Re: [perpass] Getting started...

[Paul Wouters <[e-mail]>]

On Fri, 16 Aug 2013, SM wrote:

> "Privacy by default" has, up to now, been a failure in the IETF.

It has been a conscious choice though. For example, compare IKEv1 versus
IKEv2. The privacy of the ID against passive attackers was sacrificed
to save a single RTT. I know "we" (the freeswan people) did not agree,
but everyone else considered speed more important.

I think we have learned since, that with things like session resumption,
we can perhaps get both privacy and speed, although the session
resumption in itself could also be an information leak.

> Discussions about monitoring is a sensitive subject.

Indeed. Many years ago when in The Netherlands, lawful interception
became a reality for ISPs, and a tapping specification (TIIT) came into
existence, ISPs were forced to install commercial "black boxes" that
complied to the spec. I tried to get funding to make an open source
implementation. I quickly found that no one wanted to be known for
sponsoring an interception device. Everyone agrees an opensource box
is better than a blackbox, but everyone was afraid of misinterpretation.

Paul