Mar-18 5:23 PM, Ted Lemon wrote:
There are individuals who show up here to talk about why they need stuff and use their own operational problems as examples. That's how we always do this. It's really a process of successive approximation.