Re: [Patient] Slides from the PATIENT meeting in Singapore

[Paul Wouters <[e-mail]>]

On Thu, 16 Nov 2017, Brian Witten wrote:

> I'll also very shortly post the slides to this list as promised.

A URL would be better, we can share more easilly (as the archive will
likely mangle the attachment or create a very strange link for it)

> Unless anyone objects on this list, we're working on a more detailed set of notes, Chatham house rules

You can privately do what you want, but Chatham house rules is not
compatible with the IETF Note Well, so anything on this list should
not fall under those rules (and temporarilly working under different
rules for a subset of people seems a bit odd to me). So I am confused
about the "we".

> (a) Helps each endpoint control which parties and network devices are empowered to decrypt traffic to help protect them,
> (b) Helps each endpoint see when one of those parties or devices modifies content coming from the other endpoint, such as removing attacks, and see that with a cryptographic audit trail of who changed what where when and why, such as removing attacks,
> (c) And does all of the above without breaking or weakening any of the cryptography or cryptographic protocols in any way, including not breaking or changing TLS.

I still do not see why I cannot selectively use either a SOCKS proxy or
regular proxy, over regular TLS, to the middleware box / protection
service, on a per-domain basis. That is, you have not convinced me there
is any need for a protocol change. Without a clear need, the exitsing
protocols should not be further complicated.

Paul