[perpass] Fwd: RFC 7624 on Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement

Stephen Farrell <stephen.farrell@cs.tcd.ie> Fri, 21 August 2015 10:25 UTC

Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: perpass@ietfa.amsl.com
Delivered-To: perpass@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4484D1A6FF1 for <perpass@ietfa.amsl.com>; Fri, 21 Aug 2015 03:25:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.311
X-Spam-Level:
X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vQ_0HD_iX5AO for <perpass@ietfa.amsl.com>; Fri, 21 Aug 2015 03:25:47 -0700 (PDT)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 533451A6FEC for <perpass@ietf.org>; Fri, 21 Aug 2015 03:25:47 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 67C22BF39 for <perpass@ietf.org>; Fri, 21 Aug 2015 11:25:45 +0100 (IST)
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tMc9fo1boy99 for <perpass@ietf.org>; Fri, 21 Aug 2015 11:25:45 +0100 (IST)
Received: from [134.226.36.180] (stephen-think.dsg.cs.tcd.ie [134.226.36.180]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 3C4BEBF38 for <perpass@ietf.org>; Fri, 21 Aug 2015 11:25:45 +0100 (IST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1440152745; bh=N11Rz8uxDQlLKj1igvKsCspBSDtOadEmeggmsSfo/4Y=; h=Date:From:To:Subject:References:In-Reply-To:From; b=yrRz/Douoc4ZUpapMJ8Slvxluu+ls9pHyN0er3m85G4di8OeCtobO2Nutd6whLX+0 oRSw+niPJJN2fxyb72jaOKfpSSnJ1xriYqOg1/oOIAifun5e7cIHLp80n/2nwW4kGO mZsfbkbJ+OpylT6Y6aqo259EGSKA25gdwU8/W2bI=
Message-ID: <55D6FCA9.2080908@cs.tcd.ie>
Date: Fri, 21 Aug 2015 11:25:45 +0100
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.8.0
MIME-Version: 1.0
To: perpass <perpass@ietf.org>
References: <20150820223438.36C24180207@rfc-editor.org>
In-Reply-To: <20150820223438.36C24180207@rfc-editor.org>
OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url=
X-Forwarded-Message-Id: <20150820223438.36C24180207@rfc-editor.org>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/perpass/-wATJ9RJzk685sOUpj2ywS2cX9g>
Subject: [perpass] Fwd: RFC 7624 on Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement
X-BeenThere: perpass@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "The perpass list is for IETF discussion of pervasive monitoring. " <perpass.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perpass>, <mailto:perpass-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perpass/>
List-Post: <mailto:perpass@ietf.org>
List-Help: <mailto:perpass-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perpass>, <mailto:perpass-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Aug 2015 10:25:50 -0000

Hiya,

Just closing the loop on another bit of promised work that has
been completed - well done and thanks to all who helped!

And don't forget that this list is still the right place to
suggest potential new bits of work the IETF could be doing in
this space. (This list being where we do triage on such.)

Cheers,
S.


-------- Forwarded Message --------
Subject: RFC 7624 on Confidentiality in the Face of Pervasive
Surveillance: A Threat Model and Problem Statement
Date: Thu, 20 Aug 2015 15:34:38 -0700 (PDT)
From: rfc-editor@rfc-editor.org
Reply-To: ietf@ietf.org
To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org
CC: rfc-editor@rfc-editor.org

A new Request for Comments is now available in online RFC libraries.


        RFC 7624

        Title:      Confidentiality in the Face of
                    Pervasive Surveillance: A Threat Model and
                    Problem Statement
        Author:     R. Barnes, B. Schneier,
                    C. Jennings, T. Hardie,
                    B. Trammell, C. Huitema,
                    D. Borkmann
        Status:     Informational
        Stream:     IAB
        Date:       August 2015
        Mailbox:    rlb@ipv.sx,
                    schneier@schneier.com,
                    fluffy@cisco.com,
                    ted.ietf@gmail.com,
                    ietf@trammell.ch,
                    huitema@huitema.net,
                    daniel@iogearbox.net
        Pages:      24
        Characters: 62260
        Updates/Obsoletes/SeeAlso:   None

        I-D Tag:    draft-iab-privsec-confidentiality-threat-07.txt

        URL:        https://www.rfc-editor.org/info/rfc7624

        DOI:        http://dx.doi.org/10.17487/RFC7624

Since the initial revelations of pervasive surveillance in 2013,
several classes of attacks on Internet communications have been
discovered.  In this document, we develop a threat model that
describes these attacks on Internet confidentiality.  We assume an
attacker that is interested in undetected, indiscriminate
eavesdropping.  The threat model is based on published, verified
attacks.

This document is a product of the Internet Architecture Board.


INFORMATIONAL: This memo provides information for the Internet community.
It does not specify an Internet standard of any kind. Distribution of
this memo is unlimited.

This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
  https://www.ietf.org/mailman/listinfo/ietf-announce
  https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist

For searching the RFC series, see https://www.rfc-editor.org/search
For downloading RFCs, see https://www.rfc-editor.org/rfc.html

Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.


The RFC Editor Team
Association Management Solutions, LLC